skysight-inc/HackerNews huggingface dataset:
> They don't know what TLS is and they don't know what the prefix is, but they do know the difference between "google.com" and "avs.net".

Sure but hiding www won't make google.com or avs.net more obvious.

This is an example that I wrote in another comment.

Before the change: www.google.com
After the change: google.com

Before the change: google-secure-payments.google.via.net
After the change: google-secure-payments.google.via.net

In the past, I guess the second URL would have included www at the beginning.

The dangerous one didn't change... the not dangerous one did change but doesn't matter really. They are just as similar.
Node.js Boilerplate to Speed Up Your Project Development
>"In this case, every 24 hours, they guaranteed me a doubling of my bitcoin, and said that if I would just send them some bitcoin I could start seeing returns."

Flashbacks of ISK doubling in Jita
No, you're not right. How you render CSS and the page have very little to do with how secure your app is.

SQL escaping, session handling, etc all come easily with standard php libraries. So "I didn't bother with any PHP frameworks" doesn't mean the dev wrote an SQL connector.
It's actually even worse than that, OP's exploit only scratches the surface of what's wrong with Steam's security model on Windows. The whole program directory is world writable including the Steam service binary which runs with local system permissions, and it's been this way for YEARS. See: https://news.ycombinator.com/item?id=20633929
Houston doesn’t have zoning and it seems to work just fine.
I was going off this spreadsheet (linked from https://www.colorado.gov/pacific/cdphe/laboratory-certificat...): https://docs.google.com/spreadsheets/d/1idB9BoHmA-nROLUtPyem...
For in-state the minimum charge seems to be $350 + $300 + $150 + travel costs = roughly $1000.

But it's true, my research for this comment was inadequate.
Even the most "green" politician must court the votes of people who've become comfortable in this modern lifestyle and are unwilling to see it changed. And most of those are on the take from big corporate donors.

If AGW has a solution, it lies only in drastic population reduction and a complete rewilding of the human race -- what Daniel Quinn called "living in the hands of the gods". This lies well out of our culture's Overton window, but more environmentalists are taking a long hard look at it.
Sure but for that person is “use a no-nonsense lamp stack” going to result in a better outcome than them just starting with react?
Bring your wetware and top it off with a thinking cap.
It goes without saying, but dont talk to anyone about doing anything that could be misconstrued as illegal.
It is because the internet collectivizes the ignorant public and you can use them as the army of the ignorant to defraud me of my basic rights to general computing.

The game industry and microsoft are well ware of the publics lack of understanding of how computers and computer networking work. Two pre-requisites you would need to have a functioning market. The information asymmetry between game buyer and game maker is off the charts.

I who do not want DRM and spyware in windows 10 are now forced along because ignorant parents buying computers don't understand or don't care about such an issue. Meaning I lose control of my rights to own my own files and not be spied on because the worlds global public is computer stupid.
This _is_ a good video, thanks. This whole thing reminds me of bullshit software patents.
When you're trying to cut the BOM and weight, sharing a network can seem like a good idea.

Also industries have cultures, and dunning-kruger often applies outside their core domains.

For example: I did some work with Mercedes (no insult to them -- I've happily owned several of their cars). They were "real" engineers; the "schnook" of the door when it shut. The brake-by-wire folks modeled everything in Matlab, developed multiple implementations, But the entertainment system? It's not "real" engineering, so is typically subbed out to a canonical or cheapest bidder based on a powerpoint bullet list. The result: really really safe vehicle, but the user's actual experience (outside the driving) is not encouraging.

Same issue with a BMW I had: ECU always kept the pollution within spec; the car always started instantly when I turned the key no matter the temperature or environment, but the seats and windows would move randomly.

