skysight-inc/HackerNews huggingface dataset:
> We can write re-usable components in pretty much any language with as bit of file organisation.

Sure you can, but only in that specific language, which sadly your browser won't understands.

I'm working with Struts 2 at my job sadly, when I started I quickly began to make components because it's much better than the usual copy-paste they were doing.

The components are great and works well, are not so hard to make (much harder than React but still accessible) but once it's rendered, that's it. You want to add an element using JS?

Well okay, you'll just add some kind of template that you will render in the JS, even more works, but that's fine. Thing is, you don't have access to parameters... well just add it in the JS initialization easy right? No they use OGNL, thus if anything is done programmatically (which it will, for concatenation or i18n, or whatever), most likely won't works.

Most time when the component change visually, the same change need to be done on JS too. Twice the time...

In the case of Struts, the components are also quite hard to imbricate into one another, which push toward even more code smell.
Mac (Apple) and Linux users are the most vocal, that is all.
A platform which handles listings and bookings. I work primarily on the backend and haven't really felt any discomfort in terms of complexity. It just gives a lot of flexibility in how we work with the data that we have and what we can offer to the frontend.

The stack is GraphQL Yoga and Prisma which simplifies things quite a bit!
I'm a little baffled by how this could be news. It's an antivirus system. Someone bypassed it. That's what people do with antivirus systems. Was there a widespread belief that Cylance had somehow cracked the code on reliable antivirus?
Wow - for a sales pitch fantastic. Many of these security issues leave you little to actually do. This write up provides an alternative.

What’s super bad here is slack misleading about the cause wasting all the users time.

Quick question, anyone use key base - can u give a quick review? Team currently use slack
Thanks I missed that one :)
> makes running individual tests much easier (and debugging them)

This sort of polish is incredible. I love having it in RubyMine. If I had way more time I'd try to build a VS Code extension to make this work, but I really don't have the time.

Little things like this make an IDE worth paying for.
you can see timescale on top in a dropdown menu
The default is 5 years, but there is a dropdown select where you can choose from 3 months to 15 years.
Not only does Keybase not automatically update its client, there is no way to even figure out if your client is out of date and in need of security updates. Even if you look up the exact version of your installed client, which you can find, there is nothing on the website that says what the most recent version is. The only way to even get a hint is to look on GitHub, and even that isn't accurate; version 4.2.1 is the latest release, but when I download the mac app it's still version 4.2.0.

For whatever problems Slack has, at least I know if there is a new version that I need to install.
MS has a really appealing mix of business and IT pro products and they've been very clever in how they tie O365, Azure and VSTS together from a marketing perspective. That being said, while all their products are "fine" I don't really love any of them and a few downright suck. O365 was miserable failure at my last shop. It's so bloated with features, that it becomes slow and unusable. They have nothing that Google or Amazon don't do better. I'd also say that between the three of them, I haven't seen a single decent professional services rep.
My biggest complaint of the new dropbox app (for Windows) is that every other day the tray icon routinely pops up alerts (or warning badges over the icon) that look alarming. But they're just ads for other Dropbox features. I already pay for it — stop pretending my non-use of Paper is an "alert" worth interrupting me for. If you can't sync my folders, yes, alert me! Otherwise, shut up and do your job (sync my folders).
> Now I can get to [grocery stores, restaurants, pubs, cafes, shopping, parks, markets, etc.] via car in under 5 minutes

I... sorry, I don't believe that. I've never seen a suburb anywhere with ALL that stuff within the 1.5 mile radius you postulate. Sure, you get some of it locally. We have restaurants within 5 minutes, but the place we want to go tonight is 11 minutes away. There's a park next to the local school, sure, but the kids want to go swimming at the place with the good slide and it's 22 minutes away.

And FWIW: I literally grew up in urban Boston, and live in west coast suburbs now.
I don't think this is what they were referring to. I've had an anti-virus nuke the directory for a pirated and cracked game. All because there was a keygen.exe detected in the directory.
additional question, maybe related to the question on noise : what is the Y axis? number of queries I suppose but are they normalized?
Yes, the Microsoft fiscal year starts on July 1, so Q4 2019 was April-June, and fiscal year 2020 (for which they're discussing expectations) just started.
Anecdata, but when I went to community planning boards it was very much:

"this will hurt home values"

"I like being able to park on the [public, taxpayer-funded] street instead of paying for land to store my car on"

"This will bring more cars"

but it was telling that nobody at the meetings had school-age kids. They also fought like hell against bike lanes, which would help with the whole "people === cars" relation. I'm sure what you describe is a concern for people too.

