skysight-inc/HackerNews huggingface dataset:
One problem with User-Agent strings is that they actually don't work for their intended use case. Nothing is stopping user agents from lying about who they are to the server, and many user agents actively do this.

I've been on teams a few times that tried to use UA strings to try to serve up features per-browser. Trying to do this directly falls apart quickly. There are some libraries that handle the most common problems, but that really only delays the inevitable: eventually some critical user is using a browser that you are detecting wrong, and you end up lost in endless hard-coded edge cases. Using UA strings to determine functionality isn't an effective strategy.
Well, peasant cottages from the 19th century, for sure; I lived in one at one point too, and there the cooking would have been done on the hearth, the focus of the living space.

That cottage was cool in summer and cold in winter and damp all year around, walls made from stone and mortar over 1 metre thick, originally with a thatch roof but since replaced with tile after a fire. The economy that built those cottages was basically subsistence living, hardly a structure built with surplus to make different choices.
Doesn't this open Nandini Jammi up to a Tortious interference lawsuit?

Sounds like Stefan and Mailchimp had a business arrangement and she's now a third party interfering with it (and bragging on twitter).

https://en.wikipedia.org/wiki/Tortious_interference
Regarding the following quote about type String = [Char]:

“This is not only a bad representation, it’s quite possibly the least efficient (non-contrived) representation of text data possible and has horrible performance in both time and space.”

It is true: This is slow if String is internally implemented so naively that it is "really" a list of characters. However, better internal representations are possible, i.e., internal handling of strings as if they were lists of characters, so that a String appears to Haskell code as a perfectly "normal" list, while internally being represented much more efficiently as a sequence of raw bytes.

In other words, the fact that String has this specific type (i.e., [Char]) does not mean that it needs to be implemented in the most naive way possible by the Haskell compiler or interpreter.

Prolog is in a very similar situation:

For convenience to Prolog programmers, strings in double quotes (such as "abc") ought to be interpreted as lists of characters (such as [a,b,c]). So, to Prolog code, strings should appear as if they were "normal" lists. This makes them amenable to Prolog's built-in parsing mechanisms and many predicates over lists that are already available.

At the same time, strings should be internally represented more efficiently, as sequences of bytes in memory.

Recently, Mark Thom has expressed his interest in implementing such a solution in Scryer Prolog:

https://github.com/mthom/scryer-prolog/issues/95

The same idea may be applicable to Haskell, to combine convenience with efficiency when handling strings.
I literally just watched Catch Me if You Can last night. Haven't in a while. Have noticed before where I just watched or did something and the next day see a news feed item aligning with that. Is it just a coincidence? Something like this seems just too much to be a coincidence. Some how ad targeting? Though I watched through AppleTV, can't remember if through HBO, Amazon Disney+ or Netflix as I use all the apps all the time interchangeable. Ad targeting would seem most likely but unlike when viewing in a browser where I'd expect to be target seems odd when the interaction wasn't in a browser. Or I suppose it could be that these articles are appearing coincidentally, and just having watching/done something very recently my mind recognizes much more than it would otherwise?
Low hanging fruit can be fairly precisely defined. Human brains have finite memory and finite processing power. Relative to that, every year, a new scientist has to learn more about what others have done before him, before he can create something new. So, it becomes harder and harder every year to make a super contribution.

What Einstein had to study before superseding Newton could probably be put into a 10-20K page book. What a scientist has to study before superseding quantum is probably closer to a 50-100K page book.
The Bill That Could Make California Livable Again
This year’s monitors will be faster, brighter, and curvier than ever
it's part of what brought down the western empire. commanders of armies sent to secure the borders would often march back and try to secure the throne. this is what a lot of the third century crisis was.
There are a lot of 2 cent parts already on the board.
It also involves breaking enemy cyber security (signals intelligence).

It's actually a rather fascinating incongruity, since we live in a world where "the enemy" is more likely than not to be using the same software systems that the NSA themselves are, and that therefore any exploitable flaws they find in enemy systems are pretty likely to be just as exploitable in their own. (And that similarly, disclosing the flaw in order to fix the issue in their own systems is very likely to result in "the enemy" fixing the flaw as well.)

A couple years ago the White House released a document explaining the process they use for deciding what vulnerabilities they keep secret: https://www.cnet.com/news/white-house-trump-administration-h... noting that "In the vast majority of cases, responsibly disclosing a newly discovered vulnerability is clearly in the national interest". Though from what we've seen in past leaks, it's pretty obvious they don't reach that conclusion for all vulnerabilities they find.
Sounds like a reasonable solution for some systems in 1999. How many of the systems that were fixed properly died the following years anyway, and the millions invested were overkill and unnecessary?

