skysight-inc/HackerNews huggingface dataset:
If anybody else is hunting for this:

Hamburger menu -> Help -> About Firefox

Your version number is listed under the big heading, and if there’s an update available there should be a button next to that.

My question, I'm on beta channel and updated to 68.0b11 today and don't see detailed release notes.

67.0.3 (normal channel) lists "Security fix" https://www.mozilla.org/en-US/firefox/67.0.3/releasenotes/

But beta channel only says 68.0beta released May 22nd, no info on newer beta versions. This is the link in the about box: https://www.mozilla.org/en-US/firefox/68.0beta/releasenotes/

I totally get not wanting to write fine grained release notes on every single beta version, but 0-day fixed feel the kind of thing that ought to be explicitly pointed out. I'm assuming that the same fix from release channel was also pushed in the 68.0b11 update but a release note about that would be swell.
A local healthcare system has a similar policy: PTO (paid time off) is not differentiated between sick days vs. other days off. They don't offer any sort of maternity/paternity leave, aside from what the US Family Medical Leave Act (FMLA) requires, which is six weeks unpaid time off. Even worse, they require employees to burn up all of their accrued PTO days before taking any unpaid FMLA time. So you have new parents returning to work sleep-deprived, picking up new viruses from the petri dish that is their kid's new daycare, with no time off. And most of these workers are HEALTHCARE PROVIDERS.

How stupid are we as a nation that we don't mandate more humane/non-stupid policies, even for people in environments where coming to work unhealthy can often result in death?
I asked this in another comment and maybe there is an obvious answer but:

Are devs really pulling in is-windows, or are they importing some other thing (that might be more legitimate... that actually uses is-windows)?

If it is the former, man I'm at a loss for words there.

If it is the latter... that would seem to put the onus on the folks writing those other packages.
I think it's a question of maintenance. You can check if process.platform is "win32" or "win64", but what happens when they release a 65-bit architecture and all your code breaks?
Status: Token Economics Research–Sticker Market Financial Model and SNT Utility
Machine learning for recognizing duplicates is only for "protection of IP rights", not for protection of low wage workers. Apparently somebody at facebook decided that ML is more expensive than low wage human worker rejecting the same material over and over. Layers are more expensive and bring more bad media coverage than someones suicide in 3rd world country.
I will often use things like this, not because I don't know how it's done, but because I have a hope that whoever made it will maintain it and keep it working properly under future changing conditions. Today, it's easy to see if the platform is windows. Later, that may change, and if this code is maintained it will save me headaches. If lots of other people are also using it, there's a very good chance that it will be updated quickly and that weird corner cases I'm not aware of will be already taken care of.
It's very easy to flippantly go "why would you ever use that???", but I'm honestly wondering what is the actual justification for the use of such a package. I see it does some initial checking (which will take more lines in your own code to deal with), but I can't figure out why someone would actually use that.
No system involving human decision-making approaches perfection, but politicians and civil servants are tasked with making decisions in the collective interest on the advice of experts. In countries with strong institutions and the requisite checks and balances, they do a better job than the invisible hand of the market and the transitory utility of individual citizens. That's why most of us would rather live in Europe or the US than in Somalia or Turkmenistan.
The first commit on git boils down to:

function isWindows() {
if (typeof process === 'undefined' || !process) {
return false;
}
return process.platform === 'win32';
}
I'm sure such scale requires heavy moderation. It pains me to realize the cost of enjoying the benefits of social media - if any, at all - that it makes me wonder whether we should have it in the first place at all.

I can imagine a world without Facebook.
Not saying its right but Instagram terms of services states that they person cannot be younger than 13, this is a instance of the person being 12. The parents need to be more responsible and not create or allow social media accounts for their kids when they are that young.
Still not "the world", but we've had next day transfers on SEPA in EU for the last 10 years and EU banks are now scrambling to comply with instant transfers. Even before that they were not as trivial but easy enough. We've had pin-and-chip for more than 20 years in France. The domestic US transfer and payment situation looks ludicrously outdated when viewed from over here.

