skysight-inc/HackerNews huggingface dataset:
I think that you're underselling the size of the PFD relative to the state budget when you say "akin to digging through [the] couch cushions for change". Here's a comparison of the numbers:

// (expected - actual) * valid applicants
// ($2,300 - $1,100) * 666,047
PFD withheld 2017: $ 687M
Total state revenue 2017: $1,018M

Also, these statements are in conflict:

> the PFD that isn't constitutionally protected

> pay residents what is constitutionally granted

[pfd_applicants] https://pfd.alaska.gov/Division-Info/Annual-Reports

[pfd_projections] https://en.wikipedia.org/wiki/Alaska_Permanent_Fund#Annual_i...

[state_budget] http://www.tax.alaska.gov/programs/programs/reports/AnnualRe...
Tree of Ténéré
Someone who hasn't heard of USB Switches.
Clicker for YouTube TV, a Dedicated YouTube TV Player for Mac
When we're talking about diversification, I think revenue is a reasonable metric.
Two things:

1) Stop importing so many needy people. Do it today. Cut the welfare benefits in half or better.

2) Cut the pension obligations in half or better. The promises were overblown to begin with. Negotiating with pensioners is better than them getting nothing and us getting high taxes and nothing else.
> Microsoft has created a massive amount of goodwill by doing incredible things for communities

i can't tell if this is sarcasm, recency bias, or something more nefarious. have you heard of embrace, extend and extinguish?

but, i'll bite - what incredible things for communities have they done?
It means someone working on Android needs to compile something written in Rust badly enough to add support for it.

The second Android developer needing to use Rust will presumably have an easier time of it, but how much Android will really use it is speculative.
We do at Vimeo: I gave a talk this week at the NY Elasticsearch meetup about a new search product we built using ES.
If you're interested you can access the recording of the livestream here: https://vimeo.com/348443979
The product in question is https://vimeo.com/stock
Been waiting for this apple for years! I've yet to try it but it sounds super interesting. I love honeycrisp, this seems like exactly what can replace it.
Driverless Bus Hits Pedestrian in Vienna, Interrupting Trials
This is one of those "We need to advertise the job" but don't want anyone to apply because we want to keep the person we have who is up for contract renewal.
User ID, Username, Email, Account Creation, Account Type, Days Active, Messages Posted, Daily/Weekly Active Members, Daily/Weekly Members who Posted, % Public Messages, % Private Channel Messages, % Direct Messages.

On a per channel basis you can see members who posted, members who viewed, changes in members who posted, reactions added, members who reacted, # messages posted, total membership count.

Those are what I've found just poking around. I dont really check the analytics of our workspace so I may be missing some. It doesn't look like there is a super-easy way to look up the last time a specific member was online - but there very well could be depending on the plan. Or I could be missing where I look it up.
Did you find where they talked about what configuration options were given to OpenSSL? The benefit and curse of complexity is that OpenSSL can run on everything so what config options are used are very important. I struggle to feel like this is a reproducible benchmark as 'default options' for OpenSSL turns into a whole lot of autoconfiguration depending on the host OS detected and I am not sure what version of Debian they are using for this test and how that was configured (stock or otherwise).

What would have also been nice if there were packet dumps from each to see if there was anything interesting there as well. If it is like you say based on BoringSSL it would be interesting if rust did something different at the packet handling level that OpenSSL did not.
Sadly, you are correct to have realized that many posters on HN are so naive that they will offer you $0/hour consulting for your for-profit business. Posting on the HN forums means you "don't have to pay another employee" that's an expert in the field. I can't do much to prevent this, but I don't much respect it, either.
How am I supposed to read this paywalled article? I'm not paying for it.
VS plays nicely with Node, although I can't speak for VSTS. But I've only been playing around, and haven't tried setting up any CI/CD with VSTS or GitHub. The biggest hassle with using VS and publishing to Azure is that you need to use an Azure Node template.
Ask HN: Has anyone tried using Twitter or Reddit as comment boxes on their blog?
Stumbled upon this: http://embed.redditjs.com/

And thought I could easily cook something to use Reddit as a comment service for my personal blog.

