skysight-inc/HackerNews huggingface dataset:
Once upon a time, before RMS re-defined the term for his benefit, the phrase "Operating System" meant what we now call the kernel. You can see the legacy of this in Computer Science departments around the country where they teach an "Operating Systems" course which covers implementing schedulers, file systems, device drivers, etc... Maybe if the GNU folks could have made a usable kernel, they wouldn't have had to stoop to the petty tactic of trying to take credit for the Linux "Operating System" with all that GNU/Linux nonsense.

However, clearly the RMS propaganda machine has worked, and now the phrase has a new meaning to the new generation... So feel free to not read anything that might contradict with your point of view.
Ask HN: Boring problems that will never be venture scale
I was talking to the owner of a franchise and she had issues with payments, inventory etc. Fairly niche-y problems that will never be venture scale because the effort to solve for small businesses will almost always require a large sales force that will automatically put you in the context of major returns. Similar issues with book stores other small businesses. Aside from following your passion and doing what you feel strongly about, is there an economic basis for solving boring, non venture scale problems?
What's the codec?
mpeg-1, sorenson?
Yea, that's what I've been using for the past 2 or 3 years, I think.
Ok, your password database was affected by malicious modification. So what? How it can break the confidentiality of your data?
Update: By the way, what's wrong with the bytearray compare code snippet?
The older the company, the less they like it. Loyalty in some places will replace skill... Even when a VP asked me about my 6 jobs in 10 years, I replied: 'same as you, been working at a lot of startups'...although I dont think the answer was the most diplomatic.
Greenwald has a good critique of the claims here:

https://firstlook.org/theintercept/2015/06/14/sunday-times-r...
It's better than nothing and likely better than something without source.

Using the CLR which has no guaranteed memory zeroing and has immutable strings and GC and an exposed profiler and debugging APi is a larger concern IMHO.
Well, the language isn't really in question here -- it's the crypto used for the database files themselves.

KeePassX is the old database format and KeePass 2.x+ uses a newer one. I don't know if the database format also resulted in any crypto changes.
Software engineers are meant to bring value to a company at some multiplier of their own rate of consumption. In other words, we're meant to bring more value to the company than we take away in salary and benefits and such. If an engineer is not bringing in more than they are taking out, they are removed and replaced without so much as a second thought. Companies have zero problem removing unproductive employees. Software engineers work almost (though not entirely) like a commodity.

With that said, if an engineer is bringing value and the company is not satisfying the needs of the engineer in some way, then the engineer should leave and find another position in which they will be satisfied while bringing significant value to the new company.

If a company can remove an engineer at the drop of a hat, why should an engineer not be able to do the same with a company? We put far too much emotion into these sorts of decisions. When it comes down to it the average engineer has about 90,000 effective working hours to sell in his or her lifetime. It is best to get the most out of those hours possible, whether that be purely financial (trading the most dollars for those hours as possible) or some other metric (the most satisfaction per hour traded). Quitting a job whenever your value per hour is too low for a higher value per hour is ABSOLUTELY the thing you should do.

Never sit at a job longer than you are satisfied. It is up to the company to keep you satisfied just as much as it is up to you to keep the company satisfied.
Internet privacy bill gets initial approval in Russian assembly
All the services provided by Let's Encrypt will be completely free, including revocation.
To be fair to RMS, commercial entities selling "Operating Systems" have usually used the label, even before RMS and the Free Software movement were widely noticed by outsiders, to refer to not only the kernel, but the whole package of software and tools sold as a package with it.
Yes. Specify an early termination charge of at least 50% of the contract total.
Stores that scan shoppers faces should be legally required to have a REALLY BIG sign at the entrance to their stores advising shoppers about the scanning; then let's all see what happens to their revenues.
You know how to be healthy? Don't _be_ fat. Eating the correct number of calories each day is probably much more important than your particular source of fat.

