skysight-inc/HackerNews huggingface dataset:
I think it's obvious. For capture, the definition doesn't change (it's based on no liberties). Depending on the ruleset you don't need more than capture, territory/score/winner can be defined from that.

Conceptually it's fine anyway though, territory is spaces reachable over cardinal directions via empty spaces or dead stones from only one person's living stones.
I'd also be really interested to hear if anyone turned a startup into a PhD.
When you think in terms of semver as a social contract, one can also take into consideration what the documentation says. If the docs don't explicitly say you can do something, then it's entirely reasonable for the library author to say "well, that's relying on undefined behavior, you should not do that".
It's not but is in constant development. The author is very active on elixirforum.com
> I thought they just returned unsold boxes back to the vendor?

Even in the cases where the vendor/distributor allowed that (and discount bins were a thing because they often did not, at least at no restocking fee), the retailer still accepted the risk that the vendor or distributor would be defunct. If they had a consignment model where they only paid contingent on a retail sale, that was different, but (at least AFAIK) that was never the norm for boxed software.
This sounds a lot like differences in individual companies' organizational structures—I bet there are some where a "team lead" is more of a "first among equals," while others, as you describe, are primarily managing their group of technical specialists of whatever stripe. Similarly, in some organizations, managers tell HR, "We should fire this person," while in others, they tell HR, "Hey, I just fired this person."
Well they should add it to the HN monthly "Who's hiring" thread. Are americans eligible for this position or is it just for british citizens?
The immediate reason was the whole "PLAGURISM!" kerfuffle - Cassandra Claire's work (which was immensely popular within the HP fandom) was booted off of it for having a few too many Buffy quotes. Discontent about FF.net had been growing for a while, though - since they let anyone upload with no moderation, many of the fics there were low quality or unfinished, many of the reviews were one-liners or abusive, etc.
Oh, don't get me wrong, I fully agree with you. My point was only that if you see it as an either-or-scenario[0], the higher port is probably the better choice.

[0] Might be true for something like a bastion host, which must expose ssh or VPN (which would be the same scenario).
I always found it fascinating that in the 70's and 80's everybody moved away from glass and paper to plastic. I mean literally anything that could be converted to plastic from paper or glass was.

Do you think we'll ever revert back to just paper and glass again?

We are making some good strides with paper straws and the like, and mandating people bring reusable bags to the grocery stores - but I still see many of the stores I shop at still use plastic bags.
> a purpose-built rigid container.

Why not Al cans?
The Startup Community Way: Brad Feld Decodes Complexity
I know we've spoken in another thread, but I think it's important for people to understand that this sshd thing is a perfect example of why it isn't this easy: You reduce log spam moving to a non-privileged port, but also reduce overall security - a non-privileged user can bind to a port above 10k, but can't bind to 22. sshd restarts for an upgrade, or your iptables rules remapping a high port to 22 get flushed, that non-privileged user that got access via a RCE on your web application can now set up their own fake sshd and listen in to whatever you are sending if it manages to bind to that port first and you ignore the host key mismatch error on the client side.

Or you can implement real security, like not allowing SSH access via the public internet at all and not have to make this trade off.
I have in the past I have been in similar situations "Hmm I don't really know how this works but everyone else seems to know it". Stuff that keeps coming up at work with that nagging feeling of not knowing what is going on, but I should etc.

I've taken a deliberate approach to try to learn "bite sized" bits and then write it up like I am writing a blog-post or a training page or something with a bunch of "copy-pasteable" examples. Even if I am not going to show it to anyone else, I at least have my own reference material I can quickly jump back to to refresh my memory. Try to use something accessible from work/home/mobile etc - perhaps github or a personal wiki or something. I have a few nicely structured and interlinked things now that I like to refer back to from time to time when I forget the details of stuff I've had to go learn.

I think this is the "if you cant explain it simply, then you don't understand it" quote thing coming true. You need to learn it well enough to write it up. And then the process of writing up helps cement it in memory. And even if you forget, you have your own notes you can quickly flip up and re-read to remind yourself.

So e.g. you could start small with "basic OO concepts" write-up with a bunch of examples. For example I recently did this for HTTP CORS request and JavaScript modules. Now you've learnt it enough to write it down, and written your own personal learning material (that I find is way better than other people's since it is yours and your brain seems to prefer that IME) that you can go back and look at over and over.