Also thought of doing the same with Twitter threads - embedding a Twitter thread on each post. Is this possible?
I had a really hard time understanding it as well, and as someone who is supposed to at least have some understanding in this space (HTML5 gamedev) it made me feel a bit dumb.

However, from what I understand, there seems to be two things needed to be noted here:

Skia - a standardised library that can 'render' to different backends - i.e. it can render to OpenGL or SVG or PDFs.

CanvasKit (the actual one linked) - basically use Skia on the web (with webgl).

A huge boon here would be performance. For example, in WebGL, if you want to draw text, the current method is actually to render it in the canvas first, and reupload the texture to the GPU. From what I understand Skia seems to handle the rendering 'natively' so this step is not necessary. So basically it would just make it easier to draw 'primitives' since they are provided by the Skia API without having to do workarounds or writing really low level webgl fragments/shaders.

This is just from what I gathered, but yeah it is confusing. If anyone knowledgeable reads this, let me know if I got anything wrong!
If a browser claims to be Headless Chrome, you believe it. Nobody has a reason to lie about that. The interesting question is the opposite case: is somebody claiming to be a normal Chrome, but is actually Headless Chrome (or an automated member of some other browser family, or not a browser at all but e.g. a Python script).

So if you take a Headless Chrome instance but change the User-Agent to match that of a normal Chrome, does the detector think it's not headless?
Rogue Weedkiller Vapors Are Threatening Soybean Science
You get a bunch of "yes men" together and group think takes over and you end up with this. Rationality goes out the window. It has to because you have to say, "yes".
Semantic Drift
People keep forgetting that equipment and subscriptions are your employers property and data, not yours. They have the right to access anything they pay for without telling you. It's important to remain aware of this any time you do anything for work.

Back before we had computers, there was nothing stopping a company from opening every memo that came through the mail room and recording every phone conversation and opening your file cabinets when you weren't there. The diffence was it was a lot more work for them to do those things, so it never really came up. Now it's super easy for a company to process every single thing you do or say, even including recording audio in the workplace.

So maybe it's time for us to look for some legal protections for worker privacy?
Netflix CEO may have missed the real reason why US subscriber numbers plunged
(this is mostly relevant for static blogs)
Summary: They've bred the red delicious with the honeycrisp.

The honeycrisp is enjoyable to eat, the red delicious is bad to eat but good for apple warehousers and sellers.

So now we get the middle of both worlds.
My brain is sold on the reasons for producing bugs to eat, but my stomach is sadly queasy about it. Maybe if they ground them and made patties out of them or something to get past the feeling of eating tiny bugs?

Does anyone have experience getting over this?
The only reason a company switches to open offices is to save money, just like the removing of free sodas. The will claim any other reason officially though.
Meaning Rust is being used in the Android OS itself, so this isn't about app developers?
That's wonderful to hear, I just wish I had learned about it sooner. I kept looking back at TinyGo for WASM tasks, because it looked like the right combo of size footprint and runtime capabilities, then ultimately thinking "hmm but the GC issue."

I'll probably take a look later today!
A good search engine shouldn't process JS at all, and index only the content that is reachable via links pulled from HTML (which may, of course, be dynamic).

The processing of JS explains a lot of the sheer garbage that is in the Google results.

I think they do it because it ties into their business model. JS is needed to unearth the kind of crap that a certain segment of the user base is looking for. That certain segment is worth catering to because it consists of users who are likely to click on ads.

Otherwise, nobody in their right mind would integrate JS into a crawler. "I'm going to write a program that automatically finds random source code, much of it malicious, and runs it!" Come on; without a business agenda justifying it, it's a complete non-starter.
I don't think we have the most enterprise version of Slack, but as an admin the data available to me is # of days active of the last 30 days and # of messages sent over the last 30 days.
The second app is also categorized under "Social Networking" in the Apple App Store for me. They both have a same/similar blue background in their three pictures in the install preview. I can't read Cyrillic, so I don't know what it is about, but what 'duxup says makes sense.
That looks more advanced than I would have expected. Do you have any details on the project beyond what’s on their site?