The U.S. Government probably killed at least a million people during the "low fat" craze, where fat was replaced with sugar in many foods, increasing the amount of obesity and type-2 diabetes.

It's disgusting that people who are responsible with what they eat can't enjoy trans-fats in their biscuits and donuts.
Richard Branson reveals his nine 'Pitch to Rich' finalists
It needs to be pointed out that one of the reasons Americans aren't more active is that the built environment has been designed to maximize driving to the active obstruction of any other way of getting around.
Comfortable?

Something of an understatement. There are very few in the UK earn that much...

--edit-- though I do agree money on offer here generally is a joke. Hence going into contracting.
DURUS: SRI's Ultra-Efficient Walking Humanoid Robot
It's pretty clear that charging 99 cents for an app will not make you rich, unless you are acquired by a larger company to absorb your user base.

Business owners should think of an app as an extra benefit to a paid service or product rather than the product itself.
Tchau newcda
No company should be incentivising companies to not revoke compromised certificates. Even if the cost is modest. It's more about not patronizing a company with such a bad business model than it is about the dollar cost.
"Left" and "right" are pretty superficial things.
Some of the very same reasons you give for the proposition that network performance having caught up can be used to argue that it may have slowed down (ie feature creep and bloat). So the other question is: who, in 2015 disagrees and what recent, well argued, essays/papers can you refer us to that might demonstrate that anything has changed at all.
Thanks for your remarks on KeePass; I have at times been a heavy user. I've often wondered about its security (especially the security of its ports) but I don't have the expertise to evaluate it myself. I'm not aware of any audits or systematic analyses as it hasn't received the attention that mobile password managers have.

The truly paranoid keep their KeePass database in an encrypted volume used solely for that purpose.
> I didn't propose a solution because it isn't a problem.

How would you know? Do you own a business? Have you ever run one? I have and do.

Are you talking from experience or are you just talking?

> Regulations protect people by forcing corporations, generally, to do something that's more expensive but better for their workers/customers/the general public

No, they don't. That's how you want them to work. It's naive to simply assume that's how it is, while having zero experience with either running a business or enforcing those same regulations.

Virtually every single regulation on the books right now was written by industry lobbyists. You don't even address this point? What do you think they're putting in those regulations?

Almost all the regulations are easy to comply for a large corporation, because they'll just throw people at it until they're compliant ... and very difficult for a small business, because they don't have the ability to jump through the hoops.

This has nothing to do with safety. Businesses which don't do a good job of whatever it is that they're doing go out of business fairly quickly or learn how to do it right. Those regulations are almost never enforced.

It's the mountain of paperwork, reporting requirements, licensing requirements, it's those sorts of things that choke the life out of a small business and they are designed to do just that.

> general public because our society has decided (by voting)

That is really naive. Your representatives don't write laws. They just sign them. And they sign whatever is put in front of them and they are told to sign. Who do you think tells them to sign those laws? Hint: It's not you.
There are 2 problems here. (1) The c# .NET implementation is lacking; (2) the fundamental crypto design of the kdbx database (which is shared by all implementations, in any language) is lacking.
Guessing you're talking about this:

https://en.wikipedia.org/wiki/2007_Formula_One_espionage_con...
Is this sarcasm, or is Stallman really posting here? What is his username?
I broke into your e-mail and need to get you to force a password reset on some other account, so I maliciously modify to give you an invalid stored password.
Microscopic footage of a needle moving across the grooves of a record
Losing weight is easy. Most people can do it by eating less without exercise.

The biggest problem in weight loss (beside the fact that you shouldn't do any dieting as this should be a lifestyle change), is how to maintain the weight once you reach the healthy goal.

I'm having a hard time figuring out how to keep the healthy weight and the best way for me is to exercise in addition to a strict cal limit. Exercise will increase your burning rate, and you have to figure how to balance it with your eating habits because you won't know how your body is burning while at rest for a while. This is the main issue, it is harder to maintain this fight than to lose weight on a simple low-cal limit.