In some cases “kicking the ball down the road” makes perfect sense, just fixing what is most urgent.
Thanks for this tip. It will come in super useful during web app penetration tests, being able to have sessions with multiple users open at the same time.
Reddit R/surfacelinux is full of that what you are looking for.
RefBot: Intelligent Software Refactoring Bot
The few times I've tried to read Kahneman's book I must admit that I stopped pretty early. I found his writing style too authoritative, without presenting much evidence for the theories he lays out.
Is it still possible to unpack the asar, rewrite the source, and repackage the asar?
Or another maybe more likely option I guess is that I watched it because it was being featured on one of the app platforms, and then news feed apps/sites know what has been featured and that a lot of people are probably watching a certain show and thus write an article or share an old article that will be top of mind for people. I guess that may be most likely in this particular case.
I suppose I'm a combination of relieved, offended and proud to not be on the list.
I also discovered this while trying to plug my telescope's camera USB cable into my PC in the total darkness, and wondering why the camera didn't work.
I didn't say it was illegal.
I think you may have something that I don't have, as I believe in more or less a zero sum game in terms of mental functions: e.g. a blind person develops other senses better such as hearing or spatial orientation etc.
I'm on the opposite side of the spectrum, more like a music hedonist, though lately I started to enjoy silence just as much. Do you feel that you have some sense more developed than the norm?
Web 3.0 to me is probably the rise of WebAssembly and the death of legacy browser support so we can all use sane modern browser features, no more shims or other hackery.
It's unclear if the parent comment is sarcasm or a real comment. Hacker News is certainly not feeding articles to you based on what movies you watched last night.
And because most companies that use plaid don't even show the Plaid logo, you don't know who is directly integrated with a bank and who is using Plaid
Stack-Oriented Programming
Diligent Engine v2.4.d is out: MSAA, Queries, Bindless Resources, and more
> Private like ivy leagues didn’t make sense for me then because tuition assistance was so poor. Unless you’re super highly ranked and can get a ton of merit based scholarships that was a bad idea anyway.

Another option (depending on the school) is low to no tuition if coming from a lower income family. I want to say it’s Stanford but i may be wrong, that offers free tuition to eligible students whose family income was less than something like $50,000/yr. So there are ways for poor students to get a great ivy league education but like you said, you must also have extremely high rankings in your class to attempt that route.
Companies don't follow RFCs, as a rule, bc the only mechanism or means of doing so is if the engineering team implementing the product is aware of the relevant RFCs, and can make a case for following them to the product team. (I.M.Exp.)

There's also a generational memory issue here, and I'm not aware of any C.S./C.E. programs that cover RFCs as part of the core curriculum.
You might have some deeper reasons other than those described in your comment, but I genuinely don't understand why you would vehemently oppose robust hardware, which not only enjoys industry wide acceptance, but also provides the most favourable conditions for running *nix, modding and upgrading. Instead, you have cornered yourself and seek an inferior alternative solution, without wanting to get your hands dirty ─ which consequently makes your life even harder?
https://en.m.wikipedia.org/wiki/List_of_cognitive_biases#Fre...
They have probably done that for a while (this is the first public attribution, not the first disclosure); but they are now blowing their trumpet because they need some good PR. Why?

Snowden.
The four Google apps I tried had I top level entry for feedback from the first hamburger menu, within one click from the Basu UI.

Several non-google apps were more obscure. GitHub feedback is an email address.

I've been waiting for 5+ years for a decent GH mobile experience. Suffice it to say, major disappointment for this "beta"

What are they even doing with repo sorting, uuid based? Certainly not time or alphabetical like the web experience
> Is it still possible to unpack the asar, rewrite the source, and repackage the asar?

Yes, it is still possible — https://github.com/electron/asar
Agreed. I have mine in automatic mode. My default browsing experience is that most pages have never seen my computer before (at least as far as cookies go), and don't get to set anything that will stick around, unless I manually add them to a named container.
Lessons from WT:Social
$ pem=''; cat /etc/ssl/ca-bundle.pem | while read -r line; do pem="$(printf '%s\n%s' "$pem" "$line")"; if grep -q 'END CERTIFICATE' <<< "$line"; then openssl x509 -inform pem -enddate -noout <<< "$pem" | cut -d= -f2 | date -f - -I; pem=''; fi; done | sort -r | head -1

2046-10-06
For every app that comes with a device, there's at least 1 person out there who doesn't want that app. So by your definition, phones should come with 0 apps pre-installed?
That the only thing you can really control is yourself and your reaction to the world. To me, this manifests most in how I "talk" to myself about things.

