skysight-inc/HackerNews huggingface dataset:
Like other commentors, I have astigmatism. Something not mentioned by other commentors; I have highly asymetrical astigmatism. Reading #FFF against #000 (dark on light or light on dark, either way) with both eyes open causes vividly strobing blue and red visual artifacts.

Stark black text on stark white background can do this, even though stark white background washes out the color artifacts to some extent. Fortunately, it's extremely unusual for anyone to lay out a page as #000 text on a #FFF background.

White text on a black background is a strobing hell. A dead black background is the perfect place to notice visual artifacts. Blazing white text sets visual artifacts effectively. Regardless, I use light-on-dark for much of my work. The problem I run into is that websites often end up being white-on-black, not light-on-dark. Light (not-white) text on a dark (not-black) background is pleasant, and my normal configuration for work.

Web design tutorials typically point out that #000 text on #FFF background is bad, and avoiding such extreme contrasts can be easier on the eyes. For whatever reason, that bit of know-how seems to vanish as soon as it's flipped to "dark mode".
Google tightly colludes with government agencies to illegally spy on the American people.

They insta-fired James Damore for writing a memo that criticized the dangers of Google's political echo chamber. Read for yourself (https://firedfortruth.com) and draw your own conculsion as to whether or not he was being a mind-bendingly sexist bully, as the media claimed.

They routinely kill off successful products with little or no warning and no migration path.

YouTube refuses to provide clear guidelines to content creators, instead censoring and demonitizing anything that does not abide an ever-narrowing and increasingly violent political narrative.

They engage in massive amounts of AdWords fraud to drive up their revenue numbers.

https://en.wikipedia.org/wiki/Criticism_of_Google

What did they expect?
I was able to increase the font size of the whole page in two taps in mobile Safari.
Not necessarily (I haven't thought about the issue too much).

My point is more that, if insurance companies discriminate using any non-genetic, non-biological criterion, the outcome would still not be a distribution strictly representative of the population. Because people's choices are influenced by their background. For example, it's quite probable that the distribution of brand and type of car is not uniform across racial lines (or between men and women). Would you consider the outcome resulting from this to be biased?

In fact I'm pretty sure it's how European insurance companies still manage to charge more for men, despite being forbidden to explicitly ask that information. That information still affects the pricing model through things like occupation, etc.
"But many of the questions related to software embedded internally in Google's Chrome browser that employees worried was designed to monitor large gatherings. The software engages when employees try to create meetings for 100 or more workers.

Pichai and others said the intent of the software is not to prevent meetings or to stifle conversation, but they acknowledged that its implementation was flawed."

If I am not mistaken Google has recently made a change to its Chrome browser (77.0.3865.105) that removed the ability to disable javascript, cookies, etc. (via chrome://settings/content or clicking to the left of the address -- "site information" -- in the address bar) for all websites when in Guest mode. It can still be disabled for individual websites.

Assuming I am not mistaken, suprisingly, I have not read anything about this change. Is it possible there was no intent to stop users from turning off javascript and cookies and this was simply another example of a "flawed implementation".
There is a way to send any type of file through messenger without facebook snooping into your private life.

1. Compress the file you want to send in an password protected zip.
2. change the extension of the Zip file (.zip) to text file (.txt).
3. Send the file trough Messenger.

I already did it to send MacOS application to a friend. To avoid size restriction, compress in several zip parts, rename the extentions to .txt and send.

File size can be as high as 50mb+.
It's a pseudonym for someone

See https://en.wikipedia.org/wiki/Nicolas_Bourbaki
That reminds me of how The KLF (as The Timelords) bought a used Ford Galaxie police car and used it as the "frontman" for their group, calling it Ford Timelord. They repainted the logo on the doors, but the black and white coloring is original I think and they kept the siren.
You already got some great answers. If you need more book recommendations:

