jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Campus IT surveillance is a much more immediate invasion of privacy. It's not just being able to see what websites you visit and when. Many enterprise networking products allow you to stalk a user around campus in real time by which wifi access point she's connected to.

For instance, if you use a student ID as a wifi login, that ties your MAC address to your identity. Then the wifi access points report which MACs they've seen, and some (thanks Cisco) let you query historical data by MAC. This has legitimate uses for tracking stolen items but frequently no privacy controls or oversight.

Add a little machine learning and you can also identify people's associates with decent accuracy.
> Furthermore, if you blow it up (which I'm guessing plenty of people are inclined to do), it actually looks worse

Sure, if you naively blow it up it looks worse. But what if you convert the subpixels into real pixels?
It seems to be on SliceHost (if nothing changed in the mean time) - http://news.ycombinator.com/item?id=1283430.
"only one year of commerce" and you already lost the ability to see things as a system. In all your big and detailed post you missed one small detail - where the bondholders got the money from to buy bonds.
Disqus is larger than the Mozilla Addons application
Bravo... for the clever use of targeted landing pages.
This article doesn't really disprove PG's point. Remember that Steve Wozniak was an incredible hacker. Sure, Apple has since turned into a locked-down technological empire, but that is probably largely due to Steve Jobs' business savvy, and willingness to give up any hacker culture to make money. But the company was started by one of the most famous hackers of all, and you can bet he had an influence on the culture.
You don't need to scrape for each tweet. Scrape every active user every couple hours/days depending upon their tweet frequency. Not much point in having a database up to date every second since processing it in real time is almost impossible anyway.

Twitter would notice a major scraping operation, but if it's done correctly they wouldn't be able to distinguish between user IPs and bot IPs.

edit:
Barracuda already did more than 10% of users just for a white paper:
http://www.barracudanetworks.com/ns/news_and_events/index.ph...

150,000,000 registered users only takes 170 days at 10 users a second for a first pass. Focus on frequent tweeters for subsequent scrapes. Even among the ~20% of twitter accounts that are active, most don't need to be scraped daily, and the most active accounts are likely spam.
Are we Matrix yet?
Lots of examples in this thread.

A replacement for gold is one.
I opposed static typing because I favor safety, not oppose it. Type system designs prevent solving those problems.

Most of my career has been focused on helping large companies use Python to achieve as-fast-as-C performance with extremely little code and extremely safety-focused non-OOP software architectures, including in high frequency trading (where I built a company’s entire core trading platform in Cython).

The idea that static typing leads to safety is false. Static typing adds more code, more code is more liability. The cost of that liability is not recouped with any offsetting benefits.
Trump (and his supporters) has been in possession of the entire federal apparatus, from CIA/NSA to the military, and yet he's been a pretty ineffective in overthrowing anything. It's your fantasies that need to be overthrown.
> different skin color.

In the 1970s, armed Black Panther members took the California State Capitol and no one died.

At least one officer is dead (this changes daily so who knows) and one protestor (she was unarmed, that's a protestor, trespasser at best) was shot by sorry excuse of a Capitol Officer who shot wildly into a crowd (almost hitting the other Federal Officer behind her!)

Please stop making this about race.
JIT manufacturing predates smartphones by a good decade or two.
It unequivocally is in no way relevant. Sure, if these people you mention had invaded the white house with weapons and make-shift bombs then it would be a fair comparison. However that didn't happen, it is a completely false equivalence.

I simply don’t know what to say to you except to please re-examine your humanity as well as your critical thinking skills.
What attacks are you thinking of? A cold boot attack while you're on the toilet? Or that the laptop is stolen?

First and foremost you need to ensure physical security anyway. Otherwise a dedicated attacker can also just install a bug.
> What about for the scenario when it gets swiped during the work day when I'm in the bathroom?

Can you help me understand what attacks you think can be done with a locked screen, powered on laptop ? (given Full disk encryption is on)
> If the job requires one page of code or less, use shell. If it requires more than one page of code, use Python or whatever. Simple as that.

The problem with this simple guideline is that tools grow, so what was well less than a page becomes much more—and each small increment is too small to justify a complete re-write, so eventually you wind up with a huge shell-script monster.
Perhaps, just start emphasizing your superior security (and PCI compliance) in your marketing, in a very pointed way. ("Some competitors don't..." or "If considering a competitive offering, ask if they..." – but without specifically naming the competitor.)

Note that this doesn't always impress customers – and sometimes mentioning security concerns activates customer paranoia such that they convert at lower rates! So you may need to test this.

But, if your customers are security conscious, they'll notice the differences when comparing offerings. When they ask your competitor for details, the competitor will either offer false reassurances, or become increasingly aware of their deficiencies, and fix them. (And them fixing their issues may be in your best interest: a famous failure by your competitor could stain your whole category as too-risky for wider adoption by your target customers.)

