skysight-inc/HackerNews huggingface dataset:
Show HN: Fingerprintjs v2
I'm the author of original Fingerprintjs, and I've started the development of a new, backwards-incompatible Fingerprintjs2 library. The goal is to work better on desktop and to work reasonably well on mobile. Join the project, share your ideas and code!
The development is on github: https://github.com/Valve/fingerprintjs2
Combining the power of R and D3.js
Let's Build a Browser Engine in Swift
India's Daughter BBC Documentary Delhi HD
Dogs can make life very complicated for a depressed person.
Oracle Extends Its Adware Bundling to Include Java for Macs
The "one bug was found" only goes for exploitable security vulnerabilities. There have been many other, less impactful bugs. This is still an an impressive archievement, especially because DJB chooses to juggle with chainsaws and write in C.
I'm glad to see a comment on this issue raising honest points, which is uncommon to see. In 2015, using a lot of tech is far less optional than using pornography and sex workers, which is optional (as in, optional = bool(True)) in every case.

For the both the necessary and optional physical products, there should be more involvement in campaigns for favorable trade legislation and worker conditions, and I think we're all guilty of lack of participation in this, which is only made easier by the entrenched influence of the companies involved.

From reading a lot of different people, I don't think the feminist advocates for the Nordic model "don't take sex work seriously". I think they identify porn and prostitution as socially harmful to women as a class and physically and psychologically damaging to individaul women in a too-large amount of cases, and would rather see women exit en masse through programs that help them find support and work elsewhere, than anything else -- toward the eventual abolition of prostituion. (I think the opinion is split on whether prostitution is inherently harmful -- that is, in a post-gender world where there is no trance of social definition of women as stores of resources to be extracted for pleasure and service, would prostitution still be socially harmful? -- but I don't think it matters for the questions at hand.) Here are some links to introduce a camp of thought that is never given a chance in the mainstream:

http://antipornfeminists.wordpress.com/2013/12/20/qotd-the-p...

http://sarahditum.com/2014/02/24/who-do-you-listen-to/

https://www.youtube.com/watch?v=KbxBJf9UtWg

https://firewomon.wordpress.com/2013/12/08/is-choice-really-...

http://www.thepinkcross.org/pinkcross-articles/october-2011/...

https://www.youtube.com/watch?v=9HvC_sEURXA

http://www.bad-housekeeping.com/2014/01/08/violence-teenager...

http://www.theguardian.com/commentisfree/2014/oct/24/pornogr...

http://uts.cc.utexas.edu/~rjensen/freelance/pornographyisale...

http://www.theguardian.com/commentisfree/2011/mar/05/convers...

If any of these links are broken, I suggest trying the WayBack Machine.
How to Unlock Samsung Galaxy S6 Edge Using Unlock Codes
To the fundamentalist, sure-there-is-a-God mind, "idolatry" is not only the practice, it's a "thing" that exists all by itself, by virtue of its own presence as a concept. As long as there are still idols -- images of false gods -- idolatry is still alive and well, even if no one prays to them.

It's the same rationale as behind not allowing the representation of human shapes (or, for most Islam, the figure of the Prophet): to "us", it seems to be a simple case of "then don't fucking draw it", but in fact any representation is, to "them", insulting.
> which, as I said, is what users really care about when they ask for native apps

That's true, but that's not what developers understand "native" to mean. Since most readers here are technical in some fashion, it makes more sense to use the more specific definition of the term (e.g. compiled, not jit'd, interpreted or otherwise managed)
Weirdly, while certain feminist positions started with insisting that women and men be treated the same, other positions by self-styled "feminists" are simply the insistence that women must be treated differently. ("False equivalence")

Being part of a sexually dimorphic sentient species with strong instincts for the social "outgrouping" of different "others" is an awesomely weird experience. At other times, it really, genuinely sucks.

