skysight-inc/HackerNews huggingface dataset:
It's a little thing, and not uncontroversial, but I'm excited to see another language besides Python adopt whitespace. In general I wish more languages provided a way to enforce code layout.

After using Python professional (and managing a team of developers) for a few years, whitespace is a great way to keep things readable as more people touch code.

Whitespace isn't the only way to do it, of course. Go's "gofmt" is a good example of a different way to enforce code layout. [1]

[1] https://blog.golang.org/go-fmt-your-code
>> The checksum is obviously transmitted out of line on a secure channel.

Then you have all the problems of setting up a second, secure channel. This would seem to increase complexity, not decrease it.

>> And even if we would go back to cryptographically signing resources you still benefit from it tremendously speed wise because after the initial signing, you can serve up the same data to everyone directly from memory or filesystem.

Sure, if all your data is static this might help in terms of speed, you could drop some of the TLS overhead, though not all of it because you've still got to somehow verify a server signing key or your 'out of line' channel (which is probably going to have to be authenticated and integrity checked itself now.... TLS seems a good way to achieve this)
Makes sense. There is a latency of when .NET Framework versions are released and when they show up on Windows Update. Also, customer do not have to install them even when they do show up. Also, some versions don't show up on Windows Update for various reasons. That's why the install step exists.
Sexism in science: Peer editor tells females their study needs a male author
> Government censorship is happening if you want it or not. The main difference is now that there is a lot more collateral damage with SSL deployed.

Good. Censorship and other attacks should be as noisy, obtrusive, and damaging as possible, so that we have more incentive to stop it (by both legal and technical means). Such attacks should not pass silently.

> However what triggered the whole article was that more and more websites become completely impossible to use in the absence of SSL even for anonymous data access.

Why do you need to use them in the absence of SSL?

Many ridiculously tiny devices still have enough power to run a simple TLS stack. And if you're really trying to access web services from some potato-powered device that can't run a TLS stack, you have much the same problems as a device that can't run a fully capable network stack at all. In either case, speak a simpler encrypted protocol (e.g. Bluetooth Low Energy, 6LoWPAN) to a local device, that can either provide the services you need or access them on your behalf.
This article ignores the complexity of not encrypting everything.

What is the recourse for the average Joe when his social network doesn't encrypt logins? Facebook did this for years, the average user just ignored it and logged in, no amount of training or convincing could dissuade many.

What will the user interface look like for a site that is not encrypted but verified secure? It is hard enough to get people verify the lock icon is green or gold. Many ignore and just assume that online shopping is so fraught with hackers that it cannot be done safely. This will not help that situation.

Why do we care about the cost of CPU cycles? No matter how good the encryption is a human still needs to make a decision. Settling on a simple one helps the human make it faster. CPU cycles get cheaper every year but the brain hasn't improved in thousands.

Encrypting everything is simple and can be made to work even for less technical people.
It's try-able. But tell me how to setup and configure IIS ARR as a reverse proxy without using the GUI.

SQL Server is probably the best case, since the UI is a wrapper around TSQL and they expose the scripts at any point.

Then there's fun stuff. Like Invoke-WebRequest going super slow because it has a terribly implemented progress bar. That's right: out of the box, you can't download files with the shipped downloader, because it shows progress (like curl) and increases transfer times by a couple orders of magnitude. Come on.
> How would you bootstrap a secure encrypted login for a user who was browsing the site without SSL?

If you have a website where users sign in you are pretty much left with SSL from the sign-in form on but you can move an indirection between the sign in and out so that a user has a chance to verify they are authenticating on the right site. Fundamentally there is no difference from the user's perspective for as long you are okay with moving the log-in box to a secure URL where the user can check the authentication.
I am reminded of ELO's Eldorado, which itself follows the style of the original Walter Mitty story.
https://en.wikipedia.org/wiki/Eldorado_(Electric_Light_Orche...
I don't mean to be a fuddy-duddy, but I don't get it... How is this better/worse than doing...

git config user.name Foobar
git config user.email foo@bar.com

...which will set that config variable for the current repository only -- not global. I ended up do the a similar thing for a simple git pairing tool[1] that would let you set your name to two people, so that one could discern the pair from the commit logs

[1]:https://github.com/32bitkid/git-working-with
Conversations with Marketers: Improving the Customer Experience
Relevant question I would say is that even if you did have a spare machine lying around, how well would Hurd support its hardware?
>> There is much bigger issue there: nobody verifies package signatures. Most packages do not even have ones.

This is bad practice, and is not solved by less integrity and authenticity checking!

>> Or I'm just a bad person and would ship you bad code.

Nobody said it solves everything, but it does help prevent unrelated third parties getting in on the act, actively or passively.
I think, you think... any CTO, or CEO/owner of a company won't as easily put so much at stake (and IT is crucial part of every major company of any type). MS has a long history of hating and subverting anything other than Windows, it's almost cartoonish when looking back.

