skysight-inc/HackerNews huggingface dataset:
Beyond that, legally, anything you buy needs to have the seller invoke a concept called an invitation to treat[0] which in modern times is usually established at the point of issuing a receipt or tax invoice.

Even if someone has paid for something, the seller does not have to recognise that a transaction has taken place and would not have to enter or execute the contract. This is especially important in times where there might be a pricing error or something.

[0] https://en.wikipedia.org/wiki/Invitation_to_treat
> is mind blowing.

Only if you have no familiarity with the shit show of UK train ticketing.
My thinking was rather that they made an assumption. Which is a much simpler explanation because people make faulty assumptions every day.

But yeah, diversity would have helped.
I used this about 10 years ago to write maths-heavy papers. It was really fun. My favourite feature was you could tab through alternative mathematical symbols: type an equals sign, then <tab> until it became \equiv or approximately equal or whatever.

The project seemed to stall and I moved on to LyX. Nice to see it is back in business.
GPT-2 model answers what working at FAANG companies feels like
> Maybe the Navy is signaling to its adversaries that it, too, is aware of this revolutionary capability and to whom it belongs.
None of them have anything to do with Linux, given that I was replying about "Linux desktop" here.

Second, iOS being based on UNIX hardly matters, no one is doing shell scripts and writing UNIX daemons on it.

Thirdly, no one was talking about macOS on that comment,.

Finally, even if you want to bring macOS into the picture, while macOS is a proper UNIX, what matters for Apple community developers lives in C++, Objective-C and Swift libraries, hardly POSIX related.
Ask HN: What are you currently using for transactional emails?
Specifically, I'm looking to handle email authentication, password resets, and other single-use tokens.

I've been looking into SendGrid, MailGun, and Postman. They look promising, but unfortunately, all of them come with arbitration agreements, which I consider to be unacceptable for business products. I would only sign up for one of these services if I didn't have any other choice at all.

Mandrill does not come with an arbitration agreement, but also appears to be widely regarded as a pretty bad service.

I've seen divergent answers on whether it's a good idea to run my own remote mail server on a service like Linode, with most people saying that it's too complicated to be worthwhile for most businesses, and other people (the minority) saying that the concerns are largely overblown, and you just need to take the time to build up your domain reputation.

That seems to leave Amazon's SES, which feels a bit over-complicated, but which has a pretty good ToS and is probably competitively priced. This is what I'm leaning towards.

Is there anything I'm missing? The other side of this I've been thinking about is that maybe requiring email addresses is bad for users anyway, and that maybe I should be trying to avoid transactional emails in general -- especially if I can't guarantee that they will always, 99.999% be delivered.
This reflects the state of our government.
I’d say that confidence is a tangible factor.

The single most important reason to test your code seems to be that it allows you to refactor your code while ensuring it still meets the original outside expectations.

The author’s main gripe seems to be about tightly coupled tests that make refactoring larger systems more difficult, and about prioritizing meeting arbitrary metrics (lines of codes covered) rather that thinking critically about the actual benefits.

This is in line with his emphasis on integration tests determined by the business. I think that same thought process can be applied to internal components of code as well, and you can empirically determine the quality of your approach (roughly) by evaluating how often your tests change. If nearly every change breaks a test, that probably means they’re low value/too tightly coupled.

Excessive mocking seems to be the biggest source of evil in that regard.
It's good to mention that this is satire. Especially for our non-german speakers.
The high proportion of green usernames in this thread makes this all feel a lot like an info op.
Sounds like a coded message in the rom dump
Or they have a "obey all orders even when it is blatantly criminal" clause.
That really is more a matter of taste than facts
Yes, code must be tested. Line and branch coverage just don’t have the actual impact that some people claim it does. It is, however, better than nothing at all.

The arguments in the paper are anecdotal and I took them to be “question the cargo cult” which is a valuable thing to do. The author is merely encouraging you to think because “automated garbage is still garbage.”

Good read.
I suspect they didn't mention it because they see the lock-in to their product as a feature. Mentioning OpenID might give the impression that Apple would be interested in interoperability (to some degree).
By default GUI apps for Fuchsia will be written in Dart with Flutter SDK.

Fuchsia also supports C++ so I imagine you will be able to use Qt et al.
As a former teacher I 100% support surveillance (hopefully video) monitoring in the classroom. Parents need to see first-hand how bad student behavior can get.
Isn't environmental friendliness a ratio of production over impact? If it is not open you have environmental harm without human benefit.
How do we know which devices are sentient? The first ones could have ran GM-NAA I/O for all I know.
Why do developers use what they use?
Half as Interesting made a fun short video 2 months ago about this airport: https://www.youtube.com/watch?v=ll58ZrIupKA
Is there a way to preview all the questions on the application beforehand? Or at the very least allow to save our progress so we can return and finish them later?

