skysight-inc/HackerNews huggingface dataset:
For GDPR compliance notes please see: https://usefathom.com/data/

> You don't need to "brute-force" the hash, you just need to find a user that matches your hash... which is 1 in 7 billion (or so), much more tractable. This is also the principle e.g. MD5 rainbow tables are based on...

Not quite. We use a SHA256 hash as our salt, and that changes each day, so you'd need to brute force that.

In terms of how many possible combinations there are for this salt, please see: https://stackoverflow.com/a/49520766 - you would need to brute force it and try each possible combination with every single possible IP / User Agent / Site combination to break a hash. This is why it's not theoretically impossible but it's practically impossible.

We would love to approach things in an easier way but PECR doesn't want cookies, even anonymous ones.

Now, one thing that we have uncovered thanks to someone on here is that we need to increase our resistance to data breaches. If someone had complete, unlimited access to all our data / servers, including the daily salt, then they could de-hash page views from the last 30 minutes. I have no idea how long that would take. There are 4,294,967,296 (?) possible IP addresss, and then over 3M (?) user agents, so it'd be an absurd, pointless exercise.... Anyway, we're going to be bringing in multiple salts that depend on the user IP address, meaning that, in the event of a data breach, a hacker won't know which salt has been used for a hash :) Perhaps we base the salts on the first 3 digits of an IP address? That would mean we'd have 720 possible SHA256 salts!
This works fine in Nix because those package names are the names of derivations that themselves pin a given version of said packages.

In practice, the default set is expected to be somewhat internally consistent, so that you can just use the package names to refer to the "most recent consistent set". But if need arises, you can also override individual packages to pin them at a different version than the upstream-provided one.
Or the current claims in the South China Sea https://twitter.com/indopac_info/status/1102650429458931713
What you describe basically seems like IndieAuth[0]. It would seem to be a good way to validate account identity as well as a way to do so without having secure credentials on the server, for an anonymous-by-default forum.

[0]https://indieauth.com/
Well, there are/were a whole bunch of related problems and scenarios discussed in that and other threads, so it depends which bit we're discussing. (1) errors consumed by asynchronous kernel activity that never make it to user space; (2) write(), write-back error not reported to user yet, buffer page replaced, read() sees old data; (3) fsync() -> EIO/ENOSPC, then fsync() -> SUCCESS; (4) write() in one process, then fsync() in another process from a different fd; (5) write(), close(), open(), fsync().

It seems that the developers of database software and kernels/filesystems had different understanding of what should happen to error reporting in those cases (and maybe some more that I'm forgetting). PostgreSQL and FreeBSD happened to agree and all of these scenarios do the right thing (IMHO, but you could call my opinion not impartial, since I am involved in both of those projects). Linux has had various different behaviours since Jeff Layton realised how terrible it all was and started improving it, starting from (1) which were straight up bugs. Some problems still exist. OpenBSD also made recent changes due to the noise generated by this stuff. So I genuinely don't understand how anyone can argue that there was nothing wrong or imply that it's not complicated: the maintainers of the software in question apparently disagreed.

In my humble opinion someone should go and talk to http://www.opengroup.org/austin/ and try to get some increased clarity here for POSIX 2022. Maybe I will find the energy if someone doesn't beat me to it.

By "I will deal with it", I didn't mean I can fix a hosed server, I mean something like "the database will fail over to another node, or enter recovery" or something like that. And, since we (and other DBs who apparently read our mailing list) introduced panic-on-fsync-failure, that's what we do. There are still a few edge cases to fix, though. We're on it...
NY State's Cat Declawing Ban Is Now Officially Law
So Ripcord is created by one person in his spare time and it performs blazingly-fast and supports Slack whilst Slack's own client is maintained by tens if not hundreds of engineers and it still performs slower when joining more teams, consumes significant amounts of RAM and they create this blog-post about performance improvements whilst still using Electron.

Understanding on why Slack is unable to create a performant desktop-client for their users is beyond me. I also wasn't able to use Slack and Discord at the same time on my MacBook without it swapping on the SSD. So Ripcord seems to be a good lightweight alternative for me.

