skysight-inc/HackerNews huggingface dataset:
If we focus on the .01%, I am not sure what we are observing says much about inequality in our society. More to do with the fact that 50 years ago, a successful US entrepeneur would sell its products to a few millions americans, if he was lucky enough to be a national success. And if it was international (even more rare, and taking many years) a few more millions western europeans. The rest of the world was basically not a potential customer.

Today a successful entrepeneur can go directly international, and with a client base that includes not only the US and Western Europe but also a huge (and quickly growing) middle class all over the world. This is several orders of magnitude the potential reach than 50 years ago. Successful entrepeneurs make billions not millions anymore.

So it's not absurd that we end up with more extreme wealth in the top .01%, and I think it is kind of structural to a modern, global society.

If we focus on the 1%, or rather the delta between the 1% and the 99%, I think we are rather observing skill supply/demand mismatch. In the US and Western Europe there is an oversupply of unskilled or low-skills labour, driving their wages down (relatively to skilled labour). So they will do worse than the more sought after skilled labour. It can partially be mitigated with better education. But part of it is also structural. Not everyone can be a good programmer or engineer. Unless we find a way to change IQ distributions, we may have a long term problem here that we may not be able to solve.
This is like a success story, replacing a legacy typesetting system with `most` of its features into a digital equivalent. So much harder to achieve with business processes in general.
Currently you have to explicitly turn analytics on, so it it opt-in.

(I work for Defold)
Better visibility of non-verbal interaction cues. Also, not sharing screen real-estate between the person you're talking to and the work you're collaborating on.
No, because it can just sit in the background and wait until you type your passphrase at some point. As soon as you run malicious code, it’s all over; no workarounds.

It would be nice if npm didn’t run arbitrary install scripts by default…
Or, you know... read the legacy code and update it. That will help you truly understand it instead of holding it up as some twisted pile of magic. Which, in turn will help you know which parts are truly gnarly, and which are just old-school enough that it doesn't match your current way of thinking, yet functional.

And one of two things will happen - you will either learn the code well enough to effectively re-factor or re-write it over time, or you will learn that it is not as scary as you first thought, and just maintain it like the professional programmer that you are.

None of this is meant to justify the maintenance of truly horrendous code. I have a horror story of a 85,000 line stored procedure that we replaced with a short, simple, data migration script. Those things do happen. But they are the exception.
It is an analytics service that you can choose to use or not to use - it's totally up to you. If you don't use it no data is gathered from your users. (Currently it's off by default and you have to explicitly turn it on.)

Check out out FAQ and EULA at http://www.defold.com

(I work for Defold)
"he did". In the fine movie a single male test person was chosen. Sorry for mentioning this, but recently HN is unreadable due to PC use of pronouns.
If I were part of a 1% or .1%, I'd probably be making the same argument.

"The 1%" is just a simplification for the benefactors of gross income and wealth inequality.
FYI: The term I search for when needing something along these lines is "JSON prettify"
Microsoft lately seems to be really good at being a "proof of concept developer."

AFAIK not really just lately: the research department has been going strong for tens of years, coming up with stuff like this which is on the edge of what currently available tech can do. It's maybe just lately it gets more press/HN coverage than 20 or so years ago.
You won't believe how Nike lost Steph to Under Armour
I've worked in utilities before, and sometimes it's not possible to airgap those systems. After all, someone needs to login and update and performance maintenance on those SCADA systems. And it's pretty expensive to fly those people in, and sometimes not possible.

But there are optical routers that guarantee one way only access to networks. My favorite method is a switch, with the power supply connected to a physical timer. Once the time's up, the power supply is cut, and that device no longer is accessible. Quite ingenious really.
I genuinely believe that where software has the direct ability to cause physical harm, there ought to be revocable professional accreditation for at least one programmer on the development team. Likewise for systems security on-site.

Actually, I'd be interested to know if things like ISO27001 are mandatory for these sorts of facilities. And who gets in trouble if the system fails.
"I've found a hedge fund that makes small business loans and yields 11% with no risk to capital."

Sure that wasn't Bernie Madoff's fund (it returned around 12% a year)?
Yes, don't complain and look the other way.

With the money from higher taxes for the rich you could feed a lot of poor people.
I know they have recurring problems with tyres (and I'm sure they had other design flaws too).

But afaik the main culprit in the crash was a piece of titanium that fell off from another airplane and was left on the runway. This metal-piece cut into the tyre and caused an explosion.
Thanks you for the valuable feedback! With the prototype we were trying to do give a glimpse at the content that we have planned! In the future we will expand on how "Saving" is a powerful tool and expand on other more complex financial tools like stocks, investments!