For most of the questions I know what I want to write, but I like to revise my answers over the course of a few days so I can make them more clear and concise.

Looking forward to this! Thank you to everyone at YC and Startup School :)
"If you want, I can refer you several reputable providers."

In Cape Town? I would have thought the best/only provider would be Hetzner South Africa? If you could recommend more, of similar quality, that would be appreciated.
It's not just the school board that's claiming that. If you look at the Guardian article, for example, it presents the claim that the mural is pro-slavery and pro-colonialism as simply and indisputably correct, and claims to the contrary as a rebutted error of a few wrong-thinking people: https://www.theguardian.com/us-news/2019/jun/27/san-francisc...

Remember, any right-thinking leftwing supporters of social justice wouldn't be caught dead reading or believing an article by right-winger Bari Weiss. Doing so would instantly mark them out as a supporter of the enemy. As far as they're concerned (or at least can admit to in public), it will be the people who think this artwork means what the artist created to mean who are ignoring reality.
Dup of https://news.ycombinator.com/item?id=20312502
Only partially correct. I think the earliest drafts of OpenID Connect were completely agnostic of JWT, and so is OAuth 2.0, but the final Open ID Connect Core spec is tightly coupled to the JWT standard in multiple places.

The first and most important coupling point is the ID Token. There are three types of tokens issued by Open ID Connect: Access Tokens and Refresh tokens are opaque, just as in OAuth 2. ID Tokens, on the other hand, most follow a more-or-less well-defined JWT format (as much as JWT can be well-defined - it is a somewhat wild west of a standard).

The rest of the places you could use JWT are in the spec, but I admit I've never seen them in the wild (and I would probably avoid them like the plague if I was trying to implement a _secure_ subset of an OpenID Connect IdP):

1. JWT request signing (and even encryption!)
2. JWT for signing and encrypting any JSON response
3. JWT for client authentication
4. JWT for aggregated claims

And I may have missed more things.

If you want to implement Open ID Connect without being crazy, forget about all of these and only use/implement the Auth Code flow with a client secret. You should still verify the ID Token according to the spec, but if you fail to verify it's no longer an issue, since this is a value you get directly from the the Authorization Server on an authenticated TLS channel (the same channel you'd trust for getting the ID Token signing keys).
Facebook's Libra – The Plan for World Domination
If the second part of your sentence is true, could “allowing the client to set the nonce” be considered an increase in the possible attack surface?
Here's a terrific video that explains some of the history and current issues surrounding Brandenburg: https://www.youtube.com/watch?v=ll58ZrIupKA
I disagree with the surveillance bit, but yes parents can be pretty ignorant of their kid's behaviour outside of home.
I think it's just about the same everywhere. In France you hear the same stories.

I think we are just bad at estimating costs and time.
You have to trust any code you didn't write yourself, even if it's just the compiler and OS.
Of course you need to file an expense report, his point was it's such a trivial sum to Apple the person expending it wouldn't need to ask permission.
You don't really need a hurricane. A regular thunder storm will lift stuff pretty high and then I guess they would mix with the jet stream and the like.
A stock buyback decreases external liability. It may decrease liquidity for the company, but the asset tied up in that Stock is still retained, and remaining stocks increawe in share value accordingly. This can increase liquidity in the long run, by stimulating demand whilst supply dwindles. It all depends on the Market.

The fine, to my understanding, extracts liquidity whilst also leaving all existing liabilities intact. It "sets the company back'. As it were. At least, that's how it works to my meager understanding.

If that isn't, could you go into detail about what really happens?
It’s also dangerous in JavaScript where properties of the Object prototype can mistakenly be dereferenced instead of the default/fallthrough case.
Their landing page loads 2M in 42 requests and uses Google fonts and two other CDNs. That's so un-GNU. Guile landing page loads 902 K in 26 requests.
> Why are people so willing to give up their rights?

Students have no rights. I find it despicable but it's a fact.
Procore[0] is popular with general contractors in the US. I work for a national electrical contractor.

I'm not sure what architects and engineers use for issue tracking, but they use Procore during the build phase for product submittals, change directives, change orders, RFIs, etc. These are all standard things laid out by the standard AIA contracts.

[0] https://www.procore.com/
Just wondering if this problem could have been solved by a properly indexed table? The article says: “Eight minutes and 4+ terabytes of data queried later I had my results“. 4+ TB seems way too much for 60k patients and sounds like an inefficient table scan was performed.
A wonderful game that's mostly unknown in the west.

People often confuse it with the solitaire game that uses the same or similar pieces.
Story of the author is quite interesting. Fought against the reds, then became one.

This criticism of US was created as communists in USSR were in process of murdering millions. He did not have much to say about that. In fact he went back to USSR in 1960s

If he was in any way useful he would have been recruited in 30s, but I guess NKVD did not think him to be of any consequence.