I met a lot of folks who successfully lost weight but gained it back and lost it again, it took them 3-4 times in a row to figure out how to maintain their healthy weight. I'm already in my second battle against this. I found the best method is 16/8 fasting method, eat 8 hours and 16 hours fasting and I already am losing far more weight than anything else. This is so much easy to maintain even when I'm reaching my goal.

It's kind of like people winning the lottery and most of them just bankrupt themselves in a year. There's no real good educational program in US that teaches both kids and adult how to focus on what you eat and how to maintain the weight.
One of the problems is that linguists care more about languages than people. Turkey switched to the latin alphabet from an arabic script. They found it easier to learn and it helped boost literacy rates.[1]

Minor languages die because they're a detriment to native speakers, it's not a bad thing when they do.

https://en.wikipedia.org/wiki/Turkish_alphabet
what is the problem with the singleton?
It's taken me years, but I've finally trained my Mom to "look for the lock" whenever she has to type her password or credit card in anywhere. I consider that a win. Trying to get her to understand more than "lock=safe, no lock=unsafe" is incredibly difficult that will take many more years. Like it or not, since DV has a lock, that's what the standard is for what's safe to people who don't understand there's multiple levels of security in computers.
You could always run your own apps (and any random download) on OS X without paying for a developer account. The only thing paying gets you, is access to prerelease software and the Mac App Store.
Gotta say i love that show, and damn never knew how much information they actually put into all that, and this was probably the best read of the day for me, hope others comments will add to it :)
> It's better than nothing

There are real issues with a false sense of security that you're glossing over here...
There's also wheezy.web[1], which was very fast compared to ordinary Python web frameworks. When I tested it locally a year ago, the results were the following:

== Time spent to handle one request ==

CPU: Intel(R) Core(TM)2 Duo CPU T7700 @ 2.40GHz

WSGI : 1 microseconds
Wheezy : 10 microseconds
Bottle : 38 microseconds
Werkzeug : 47 microseconds
Morepath : 115 microseconds
Flask : 193 microseconds
Flask with Jinja: 267 microseconds
Cherrypy : 561 microseconds
Django : 816 microseconds

However, at the same time, this also made me more skeptical about the Python performance story. IIRC, wheezy.web was fast because it minimized the number of the function calls (only ~20 function calls per request were needed). This is reasonable, considering that function calls in Python are very costly, and there is no function inlining in CPython. (I'm not sure of PyPy, probably it has this kind of optimization?)

But less functions mean less modularity. I have to give up some modularity if I want to squeeze the last bit of performance from my Python code. I can't have both. This doesn't sound great because there has been a verified method to deal with this kind of problem - function inlining - for decades. And I cannot use it for Python.

[1] https://pypi.python.org/pypi/wheezy.web
Trans fat is really bad news. It is a preservative that is hugely detrimental to health. Palm oil is separate and deforestation is a separate problem from that.

Keeping something that hurts people legal because another country is destroying forests is not a workable plan. Indonesia needs to be dealt with separate from the issue of trans fats.
No it won't..

IR35 is explicitly contract by contract based... In theory (and in practice) you could be working at 3 places at the same time and 2 of them would be outside IR35 and 1 would be inside it...

There are a lot of old wives tales and myths around IR35 http://www.contractoruk.com/ir35/top_ten_ir35_myths_debunked... shows a few of them. And sorry for posting links to the same two sites but that is where the real information is from people who have operated this way for years...
Automatic enrollment and renewal means that it's not a maintenance burden to have certificates that are valid for weeks rather than years. Short lived certificates reduce the cost of a certificate compromise and increase the security of the internet as a whole.
I didn't mean that you have to learn the data from Wikipedia infoboxes, just that that's a prominent place to find factoids.

