skysight-inc/HackerNews huggingface dataset:
The "flavor of the day" comment really caught my attention, been thinking of a startup between those lines. I think with people having hundreds of decisions to make everyday from a million choices, it would help to answer those questions for the users without them having to spend time deciding.

I mean its great to have review sites, but what should I have for lunch today? what is trending just give me the answer I am happy to pay $5 a month you decide for me. What programming language is trending?

Will look into it at some point, happy to have a chat with anyone who's interested my email is in my profile
I don't think you can build applications without using the dangerous sinks at all yet. Some common scenarios we know are common:

window.open
href
Setting text on a script element
Setting src of a script element
form.action
innerHTML

Applications do use these sinks quite often, and some of them cannot be just get ridden of (e.g. href or script.src). Even removing eval takes ages. Complex applications parse HTML from the users, load scripts dynamically, and such.

That said - TT allow you to have such enforcement too - just set a "Content-Security-Policy: trusted-types;" header and all dangerous sinks can never be called. We call it Perfect Types, but it's not yet practical to build client side applications in that setting.
Next Steps in the Music Modernization Act
Stone Age Myths We’ve Made Up
Lots of things have nothing to do with a repo?

I work remotely with my colleagues. We constantly are doing stuff like creating/updating excel files and all sorts of other stuff that has nothing to do with source code.

With dropbox (or equivalents) I update something in the file, and it's updated right away everywhere no matter where my co-workers are.

Dropbox also has good enough built-in version history (especially on business), it will keep the changes of any file for like 6 months. So if I want to look how this excel file looked an hour ago, I just click "version history" and it pulls up all the different files and I can restore any one.

So for people who work remotely and just want to sync files / have some ability to restore previous versions dropbox is a life changer.

Yeah, of course this could all be setup to have each person on a VPN and using a shared folder on a server where we are logged into the domain or we setup a ZFS filesystem which takes snapshots and I can restore etc etc. In a small company, F that. I've done all that bullshit, it isn't worth the time and maintenance when you just want a damn synced filesystem among co-workers.

So there is the value proposition!
Linux users are already a tiny fraction to be worth the support costs. Adding multiple filesystems isn't viable.
My wife and I did the unthinkable by moving back to the city (Boston) when our son was about to start kindergarten. Our friends and neighbors acted like we were moving to the moon. Parents we connected with in the city prior to moving looked at us like we were idiots for even considering NOT moving to the city. It all depends on your perspective.
Might need to fix the default banner slot at the very top. I'm seeing:

{{ad.banner.text}}
I "learned" coding with LabView. It's "graphical programming". After three years and ever-increasingly complex programs, I was longing to use a text-based editor.

LV is super practical for "quick and dirty" device control, but beyond that, it's an inefficient grind of connecting things.
"It’s not really about asking for the raise, but knowing and having faith that the system will actually give you the right raises as you go along."

-Satya Nadella
Here's one of the Skia Path Ops videos referenced in the Presentation section -- for some reason it links to slides but not the videos...

Skia Path Ops : High Performance Set Operations for Geometry

https://www.youtube.com/watch?v=OmfliNQsk88
Sorry let me rephrase. If she would like to work and me stay at home id be happy with that. Children are work but they are by far the most important
I wont support VSCode for one reason (downvote to oblivion): it’s “open source” sponsored by a near monopoly corporation, which makes VSCode a marketing tool for Microsoft. This kills the business model of InteliJ which does a lot of work in making great IDEs. Basically, Microsoft is using its wealth to dump a free product on the market and to kill its competitors.

Think about it for a moment: this kind of open source kills genuine businesses due to the monopoly position of the company “sponsoring” it.
This particular scenario involved injecting server code in 2015, then waiting until 2019 to use the credentials they collected. They would not be able to bypass 2FA here.

It’s true that 2FA wouldn’t protect you from having your account compromised immediately, but that’s not what happened.
It could even be the wind interacting with some structure nearby.
>You aren't going to get a good review by being useless but really good at small talk in the kitcken.

