skysight-inc/HackerNews huggingface dataset:
A fair point. But a similar argument could be made about speech and the press. It's at least a little scary.
I think that when you look at things at a microscopic-level, everything looks boring and unoriginal. For example, every phenomenon on Earth (and beyond) is just an interaction between atoms. Looks pretty boring.

As the OP mentioned, beauty is created by abstraction; an ability to look at the bigger picture and make sense of it. So I agree that abstraction is the most interesting thing in writing software.
I think you and I are thinking the same thing: if the source is available, then the reader can form their own opinion.
> There is nothing fundamental about sending the warning by email vs slack vs irc.

I agree with this but I would put it somewhat differently. To me, notifications are a separate service, and whatever options there are for notification should be orthogonal to whatever is doing the notifying. If company A's policy is that notifications only go by email, nothing else, while company B has email, slack, and irc, that's for their respective notification services to worry about, not for each individual application that is using the notification service. To the application, it should be send_notification(content, recipient) and that's it.
"Indonesian investigators have determined that design and oversight lapses played a central role in the fatal crash of a Boeing 737 MAX jet in October, according to people familiar with the matter, in what is expected to be the first formal government finding of fault.

The draft conclusions, these people said, also identify a string of pilot errors and maintenance mistakes as causal factors in the fatal plunge of the Boeing Co. plane into the Java Sea, echoing a preliminary report from Indonesia last year."

https://www.wsj.com/articles/indonesia-to-fault-737-max-desi...
How is he getting the salt from the database?
Hmmm... Glancing at my shelf. That's not easy. Two that are close are:

Programming Pearls 2e (239 pgs)

Practice of Programming (267 pgs)

I see Algorighms + Data Structures = Programs, but I know that's well into 300 pgs w/out looking.
Back when Joyent still operated a public cloud you could get machines with 100mb of ram.

The problem as you go cheaper is the cost of ipv4 addresses.
Last time I checked, Oracle had some kind of branch in Russia. Not sure whether that clause is enforceable within Russia laws, but they could just bribe police, so they would make one's life quite miserable.

Money is money everywhere. May be even more so in Russia.

I have no idea about China, though.
PKI authentication is only insane when delegated to a third party. There is a built-in assumption within the CA system that no two parties can ever trust each other and intermediaries are always needed. A world of strangers who never learn anything about or get to know each other. It is either impractical or impossible for the first party to trust the second, using this system, without third party intervention. What reason is there that a website owner should never send a CSR to an end user who creates her own CA cert? Why are third parties the only ones permitted by websites to sign their certificates? Welcome to the world wide web of middlemen.
This is pretty cool. Definitely worth documenting I think.
The "universe" is also, in some sense, much more complex than a couple of decades ago.

In most cases we don't need to deal with as much low-level complexity or with cumbersome tooling, but "understanding the universe" would mean understanding pretty much all the levels of abstraction we have (and we have a lot), a diverse stack of technologies with rather different paradigms, a security landscape that has become much more complex with all the code we're running in a browser, and so on.

I don't know what one is to do, but I somehow feel that "understanding the universe" is much more difficult nowadays than it perhaps was a few decades ago. There were probably fewer levels of abstraction, less diversity of technology, UIs might have been programmed in the same language as the rest of the program so there might not have been a need to juggle in a few languages at the same time, etc.

Not to mention that since it's nowadays possible to program reasonably without having all that lower-level understanding, unlike perhaps a few decades ago, lots of people do that and (immediate) productivity expectations naturally grow to match.

I feel the pain, though.
Yes, there is a benefit: correctly implemented hash tables are faster. Haskell's GC may prevent a good implementation, but that's a problem with Haskell, not with hash tables.
If you're already getting a new car, it makes sense to get a hybrid. But it doesn't make sense to replace a working car to get a hybrid. It barely makes sense to replace a working car to get an all electric, but it makes sense if you have solar.
Can you explain what Haskell fall behind in term of writing web servers?
As someone who wrote Node and Haskell web apps in the past I don't think it's true. Let't take a look at one of premier Haskell web framework Yesod. It has support for authentication, http/2, https, middlewares, logging, etc. I don't think there is any "modern web protocols" that Haskell cannot support. It's only a language anyway. It popular and powerful enough for people to implement something novel with it.

I know Haskell had been used for testing-bed for programming language ideas because making abstractions in Haskell is freaking easy. But you can just ignore them and stick to boring, working and practical subset of the language. The language already been heavily used in industries so I know for a fact that it's fit for production use. I myself did deploy Haskell apps to production (Telegram bot for personal use) and never encounter any problem.
Hahaha, yes, my wording is ambiguous, but you can probably gather from the tone and content of the first sentence that I mean it's becoming more user-hostile.
David Bowie, extremely influential to me as well and not caring what color his skin was, what religion or any affiliation he had. The status quo is irrelevant to me, rather think for myself, stumble on stuff and appreciate it all by myself.
I see a lot of Z80 enthusiasm on the web, is there a good forum/website to talk to the hard core? I just finished porting the classic Sargon Z80 chess program to run on x86, https://github.com/billforsternz/retro-sargon . One of the side effects of the project is Sargon in real Z80 assembly language, rather than the weird 8080 hybrid it was originally coded and published in, and I am sure there will be a hard core Z80 fan or two who would appreciate that.
How much exercise, and have you always been physically active?

