skysight-inc/HackerNews huggingface dataset:
Your entire argument is based on a false dichotomy. You say “There is no racism, everything can be explained by black people” and then try to demonstrate that black people have some problem or other.

But this is like saying that a road cannot be unsafe, look, here are statistics showing that some of the people who drive are drunk.

You trying to demonstrate that black people this or black people that in aggregate does not in any way invalidate the proposition that there is systemic racism.

Racism is, quite simply, when individuals are not judged on their merits, but on their membership in a class. If you say to me that statistically this or that or the other thing about American Blacks, that does not in any way say that individuals are not being judged and incurring negative opportunities because of their being black.

If anything, the message you are putting out is, “Yes, there is racism, but look, here is why it is justified.” I have debunked this argument before, and I won’t waste my time retyping the entire thing out.

“Racism is Socially Engineered Injustice:” http://braythwayt.com/2016/03/30/racism-is-injustice.html

And you are definitely attempting to socially engineer injustice. Witness the fact that in this alleged rebuttal, you ignored the major accusation I made: That you are denying racism exists.

What you did id completely ignore that and go back to trying to prattle on about how bad black people are. So I charge you again: Why are you so invested in getting people to believe that there is no racism?

What are you working so hard to prevent?
A reasonable hypothesis for a kid. Though, if you ever take any antibiotics, they usually don't taper off the dose at the end, do they?
Tesla’s patent strategy opens the road to sustainability for transport
> Anything you want. Dependency management is taken care of by a simple `pip install flask`, or a requirements.txt.

And what if I want to use multiple versions of a given library for my development? Suddenly I'm learning virtualenv...
Back when I was in management, I used to collect concrete metrics like "you keep closing work items, but it's been three months since you checked in any code" or "you're employed as a tester but you only opened two bugs last year and they were both by design". Of course people could game it, and maybe they did, but it went a long way toward identifying the people who were just straight-up asleep at their desks.
What stops you from building a bot that supports advertising, payments system, "server-less" mode?

Also bot functions can be federated and forwarded quite easily.
I considered being a gigster between jobs, and when I realized most people made between $5-10k/mo working full time I turned off my account.
Time for an Upwork alternative: Upwork charging higher fees soon
You, in turn, donate $50k a year to politicians who work to cut the Franchise Tax Board's investigative budget.
I understand 100%. I feel that way about a lot of things I try in life =)

How are you doing now?

By the way, I just watched a documentary about this kind of thing happening in China [1]. One American version of that story is a documentary named College, Inc [2]

[1] https://youtu.be/BP61LwODTnY

[2] http://www.pbs.org/wgbh/frontline/film/collegeinc/
The failure case in mind here is not silent data corruption, it is merely having your in-process performance monitoring service go offline.
The --first-parent history can be ruined pretty easily by an inexperienced Git user. They'll use their local master as their feature branch for days and then they'll try to push it. Git will unhelpfully tell them to first do a "git pull" before pushing. So they do, which leaves them with a bullshit "merged master into master" merge commit and then they push that shit, thereby guaranteeing that --first-history will always omit the actual history of where origin/master was and instead take a trip through this dude's little feature adventure.
Cool idea. I run mailsac.com and it kind of does this. Do you have a business model? Times be tough in the temporary email niche
> It is an overloaded term.

That is the most computer-programmery way of saying "homophone" or "different sense of the word."
Aside from Erlang which is far too slow (most Erlang apps use C for the data plane)

I'm going to call "citation needed" on that. Riak and EJabberd have a reputation for scale and performance, and the only C I can see referenced is where existing libraries like Zlib get used.

Edit: You are still right. The hiring issues are relevant, and apply to Erlang also.
Probably this:
https://github.com/plotly/plotly.js/issues/316

see the sendDataToCloud function here:
https://github.com/plotly/plotly.js/blob/f1701614e46d3bdf4fc...

There are instructions in the issue link on how to turn this behavior off.
We have relationships with Comodo, DigiCert, and GlobalSign. A large part of our Universal SSL issuance is currently through Comodo, which is probably what you noticed. (We've considered acquiring our own CA or subCA in the past but the audit requirements are quite onerous, at least after the first year, and sometimes it's nice to have someone handle certain aspects for you.)