You probably would if you talk to the right people. When performance criteria are not objective, it's easy to fire or retain people at will.
Introduction to Variational Inference
I know you've seen others use this line, and how smart they appeared doing so...

But for VSCode, the distinction just isn't there anymore. It has integrated debugging, refactoring, indexing, and all sorts of other language-specific features.
A performing musician has several desirable traits that may preclude being a musician if absent. Given the phenomenon of groupies wanting to sleep with musicians I would not be surprised if musical ability is currently being selected for.
One day our descendants will look back at incidents like this and wonder how we tolerated such inhumanity towards the most vulnerable among us.
There's an article where he linked the hum to possible behavioural changes and mentioned such an effect with respect to Adam Lanza (the Sandy Hook shooter) [0]. That alone should have prompted The Atlantic to have done a little more fact checking.

[0] https://www.newtownbee.com/brookfield-man-implored-police-to...
My guess is that they built it like that so it would run in resource constrained embedded environments (like routers).
What is so alarming about another App doing the same? Why are major newspapers writing these overblown articles at the same time?
That's awesome to hear!

If I were to build Trennd towards these e-commerce guys, what would you improve/add/change to make them love it?
Employers are mining the data their workers generate
Well third world just means the country did not align with the US or USSR during the cold war. Though the concept has kinda changed meaning lately.
Sorry let me rephrase. If she would like to work and me stay at home id be happy with that. Children are work but they are by far the most important.

As a child I wanted to be a stay at home dad, which i realize makes me somewhat odd, but we are odd people
What kind of monster would put more than one child in a bedroom though \s.
Agree in an ideal world the Mayor shouldn't have to worry about Trump, but Trump tends to attack him directly with misinformation and lies so I would expect the Mayor to defend himself.
Almost Always Add Swap Space
So the issue is not breaking backwards compability in the "standard library" between versions?
Man!! biggest problem of 2019 developer in communication :emoji:. Try using gifs, there always seems exact one for the mood, or maybe words.
If anyone's using LV and would like to use C/C++ (without LV-CVI), there are C libs included in the DAQ driver package. This also has the advantage of not requiring a LabVIEW license at all.
Yes, and if you use VS Code for those features it's terribly far behind the competition. Even its auto completion for PHP (a very nicely supported language) is nowhere near as complete and reliable as the one from PHPStorm. As for refactoring, well, it's not even in the same league.
There seems to be different classifications of Cattle - search term, Animal and Cattle.

No idea what that means, but it suggests why you're not seeing the same data.
thanks for catching. updated.
I guess the most logical conclusion is that every time they make a sacrifice under the full moon during the equinox, they get rewarded with more interest in Gmail.
I sleep close to an electricity box and it emits a low frequency hum that can be maddening if exposed to it for long periods of time. It can even wake me up at night. I don't think it's the same hum as described in the article though. In general, EMF is something to avoid, although it's very hard to dodge it in urban areas where electricity boxes and wires are always within short distance.
I'm not sure where you get the impression that these three companies don't advertise much.

In any case, nobody should have to patronize a company if they don't want to, whatever their motivation. The problem with the big tech companies is that one so frequently doesn't have a choice. I may not want to buy from MS, but some bit of hardware I'd like to use only supports Windows drivers and some bit of paperwork I need to fill out is distributed as a Word doc whose formatting doesn't render correctly outside of MS Office.

In all fairness, one can avoid Walmart and McDonalds if one wants to, but Google and Facebook are as hard to avoid as Microsoft.
Same with TechCrunch, every time I visit I am reminded how frustrating react sites can be compared to server rendered pages with all the flicker, slow page reveal, and odd navigation it introduced.
Depends entirely on the conversation obviously, but perhaps important details should eventually be coalesced and moved to a more permanent document or project management system before the deletion deadline. It's a good discipline to have.
The interface really puts me off though.
This sounds like exactly the sort of thing that noise-cancelling headphones are good at counteracting.