Ironically the neighborhood was a huge draw for people from _other_ neighborhoods because it was so nice (South Park San Diego). Known for its small bungalow-style housing and pleasant, narrow streets - both illegal to build now. More housing would allow more folks to live walking distance from the nice bars, restaurants, etc. (and the well-regarded German-language school I would've wanted to send my kid to if I had one), instead of driving in and consuming available parking.
An alternative approach https://www.microsoft.com/en-us/research/video/the-simple-es... where you define the right functional structures that allow a very compact and efficient way of expressing automatic differentiation and then let the existing compiler do the heavy lifting.
Show HN: Historical tick-by-tick crypto market data API(trade, order book data)
Our own implementation sits atop the open-source Cyrus mail server. I’m not sure if JMAP is enabled by default in stable releases yet, or whether you have to go for the bleeding edge to get it.

I personally have no basis upon which to make any recommendations for JMAP clients, servers or libraries. The JavaScript one we use in our webmail is not particularly suitable for others to use, despite being open source, as it’s quite tied to our Overture web framework which pretty much only we use.

There is, however, a list at https://jmap.io/software.html of software that supports JMAP.

On your Pobox question: when reading your email at fastmail.com, you’re using the Fastmail webmail, which speaks JMAP.
Encryption for a business chat app limits the potential users rather significantly, as I understand it. A number of sectors (like banking) have strict rules which require keeping a record of company communications. How does Keybase deal with this, or do they choose not to play in that market?
From the blog posts slack has released we know nothing about their security practices.

They have a lot of high quality security features and you can see they actually work because they alerted Max that his account was compromised.

Saying their security practices are extremely poor based on an incident they had in 2015 when their company was 1/20th the size it is today is ridiculous
The author would have done well by refraining from using this as an opportunity to make a sales pitch for their startup, as it detracts from an otherwise important message.

Let me see if I have this right:

Slack had a major security breach in 2015. Apparently someone installed malicious code that could even read password inputs in plaintext. They waited 4 years, after growing large and going public, to inform affected users. And in the interim they blamed their users for any related security problems.

Do I have this correct? If so, how is anyone going to defend this situation? And how can anyone put any sensitive data on Slack, or tell their company to do so, and feel good about it now?

I expected some stupid apology note from the CEO on their website if this turns into a bigger issue, which is sort of an anti-pattern at this point...
I'd be interested in hearing HN's experiences about Azure and how it stacks up against AWS and GCP.

What I've been seeing in enterprise settings is that companies that are
already using Windows Virtual Desktops feel more comfortable using Azure vs the competition.
Does not look so bad. It's similar to web interface on dropbox.com, but packaged as "electron-like" app. Its functionality is related only to Dropbox, and it can be considered a part of main application. If it was third-party crapware, like free-to-play game or antivirus, I might be concerned, but it's just a piece of new bad UI and not worse than that.

If I do "apt-get upgrade" and "gnome" metapackage installs me another new picture viewer/calculator/text editor appeared in new version, does it mean "Gnome silently installs unwanted software on users computers"?
Do you have a link to a source for this information? I personally stopped buying sound cards because they are now integrated on motherboards.
I think there is a real difference between France as a nation creating a marvelous aesthetic object, and a handful of billionaires doing so. In the first case the focus isn't on the individual but the collective, and ideally on its better qualities. In the second, it is necessarily on the individuals, whose wealth and status exists at the expense of that of most everyone else. One is the correlate of democracy; the other is more reminiscent of despotism. That's my view, anyway.
Nai e me, but it seems an extension scheme, in which additional features can optionally be added (for $) as desired is way to go.
Are you suggesting that Google try to poach Satya Nadella? :) I would give a lot to be a fly on the wall for that conversation.
Apple is openly collaborating with Chinese regime, including allowing the government to snoop on all Chinese traffic, yet they still have a high reputation for privacy. This just doesn't work, people don't give a shit about other countries.
https://nikcheerla.github.io/deeplearningschool/
Driverless bus hits pedestrian in Vienna
Tell me more about what your book says about the crypto world? Is Noise ok now?
I'm not a GPU programmer, but I've always been interested in this type of problem from a math/algorithms point of view. Is there any way to help with Pathfinder?
I have scripts that are crawling the web in places like twitter, reddit and facebook to generate keyword ideas.

Right now, I'm filtering out the noise and crud manually! So it's a combination of automation and curation by hand.
People fear the day the authorities proclaim their property to be 10x the value from yesterday.
As people are discussing Keybase for teams and whatnot - could anyone comment on Keybase for individuals, families, etc?

