skysight-inc/HackerNews huggingface dataset:
I love how people always argue that "The Fed isn't a government agency" but yet they have a .gov domain. Hmmm... I think they are (or should be treated as) a government agency, and as they aren't doing anything defense related, they should be totally transparent. IOW, there shouldn't be any confidential / private information to be accidentally leaked in the first place.

I mean, if there's stuff they are holding back from the public, you have to ask "Who does have access to it?" And if you believe the answer is "nobody but the Fed board and staff" then I think you are very gullible. I'd bet a dollar to a doughnut that certain well-connected, influential (and rich) insiders are getting access to any "private/confidential" stuff they're working on.
Not really. NPM is also used with a tool called browserify to enable frontend web developers to use NPM modules in the browser.
I've seen folks give Apple a lot of credit for this, but they're not building an ad blocker.

They're offering the APIs that can be used by developers to build ad blocking extensions. Not much different than what you can do in Chrome & Firefox already. Same held-at-arms-length thing.
If you situated it somewhere like the atacama desert, then you'd be right on the ocean, and that's where you could source the water from.

I'm from Canada & the reason they don't use salt in places like Edmonton & Winnipeg is that it just gets too cold and salt no longer works at that temperature. In Ontario where they get the lake effects they use salt everywhere.
>> "50% of the domains contained advertising of some form."

That's much lower than I would have expected
A lot of engineers think I want to race against them in a bid for who is the smartest person in the room == algorithm design. I actually dont.

I am happy not being the smartest person. I am also happy accepting that maybe their role deserves a higher financial comp. if thats what is bothering them.

There is no point name calling companies in my experience who I think do this wrong but I'll take the opportunity to give a shout out to a few who do it right imo. Companies like Netflix, Apple and Uber for me have been the best interview experiences in this vein.
I honestly don't think this will ever be the case because it relies on two major assumptions: (1) there is some parent process in control of both cars involved in an accident. (2) all cars implement the same AI.

What is far more likely is a future in which there are many different types of self-driving AIs on the road from many different manafacturers, each of which will have different algorithms for all aspects of autonomous driving. Ultimately, this diversity will lead to carmakers designing algorithms that speculate on what another car might do. This is likely because the coordination costs between n different automaker's autonomous systems will rise with the square of n. In other words, unless we end up with a monoculture or only two or three different systems on the road, coordination just isn't going to happen. The second issue is that even if the automakers could coordinate, such coordination would rely on vehicle to vehicle communication of the actions each car wants to take. Coding the decision making for other cars into each car to anticipate onboard makes no sense because your vehicle would not have access to the sensor data to resolve the decision of the other car. Lastly, with V2V communications, negotiation and decision making, the impact of latency in likely to be so costly to making the best decision that any attempts of doing V2V negotiation will either be non-trivial or limited to an extremely simple model such as each car proposing n strategies (where n is like 2-3 solutions) and each care deciding the best option and incompatible option. This could keep negotiation fast enough to make a best decision.

Regardless of whether there is negotiation or merely guessing in real time about what the other car might do, the only thing each autonomous system designer can consider is the well-being of their passengers. All vehicles involved in an imminent accident acting in the self interest of their passengers is likely to be the optimal solutions. The only improvement I can see is some negotiation where some ideas of what decisions the other car might make allows each vehicle to make slightly between decisions to preserve the well being of their passengers.

People just like bringing this up because it lets them discuss this interesting philosophical question about morality. Once these discussions encounter the realities of how autonomous cars are likely to evolve and penetrate the market, it's going to be painfully obvious that this is a futile thought exercise to even waste your time with.
First time I see someone blogging with GitHub issues and, surprisingly, looks like it works well.

Markdown, tags, comments plus a index (README.md) if you need one.
Explain to me like I'm five what features a website that hosts it's own javascript can't have versus one that loads those same javascripts from remote source?
https://srihash.org/
Floraform is another tool for exploring differential growth http://n-e-r-v-o-u-s.com/blog/?p=6721
It does make it less of an emergency but it also means that anyone with malicious intent has a huge incentive to look for a way around the network block because there's a known win if they find one.
I think it's a stroke of genius to launch something so aesthetically terrible on HN / PH (aka the early adopter crowd).

For a group of people that see a dozen bootstrap / sandwhich vid style launches a week this stands out, and got me to read 3 paragraphs of ad-copy.

Other notable examples of this launch strategy, intentional or not, in recent memory were Pud launching DistroKid (1) and the team behind Magic (2)

I think in all of these cases the simple, functional approach serves in bringing us closer to the product vs. focusing on the pitch.

(1) https://web.archive.org/web/20130717051607/http://distrokid....