It is absolutely hilarious that his ideological descendants are now destroying his work. He would get it quite well, after all Soviets wiped as much culture as they could that preceded them. Blew up churches and all that good stuff. I wonder when SF will get to that stage, they are basically there now, just couple more steps.

San Francisco not even once.
How would they not be able to use Linux anymore? With it being GPL and everything?
The general public doesn't seem concerned enough to need a smokescreen, and I wouldn't necessarily consider this "very public." Most people either already believe it's nonsense, or probably secret classified terrestrial craft, or aliens regardless of the official position. The military could probably get away with simply ignoring any rumors and sightings and letting them disappear into the noise of pop culture.
Untested tests are still a lot more useful than no tests, just like how an untested program (while probably worse than a tested program) is still usually better than no program at all.

Also, tests are actually subject to very basic testing in the red-green-refactor TDD cycle: they start out failing so you know that they actually test something when they start passing.
Sure. I've heard that a lot. But that's very abstract. What actual work is involved in "setting a strategy"? And why does it seem less visible compared to other work?
Do I need to do the first part to do this course?
First we need to support only protocols where an open source /free client can be written. Then I am free to use it (the best I can find) and other people can use any one they choose. I avoid using anything that requires a proprietary client. If I really have to, I'll use a web client and not be online most of the time.
The lack of a really good open source IDE or IDE plugin is a real road block for a number of people. Pointing folks to Emacs or an Emacs derivative is is not the solution. I know there is a couple of IDE plugins for Clojure and I think it would help if there were similar options for Common Lisp.

I know there used to be a plugin for Eclipse (Cusp) but that appears to have died.
The "call it builder instead of reduce" comment here was interesting.

My knee jerk response was to disagree, being that reduce is well known to mean fold / accumulate. However I've seen a lot of js usages where it does things like modify structures in the containing scope and isn't an FPish fold at all, so a name like that could probably make a lot of sense.

Nonetheless for this particular usage, I'd agree that a more specific partition function like lodash's would be an improvement.
But it is the share holders peanuts - is a quixotic and expensive charge to over take AMD or Intel the best use of our money?
Have an Amazon review: https://www.amazon.co.uk/gp/customer-reviews/R3PX9NZPUHXBI9/...

Sounds pretty good if you like aircraft tech and the like
I believe the most relevant section is 4.F.

> If you use the Embeddable Player on your website, you may not modify, build upon, or block any portion or functionality of the Embeddable Player, including but not limited to links back to the YouTube website.
Politicans of all flavours, in all countries, for nearly all projects seems.

Yet just about every IT, aircraft and building project etc in the private sector comes in on time and under budget. Oh, wait, it barely ever happens there either!

Maybe it's large projects per se then. Maybe there's added risk when politicians and private sector interrelate.
Absolutely, microG is a great project, especially when you need to use proprietary apps which rely on Google APIs. However, with the goal of also generally moving towards free software on my smartphone, I personally only needed the UnifiedNlp part (which is mentioned in the Map section) - in my experience, most free apps don't depend on other Google services.
contentTypes[contentType] || contentTypes['default'];

Don't do this. Untrusted user input could be anything, such as "hasOwnProperty" or "toString", for example:

contentTypes['hasOwnProperty'] // [Function: hasOwnProperty]
contentTypes['toString'] // [Function: toString]
I guess a good rule of thumb would be if you don't see the benefit of using a framework for your project, you probably don't need a framework in the first place :)
Also the us. The subway extension to Dulles airport is years over due and well over budget.

I don’t think it’s a problem with government. If you want these sorts of public good projects built, you need government to do it. Government doesn’t have the same incentives that private business does, and there are positives and negatives with that. A profit oriented organization would never have taken on projects of this scale.
Thanks for sharing! I remember enjoying the undersea cable plot in Cryptonomicon.

Inspired by another recent HN post about subsea cables, I'm currently reading The Victorian Internet by Tom Standage which walks through the history of the telegraph. It blows my mind that North America and Europe were connected by undersea cable before the start of the Civil War.
Hubris, incompetency, inexperience at the very top. And what was needed was the opposite, which sounds obvious, but then the former problems directly inhibited recognizing anything obvious.
See also: fast movers program.
AOSP derived ROMs without gapps are pretty much "nothing Google". Unless you count AOSP itself as "Google", which it kind of is I guess, but it's not Google proprietary.
One of many: https://github.com/openssl/openssl/commit/9d2674c#diff-1bd31...
That is just the next step of AIDL and HIDL from Android.

https://developer.android.com/guide/components/aidl

https://source.android.com/devices/architecture/hidl

And it goes back to ideas like DCE and Taligent.

https://en.wikipedia.org/wiki/Distributed_Computing_Environm...

https://en.wikipedia.org/wiki/Taligent

Also how XPC works on Apple platforms (IDL here are Objective-C protocols).

https://developer.apple.com/library/archive/documentation/Ma...
The key point: major changes were made:

1. Very late in the design process

2. After construction had started (!)

I mean, politicians or not, the moment you start making major changes during buildout you’re going to have problems, regardless of what you’re building.
Embrace, Extend and Extinguish.