The basic problem with humans, is that we are wired up so we can't always recognize everyone else as fully "human." When it comes to this, it definitely "takes two hands to clap." Were it to be truly otherwise, many of the problems of the human condition would be solved. (Consider the above a reference to you and the gp commenter.)
Totally see your point, but it makes me wonder why IBM point to this demo as an example of Watson API usage (and how good it is) when the demo doesn't live up to (anything like?) Watson's true potential.

Strikes me as a little counterproductive from a marketing POV.
Cloud at Cost node API wrapper
Rarely do I get sweaty palms just by reading a text. But Honnold on that ledge, that was like watching some russian kid doing stupid things on a high rise on Youtube. I hope hes not gonna fall too soon...
Ask HN: How many devices connected to the Internet will we carry in a decade?
People who say it isn't possible to maintain a work/life balance in a startup are usually those who find it hard to delegate - they don't have people around them that they trust to do as good a job of something as they do themselves so they refuse to hand responsibility to other people or accept that they aren't the best person for the job.

In a small startup that's fine because there aren't that many things to do. A founder can be the developer, support, strategist, and marketer all at once. Arguably it's even a good thing at that stage because it keeps the burn rate down. The problems arise when there's too much growth for the jobs to be all be done, or even just overseen, by a founder. Then they struggle and start to hold the business back.

A good founder is always be looking for people who are better than they are to hand things over to. That's how a business succeeds.
Yeah djb's way suggest we use TAI time format, because it's more accurate. Anyway I haven't found this to be so big of a hassle for me. And it sounds really cool what it's doing :

> The standard timestamp used in "the djb way" is TAI, for Temps Atomique Internationale. It is an absolute measure of elapsed time based on the decay of cesium atoms, where one day is equivalent to exactly 86,400 TAI seconds.

> But the actual rotation of the Earth does not exactly conform to the TAI idea of time. In fact the Earth is slowing down a little bit, so that each physical day is minutely more than 86,400 TAI seconds.

> Our human notion of time is based on this physical day length, and is represented by the UTC timeclock. The UTC timeclock is intended to represent a clock that points exactly 12:00 noon when the Sun is directly overhead on the solstice at 0 degrees longitude.

http://thedjbway.b0llix.net/leapsecs_update.html
Write a script in Coq
Formally verify a script in Coq
I don't know much about Marxism, I use "class" in the intuitive way that means a group of people with interests. I don't think anyone actually disagrees that the world has groups of people with interests. Everyone understands that blackface is detrimental to black people "as a class", and was/is symtomatic of certain things about the "class" of white people out of which blackface performers come.
IMHO the assumption that parsing the SQL is the bottleneck here is unfounded - I'd like to see some analysis supporting that first. The queries used in those benchmarks are extremely trivial, and there are far more expensive operations involved. I don't think it can be deduced from comparison of two quite different benchmarks (different workloads, different dataset sizes, different hardware, ...)

Also, relational databases are general-purpose query engines, not caching solutions like memcached, with very limited set of commands. It might be possible to invent a more efficient binary protocol to send queries/receive results, but then you still have things like optimization, planning, permission checks, ... that are usually more expensive than parsing the data.
See also the second part here: https://news.ycombinator.com/item?id=9156334.
See also the first part here: https://news.ycombinator.com/item?id=9156333.
DJB is contributing to a security research OS called Ethos, https://www.ethos-os.org/

Papers: https://www.ethos-os.org/papers.html
Except that my original analogy has a lot of upvotes. But it is common enough to assume that the rest of the world agrees with you, when you think someone is wrong.

If, instead of trying the pissing contest, you could actually try to figure out why your "do you see why you're wrong", didn't, in fact, make me think I was wrong, we might get constructive. I think it didn't because it begged the question. Otherwise, piss away, it is funny to see how facile the 'yeah, no I'm right, because, I think so!' gets.
Mobile Phone Data Reveals Humanity's Reproductive Strategies
Libon lets you receive calls even when you've got no signal
If anybody from the company is reading this, why an app? This seems like a new trend in cooking equipment and I fucking hate it. I don't want to have to flip between a half dozen apps just to make dinner. How hard is it really to put a small display and a handful of buttons on the appliance in question and make it usable without having to use my phone? Maybe I'm just strange but as much as I love the idea and really want one, the lack of a UI on the device itself is currently holding me back from ordering one. Call it the "Old Luddite retro model" and charge me $50 bucks extra if you have to, but give me an interface right on the device and I'll give you my credit card details.
Thank you for that: I hate shortlinks when unnecessary (almost always), and often use untiny.me. Halas, it unshorten only a few addresses: your app fill the gap, thank you, definitely going to use that!
This is one of those learned things that becomes inborn, I think.