And we all suffer from this: when I worked on power plants I was (and remain) horrified by the shitshow that is SCADA and the HMI infrastructure many of the other "absurd" things I saw, well, some patient people would show me what an idiot I was and that there were very good reasons for doing things that looked to an outsider like headstands.
Show HN: Auto-generated data-driven analysis and visualizations of econ. growth
Cardinals vs. Chargers Live Streaming
https://www.reddit.com/cnap9v/

https://www.reddit.com/cnapaf/

https://www.reddit.com/cnapb6/

https://www.reddit.com/cnapc0/

https://www.reddit.com/cnapcc/
Outside temperature is pretty impressive indeed. The map also shows projected flight plan and ETA, which would not come purely from GPS.
So people hack planes now. Well this is just great.
I mean, I tend to give all of my friends a hard time about sweets and sugary drinks, and expect the same. Most everyone I know understands that it’s best to avoid sugar, but it is both truly ubiquitous and extremely addictive so it’s essential impossible. Trying to not get into an icecream/chocolate habit is a never ending battle.
Elizabeth Warren proposes plan to build rural broadband networks
When bus fares are increased to account for the actual cost of the bus system, then let’s talk about metered usage for cars. Bus and train fares are heavily subsidized so those users aren’t paying their fair share either.
> but one man's garbage is another man's treasure.

Not entirely related, but there is usually the incentive to at least say this for a new person/team coming on because money. Especially for frontends, the new person/team we talk to when going into an existing project, says that it has to be redone because it's 'not up to standards'. That is not because it's not fine and maybe even beautiful; it makes more money to rewrite it. And job security perhaps too. So when someone says something is garbage, I need to assess the reason why; is it garbage or does the person saying it benefit from a rewrite somehow.
Metal is written in C++. Try to display graphics in Objective C or Swift without Metal, going further.

Which UNIX OS SDK uses a C++ GUI full stack?

One could argue for Kubuntu or SuSE, maybe, except KDE isn't tied to a specific OS and then again it uses Qt alongside QML since Plasma, so no pure C++ stack here.

And since you missed to fully read my comment, here it is again:

> Microsoft is the only consumer OS vendor that still supports C++ for doing full stack GUI apps
I think there is a big market for the SE. Aside from people like yourself who like the form factor, I want buy them for my kids. A) They are cheap, B) with an otterbox they are pretty much indestructible, C) I can use the apple ecosystem to do a bunch of stuff like backups, tracking, remote wipe, reuse apple music subscriptions and purchased music, etc. D) if it breaks or gets lost, I only get 50% mad.

My son has had one for 3 years, it's still great. I stupidly bought my daughter an iphone 8 because they didn't have the SE in stock anymore, and she dropped it 100 times (with case) and then finally dropped it in the toilet. I have $250 left on the installment plan, so she's sans phone until I buy her the cheapest Android imaginable as that's my only choice these days.
I was already blocking ads via uBlock Origin, but now I may start blocking third-party scripts by default.
Receiving Images from the ISS and Listening to Hams with an RTL-SDR
Not necessarily. If the new developer rewrites in a modern framework again but the user experience becomes terrible (looking at you modern reddit), then the new developer cannot really say that. As a developer, I understand the hard to update CSS etc but that is far better if the user experience remains great.
Top blogs to help you become a better project manager
It only operates in Tokyo bay to answer the first question that everybody is going to have.

Transatlantic and transpacific container shipping is still going to be among the last sectors of the economy to be electrified.

It's probably more practical to build modern sailing ships than to try to electrify bulk overseas cargo shipping. Or maybe a hybrid approach where the sails are also lightweight efficient hardy cheap solar cells that turn electric motors to add a few knots to the speed during the day.

But even then you need massive energy storage to make sure you have power to maneuver in a storm.
There are so many features I want in a phone, and can't get. It's very frustrating.
I bought an iPhone XS last year. I don't know if I've ever been this completely, holistically content with a digital device before. Literally the only hardware improvement I can think of that might convince me to upgrade before it breaks is a smaller screen, for easier one-handed use.