Major account sales by Rackham is a classic

How to sell from Entrepid is an algorithm you can follow
https://static1.squarespace.com/static/57daf6098419c27febcd4...
I think he was just having a bit of fun :-)
D allows you to export an obj-c api. This won't help much on the android side, but would definitely help with talking to swift on the ios side.
Exposed private keys are are problem. But there are several open source solutions for this. I recommend keymaster (https://github.com/Symantec/keymaster) as it is designed with madatory 2FA and a user flow that does not require you to leave the CLI. (I am one of the contributors)
The Model Y could be a game changer for Tesla
Overhead gas lines aren't an option.
Been using this font for about 6 weeks now, and from my experience i actually found this super readable and easy on the eyes. Had to just make font size slightly larger in VS Code, but very happy with this.
https://freshcode.club/ is the successor to freshmeat, not sure how well known it is though.

https://sourcehut.org/ is what I recommend for publishing code when one doesn't want to use GitHub/etc.
My understanding is Spotify (premium?) can also serve low quality audio when the user has a poor connection? YouTube compression is horrible but passable for many people, I think. People listened to music on AM short wave and medium wave just fine as well. The key point was that radio was readily available.
> but that doesn't mean "public keys are not enough for SSH security", right?

With direct key-file access, bruce-force is very fast so it will depend on the passkey length.
Not sure why this is so low on the page, as it was incredibly helpful. I even went to the author's archive directory [1] so I could read his other posts about sales and life running/selling a SaaS company. He is candid and knowledgeable. Definitely bookmarking — thanks for the link!

1: https://training.kalzumeus.com/newsletters/archive/
Any chance you can share the name of this place?
Here is 20 promo codes for 2-years Pro plan for free:
W6F2C5
LFUUEK
PD1R93
KQOH43
VH0C7G
A3TLB3
5PD6UB
QZ3FPH
02MT53
AFEZSZ
Y9R2PA
2412RQ
39FEIO
G39GWH
CZEMCX
VRHNJN
8VNGLT
CDJHT0
TGLB1P
7NGB9K
SoftBank to Layoff 4000 WeWork Employees Globally After Acquisition
which is not allowed on iOS ...

Edit: Sorry for being unclear, was only referring to the updating JS on the fly and circumventing App Store part. Obviously (facepalm) ... ️
You have to draw a line somewhere, otherwise we might as well say "don't run SSH at all".

If worrying about a private key leaking is that much of a threat, institute key rotation policies and have people generate a new key pair every month and push the public key where it needs to go and remove the old public key a month after that. Agents allow multiple keys, making this easy to handle on the client side, and if you don't have a way to track and push keys to servers, you should. The one month overlap should be plenty of time for people to get a new key generated even allowing for vacations and most extended absences, and it's not that hard to fix if someone misses the deadline.
JavaFX was initially J3, and then it was rebooted into XAML like.

Also you're forgetting Longhorn SDK was available as preview before the project was canned.

But yeah just conspiracy theories from my side.
Ha. Pretty awesome. No luck using the back button to get back to Hacker News, but I guess that's unsurprising.
It's pretty well studied that most teenagers stay up late.

My freshman year of high school my school was under construction so I was bussed across town. Which meant I had to wake up close to 5am. I don't remember staying up especially late, but I was perpetually tired. Id sleep on the bus both ways.

In college I had a semester when I had a 5am class. I found it much easier to stay up all night and crash after than to wake up for class.

https://www.sleepfoundation.org/articles/teens-and-sleep
I don't quite understand the XML fetishism. HTML is originally based on SGML, and SGML is every bit as structured as XML by definition, since XML is specified as a proper subset of XML. From the XML spec:

> The Extensible Markup Language (XML) is a subset of SGML that is completely described in this document. Its goal is to enable generic SGML to be served, received, and processed on the Web in the way that is now possible with HTML. XML has been designed for ease of implementation and for interoperability with both SGML and HTML.

The "generic" part refers to XML being canonical, fully-tagged markup not requiring vocabulary-specific markup declarations for tag omission/inference, empty elements and enumerated attributes like is necessary for HTML and other SGML vocabularies making use of these features.

That XML has failed on the web doesn't mean one has to give up structured documents. In fact, HTML can be converted easily into XHTML using SGML [1]. If anything, markup geeks should embrace SGML (an ISO standard no less) to discover the power of a true text authoring format. For example, SGML supports Wiki syntaxes (short references) such as markdown.