> Money transfers between countries in particular poorer ones is absolutely not a solved problem.

It may come out wrong (that is, there are some people that legitimately and desperately need this in these countries) but I fear this will mostly enable more extortion and scam schemes. And of course, one more way for Facebook to gather data.
Neat writeup. I was always a fan of VMS; my university still had a VMS cluster that was used every quarter for class registration and completely ignored the rest of the year, but if you poked around you could still find relics of the old days, like ancient discussion forums software still containing posts from the 90s.

If I can put on my enormous pedant hat for a moment though, a VAX is a minicomputer, not a mainframe.
My cynical guess is that he doesn’t have the private key, but wants to use legal methods (court cases, registering copyrights for documents, etc) as a means of establishing himself as Satoshi.

Once established he’ll launch a court case requiring a hard fork of the blockchain to “recover” Satoshi’s coins, because they are after all his, and profit ... assuming he doesn’t crack the truecrypt password first.
I think the more interesting question would be why Clojerl over LFE (http://lfe.io/)?

Yes, there is a community around Clojure that would feel more at home with the BEAM if they could use Clojure there... and this is likely the answer to my first sentence... but once you get to a Lisp it seems like the leap is less far to another Lisp and LFE, I would think, is better established.

So I guess the real question would be, for those outside the Clojerl project, are the benefits Clojure more specifically on the BEAM worth the costs of foregoing a (possibly/likely) more mature Lisp that already exists for the BEAM?
A Mainstream Media Manager Could Change the Entire Industry
No, it's market forces. If the world was overflowing with employment opportunities, then unskilled labor would leave unpleasant jobs, and employers would have to pay them as much as it takes for someone to put up with the unpleasantness.
I think there is, my wife's photo archive has 30,000 images. Too big to zip up and put in an email, too big to put on a cheap USB stick, too big to quickly upload to S3, too big to properly catalogue and index, too big to really appreciate.

Less is more.
One of the biggest issues with BTC is its cloudy origins.
> ... haven’t gotten around to making the laws that says so.

Huh?

The SEC is very clear that most crypto currency is a security. The laws are on the books. That deranged Reddit people imagine the laws don’t apply to them in no way changes that.

Similarly, Facebook appears to be proposing that they become a bank, then putting some lipstick on to suggest they’re not a bank. The laws are on the books about how banks are regulated.

The argument here is “does claiming you’re not the thing you obviously are work as a tactic to avoid regulation”. Clearly AirBNB and Uber got away with it, so Facebook is hoping they can, too.
Apple partners with Best Buy for expanded repair service
However when you have millions of people hating you and very few defending you then there are usually a good reason to it, otherwise they don't unite like that.

There is usually a "reason" people get riled up online, whether that reason is "good" is usually pretty debatable to most rational people. And claiming that any "good" reason is able to be stretched into all sorts of other criticisms as you state is an even shakier stance to take.

Personally, I'm not convinced that the online gaming community is worth caring about in the aggregate. The community is so dwarfed by people not interesting in participating in arguments about their hobby online that the separation between people who have legit criticisms and people just looking to be angry about something isn't meaningful.

Say you have a million players for a game you've created, and 30,000 of those players participate regularly in online discussions, with 25,000 of them being reasonable and 5,000 being nonsensical (and the 5,000 is largely going to be at least the same if not more vocal than the 25,000). How much time and effort do you really want to spend trying to separate those 25,000 from the 5,000 given your playerbase as a whole?
That's not an acceptable standard for any public figure.
That article doesn't say anything about the carrying capacity of the earth. Of course it can't, since no one knows what the actual carrying capacity is. All we know is that we've never hit it, that we can produce much more food (you'll see lack of food is not mentioned as a threat), that every time someone has predicted overpopulation they've been wrong and that technology keeps bumping the ceiling up.