This quote is one that has been on my mind a lot lately.

"Let's think of the positives as personal, general, and permanent. Let's think of the negatives as impersonal, specific, and temporary. Let's actually go out of our way to inject these things into our discussions."

TLDR: We are what we think.
I'd argue that if you're doing this you can't have tested your JavaScript on many platforms. This breaks very quickly in my experience. Feature detection[1] is a much better strategy. That can get complicated too, but often there are third-party polyfills that can do that for you.

[1] https://developer.mozilla.org/en-US/docs/Learn/Tools_and_tes...
$ for x in /etc/ssl/certs/*.pem; do openssl x509 -in $x -dates -noout; done | grep After | cut -d= -f2 | sort -n +3
[...]
Oct 6 08:39:56 2046 GMT

That certificate is for

Subject: C = PL, O = Unizeto Technologies S.A., OU = Certum Certification Authority, CN = Certum Trusted Network CA 2
I was working on a response same as yours. Only thing I can offer is that maybe we can create consciousness without having to "simulate" all those neurons, as in, there is some more reasonable sampling that will give a reasonable approximation.

I do think it is self-referential and that is how consciousness emerges.

I disagree that there are quantum mechanical effects, but what do I know? I do kind of feel like I'm in more than one place at the same time right now.

It's "Turing" not Touring, btw. And no, the brain is not a Turing machine.
These are pretty easy to follow (if you don't use something like dietPi):

https://github.com/adrianmihalko/raspberrypiwireguard

https://grh.am/2018/wireguard-setup-guide-for-ios/
> I find this hard to believe

I guess you haven't tried it, then. But your lack of knowledge is not a reasonable justification for attacking my integrity.

> Even something as simple as matrix-matrix multiplication

That's the best case for Numpy, not the worst. SGEMM is indeed just as fast when invoked from Numpy as when invoked from C, at least for large matrices.
Yes you can concoct contrived scenarios that make it seem like a bad idea to borrow, this is true for any borrowing, not just college loans. There are always such risks in life, yes you could get injured or go broke or get sued. A cost-benefit analysis does not (and should not) include low-probability events or contrived worst case scenarios. You can do a separate risk analysis, get insurance, plan for contingencies, etc., but that is not part of the expected cost or expected benefit calculation.

Getting seriously injured is not an average case scenario, but there are loan deferments for such scenarios anyway. The interest on student loans is quite low, it does not add a “ton” of time to your payback period unless you borrow a ton and pay as slowly as possible.
Indeed, I've been using goaccess for a while now (https://stats.logpasta.com/) and it suits my basic needs at least seeing what CLI version the few actual visitors I have use.

I haven't had much luck with their "live" report though so I have a Cron job running every few minutes to regenerate it.
> Eventually, Google replaced most references to SpottedFig.org in their documentation. They inexplicably left this one though

Small nitpick: this is spottedfig dot com, a domain which they still control.
The Gameboy Link Cable is a fine design, but it just reminds me of all if the other fairly decent connectors that Nintendo has developed, implemented, and sold millions of.

I guess the real LPT is to always ask the oldest remaining provider of digital home electronics for advice on these matters.
US to Restrict Sale of AI for Satellite Image Analysis
I don't think this really disproves quantum immortality? You never experience the gun firing because in all the universes where it fires you die so quickly you can't sense it. That doesn't mean the gun never fires. It just means that you only experience it in the event it didn't. This is kind of tautologically true. By definition, if you're alive, you haven't been shot in the head at point blank range.

Particularly, assumption 2 is in no way required for the quantum immortality thought experiment to work.
See https://science.howstuffworks.com/life/inside-the-mind/human...
> you just need to jump through undocumented hoops to get it

The hoops are documented: https://help.netflix.com/en/node/13245 ("Change your subtitle language" section)

It says "Due to the large number of languages available, Netflix only displays the 5-7 languages most relevant to you while streaming." and then proceeds to tell the steps to change profile language to get other languages.
Does Windows 7 crypt32.dll support ECC?
No Linux client on the horizon - B2 is your way to go!
Strangely, I still see plenty of billboards and TV commercials.
He's delivered that talk at many different companies. I had the opportunity to see it last year. I was surprised at how consistent his word choice and cadence were between the two instances of the talk.
I think using numpy is always good first step after just trying to improve the algorithm. Numpy will be less effort than going to cython. After that cython is a good next step. I seriously don't know any situation where I would do the kind of micro-optimizations mentioned in the article.
Not to quibble, but it's a lot easier for most of us to "fire" our managers than it is for them to fire us. If your manager sucks, start interviewing.
Almost like VC extracts rent from their investments while minimizing any risk they are exposed to.
You don't have a right to some one else's property. That company has a right to refuse service to any non protected class it sees fit. Kinda like if Mailchimp was a baker ;). Can't just change the rules since the baker is bigger.
When Your Friend Kidnaps You to Steal Your Bitcoins
I think the question goes back to the size and scale of users at the 1 to 2 jump versus the 2 to 3 jump. Python didn't really start to hit most of its "forward progress" in terms of both user adoption and being so deeply integrated into systems. There was no Django for Python 1, for one example. As another example, I'm pretty sure Debian and its heavy reliance on Python for so much of its system scripting didn't happen until Python 2, either, but a quick search didn't turn up a reliable date.