I'm sure they'll come up with something eventually. But as a gadget enthusiast, it's weird not to be clamoring for details about the next model. My phone is like my car now.
You forgot about:

"Oil industry is totally not lobbing against any movement that could bring us closer to the solution"
It involved an Apple Watch app that was essentially that. You’d set up your matters beforehand and use a one button start-stop timer with voice dictation for notes. It was an improvement in my opinion.

Security concerns around the product itself make it somewhat more complicated given the sensitive nature of the data.
Simple answer: Because the stupid hipsters try to change a simple concept of a state machine into MVC hell.

More complicated answer: The weak side of the open source world is that it attracts a lot of developers with big egos who think that their fancy solution to a situation without problems is the best one. And they all compete with their too big egos and complicate our open source world.

Real answer: too much memory, this causes people to come up with too complex systems as there is hardly a limit to their dreams, real inspiration comes from dealing with limits. That is why programs from yesteryear are often so good when looking at what they do within their constraints.
I found if you pressed and held the mouse in one spot often a human-like head would form. Really neat.
This sentence explains the issue in modern web development: "Browsers are only capable of executing JavaScript, so when there are limitations in the JavaScript language, it’s not like you can just use a different language; you have to work with what you have."

Yes, you can use a different language. You can use a back-end language and let the server do what it does best. PHP, Ruby .Net, Python (and more) are still very much alive and relevant.

I understand what the writer meant to say with the sentence, and the specific limitations to JS. But the real issues are in a notion that JavaScript is the one language to rule them all. That is very misguided view (IMHO) that took over the web.
It actually really annoys me when this happens. My building's mailroom is only open Mon-Fri, so despite the effort put in to deliver as fast as possible, I still can't receive it until the following Monday night.
I think the main problem with the current Javascript UI frameworks is that they introduce an 'abstract middleman'that distances developers from what is actually happening in the browser. I expect there are many web developers unfamiliar enough with MVC that they are drawn to the Javascript frameworks even though MVC isn't a particularly difficult concept.
It's not possible without impeding peoples reproductive autonomy, it can only be slowed or discouraged, and it needs global buy-in.

Similar to how we tax things which we want to curtail use of, some countries might not tax the same thing and it causes an imbalance.

I'm not a politician, I'm an engineer and thus lack a lot of foresight and compassion that might be needed to understand this properly, but if I were responsible I'd probably approach it like this:

Step one: Identify the problem on a global scale, broach the idea with partner countries to enter an introductory treaty to at least acknowledge that we need to slow/reverse human population growth. Make objectives that ensure that our economies do not rely on population growth.

Step two: use the treaty to gain leverage over non-parner countries. Same rules, just acknowledge the problem and set some objectives to ensure that economies aren't tied to growth.

Step three, amend the treaties to slow the increase of the human race, ensure that partner countries bestow penalties on households with more than 2 children. (Additionally: Ensure that single parent households are only having one child, this could cause turmoil otherwise)

Step four, push for the reduction (or removal) of any benefits related to a second child birth, remove any/all income benefits for a second child, increase the benefits for a first child (must be a first child for both parents)

Step five, attempt to promote having a second child in media as a "very selfish" thing to do.

Step six, apply heavy taxes on dwellings more suited to 4 people families, attempt to reduce creation of such dwellings though tax incentives.

Step seven, finally, if everything fails, tax the families of those with more than a single child born after the date where this law is ratified.
Or, Ada, no? :)
I'm not blaming the tools, but too often, at least (for me) based on multiple interactions with various devs/engineers - yes, sometimes on Twitter :) - tools are proudly spoken of as a proxy for quality product. That is, I'm using the latest wiz-bam shiny new object tool so the users of the product must be overjoyed.

Nah. Nobody cares. I think that bears repeating...Nobody cares.

My mum has __never__ said to me "I love React" or "Isn't Bootstrap the best." But she __has__ complained to me about a site/app being buggy, confusing, difficult, etc. I've said the same to myself too many times to count. I think we all have.