[I'm more than halfway to your experience but definitely missing this aspect.]
Clearly we need some form of industry-standard notification mechanism, akin to security.txt for notifications.

Perhaps a well-formatted RSS feed at example.com/.well-known/security.rss ?

Email just doesn’t work in 2020 for anything mission-critical.
It goes from an annoying 30 minute walk from the subway to somewhere to hey I can catch up on Mission to Zyxx.
Mom Test by Rob Fitzpatrick. Found it to be a very well written book with simple but useful todos.
What’s your daily routine now and how has it evolved over the years?
Where do you work now? And also, I've heard that at Google for example, there is prejudice against older programmers? Have you experienced anything like that?
I reckon this is a relatively simple explanation & demo of how simple it is to crack passwords if you have access to both a database dump of salted passwords, provided the password itself is relatively easily guessable (present in some dictionary of candidate passwords).

In terms of performance --

> At the moment, it processes 100K attempts in about 2 minutes on a small VPS.

It is a bit hard to compare performance without knowing what the `hashloop` parameter was set to for each attempt for that benchmark. Assuming that the hashloop parameter is set to `8192` aka `(1 << strings.Index(itoa64, "B"))` as in the blog post, then this approach is computing about 6.83 md5 mega-hashes (MH) / sec.

For a 30,000x speedup for brute forcing md5: hashcat + 8x GPUs can hit something like 200 GH / sec of md5:

https://hashcat.net/hashcat/

https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27...
Bigelow Aerospace lays off entire workforce - Mar 23 2020
https://spacenews.com/bigelow-aerospace-lays-off-entire-work...
Just wanted to clarify that Dark isn't like Pulumi. The idea with Dark is that there is no configuration, just code.
Everyone followed a flawed IHME model, they shoved out elderly to make room for patients who would need ventilators because everyone blindly trusted the models and certainly didn't listen to anyone from Stanford.

They didn't listen to the data later, which continued to show that over 80%of the time ventilators were ineffective for patients.

Then again, the CDC still has listed fever as one of the main and certain symptoms of covid, yet JAMA published in late March/ early April that only 30%of patients actually exhibited fever, and concluded it wasn't a good indicator of infection.

Or The WHO who just put a video out which says masks are ineffective meanwhile every governor in the USA is demanding masks be worn by everyone essentially to virtue signal who is who.

But like all the above, this entire ordeal wasn't about a virus, it's about control.
this corresponds to sad scenario where the database itself is leaked and the attacker has access to it. the blog describes how the salt is stored as prefix to each hash.
I tried it with a bit complex pdf structure and it worked like charm +1. Would love to learn more about the underlying techniques/tech.
Brian Kernighan (the K in K&R and AWK) also wrote a similar book
with P. J. Plauger called "The Elements of Programming Style" [1].
There's even a talk by him about it online (2009) [2].

Kernighan also co-authored a (imo) really great book with Rob Pike
(once an assistant of Penn & Teller [3]) called "The Practice of Programming" [4].
Unfortunately, this one is a bit over the 200 page limit.

[1] https://en.wikipedia.org/wiki/The_Elements_of_Programming_St...

[2] https://www.youtube.com/watch?v=8SUkrR7ZfTA

[3] https://youtu.be/z4iVAcYyWN0?t=180

[4] https://en.wikipedia.org/wiki/The_Practice_of_Programming
Keep on, however, and soon I'm sure you will be the longest serving.
What is the cheapest fuschsia supported hardware device?
It Isn't just California, it's the entire USA. It wasn't about a virus it was about control.

https://www.forbes.com/sites/theapothecary/2020/05/26/nursin...
The Moon and Mars will be Eath's R&D lab. That, plus nationalism, will be the economic incentive which will drive the settlement of those places.
I would be alright with it if I didn't have to buy a battery with the car.
That crunchy sound of the VT1xx terminal and the other keyboards in this video are giving me an intense feeling of nostalgia.
To be fair my sample size is only two (2) establishments :)
Cracking isn’t usually something that takes a lot of code, just a lot of time
Just out of interest: you posed the question 'who is claiming that things are universally better?' and you are now acknowledging that you are aware of the arguments of a very mainstream (TED Talks, etc) source.