The most important thing to pay attention to here, with respect to Blue Coat, is the subscriber agreement they have signed with the CA AND the CPS that they write for their auditors. It'll dictate what they are and are not allowed to do with this subCA. If these are publicly trusted certificates, they will still need to pass—at minimum—domain control validation, e.g., can BC/their customers add an arbitrary DNS record or HTTP-accessible file for the zone being issued? If not, CA/B prohibits their issuance, so Symantec would get in huge trouble for allowing this. When you run your own subCA you are supposed to perform these checks yourself; it's up to their auditors (more in a sec) and Symantec to make sure they are performing these each and every time.

Additionally, Blue Coat will need to pass a WebTrust audit as mandated by the CA/B Forum. The thoroughness of this audit depends on how much Blue Coat is taking over from Symantec. If they're, e.g., handling key material, the audit will be much the same the CAs themselves must do. If doing considerably less, the scope of the audit is considerably more constrained. I think these audits are released to the public as I remember Let's Encrypt doing so, but that may just be because i) they aren't a full blown directly browser trusted CA or ii) LE just decided to do so as it fits their ethos.

You can find the relevant regulations that are imposed on public CAs here (look specifically for references to Subscriber Agreements): https://github.com/cabforum/documents/tree/master/docs. I'd start with the "BRs" (Baseline Requirements) doc; the other, EV Guidelines are irrelevant here, and Bylaws apply to CA/B itself.

Source: I manage CloudFlare's relationship with CAs and product manage our SSL/TLS related offerings.

EDIT: Added reference to CPS, the Certification Practice Statement. This document is written and provided to the auditors, and includes controls to test, etc. Here's Symantec's for example (as linked within X509v3 in crt.sh): https://www.symauth.com/cps.
Motion AI lets anyone easily build a bot
CentOS 6.8 release notes
Continuous Deployment: How to Make It Safer
I'm not really into "emojis" but aren't these Apples version and thus copyrighted material?

And what do you mean by hacked? I've seen pins in hats for decades.
They run fully on Google App Engine and obviously they have to store all of that heavy video data somewhere so bandwidth costs will be crazy.

So a combination of them not having their own infra like FB does, and just the nature of the data they are responsible for is very heavy.
Copy the link address and search for it in Google. This will bring up the article without the paywall.
I understand the issue there, but if it has been done by researchers. Hasn't this been done/ will be done by some entity with more defined agenda.

It was certainly unethical for the researcher to release the data, but the public really really really need to be educated about putting information on a publicly available and searchable database.
As a freelancer (consultant), no thanks. This looks like yet another platform that commoditizes freelancers (think Upwork). The belittling name "gigster" doesn't help.

If you're a freelancer/consultant who wants equity, ask for it. Some companies are willing to give non-qualified options (the only choice, really) after you've built up a relationship and if you're making a significant contribution to the company.

Also, I've read the page top-to-bottom and still not fully clear on what's happening here. Highly suggest running this by non-insiders and rephrasing the messaging until it's easier to understand.
Trust me, Google would take action almost immediately after realizing what happened (if this were to actually go down). Take a look at Ryan Sleevi's previous posts on Symantec:

1. https://security.googleblog.com/2015/10/sustaining-digital-c...

2.
https://security.googleblog.com/2015/12/proactive-measures-i...

Ryan takes egregious violations of the BRs quite seriously. The CAs cross Google at their own risk. One day you find you're not trusted in Chrome anymore and their goes your business.
It makes sense that people are upset that this data is collected and released in this manner - yes it is public but serving it via the API (Not allowing a user to scrape) lets its access remain under the control of the service(and user, to some extent).

It seems, though, that this discussion is overlooking the fact that there are companies out there which are gathering this exact same data(And then some) to sell to other organizations who want to identify their users.
So i read your response and everything you say reinforces my feeling that it is better to publish this than not to. At least this was done not for profit.
If the data is collected and the data is for sale (and it is, because i understand it was purchased legally), there _will_ be someone who builds the service for aggregation and searching like you describe. And it might be very expensive, but that crazy ex will pay that $1000 to find the person she is after. In other words, saying "it's unethical to make access to public info easy" is useless; if information is public, someone will access it and someone will make it easy to access. It's better if this is done in a public way and for free, than if someone sells it quietly.
You could make your username be some random hash?
The real problem here is that a) OKCupid doesn't have reasonable default settings and opts people in by default to have their information available for sale b) that they don't sufficiently deidentify information they sell.
People who release the information are leveling the playing field. I don't think this can be called unethical _easily_.
I don't think your Ruby 1.8.3 code is supposed to work with Python 3.