The coolest bit I like about this approach is every time you come across the stuff you've gone out of your way to learn and write up when doing your job, you get a small little dopamine hit: "I know this. I've got this written down."
"We provide Safari for a great web experience too, but don't implement any standard APIs like push notifications, data persistence, bluetooth, NFC, add to homescreen prompt, icons, launch screen, themes that would actually make it a worthwhile alternative to the app store" is what they should have said.
Bitwarden's docs say it's possible to bring your own certs[0]. The Bitwarden marketplace image on DigitalOcean asks whether you want it to manage its own certs or not. From minor googling, it seems you can change your mind later by modifying a yaml file[1]. HN threading isn't best format for support. If this still doesn't help, let's move the discussion elsewhere.

[0] https://bitwarden.com/help/article/install-on-premise/

[1] https://gist.github.com/kylerchin/00e6990706183ddb0e0e792a1c...
Essential Job Skills Covid Introduced to Your Workforce – One Temp Agency
This could also be used for local things, by limiting which towers broadcast the message and which don't. No gps, app or data plan required.
This article was remarkably well written and reasoned. I would welcome more.

The author is correct that C++'s greatest weakness, and one that can never be fixed, is that other code can do things that violate the model your code depends on. It is not enough to have your own discipline, the rest of the system needs to observe the same discipline at interfaces. And there are many possible, correct disciplines to choose from.

Rust imposes one of the possible disciplines for memory-object management that enforces one set of non-negotiable tradeoffs and costs. You the programmer are relieved from choosing a discipline or discovering what was chosen, and from discovering that two subtly different ones were used in different parts of the system.

Memory-object management is not the only place where systems need a consistent discipline, but others can often be referred to it; and every program needs at least the one, besides any others.

Arguably the reason Common Lisp never took off is that practically nothing can be assumed about any other part of a system. C++ has enough forced consistency to drive adoption, but might better have had more. C++ has a lot more tooling than Rust does to capture semantics in libraries, so the library is the natural boundary for a discipline, and it is not unusual to find more than one safely co-existing, but it is also not unusual to find them not safely encapsulated, and in conflict.

Ultimately there is no substitute for sound design. Rust's limits help ensure a consistent design, but the cost in abstraction power is high.
It goes in waves. The tech industry (and the world) has changed significantly in the last 13 years. I'd say at the core the culture has been largely the same, but it's a bit less tech-focused, less startup-focused, fewer people with personal experience in the topics being discussed, with more discussions on politics (despite the general ban on political discussions) and social phenomena.
I'm not surprised at all - it turns out Polish is one of the hardest languages to master. Norman Davies, a British historian fascinated by Central/Eastern Europe with a particular interest in Poland makes a couple of errors per several minutes of speech. Typically with noun genders.

https://donald-static.s3.amazonaws.com/userimage/8cabf28c970...
The bee paper referenced in the original article (Dacke & Srinivasan 2008) is about real bees, and does a pretty good job of showing that the bees must somehow be keeping numerical track of how many instances of a particular landmark they've passed, at least up to a total of four.
Learn Directly from the Best - A Curated List from Twitter
Get yourself a mechanical keyboard: An explainer on the different types
Here is a question I have not seen a satisfactory answer for. Why is having an App on iOS a must have? It seems like any discussion about the market fairness of Apples policies requires a shared understanding of how necessary the ecosystem actually is. If you can freely choose not to deploy to that ecosystem then you can vote with your "wallet" so to speak. If you can't freely choose however then there is an argument to be made regarding if they distort the market unfairly.
That is the best feedback I've gotten so far, thank you thank you thank you!

I definitely am planning to make a serious business out of it. I started out with a coaching + app mix when the app was a lot more bare and didn't really work without me walking people through it.

I'll get the email, marketing site and the rest of it in order, you're right, Twitter isn't everyone's cup of tea (although I am focused on buildign an audience there because my style of writing seems to work well in short bursts).

I'm not going to hire a female actress to do the narration because I want my soul to be in the app. I might hire a speach coach though to get this to a higher level, so thanks for for pointing it out. I've actually gotten way better feedback on the narration given that I'm not a native English speaker and this is my first time recording my voice for anything.

Again, thanks so much. I'm now going to use this motivation that you granted me to go get this thing in front of many more people!
Agreed.

It's true: The experience was eye-opening to me, and that was what--13 years ago? Actually longer, now that I think about it, since I started playing at release in 2004 (also on female characters).

