jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
>> "It is also a story of an Obama Administration obsessed with health care reform policy but above the nitty-gritty of implementing it. No one in the White House meetings leading up to the launch had any idea whether the technology worked."

I used to be this guy. The guy with the lofty ideas, but who thought the implementation was "beneath me". The guy who would sit around, waxing poetic about various features, user acquisition, header alignment, etc. Don't get me wrong I had serious technical chops, but fixing that annoying localization bug? Blegh. Form encoding off? Don't wanna get my hands dirty. I had "big ideas"! I was going to change the world! People who change the world don't do the dirty work! So I'm very empathetic to the Obama Administration.

Like them, I needed a real wake up call. In my case, a friend who had implemented an idea I had sold the software for a lot of money. When I confronted him about sharing the profits he started running git blame on files across the project. My name came up maybe once or twice, across a multi-k LOC project, and even then on nearly inconsequential lines. It hit me then that while ideas may have value, the implementation usurps all of it. An idea alone is powerful, but once it's implemented the idea becomes worthless. At that point it's all about rolling up your sleeves and getting shit done. When you focus on that problems like an "ID generator" becoming a bottleneck (I had to read that bit several times over... apparently I need to start raising my rates to the hundreds of millions) disappear. It's a hard lesson I had to learn, and it's one the Obama administration has hopefully learned as well. Of course, I had just turned 17 when I learned my lesson, and Obama is now a lame duck with less than 2 years left on his final term. I guess this exemplifies my greatest struggle with the Obama legacy, in that it has become one defined by squandered potential.
This shows very clearly why browser warnings (aka "permission infobars") that are embedded on the page are bad.

http://chromespot.com/wp-content/uploads/2014/02/screen_quot...

By getting the user accustomed to seeing browser warnings and info there, you make it impossible for them to distinguish a legit browser warning from a fake one crafted by an unscrupulous site owner.

Browser warnings and notifications should significantly overlap the browser chrome (embedded in the address bar for example) so that no web page can make something that looks like it.

edit: image link
How closely related are SARS 1/2 and Mers to the four coronaviruses that cause (a small minority of) the common cold, could we be gaining partial protection from them too?
(developer here)

Re: Speed graph:

From what I've read, NetGuard's speed graph could be a drain on the battery. Besides would showing connection speed in the app's homescreen suffice?

> I wish I could sandbox specific apps with honeypot contact etc stuff I don't think app needs to have but requires to operate..wtf.

fwiw, we started off by building a userspace application sandbox (many exist today, ParallelSpace, available on the PlayStore, is probably the gold standard), but the bugs and speed was just too dysmal and it seemed it required a long tail of development just to get a v0.1 out of the door. That said, another way to do sandboxing is to use apps like Island and Shelter that abuse Android's "Work Profile" APIs.

So, we switched gears, and instead started focusing on controls for the Network.

Re: Permissions management:

For permissions, specifically, we do have an alpha-implementation that works on AOSP, that auto-grants permissions when the app is in the foreground and auto-revokes it when it is in the background. We are yet to productize it and fix all its rough corners. It isn't priority, but something we eventually want to complete, even if just for AOSP.
Another option is you could use dynamic DNS on subdomains you control for the devices, then use ACME to provision certificates for those subdomains, and then have the DVR devices fetch the certificate for itself over a secure and authenticated channel.

> The device must be publicly accessible so the ACME server can reach it.

My understanding is that these devices are publicly accessible so that parents can access the DVR without being on the local network.
Sounds like your personal experience. Which is fine but there are thousands of companies and teams that have found it to be just as good or better than butts at the same physical office
This belongs on Reddit or Digg, not HN. Flagged!
The authority is the artist. They say which token is the certificate of authenticity.
> Problem is, I don’t drive and don’t carry a state-issued ID.

These two are not related in most every state, or at least the several I've checked, which routinely issue non-driver state IDs. They usually look and feel identical to that state's license except for the driving details.