I too suffer from a "hum", but in my case it has a clear explanation: a noisy ventilation fan on the roof of my building, right above my bedroom.

Admittedly, headphones can be a bit uncomfortable when you wake up with them still on your head, but the feeling of silence and being able to get to sleep easily is priceless by comparison.

Perhaps someday, someone will develop noise cancelling earbuds that can be comfortably worn while sleeping, even if you roll over?
The Hum
This is the "lite" version of his sales pitch. The real sales pitch was the email that Keybase users just received. It said, basically, that Slack was compromised but if you would have used Keybase instead, you wouldn't have been compromised.

Awkward, indeed.

I cringe when I see companies try to use a competitor's misfortune to their advantage.
It's supported by the foundation that maintains Stellar, a popular cryptocurrency
Presuming we have them.
Nice work Josh.

It can probably be used for lots of things: startups, as you mentioned, but also journalism ideas, investing ideas, job hunting and many more.
> Can the information collected in incognito mode be traced back to you

Absolutely, but not necessarily with Google/FB's tracking systems. Your IP is enough to identify you and join to your other Internet activity, in most cases.

This is why Incognito Mode's New Tab Page says:

Your activity might still be visible to:
* Websites you visit
* Your employer or school
* Your internet service provider
In addition to the problems everyone else is pointing out, this also fails to account for labor, transaction costs and the variability of value based on relative ownership.

Suppose I'm a wildlife photographer and I have a camera that unarguably has a market value of no more than $300 (it's what the manufacturer still sells it for). But I've positioned it deep in the Alaskan wilderness at the cost of 50 hours of labor and $15,000 in travel costs. Someone who wants to troll me demands to buy it for $300, requiring payment of those same costs again to retrieve it, and then does the same thing twelve more times, one month apart, for my twelve other cameras.

Or I have a diamond as part of a laser. The diamond costs $100 but then it costs $10,000 to calibrate the laser, so someone who takes the diamond requires me to buy another for $100 and then pay another $10,000 to calibrate the laser again.

Or you have a custom component which can't be manufactured in less than ten years, because it requires a slow chemical reaction, but is a small yet blocking component of a large million dollar operation. Notwithstanding that, it's cheap to make it, because you just start the reaction and come back in ten years. But now someone who wants to shut down your operation just buys that component from you (along with your five spares) for the $10 market value and your million dollar operation is shut down for ten years.

For that matter, it can be used to monopolize the market for various commodities by offering the current market price for everything at once and then turning around to resell them for the monopoly price.

Or members of your family own shares that total 60% ownership in a company, and I own the other 40%. You personally own 12%, which I demand to buy for the market price, even though I should be paying the higher price for a controlling interest.

Or you've got a shelf full of equipment you use for your business operations, which your company manufactured itself and could quickly and inexpensively make more, but having access to any one of them would disclose millions of dollars worth of trade secrets to your competitors.

Market value is a fiction that only really applies to high volume commodities.
With recent changes like the 5 device limit (for the free edition), refusing to supporting any filesystem on Linux except ext4, and now this, I'm very happy with my decision to switch to syncthing.
For sure. So shorter term. They're going to want to move faster than 3 months. Maybe like a past 30 day trend if possible? I would say also if there's a way you could dig into Alibaba and see if there's a bunch of new items of the same type getting listed recently that would be extremely interesting for them as well.
Selling the data as an API is definitely a potential. I was originally thinking to allow CSV downloads of the data. Would an API be more useful for your client's use case?
Being a nazi isn't a protected class.
Doesn’t that introduce serious overhead compared to first class native arrays as in Julia or FORTRAN?
I've been reading about crypto lately and https://download.libsodium.org/doc/ seems to be the goto library for what you're pointing out.
this needs to go up on HN!
OpenWRT has been around for a long time.[0] I've been using it for at least 4 years.

[0] https://en.wikipedia.org/wiki/Openwrt#Releases
Is it just me or it became more difficult to search words in a chat?