It's a data source that you could consult to pass 99% of the "semantic analogy" evaluation with no machine learning at all, which is an indication that a stronger evaluation is needed.
Great to see some more brainpower going into this problem. We at Rollbar (https://rollbar.com) have been at this as well for the past 3 years, and I'm still stunned from time to time at how useful exception monitoring is.

For anyone looking to implement something like Haystack, definitely give Rollbar a look -- you'll find most of these capabilities there (and much more). And if any of the Haystack or GitHub devs have had a chance to play around with both, I'd be really interested to hear any feedback; drop me a line (email in profile).
There was a lot of that going around yesterday. For me the most amusing was Twitch.
Yes, it can provide you a steady income that slowly builds over the years. I run a boring business now and while I will never make millions and get funded, it's a steady low 6-figures that will probably last another 10 years.
Be aware that the free cert does not support certificate transparancy. This will lead some browsers - notably chrome but I imagine there are/will be others - to give a user warning about SSL integrity. There are supposedly some workarounds [1] but no official support.

[1] http://korusdipl.egloos.com/6152770
I do believe in the 'singularity' stuff - but I doubt it will happen within the next 100 years. I don't think as humans we are ready for it yet socially or politically (post-scarcity).

We're pretty terrible at distributing resources currently - not because of logistics mind you, but pure self-interest. that's not going to change overnight. If we were to upload our consciousness today, we're going to end up looking more like a balkanized "The Terminator" rather than "The Culture"
I don't suppose you have the source for that up on github or anything do you? It sounds interesting.
I can recommend Sentry which is open source and works great since many years!

https://github.com/getsentry/sentry or hosted https://getsentry.com/
I haven't checked the chemistry but I do have a question.

Can the oils that we're currently hydrogenating be used for biofuel production?
Visinul planta medicinala-sour cherry herb
Please ask him more here, so we can all benefit from the discussion.
https://en.wikipedia.org/wiki/Zero-day_(computing)

A zero-day (also known as zero-hour or 0-day)
Pretty obvious on reading but so easy to forget when you're designing a new product.

We go through this where I work with finished goods. If we don't get traction on a product immediately we start to get all kinds of suggestions from Sales Reps on what their big customer wants. In the end we end up with a list of features "we should add/support" that's 50 miles long. Plus invariably some feature request conflicts with another so even if we were willing to take all the feedback and run with it we won't ever be able to make everyone happy.

Despite this though it seems like every few years we repeat the process all over again on some new prototype.
We send exceptions to Haystack directly. It usually happens in a begin/rescue block or via a middleware that reports uncaught exceptions.
Educating consumers seems like a pretty big hurdle. I think it would make a lot more sense to ban importing palm oil from Indonesia unless it can be proved to be sustainable.
2015 Virtual Reality Ecosystem Map
"On The Security of Password Manager Database Formats" (https://www.cs.ox.ac.uk/files/6487/pwvault.pdf) was a good review of KeePass, Password Safe, and others. As I understood it, only Password Safe provided both secrecy and data authenticity.
I don't think Stallman himself would like to waste his time on HN :p
Show HN: Denarri for SMS – The Best Deal on the Product You Want, by Text
They don't need to be a director just a shareholder.
And this is how they got caught:

"Believing that the Astros’ network had been compromised by a rogue hacker, Major League Baseball notified the F.B.I., and the authorities in Houston opened an investigation. Agents soon found that the Astros’ network had been entered from a computer at a home that some Cardinals officials had lived in. The agents then turned their attention to the team’s front office."
Seems suspicious that "not used online" languages are declared dead, whereas it might as well be the case that they haven't been truly "born" on the Internet yet.

The main reason is that the places with the greatest variety of languages also happen to be poorly developed areas with lack of Internet access. As their ability to access the Internet improves, the languages might find a way to thrive (or be defeated by the overwhelming amount of foreign-language content).