I have a few things I'm pretty good at, and I'll pick up & try anything, because it's fun. Most of the music I make is improvised. And I've been picking up & trying any instrument I run across for decades now, so I have snippets of experience in lots of things now.

My wife studied classical piano from an early age, and can sit down and sight-read stuff I haven't got a chance at playing on any instrument. But she never improvises, never tries out other instruments, and thus can't really do the same thing (pick up anything and make music on it).

We both have a (possibly-inborn) talent for music, but we've taken quite different paths, and those years spent quite differently really show, now.
>who runs their own email server? :)

Anyone who cares about privacy? :)

Qmail is too old to be usable these days, but Postfix does at least use its security model. It isn't perfect, but arguably the best mail server around for that reason.
Electric Jet Design [pdf]
MySpace: what went wrong – by its former VP of online marketing
I always had the feeling the djb's software is going to be interesting but never going to be widely adopted long term. I think this feeling turned out to be right, since I rarely come across environments running anything from djb, especially lately, and it's hard to spend a day without touching a few things involving code from Bellard.
Everything ISIS do seems designed to outrage western liberal sensitivities. And, indeed, I'm outraged.

When I think about it a bit more the question is: who's yanking my chain so perfectly?
FlatMap(Oslo) 27-28 of April 2015 a functional programming conference
EU Council proposals on open Internet – Episode 2, the clown wars
Fintech City Tour Toronto Crypto 2.0 is only one part
> I think the opinion is split on whether prostitution is inherently harmful -- that is, in a post-gender world where there is no trance of social definition of women as stores of resources to be extracted for pleasure and service, would prostitution still be socially harmful? -- but I don't think it matters for the questions at hand.

I think it does matter - in fact this seems to be exactly the pain-point in this whole thread, that everyone differs on that particular point. If it isn't inherently harmful (and again, I haven't thought about it enough to decide), then your line of argument seems to conflate feminist causes with sex workers', and we'd be trampling over a non-harmful industry just to further the cause of feminism [^].

On the other hand, if it is inherently harmful, there's no need to entangle the two either, and we should legislate against it regardless of whether it damages women as a class or not.

Thanks for all the links.

[^] edit: which may be a legitimate reason, of course. But it would avoid most of the discussion in this subthread.
The world is changing – eCommerce video
Even when only doing domain validations, CAs still usually ask for personal information. You would have to lie at least somewhat convincingly to obtain a certificate without providing personal details which feels fraudulent and could potentially put you at risk of having the certificate invalidated. I'm assuming let's encrypt will address this since it's going to be a fully automated(?) system.
61 Ways to Dramatically Increase Conversion Rates
That's an amazing paper, thank you for linking to it! I actually learned something new from it, in particular the sections 5.1 "Accurately measuring the TCB" and 5.2 "Isolating single-source transformations". It turns out there's a wrong way and a right way to do "privilege minimization" for security, and all my life I've been thinking about it the wrong way.
"Special shout out to Yehuda Katz, who helped us design the annotation+decorator proposal which helped make this work possible."

The feverish Yehuda Katz is everywhere! But most importantly he is here on Hacker News and has close to 6000 https://news.ycombinator.com/user?id=wycats
I work remotely. I get to create exactly the kind of work environment I want.
> I have never actually heard of a male being coerced into prostitution.

Does that mean it doesn't happen?
The social attitute toward being a prostitute is another thing entirely. I was talking about "social stigma" against using prostitutes.