[1]: http://sgmljs.net/docs/parsing-html-tutorial/parsing-html-tu...
Recently @hackerfantastic on Twitter has a few videos of hacked Diebold voting machines [1,2,3,4] along with a blog post [5] and the git repository [6]. From this I followed the link to a video on twitter on how to get admin access on some voting machines.[7]

[1]: https://twitter.com/hackerfantastic/status/11874911773035520...

[2]: https://twitter.com/hackerfantastic/status/11881873784368046...

[3]: https://twitter.com/hackerfantastic/status/11872782894353899...

[4]: https://twitter.com/hackerfantastic/status/11881788254876057...

[5]: https://hacker.house/lab/hacking-elections-diebold-accuvote-...

[6]: https://github.com/hackerhouse-opensource/electionhacking

[7]: https://twitter.com/RachelTobac/status/1028437783050776576
Heh, you made me consider if kudeki-chain also restricted the range (though not to a constant):

One could read the title as exactly n leading zeros, but of course, it just means it has n leading zeros (that is, it may have more, too) - and the py code is implemented that way. So, for example, if you started with 16 leading zeros, it could be used for the first 16 commits.

work = len(sha1) - len(sha1.lstrip('0'))
...
assert commit_num <= work, "Not enough work done."

https://github.com/seungwonpark/kudeki-chain/blob/master/man...

BTW cute that assert is exactly appropriate for the ci tests, for determining whether it is accepted as a commit.
> Docker helps you create a reproducible environment. You are able to specify the specific OS

Not exactly ... containers use the host kernel, but the libraries within the container. Also, global system settings can be changed at the system level.

> Does Docker support target OSes other than Linux? I'd love to have a way to test on non-Linux OSes.

Your target OS must support linux cgroups, etc. So no.
How is this relevant to the article? Take your rants to Facebook.
Yep, as we used TASM and MASM before it.

That is another thing that you remind me of, the macro assembler capabilities of non-UNIX assemblers.
Tesla probably made up the story about the bet with Edison in his autobiography. It is not mentioned anywhere else, not even in Tesla's diary.
I still get to see them play full games when I do overwatch myself. This should be a round 1 kick, instead they waste everyone’s time and ruin their experience. Same goes for obvious wall- and aimhacks. I see non obvious cheaters every 2nd game or so (players following but not tracing you through walls or soft aimlocks for example). VAC doesn’t do any process analysis as far as I know and as such, it will only ever be able to ban players after the fact (if it does even that, because „legit“ hacks will almost always pass due to overwatches high consensus requirements)
You're right, the wording is poor, but the general premise that SSH public/private key auth is a security weakness is valid.

Administrators cannot validate that SSH private certs are properly protected with a strong passphrase. Also 2-factor for SSH is rare. With enough employees, chances are high that someone gets lazy and generates a cert without a passphrase.
Nice idea, but refuted already: https://www.nwmo.ca/~/media/Site/Reports/2015/11/11/06/32/12...
Unfortunately, yes. Several years ago they started soldering the RAM directly to the motherboard, and don't provide any ram slots. So, whatever amount a unit shipped with is the max it will ever have.

I'm still using a mid-2009 MBP. Upgraded the RAM, replaced the hard drive with an SSD, and just last week installed Catalina on it. It's still my daily driver lol.
Something with non-integer fractal dimension?

Actually, idk if that is exactly the right definition, because I think some fractals have integer dimension? Idk
Programming for Computations – Python (2016)
C++ is first-class in Android via NDK. You can write directly to your app's memory from a C++ library without having go through FFI. I'm pretty sure it's the same for iOS but through a C ABI.
C++.

It is part of both SDKs, you have direct support for mixed mode debugging on the IDEs.

No need of extra tooling.