Still, the same until they:

1. Will give up FAT and exFAT patents

2. Stop racketeering Android vendors for their patented "inventions"

Also, what happened with NTFS-3G[1] project? Seems dead for many years, while still not supporting some of the NTFS features. They should at least upload it to GitHub.

[1] https://www.tuxera.com/community/open-source-ntfs-3g/
no, I have never watched a course before and watched the first lecture of this last night w/ no issue.
Last year, to pick an arbitrary time period, it looks like manufacturers sold about 260 million computers running Microsoft operating systems, about 1.1 billion computers running Linux, and about 280 million computers running iOS, not counting embedded processors and servers that don't have their own displays. So your comment is correct, but only in the trivial sense that the UI on most computers has abandoned the "desktop" metaphor.

A much bigger issue is that now people have much less freedom on all of these platforms, in much the way I wrote about in this essay in 1999: https://www.gnu.org/philosophy/kragen-software.html
Suspend what you’re doing: Retrofit has now Coroutines support
I believe they had enough wireless stations to get across the Atlantic or they could communicate via diplomatic bag through neutral countries/ones with intact cables
What?

I counted 3 green user names and total of 6 comments they made. The thread has 73 comments in total as I'm writing this.
That money isn’t all going into mistakes like this. Despite knowing about this airport for years, I moved to Berlin from the UK, which I’m fairly sure [1] raised both my %- and absolute tax rates. Yes, governments make mistakes; but most governments work somewhere between “well” and “adequate” most of the time.

[1] it’s harder to work out than I expected.
"Secret patents" are a thing.

https://en.wikipedia.org/wiki/Invention_Secrecy_Act
Twitter and Facebook are the big two holdouts besides Apple that makes social sign in buttons a PITA. OpenID Connect can already provide MS and Google and also supports Paypal, Yahoo, AOL, etc.
According to Bad Blood, she had an ED.
ESL teacher here. I agree with your comment (although not necessarily with the reasoning).

This week inwasnput incharge of the whole technology deot behind out school and the boss asked me to find a way to forward the cameras to their main office.

They asked it was possible and I gave a non committal answer promising to get back to them next week, purely because I know some teachers are uncomfortable about this.

Personally I'm all for it. I've seen it in Korea (I'm in Japan btw), where parents can see real time feeds of the classrooms.

Personally, i don't have an issue. I have a full audio and video camera in my room, and I'm willing to open that to the owner(and if they want the parents) in real time.

A lot of teachers over here seem to take it as an insult though. As if their personal freedoms are being enchroached.

I think there is more reason than to show how badly their children are acting though. A co worker was accused of sexually assaulting a student a few years ago (different school). They happened to still have the recordings on hand and after showing the full month in question to the oarentx the student admitted to makjgbitnuo to try and stop doing extra after school studies. That's one reason it's damn important, and the converse side of course.

I'm of the mind that having a camera(and audio) in a classroom that parents can access in real time is not just an excellent safety precaution, it's also a great way for parents to learn about their children's study and learning methods!
One theory that seems plausible to me is that there's deliberate confusion and misinformation created to combat or discredit leaks. Imagine that there's an adversary who has access to "open source" accounts that make it to popular or tabloid press, but you want to prevent them from making reliable inferences from that information.

One strategy would be to pollute that channel with misinformation, so that the adversary needs to go down a lot of different rabbit holes to have a chance of finding something real. Bonus: these could be really useful counter intel traps. You'd need just the right mix of plausible and outlandish, because you'll need to fool an adversary who (you should assume) can see through the strategy in general.

But it's just speculation.

And for all of us on the outside, it can be kind of a fun scifi thought experiment.
It’s a very interesting point. I’ve worked with some very skilled devs from HCL. I’ve also seen them turn over to other firms because of salary and other firm related issues. I don’t think that piece has anything or very little to do with the fact that they are Indian. However the organizational culture is definitely flawed and it does appear to be more prevalent in large fixed bid outsourcing arrangements. I’ve witnessed it first hand being brought in to resolve issues created by the outsourcer on projects as large as 1/2bn. They difference between those projects is the mission. Those project were critical on a financial basis. This was and aircraft with peoples life’s on the line. No one dev or otherwise can say they didn’t know this code was going on an airplane. No matter their salary.
SKS don’t implement any modern web security features (the whole thing does pre-date the web!) — as a result, you can (ab)use SKS as a free backend store for your JavaScript apps: https://www.quaxio.com/message_board_over_pgp_key_servers.ht...