Examples:

CA: https://www.dmv.ca.gov/portal/driver-licenses-identification...

NY: https://dmv.ny.gov/id-card/get-non-driver-id-card-ndid

DC: https://dmv.dc.gov/service/eligibility-free-non-driver-id

MS: https://www.driverservicebureau.dps.ms.gov/Drivers/Identific...
I don't get it. Did ICANN approve those TLDs and later remove them?
Kazy Lambist
I'm surprised it has such a harsh name. Years ago I was wondering what would happen if people just came up with random data, e.g. derived from the own personal data, thinking about crawlers, automatized personal data processing. But I'd just call it creating garbage data because that's what it is. Eventually it will be impossible for an algorithm to distinguish between real and garbage data. (And probably not only for an algorithm)

But I agree with you, it's probably the wrong approach. Personally I've deleted quite a lot of accounts/uninstalled bloated apps. In addition I use tools that actually set additional boundaries, but I'd prefer if the apps wouldn't be so data hungry in the first place.
Better to use canary email addresses that actually go somewhere you can detect incoming emails. Then it would be useful.
Do the restaurants agree otherwise when they sign up for delivery platforms?
Here in Poland, if you charged at a charging station, it would cost you twice MORE than refueling a classic HEV, and it would also take longer - so overall less convenient. If you don't plan to charge it mostly at home, it will never pay off.
I realize you probably don't want to for personal reasons, but have you removed your father from your phone book?

I didn't remove mine for the longest time, though his number has long been reused by someone else; I only did when I finally got a notice that that person joined Signal and Telegram. Too spooky to see "[your father] has joined Signal!"
Do you have a source? Here’s just one my sources[1]. According to most of stuff I’ve read the Dutch hacked Cozy Bear and were able to see they were hacking the DNC and State Department in real time.

Much better Dutch article here[2]. It even mentions Muller.

[1] https://arstechnica.com/information-technology/2018/01/dutch...

[2] https://www.volkskrant.nl/wetenschap/dutch-agencies-provide-...
I think of them more as amorphous organisms, like multicellular amoebae. The reproductive system of a country (or civilization) is much more analogous to that of an amoeba than a human. Gene exchange can happen independent of reproduction, while reproduction is largely based on consumption.
The same problem appears for disabling data (ie, a kill switch).

What happens if your GPS is disabled right now and you dial an emergency number? Depending on the OS/phone we could either:

a) live with the consequences, or

b) have a bypass mechanism that can only be enabled for very, very special apps and emergency numbers

s/block/fake/ doesn't change that.
The lengthy commentary was done more to draw attention to himself rather than convey any real threat by PIA's corporate changes.
Watching Putin force oligarchs to hand over billions in 2015-2016 and the rush to get money out of Russia makes me think you are over stating this more than a little.
Dash is a very cool library! Though it only really does seq. The Clojure persistent vectors, hash maps, and hash sets are all very powerful. CHAMP is often an improvement on HAMT.

I think the text buffer as a persistent vector of extended grapheme clusters is an interesting thought.
yeah I think this approach will have fewer limitations than kind, and also it's fun to try different approaches!

BTW I think your ansible book is great, really helped me get to grips with it.
> absolutely no reason to believe it is the only way of doing things

Well, I did not suggests that.

> From a mathematical perspective the tape, the registers and instruction tables are all implementation details.

No, they are used to define concepts such as space complexity for Turing machines and there is something to learn from Turing machines, that's why people are studying them.
"I think the modern media goes back to the early 1970s. Some movies and some music from then seems pretty current still. Earlier than that things seem increasingly weird and foreign."