On Android JNI is always going to be a pain, but at least with C++ Studio gives you an hand on accessing JNI APIs.
Which part isn't allowed? A project I worked on did this a few years ago.
The bigger question to me, is why doesn't the US do combined gas/electricy/... trenches accessible by manholes, like you can see in most northern European cities?
Is it just economic shortsightedness or does it have to do with density (or rather US cities being the opposite of dense)?

(yes there are regulations on minimum distance between electricity and gas pipes, so these trenches have to be pretty big)
No, it's not. I've written multiple key management and push systems over the last 15 years. It's a 50 line Perl script, if that, and that's with groups and server roles.

Scales perfectly fine with hundreds of servers and tens of users, but that's just with a flat text config file, keys separated in their own dir, and no parallelization.

I've done LDAP auth and querying before, I don't see this being all that hard.
Many people challenged Edison's lightbulb patent in court, and lost.
What money is going to be fully reserved? Base money or credit money or both? What happens to new credit money? How do you keep the blockchain based currency from trading at a different value, e.g. me not believing in it selling USDf for real USD? (All not answered in F.A.Q..)
It is, but not always. And it's harder to get it in lossless at times.
Unless "user that was created with admin rights which were later taken away" counts as admin, then no. I always set up a separate admin account and hardly ever have to log into it to do admin stuff.
Very nice! However breaking the back button is very bad UX (remember ad-stuffed pages that would not let go back to google). I think it should be possible to change the hash without adding a new page by not using history API.
1 Call up your old Ivy classmates, they work in corpos

2 let your VC do the above

3 crowd favorite, let your VC force other companies he already invested in/sits on board to integrate your product and then do number 2

But in your case number 1 should be change your name and language, unless you are looking for government (NSA/CIA) contract.
Good thread previously here on HN about code sharing between iOS and Android:
https://news.ycombinator.com/item?id=20695806
Cool! Firefox on mobile doesn't render the emojis though, just long strings of Unicode strings.
You will have easier time if you narrow your market to a more uniform group, like "large hospitals", or "small law firms" - approaches that apply to one group will not work for another.

Connections are important but in some areas you may have to hire a lobbyist to get them, while in other areas you just need to show up at a trade convention and chat people up.
What specifically is not allowed? Microsoft provide CodePush as a service which allows you to push updated JavaScript bundles to Android and iOS apps.
Then your program failed completely on the input device currently does not exist.

How do your program know there is a controller use [w] as confirm instead of [o] when the controller does not even exist when you are writing the program?

Although the new controller can just send [w] as [o], you will now have another problem that ui always ask you to press [o] when there is only [w] on the controller.

Fix this problem is the sole purpose of that configurator. Don't choose the layout, just let user/system choose them. Although you could still define some preset for known device.
These are also the things that we are looking for most in CodeBreakers students.
Similar shape, very different aircraft.
It is totally allowed on iOS.

Perhaps your thinking about downloading such JS code at runtime from your servers, thus escaping Apple's control on the app, which was indeed forbidden (it is now ok as long as you don't drastically change the app)

Bundling JS in the app and running it has always been just fine.
They only get so complex when people insist into plugging a square into a round pet, like using said technologies from C, writing everything by hand.

Using ActiveX, nowadays COM/UWP, is never an issue from Delphi, C++ Builder, .NET, Visual C++ via MFC, C++/CX, C++/WinRT, Eiffel.
This is not about people skirting the rules, this is a poignantly political concern.

"Hiring an exec who supported Trump's travel ban" is purely a political issue. Temporarily halting travel from a list of countries designated by the Obama administration as 'dangerous' - specifically because there's a degree of lawlessness and/or the governments can't/won't cooperate with background checks etc. has very reasonable arguments supporting it. (FYI the nations were Libya/Yemen/Syria/Somalia/Sudan/Iraq - all of which have dysfunctional governments unable to provide reliable identity information - and Iran, which has other problems). Note that Egypt, Tunisia, Lebanon, Kuwait, Indonesia, Saudi, Oman, Pakistan etc. etc. and the vast majority of states with many Muslim citizens were not affected.

Contextualising this within Trump's ugly rhetoric is another thing entirely and this part subject to interpretation.