It probably would have been a lot less risky with so many fewer daily users, so many fewer huge projects to migrate.
This looks like exactly what I've been looking for. PHPStorm did linting exactly like a lot of these and often made my life a lot easier, but since leaving the job where I used it, I've come to miss those little hints when not using a Jetbrains IDE (I use VSCode at home).
I suspect there's more of us than we think!
Team Building
See also previous discussion: https://news.ycombinator.com/item?id=22043209 (edit: NYT coverage of the same report)
Gotta love those rollover minutes.
Not applicable in this case, since it's talking about using the RasPi on the home network as a VPS when you're on a different network. It will hide activity from the ISP of the network you're using, but not from the ISP of your home network.
The insane amount of work that goes into just manufacturing.

The United States prides itself by having high-value functions like design, while offshoring manufacturing. But manufacturing consumer electronics is no longer simple. We have given up on manufacturing these electronics completely.
So does Chrome, if I'm not mistaken
The real savings are in not reporting the income for taxes, and even payroll taxes / insurance if you get to pay someone with cash with the cash you're given, and worth much more than saving a few % off credit card fees.
You can't always detect browser version, either.

Hard problems are hard, but my experience, and the recommended approach by browser implementers, is that feature detection works better.
Big O notations that every developer should know about
Very good post but unfortunately, sometimes bad SW lasts a long time too. I was recently called down to our proto line to help out with a 20 year old machine vision app. All the HW was obsolete and the SW was unmaintainable. I know that for sure because I wrote it. The whole manufacturing line was shipped overseas a couple times and returned to us a little while ago but the engineers just kept it running as-is. In this case the cameras, framegrabbers and light sources were all still working, which is impressive.

However, SW is closed source and the licenses can't be renewed, in the end that's what's making it unmaintainable.
Oh sure, if you're talking about "healthy corporate environments", I see what you mean.

Those exist? Half-joking (or I'm not even sure if I am), but what portion of your readers might work in a healthy corporate environment, I wonder. You are definitely lucky if you've had a whole career of them.

I would imagine in a healthy corporate environment going after the hard things isn't actually that unusual though? If the consequences of failure are lower, then the risk is lower, like Godin says the reason people don't do these things is the risk, if the risk is lower, I'd imagine lot of people would be doing them? Which is what you'd expect in a healthy corporate environment, I think...
I worked at a McDonald's in high school that was adjacent to a major highway so we were always packed. Even now, getting in the flow of programming when everything is going right and I'm making huge progress, that feeling pales in comparison to being in the zone when working drive thru with 8 orders on the screen and each of them is in a different state as you build them as fast as possible as different components are coming in from different stations all at once.

When you tame that chaos, and it's saturday afternoon when all the best people are there and everyone is on their game... I've never experienced anything like it. It's like when you see a really amazing play in your favorite sport, but that same amazing play goes on for a couple hours. I imagine it's like being an air traffic controller or maybe a stock broker on the trading floor where you can talk to everyone and it's productive chaos at its glorious peak.
>This vulnerability affects all machines running 32- or 64-bit Windows 10 operating systems, including Windows Server versions 2016 and 2019

https://www.us-cert.gov/ncas/alerts/aa20-014a
In actual Haskell I would write it as

sum [ n^2 | n <- [1..5], n % 3 == 1 ]

which seems to express the idea fairly directly and I'm fairly sure has a close analog in python.
Microsoft – January 2020 Security Updates
From Manchester to Barcelona: Building a better story about the internet
I could argue that I recently did an upgrade from a 2009 Mazda 3 to a 2011 Mazda 6, so I'm out of the line, but...

Truth is, the 2009 Mazda 3 was actually one of the first from the BL-Generation, while the 6 is the last one from the GH-Generation, which is from 2008.

So, yeah - it feels like an older car, although it's technically newer.
What's funny is that I can link accounts with Betterment, which uses Quovo, which got acquired by Plaid, but I can't with Plaid itself!
Show HN: Online Safety Inspections for Industry