skysight-inc/HackerNews huggingface dataset:
Excerpt:

Comparison to Make

"Ninja is closest in spirit and functionality to Make, relying on simple dependencies between file timestamps.

But fundamentally, make has a lot of features: suffix rules, functions, built-in rules that e.g. search for RCS files when building source. Make’s language was designed to be written by humans. Many projects find make alone adequate for their build problems.

In contrast, Ninja has almost no features; just those necessary to get builds correct while punting most complexity to generation of the ninja input files. Ninja by itself is unlikely to be useful for most projects.

Here are some of the features Ninja adds to Make. (These sorts of features can often be implemented using more complicated Makefiles, but they are not part of make itself.)

o Ninja has special support for discovering extra dependencies at build time, making it easy to get header dependencies correct for C/C++ code.

o A build edge may have multiple outputs.

o Outputs implicitly depend on the command line that was used to generate them, which means that changing e.g. compilation flags will cause the outputs to rebuild.

o Output directories are always implicitly created before running the command that relies on them.

o Rules can provide shorter descriptions of the command being run, so you can print e.g. CC foo.o instead of a long command line while building.

o Builds are always run in parallel, based by default on the number of CPUs your system has. Underspecified build dependencies will result in incorrect builds.

o Command output is always buffered. This means commands running in parallel don’t interleave their output, and when a command fails we can print its failure output next to the full command line that produced the failure."
65 in a 55 is much less dangerous than 85 in a 35. It wouldn’t be common that road conditions would permit very high speeds while at the same time having an artificially lowered speed limit (e.g construction).

This shouldn’t be a problem, in general, with a couple extra sanity checks.

I would expect the correct solution to more commonly have the opposite problem: too slow in a faster zone.
A secure messenger that is standardized. While Signal has actively resisted that.
I have had a few (3 or 4) LED bulbs of a reputable brand fail. To their credit, after one email to support a new package of bulbs has arrived at no charge. So no milking their revenue stream in that case.
That's incorrect. Only physical location matters, not your citizenship (which would be unknown without accessing your data in the first place).
I encrypted email were the "easy" route you'd be right, but obviously, it is not. It has vanishingly small usage and is notoriously unusable (see: several generations of "Why Johnny Can't Encrypt" papers).
I thought the Payment Intents and associated information about SCA had a learning curve, but was well documented. I think the aspect you're missing is that you don't need to decide, necessarily, when to use Payment Intents. You use only that API, and if there's an additional step required on the user's end, you'll get a different "state" in the response https://stripe.com/docs/payments/intents
And it speaks volumes of politics and power hierarchies in action and under-performing as expected. This could take different but similar bad turns in any of the first world countries too having a less population factor unlike in china but with deadlier virus or catastrophe. I hope we all learn something from this besides pointed fingers. The world we live in is still very fragile and I think we it would be great if we concentrated our collective energies on something constructive in this direction.
Pioneer made all the difference for us! It really gives you an amazing amount of focus and energy to do the best thing for your startup, which is what should be obvious but isn't: to make actual progress (i.e. make something users want, not e.g. do startup competitions or get featured in the press). That's the one metric you're evaluated on — progress — which is the only one that matters to the life of your startup anyway.

Thanks so much to Daniel and everyone else for making Pioneer a great experience!

P.S. — My cofounder and I are building Deft (shopdeft.com), which is product search for humans, not robots. You can type how you speak, search by image, and search over every product site!
Massive downvotes but no responses.

Is it because you accept that the security provided by HTTPS is limited but don't like people calling that out?

It's better than nothing. But it is my perspective that as technical experts any time we are not absolutely frank about the limitations of the current model against powerful MITM attackers we are behaving unethically.

There is absolutely no reason for any major state attacker to compromise letsencrypt. Beyond the weaknesses I enumerated above state actors have their own CAs which are accepted by browsers and pinning is effectively dead ( https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning#Browse... ).

What exactly could a state actor hope to accomplish by compromising letsencrypt that they couldn't already do more easily and stealthily?
Tell us your threat model. You talk about overthrowing evil regimes, organized crime, first world police and google as though they all do the same thing.

https://imgs.xkcd.com/comics/security.png

If your adversary is going to drop you, your family, neighbours and cat in an acid vat disappearing messages aren't going to save you.

If your threat model is organized crime, signal might be an ok solution, if you have messages set to disappearing faster than you would tell them your password after they start sanding your feet off.

If your model is first world law enforcement I hope you or anyone you care about have never committed any crimes ever because you will have the book thrown at everything you might have done: https://www.goodreads.com/book/show/6611240-three-felonies-a...

If your model is google, then encrypted email is perfectly valid and a wonderful way to use gmail.
No company outside the EU will face fines and there's nothing the EU can do about it.