Again, the population of third world countries keeps increasing rapidly. They have no problem with population growth. We in the first world have a population problem but that's because we're not reproducing at replacement rates.
This implies that crypto is a democratizing force. So far, it's been mostly early adopters wanting to preserve the system under which they are wealthy and powerful. Who can blame them? I'd do the exact same. But in other words, the same age-old pattern that is barely any different from the banking system that crypto was supposed to bypass, except the inequality actually manages to be quite higher.
> Because if a bank runs the risk of failing (like BOTH of mine did in Holland) people freak out

Most EU countries have had deposit guarantees for a while (even before the crisis). It's an EU-wide rule since 2014 [0]. Would FB have that? Doubtful, as the deposit guarentees are provided by the governments that are in control of the currency.

> If there is a fast and easy way to transfer money out of the banks

What bank do you use that does not allow you to withdraw money?

0: https://ec.europa.eu/info/business-economy-euro/banking-and-...
Man... what heck was the point of making that?
> The 800 or so workers there face relentless pressure from their bosses

They're not slaves. Like those Foxconn workers, they can leave for a Tier 2 employer or find something else to do.

> to better enforce the social network’s community standards, which receive near-daily updates that leave its contractor workforce in a perpetual state of uncertainty.

tl;dr - all of this is completely unnecessary. If American control freaks (in this case, mostly socialists) stopped attacking FB with constantly new types of complaints and censorship requests, both workers and their managers would live happier lives and their accuracy wouldn't be below target (that is, if they used common standards and common sense in their work, there would be less false positives and false negatives).
It's not objects necessarily; they're simply a way to group a set of related functions.

It's functions.

Separate functions can be separately unit tested. Then you can write an integration test that uses each of those functions. The testing obligations can be overall much smaller as a result.
This makes complete sense. Why pigeon hole employees into, well, pigeon holes? Technology, Operations, Marketing, more. Each understanding more about each others' roles, challenges, solutions. A knowledge organisation is based on knowledge. I'd favour a scale that could be chosen, 5-50% outside of core role.

[Clarity: Am not a Facebook employee.]
one interesting theory i've heard recently is that he and gavin (the guy satoshi handed over the project maintenance to before disappearing) know that satoshi is dead and use that fact (that nobody will ever be able to sign anything or transfer any funds from satoshi's wallets) to their advantage.

not sure what is gavin getting out of it but csw appears to behave as professional conman.
Linus Tech Tips did a review of this method, including a performance comparison: https://www.youtube.com/watch?v=ATnpEOo3GJA
> there are two sets of entry-level knowledge workers at Facebook:

> engineers ($150k/year, benefits, upward career trajectory) and

> content moderators ($30k/year, no benefits, likely going to acquire mental illnesses).

If Facebook could get away with paying engineers $30K/year, no benefits, believe me, they would.
Even better is 'is-even'. It depends on 'is-odd' and this is the entire thing:

var isOdd = require('is-odd');

module.exports = function isEven(i) {
return !isOdd(i);
};
FreeBSD was my first operating system ever. My dad had a FreeBSD machine in a little closet in his office. He taught me how to navigate with the command line, edit files with emacs, and send email with mutt. Good times. Here’s to 26 years, and many more to come!
https://twitter.com/halfin/status/1153096538
That guy was a real forward thinker-- just the other day there was a HN post addressing just that. Seems that even the original team knew BTC wasn't perfect...
Note that Facebook has also been previously using Rust for https://github.com/facebookexperimental/mononoke; as well as for some smaller things. They've been sponsoring Rust conferences too.