(2) https://getmagicnow.com/
This is the list. http://image-net.org/challenges/LSVRC/2014/browse-synsets

You can see it had a load of dog specific image sets added to it (Synsets new in ILSVRC2012). What I don't know is whether it's possible to remove all the dog images and remain with the more varied image sets.
>> Who exactly is the "you" in the above statement and who pays the "you" money to fix this and keep on top of it on an ongoing basis? And for how long?

This is not a negative! This is an upwelling opportunity for a retainer. I know someone whose business is warranting other agencies sites - he patches holes in a site they built but don't see the percentage in maintaining - he is doing well enough to hire in new folks.

I was doing hashes of jquery certainly five years ago and I suspect earlier - it's one of those rings that seems obvious in the buildscript.
> These days using them is pretty much pointless and incurs a performance penalty, yet everybody still uses them.

Would you rather than when (e.g.) there is a security patch for OpenSSL, that you have to wait for all software using OpenSSL to deploy updates? Or would you rather that one update to OpenSSL (likely from your OS vendor) fixes all of the software depending on it?

Edit: People seem to be commenting to this through the lense of CDNs and JavaScript, but the sentence previous to the one I quoted was:

> This is somewhat similar to the situation we have with operating systems: we created shared libraries to save disk space and memory.

Which is not talking about CDNs and JavaScript, but shared libraries on your desktop. I'm not saying that all usage of shared libraries is valid. I'm just saying that to toss out the concept as entirely useless (and having no redeeming value) in a modern setting varies from the truth.
New Horizons Discovers Flowing Ices on Pluto
So I'm back to what I used to do 13 years ago - build my own little scrapers and adaptors to generate RSS feeds for myself :) WHEEEEEE!
Hadley Wickham, the Man Who Revolutionized R
Here's the advantages of exercising stock options and filing an 83b election as soon as you join a company:

* When the company has an IPO, you only pay the Long Term Capital Gains tax rate (20%), instead of the standard income tax rate (39.6%).

* Once your stock options have vested, you have the freedom to leave at any time without worrying about taxes or losing your options.

So you can risk tens of thousands now to potentially save hundreds of thousands later, in addition to giving you some freedom.

It's very risky. The company might fail. The company might be successful, yet never have a liquidity event (acquisition or IPO). But you only join a startup if you believe it has a good chance at success. You're risking a huge amount of time and effort, so you may as well risk a bit of cash too.
I really hope that this doesn't becomes something that's NEVER OK to joke about.

When in a situation where someone might say something terrible, I'll sometimes go ahead and say it jokingly. The way I see it, getting everyone to laugh at how ridiculous it sounds is way to reinforce that it was unacceptable. And sometimes I think it was there anyway - somebody was thinking it but not saying it or it was implicit in their thinking and they didn't even notice.

For instance, when discussing which interns should be assigned which tasks, John was initially paired with the IT department. Then we realized that John was unavailable that day, so it defaulted to Julie. And I feigned puzzlement for a moment and said "Are you sure we should't wait for John? Girls don't like computers." Which was my way of needling my co-worker about the fact that initially defaulting to the male intern might not have been entirely arbitrary. I knew him well enough that he'd take my point without feeling like I was accusing him.

TL;DR, I think there's a difference between a sexist joke and joking about sexism
Memory bandwidth/throughput has been a far larger bottleneck on gaming performance than total video memory for the last few years. They've been trying to deal it by using ever faster and slightly wider memory interfaces, but now they've hit the wall, thus the move to HBM.
I am NOT a front end guy, at all, period. I just don't have the patience for pushing pixels and dealing with browsers. I do however respect what front end guys are doing, and how they are getting it done.

We have gotten to the point where the browser can be "just another client" on par with android or IOS (and no one is saying that isn't development). If you go back in time 10 or 15 years, the "web team" threw code over the fence at the operations team, and we all prayed everything worked. The DevOps concept has changed that relationship for the better, but we haven't done the same for the emerging relationship between the front end and the back.
> but when does the average person deal with acre-feet

When villifying almond farms for their water usage
Radial progress chart inspired by Apple Watch activity
The reason is only federal law applies on native land, and only state laws govern whether casinos/gambling is legal. So they are exempt from the state law.

Federal laws, such as copyright, drugs, etc still apply.
Advanced spyware for Android now available to script kiddies everywhere
I used Tao's books on Real Analysis during college and my feelings are mixed on his capabilities as an educator. On the one hand his books were really great as he gave a lot of proofs (although most proofs were still left to the reader, but I guess that you can't really learn Analysis without proving Rolle's Theorem or the First Theorem of Calculus on your own) and what I also really liked was that he made no assumptions about your knowledge and started from scratch (first set theory, then properties of natural, whole and rational numbers before constructing the real numbers using Cauchy sequences). On the other hand there were a lot of errors in his books and sometimes he is hard to follow, I guess the books contents are too easy for him and he wrote the book without ever reading back. Even though his books weren't perfect I learned so much about pure mathematics as a non-math major and I don't think I could have learned so much through Rudin's books.
THERE's a proper threat model - I like it! Can I take control of the Jeep behind me in traffic, cut off its brakes and cause it to collide with me for the insurance money? Okay - now we're talking. A realistic threat we can work to counter.
> My point still stands, though

Seems to me this thread doesn't show denial at all. Most conclusions that people draw from particular threads are confirmation bias. That's especially true about the largely random initial state of a thread. Typically they soon fill up with comments contradicting the initial impression.