A couple months ago, I read an article about (frontend) tools and how important X, Y and/or Z are. The author's product had a repo on GH. There were 700+ issues. All I could think was, "Apparently those tools have given his team a false sense of security. Looks like they've bitten over more than they can chew." I filed the article under: Just because you can, doesn't mean you should.

Years ago, I remember reading an answer on Quora (when Quora still mattered) that included:

"A fool with a tool is still a fool."

I don't think I'll even forget that line. It's so true. I'm not against tools. I'm just not in favor of those who claim tool X, Y or Z is a panacea.
I didn't mean long travel distances make buses go slower, I meant they amplify the disadvantages of buses, and America tends to have a lot of distance between things. If a trip would take one minute and it takes four instead, that's probably fine. If a trip would take 15 minutes and it takes an hour, that's a bigger problem, even though it's the same relative slowdown.
^El Pueblo, Little Tokyo, Fashion/Flower/Jewelry/Finance districts. About as clueless a post as I've ever seen.
Yep. Also, they straight up stopped improving from a user perspective. Better specs doesn't mean more value.
You can argue about whether we need more humans or not, but a tour of any dog pound should tell you that we sure as hell don't need any more dogs. They should just add these chemicals directly to dog food.
I'm not being hostile, I apologize if you took it that way. I'm just making a point about how so many dev's claim to have the right answer until you need to rely on them to get something done. Projects turn to a mess mostly due to things one single person cannot control. I don't know a single person, including myself, who've thought that their code didn't look like shit 6 months to a year down the road. I think we always get better and we'll always criticize what we don't know and understand. This includes mountains of other peoples code (garbage or not).
I'm slightly astonished that the 3 networks mentioned aren't airgapped. I suppose the entertainment system needs to know where the plane is in order to display the flight map, but that should be provided by a dumb serial link with the RX wire cut.
That is the whole point of safe-frames, which are default in DFP.

>While SafeFrame shares information with ad content served to its API-enabled iframe, the publisher chooses what to share and can protect sensitive consumer information like personal email addresses, passwords, or even banking information.

Docs for DFP: https://support.google.com/admanager/answer/6023110?hl=en
Spec: https://www.iab.com/guidelines/safeframe/
The "burn it with fire" option for gradient logos and bathroom selfies makes this chart much less useful.
I think there's no rule, it depends on the startup, its market, and the potentials ahead

Imagine you be the first employee in a startup that has the potential to become next Uber?

Or a startup that can't be big enough, which the majority of startups are here, in this zone

You should find even 0.5% of Uber is better? Or 40% of an average startup which finally will have a value between $10-$100 million
I'm sorry if you thought I meant CSS rendering was the source of potential vulnerabilities, but for any website that has, say, users, if you're not using any PHP frameworks or external libraries you might have to implement some crypto of your own to store passwords securely, just for starters. I don't think PHP offers a standard library to do that, does it?

There are a hundred examples that are specific to whatever app this guy built for the Healthcare company, not all of which are covered by the PHP standard library...

I believe him when he says it passed external/internal auditing, however I have a very hard time believing he's not either very very expensive or took a very very long time to get the app to the place he claims it is (the third option is that it does very little, which won't actually end up being a good thing once the client gets over the honeymoon phase of "it's so much prettier!!!").

Further, the expertise I do bring to this conversation is in software development, and I can say assuredly that a one-man development team using no 3rd party libraries is definitely creating a codebase nigh unmaintainable by other people down the line. His bragging about creating job security for 2 years is honestly an understatement; he's got job security for the life of the products he's creating, as he's likely the only person who can do anything more with the website in a time frame that isn't measured in years.
Cruise Security: Automating Firmware Security with FwAnalyzer
> Yet even the most hardcore “green” politicians talk about the issue as if we can drag our frets another decade or two with minimal impact on current generations. Why the big gulf here?

Green politicians demand action yesterday, 'Green new deal' politicians demand 30% reductions in the short term, left-wing politicians who are in power promise 30% reductions over the next 15 years[1], right-wing politicians who are in power promise 30% increases over the next 15 years.