Thanks again! :)
Yes please. More people need to be experimenting and working with reactive GUI for native.
A very insightful look at package signing, and why it wouldn't actually improve security for PyPI, by Python packaging guru Donald Stufft:

https://caremad.io/2013/07/packaging-signing-not-holy-grail/
Technically, all the file processing can happen client-side now, thanks to the HTMl5 file API. Users' data doesn't have to leave the browser.

[shameless plug] This is the approach I have taken creating a similar converter (which also works offline):

http://mango-is.com/tools/csv-to-json/
I'm afraid ISO27001 guarantees very little. Specifically, in my (limited) experience these kinds of programs/accreditations only look at a few data points in the company where reality covers hundreds of data points, and only in a brief period. Nothing stops people inside the organization from not complying with the rules, and nobody actually verifies that the right people in the organization actually know the rules.
Others like Apple actually deliver their products, and they work exactly like advertised

Check the other comments: it's not really false what you say, more like giving a twist to reality or comparing apples to oranges. This is about the Microsoft research department, not about their product delivery line. And the latter is what you meant when saying Apple - which indeed does deliver properly working products. Just like, say, Microsoft delivers keyboars or mice or Visual Studio or Surface.
How the Rich and Powerful Use Tech to Silence Activists
Many of the benefits we have today in the "first world" come from people demanding a fairer share of the resources being allocated. Charities don't fill in the huge gaps that leave people drinking toilet water or eating food you wouldn't feed a dog. Saying it could be worse is not a good excuse to ignore inequality.
A giant map of metabolic pathways
Oh there are so many good ones. Robert Lang's "Origami Design Secrets" is sort of a bible. Also, there are 2 publishers worth checking out: Origami house and Origami Shop (http://www.origami-shop.com/m_index.php)
True, but it's the concentration of wealth that's the problem. If the CEO and investors gave a fair portion of the wealth they created to their workers (see Walmart) or reinvested it into the company or other companies, then there wouldn't be a problem. The problem is ALL of that created wealth has gone to the people who control the capital. The workers (whose productivity has gone up nearly 300% since the last time real wages went up) deserve some portion of that return in, for example, fair wages. The labor market is not be a free market (for a number of reasons it likely never will be), and so we must regulate at least part of this equation.

And one way to do that is to put taxes on taking exorbitant capital returns as personal income; build something you want in the world with it instead (and in the process put it back into the economy). Another way, and one I'm partial to, is to institute a basic income, that way people will never work for exploitative wages, will always have a base of capital to pull from, and will bring the labor market to something much closer to a free market (where price discovery will actually work).
It was a Chromium bug, and it still isn't fixed because Microsoft wrongly accepted it as a compiler bug. The Chromium code contained this gem involving a union type called av_alias32 containing an int:

(((av_alias32*)(key))->u32 = (argc));

The first problem is that an int may have an alignment constraint. Since writing an int to an allocation that is made based on char could violate this constraint, the code is invalid. It doesn't matter that x86 won't actually enforce this. The code is still invalid. Since that line of code is invalid, all code paths that will reach it are also invalid, as are all code paths from it. This makes the entire test program invalid; it is legit for the compiler to emit a program that immediately crashes or insults your mom.

The second problem is when the char array is checked to see if it contains the 42. An access as char is always permitted, so the code narrowly misses having an aliasing violation, but remember that the type AS ACTUALLY WRITTEN is not char. The only thing that can be legitimately done with the value is to write it elsewhere, for example when implementing a function like memcpy. An int need not be stored in little-endian form, big-endian form, two's complement, or anything else sane... and the language standard allows for this by prohibiting what this code is doing. As with the other bug: all code paths which involve the standards violation are invalid, making the whole test program invalid. The compiler is permitted to emit code that crashes or insults your mom.
No, you can't mitigate black swans that way. To get any return on selling out of the money put options (with even the remote semblance of sustainability) you have to have a crazy 100x or 1000x leverage.

And you can't just going further out on expirations without posting proper margins. That is, you can, but not legally.
Indeed package signing is not the holy grail and won't solve all problems, but it is a part of a secure system.

For the problem this blog post talks about, I personally think that keybase is the right solution. You can tie a key to a github repository amongst others and then validate that the package you're installing came from the person who put the code on github in the first place...
Bezos Prime
Digital insurance: architecting to differentiate
What would you do in response to the stated fact of "162% occupancy" ? Where are they supposed to put the 62% ?