That is purely a result of your experience. You were probably a teenager in the early 80s, so you began paying attention to popular culture when the 70s music was still frequently played on pop stations.
(Author here): Yes, the basic intention is to have similar scales on the y axis. But of course it's not to be taken seriously. :)
Given today's news would paying for bloomberg access essentially be a de facto political donation?
Most importantly, KiCad needs funding: https://funding.communitybridge.org/projects/kicad
How does truffle make money?
Start with where you work, find out what brand of database your company uses: PostgreSQL, Oracle, SQL Server, MySQL etc. If this is not your current situation, then you are on your own. There are more than enough free resources online to get you moving in the right direction, motivation not included.
They didn't do anything about Pinterest, the worst offender to ever exist, so I don't see anything happening.
The hardest problem of all is getting consensus to put in front of regulators whose legal frameworks are stuck in the early 90's. SEC Securities law is the 800 pound gorilla on the globe and the workarounds 'offshore' of the SEC (Malta EU framework etc) are pea shooters against this reality. I've been involved in a european utility token against a real asset (Beer) which is live but it has been very time consuming and difficult to navigate the regulatory maze.
DDG is fine for me. !g whenever it doesn't work well enough.
I agree totally, completely. The best things about this segment is that the market is already there. The worst thing about this segment is that entreched players and market conditions make it hard to sell from company to company.
> (disclaimer: I run a startup that's trying to cut recruiters out of the market)

Cool! Just what I needed four months ago :) One thing if I may: I can't cmd-click in Chrome/Mac, it opens the page both in the current and the new tab.
Now that there are bots, they really aren't.
One of the Ruby implementations is going to have to change the game, because the current standard is hacked around rather than used naturally. That isn't productive, both for hacking and professional work.
That's a great defense! I'll use that next time someone accuses me of being too technical and unromantic:

"I just want to know how the magic works so I can make BETTER magic!"
I tried looking around on oDesk for contract work, but every time I clicked on a job and looked at the client's history they were paying less than $10 an hour on average. I couldn't find anything paying near $40 an hour.
I probably would if I wanted the product enough, knowing I wasn't shouldering the liability using my credit card.
Did Baidu or its employee said anything about their script being used to attack Github? Would like to know how they think about it
Can you expand just enough on the reasons for not owning a smartphone, so we can give constructive advice? I don't want to suggest things like "buy a Yubikey" or "buy a tablet or iPod Touch with no cell radio" if you're objecting to buying new things, for instance.

I think it's hard to give generic advice about this situation.
FWIW - even inside a VPC on AWS traffic isn't encrypted by default so if you're dealing with PHI traffic between servers also needs to be encrypted. Many databases support this out of the box, but if you're using something like redis you either need to use ipsec or stunnel. Google's Compute Engine platform does support encrypted network traffic so that' s nice plus (we're multi-cloud so we're currently using stunnel and moving to ipsec).

Lock out the root AWS keys as much as you can (ours requires a MFA token that's stored in a safe) and only use IAM users with restricted permissions for day to day operations.

Everything should have an audit trail, preferable with all the logs shipped off the servers to a centralized store (that way if a server is compromised the attacker can't also edit/delete the logs)

Script all your boxes through config management so that you can handle updates/security patches in a uniform manner and quickly.

Restrict who has access to root/DB in production. When you grant access keep an audit trail of why they have access and revoke it if it's no longer necessary. Have a good development environment setup so people don't develop the habit of developing against production.

Pentest + bug bounties are good. Once you get to a certain point you'll probably also need to have a general security/HIPAA audit as well.
I'm having a hard time sympathizing with the filer since he seems to envision a team of people sitting on the other side waiting for him to press submit.

But there's simply no excuse for the mediocre treatment of what by all accounts appears to be an authentic bug and genuine submission (and with quite a bit of care and energy behind it).
Our astronomy society tries hard to persuade newcomers not to buy a telescope until they're sure they will actually get it out more than once, and in the meantime to borrow a club telescope. Your local club might also have a stock to lend out.