If and when there is a damaging breach at any competitor, your practices (and marketing) going back to before the breach can help immunize you somewhat from the fallout, even without you ever directly naming the competitor or its failings. (To directly mention a competitor, or its specific troubles after an incident, could be seen as classless and easily backfire. Not only may you have a lapse yourself someday, but any 'gloating' may draw retaliation from competitors or extra attention from criminal hackers who get more glory when compromising systems that brag about their security.)
I think maybe you're seeing some sort of internal DNS resolution on your side. http://to is not valid.
Apparently a lot of the original shareholders pulled out, but it's still going forward[1]. I'm not sure how much the plan has changed.

1: http://www.reuters.com/article/2014/10/14/germany-desertec-i...
What makes you think that they were unaware of the abuse?

It's a better outcome for the employees. They have more leverage over their managers and are protected from abuse. If the manager is seething and impotent over his inability to mistreat his employees, maybe he can do what others have suggested the employee do and find another job.
Rocket fire they are talking about being 1995 would be the Zagreb rocket attacks right on the border which seems like exactly the time they are taking about.
http://en.wikipedia.org/wiki/Zagreb_rocket_attacks
in other fora, Ben argues that the main failing of Christiansen's theory is that it was formed in an era where most tech (either by number of products or total spend) was not purchased by the end users. Now that consumers buy their own stuff, success is determined on a different set of metrics including look and feel / UX, which means that "good enough" (disruption by low end) may not ever happen.
This reminds me of Phillip Guo's work; maybe this one?

http://pgbovine.net/publications/CDE-create-portable-Linux-p...
The thrill of pedalling a bike to a fast speed is not just in the speed but in the human powered element too.

As you've alluded to ebikes exist already as do ICE motorbike; still we enjoy pedal cycling.

Just as the existence of cycling doesn't invalidate the enjoyment of running or skateboarding just because it's faster and it's the same for pedal cycling vs powered bikes.

The modes of transport are just different.
Bigquery is surprisingly dumb when it comes to rearranging your query to be able to execute it faster. It seems to entire focus of the bigquery team is being able to parallelize all the work to be done, rather than seeing how they could do less work in the first place. The former is clearly interesting when you bill per Gigabyte of data processed...

I suspect that stems from the fact it doesn't have the pregenerated statistics that other databases have, and therefore there isn't much scope to make a smart query optimizer.
I think people would stop working, but it might not be so terrible. Maybe all the "bullshit" jobs would disappear and people would have more time for community activities, volunteering, youth work actions, political engagement, art, culture...and maybe even science?
Given that Bengal was a traditional grain overproduction / surplus state, it seems odd that reserves needed replenishing from Japan unless it had been stripped in the first place
I can absolutely imagine that scaling production is extremely hard.

However I don't have confidence that the same politicians that just claimed that they couldn't foresee problems with mass production did everything in their power to help here last summer. I mean the EU ordered only in November from Biontech and Moderna (and less doses than the companies offered). That doesn't really look like an incentive for companies to look into opening another factory already in summer.
Just "prioritizing" doesn't fix it, you have to limit scoped packages to be provided by a single (trusted, internal) repo. Otherwise, what do you do when internal offers v1.2.3 but external says it has v1.99.99?
Who would have thought ordering twice as many doses as needed wouldn't be enough for some? And who would have thought that ordering more, and above manufacturing capacity, would reduce availability?
Maybe not traditional HR people, but surely former startup people who were responsible for culture could be hired into head of HR roles. That's what I'd try for anyway.
"1. People who love their job and the company will work all the time anyway. If you’ve hired good fits, you’ll see this happen."

People will "work all the time" only if they love their job and the company more than their significant others, their friends, their children, their health, etc.

If companies consider a "good fit" someone who is willing to give up their personal life for the company, it's not surprising that it's hard for them to find people to hire.

"2. People do better work when they have lives of their own..."

This seems to contradict item #1: if you work all the time, how can you have a life of your own?

One more thing: The author of this article is an HR person, so the only thing she knows about why employees leave is probably based on what the employees choose to divulge during their exit interviews. Employees are generally not going to tell HR that "I'm leaving because my boss is an asshole", since that would be burning bridges - word could get back to the boss, and the employee would never get a decent reference from them. A smart employee would realize that they have nothing to gain by telling HR their real reasons for leaving, so they'd say something generic and inoffensive like "I'm leaving to pursue other opportunities".
Done. archive.org is a shining jewel on the Internet. In many ways it's the fulfillment of the promise the Internet once held of globally accessible information.
In a way it is a pity that that was your take home lesson. You deserved an A++ and the take home should have been that going the extra mile gets rewarded.
> beyond directly linking to an entire page hosted by a third party

No, including payment pages hosted by a third party:

https://www.pcicomplianceguide.org/new-saq-a-ep-hones-in-on-...