I just wish it supported Keybase Chat so I can ditch that Electron garbage too.
It looks like something similar is going to be legally required in the EU [1]. For encrypted chat apps like WhatsApp, the content filtering database can simply be baked into the client application [2].

[1] https://torrentfreak.com/eu-members-approve-upload-filters-f...

[2] https://www.bloomberg.com/opinion/articles/2019-01-25/how-to...
I guess I just mean to say that I can still have the abject wonder about the world we see around us and have reason to believe that there was something (as opposed to nothing) responsible for the entirety of existence, without having to fall back on saying that MY religion is the reason for this to be the case.
> But only half hold down jobs during their first five years

I wonder how long it will be before the government decides to change their data format so immigrant employment numbers can no longer be associated with country of origin, under the guise of "privacy" or something like that.
Neural Decipherment via Minimum-Cost Flow: from Ugaritic to Linear B
New York Joins List of U.S. Cities Looking to Own Power Grid
> After months of tweaking even a good foundation of code, it begins looking atrocious.

Months of tweaking code is exactly what you want some test coverage for - so that you end up with a tweaked version of something where you still know what it does instead of something that does god knows what.
This is not Japan, the FED is not trading equities.

And continuous movement of price in one direction is bad for market makers. Read the linked article, it explains why.
Easy way to demonstrate the jank: switch tabs quickly on desktop Slack. The new views take a nonzero amount of time to render. Do the same thing on Sublime Text 3. Even big files with lots of syntax highlighting load nearly instantly, or at the least, much much faster.
If you already think this is a problem then this guy will reinforce you belief.

It's too pat of an answer and to wide of a subject to think that it explains these conditions.
Any takers on how long it will be before illicit declawing facilities start to pop up in storage units and abandoned warehouses?
You're right, the quality of Gimp is nowhere near Photoshop. Photoshop has tons of rounding errors and the results never look as good as Gimp.
How Janet's PEG module works

https://bakpakin.com/writing/how-janets-peg-works.html
> Electric indent

wtf is electric indent? (i'll ddg for it after i write this comment)

i've been trying to migrate my coding to emacs for 5+ years (off/on... obv) and continuously find myself back in Sublime/Atom/VSCode land.

as a user for 24 years, could you maybe point some of us lowly noobs to great resources to learn about Emacs workflow?

TIA
The Radical Who Wasn’t: a book review of Winners Take All
I have a lot of sympathy having also cut my teeth trying to improve the maintainability of a DikuMUD based variant. There were some pretty crazy anti-patterns in that code base - most of which originated with developer-lites, people who ran the MUD and just hacked at the code until it did what was needed.

I'm not certain if it also applies to FotR but the MUD I worked on also had an incredibly failable persistence strategy involving a lot of flat files that were written to in sequence - weirdly it also had a rather impressive code hot-swap system that allowed the binary to be swapped out during execution so thankfully the system wasn't brought down that often.
I misparsed this as

Two Years (With Emacs as a CEO and now CTO)

as opposed to

Two Years (With Emacs) as a CEO and now CTO.

and it greatly confused me: how could Emacs act as a CEO? It's not that smart, is it? (Or conversely, being a CEO can't be that trivial, right?)

Perhaps rephrase to: "Using Emacs for two years as a CEO and now CTO". The parse tree is still ambiguous, but a little less so.
That's an interesting point. I think I'm 10 years behind you and I've definitely found myself bumping the font size in Emacs and generally avoiding many squinty apps without really thinking about it. The solutions for UI element size tend to be aimed at good eye-sight or nearly blind with little in between.
You're right, it'd be a real tragedy if they built too many homes and just anyone could afford to live in Vancouver.
To get a sense of the severity of the problem check out this graph: https://en.wikipedia.org/wiki/Rare-earth_mineral#/media/File...