I am not personally interested in cryptocurrency, but it's always great to see more big companies using Rust!
Issue 9, never forget:

https://github.com/golang/go/issues/9#issuecomment-66047467
My money is on Paul Le Roux. He is a pragmatic programmer who wrote encryption software for Windows in the 90s and in the 2000s he had a real need to move money around outside the traditional systems. Bitcoin was scrappy windows software as well like E4M. A lot of academics, open source activists and hacker purists would never write their software for Windows. Le Roux's writing style is similar, his attitude, streak for innovation, and timeline all kind of fit for a possible Satoshi candidate. He also had a real motive to be anonymous and release the software anonymously unlike many other candidates.
He forked Bitcoin and is trying to convince people his fork is actually the real Bitcoin, so yeah it's a money grab.
Your code would break if you pulled in the dependency, too, until you updated it. I don’t think that matters much here.
Spelling correction: dependents
Seeing Iridium Flares with WayScript
How to Write to a Jcop Chip with Track 2
ok i downloaded every program out there to write to a emv chip / jcop chip I have my track 2 off my card and i want to write it to a new card with the chip all these programs out there claim to do it but they dont any suggestions
Why should it be put in the same regime as a combustible if you believe nothing is worse than combustible? Trying to follow your logic here.
OxDUDE (Twitter Feed on Chinese Surveillance)
Thanks. I will try to understand what you're saying.

But first I'll try to explain what I think I was seeing.

Nodejs & expressjs. A couple high use REST API endpoints. Thundering herds. HTTP server can handle say max 200 rps (while maintaining target P99). Redis server can only handle sustained 100 rps.

Where does the throttle go? How is it implemented?

In my prior Java experience, I got throttling "for free" by tuning the thread pools.

With nodejs & expressjs, being single threaded with an event loop, the only solution I figured out was to throttle our app's Redis client.

What I really wanted is end-to-end backpressure. What I've done in the past is a postfix (mail server) inspired queuing system (work piled up, no blocking). What I would have settled for is an expressjs (or equiv) 'frontdoor' that throttled new socket accepts and new HTTP requests. Extra credit if the app level load balancer was aware of this frontdoor, and therefore more responsive.

If there's some app agnostic throttle buildable at layer 7, I definitely want to learn about it.
Well, they should be elevated above the other departments to handle the obvious security and conflict of interest issues that naturally exist in any company like this. So their salaries should be much higher. And actually, more important than healthcare, which the employee takes advantage of at the employee's own discretion, there should be mandatory mental health counseling and screening. I don't know what the frequency should be, I'm not a clinician. But my layman's guess would be a minimum of 3 times a year for each employee.

But I disagree about siloing them. I mean, I'm sure there are some pretty good security reasons for siloing content moderation off from other parts of the company. Not saying that anyone from FB would necessarily do the following, but imagine an ad sales bonuses start going away because clicks are down. You just can't have ad sales cooperating with content moderation in any way shape or form to get more clickable content through. There should just be a content policy, and content moderation zaps whatever they please. End of story. That's how it should work. If ad sales wants input, they should have to convince legal to change the content policy.

In other words, if this thing were structured correctly, content moderation would be above most everything else. (Everything other than legal.) And completely untouchable via any mechanism other than an official change of the acceptable use and content policies.
Addition: goes around suing people for pointing out the obvious truth.. in the UK. Where the defendants have to prove he is not Satoshi, as opposed to the US where he would have to prove he is.
This is what I keep coming back to. I don't think Facebook is worth it. I would personally extend this to most, if not all, social media.
Isn't Facebook PR generally oriented towards placating the more SJW themes? Before the Cambridge Analytica stuff came to light, they were the establishment left's darling.
You are right, my initial assumptions are wrong - China isn't buying bonds from the US Treasury (as I would), they are buying them from a forex bond market, where we might consider the supply of dollars to be like any other commodity. This means when they buy up bonds they are decreasing supply, therefore driving up the price, and when they sell off bonds, they are increasing the supply of dollars, causing the price to fall.
Connecting Azure IoT Hub and CrateDB Cloud for the Ingestion of Sensor Data
He also needs to have registered it in the first place. Trademarks are not automatic like copyright is.