The important thing to note is that it would not be very difficult for Heroku to allow websites to gain compliance. One should be able to type:

$ heroku document:network

and it should spit out a csv with ingress and egress ports, virtual server IPs, etc. That would cover half of the requirement from SAQ A-EP.

The other half would easily be covered by publishing general policy documents about data center policies, etc., similar to what Amazon already publishes. Heroku can simply reference all the existing AWS service provider documentation and then add a few of its own documents covering the stuff it manages (things like password control policies, etc.) Also it would be helpful to allow the admin panel to require multi-factor auth.

So it's not really all that absurd. For all we know Heroku has a few massively glaring security holes and as we type people are skimming lots of payment information...

PCI is not a legal requirement, simply a moderate quality list of best practices. That Heroku and other PAAS vendors have trouble doing this should probably be cause for some actual concern.
i despise buying something as closed as an apple, but suggesting a 720p screen today is bad.
It's trivial to rewrite plaintext on the fly and the number of people in a position to do so is staggering. Like passing a note in class, it's basically about trust. You want to ensure the message hasn't been tampered with by the time it reaches you. HTTPS is one way, even if the recent past has backed it into a tiny corner (RIP SSLv2, SSLv3, TLSv1.0 and a long list of cipher suites).
I seem to be in the minority on Hacker News, but as someone in the professional computer security field I know that any company or state/department/organization can be hacked by a motivated attacker. In the case of SONY, the attackers were able to enter the network through spearphishing emails - something that essentially no investment in security is going to prevent. The malware similarly could not have been detected, as signatures for this specific compilation were not known.

I have a hard time blaming the victim of a cyber attack that would have been practically impossible to prevent. I agree that SONY made bad decisions with regard to its hording of unnecessary data, but also recognize that this is hardly unique to SONY and not standard advice given by security professionals (it should be).

Norms are important so that you can accuse 'groups with no morals or ethics' of doing something wrong. Norms may only discourage and not prevent behavior but without norms its difficult to find common ground for behavior that may otherwise be chalked up to 'culture' or 'tradition' or 'nature'.
The number one innovation from bitcoin is not its low transaction cost. Its the blockchain, that is to say the possibility for two people to make a transaction without a centralized third party involved.
I see. But the permission is granted because the restaurant's staff is afraid to break the law.

They piss off some of their customers and probably loose some profits.

Is it legal for places like Walmart (or Whole Foods as the authors mention) where food is served? The trained dog exception is understandable but animals in general are known to convey diseases, I'm surpised that these places are not legally required to forbid any other animals.

EDIT:
Section 114259.5 of the California Retail Food Code says that "live animals may not be allowed in a food facility." But it makes exceptions not just for service dogs but for "pets in the common dining areas of restricted food service facilities at times other than during meals."

http://www.latimes.com/business/la-fi-laz-dog-grocery-201410...
Simon Peyton Jones doesn't have a PhD, and he's the main force behind ghc.
Lambdas (in Python) are just syntax; it's usually better to achieve concise Python code using list comprehensions. The critical feature for functional programming is first-class (and higher-order) functions, which are supported and encouraged in Python. I think Python is better for an introductory functional programming course than C#, Java, C++ et al, which also support "functional programming features" but only in the context of a fairly rigid OO system. What do you think is missing from Python?
You'll find a lot of world-wide streams (29000+) stations here: https://www.radio-browser.info/#!/

Most links are provided by users. Checked for availability each day.
Search by city, country, genre, format, tag, etc. Link to stream is on the right.
In Sweden, the employers are responsible for reporting your income and banks your profits on sales of stocks, funds, and real estate. So "doing your taxes" is, for most people, just logging in and saying "yes" to the computed value. You can even just send a text to do so.
I thought about trying to build something like this, but figured that I'd probably just get sued. Also I think matching listings to accurate product metadata would be practically impossible even if you had a good source for the metadata, and it still wouldn't fix issues like inventory commingling in the warehouse or bait and switch listings that reduce product quality over time.
Stuxnet seems to be far more sophisticated. I mean the entire idea of jumping an air gapped network was crazy but it worked.

Since Microsoft itself was compromised via SolarWinds angle I'd take the president's statement with a grain of salt and probably less objective than it would be otherwise.
There are many countries where the constraint is vaccine supply.
You’re right, he’s probably working for NYTimes and this is a geurrilla marketing campaign. He didn’t want to stay anonymous and was using the name Scott Alexander for a decade for the build-up to this climax of made up events.
Wire transfers take multiple business days, at least in the US, at least for me every single time I do one. Individual banks may also put restrictions on your domestic wire transfers. Maybe it's different for you since you're a business, but as an individual, there's a lot of friction in sending money to my friends.

> unregulated

Depending on your perspective, this is either a feature or a bug. In my opinion, a big feature.