When I try to find something in a chat I would give up if it was written more than a week ago, as you mention scroll is really bad/slow and searching doesn’t help, so I end up asking the person if he/she remembers the thing I’m looking for.
As with many things in life, it's a tradeoff. Do you want to accept a higher risk of security incidents or make it easier to recall information from a long ago IM conversation?

There are rational reasons for an organization to do either.
Better is better than worse: a week with Hy
Advertising without invading privacy – Bring back the Deck
I have seen the (largely fictitious) movie.

It is not in the movie (which, again, is largely fictitious) that Ray Kroc took personal ownership of properties, and benefitted personally from the corporation he controlled (not counting the above-board appreciation-of-the-overall-corporation, which of course he benefitted from, but capitalists mostly don’t argue with this).

There was an intermediary acting as the owner, and there are no franchisees in WeWork’s case.

WeWork is vastly, vastly more sketchy.
Log realtime keystrokes on SSH users via strace
At my last workplace it was fun choosing oddly specific reaction emojis for comments.

Like I loaded a gif of a dumpster fire and used it as emoji. I uploaded a picture of my face to use as an emoji. I uploaded the "It's free real estate!" guy.

Yes, I'm 33, my coworkers were younger but I have the meme knowledge of someone 2/3rds my age due to endless reddit scrolling, thank you. I can keep up with the kids.
Last time I touched it, it didn't have a GUI at all.
I don't think anyone would argue with the value side of the question. The tricky part is calculating the cost side. (The cost of not deleting old messages.)

Surely we can agree that the cost side is > 0.

I'd argue that the benefit side is generally at least a little lower than what we think it's going to be. And if the expiration limit is set to say, 1 year, the cost of deleting old messages goes down considerably.
From the slack post:

> In other words, if you’re one of the approximately 99% who joined Slack after March 2015 or changed your password since then, this announcement does not apply to you.

Hackers compromising plaintext password would seem to apply to everyone using Slack, whether their account was compromised or not??
Only if they could somehow gain access to things which are illegal to buy, without buying them. So even if this works, that would mean the only companies that could use that to prevent hostile takeovers are the ones where someone involved in the company happens to already own an unsellable thing by grandfather clause.
"We" aren't tolerating it. There are far more people fighting for change than preventing it.
At what point do employers have a responsibility to stop flying their employees all over their respective country/continent or the world for $REASON_WE_CAN_JUSTIFY_IN_WORDS.

Why do I have to be made to feel guilty for being an economic migrant in my own country and wanting to visit my family who I have had to move 3,000 miles away from for employment? Why do these companies get a fucking pass every time an article shows up?
> Windows by default has cloud sync

on Mac and iOS and Linux and Android?

> macOS does as well.

On Windows and Linux and Android?
John Paul Stevens Was a Cryptographer
Microsoft made dramatic changes to how sound drivers worked that caused problems for SoundBlaster's advanced features, but the explanation at the time was that SoundBlaster's garbage drivers were responsible for a sizeable portion of Windows' BSODs, and redesigning the driver model was a critical part of making the OS stable. I've never seen a reason to doubt that narrative.

Overlay mode wasn't a CRT feature, and worked fine with flat panel displays with XP. The introduction of GPU compositing in Vista was what killed it, but it still continued to work in 7 if you turned compositing off. The death of funky resolutions was entirely a result of switching to hardware which has a native resolution, and not anything software side.
> Oliver Sacks pilfered the title, or someone did on his behalf: https://news.ycombinator.com/item?id=19124608

I think you mean paid homage.
Ask HN: Anyone Using Google Cloud Build in Production?
The pricing seems pretty competitive, but having trouble finding reviews for people using it in production for larger ci pipelines. It also didn't seem as configurable as some of the incumbents, like circle ci.
While I agree (and for the same reason think that it was actually a good thing for RSS that Google Reader was killed), it seems that the big companies can never win. If they make a closed source or paid tool the crowd will criticize them, if they make open source it ends up the same.
When I was doing affiliate marketing a decade ago, what I did manually was watch informercials and jot down the names of all those products. Then manually run searches in Google Trends to see which ones were spiking, and create content for those products (ie reviews, guides, etc). Here's an example of a product that really took off after they did an informercial in 2006: https://trends.google.com/trends/explore?date=all&q=almighty... . I created a page for this product and was ranked #1 instantly. Because nobody else was writing about it.