Couple that total production dominance with the upswing in patent applications and this could spell trouble.
* Github being closed-source doesn't really matter. Restrictive software licensing hurts the user of the software which in this case is Github Inc. and only Github Inc. As long as the protocol is open (which it is) whether hosted services that speak that protocol are open or closed source is immaterial. [1]

* Git isn't distributed. It's decentralized -- big difference. Distributed means there (usually) aren't any single points of failure. Decentralized means these are many single points of failure but failures are localized. Combine that with the reality that in most markets a "best option for most people" emerges and we get bigger and bigger points of failure.

* Microsoft has been trying to get into the socal networking game for a while now and found their match made in heaven with one based on software. Time will tell if the recent Microsoft will be a good steward -- so far it's been pretty good.

* Definitely a victory. The dominant VCS is open. More people than ever are contributing to OSS. It's easier than ever to share code.

[1] Github's on-prem offering is a completely different story and is very much a problem that it isn't OSS.
> They use it to get googled.

HN is a forum that doesn't show ads, doesn't advertise itself, doesn't do anything active to grow (as far as I know). It doesn't set HTML meta tags, no sitemap either.
> Research code is generally an abomination ...

http://matt.might.net/articles/crapl

> The CRAPL is an open source "license" for academics that encourages code-sharing, regardless of how much how much Red Bull and coffee went into its production.
Check out the storage servers at time4vps. I have 1TB for about $15/quarter.
I'm sort of guessing here based on movies/things I have read since I ain't no money launderer, but I think locality to the source of money makes a huge difference. If you are a local drug dealer who makes all their money in their local currency in cash, then it is probably most efficient to open up some local business like a dry cleaner (i believe that's what one of the "businesses" they had in the movie american gangster) which "happens to make a bunch of money through pseudonymous cash". That way, you would only have to pay sales tax.

If you are selling to people outside your main currency though, you need someway to convert it back and "digital" transactions seem ideal so I can see the extra cost being worth it (you just happen to have a lot of american customers who like your digital product...)
So Legion comes from Standford.
"Partisan" comes from Carnegie-Mellon.

Any thoughts on differences in your approaches?

https://www.usenix.org/conference/atc19/presentation/meiklej...
What are the benefits if they were to purchase it? This article doesn't mention any reasoning for or against doing so.
Oi, you got a license for posting that article, Brit?
I don't know if I'm buying it or not but I like this cooked/uncooked spaghetti code distinction
Apple has such in, for an example alluded to in recent news, and form personal experience, Evans Hankey.
Likewise, the South China Morning Post has broken more stories on foreign activity in Canadian real estate markets than Canadian newspapers combined.
The same way anyone gets good at anything: practice. Knowledge of the system + experience in high pressure situations and you get pretty good at solving those problems over time.
Bring back Forstall!
Just kidding. A little.
How to assess the quality of garments (2014)
OpenSCAD is much better for me than F-360, but then again I'm a coder.
Because who knows where they came from or what it was.
Thus "properly configured". However, I actually just look, and at least now, they in fact appear to be setting etags properly, so their HTTP server is returning a 304 on all the static files being served from their domain, despite max-age being set to 0, and the rest of the static files are on CDNs.

That said, nginx caching proxy or Varnish would still be a dramatic help in front of the couchdb instance they're using for their API (since their data isn't constantly being updated, they could do this).

Making a wild-ass guess, I'd say they were running the couchdb on the same droplet as their static file server, and with no caching, the couchdb instance pegged the CPU, causing the HTTP server to fail.
Trust me, we're not relying on Recital 26, that is just my thought experiment :) See here for our GDPR compliance: https://usefathom.com/data/
Wrong, it is digital fingerprint, not for encrypting. It is suffice for most cases to prevent the same image to spread, had it been blacklisted. Not all users are that tech savvy.
>Attempting a design re-write without changing the data structures will just result in the same design. And you can't change the data design without then having to change the code to match.

Sure you can. You decouple your data structures from your schema with an abstraction layer, facade, etc.
> I've also heard some people argue if you're investing a decent amount, you're better off with commissions over market orders on Robinhood.