And you're right, I think it's a valuable experience that has to be seen to be believed. It's easy for me to post about it here, but it's difficult to convey how annoying it was (at best). Not simply from borderline sexual harassment either. There was, at the time, an undercurrent of harassing accusation that any dude playing a female character clearly had to be "gay." Looking back on it, this whole idiotic and immature belief was laughable, because all the gay guys we had in our guild played male characters. They also gave me a hard time for being hit on with some regularity, so at least there was some levity among our group to make light of an otherwise sad and disgraceful situation.

Unfortunately, that's not the only circumstance I can remember. There's easily half a dozen others varying from odd to outright creeper material that stand out, though not as much as the one I shared above. I figure if it happened to me that frequently, it's absolutely happening to women whom other players know are women MUCH more often. It wasn't just limited to long term encounters, either. Just standing around waiting for something as a female character in the early days of the game sometimes painted me as a potential target.

A friend of mine who also played female characters--and who moonlighted as a stand-up comedian--had similar experiences, but his dialog was absolutely hilarious to watch.
Yep! Ironically enough, hyrum's law leaves the ethics of breaking changes ambiguous.

Breaking compatibility with customers that are depending on your bugs to remain unfixed is both good (insofar as it removes bad things) and bad (insofar as things that were working work no longer).

Another angle on the social contract is visible in that, when we accidentally introduce a major-version change in a patch-version, we don't retroactively change the version number to a major version bump, we just release another patch. :)
Some things that came to my mind:

- List<T> doesn't "just work" with non-reference types. It needs boxing that increases memory usage and introduces stuff like ints being null.

- We need special functional interfaces for non-reference types for that reason (e.g. IntConsumer).

- This also affects Stream<T>, so we need IntStream etc.

- A method must have a parameter of that generic type (or it has to belong to a class that has this generic type). It otherwise becomes indistinguishable during rumtime. For example, a method like ImmutableList.CreateBuilder<T>() is not possible in Java (that example is from C#'s collection types).

Type erasure moslty comes into play when looking at non-reference types. For reference types, it seems to work pretty good (although it's weird that Map<String, String> will have the same runtime type as Map<Object, Object>). The last point I mentioned is not good, but no deal breaker.
If generics would be like in .NET, we wouldn't have any of these restrictions.

With type erasure, we ironically have to write more java code while not being able to express stuff in an abstract manner (Stream<T> is incompatible with IntStream).
EGS exclusivity doesn't limit distribution for other platforms, im not sure if this also applies for Linux as well.

Being on Steam does not guarantee the game will be on Linux. It sounds like your real problem is developers not bothering about shipping their game on Linux.
That's correct. I used Optional because it's included in Java and it's simpler. With Optional I could explain handling the presence of errors, but not the inspection of errors.

A full replacement is the Result type (a specialized 'Either'): https://doc.rust-lang.org/std/result/
Ask HN: Senior full-stack developer can't get a job
I've been looking for a new job on and off since February and have had no luck despite participating in the final round of interviews for two different companies (one was a pretty large and well-respected company from Australia). I have over 8 years of experience doing full-stack web development and supposedly scored in the 80th-100th percentile on Triplebyte's generalist interview. I have worn many hats from being a sysadmin, junior code monkey, architect, and mentor.

Other relevant points, I'm based in Pittsburgh and not looking to move and I'm 35 years old.

Admittedly, I've been very selective with where I'm applying since I don't want to get stuck in a terrible culture which I've gotten better at identifying. Otherwise, what am i doing wrong?
Super fast startup is not a requirement for this application.

Also, I think you are overstating the case with the exception of Gnome 3. It just had a big performance regression fixed. Mate and xfce never suffered from it.
Your example is advertising which is the opposite of security through obscurity.

Obscurity is another layer of hiding or indirection: like the owl has camouflage and it has a hole in a tree.

Advertising your fitness (your stotting metaphor) is effective when: you are part of a herd, and the attacker will only attack the weakest in that herd and then be satisfied. Like double locking your bike next to a similar bike that has a weaker lock.

Computer security is different because usually either:

a) everyone in the herd is being attacked at once (scattergun/IP address range scanning), or

b) you are being spear targeted individually (stotting won’t work against a human hunter with a gun, and advertising yourself won’t help against a directed attack).

An example of advertising your security might be Google project zero, or bug bounties.
That is a historically inaccurate take. s/retail/distributor/ if it helps. The point is that a software developer would have been very lucky to earn a significant fraction of the retail price. 70%? Not even close. The App Store completely reversed this model.