This might be just my experience (over 11 years, over +-10 companies) that noone takes MS servers seriously. Only exceptions are Active directory, Exchange and some special reasons where MS SQL server needs to be used (for whatever reasons). Never seen any bussiness-critical app apart from those mentioned running on anything except Linux or Unix.

They're moving in right direction, but thy need to climb really big hill, which they built themselves.
Is Skype considered start up?
I think you are misrepresenting the position opposed to you. My position is like this: pro-encryption people distrust government, which is fundametally mistaken position. Government has rightful authority justified by democratic process. Policy change should be done by democratic process, not by decree from elites using technology such as encryption. Such policy-change-by-technology bypasses democratic process and is dangerous. Trust is human construct, so "trust math, not government" is position that is not only wrong, but also is confused.
Please don't blame the victim. This is a legitimate grievance. The polish paper very obviously stole his work.
Tesla's big battery announcement is today
Bernie Sanders: The Populist Preacher Runs for President – TIME
"Why didn't they have bars on their windows?" could be a reasonable criticism or it could be pure hindsight. Which one depends on whether the person stating it was faced with a similar decision and decided in the direction they advise. If I've evaluated the risks and decided that putting bars on my windows is wise, and I did it, then it's totally reasonable for me to criticize people who didn't and subsequently got their house broken into. That's not hindsight, that's having foresight, and criticizing other people for not having it.

That's relevant because the AirBnB question is one that a lot of us have actually thought about and decided on. I (and presumably the other guy above) had the foresight to realize that renting my house on AirBnB was not wise. Pointing out the natural consequences of making what we see as the unwise choice is not hindsight, because we made that decision beforehand.

I don't see how this particular instance doesn't fix things, or prevents fixing things. Convincing people not to rent their houses on AirBnB if they care about said houses is a fix! It's a really good fix! It doesn't fix the problem of "AirBnB guests can sometimes cause major damage to their accommodations" but it does fix "AirBnB guests cause emotional violation by trashing a person's primary dwelling."

"Don't rent your home to strangers from the internet" is not searching in hindsight for some way the problem could have been avoided, and using that to unjustly criticize. It's a completely rational approach to life that a lot of people have been following for a long time.
The whole brouhaha over P-values has really been annoying me, specifically because 95% (Bayesian statistic) of the condemnations I've seen have been about people picking bad models until they get convenient P-values, and 5% have been about important misunderstandings about what they measure.
So I did a bit of research. Here are my two approaches to hacking complex problems:

1. Find who is doing it already.
2. See how this problem was tackled by someone who had it worse.

For #1: See http://www.naturalbuildingblog.com/
They aim for simple to build earth-based houses for $10/sq ft. A good next step likely is to reach Dr. Owen Geiger.

For #2: See http://www.rebuildhaitihomes.org/
Looks like they started with fundraising.
> starting with version 1.0, we will not be introducing any more breaking changes to Nim.

I wonder whether they will stay committed to that. Pretty much all developers of other "living" languages I know who do not have strong industry support and thus pressure not to break working code introduce breaking changes all the time e.g. see D.

Nim could distinguish itself from the crowd with such a commitment to stability. However I expect overwhelming pressure from the enthusiast crowd which currently utterly dominates among Nim users to introduce breaking changes even post-1.0. And with little pressure from the other direction..
As a secondary point even if don't get simplicity isn't incorrectly setup encryption, better than none? For one example: Self signed certificates don't protect you from a man in the middle perpetrated by the government or ISP, but they will stop neighbors with packet sniffers.

If we forgo simplicity I will still encrypt what I can. Having only some protection is not the same as my protection being an illusion.
You stopped too early, then.
Its kind of marketing tactic? Spend some dollars to get viral!
> Then you have all the problems of setting up a second, secure channel. This would seem to increase complexity, not decrease it.

It reduces the total number of endpoints that need to go through SSL. That is a win complexity wise. I do not need to hand over SSL keys to my CDN for instance. I just put the file there and keep my checksum list on a server I actually do control the keys on. As an example. That is reducing complexity and makes it more secure in the process. At the cost of people knowing which files are downloaded.
It sounds like the signup process will be fairly high-touch, to evaluate whether they're a customer Even wants. Given that this involves a fairly complete opening of the kimono, I doubt Even would let someone who makes $120k/year sign up.
Except, that's also going to screw with the nice 4pt fonts he talked about...
Foxit Reader 7 Serial Key and Crack Free Download
Exactly.

Client-side computing exists, but only to present a fake state which doesn't affect the game mechanics but only servers a cosmetic function to bridge the time until the server updates the client with the actual data (on which any essential game mechanics are based).

