skysight-inc/HackerNews huggingface dataset:
Persistent pseudonyms seem to be required for voting-based communities to work. Without them, what is a vote? Whose votes do I trust?

Distributing reddit is a hard problem, but making it anonymous is even harder. It'll be easier to start with cryptographic identities and add anonymity later. In the meantime, users can generate new identities for every action. They will be ignored by other users, since reputation is the easiest way to separate signal from noise.

Building this system will be much easier if you investigate the toolkits for building distributed systems that have been built since Aether started. Ethereum has three building blocks for distributed systems: a blockchain for storing data that requires consensus, like the identities of the creators and moderators of a community; Whisper, a messaging system for sending data that doesn't require consensus, like broadcasting the existence of a sub-forum; and Swarm, a distributed data store for things like discussion archives and the HTML, CSS and Javascript that such a discussion system could be built from to run on every device that every user owns. (For an example of an application with this sort of architecture, see Augur. http://augur.net)

Besides the development speed gained from using these tools, your system will gain benevolent forkability. You want developers with ideas about decentralized communities to write forks that effectively don't steal users since everyone's using the same data sources to read from and write to. But using a homegrown distributed system makes that less likely. If it were built on Ethereum's toolkit, even if a developer disagrees with most of what you've done, it's in their interest to use the same data source even if they rewrite everything. The userbase of benevolently forkable distributed systems never needs to be split, which is a powerful characteristic for growth.

Aether is fantastic, and it's where the web is heading. Good luck!
Ask HN: What open source projects do you wish existed?
What sort of open source projects do you wish existed, but don't currently exist or aren't being done very well?
Location: Banff, AB

Remote: Yes

Willing to Relocate: Yes, prefer Calgary, AB

Tech: Python, Django, PostgreSQL, MySQL, Agile, SCRUM, C, HTML, CSS, Linux, OsX, Windows

Resume: https://ca.linkedin.com/in/jssmythe

Email: jssmythe90 [at] gmail [dot] com

Degree Specializations: Human Computer Interaction and Gaming
No, this feature has existed a long time. Here's a post from 2012 showing it's use: http://pcwalton.github.io/blog/2012/08/08/a-gentle-introduct...
I stumbled onto this while discussing with some friends the possibility of someone creating a "distributed Reddit". I thought it might bring the opportunity to discuss some Reddit alternatives.

Does anything similar to Reddit but with a model more like Wordpress exist? Perhaps there's interest in offering independently hosted sub-communities that can be centrally linked to for discoverability? Could it provide subdomains such as programming.newreddit.com which pointed to an externally hosted community?

Is what I'm describing what Diaspora was attempting to create? I haven't honestly looked into it very much. Many people have suggested trying out http://voat.co which looks like is open source. Someone may be able to leverage that.
I feel as though both parties could have handled that better. Contacting a company about a security vulnerability via a tweet, there must be a better way about that. And the company's response seemed pretty disproportionate to me.

Maybe someone will learn something from this, or maybe not.
I wish I had known about this earlier. Usually when I want to show someone a snippet of code I'll use a GitHub gist, but it's certainly much nicer for the recipient to be able to run / edit the code.
I agree that he should have waited until the code was open source to post the benchmarks. It's not cool to post a "negative" benchmark without giving the framework's authors a chance to correct any misuse (and it sounds like there may well be some here).
I agree with you, but surely replying woth an email address would have been the logical thing todo, instead of a passive agressive "its on our website.

His explanation of it veing to find a more accurate email adress is understood, although i would have probably just emailed the default on the site and asked via there.
Rust has an `unsafe` keyword, but goto isn't one of the things it enables.
HN doesn't use a database. There are no rows. Just one process on one server with everything in memory. Data is lazy loaded from flat files on-demand.
Plenty of people are OK with the strict curation that the App Store's approval process represents. It's the reason why we don't have to run AV apps on our iPhones and iPads, after all.

If there's a Death Star-level weakness to the App Store, IMHO it's the app discovery process. It consistently rewards the loudest marketers rather than the best developers.
The syncing in meteor-style is something I've been interested in for a while. Do you by any chance have any document on how it's done?
From an experience of working on a distributed enterprise messaging server (one of the top sellers with some super advanced stuff like automatic failover, a client opaque to errors, TX and HA), the conclusion is that what could go wrong will go wrong in a distributed system. My favorite were distributed deadlocks; losing messages with certain cluster configurations under specific conditions was close second. If you support multiple OSes, they are all very different at the very bottom level and sometimes socket states and their transitions are just plainly weird (and undocumented). Fun is also caused by the "observer effect" - if you try to maximize throughput and something goes wrong, once you enable logging, the problem disappears (and of course throughput goes way down). Transaction processing is also yummy, 2PC obviously can't be recovered in all possible failure cases, 3PC is sensitive to network partitioning, checkpointing might run into local storage problem etc. We had our own distributed testing suite as well as standard conformance tests, yet these were badly insufficient and were more like firing off a shotgun and hoping it would help.
That's only true if the sides are glass, so light can get in, but hot air can't.