My family are debating moving to Matrix (and away from iMessage). I had briefly debates Keybase due to some interesting features. Anyone have experience with Keybase for families and individuals?
No one comment about the actual substance of the change or why they don’t like it. Just lots of emotions ! And the author seems to have left out the most critical thing about this update, the main interphase is still the OS and the tiny badge in the system tray. The new file browser thing can remain closed and unused unless you want to use Dropbox search natively or one of their upcoming 3rd party integrations. It’s a very simple file browser that you need to click to open, that you don’t need to use, not a bloody crypto miner or an opt in to sell your data.
It would be awesome if folks would actually criticize the design and technical implementation!

I really dislike this type of FUD based reporting
https://twitter.com/ronamadeo/status/1151947264149131265?s=2...
Drive / File Stream is like the late 90's Norton antivirus of syncing apps. I can't believe how much it slowed down my wife's 3 year old laptop.
Can you expand slightly on the confusion, perhaps give a typical support question or similar?
Ask HN: How to Be an Effective Architect
I am moving to a cloud and data architect role. As the role title suggests, its a mix of everything.
The group already has some excellent software developers and some software architects. My question is, how do I excel there? What is expected of me and how do I prove myself? I have been a full-stack software engineer so far. I am good with software development, devops, distributed systems, architecture, cloud, low level OS stuff and everything in between. But in the new role, even before I start I am already feeling like an impostor.
Does Keybase have any kind of revenue stream? I didn't see any mention of pricing on their website.
So other than call me afraid or claim I want to monopolize opinions in the universe, have you addressed the point that a good train system is much less deadly and much less stressful than single occupant vehicles?
It's multivariate calculus.

Also, you have plan ahead and over-allocate or deal with fixed indexes/datasets. You also have to religiously monitor the garbage collection and deduce what's going on with search & indexing performance. When the situation changes you need to scale your cluster and re-index everything, which is not a trivial thing at most companies. I've seen bad situations at companies where it takes days to re-index a cluster and they're dead in the water until it's done.

And that's just the operations side. You have to make sure your data is flat (because nesting creates subindexes for Lucene and kills your search performance), that you only define in your index template the fields that you want to be searchable (and binary blob the rest), etc.
Say you could run an experiment where in one universe motherboards were developed with integrated audio and Microsoft never cooperated with Hollywood and then in a second universe motherboards never included audio but Microsoft did cooperate with Hollywood. Clearly sound card makers have a big future in only one of those.
There is a link below the form which allows you to see the data without submitting anything.

https://www.surveymonkey.com/results/SM-8LLKL2N87
Looks nice!

Will there be either OneDrive or Standard Notes support at one point?

EDIT: nevermind, it's open source, so I'll look into it; maybe as an editor for Standard Notes?
I have used it in conjunction with Slack; a channel for infrastructure team members to share sensitive details, or to direct message secrets to people. It works well for that light usage.

I cannot imagine replacing Slack with it for all company or team communication though. It's not remotely polished enough.
Why move away from iMessage? It's end-to-end encrypted.
If you say 'object sync protocol', would it work to build a dropbox alternative? I'd love for you guys to make one, I'd pay a premium over the 120/yr I now pay Dropbox for a sync-only product that you would just leave alone (well, as long as it's in a working state) after that, ie none of the fucking around dropbox is doing.
Okay, the vast majority of the general population, the billions of people using apps like Whatsapp.

Note that the comment I replied to started from the rather categorical "nobody".
I do not run a company that competes with Slack but still agree with the author.
Adding facilities can be a condition of planning permission for new homes. A growing population of kids means more schools, so whether they're in infill or in suburbia can be addressed through similar mechanisms.
Yeah, this is basically marketing material.
Yeah they're normalized relative to a scale of 100, as it's Google trends data. In the future I want to include actual search volume numbers as a line on the chart too though. Just need to figure out where to get that data first!
Azure revenue surpasses Windows for the first time
> Keybase messages are end-to-end encrypted, and only our users control their decryption keys.

End-to-end encryption isn't just good for the users because the service can't access the messages and sell them, it's also good for the users as it provides good protection if the service gets hacked: message content can't leak unless the attackers can change client code.
Health Insurers Make It Easy for Scammers to Steal Millions
It's actually rather expensive storage compared to other cloud providers.
The second I read this, I immediately signed up to Keybase today and deleted my Slack account and switched to the Keybase chat system instead which I am setting up right now.

I am confident to say that this incident was the final nail in the coffin for me to abandon Slack. Choosing Keybase was a no brainer.
O365 is an interesting one.