I stopped doing affiliate marketing so don't know what people do now, but just throwing you some ideas.
Noise cancelling umbrella above your whole head?
“according to a new study which looked at 22,484 porn sites to examine how they use tracking software”

Someone got busted for looking at porn at work and tried to turn it around and say they were looking at it for science!
To vague. What do you want to achieve in this role? Varies a lot depending on personality type.

Some people get their kicks from keeping everything running smoothly. Some people want to shape a product or a process. Some want to shape the entire company etc etc
This is not a new vulnerability, moreover, it requires root priv's and if you have that, well, you own the machine.
I caught this last night on HN in a bout of insomnia and thought it deserved another shot at exposure, particularly since I'm beginning to use Hy myself (thankfully not in such a high pressure environment).

I wanted to DM dang first to ask about reposting rules. I hope he won't mind flagging it down if it runs afoul of them.
Try to make something that works in the real world as soon as you can (a web-page, a mobile app, a web-app, or whatever is most relevant to what you're learning).

Being able to create something that works - no matter how simple - can be a far stronger motivator that simply checking off a curriculum's requirements.
Just as an experiment give scratch a try:

https://scratch.mit.edu/

I think you might find out why test is pretty handy.

I can hammer out a one liner with a bunch of methods to do a thing(s) pretty fast. Dragging stuff around, much much slower and IMO it's harder to understand what is actually going on.
In that case, it would presumably be moderated or eliminated on calm nights?
Check out libdill[1] (in C):
"Generally speaking, though, libdill's concurrency primitives are only a bit slower than basic C flow control statements. A context switch has been seen to execute in as little as 6 ns, with coroutine creation taking 26 ns. Passing a message through a channel takes about 40 ns."

Check also libmill[2] (from the same author), it's more Go'ish:

"It can execute up to 20 million coroutines and 50 million context switches per second."

1. http://libdill.org

2. http://libmill.org
New Marine Corps weapon that just destroyed an Iranian drone revealed
Many of us already trust certificates we shouldn't be.

It's not even this blatant in most cases. About 6 countries have issued certificates for Google, India being one of them. And they all made use of the fact that they were part of the trusted root certificates on our systems.

https://www.quora.com/Why-are-HTTPS-requests-not-cacheable-b...
I wonder how many survey responders AND result readers are confused by the software being called gitlab and the hosted repo SaaS offering being called gitlab vs community local installs of gitlab
Five years ago there were reports of "the Surbiton hum", precisely where I live – that is, I reside in exactly the part of Surbiton where the hum is most audible, to those who can discern it. Reports started in a local forum and made their way up to an article in The Times[0] which was itself reported in Fortean Times[1]. I was kinda disappointed not to be able to hear it myself.

[0] https://www.thetimes.co.uk/article/weather-eye-a-resident-hu...
[1] https://www.flickr.com/photos/dsf/14958914130/
With the amount of value that I get out of IntellJ Ultimate considering I use it for every language I use (Java/PHP/Go/JS literally whatever) I am VERY happy to throw them $89/year (you get discounts for consecutive years, first year would be $149). That really feels like nothing and it's definitely well deserved.
GitLab employee, that is indeed our goal: https://about.gitlab.com/handbook/product/single-application
Sorry I should have asked a better question: do the alleged trackers use low level tools that would bypass incognito (e.g. IP address, fingerprinting) to join your information with your non-incognito profile?
Show HN: Pyorbs – A Tool for Convenient Python Virtual Environment Management