I’d be interested to know if this can be scaled up if societies started investing in it.
The links won't really matter though, because they don't have value. You need somebody to link to the XSS'd URL for the links to help you with SEO, preferably linking to it from the legit page - which will generally not happen, and if you can make it happen, you don't need this attack, you can just link to your page directly.
I'm fine with smaller government across the board everywhere. If we went back to 1980s size government that would be just fine. It's not like we were under-governed in the 1980s.
Someone who's IT department has plenty of keyboards but no USB switches on hand at the particular minute they are given hardware.
I am very interested in hearing about your experiences migrating to vespa. When it was opensourced we all thought it would be an absolute game-changer, but I see so few people building new products (or migrating existing products to) vespa.
Same here. I moved up to Mountain Lion about a year ago (yeah, I know, but I have good reasons for using old Apple operating systems) and then Dropbox stopped supporting Mountain Lion. Which does not mean that the product stops getting updated. It means THE PRODUCT STOPS WORKING. There was no good technical reason for this; it was just arbitrary Dropbox fuckery. Yet another reason I'm leaving.
Wouldn't most api traffic come from vps's regardless of the intent?
> If you can afford it, you can eat fresh fruit and vegetables, or the best cuts of meat. If you can't, then tough: it's kebabs, sliced bread that's high in trans fats, sugars and salts, and at best tinned veg and fruit, for you.

What? In continental Europe vegetables, fresh or tinned, are by far the cheapest option. Meat is always expensive.
I don't think these are all necessarily required. At least I would be very very surprised if both avr-libc, mingw, and go were needed.
I absolutely find McDs pretty low quality. I'm not saying they're bad, or people that eat there are. I do shop at Walmart and do use Windows at work.

It just depends on my given needs for a given thing. As to Windows, I'd rather be on linux or mac, but there are a couple things I work on that are core to the business absolutely tethered to windows.
Sexting is a form of sexual behavior. Parents get worked up over all sorts of sex-adjacent behavior - some flip out over holding hands or kissing on the cheek.
I buy Pink Ladies. And recommend them to you. Tart, crisp.
I totally agree. I wonder to myself sometimes, "where did this person's empathy go?".
The title is a bit rich coming from MongoDB which appears to have gained most of its initial popularity from very biased benchmarks. (I recall a number that didn't even wait for the server to ack before considering a write a success. They were basically benchmarking the client library.)

However their analysis does seem fair that this benchmark was very biased.
> Nobody actually wants to rely on a single entity (for or non-profit) for their communication

You don't have to do that. Protocols like tox for example are distributed and use DHT in order to find peers.
I'm surprised that people aren't glomming onto increasingly adopted methodologies for AI and ML projects such as CPMAI [1]. Especially since successful AI & ML projects are really data management projects, and not app dev projects.

[1] https://www.cognilytica.com/cpmai-methodology/
Can we stop with this "growing phase" mythology of high carbon emissions? The US didn't "grow out of it" we out-sourced it to China and India. China and India can't "grow out of it" unless they find someone else that can take it over for them (and I don't think there's enough production capacity in the remaining parts of the world to do this). This article[1] does a pretty good job showing the complexity of this.

The idea that eventually every industrial nation can mature and "grow out of" carbon production makes the ludicrous claim that somehow industrial production magically requires less CO2 over all in the long run. Sure this would be possible if processes could all become more efficient and overall output experience 0 growth, but continued growth is essential for current economic models.

We all know we are living in a global economy, but then talk about resources and waste as if they are local problems. The truth is modern global Capitalism requires perpetual growth and increase production and consumption. We all like getting paid and living in a prosperous society but that money cannot come in a sustainable world. Where do you derive profit from a truly sustainable system?