Why did you pose that question in response to the OP's explanation that some people are frustrated at the disconnect between their lives and the very standard narrative of a world which has benefitted from 'progress' in recent history?
That's not the point of the comment you replied to.

Pulling in oxidizer from the air gets you a 3x efficiency boost, but using a combustion engine has a 3x efficiency penalty. It cancels out.
Ask HN: How do you collect feedback from your users?
As founders, we know how important it is to talk to our customers in order to avoid wasting time building features that no one wants.

It can be difficult to know what to work on next, and how many resources to devote to a particular product or feature.

That's why I've decided to build a user feedback tool, that will help founders like ourselves not only collect user feedback, but also organize it, and build product roadmaps.

As such, I'd love to speak with my fellow founders about how you collect feedback from your team and users, how you do your product roadmaps, and some of the challenges you face while doing so.

How do you collect and organize feedback from your users? What are your processes? What don’t you like about them? Care to share?
At a certain point you need to trust that the library you are calling or the framework you are developing inside is doing what it is supposed to do. Going deeper than that can be interesting as a learning experience, and occasionally it's required to figure out really difficult bugs or performance issues, but it's not a prerequisite for being able to understand your own work. Identify the edges of your domain, accept them and treat them as the rules of the game.

That said, by the sounds of it you have worked with some colleagues who have been unhelpful in teaching you the rules. This might be because you are building on a poorly-architected thing that cannot easily be explained, or in a system that does not have detailed documentation. Both of those situations are solvable problems, and neither of them is an excuse for the people who do understand to gatekeep their knowledge or discourage curiosity.
Perhaps ironically, advances in technology have generally served to make human space exploration more expensive, not less expensive, when compared to the alternative (unmanned/robotic exploration).
What's this wiggling about?
Truly, despicably evil.
From what I have read they are concerned about it being a complete lie made up by others in order to facilitate their oppression.

That makes it a huge problem for anyone that believes that climate destruction is something that needs to be solved co-operatively.

Or we can keep on laughing and sneering at people that don't think the same thoughts as us.

I wonder how that will work out?
Paul Graham agrees: http://www.paulgraham.com/taste.html
I don't think so. an interactive UI can have context-dependent actions, confirmation dialogs, disable access to buttons, etc.

When what is happening is basically an artificial computer process with human overrides, It could be a little disingenous to have a physical switch.

For instance: imagine there's some pump that the computer won't let you disable because disabling it would cause an explosion. You are in an emergency and flip a switch intending to disable it. You now don't know the internal state of the process... whether the switch flip did what you intended or not.
They laid off all their employees earlier this year.
The best interview process was at Pivotal where I had two pairing sessions with different developers in the same day/visit in two typical programming environments. One was front-end mobile and the other back-end TDD. They just wanted to know two things: (1) can this person program with any level of competence, (2) can I communicate/get along with this person.

My version would be talk to the candidate for 30+ minutes about their general experience and then in depth about something they worked on recently and can give great detail on what was being solved, how it was written, and challenges overcome in the process. I'll follow that up with pairing on a problem in a language/stack that's relevant to the position and candidate.

My fave way of getting hired is when your car breaks down on the highway and you buy a used car from Auto Trader and the guy sees your engineering ring and asks "Do you know how to make a print function for a GUI program?" I didn't, but figured it that weekend. Got the car and means to pay for it.
I am disappointed this is just an opinion piece. I was hoping for some data that backed the assertion.
Does it? The only people I know who don't lead a boring life if you look at what they do minute by minute, day by day, are fictional characters in books, movies, etc.

That's why we like entertainment - because it cuts out the boring bits :)

The art part is more interesting. Is there art to someone's life? I'd say yes, but that's because I'm artistic.

If you ask most people, they'll probably be confused by the question. Is your life 'boring art'? 'Huh' is the answer I most expect :)
Not licensed by Nintendo, though.

Can you elaborate on the legality of your CIC chip?
That depends on a service. For example I'm working on a service which is used by people at working hours (something like 8AM - 19PM, Mon-Fri). I can do anything outside of that window (well, +-30 minutes just to be sure) and nobody's going to pay for it, most likely nobody would even notice.

And for service that's expected to work without interruptions, I think, there should be a way to switch to a secondary database, otherwise those promises are futile. And if there's a way to switch to a secondary database, long patch install time is not a big deal.

Because whether it's 1 minute or 60 minutes, it's interruption nonetheless.
Thank you for this "Ask HN"
ever since I became a parent,
the only books I'm able to finish are the ones that are 200 pages or less.
Vote for America
When you made your own cart, did you do anything about the lockout chip? (I think it's called 10nes?)

Or do you carts only work on a modded SNES?
Apple deviated from OpenID Connect, but...

The third party is not supposed to link the information from an OpenID Connect client system by email address, which could change or go away at any time, and is also not guaranteed to be unique.