In most contexts "outside of my social circle", "sex" itself is generally seen as humorous/inappropriate topic, for reasons that I don't think are due to sex being seen as shameful or worthy of stigma, although many claim that this is the case. So if I did what you suggest, there would be confounding variables, would there not?

I think if my boss and I (he counts as outside my circle, no?) were both drunk in a bar, and I mentioned using a prostitute, his jaw would stay well off of the floor. I think this is true of most men, even the conservative Republicans ones who act otherwise in more "family" type situation. I will suggest that you try it, maybe I'm wrong.
I read lodash's source to get a feel for how to write fast, high-level, bug-avoiding js. There are a few good ideas in it, like aliasing base methods like 'Array.splice' to a function 'splice' to prevent someone breaking your code by cloberring/overriding these methods.
I read a lot of my old Python whenever I need to cheer myself up. Not sure why it helps.
Ideas: since you are competing on the price. add a graph showing emails/payment growing with you and mail-chimp/other strong competition side by side. next to it say "lowers is,of course, better." then you have to attack the main objection(IMHO), lower delivery rate. not sure how but you need to think about the "no one ever got fired for chosing IBM" affect and counter it. you can say something reassuring about SES. or have a quote from a user or two.
That I agree.

Regardless of I and others might think about Go's design, every user application that gets written in Go instead of C or C++ (assuming C like code instead of proper safe C++14), is an improvement on the current torrent of CVE exploits.
Oracle bundles adware with latest Java for Mac installer
How are some factories so cheap for food products? A peek into a few
> Looking at his code, it's kind of scary. No comments.

Did you ckeck out addresses.5, for example? The source may not be commented, but if he clearly describes his assumptions (he does), source comments are less necessary.

> K&R C style declarations.

I don't understand what bearing this has on code quality. Do you contend that it leads to bugs?
The name you want for "in the language" is EDSL: Embedded DSL. DSL is quite often used for library-level constructs but really, any concrete syntax (e.g. graphviz's dot format) is a DSL.
Advanced Reflection with Go at HashiCorp
What is the difference? And how does it matter?
Yep. Here's the code from nginx: https://github.com/nginx/nginx/blob/master/src/http/ngx_http...
Women occupy a different social position then men, so we must think about them differently, thus treating them differently. This old talking point about "equal treatment" is a "strawman".

I think if you do a sufficient amount of reading about the history of feminist movements (there are good books, like Lorber's "Gender Inequality") you'll find that "insisting that women and men be treated the same" is explicitly not the prioritized framing of all feminists or feminist movements. There are other framings.
I think you misunderstood, because you missed the sarcastic tone that I perceived in the previous parent comment.

I agree with what you wrote, of course. I may not like the existence of prostitution, but in order to have others respect my strange preferences, I'll have to respect the strange preferences of others, as long as it's consenting adults doing things.
One thing I really like about LALR and LR parsers is that they warn you about all ambiguities. IMO that's one of the most useful things when designing a syntax.

People (and Wikipedia) like to pretend that e.g. PEG grammars cannot be ambiguous, because the PEG "choice" operator is ordered. In reality, that doesn't make them unambiguous, it just hides the ambiguity. By the same logic, you could say that LR grammars cannot be ambiguous either; the parser generator will always produce a working parser. The difference is, LR parser generators warn you about the parts of the grammar where the generator had to make a choice (and their choices are well-documented and not arbitrary), while PEG parsers don't.
'How to Solve It' looks to be just the book I've been looking for. I would say I'm fairly good at problem solving, but I've always felt that I do a lot more stumbling around than I should on my way to solving most problems, and I really should be methodical about it.
I can't say enough good things about SICP. I'm currently working my way through it, and it's such a joy. Watching Prof. Abelson and Sussman's recorded lectures from the 80's is equally enjoyable because they're such good lecturers; thought-provoking and engaging.
You may be right, although....there have to have been porn movies made that weren't distributed for one reason or another. Were all of those legally considered prostitution because they didn't get distributed? I don't know the answer, but I'm guessing they weren't.