This isn't a tech company hot desking staffers or pulling in home workers to save money. These are people sitting on a powder keg - I wonder why any of them do it and the best two responses I can come up with is that either no one will ever give them any other job or alternatively that they are doing their best to do good as they see it. I think option 1 is a clear product of having a situation like 162% we should thank the heavens above (and the people concerned) for option 2.

I doubt that there's a penny of bonus money in play.
Why Drupal 7 Is Better for REST API / IoT /Decoupling Than Drupal 8
This topic comes up on AskReddit frequently. There was a post on it yesterday [0], and I found this [1] comment rather interesting as it highlights the fact that material possessions are only one small aspect of being truly wealthy. The real value comes from the connections that can be made while moving in these social circles.

0: https://www.reddit.com/r/AskReddit/comments/4bpjxo/what_item...
1: https://www.reddit.com/r/AskReddit/comments/4bpjxo/what_item...
One of the problems is that npm (and others) put their credentials or some form of API token into dotfiles in the developers home directory, meaning that if you can execute code as the user (via social engineering or malware) you can push new packages.

In some cases it's even accepted practice to put the actual username/password in the clear in a dotfile, which means anyone who can even read a file from the users home directory, can gain persistent access to push packages as them...
If you mean in term of quality of life, I actually think that in absolute terms it is probably marginal. They might enjoy a more comfortable life, going to places where the normal middle class doesn't go, tasting food which is slightly better. But they don't eat more calories than the average american, if they get sick they will be treated with the same molecules than the average american, the shinny tesla car they will drive will not transport them much better than the cheap Ford of the average american, they will not sleep much better in their big house than the average american, etc.

If you think in term of investment opportunities, clearly there are many investments that are only accessible to wealthy people, because of the amount of risk they involve, or because owning a tiny fractional share of a company is a sort of anomaly. Most investments (building, company, project) have few and require few investors, not the least to ensure proper governance.

But at one point the marginal benefit of the accumulation of wealth becomes zero. I don't think someone who own 1 billions lives much better than someone who owns 50 millions.
This is very true, but execution at install time (sometimes with root privileges) is a bad idea from a security perspective, especially when it happens with dependencies, which makes it very hard to check all packages that you're installing...
"Recently" in the first sentence is problematic. It hasn't been true for at least twenty years.
How to Start Earning Money Directly Through YouTube Videos
I switched the / (root) partition on the Pi to a USB pen drive. Only /boot is on the SD card. Not sure how it compares to eMMC but certainly faster than micro SD card.

[1]: https://samhobbs.co.uk/2013/10/speed-up-your-pi-by-booting-t...
On update, can you send email to the purported author, telling them they've updated the package? (Similar to those "you have logged into some site from a new computer" emails.)

An easy way to undo a publish would also be useful.
IBM researchers propose new Deep Learning chip 30,000X improvement
nope and not only that it's not even supported AFAIK
We host git servers for you but of course it's your code. Editor 2 will make this service optional. Meanwhile there is a work around (albeit a bit clumsy). One of our core devs have written a tutorial here: https://forum.defold.com/t/howto-alternative-project-hosting...

(I work for Defold)
> Is analysis - reading and thinking about what code does - no longer considered feasible?

"Not shipping" and "ensuing mass layoffs followed by bankruptcy" are still considered feasible.

I kid, I kid. A few thousand lines of code in isolation? Piece of cake, I can grok it within the hour.

Ten lines of WTF intertwined within a multi-million LOC codebase making judicious abuse of reflection, TLAs, and layer upon layer of misnamed abstractions which do something subtly different from what you expected - using three technology stacks spanning three decades of changing idioms and trends in software development - written in a 'mission critical' culture where bugs are intentionally kept as backwards comparability features? Three people will claim to understand the code well enough to make changes within a week: The rookie, the madman, and the asshole who wrote it. If you're lucky, none of them still work there - based on the number of bugs increasing when "fixes" are applied, it's clear none of them do, or ever did.

Priding myself on being only half mad, I will claim to understand 5 out of 10 of those lines within a week. If I'm lucky, they'll even be the 5 lines I need to modify for your feature request. Based on my vague understanding of the few tens of thousands of lines of code these 5 lines interact with, I can assure you I am half certain[1] that I probably didn't break anything [2].

[1] Read: Half uncertain
[2] Read: I'm assuming our QA team are not mere mortals, but are gods, and thus have at least a 50% chance of catching any bugs I introduced.
And that's my point, people complain about the rich while they do nothing.
Show HN: Csv parser in pure declarative sql
YouTube video quality report
Thanks for reporting this bug
Another messenger?? Yawwww
Yes, I launched another messenger in the super crowded space of messengers :)

Why!!!