Another reason is poor Unicode/browser/font support for various languages. Even some thriving languages suffer from it like Japanese with no vertical writing and furigana support in most browsers. To say nothing of something like Mongolian script. This might also be fixed, which will increase the affected languages' usage on the Internet.
Cardinals Face FBI Inquiry in Hacking of Astros' Network
I notice that the "change-password" function of yourbank.com is accidentally being served over HTTP instead of HTTPS. I just need to trick you into changing your password.

I have access to your kdbx db (ex. you sync to Dropbox and I'm Dropbox employee). I can alter the kdbx file to change your password so that it is no longer valid. KeePass doesn't complain at all.

You have a WTF moment and try to change your password over HTTP, while I inspect network packets and grab your new password.

You say "this is far-fetched, non-realistic scenario". I say "this is poor crypto design".
Wow…There’s a Fitbit for Your  That Tracks Your Sex Life
> They began by focusing on the thought process that defines the disorder, which is known as rumination. (The verb is derived from the Latin word for “chewed over,” which describes the act of digestion in cattle, in which they swallow, regurgitate and then rechew their food.) In recent decades, psychiatry has come to see rumination as a dangerous mental habit, because it leads people to fixate on their flaws and problems, thus extending their negative moods.

This really spoke to me. My mild tendency to depression seems to be predicated entirely on rumination. To the extent that I can avoid taking the first few slippery steps in those mental pathways that spiral down into despair, I am generally able to avoid getting dragged down. That required me to accept that some existential questions aren't answerable in any satisfactory manner, and to simply stop posing them to myself.
It was for Lyme, and IIRC the justification for including it in my course of treatment was roughly what lisa_henderson describes below.
I'm well aware of that, but in general, don't do it still applies :-)

In general, I'd never do it for performance only, it would have to involve one of the issues you've pointed out (there are some components I build that require it, erroneously IMO).
Can you give more details on what the problems were with payments, inventory, etc.?

I thought if you purchased/funded opening a franchise they would supply you with ways to manage those types of things since that is kind of the point of a franchise, isn't it?

I've had a couple of half-ideas around this space but haven't put much effort into finding the pain it would solve.
The array comparison? It's literally the textbook example of a timing sidechannel.

Though I won't speculate if it's a real problem here, since I have no idea what data is being compared.
It is, sort of, but it only shows part of the picture. I'll explain. Yes, TechEmpower will show you some of the fastest servers / frameworks. Maybe you can get close to a million requests per second in some of the native servers delivering static plain text / json on top of the line hardware. Eventually though you need to build and ship an application and some software that does more than a few queries.

High performing/scalable systems are built from lots of pieces of interconnected software like caching software (Redis, memcached, etc), work/job queues (RabbitMQ, ZeroMQ), asynchronous database queries and probably other things? The way these pieces fit together make much more of a difference than the server / framework you pick. I'd say it doesn't largely matter which Python framework you choose when you still have a blocking SQL query that has to be done on each request. The difference will be microseconds compared to how long that query takes.

It is important to benchmark/profile though. Maybe not at the framework level but as part of the continuous integration process. Determine what parts are slow, what parts could be replaced with asynchronous / event based code, and what parts should be replaced with something written in native code (C, Go, or Rust I guess) especially because Python makes it easy to integrate directly with native code (at least in C, I don't have experience with Python talking to Go or Rust).
I'm not sure I understand:

* I don't put much faith in Wikipedia, but the linked article says CSPI has been consistent for 20 years: From the mid-1990s onward, however, CSPI identified trans fats as the greater public health danger. ... In response, three trade groups - the National Restaurant Association, the National Association of Margarine Manufacturers and the Institute of Shortening and Edible Oils - "said the evidence [on trans fat] was contradictory and inconclusive, and accused [CSPI] of jumping to a premature conclusion"

* Saturated fat is bad for you, as far as I know.
Declare war on your software
I surmise you are being sarcastic, but this is a reasonable question. There are plenty of liquor stores which seem to be of greater value (and likelihood to generate future revenue) than whatsapp.