I guess the windows count.
The next “secret weapon” in programming: strong static typing (2010)
Passing a null pointer to free() is perfectly safe, and in this case simplifies the cleanup code.

Although the concern of a memory leak is valid. I would have expected the resources to be free'd regardless of the result.
He clearly stated that they only had a sales email available on their site, and he politely asked for a DM for an appropriate way to contact them. If a company has an active Twitter account it is appropriate to contact them through it. I've done this several times with quite happy results on both ends.
I don't disagree, but, as a relative novice with shell scripts, I definitely did not realize so many tools could execute arbitrary code.

The parent post's anger and disgust is misplaced, though. This article is informative at a novice level, and well-written to that level. Not a trainwreck.
Yes, Wikipedia's terminology exactly matches that of Scala, but that's because Wikipedia references a Scala SIP ;)

It's always bothered me that Baker and Hewitt felt the need to coin the term "future" when they were clearly aware of "promise" and "eventual". Their main distinction seems to be that a future is a 3-tuple (process, cell, queue). One can argue that their future meets the "read-only view" definition because cell is only to be written to by the same tuple's process. But they never explicitly distinguish a future as "a read-only placeholder view of a variable," and E was the first publicly-available language to make that very distinction (please correct me if I'm wrong), only they happened to use "promise" in that regard.

In any case, I trust your judgement on the matter more than my own, just wish everyone had picked a nomenclature and stuck with it.
I think anyone who follows that method has no idea how things work. I was actually personally offended when Ximian started handing that out as a way to install Mono a decade+ ago, because it is absolutely the worst practice you can imagine: go pull [expective] from a URL, and throw it directly from the network into system(). I will "strong no" candidates who think it's a good idea, and I reject any PRs that do [expletive] like it.

All that said, between Gmail's spam filter, my avoidance of all things bitcoin, and common sense with passwords (don't ever re-use them), most of the damage caused by this doesn't affect me.

I will note, however, that this are why "when you hit return in the URL bar, what actually happens," is a valid interview question, in the same unfortunate sense that FizzBuzz is a valid interview question.
An economist explains why the key to a free world lies with China
Petition to ask Ellen Poa to step down as CEO of Reddit due to corruption
It does! Don't you have any other contacts in "b" ?

The fact you're not using it is the ultimate proof, on iPhone it was super useful. And no way you "know where everything is" I bet you swipe for 30 seconds every time you want to open an app that's not on your home screen...
To me, decentralization isn't just about avoiding control. I think that the network effects that decentralization yields are the only way to compete with an established network. It's hard to get people to agree on which centralized alternative to use, but if structured correctly, there can be just one decentralized alternative with several benevolent forks with different features, but a shared data store. No one's in control, and everybody wins.
Well, good to know. I guess I'm not familiar with how things can be done. Thanks for the heads up.
It appears they might have had a lot of obnoxious aggressive sales spam BS on twitter and they've pretty much learned to ignore twitter; I wouldn't blame any company or person for essentially ignoring it, it's a silly format for unimportant things by design. And the right answer to someone saying "stop trying to scam us" is to say "I'm sorry if I came off like that but that's not what this is about" not write a whiny blog post about how nobody takes your tweets seriously.
Yes, you are definitely correct, that is what the standard specifies. However, many programmers assume that if the source string points to a higher memory location than the destination string, then it is ok (i.e., they want to shift a string of X bytes to the left by some amount). And they've gotten away with it for many years, because most strcpy() functions are implemented very simply (they copy one byte at a time). The problem is when 15 year old code is run on a newer platform that has an SSE4 optimized implementation of strcpy -- then they find out what is meant by "undefined behavior".
That's not true. The only case where the runtime overhead is unavoidable is calling defer in a loop, because it might require allocating the defer chain in the heap; in all other cases, it's just a metter of writing the correct optimization passes in the compiler.
I'm not so sure I'd trust my city to
keep such a service up to date.

If the private sector is doing a great job at keeping your internet connection up to date, I'm glad for you!

Unfortunately some Americans don't seem very happy with the level of service the market is providing [1] - IMHO if people are attending meetings and voting in favour of municipal broadband, it indicates the private sector isn't doing a very good job of keeping services up to date either!

[1] https://www.reddit.com/r/pics/comments/2ei1qj/after_an_inter...
A couple of things...