Games typically just send keyboard input to the server, simulate the game as best they can, and receive the state of the game as it 'really' is. Just like you can't change your money on your bank account, but you can send instructions to send money (keyboard input), and your client-side app will likely immediately update your balance even if it's not fully processed yet by the server.

Beyond that, computing vectors of a few players isn't really a big deal for a server, with 20 players you're really running a relatively simple simulation without any rendering.

Data on the network is the bottleneck. And it's far more efficient to send e.g. a 'player pressed Forward' on second 0, and 'player released Forward' on second 8. That's two messages, as opposed to a 30-60 frames per second update on the player's position.

So for security and performance, it's usually not that great of an idea for clients to do all that much computing. One day we might even see rendering happen serverside, too, OnLive got it to work pretty well at low-res but it was far from optimal. (they shut down btw)
yes but there was no serious matured & backed competition
If you look at the very bottom corner of http://www.dominik-schwarz.net/potpourri/worldmap/images/DSC... it looks like NZ was included, you can just see the Auckland area.
Isn't it what SRI does ? (plus SRI is backwards-compatible)

If a hash is weak then the browser can disable it. The only consequence is that the src fallback will now be used every time.
For the same reason we have long accepted sci-fi movies with sounds in space. Imagine Star Wars without that.

Now I wish we did not accepted that fast the lens-flares, but hey - my kid loves them.
> This is bad practice, and is not solved by less integrity and authenticity checking!

No, it's a completely orthogonal issue which was my point. But you were bringing up a potential security issue which is that people might know what packages you are using. I'm bringing up that you are installing completely untrusted packages which is your actual issue there, not that someone might be able to know what you are using.

Let alone that with AGPL libraries for instance you are required to disclose that anyways.
Haha I witnessed a 'Yo mamma' joke, day made.
Inside Apple Watch's S1 Chip
Yes, Nim still uses partial case insensitivity: http://nim-lang.org/manual.html#identifier-equality

I agree that it's a problem with grep, there's a nimgrep tool that you could use instead, but I don't.

The nice part about it is that you can use a consitent naming convention even when using external libraries.

My idea to solve the problems this causes without removing it would be a gofmt like tool as described here: https://github.com/Araq/Nim/wiki/GSoC-2015-Ideas#nimfmt-auto...
40 Really Handy Keyboard Shortcuts and Computer Hacks
Police in Slovenia targets student that exposed their security flaws in 2013
Fair enough! You're likely more informed than I am in these matters.

So here's a question - I had assumed that the SERT-dumping action of MDMA took place in the brain and did not spread masses of serotonin to the rest of the body, is this correct? Or does MDMA trigger serotonin floods that do get out to the system in general?

The drug (be it MDMA or xAPB) is swimming around the whole system and is therefore free to act on the 5HT2b receptors present in the heart itself, which could promote valve mutation. Is this true for the serotonin as well?
Yeah, I noticed that as soon as I uploaded it. So I changed the keys that are in production from that which is on github.
Thanks for waiting till Friday.
The article does say that you should check the chec— oh, it says "verify the checksum with one you downloaded from a secure place". Oh… oh no.

You're right.

To the author:
What, pray tell, is this magical secure place that's secure despite not being authenticated or encrypted?
Fuck that. Do you want to mislead a racist into interviewing or hiring you?

Besides that, I'm really tired of the cancer that is the anticipation or expectation of racism.

I understand there are lots of examples of racism on a regionally wide scale, and that there are hotspots. For the localities suffering from racism: it's inexcusable, tragic that some are so far behind the 21st century and no doubt badly wanting of immediate remediation.

Absent some circumstance where this kind of conscious behavior modification is clearly required, why would anybody do this? It's disingenuous, dishonest and not a reflection of who you really are. Besides that, it frames the entire situation in this defensive "here comes the racism" posture that isn't healthy or likely to help anybody.

I truly believe the racism/sexism blinders are traps. That's not to say they don't exist but the existence of the concept sometimes itself harms the subject group. I completely understand that some people characterize others based upon origin, sex, belief system, or background. But so what? Those people lack the ability to reflect upon their own beliefs or have broken morals; neither of which makes them someone you'd want to befriend, work with or work for.

Wouldn't it be better to never show up for an interview because you weren't invited because you mentioned the NAACP, rather than have a bad experience at the interview?

Rather than believing in racism, believe in excellence and push yourself to excel. Any employer you'd want to work for will appreciate diversity in its staff, and they're not going to be looking for someone who's merely mediocre regardless of their race.
I used to work for a MAJOR MAJOR Oracle customer and they would not back port y2k fixes to relatively recent oracle products ie the version before.