I didn't try very hard, but I couldn't find a "curl" trademark here for software:

http://tmsearch.uspto.gov/bin/gate.exe?f=tess&state=4808:iz1...
Questions for Increasing Closeness [pdf]
I’ve been using Python for 20 years and have never used either of those libraries. People _do_ use Python for more than accessing web services and processing HTML, you know.

Besides, the stdlib, and Python packaging in general, is unquestionably light years ahead of NPM.
The problem is that gamers were promised "decisions that matter" and in the end everybody got the same pre-canned three endings. Stepping up 6 meta levels and asking "Yeah, but what's life all really about anyhow?" is, you know, fine and all, but also in way, profoundly missing the point. We want to talk about Mass Effect right now, not fundamental existential ennui.

Personally... I don't care in the slightest, because as someone who's been playing these games for a while and also as a programmer, I observe that what these companies are promising is basically impossible, so I never bought into this promise to be offended it didn't play out. It is not possible to have a true branching story where you can make dozens and dozens of meaningful choices and the story has fully rendered cutscenes with voice acting and unique locations and etc. etc. But it might be nice if the companies would stop promising this. Every year, as the standards go up, it is actually getting harder and harder to bring this level of responsiveness to a game.

(Sometimes I think that as impressive as the holodeck may have been on ST:TNG in terms of providing an immersive sensory experience, it's even more impressive in that it seems to have enough intelligence built in that it can actually do true reactive storylines and such. We'll probably have reasonable approximations of the former a long time before the latter!)
(IANAEE) 120 and 240 are a bit more painful when mistakes happen. And 9 seems too low (normal USB voltage is 5, so 9 might be within safety margins).
The guy, not the tent, is broken and obviously in distress.
Twitter removes support for precise geotagging because no one uses it
This is generally my line of thinking - theyre going to be responsible for keeping the package up to date and tested, I dont have to. But this is a good illustration of the extremes of that I think - if they put out a new architecture and it needed to be updated, that would be a major semver bump right? So my code isnt going to be automatically updated and chances are I wouldn't want it to be. And the risk here is huge at the moment - itd be super easy for this package to be compromised and switched out to do something nefarious.

I think there are still going to be things more substantial where the upkeep and testing might be higher where the balance would start to tip back to outweigh the risks maybe, but I think personally I haven't been giving the risks enough consideration and I think thats where NPM needs to focus more of its attention.
Because they optimize for profit. Moderation is a cost center.
Okay, but that means that the era of vertical gameplay slices is effectively over, more-or-less exactly as described in the article. It further means that if a lack of gameplay demonstrations at E3 has left you feeling a bit unfulfilled (and maybe it doesn't, but it's a common takeaway among players following the event), then you only really have yourself to blame.
> Each time a new table was generated, a new PHP file was created on the server. Using a hole in filtering of the input parameters for creating the PHP file, I was able to reproduce an RCE attack: a malicious request injected arbitrary PHP code into the generated file.

So this has nothing to do with the third party JS library itself, but with how the website's backend stored the data generated by the frontend script. The developer could probably reproduce the hack with postman and doesn't need the CDN hosted library at all.
This line is tested against and super optimized. By requiring this, you are future proof. The maintainer is active and writes tests. It's also a bit esoteric and hard to undestand.

`return process && (process.platform === 'win32' || /^(msys|cygwin)$/.test(process.env.OSTYPE));`

Here's is what's probably going on in the head of the people who require it:

"What does this do exactly? Why do I need to test against 'win32'? Should I also test against 'win64' or 'x64'? What if it changes later on? Do I need to keep track of Windows versions and then change all my apps? What if I write it without testing for 'cygwin' and someone else in the project do? Will the app only work partially on some hardware? What if some new OS comes out?"

Don't get me wrong, it's not perfect and is a security hole. But that's the reason it's done.