1) The first half of the headline reads "An Attack on Press Freedom". How exactly was freedom of the press attacked? Did the US or German governments stop Der Spiegel from publishing something? Were they blackmailed into suppressing a story (but for some reason not so for this one)? As far as the story indicates, the only action that was taken was to move the person accused of leaking from one department to another. But, hey, "An Attack on Press Freedom" gets more people to view those 9 ad banners scattered throughout the article...

2) I just read this article twice over, and I can't actually see any evidence that US intelligence services were targeting Der Spiegel. Somehow the CIA station chief finds out that someone in the German Department Six is passing information to Der Spiegel, and informs the head of Department Six. They don't actually give any indication as to how the CIA got that information, but just state that it was most likely the NSA spying on Der Spiegel as if it were a foregone conclusion. How do they know this? I can think of a number of other situations where the CIA may have received this information...

- The CIA had a source inside Der Spiegel
- The CIA was spying on their source (not Der Spiegel)
- The NSA was spying on their source
- The CIA/NSA was spying on a third party that knew of the leaks
- The source was drunk at a bar and bragged about it to or within earshot of a CIA agent
- One of the journalists was drunk at a bar and bragged about it.
- The CIA/NSA was spying on Russian intelligence (or any other country in the region) and that foreign intelligence service was doing any of the above
- etc. ...

I accept that they don't want to reveal their source, but there's no mention of an anonymous source, or documents acquired by Der Spiegel, or anything else substantiate the US targeting the news outlet. As far as I can tell, this is the extent of their attribution:

Research conducted by SPIEGEL has determined the existence of CIA and NSA files filled with a large number of memos pertaining to the work of the German newsmagazine.

Really? That's it? They somehow know that documents exist which somehow make reference to a global news outlet known for breaking headlines concerning the work of these intelligence agencies? What kind of research was conducted, and what do these documents actually say? For god's sake - Der Spiegel is one of the few news agencies that has the whole Snowden trove and regularly releases documents from it, but they can't show anything from there proving their claim?

Not too long ago, the Sunday Times in England ran a story claiming that documents stolen by Edward Snowden were in the hands of Chinese and Russian intelligence services, relying solely on anonymous sources in the British government. They were rightly lambasted for it in a number of other media outlets. Der Spiegel is now doing almost the exact same thing.
Anyone heard of freenet project, this seems like a bad copy.
"It's the reason why we don't have to run AV apps on our iPhones and iPads"

That's just not true. Android and desktop OSX are counter-examples. It is security measures like sandboxing of apps that prevent mobile devices from needing anti-virus software.

On desktop Windows, programs used to have unfettered access to the filesystem, including Windows DLLs that were major parts of the OS. Looking back, it actually seems incredible that it wasn't more of a disaster than it was.
While you can't modify pseudo elements or pseudo classes, you can replicate them using actual elements and conditional logic. I've seen React examples that do just that.
...and they even fired the guy responsible for secret santa. You can't even make stuff like this up or be more grinch if you tried to

https://www.reddit.com/r/SubredditDrama/comments/3bysny/rsec...
> Using that market share to break web standards and implement proprietary IE only features that broke html for everyone else and made it impossible to compete, because if you made a standards compliant web browser in 2002 it would not render pages properly that were designed for IE.

Well, Chrome is doing exactly that today. Extending HTML with proprietary features, leading to situatons where websites work "best in Chrome", even today.
The state of the FFXIV Mac version, and our plans for the future
No, what I'm describing is a free market inside of a single state protected by a single an intelligence community. You'll have to be a little more specific about the IP scenario - where are they hypothetically getting the IP? Is it from another lawfully operating US company, or somewhere else? The former I see no justification for, the latter is a little more complicated...
It started as a luxury, but it's starting to become a requirement, and you can start doing more interesting things in government once you're able to assume that everyone has access to it (just as government was able to do more interesting things once it could assume that the postal system reached everyone).
You mean browser-based, as in provided by a server (aka centralized)? Perhaps there is a way to daemonize the process and run it headless on a server with web access, but the whole point is no central server to depend on.

Edit: I guess I don't understand how this project, which makes one of its key features to be be web server less, would be accessed by web browser without doing what I suggested above. Could you explain?
"Days later, PayPal — the vendor that Voat was using to process more than $8,000 in donations — froze the site’s account, ruling that it violated PayPal’s policy against “certain sexually oriented materials or services.”

Not five hours later, those “sexually oriented materials” came to light on Voat’s front page: Many of the girls pictured nude in the site’s “jailbait” forum, one user observed, are clearly underage."
Dune, 50 years on
I am syncing for about 30 minutes already. I don't think it works
> Yet another problem that you need to care about when using UDP, is that even correct packets may arrive in a wrong order. That is, it is perfectly possible (though not too likely) to send packet A, then packet B, but to receive packet B first and packet A second.