This caused a lot of BT employes a lot of pain you had to get a very senior manager to sign off on missing your y2k deadline which was the year before y2k - and you probably got dinged on your apr for it
Obama announces e-book scheme for low-income communities
Tablets are also better for non-technical users as their primary computing device. This is entirely a software issue and has nothing to do with tablet form factor except that is where this software philosophy became mainstream.
Eyeglass Retailer Warby Parker Valued at $1.2B
> Sure it's helpful to cover the earth in 3m squares with unique names ...

I'm actually not convinced. Squares don't tessellate a sphere; you have singularities at the poles. Sure, there aren't many people living there, but it's important to think about the limitations of this approach.

If you think this is really just an edge case, remember that projecting a square onto a sphere necessitates some distortion. You can choose to distort angles or distances, but you have to choose one. For distances, well, a "3m x 3m" square becomes essentially meaningless. The problem gets worse when you increase latitude. Canada, northern Europe and Russia are especially prone to this problem. The same argument applies to locations in the Southern hemisphere as well.
He might have been a shit soldier but he was a hell of a father.
Java it teaches you how to use pure programing schemes :)
I don't see how Go makes a good replacement for Rails.

It's insufficiently high-level IMO.

I would consider C# and it's ASP.NET a good replacement.
Or Scala's Play, or Java's Spring. But probably not anything implemented in Go.

There are good reasons for this. Go lacks generics and has to use reflection as a crutch to match Rails for flexibility.

C# ASP.NET MVC on the other hand I think is probably the best match, in fact I think it actually might be superior to Rails in many ways.

Namely, like Go it is statically typed. However unlike Go it has powerful polymorphic capabilities in the form of interfaces and generics. Go can only have generic data structures built into the language, they can not be built as libraries. C# however has all of it's collections implemented as library code (though they may be in the std lib like System.Collections).

One might argue Go has great concurrency support, however C# has just as good concurrency support if not better. C# supports async/await, Task based concurrency, native threads, various thread pool implementations etc. It's primary web framework ASP.NET MVC is fully concurrency aware and uses a M:N request to thread model making use of async IO.

The tooling is even better than Go, Visual Studio and Resharper might cost money but they are worth what they cost.
Gofmt is great, but VS/Resharper can automatically format C# code. VS can also connect to running processes and interactively debug them, even remotely. There are tools for decompiling and working with the bytecode format (MSIL). There are great profilers and monitoring systems that run on the runtime (AppDynamics is great).

Most of this is true of the Java runtime and Spring/Play also. I am just less familiar with them.

The point is Go is not great for this in it's current form, there are better alternatives.
Tucker Max – Life After Fratire
Anyone who's rented out homes knows the deal. Family had a ski house out east that was regularly rented out. People are assholes. They steal cheap target throw rugs or cheap wall art, break into the owners' closet, leave enormous messes, etc.

I'm really not trying to make this sound like, "Well, what did you expect!" -- shit sucks and these homeowners don't need people piling on them -- but seriously, anyone who's rented out homes knows the deal.

The reason your book example is misleading is you aren't renting it out for cash to strangers to take to a party with them. If you have a personal connection to people they treat your stuff with more respect because it's tangled up in your relationship.

When you let friends use your home, it's personal for both of you. When you let strangers use your home for money, it's personal for you but just business for them. It's an alternative to a hotel and will be treated with the same (lack of) respect, for better or for worse.
I would probably go for black light as the cheap / easy solution, but you would need to keep the map clean.
It doesn't seem an issue of workers negotiating with the individual business. You're redefining "freedom of choice" to mean freedom to negotiate with a company. It's clear that the parent meant freedom to choose when/where they work. If there were better alternatives, people would chose that over Uber.

The fact that they aren't choosing other things shows that they're making an informed decision that they believe is best for them given their alternatives. We're free to wonder about if things could be even better for the people who made the choice to work for Uber, which is where some kind of negotiation between workers and Uber would come in, but that seems to miss the point completely. If there were better alternatives provided by any other company, most of the workers would go there.
The Paradox of Deeper Learning: The Unlearning Curve
Open Location Code by Google
It's historically been basically impossible to guarantee a tear- or glitch-free display under X because it was impossible in the protocol to sync display updates to vblank.

The XPresent extension may ameliorate this, but adding yet another extension to a protocol already lousy with them, such that they have to be tested for at runtime, is pretty much polishing a turd at this point. Starting from scratch is the correct approach and even the X.Org foundation advocates Wayland as X's replacement.
I like the title. I think it should be an abbreviation of its own, like "FAQ": FFFF, fee-four. Like "Let's write a FFFF on memory management" or "Where can I read a FFFF on web app security?"
This seems as behind-the-curve as printing out email and delivering it to physical mailboxes. As long as you can accept delivery of electronic documents, nobody should care where you "reside." If you need to take delivery of goods, you can specify a designee for that purpose, as and where needed.