Rather, they should use the 'sub' claim which is meant to be the same over the lifetime of the user account with the issuer.
Help Save Locals – Buy Vouchers Now and Enjoy Later
We send humans into space because we want to, science and engineering benefits are side rewards.
Internet at sea is not so easy or reliable. The further out the drone ship is the more likely there will be issues.

Add to that a ton of vibration, sea state movement and atmospheric disturbance of the rocket right around the drone ship and I am amazed how good it is most of the time.

Buffering is surely already in place.
They aren't scared of benchmarks, because they've rendered benchmarks about their products illegal unless they like the results.
Key People Every New Business Needs
Sure, as a society we do some things purely for emotional reasons. But we should be honest about that - we shouldn't pretend that the reason we're building the Washington monument is because of it's potential use as a grain silo.

There's a lot more to exploration than space exploration (I think exploring something like the human brain will end up having a greater emotional and practical impact myself). But even if we just look at space exploration, we don't really get a lot from human space flight. As I said, in situations where it's possible to use human astronauts, robots seem like they would be more effective. And for most of the places in our solar system, we simply won't be able to use humans at all anytime soon. The missions to, say, Europa are going to be done by robots.

Still, many people, including myself, enjoyed watching the launch. Maybe something like this is more analagous to a cathedral or memorial.
One reason that I've heard is cluster, Oracle supports clustering while Postgres only provides half-baked solutions. But that was years ago, so I'd like for correction.
"INTERRACIAL VIOLENT CRIME INCIDENTS 2018" for
black on white, black on hispanic, white on black, white on hispanic, hispanic on white, hispanic on black crimes:

https://storage.googleapis.com/conservativereview/2019/10/50...
> the association most Americans have with the word "caravan" is to a Dodge minivan

For motor vehicles, perhaps. In general if I'm thinking of travel in a caravan it's 19th century wagons.
VMware what? Fusion? Fix the title.
Ullman's book is really accessible and what introduced me to SML as well,
but for those looking for something that goes a little deeper,
do read "ML for the Working Programmer" by Lawrence Paulson (author of Isabelle).
It has one of the best introductions to ML's module system
and even covers building a (toy) tactical theorem prover.
Oh, and it's now available online for free as well [1].

Another great book on FP is "The Functional Approach to Programming" [2],
which is a bit like SICP but using Caml (OCaml without the O) instead of Scheme.

[1] https://www.cl.cam.ac.uk/~lp15/MLbook/pub-details.html

[2] http://pauillac.inria.fr/cousineau-mauny/main.html
Its nice to see someone not get upset about the criticism!

Things that work well for one person can be dangerous for others. It's fine to share your positive experiences, but it's another step to be recommending the same to others.

There are a lot of other factors besides calcium absorption to consider. In fact maximizing calcium absorption with vitamin D likely has negative consequences unless there is proper vitamin K intake as well.
Your first sentence is not at odds with what I wrote, so repeating the second sentence back to me makes no sense.
A US government does not get to tell people how to practice religion beyond making a determination whether the belief system is a religion. And, making a determination if a particular practice is legal (to exclude harms like you mention).

That is why I have been careful to describe protected religious practices using the term 'otherwise lawful religious practice'.

The plaintiffs clearly practice a religion. Going to church is clearly a legal religious practice. Thus, the government needs to prove that shorter lines at grocery stores are more important than longer lines or less capacity at churches. The government can't prove that because it can't interpret (or weigh) the importance of going to church.
> I'd be disturbed if there was no hint of dissent when something pretty clearly goes against the text of the Constitution.

Incorporation isn't clearly in the text of th Constitution, and this is State not Federal action. Even if incorporation were clear in the text, it's not at all clear that failing to exempt religious gatherings from a broader general prohibition would be clearly against the text. It's true that even incidental impacts to important rights from facially-neutral acts are given strict scrutiny under case law, but that application is itself not an unambiguous application of the text and it's far from clear that this would conflict with that precedent.
I do not believe that Apple yet uses the access token bit.

OAuth tokens also are not meant to be used for authentication, and require either a separate token (as OpenID Connect did) with appropriate security, or to wedge additional security on top of access tokens as Facebook did with Connect.

This is basically because access tokens are meant to be messages about allowed access to the API resources, not messages to the client software about the user.
Bigelow Aerospace lays off entire workforce
Maybe the interesting thing about it is that it doesn't require any interesting techniques to crack WP passwords? That seems interesting (although unsurprising having an early career background in PHP and WP) to me.
A configurable Breakout environment for reinforcement learning
So what do you do when you encounter bug in Postgres planner? File a bug and wait for months or years until fix is released? Hack postgres source and fork it? Using hints sounds like a more sane solution. Nobody's perfect. Being able to work around is better than not being able to.
This is my favorite tool for jumping between kubernetes contexts/clusters and namespaces. I've used it daily for over a year and it's awesome