Also the law is based on physical location (either companies or people in the EU at the time), not your nationality or citizenship which would be unknown without access to the very data the law is trying to protect.
Having undergone selection, training, testing, certification, and placement as a priest within the respective religion.
A repository of beautiful photos and images
I respectfully disagree.

In my 30+ year carreer in IT the most beneficial insights came from brilliant people I had the pleasure to work with and who were willing to share.

In a way that's self-evident. Really smart people with a true clue about what they are doing are not wallowing in angst that their trainees (for lack of a better word) would ever endanger their position and they're often happy to share.

That does not discount the trial and error approach, which could work quite brilliantly when the documentation was good. (being something of a dinosaur I'd happily refer to anything DEC in its heyday).

But there is that list of people, which I can't really thank enough for instilling some of the invaluable knowledge, which defined my career.
And the Model 3 can run up to almost $60k so let’s be fair and talk about the base model for each, okay? We’re talking about a price difference of $16,000 over a $24,000 car, and if you think a Toyota of all brands is going to require $16,000 worth of maintenance more than the Model 3, I would really like to know what that number is based upon.
In the US, palm oil is not a domestic oil, it's one that comes in chemical tankers.

Petroleum & fuel tankers are too gross, those materials may be in the same terminal, but not the same ship as palm or tallow. And they don't need to fully remove every last bit of diesel after discharge for instance before loading gasoline. They fully clean out the heavy fuel and crude carriers far less often, compatibility is usually acceptable. Ship tanks are just challenging to get really clean, depending on what has been in them.

Those developing plantations & ranches are in countries where they need our industrial chemicals, and we seem to consume their products in similar bulk.

It could be considered an uneven exchange, but that's what intercontinental commerce has been for millennia. While shipbuilding has been largely motivated by profitmaking according to value differential, buyers and sellers are both making money so they're accordingly influential.

These are the chemical ships where they have to clean out most compartments after cargo discharge anyway, so they can load something different for the departing voyage.

Chief Mates love it after they have discharged things like Benzene or Methanol in developing countries because they leave the cargo compartments and maze of on-board pipes & valves cleaner than any intentional procedure. And pure chemicals like this just evaporate. They know they can load almost anything after that.
What do you mean by charity information? What charities he likes to give to? I have never heard that phrase before.
I always liked telling mgmt about our product's use of FckEditor.
Not a pun - OP's talking about these[1], which essentially gives an IP address to a serial port, often internet-facing. The joke is about how clueless management is about their infrastructure.

https://en.wikipedia.org/wiki/HP_Integrated_Lights-Out
Keep an eye on https://openid.net/wg/fastfed/

> it seems like the entire identity space is a clusterfck

Yeah, especially server identity in a many-service world.
Um, there isn't an easy way to say this, so I'll just say it: calm down.

I'm an Excel and VBA guy. The IDE hasn't been updated since office 97. It's not great.

But the thing that Microsoft understands iS that people buy your software if it doesn't break their workflow. Backwards compatibility is the most compelling feature when you've got an install base in the millions.

Now, they have fucked up. A lot. There is a bug that counts 1900 as a leap year. The statistical functions don't work. They can't dump VBA no matter how much they want to. They tried with VSTO and officejs but nobody is buying. I get it. They are stuck and the only real way out is to break compatibility. But haven't we seen what happens when you go down that road. Python 3. Perl 6. Acrimony. Discord. And for what? Your spreadsheet to break and you have to debug it? What if you have a spreadsheet that's never been documented with a million formulas. You probably have a day job, you need your tools to work and Microsoft understands that.
YC has better diversity stats though? And I don't think it's because its pipeline is too different.
Not sure what you mean. To become a Pioneer, sign up (pioneer.app), rise up the leaderboard by making progress on your startup, and make the top 50 to be eligible to be selected. Not really a pitch-your-startup process to it.
Assuming everyone is using Instagram doesn't illustrate the point.
>I hope stripe changes it's ways here, but they have been a large disappointment over the last 4 years or so after a solid start.

Sadly the same experience here.

Getting them to fix the many many basic issues of their client libraries is hell, testing is no better and library updates often break your testing scenarios.
While the pgp cryptosystem wasn't broken, the openpgp email security protocol was.

Signal protocol doesn't have the same lack of integrity checking.
> space LEGO sets I enjoyed as a kid

As a kid? Now as an adult with disposable income, I can get really awesome LEGO sets, sets I really enjoy building. I prefer Technics, but also have several star wars sets, including the model death star (not the one with the minifigs) and the original 32" star deatroyer. Post Christmas this year was spent building a lot of LEGO City sets.