The problem is that:

1. In non-proportional-representation countries, a vote for green is a wasted vote.

2. In proportional-representation countries, greens get some votes and government seats, but whether that translates into political power is dependent on blind luck. Depending on how many seats other parties get, they may be included in a coalition (And thus, have some influence on policy), or completely shut out (And thus, have no influence on policy).

3. The United States is the biggest per first-world polluter, and thus has the most low-hanging fruit to be picked. But all else being equal, it tends to vote right-wing. [2]

PS. Before anyone says 'China' - China's emission policies can be influenced by tariffs. We just need to get off our asses, and clean up our own house, first.

[1] Of course, they won't do anything to curtail carbon-extraction industries - they expect the rest of us to sacrifice so that petro-firms can keep making money.

[2] The only reason US emissions have been holding steady, despite 'coal now, coal tomorrow, and coal forever' rhetoric, is blind luck. The unit economics of natural gas became good, because of fracking, and it emits less CO2 per KWH than coal. If it weren't for fracking, the US would be right on the path the Republican party wants it to be.
Does Uber carry approved child safety seats?
They'd lose the ability to differentiate themselves (only on this specific criteria, but definitely affects overall competitiveness), thus having to compete more on price, which is great for customers but bad for companies.
If it does, it will be a gold mine for US lawyers
GP remembers correctly. From http://longnow.org/seminars/02009/jan/16/climate-change-reca... :

> In other words, the land area dedicated to renewable energy (”Renewistan”) would occupy a space about the size of Australia to keep the carbon dioxide level at 450 ppm. To get to Hanson’s goal of 350 ppm of carbon dioxide, fossil fuel burning would have to be cut to ZERO, which means another 3 terawatts would have to come from renewables, expanding the size of Renewistan further by 26 percent.
It's definitely worth remembering that what sounds idiotic in specific cases is often either gambling or a principal-agent problem on a systemic level.

Growth potential and demand elasticity are both hard to predict, so VCs are betting on high growth and trusting that one high-demand win can pay off 100 or 1,000 losses. (The people chasing proven revenue with unknown growth potential are banks, investing in things like expanding existing stores.) Did MoviePass show a <1% chance of succeeding? Probably. <0.1%? I'm not so sure.

As for founders... Often, they're gamblers or extremely self-confident. Less generously, the field attracts a lot of people who are happy to burn someone else's money on a ridiculous narrative, while their actual focus is on getting acquired or elevating their personal reputation. (And heck, there are VCs doing this too. Consistently returning 25% on your fund is nice, but funding Snapchat will get you a job at a fancy Sandhill office, and funding Facebook will get you treated as a rainmaker and even a political player.)
I intend to argue in the general sense. People will, in general, be distracted while driving. One protection is to simply be in a heavier vehicle so that you can survive more collisions when you're in a distracted state.

An alternative solution is "don't be distracted", but that doesn't seem to work in practice.
yospermtest.com sells an at home test that is basically a magnifying lens and collection tray that attaches to your phone, and an app to analyze the sample.

edit: Yes, the referral thing is absurd. People answering the phones at medical offices when I've called trying to give them money will act confused or even offended if you ask how much things cost. Thankfully there are some new businesses like this chipping away at the edges.
It was inevitable when they started censoring the red team. I for one am glad that they are researching how to do it, social media is the new public square, and no entity should be able to control it.

The article itself says that Republicans are skeptic about the government deciding when it is politically fair, so it will probably end up being a more elegant solution, like removing CDA 230.
I'm surprised that IOActive backed him up on this, seems like it's treading a line that businesses normally are very conservative around. I very much expected him to be unaffiliated with a large organization after reading that.
I feel like Software Eningeering and Contract Law have many parallels and similarities. What does a contract and a codebase have in common? 90% of the content is covering bizarre edge cases and eventualities.