Interesting technical fact.
So this is why players with bad latency could teleport several times/appear in different nearby places during lag.
Let's say you have triggered an error-condition. How would you deterministically replay the events that lead to that situation?
It is either a fan site or promotion for the Terminator series movies.

It seems to count down for some time in 2017. That is around the time Genisys actually launched in the movie and they release part two of the trilogy in real life.
the author of the blog post didn't publish his email to the guy who's site was vulnerable. Only the site's reply. I could only imagine how the original email to the company was worded.

There's something here about treating someone, even an ignorant idiot (whose only fault is being ignorantly and aggressively presumptuous), with a basic level of professional courtesy. You either foster that basic level of respect or you act like a child in need of attention. I would never hire this security researcher if I read this blog post. Communication is one of our most important skills.
"[T]he suggestion that this was the reason for Taylor's firing does seem tenuous at best, and outright ridiculous in reality." That is an assertion, and one without any argument or evidence. The other two theories mentioned by the article (anti-relocation, anti-commercialization) aren't consistent with such an abrupt and poorly handled firing.

Now why would Reddit fire Victoria over the AMA? There are many _possible_ reasons. Here are some speculations.

One, no company wants to be the target of Reverend Jackson or his supporters complaining that they treated him in a disrespectful or racist fashion. Look at how some of the various tech diversity controversies have played out, and how quickly. Reddit may well have worried that _not_ firing Victoria could have put them in a "Reddit is racist" cross-hairs that could quickly have spun out of control. Especially given how much of exactly that sort of material is floating around on various subreddits. Given how those controversies can roll, reasoning like this may even have been in some sense correct. Lose the whole company in a Twitter storm? Or fire a popular employee and irritate a bunch of mods?

Two, CEO Pao is on record talking about the importance of diversity at Reddit. It may very well be that she felt the AMA was cross-wise her own values, and those she wants to promote at Reddit.

Three, CEO Pao may also regard the Reverend and his supporters as important allies for purposes of her own, apart from her role as Reddit's CEO. She's certainly out there as interested in diversity issues, and admired by many for that. It isn't hard to imagine that she would be concerned about that image.

Four, others at Reddit may have felt the AMA didn't represent their values. Silicon Valley is notoriously progressive, and when dealing with political questions people often don't think straight. The conflict between "AMAs can be rough" and "Reverend Jackson deserves more respect than that" creates cognitive dissonance. That makes decision-making very hard. Add in some pressure from Jackson or his people -- whom many in Silicon Valley _want_ to perceive as reasonable and intelligent folks, and exposed to a lot of unreasonable criticism -- and good choices start to get difficult.

We don't _know_ anything, of course. The basic point is, the Jackson AMA created a _political_ situation for Reddit. Political decision-making is already hard, and the thinking about it easily confused. Reddit may have made a political choice driven by business concerns. Or it may have made political choices based on its employees personal agendas or outlooks.

Or, the timing of the firing and the AMA were completely coincidental.
I never compared enterprises to startups. I also wouldn't want to generalise. Some enterprises I know have millions of lines of Python code. Personally I'm skeptical that such a codebase is going to be maintainable and that they even 'care a great deal'.
How would you sell Park & Eaton's services to yourself? I sometimes get most creative when thinking about myself as the customer, particularly because I personally do not like buying things.

It takes time to generate attention on social media without controversy or craziness. Hang in there.

You have a great logo (hooray for spaceships!). Your website is also clean (not too overwhelming) and easy to navigate. I would recommend first selecting a few small businesses that you would like to have as clients. Can they understand your website - your message? I ask this because there are some areas where the wording can be rephrased. Especially with small businesses, you won't just be selling to technical people, but you will be selling to busy people.

Examples are powerful. These don't needed to be displayed publicly, but have something ready (and interesting!) to show potential clients what you can do. I don't see a problem with your two interests: security and usability auditing. Some people may advise you to focus on one or the other, but this is IMHO.

If you are willing to write blog articles, would you consider writing and submitting articles to other sites, like the huffingtonpost.com or medium.com? You want to make it as easy as possible for people to find you online; it doesn't take much for a website to get lost.

Ultimately, to get your first clients, I'd recommend treating each one with a lot of personal attention, and showing them that you truly care about them and their businesses. When you initiate contact with them (try to get a meeting, invite them to lunch or coffee, offer a contest, etc.), present your services as accessible, valuable, and profitable - a direct way to help their bottom line (with metrics to back you up). Even without client history, you can do this by doing old-school research and by being as prepared as possible for misinterpretations and specific concerns. Good luck!
I'm trying to make business apps and legal practice management apps. Most of them don't exist as open source projects or free software. I'd like to see someone make an attempt at making them.

I think after seeing how Microsoft has a big lock in with businesses offering FOSS solutions for like Linux or OSX would help some migrate away from Windows. Most Business and Legal apps are Windows only and commercial.