We were using G-Suite at my previous place, which was on a hiring spree of sales and marketing guys/gals, and pretty much everybody that came in said they'd rather have MS products.

Are they better? Maybe, Maybe not. I can almost guarantee that G-suite covered most of their needs but they were just used to MS products and it was easier to bite the bullet and use MS that hear them gripe continuously.

Lost productivity has a cost too

FWIW, I think G-Suite is probably good enough for 80-90% of users.
A security static analysis tool for Ruby on Rails applications
Maybe? It depends on your requirements. Don't most experts recommend extreme caution with cryptography approaches and software that's less than a decade old? Has that changed? Do we move fast and break things now too?

Would also like to hear your thoughts on why / whether Signal and Wire are actually good recommendations.
Would shareholders have a case to make for fraud here? Slack clearly didn't want this information getting out pre-IPO, as a security disclosure in this case would certainly impact public confidence in the company.
Growing a 1-person API company from 0-80M+ monthly requests: lessons learnt
> Given Microsoft performance vs google I don’t get it.

Doesn't it make total sense? Microsoft didn't get to the top by spending money foolishly.
To find out if they should ship it?
Thanks! Yes, this is what I was looking for.
How did you find this?
Why is it a hack? You have an emerging threat the existing assault ships aren't scoped to handle, and you find a cheap expedient way to handle it. If we (heaven forbid!) did end up going to war with Iran, do you not think Marines would need to land? Do you not think they'd need counter-drone vehicles to survive? Seems like an odd couple, but a good use of tactics to me.
Say I bought a computer, which I use to do my work on. Then I have a dry spell with little work so I get poor and can't afford to buy a new computer. But it's ok cause I use the one I got. I still valuate the computer at or above market rates, because I need it.

But what's preventing someone with more money than me from threatening to buy it from me unless I do X for them, or just to be a jerk? Without the computer I lose my ability to do my job, further driving me into poverty.

Am I missing something here?

edit: basically what I wonder is, what prevents this scheme from getting weaponized, and how does it deal with wealth asymmetry?
Let's ignore the rather awkward self promotion, and the fact that 2FA would have prevented this specific incident.

This is the important part, which everyone should think about:

> What would have been way worse — immeasurably worse — is if our team had used Slack for anything other than what we did use it for, which was discussing outages of our own product. Had my cofounder and I discussed our company's cap table, or business partnerships, or compensation agreements, or ongoing legal matters over Slack; or had our team traded API keys, or security-sensitive matters; or had we controlled mission-critical infrastructure via Slack-powered "bots"; we'd be sweating bullets to this day that our important company secrets were out in the open, about to resurface at the worst possible time.

I see Slack being used for everything at a lot of companies.

There are a lot of interesting things in the chat history everywhere: SSH/API keys, logins and passwords, sensitive internal documents, chatops bots that would let one take control of the infrastructure, and worst of all - juicy office affair gossip.

Combine this with often lax user management (forgetting to disable old accounts, inviting people to channels they shouldn't be in, ...).

Most companies overlook this and don't even have a policy for what's OK to post on Slack, and what isn't. Not even to dream of any kind of enforcement.

I'ts a big security problem, even without Slack getting compromised, and should be on the radar for CTOs.
I use Keybase. I like it, the thing to keep in mind though is 99.9% of the time the biggest threat vector to your company is going to be preventing your employees from sexually harassing each other, not preventing the Russians or whoever from reading your internal messages.
I have scripts that are crawling the web in places like twitter, reddit and facebook to generate keyword ideas.

So the trends that it detects is biased towards the corners of the web that I am monitoring. Which skew heavily tech!
I think the point was a sales pitch. The post worked well enough to get to the top of the Hacker News front page. I think the effort was rewarded.
Yeah, I had this new interface popup yesterday at random, same time as I got a notification that a file had been uploaded. I didn't click on the notification, Dropbox seems to have used this as a hook to launch the preloaded new application. WTF, Dropbox?

I've recently unsubscribed from Dropbox Pro, in part because I was no longer using it that much and, mostly, because of the non-stop, incessant, annoying pleas for me to upgrade to Dropbox Business. I'm a paying customer, stop advertising upsells to me! I actually get less advertising now that I'm on a free Dropbox account.

Anyway, depressing to see a service I once counted on go so far wrong.

Reminds me of Evernote and the "Upgrade to business and share your personal notes and journals with co-workers. And we have chat!!! Did we mention we have chat? You should check out chat."
Fair enough, I wasn't clear; but my point is that sho's number was probably about the whole world, so it doesn't make much sense to make an UK-specific reply.