I am a heavy user of whatsapp, infact the android phone battery monitor shows whatsapp as #1 consumer of power in my phone.

I have 8 groups in my Whatsapp, and 3 of them from are my school friends, things that we share and talk in that group, I wouldnt want my wife to peek at it, and definitely I do not want my kids to look at it. But inadvertently , I do get messages when my 7 yrs son is fiddling with my phone or playing games.

The biggest problem I faced is he is right around the age where he can read, understand and can comprehend images, videos etc. I definitely do not want him to look at my college friends whatsapp group pictures and texts.. left with two options, get him his own phone-- he is too young for it, or get him gaming system , which I think he too young as well

and ofcourse, while I am driving, he can send messages to my wife, grand parents etc, So I do like that aspect. The question is how do I balance, give him phone, but stop him from looking at my messages in specific group.
If messenger had feature to lock specific chats, rather than lock phone or lock entire app. Not one messenger in market does this.

So created https://play.google.com/store/apps/details?id=im.serkit&hl=e...

Obviously messenger cannot stand by just one feature, added other features that no other messengers support Total Recall of Sent messages, even if read, Total Edit of Sent messages.

Android version is out, IOS version is on way. Best part, you can install this on multiple android devices, all android devices stay synced..

There are other unique features we are working on, that we think are definitely needed in the current breed of messengers.
It is about actually doing something and not just complaining. What percentage of those tax dollars you think actually make it to the poor?
Nix/NixOS - everything is build not only in a chroot, but also in various namespaces. Of course that doesn't help if you actually use a package (directly or indirectly) hence executing it outside of the build chroot.
Free beer. They even try a switch-a-roo by putting a super positive spin on "free" and then doing a "(as in free beer!)".
Looking forward to 2-factor authentication in npm! For what it's worth, I find Google Authenticator offers a user better experience than text message based MFA.
This is ridiculous. You don't need a module for a function that returns false (https://github.com/mde/false), and you sure as hell don't need a dependency for a function that prepends N spaces to a string. It takes more keystrokes to add the dependency than it does to write the damn function. Not to mention it spares the NPM server additional requests, etc, etc.

If you can't trust yourself to write such a simple function, how confident are you about writing something a little more complicated? Or very complicated? Doesn't it bother you that you feel more confident in 10 simple lines of code written by a complete stranger than you are in yourself?
What is a Robot?
It seems no article can be written today without the author establishing himself as a 'cool kid' by taking a random stab at Java.
"Creating wealth" is such a loaded term. Do people like the Walton family and the Koch brothers personally create billions in wealth every year? No. They depend on millions of people who work for them. They merely reap a ridiculously outsized share of the benefits for being the owners of all the capital.
Where exactly is "here" though? Twitter is global remember? Anyone in the world, including Zambia where I am could have interacted with Tay. That's a very different proposition to "China".
It is also an illustration of a problem with AI that trusts it environment and how such trust could have really bad consequences if said AI is allowed to anything important.

People try to social engineer people all the time, and it works. The consequences are somewhat limited because you are limited to breadth (mass media, phishing etc.) or depth (one on one interactions), but can still be scary.

If an AI isn't more resistant, we face the risk that any re-purposing of data from one AI in other copies, or allowing the AI to massively multitask makes social-engineering of AI far more wide-reaching, and hence far more worthwhile for attackers.

It'll be interesting to see what kinds of attacks will get directed at e.g. customer service bots in the future, and what brands ends up damaged as a result.
Jenkins always struck me as one of the few software projects that don't use OSGi but should be using it.
My limited view on the subject, any inequality that does not include land / property value and it's game of monopoly is incomplete.
the problem with relying on chroot is that (AFAIK) it might not be available on all platforms supported by the language-specific package managers.
lol ...Thanx for your feedback...
It's more of a BnB with a value... Co-Living helps you focus on one thing for a period of time to accomplish a common goal ... like building a startup etc...
So, he won't be living there for long lol...
Voter data tampered with
You may be aware that voter data in many states gets misteriously changed and people find themselves therefore unable to vote. Do you think a system damage can be claimed? Could it be a link to 191M voter data leak in december? I am not a specialist but you are. Some of you must be on reddit and already aware of this. Could you, please, contribute with your knowledge to understanding this phenomenon? Thank you.
Firefox has automated "malware checking" for extensions, the Mozilla AMO Validator, and it's been basically torn to pieces by the community for being not actually secure [1] plus a major hassle for developers [2], to the point that large extensions with hundreds of thousands of users have stopped using the official Firefox extensions repository.

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1227867#c2

[2] https://forums.zotero.org/discussion/28847/zotero-addon-is-n...