I also have the Saturn V and ISS sets, both of which are awesome.
This seems unlikely since many are edible and some (e.g. potato, eggplant, tobacco) were eaten concurrently with the tomato confusion in Europe.
Relying on GSuite is only "fine" for businesses located in the USA and that don't compete with Google. Otherwise it's an obvious security risk.
Not all of PGP is bad though. PGP is really hard to use but it's still useful for signing, file encryption and authentication. Encrypted email has been outclassed in every way by modern messaging applications such as WhatsApp and Signal but currently PGP is the only good way to sign code.
Sure, I’ll be more specific: there’s no glue code for function calls. Whatever function you want to call doesn’t need to be declared up front, you just call it at runtime, and it’s looked up dynamically. However, data structures like arrays and structs need to be declared, if needed.
oh hey look somebody died! should i click the link and parse through the filthy word-padded article to see if i care?

yes, very sensible.
>Neither candidate believes in compromise or their own fallibility

There are no candidate that signals fallibility and or possibility of compromise. Why should they, anyway?
In the case of WMDs in Iraq, it was based loosely off single and misused British intelligence.

There is overwhelming evidence with the DNC hack from the cybersecurity industry and intelligence communities.
In house solutions. Once a company becomes large enough where paying a company like Stripe's fees becomes larger than hiring enough people to create and maintain an internal billing system, then you do it yourself.

This is something that companies that are near public company size do since the amount of work required to meet payment regulations alone, not to mention all of the infrastructure to support things like subscriptions is staggering.

This is why there aren't many solutions to this problem. It's a very difficult problem.
I had the opposite experience. There was no context or description provided by the author, and the website is confusing and has stuff flying all over it. Furthermore, their Soundcloud API access is already revoked, so there is no music playing, thus making it even more confusing. I'm all for novelty websites, but this is a mess.
Zuora can do complex billing. You still need to provide a processor though.
I don't know how recolorization algos work, but a month or so ago, I saw this old 1900s image of a new York street that was colorized on reddit. Everyone on the thread was commenting about how there was so much violet hue in every single person's dress in the photo. Iirc that recolorization was done by a neural net too.

Then I realised what must've happened. There were tons of open air carts on the street selling eggplant. My guess is that the NN was either shown that or recognized that part of the image and colored almost everything else it saw using that as its base point. Not the best technique.
Earlier submission, still on front page here:

https://news.ycombinator.com/item?id=22368888
I use ProtonMail as my primary email and when I exchange email with another ProtonMail user, I feel that it is secure.

Great can be the enemy of good. Another example is Signal which gets some criticism for being centralized. Signal is good. ProtonMail to ProtonMail mail exchange is good.
You're certainly welcome to disprove the findings from the individual cybersecurity firms if you think they're wrong.

Here, start with Fidelis:

https://www.fidelissecurity.com/threatgeek/archive/findings-...
I'm not sure that the article shows that testers are to see the first indication of project failure, but I'm sure that how testing is approached in the project is a very good indicator of its potential to fail.

I've always found that taking a design or specification and before you cut any code you sit down and plan both a test strategy and specific test it will immediately highlight any shortfalls in the specification as logical inconsistencies and unclear assumptions in the spec are immediately highlighted.

If it is impossible to test a requirement, then you can be fairly sure that it will be very difficult, or impossible to develop it.
I didn’t say ctypes takes the same approach — I even mentioned ctypes’ shortcomings. I only said ctypes makes what this does possible already.
I think the issue isn't always entirely rational. Even if self-driving cars could have a better accident record than humans by several orders of magnitude, incidents would still cause humans to react poorly -- "if I were in control that wouldn't have happened" -- even if it would have.

Altering a speed limit sign may not be legal, but if it's done in a way that wouldn't fool a human, but would fool a self-driving system, that's just a way that a self-driving system could be unsafe that a human driver wouldn't, and people will react negatively toward the self-driving system. That's just human nature, even if it's not logical.

Regardless, we need to be aware of these possible "exploits" on self-driving systems. Sure, no one would bother altering a speed limit sign to cause crashes, because human drivers have context and common sense that would make that mostly ineffective. But if it were known that some popular self-driving systems could be fooled by that, I'd expect to see this happen more often, perpetrated by people who would probably otherwise try to hurt people in other ways. It's not a "new idea" in the context of driving in general, but it's a new -- and potentially very effective -- idea to dangerously mess with self-driving systems.
Some extra significance to this, as Ben Lewis yesterday also interviewed two Australian politicians (including a member of the government) who visited Assange and alluded to knowing this was coming, as part of their request for the UK to ignore the US extradition request and return Assange to Australia instead:

"There is more the Australian government can do, and I think when we hear some of the stuff that's going to come to light next week, there's more that will be done," Mr Christensen said.

https://www.sbs.com.au/news/leave-our-bloke-alone-australian...
We'll see how it works in practice. After reading the intro to what they're doing I think I'll update a few certs before they expire to make sure it works, but from what I've read I don't anticipate any problems.