If you do decide to buy, pay attention to the tripod and mount. Get something with heft that won't wobble when you breathe on it - no matter how good the optics, if the scope is bouncing about you're not going to have a great experience.
Canada is entirely private beyond the govt providing the funding with the exception of a few public hospitals (like the US many are privately owned non-profits, academic centers tend to be public).
Just pick the right person to do the job irrespective of the politics. How hard can it be honestly?
> Juki 6100 daisywheel printer

Ahh, thanks, I’ve been trying to remember what that printer was for about 30 years!
I liked CompUSA. The employees I interacted with were great. Boise, ID. Was sad when they closed.
Did they actually have cookies that far back?
You started a wretched nationalistic flamewar and then perpetuated it. Please see https://news.ycombinator.com/item?id=26742264 and don't do this again.

We detached this subthread from https://news.ycombinator.com/item?id=26731595.
I'd be curious about the source. Is that one He in the actual vacuum, or is that one He by dividing known matter by known space. If its the latter, that's very different.
Cubic centimeter, and it depends on where. For instance, in the Solar System, between stars, or between galaxies? In the Solar System, the solar wind has an average density of 3 to 10 particles (mostly protons and electrons) per cc, but it's lower the farther out from the Sun.
Sprint by Jake Knapp

Inspired by Marty Cagan
Deleting code is my superpower.
Glad to see people talking about our programs. If you have any questions, please feel free to reach out to us at recruiting@fedtech.io

We are always recruiting entrepreneurs for our Startup Studios. The program is free, virtual, and part-time.
> one helium atom per square meter

this is an infinite density!
Lookup Copy-On-Write. ZFS and BtrFS do it.
That's a good point. I think there's a tendency to conflate the idea of "lost knowledge" with "inactive practice" when it comes to dying languages. Record, preserve, archive information about a language, as much as possible, but to say that all languages must remain "alive" means that we're saying that some portion of humanity must expend the time and effort to remain multilingual in languages that they may not receive practical benefits in. Maintenance costs of "in-brain preservation" are relatively high, and in doing so that's allocating time that may or may not be spent in pursuits that are beneficial to the actual people whom some want to be vessels for a dying language.
I personally find aerospace really cool, and I think a lot of other STEM people do too.
PHP doesn't attract smart people that want to use it for fun in the same way that Java doesn't. Sure, the HipHop work that engineers at Facebook are responsible for must be fun to hack on and the same goes for some of the things that are happening at Google and Twitter with Java, but the base of the PHP community is working on mediocre crap. Beyond these exceptions that prove the rule I can't imagine any good hackers using PHP for fun. Some might write PHP code as a day job, but will play with more enjoyable languages at night. Most just give up on the language entirely and move on to greener pastures.

It is clear why hackers get frustrated with the language. It is inconsistent and extremely tricky if you want to write secure code. The core developers are mostly concerned with endless discussions about adding buzzword compliant features that don't add any real value (Zend seems to be obsessed with being a poor man's Java so they can sell their ecosystem to "the enterprise"). Also, the community is pretty mediocre with an awful noise vs signal ratio.

So if hackers don't use PHP, who does? Clearly, PHP is very successful with people that want to tweak open source applications like Wordpress and aspiring developers or non-technical people that want something accessible that runs everywhere. Also, PHP developers tend to be cheap labor. There are plenty of them around, including in low cost outsourcing centers, that will charge you a lot less than more competent developers would. So it seems ideal to non-technical businesses looking for a cheap way to add some dynamic features to their website. Thankfully for PHP this group is a lot larger than the hacker community, so the language won't go away any time soon. Especially if you consider the fact that a lot of hackers learn their trade by writing little PHP scripts and customizing open source applications like Wordpress before moving on to something more interesting (I have to admit PHP was my first web scripting language too, back in 2000, but I quickly moved on to Python and now Clojure).