[1] https://www.carbonbrief.org/mapped-worlds-largest-co2-import...
I don't have an answer, but it always surprised me what people would say either in Direct Messages or in private channel. This is a corporate slack, I'm pretty sure management can access all conversations, even in DM or private channels.
Lightning Fast App Creation
> Summary: They've bred the red delicious with the honeycrisp.

From the article:

> The Cosmic Crisp (right) is the result of crossbreeding two varieties: the Honeycrisp (left), which growers find finicky but which gives the Cosmic Crisp its texture and juiciness, and Enterprise, a late-ripening, long-storing apple.

Is Enterprise a fancy word for red delicious?
All I know is what's in the post; you're right that "Debian" is not exactly enough info...
putting my 'bad guy' hat on, I would think about automating via sikuli script if you had to (but only if you had to).
A small nit that bugs me in the original post

> The difference between AES128 and AES256 appears to be approximately 26%, rather than the 40% one might expect (AES128 does 10 rounds, AES256 does 14 rounds). There may be some limiting factor that prevents AES128 running at the expected speed, or perhaps this CPU has extra area dedicated to making AES256 faster.

The hardware in the CPU performs a single AES round, it does not dedicate more hardware for AES256. One who understands that AES-GCM is not just AES knows that the difference is due to the GCM overhead, that is the same for 128 and 256.
Samba is a terrible piece of software, and under GPLv3 to boot. Combined, this is why no real vendors use it, only the poor.

Further, it is laughable that the DMCA would apply to SMB.
> Can someone familiar with the Android ecosystem elaborate on what exactly this means?

It means that Google is experimenting with using Rust to build parts of Android. That could mean parts of the OS, tests, tools, SDK, etc...

As a simple example of why this isn't necessarily super interesting is Python has been in the Android tree for ages, but just for some build & test stuff.

But maybe it's interesting just in that the Google engineers working on Android have started playing with Rust enough to bother checking it in to the tree.
I find it interesting (and somewhat unexpected) that even digital hardware, while consisting of discrete elements, blocks, etc. that can be easily visualized, is still "defined" using pure-text "hardware definition languages."
One company was already in the process of moving after iNSYNQ got hit earlier this year by ransomware. This isnt their first attack.
Calculus Series: Derivative of Inverse Function – Theory and Applications
ES is used in code search tool dxr which we locally use as well: http://dxr.mozilla.org
I think they are different[0][1].

[0] https://www.orangepippin.com/varieties/apples/red-delicious

[1] https://www.orangepippin.com/varieties/apples/enterprise
Forge Blockchain Application Framework Released to Developers
Brian Smith is well-regarded as an expert in this field. He knows what he's doing.
I didn’t know I could get so hyped over the launch of a new apple.
The cloud is just someone else's computer.
Are those not two different kinds of models though? For self-driving cars, the most important city models and those to which the Ford CEO was referring would surely be high-precision records of the physical layout of the city. Whereas the models in the article are simulating how people / cars / ... move around the city.
seconded. Taste just as good or better than HoneyCrisp and cost less :)
This is why these universal programs are coupled with monopsony leverage. Healthcare prices have exploded because the government has been intentionally hobbled at the bargaining table, legislatively blocked from using its weight to negotiate better deals for prescription drug prices. Tuition has exploded because a system of credit has been created that is untouchable by bankruptcy.

These are solvable problems.
Tomato/tomato.

You are effectively saying that only certain types of strings and DOM structures are allowed on certain properties and attributes.

This is perfectly encodable in a type-system. I don’t see a reason to dismiss that observation outright.
> WhatsApp, Telegram and Signal use mobile phone numbers as identifiers

One notable exception (which as I understand is tptacek-approved) is Wire, which only needs an email.
Most likely if you don't respond and they really want to shut you down, they'll file a UDRP which will cost them $1500+. If they win the dispute, the domain will be transferred to them.

Seeing as they are a well known company, you have airbnb in your domain and your domain name even explains that you are familiar with their company, I'd be very surprised if the domain wasn't ordered to be transferred to them.