If you're investing a decent amount, you're better off using limit orders. No real debate to be had there.
I just tried Ripcord with an old Slack account and it seemed to be working fine. I've not encountered any issues on my end so far.
Superb link. The end is humbling,

“What gets me is the thought that even trying our best to figure out what's

true, using our most sophisticated and rigorous mathematical tools: peer review,

and the standards of practice, we still get it wrong so often; so how frequently

do we delude ourselves when we're not using the scientific method? As flawed as

our science may be, it is far away more reliable than any other way of knowing

that we have.”
I have had SanDisk, Kingston, and Sony cards die on me in a variety of devices from Pis to GoPros. Sonys were the fastest to die but retained read capability, where as the SanDisk just stopped functioning completely.

My most recent additions are a Samsung Evo card and a Samsung Endurance. I am curious to see which dies first.
I agree, spaghetti domain seems to be a useful concept.
It allows you to just get on with coding a solution.
For over a year i was running 5+ Slacks in the Electron app, and continuously noticed how much memory was being hogged up. After some basic research, I realized that Electron is basically a wrapper of a Chrome instance. Suddenly i understood where my ram was disappearing to because so many "native" apps running in Electron were literally just spawning new chrome instances and gobbling up ram.

I now do my best to keep my website apps running just in Firefox containers.

Electron feels like the last rush of "write once, deploy everywhere" days of flash and Adobe air. God save us all.
The dynamics of intense work groups: A study of British string quartets (1991) [pdf]
The Gell-Mann Amnesia Effect[0] should be considered a phenomenon everywhere on the internet where discussion occurs, not just in media, because most people claim far more expertise on subjects than they have. I just assume, now, that anyone on HN discussing any subject other than programming is probably wrong unless they specifically mention that they have direct knowledge in the matter. Otherwise, they're as credible as an anon on 4chan.

[0]https://en.wikipedia.org/wiki/Gell-Mann_amnesia_effect
Two things I remember from the webvan era- 1) how benchmark navigated / debated their investment (chronicled in https://www.amazon.com/eBoys-Inside-Account-Venture-Capitali...), 2) at the precise time that webvan was failing, fresh direct was succeeding but no one outside of NYC heard about their success because webvan failed so spectacularly.
This is really what sold UBI for me. Making it possible for more people to give entrepreneurship a try and explore their business ideas seems like it could be very valuable to our society. I'm not saying it would be a slam-dunk great investment, but it would do a lot to address this inequality of risk-taking ability.
Why does slack and gmail use so much memory? It feels like it shouldn’t be an intensive process to display messages. Sidenote I don’t have much front end development besides basic web pages.
In the long run it may be fine. In the short run, crashing housing bubbles can bankrupt families and cause chaos in both financial and job markets.
The problem is people like Jordan Peterson are very careful who they choose to argue with, when paired against a skillful interlocutor, such as Matt Dillahunty, Jordan's arguments can be shown for the bullshit that they are.

eg: https://www.youtube.com/watch?v=FmH7JUeVQb8

The appeal that his particular block seems to be entranced by is his unique ability to engage in cheap rhetorical tricks. Those who are skilled in debate can recognize these logical fallacies but a weaker interviewer will fall to pieces. As Jordan seems to be more interested in engaging in interviews with weaker orators these debates usually fail quit spectacularly. Much like watching a train wreck you can not seem to avert your gaze. His acolytes seem to derive a great sense to schadenfreude from this.

When faced with a skilled rhetorician such as Jordan Peterson the more simple solution is to disengage from his oratorical slight of hand and ignore him for the jackass he is. You may consider this punishment, others consider it withdrawing from an uphill battle from a renowned quack that performed philosophical debate in the same manner and school of thought as the Gish Gallop.

Arguing with Jordan Peterson is tantamount to arguing with a flat earther. Rather than give platforms to these charletens it is best to ignore them.
That's ridiculous, they were hacked through Struts CVE-2018-11776 that was discovered a month before the hack, if appointed security officer was monitoring CVE lists for their software, this would be patched.

Moreover, their DLP system was offline for the period of hack due to certificate expiration.