That said, it's valid to acknowledge this history and still think 30% is too much for distribution overhead in 2020. I do not have an opinion on the latter.
I've never heard the term "kleenex program", what does that mean?
> Dyalog APL's source code is about 500KLOC according to Dyalog's staff. GNU APL is over 100KLOC per its homepage. April's .lisp files currently stand at 6350LOC.

What accounts for this discrepancy?
Using the Microsoft Store is totally optional. Selling software for Windows has rarely required any coordination with Microsoft other than maybe code signing with a cert from an approved CA. Exceptions include drivers, and Windows Phone/Windows Mobile 10
Is this in the usual technical sense of MUST / SHOULD / MAY, or does 'should not' here actually mean 'may not' (as suggested by the category being 'Unacceptable', rather than 'Discouraged')?

(Several other entries are phrased much less ambiguously: "Unacceptable: (i) Creating an interface …", and (ix) is explicitly "Apps must not …" (emphasis mine).)
It's like a painting in front of a safe:

- doesn't reduce the security of the safe

- ensure you don't advertise "THERE'S A SAFE HERE" to whoever visit your house, possibly reducing burglar attempts

Now, if you have just the painting over a hole in the wall, you got something wrong...
Back in the days operating a computer also needed weeks of training and was a qualified job. That doesn't mean it always has to stay that way.
I've always been fascinated by pill bugs, also known as "Armadillidiidae" [1] they are such cool creatures. I don't know why, but the fact that they are land-dwelling crustaceans was just interesting to me.

I had no idea something like this size and related existed in the sea! Incredible! I wonder now what the evolutionary tree looks like.

[1] https://en.wikipedia.org/wiki/Armadillidiidae
Yes, I think these are related concepts. I read a whole host of books that are related and have been influential. Off the top of my head (on top of HSP):

The Big Leap
The Sedona Method
The 15 Commitments of Conscious Leadership
Hold Me Tight
The Four Tendencies
I assume there is a lot more in the platform
Huh? How would that work? You have no idea what my port knocking scheme is.

For all you know you have to knock ports 22, 46, 1776, and 8998 to the timing of "shave and a haircut" switching between udp and icmp along the way... Good luck, the entropy you have to overcome is astronomical.
I've found that in practice it leads to very generic exception names.

When a new failure mode is found for a lowlevel component, in other languages devs would add a new specific exception and things would generally work. In Java, devs have to modify every intermediate component to handle or pass the new exception type so they end up just using an existing one that is super generic.
China's market is not closed to foreign companies. This isn't 1990 anymore.

American brands are everywhere in China, from Teslas, to iPhones, to McDonalds, to Starbucks, to the NBA, to the list goes on and on and on. Google, Facebook, Apple each make billions of dollars from China, every year.

Calling that a closed market is... Not at all accurate. It's by no means a fully[1] open market, but it's not a closed one.

[1] The definition of fully also varies from country to country. Is Canada a fully open market? No. For example, there's a lot of government protectionism surrounding media, and media infrastructure. Is the US a fully open market? No - again, not in the case of media infrastructure. Neither is an open market when it comes to food, or medical drugs. (For good reason, in my opinion - but that's just that - a political opinion. Other people have different opinions on this subject.)
The clause starts with "get what they've paid for" - does this apply to free apps?
Like it or not English is the global lingua franca. The top global talent is unlikely interested in being educated or researching in other languages.

And national university in my opinion should educate in their nation's language(s). Even if it means losing the very crème de la crème of global talent.

If the EU could get its shit together they might some day dump more money in universities than even America does. And create some giant English based universities located on the coast of a sea, somewhere where the EU has the best climate. All just to compete with the global top universities.
Also, kickstarter? Haven't considered that, but I'll see if this makes sense.
Taking over Laravel Nova Admin Panel via an XSS Attack
While doing a penetration-test for a client we found a dangerous XSS in Laravel Nova version 1, sharing here the details so you can apply proper remediation if needed.
HN opinion: Stop trying to force Big O into software development
Web programming has to include PHP. You might might not like the language, but it easily beats other languages when it comes to the sheer volume of CRUD web apps built in the language.

It's available on every possible flavour of hosting (including shared hosting which makes it very accessible to many users). To setup an app can be as simple as copying PHP script files to a folder on the server. No other language can beat PHP for ease of server deployment.