If you look up UDRP cases involving AirBNB you should be able to get an idea of the type of names they feel worthy of going after in UDRP. Some companies go after anything moderately infringing where as others seem to be more lax.
AT&T does not see it differently, the deal with IBM is a cover for outsourcing thousands of employees without drawing attention to it.

Internally ATT has been using RHEL as the default OS for almost every system build, but drifting towards Ubuntu, this may change back to RHEL.

They've built most of AIC on top of Mirantis, they enhanced helm with airship and open sourced it for k8s management so I don't see them jumping on Open Shift anytime soon either.

The deal with MS is where they be shifting most of their actual workloads to that go cloud, IBM will be running the stuff that's left behind in legacy AT&T data centers. IBM will not be touching any of the actual network/SDWAN stuff.

Edit: Am AT&T IT employee
Indeed, a teenager should have triple the voting power of a 40 year old
Usually you can use Outline, but it looks like they've stopped supporting WSJ urls.
Because of the issues the article described: detection of headless crawlers/bots/etc
Well, in theory, people can use that basic income to pay for school... or they could, if the school wasn't so bloated and overpriced, which the school has been getting away with because the government has been giving it so much money.
There is a long term trend of search engine companies being acquired, going away, products ending, and customers left in the lurch....
A lot of code editors and IDEs already have folding indicators and indent guide lines which provide the sort of "context coloring" that is demonstrated in the article. (VS Code's language-server based contextual folding, especially.) There are extensions to add colors to those guide lines and fold indicators, but it probably says something about how generally useful it may be in that code editors don't default to that behavior.

(For instance, in JS I've come to prefer to un-nest structures as much as possible and the provided example hit some of my code smell receptors that I would refactor it and un-nest most of it, but that's my aesthetic preference here.)
"If the people be led by laws and uniformity sought to be given them by punishments, they will try to avoid the punishment but have no sense of guilt. If they be led by virtue and uniformity sought to be given them by the rules of propriety, they will have the sense of guilt and moreover will become good." (Analects, bk. ii., c. iii.)
There are no payments between countries. It's a tax and an import tariff on countries that don't have the tax (or an equivalent like tax and trade).

William Nordhaus has done the math, you can read his papers for more details and appropriate levels. Of course the fact that we didn't implement in 2015 when he did his calculations means that the appropriate levels are higher than they were then.
This comment doesn't really contribute anything — and it makes a common mistake of treating this as an issue of intelligence when it's more specific security experience and awareness. In particular, I've seen a pathology around XSS where part of the problem is that someone is pretty savvy and downplays the risks thinking “well, I'd never set things up so that would work”, ignoring all of the times they've made mistakes, used a library or vendor product, had projects change hands, etc.
We don't know what it's for. It might be used in a sample app.

But it's not something ordinary Android developers need to pay attention to.
Sounds like they just need to take a page from Spotify's playbook and start just shoving fully autoplayed best matching shows down people's throats. They'll be happier being force fed with no options.

weird but plausible.
SQL Query Planning in Rockset
https://arh.antoinevastel.com/javascripts/fpCollect.min.js contains some functions called redPill that aren't in the normal fpCollect library. redPill3 measures the time of some JS functions and sends that data to the backend. Here's a chart of redPill3's timing data on my computer: https://i.imgur.com/c8iuV6I.png

Those are averages of multiple runs on a Core i7-8550U running Chromium 75.0.3770.90 on Ubuntu 19.04.

isNan and isFinite are much slower in headless mode, but other functions like parseFloat and parseInt aren't. My guess is that the backend is comparing the relative times that certain functions take. If isNan and isFinite take the same time as parseFloat, then you're not in headless mode. If those functions take 6x longer than parseFloat, you're in headless mode.

I don't know if this holds true for non x86 architectures or other platforms.
This article has an interesting part about Pink Ladies; how the apples you buy in the store labeled "Pink Ladies" might be a different cultivar than Cripps Pink which was the previously copyrighted cultivar that originally had the "Pink Lady" name!
Cool; so it's not an app development thing, it's an OS thing. Thanks for the explanation.