If Googlers are going to be discontent about an issue like this then I'm afraid it's game over for their peace - because they are effectively internalising American political discord.

Google's direct participation in China etc. is another issue entirely, much more salient as it directly reflects 'what Google is doing' - but even this can be very complicated.

Google is essentially 'choosing' a very specific political ethos which is problematic in itself because most of us tend to confound our own version of morality with that of others in a very intolerant manner.
Gas pipes are overhead in much of eastern europe.

Looks kind of odd to see the whole city covered in what looks like scaffolding, but it's actually gas pipes and supporting pipes going down to every house.
Thank you for the suggestion. Yes, importing is the best feature we need to have integrated. Will do it soon.
Even if it somehow works, photofission will never be energy efficient. You will be spending gigawatt hours per gram of fissioning matter
Chrome, Android, Search/Ads/Gmail/Apps, Google Cloud could feasibly be split.
> We're talking about people performing actions with the goal of causing another person's death, not someone who's completely at the mercy of fate and has nothing to do with murder.

That's an assumption and it very well can be the outcome of fate alone. It's not like there is proof beyond a reasonable doubt that people have control over their actions. Neuroscience exhibits people are just cause & effect.

Imagining a robot that has a bug is similar to the outcome of fate. Outside the realm of blame being on the robot but the universe that made the bug possible & happen.
Nice crisp graphics.
Just pick an idea that has hundreds of thousands of users, maybe even some of the unicorns, and do it better. I'd still like a high speed note taking app that syncs on mobile, and I'm willing to pay for it.
Understanding Lisp Programs: Towards a Programmer's Apprentice [pdf]
Do you understand what "fraudulent" means?
I think there is some confusion around this. You can use Javascript with iOS if you use Webkit + JavaScript Core, and ship all your features in the binary that your app uses.

2.5.2
"Apps should be self-contained in their bundles, and may not read or write data outside the designated container area, nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps."

and

4.7
" your app must use WebKit and JavaScript Core to run third-party software and should not attempt to extend or expose native platform APIs to third-party software"
As always, weakass passwords are not much better than no passwords. Should be common sense by now. Enforce a policy against that.
What is broken about setuid/setgid? Of course today we have eg SELinux, AppArmor, capsicum and other more sophisticated means, but still the basic setuid mechanism is sound: if you need access to privileged files, you can do so only via trusted setuid programs that only an admin or owner of said privileged file can setup with the setuid bit.
The article URL has been updated to https://www.openwall.com/lists/oss-security/2019/10/14/1 , which has:

Date: Mon, 14 Oct 2019 09:00:31 -0600
MXML. The Markup system for Adobe Flex is almost certainly the inspiration for both.
Style Your Pandas DataFrame Like a Master
According to their "tests" P100D did 0-100 in 2.87 seconds, slower than ordinary users in random YT clips with 5 adults in the car.
It's not about walking a dependency graph, but about getting the dependencies 100% right. In C, that's indeed very difficult, or at least a lot of work.

I don't know if you have tried MSBuild, but I've spent countless numbers cleaning up .vcxprojs, shifting things around, factoring into extern .props files, etc. Even on major changes I was often surprised how little rebuild was necessary. The granularity at which the system detects changes is not just per-file. It has per-file caches for the set of preprocessor variables, the set of include paths, all the little compilation and link settings, and so on.

So what it will do if you change the build file is, it will re-execute the build file processor and generate all the necessary build information for each C file. And then, it only rebuilds each file if a build dependency has actually changed in a relevant way for that file. For example, the order in which the preprocessor variables are defined does not matter (as long as they don't overwrite each other), but the ordering of include paths does. Also, if any of the files that were #include'd (transitively) in the last build changed since them, a rebuild is needed.

Compare that to the average crappy Makefile system that you are going to set up. The best thing you could achieve with Make will never be going to rebuild as little, or rebuild reliably the stale build products. I like Make for other reasons, but MSBuild is better and more robust.
Just curious: Did you ever strike on any iron?
I suppose a company/organization-mandated ssh-keygen wrapper would solve that problem. But hard to validate unless you demand access to secret keys, yeah.