The topic of alcohol has appeared on HN many times, always generates active discussion, and never lacks for critical comments. If anything, anti-alcohol comments tend to dominate slightly.
Excel's programming model is called "non monotonic data flow programming" [1].
The diagram referenced in [1] shows which other languages support that model
Therefore I would suggest to start from Oz, Alice, Curry, AKL, FCP... as the platforms for Excel replacement

[1] https://www.info.ucl.ac.be/~pvr/paradigmsDIAGRAMeng108.pdf
It is pretty standard practice to host assets on a "cookieless" domain you control, but not on the same domain as the original site. For example, www.example.com has all the html, but all of the images are hosted at www.images-example.com. That would skew the results considerably.
Moore's law is also about cost per transistor.It has risen, so expect to see a very expensive card. Most of the cost/benefit ratio of this card would be probably due to the huge fast memeory, and not the 17 billion transistors.
Had to happen when they publish 'review' videos when they don't know what they are reviewing.

https://www.reddit.com/r/AndroidMasterRace/comments/37nw4p/i...
In this case, I'd say number 2 is your fault. Your company has clearly told you that they care more about what you write in your self review than in actually getting stuff done. Those people have realized this, and are simply giving the company what they asked for.
> it's the fact that Japan doesn't give citizenship to what it considers impure blood

Okay, so Japanese treat Zainichi like shit. I'm not going to argue that, because it's obvious. But what you're saying here has not been true for decades. There is a path to Japanese citizenship for every Zainichi living in Japan, should they choose to take it, and it is no more or less onerous for them than it is for anyone else.

That is not to say that Zainichi have it easy in Japan today. They do not. But this isn't the first time I've read even on HN, that the Japanese government keeps Zainichi in some sort of permanent nationality limbo, and this is simply not the case. Japan does require renouncing your current citizenship as part of the path to Japanese citizenship, but they are not the only nation to do this, and it is certainly not something they require only of Zainichi.
Is this a joke? AMD are currently pioneering the biggest shake up in CPU architectures in decades through the Heterogenous System Architecture.
Versioning for PostgreSQL using triggers and PL/pgSQL
What about the common trick of serving static assets via a separate domain (one that's still owned and hosted by you) to avoid the overhead of cookies from the main site being included in asset requests?
The https://datanitro.com/ product integrates Python into Excel quite nicely.
hmm... I'm going through their 10q and taking notes =P

I try to post here this weekend
Ask HN: Won't somebody fix the Guardian banner
I'm no webdev, but there must be a better way of implementing the banner for the Guardian website.

Clicking on a story and then scrolling down causes the page to jump as the banner shrinks itself, and the first couple of sentences can be unreadable.

Is this kind of thing ok? I just can't believe that this has been allowed to exist for so long on such a prominent website.

How could this be implemented better?
Mobile payments company Square files to go public
Rust automated test runner
Great quotes about building software
There is a guideline that is used when identifying most addictions [1] since most patterns of behavior tend to be similar regardless of substance or activity that the person is addicted to.

>Another way of describing addiction is the presence of the 4 C's:

>Craving

>Loss of Control of amount or frequency of use

>Compulsion to use

>Use despite Consequences.

[1]: https://www.porticonetwork.ca/web/fundamentals-addiction-too...
Not really "sadly" though I guess. If your manager has ability he'll know whether you've produced quality work or not. Just working for extra hours for its own sake at the expense of low-quality work, that doesn't contribute anything at all. If the IT managers are like that they'd be doing a horrible job.
This is also known as a trap street:

https://en.wikipedia.org/wiki/Trap_street
It should feel heavier if it's gluten-free.
I need to do more specific digging on this to have a good answer. From the bits I know, mobile browsers offer more conservative support for caching & hardware acceleration. Phones are way more sensitive to battery use & heat than a plugged-in laptop. You can't really directly compare a phone to a laptop, even if they seem to have similar hardware numbers. The form factor & use cases matter.
One thing in this context is that it is basically impossible for a website to check the integrity of an external (js) resource without loading it. This is a consequence of the web security model.