LE has been great for me.
How do you do reporting on these blobs?
On Soaking the Rich
I had a different interpretation. It's not uncommon in commercial code to use a sort of copy-on-write behavior where every edit creates a new row and marks the other one as dead (for instance, filling in or blanking out a column to mark it defunct). You leave an audit trail behind.

Which, with a little bit of work, can be used to revert to earlier versions.
But the UK still has jurisdiction over companies the operate in the EU.
As somebody who is friends with some LARPers, I find the usage here to be a little rude. No (sane) larper tries to convince anyone that their world is real, nor do they believe it is real, which is the parallel being drawn
This went over like a lead balloon on Twitter.
I think "> 10" is even still pretty optimistic. I'd be surprised and impressed to see driver-asleep self-driving in the next 25 years, unless we see some serious unexpected breakthroughs in computing.
I was referring to the idea of even more highly specialized VC/PE operating partners managing functions which were traditionally seen as irreplaceable.

Latacora manages a startup's entire infosec function for a period of time allowing founders to focus on more important parts of their business. I don't believe anybody would have thought your model would be possible during a startup's early stages without being managed directy by a tech founder, but Latacora's sucsess invalidates this assumption.

If infosec can be managed externally, why not other sacred cows like engineering, marketing or other key gaps where founders need help during their initial year(s)? I think Sweat Equity Ventures is going to explore this question more deeply with this model.

I understand that Latacora doesn't invest in client companies -- that's where my analogy ended.
> What pains me is the embarrassment of appearing like some clueless fool who got caught up in some get-rich-quick scheme. I love programming, and I just wanted a structured curriculum to train as a professional.

Been there. I think this feeling comes mostly from the fact that this initiative has had a lot of attention, and of course, a lot of public criticism from people that weren't really able to give qualified opinion.

If you are having a good time there, if you are perceiving value, learning new things that makes sense and seem useful, just ignore those bad opinions and try not to think how others are looking at you.

I myself had a course on investing given by a moderately famous youtuber, and the environment around it was full of sarcasm and debauchery. I somehow managed to ignore it, took the course to the bone and now, less than 12 months after finishing, had a more than 3-fold return on the money I spent on it.
The good parts are just enough to be bait, frankly.

Code signing is probably the only use case left for it.

Edit: nope a quick Google search finds specialized tools. They can't be harder to use or screw up than PGP, so automatically better.
See profile
Focus you fuck
That seems credible...
Wells Fargo experienced the same thing in 2016: https://www.nysscpa.org/news/publications/the-trusted-profes...

Apparently, so did Reuters.
Niice

Hat tip to the classic, the original:

windows93.net
Any conspiracies saying the DNC emails were leaked have been debunked.
I'm busy writing a Spreedly integration for my employer. It's not in production yet, but I can tell you that their iFrame API is a bit clumbsy and gives you less out of the box than Stripe Elements.
https://www.quora.com/Would-a-120-volt-incandescent-bulb-ope...

The numbers here show a >25% difference for an example bulb.

Also, even ignoring how the cooling starts off at its fastest, with radiation scaled to the fourth power of temperature... incandescent lights switch off in about a tenth of a second. Even if that was completely linear, it would be very visible. Even a 1% flicker would be visible.
Who, not what, is Labelbox
Looks similar? https://www.theverge.com/2019/9/20/20876570/paypal-refund-fe...
It’s a risky permission. It allows the app to read keystrokes and manipulate other apps as though they were receiving input from the user.
Wonder if the neural net could be trained to know the speed limit? "This scene doesn't look like the usual 85 mph zone..."
Out of date is probably not that big a deal. If a speed limit is lowered from 40 to 35, or even 65 to 55, and the database doesn't get updated, it's unlikely to create a dangerous situation if a car doesn't know about it.

But a car thinking a 35mph zone is an 85mph zone... that could be a very big deal indeed.

Regardless, if self-driving cars (or at least "computer assisted driving" cars) were to be widely deployed enough and shown to depend on these sorts of databases, I'd expect it to become a legal requirement to make sure these databases are kept up to date by city/county/state agencies, and that car systems get those updates. Otherwise, expensive liability ensues.
Let me recommend that anyone interested in fonts, 2d graphics, CAD, etc. read Raph’s thesis. It’s great!
Thanks for the method. I’ve written up detailed instructions for it at https://apple.stackexchange.com/a/382603/21473.

As you can see in that answer, I found a better method to assign the keyboard shortcut. Assigning the shortcut within App Shortcuts instead of Services lets you use the normal ⌘C shortcut in Books while not affecting copying in other apps.
Are you the Raph who built Advogato?

I loved that site.
We still follow several British laws in India 70+ years after independence. Unless, there is a demonstrable political benefit, old laws generally stay on the books.
Probably not directly related. Dimmers cause voltage spikes, and cheaper models are less equipped to handle that.