IANAL, but there was a clear case of negligence.

-- ed:

There were winning cases against equifax. the payout was awarded for the damages - 3 years of credit counceling and monitoring, something in $6k range.
Reproducibility is one of the core problems of the article. I'm not sure any format can assure understanding by itself - that's more the purview of the reviewers I would think. Applying the criticism to my own suggestion: even the reproducibility issue is only tangentially helped by a Jupyter format, it may only bring reviewers to the point where one might execute the notebook (though there are still issues there if its an exceeding long computation or needs special hardware setup, or the notebook executes w/o demonstrating actual computation).
Weak baselines are not necessarily inappropriate. If using a new approach the point is to show that it is a viable direction for further exploration and refinement, not always whether it can beat finely tuned, well explored approaches.
> Or would you attempt to pilot a helicopter without proper training?

No... not unless i had to.

But where does a coder find emacs gurus to teach them the ropes?
Liberal idiots strike again...just mentioning Trump gets them all triggered. Encroaches on their 'safe space.' Lol
This falls under very specific genre of Hacker News comment that has always struck me as profoundly uninteresting.

Github built something that inarguably made development better.

- They host some huge number (tens of thousands? hundreds of thousands? millions?) of repositories for free.

- They built Github Pages for people to ship websites and host those for free.

- They built an intuitive flow for managing issues and pull requests, which is included with every repository for free.

- They integrate freely and openly with all sorts of third-party services, some of which compete directly with them. That's quite uncommon for a for-profit software platform of their size.

- They have given back immeasurably to the programming community, to the open source community, and to developers including sponsoring conferences, donating office space for events, etc.

- Their developers widely share their (i.e. done at/for Github) work and contribute upstream.

There is some argument that all of the above are self-serving for Github, which is proven false if you talk to a single developer at Github.

Do they adhere to every idealistic principle of FLOSS? No. But, honestly, who gives a crap?

So, to answer your question of WTF is going on: real, positive progress.
There isn’t a “must be non-trivial” requirement of patents. The broadest statement in 35 USC 101 can be boiled down to “new” which is interpreted as “novel and non-obvious.” If these “trivial” patents are “novel and non-obvious” then they are likely eligible for parenting in the US.
I was so hoping that they had dropped Electron.. but nope. At least they’re focusing on performance, but the achilles heel will always be there.

That said, as much as I dislike Electron, Microsoft has done a fine job with VSCode, so there are ways to do Electron “better”, even if the “best” Electron apps are still mediocre compared to native apps
Implementation question:

Whats a good way to generalize such a python script so that windows and nix users can run it?
There's only one political position that anyone can speak, why would you need to justify it?
This might help answer that:

- https://www.quora.com/Why-did-Elon-Musk-quit-OpenAI-Is-he-af...

- https://www.bloomberg.com/news/articles/2019-02-17/elon-musk...
6 arrests https://www.hongkongfp.com/2019/07/23/5-arrests-hong-kong-mo...
HTML email, was that your fault?
Alkaline batteries start off at 1.5-1.6 volts and the voltage follows the charge reasonably linearly down to about 1.0 volts. So that's correct, alkaline batteries at 1.5V per cell are 'good' full stop. Where a rechargeable at 1.2V might or might not be. Who really knows if it charged all the way[1][2].

[1] Gallant is careful to put his nmh batteries in the the charger each night. Goofus got high and forgot. In the morning Goofus swapped his dead ones for the ones in Gallants charger.

[2] Power went out between 11pm and 6am while everyone was asleep.
From the Ripcord site:

"Features

- Not made from a web browser"
For flexibility and ease of understanding, I still prefer nondeterministic monadic parser combinators. Not sure why, but its the only way I can write a decent parser.

Too bad they are so slow.
> The most obvious difference is that Git's index is a bit boneheaded, so I'm ignoring it.

I use the git index nearly every day. I suppose it is possible to implement something like git without it but I would find it quite a bit less useful.
If AliExpress wants to cap my yearly 2 day shipping fees to $120/yr, I'd take that deal.