Its basically impossible to get the contents of a .js file without executing it, say for checksum verification (at least without CORS, and even with, you might trigger an additional download, I haven't tested it). But it's trivially easy to include an external .js in the page, with the same access rights as directly embedded script (including access to credentials).

That's what we're used to, but it seems completely backwards to me. I would be much better IMO if a script could make arbitrary HTTP requests to other sites - but without having access to those sites' credentials. (Remember in the 2000s when "mashups" were all the rage? I spent a weekend parsing some data source in javascript to display it on a map, just to realize that what worked locally didn't work over http. Imagine the disappointment.)

What's also missing is a way to run an external script sandboxed, or in a sub-interpreter. There ought to be a way to restrict what banner ads or font loaders can do to my page.
LinkedIn: What the “data export” contains
after LinkedIn had extended the period for retrieving/exporting one's own data (see link below) I became curious and requested my own dump.

Since it has just arrived and I downloaded my zip, curious what they had on me, here's what it contained. It would have interested me so I thought I'd post it and see what you think.

- profile picture

- email addresses (every single one, also old/deactivated ones)

- received endorsenents (when/who/what)

- languages & levels

- login attempts (timestamped, with IP and full user agent string, reaching back until 2013 for me)

- search queries (timestamp & search string, back until 2013)

- timestamp of opening/closing/reopening the account

- connections (first/last name, email, current position & company)

- positions held (with dates)

- skills listed on the profile

- ad targeting, with the following fields
"Age Group"|"Country"|"Company Sizes"|"Companies"|"Followed Companies"|"Functions"|"Gender"|"Industries"|"Followed Industries"|"Partner Opt Out Advertising"|"Seniorities"|"State"	"Zip Code"|"Schools"|"Graduation Year"|"Groups"|"Interface Language"|"Degree Classes"|"Skills"

- education (start/end, degree, notes)
No. its not the answer.

The answer is keeping that water where it is for longer. this means that it'll evaporate where it lays. Which means more rain.

It also mean that the water table is higher for plants and animals.

a brilliant example are johads:
http://www.ecotippingpoints.org/our-stories/indepth/india-ra...

cheap, easy, quick and simple.
Why Atlantic City Should Trade in Its Casinos for Research Institutes
This is what an Arduino borealis looks like (and how to make one)
Person that works with a product owner that likes spreadsheets perspective: Spreadsheets are an incredibly painful way to track product work. We really track our work other ways that actually help us, then, we duplicate that tracking by pasting it into the spreadsheet so that you are happy.
Attacker: Nice car company you have here. Btw, I've got control over 300k of your vehicles. Want to pay up?
As an example, on a previous project all of the javascript libraries + the app concatenated together at 3MB. Minification with uglify reduced the size to 1.5MB and using Gzip compression further reduced the transfer size to ~800K.
Scientific mistakes in a paper like the new yorker is like poor grammar in a startup CEO's writing.

It just happens.
> Nothing to see here, people posting files to websites by accident happens all the time.

What is interesting is that the Federal Reserve did not tell everybody "that is confidential information and you should delete it from your computer," but instead said "since we already made this public, we might as well make it easy to find." That is a very admirable response.
Why not turn that around?

"Or there are a lot more men that can be "accepting of women's perspectives" but their upbringing and the culture imposed on them fucks them up?"

E.g., beliefs in being the sole breadwinner, beliefs that women are less suited for STEM work, that men are (or should be) superior to women, my workplace should be like my frat house, etc.

It's great for women that can be one of the guys (e.g., Meredith), but why is that a requirement to work in software?
Square Said to File Confidentially for Initial Public Offering
How deep did you crawl? I would have guessed the flash usage to be higher.

How big is the dataset? How long did it take? Which tools did you use besides phantomjs?

Nice job!
I'm probably just ignorant, but I don't know too much about power (Is my light bulb usually around 80 W-h? 200W? 100kWh? I have no idea.) I think you're right, but I do also think the main point was the relative expenditure, a 30% increase.
It can't have the features that would have been built, in the time spent learning about and implementing security.

I regard nearly all security for startup-class, low-user, and low-value companies to be premature optimization, which is deadly to a new project's potential.
That's a good point. That would require some more work to rule out, for instance by doing a whois lookup to see if the domains have the same controlling entity.
If you want a never ending list of shocking offenders, be sure to check out most airline sites. They really are abysmal.
Sorry for bugging you. Did you store results from the response¹ metadata object for every domain and process it later or use Regex to parse the HTML content?

I crawl large-ish websites (most recently https://code.google.com with 1.8MM repos) often and am really looking forward to your dataset & code.

[1] http://phantomjs.org/api/webpage/handler/on-resource-receive...
I understand that it isn't possible to check if the external assets are hosted on a CDN bucket which is under the control of the website (but under a different domain name), but without the ability to discriminate such cases it makes your statistics on externally hosted content pretty meaningless.