> you have to move the money to a real bank to use it

Well yes, that's one of the main hurdles right now caused mainly by lack of adoption. It's not a fundamental problem with the tech; in fact, it's the very kind of problem that would be solved by it going mainstream.

> How does using one of these products let me access the money faster than a wire between the sender’s USD account and mine?

This one is easy: 6 Bitcoin confirmations takes about an hour, and only a few minutes for Ethereum. Much, much faster than wire transfers.
I feel it's like a coal power plant bragging about sustainability because they use a calculator with a solar panel on one desk.
From 2013-2020 I found myself listening to radio stations on the regular while the rest of my friends were busying themselves with Spotify. In the beginning, it was because I moved to a rural area where FM radio was more reliable than the internet. Later, it was because I could not stream reliably on my phone as I passed through ~80 miles of countryside each way to work for 3 days every week. This has given me an appreciation of FM radio, especially local radio, that's unique among my peers.

I absolutely love this website. I like that my own local radio stations are on this. I like that radio stations from around the world are on this. It's awesome!

For the DC metro area, local favorites are:

- WETA 90.9 http://radio.garden/listen/weta-fm/Jei27SwN

- WPFW 89.3 http://radio.garden/listen/wpfw-fm-89-3/ninSp4px

I take it these are all radio stations that also do internet streaming. There is something similar that I've wondered about for a long time. Is there any easy to build or off-the-shelf device that I could use to stream FM radio on my local network? Say for example, I want to listen to FM radio while in the basement, but the reception is poor. Does there exist an FM tuner that I could mount in the attic window for best reception, connect via Ethernet, and then tune/stream whatever is playing to a client device down in the basement?
How do you know that? I ran fs_usage against the process and saw that it was reading local files and sending data out to untrusted peers.
To be a little pedantic, it's XHTML.

I recently published a book and going through the w3c epub specifications was a pain. Instead, I bought a book I wanted to read then reversed engineered it.

For small files you can use the w3c online validator, which will give you an overwhelming list of errors.

Note: The kindle does not support epub, instead it uses kpf. For that you have to download a 333 MB program to convert your epubs.
"License, motherfucker"

I know the vulgarity of the statements is tongue in cheek, but this one has been reinforced lately by the "MIME Magic" debacle[1], mama mia.

[1] https://github.com/mimemagicrb/mimemagic/issues/98
We don't have to consistently choose every intervention that benefits the group over some individuals, we can evaluate them one by one and pick and choose.
Isn't this what the brapper crypto is for? /S
The office is fine. It's nice to chill with my coworkers. I've been remote since 2015 and I kinda miss that, sometimes.

The commute there and back, sometimes an hour one way depending on traffic and weather, absolutely is torture. In the middle of summer or depth of winter it can be miserable. My 8-9 hour workday would often be closer to 10-11 hours, and I'd arrive home exhausted and annoyed. Travel via train was worse in some ways but sometimes better.

I am not any less closer or further, emotional or occupationally, when remote. But I don't have to lose 2 hours of my day, huff tons of exhaust, and pay the costs of cars / busses / trains.

I can sneak away for 10 minutes to grind my coffee, good coffee, and make a cuppa my way instead of relaying on the bland Keurig machine. I can get dinner going in a slow cooker 6 hours ahead of time, give my dog 3 walks a day, and handle my personal shit, on my personal machines, without risking personal or occupational data. I get more sleep, and can work later if needed, since I don't need to worry about losing an hour of my life just to get home.

Sure, work isn't torture and the office wasn't bad. But in exchange for stilled small talk with coworkers -- your coworkers aren't your friends, btw -- I gain so much more at home.
P2P apps should be sandboxed.
> one of the main counterarguments is that people will just stop working

One of the main counterarguments to the universal basic income is that napkin math does not work out. You don't even need to get the "science" involved, just relatively simple algebra. Humanity does not have the resources for the majority of the population to receive benefits out of thin air. And no, $3200 AMZN is not really a resource most people would feel comfortable surviving on, unless they can exchange it for something of an actual value.

p.s. the Amazon bit is related to the "let's divide the wealth of the billionaires and we all will live happily ever after" mantra.
There are a lot of analyses already about what has gone wrong with the European vaccine effort. It seems to be partly a mixture of being a bit stingy with procurement, being skeptical of new RNA vaccines, putting too much stock in sanofi and j&j, and requiring everything ratified by every country to proceed. In fact it was going so slowly that four countries decided to organise their own precurement, and that became the EU effort. So it seems mostly a problem of procurement/supply. A smaller country like Israel has a simpler logistical issue.
Guys cut him some slack.
I mean dude is what, in his 70s?
what's up with microsoft? out of all the big tech companies in that chart (https://www.levels.fyi/charts.html), their employees look most underpaid; yet they are doing amazing. How can they get away with not paying their engineers on par with competition?