Imagine you had a house where you setup a few bedrooms with pre-set cameras. People come in, sign the papers saying they want to create a movie, select their actress(es), and leave with a link to view the movie from secure servers. It is available to them, to share or delete if they like. I am also not a lawyer, but I think this would probably be OK, especially in California where there are specific laws allowing porn to be produced.
Once you go to the trouble of naming the script, might as well show off a recursive version as well:

#!/bin/sh

a=$1
b=$2

# base case
if [ $b -eq 0 ]
then
echo $a
exit
fi

echo $(./gcd.sh $b $(($a % $b)))
'Nearly 50,000' Pro-Islamic State Twitter Accounts
Good history transcript. Has the Guardian given any other conference speeches this quality of transcript?
Why worry about one specific fear when a lot of other frivolous claims can be thrown at you at any time?
But how can you do pervasive user metrics and in-app purchases with a simple button? /sarcasm
out of curiosity, what do you (does he) do if printf fails?
And the code had to be compiled with the compilers that even in nineties were "old".
There are the three general grouping points of views:

1. Prostitution industries are non-harmful

2. Prostitution industries are harmful to women no matter what the social context and always will be

3. The industies are harmful to women as a class today and throughout history, under the system called "gender", where men assign to women the role of stores of resources to extract, which has existed as long as civilizations have.

Many people are, genuinely or otherwise, treating the original commentor like he was asserting #2, when he was asserting some variant of #3, which does not logically have #2 built-in. You don't have to agree with the latter part of #3 to understand that it is not the same as #2, and we can start talking about 1 vs 3 without having to resolve 2 immediately.

I mean, we already know this, don't we? We can talk about how to deal with racist institutions without always falling back into questions of "what is race? in a post-racism world, would races exist?" Maybe the analogy isn't perfect...
So it's basically a temperature controlled soldering iron for food?
Rpythonic
Instaparse is great. I've used it just enough to know how powerful it is, in a weekend project to write an org-file parser.
It also shows that the resulting "bug-minimal" code didn't just spring out of nothing but is the result of a lot of experience even two decades ago:

"I started writing an MTA, qmail, in 1995, because I was
sick of the security holes in Eric Allman’s “Sendmail” soft-
ware."

djb even then analysed the security aspects of the bugs. And spent the considerable time working on the solutions:

"My views of security have become increasingly ruthless
over the years. I see a huge amount of money and effort being invested in security, and I have become convinced that
most of that money and effort is being wasted. Most “security” efforts are designed to stop yesterday’s attacks but fail
completely to stop tomorrow’s attacks and are of no use in
building invulnerable software. These efforts are a distraction from work that does have long-term value."

BTW the "TCB" was never explained in the article but I guess he means "trusted computing base."
I fail to understand their conclusion. IS is not an atavistic return to a primitive past because it's based on Wahhabism, an atavistic return to a primitive past?

I also think she is severely underestimating their support in the ummah. It's easy to superficially condemn the destruction of museum pieces, because hey, museums are pretty neat and educational. But it's very hard to condemn on a deeper level IS' fight against idolatry when the prohibition on idolatry is such a central tenet of your faith, the Shahada.
I'm not sure if that Wikipedia article helps make things any less sad:

> In 2011, Spiers's daughter Jane was convicted on counts of manufacturing a controlled drug, and one count of doing so for sale
Ask HN: What framework/libs are you using for building RESTish APIs in Node.js?
Hello HN,

I'm looking for a suitable framework for building medium-sized* Node.js APIs and I want to know what you are using or would recommend.

Ideally, it should:

* automatically build RESTful routes based on models (incl. relations), if not, make it easy for the developer to implement that

* use MVC concepts like controllers, filters and such

* support simple authorization/authentication (i.e. acl, bearer)

* be flexible/customizable (e.g. don't force me to use Whatever_Case on my database tables and such)

---

Currently, I'm using the following, hacked together: express.js, bookshelf.js/knex.js (models), passport.js and acl (auth). These are fine if your project is small, but when it grows, it gets messy.

So, what frameworks are you using?

---

*by medium-sized, I mean something like an invoice creating API