Is this disruption waiting to happen? I don't know. In fact, PHP seems to be trending downwards[0] as the generation that picked up the language before frameworks like Rails and Django were available is switching to the current languages du jour. If anything, it is not the language that is causing disruption, but applications like Wordpress that are easily accessible to non-technical people. However, hosted/SaaS alternatives like Posterous seem to be disrupting the whole idea of non-technical people installing Wordpress (at least I hope so[1]).

[0]: http://www.tiobe.com/index.php/content/paperinfo/tpci/index....

[1]: The main reason I might sound bitter about PHP is having to extinguish fires caused by idiots who write insecure PHP scripts or install open source scripts without bothering to periodically apply security fixes to counter the constant streams of exploits in said open source code while being responsible for some virtual hosting servers several years ago.
Absolutely. I might name a dozen or more musicians still alive today who have produced extraordinarily compelling works which speak to the heart and soul as effectively as the classical masters.

There are what, seven times as many people alive today as were in 1800? It's pure silliness to propose that the geniuses of art and science are dead. To the contrary, as it is so effortless today to produce art, works of incredible beauty are common enough to no longer be particularly notable. Of course that could be good or bad depending on your perspective... But I'm gonna say good.
Yes. People who do not believe in evolution are holding back progress. They are making everyone's quality of life worse through their sheer ignorance.

People who do not believe in global warming are even worse. I will literally suffocate in my lifetime because of these imbicils.

I suppose in some philosophical sense, no we don't all need to agree, but in a practical sense if we want to survive and thrive as a species, we must.
It's even in the documentation to Units:

> But Fahrenheit to Celsius is linear, you insist. Not so. A transformation T is linear if T(x+y)=T(x)+T(y) and this fails for T(x)=ax+b . This transformation is affine, but not linear.

https://www.gnu.org/software/units/manual/html_node/Overview...
Apparently he's on all sorts of drugs (amphetamines and tranquillisers etc). It's entirely possible he's out of it most of the time...
Be honest.

Make a law that announces everyone in the world who can and cannot do business in the US and what's expected of them, and then follow it.

Do not ban arbitrary companies for whims and which hunts and vendettas even tho they are complying with all the same rules as the rest.
Seconds? It can be minutes depending on where one is located on the globe.

Not everyone is luckily at home using broadband connections with flat rate.
HN loves to hate FAANG interviews. There's always a monthly passion post about how flawed they are.

I don't think it's unfair to say that Google and FB are considered to have strong engineering talent. So the interview process has to have _some_ hand in that success, even if it's also turning away some would-be strong performers.

I'm not saying the interview process shouldn't be criticized or that it's beyond improvement. And, yeah, it's a little silly to go memorize a bunch of algorithms so you can recite them on the stop. Furthermore, so many interview questions are posted on leetcode... and there's so many more flaws to be pointed out, but in spite of that, they still manage to have a high engineering bar.

But if you only read HN you'd think it's a total failure.
EDIT: Source - https://twitter.com/byaaroncdavis/status/1346908166030766080

"BREAKING: A source tells me The Defense Department has just denied a request by DC officials to deploy the National Guard to the US Capitol." -Aaron C. Davis (Investigative Reporter for The Washington Post)
The senior IC ladder saves you from being responsible for people, their job satisfaction, their career progression. But it is still a kind of management.

Facilitating meetings, reviewing documents, tracking schedules, reporting progress, convincing teams to prioritize the work, negotiating with those challenging the technical decisions, securing credit, deflecting blame, getting resources, etc. The model of an effective L6 or L7 IC is part secretary, part Frank Underwood.

You're right that you don't have to pursue L6/L7, but L5 is attainable in < 4 years. No 46 year old wants to be doing the same thing for the same pay as a 26 year old.
How do latency and bandwidth relate to the cost model for the code in the benchmark?

When creating the model discussed in the post, we're using it to try to make a static prediction about how the code will execute.

Note that the goal of the post is not to merely measure the memory access performance, it's to understand the specific microarchitecture and how it might deliver the benefits that we see in benchmarks.