Seriously, though, as far as I can tell, the transition to Python 3 is extremely low on pain. My Perl 5 to Perl 6 transition will be much more interesting, however.
I imagine it's the same companies hiring freelancers off Upwork and other such sites. They're looking for the cheapest possible labor, and quality comes second.
Notwithstanding key pinning (which I believe is even overridden by installed private roots), they can issue for google.com as long as they want so long as they get their users to install a private root.
Tezos: a self-amending cryptographic ledger
I think the best part about this is that it makes it easy to see who is selling your email. That can bring some accountability to these services that collect your email, and supposedly never use it.
The articles also discusses that it makes more complicated queries much easier to process. For instance, allowing regular expressions, or special character aware searches.
Authy (YC) acquisition was a bust.
> and that luxury is afforded largely by Google AppEngine.

Let's be very clear here. It's afforded largely by Google AppEngine and lots of cash.
Why hiring is broken and how to fix it
My comment was based on notes I took from a little over a month ago, when the Getting Started guide said "We recommend using React with a CommonJS module system like browserify or webpack."

https://web.archive.org/web/20160411175140/https://facebook....
Interesting. I definitely missed the lack of the "a". I wonder if it was an intentional lack or unintentional.

So, now I am a bit confused. Do they believe that they are morally entitled to a monopoly, or do they believe that it is simply a good idea? Because in the first case, it doesn't really alter my post. From societal standards, they are not morally entitled to the monopoly. The parent is, of course, free to disagree but they stand against centuries of legal history where this just hasn't been the case. It would be incorrect to state that only those who grew up in the digital age disagree.

If it is the second, then I will agree in general, but I think we should be very careful to balance the benefits. I believe that copyright on APIs will cause significantly more harm than good. So in this specific case, my opinion is that it is not right (as in not a good idea) to do it. It is certainly a debatable issue, though, with many reasonable arguments on both sides.
This is why Steve Jobs died so early, this thinking right here.
I wouldn't say "anyone". Most people, technical or not, have no idea what they're doing when it comes to computer security and don't care enough or take the time to research best practices.
Perl 5 has maintained almost perfect backward compatibility for decades (going back to Perl 4 in some cases...some of our code has some Perl 4-isms, like use of "local", that still work fine). I guess they wanted to wait until they really figured out how to completely break backward compatibility to break it (and they did, of course...nobody's gonna be able to transition to Perl 6 without a rewrite, though it'll be possible to do a transition process with some Perl 5 and some Perl 6, which is cool, I guess).
Systemd might become stable at some point, but I'm more and more getting the idea that yanking Linux away from that Unix bedrock is the very purpose of it.
Ha ha yes a kids toys and clothes sorting robot.
Web Project Management: Build Processes
How so? I was at Signal and they seemed to have a pretty good 2FA model.
A slenderize two-column Jekyll documentation theme, built on Bootstrap
Tidal – A language for live coding pattern
Another possibility is that the Answer to the Question is a new universe.
What IP are you referring to? How to deal with a 4-way stop sign? There's no IP produced in this guy's story.
Not quite sure about their terms and conditions. Seems very pervasive
yeah, total fail. Every variation of my fairly uncommon name including random numbers at the end of my full name.
Ask HN: Building a webapp to last the next 20 year. What would you use?
I'm strating a small little personal project. Normally I use them as an excuse to learn some new technology since their success or failure is not really important. But for this particular project I'm thinking on how to build something that last.
Suddently this makes me think of using a very traditional stack with php and mysql, not event sure If I should throw laravel into the bucket or having event a more decoupled structure where I can replace modules in case they are abandoned. What are your thoughts in choosing a conservationist stack?
Excuse me, ADHD is very serious and real. Let me show you a few relevant quotes. Here's the relevant literature linked.

"Given these deficits in academic skills and behavior, it is not surprising to find that as many as 56% of children with ADHD may require academic tutoring, approximately 30% may repeat a grade in school, and 30–40% may be placed in one or more special education programs. As many as 46% may be suspended from school and 10–35% may drop out entirely and fail to complete high school (Barkley, DuPaul, & McMurray, 1990; Barkley, Fischer, Edelbrock, & Smallish, 1990; Barkley, Fischer, Smallish, & Fletcher, 2006; Faraone et al., 1993; Szatmari, Offord, & Boyle, 1989; Weiss & Hechtman, 1993)."
It causes an order of magnitude more problems in your life.

http://l.facebook.com/l.php?
u=http%3A%2F%2Fwww.sciencedirect.com%2Fscience%2Farticle%2Fpii%2FS0160289615001312&h=ZAQFx8Qkc

https://www.facebook.com/photo.php?fbid=10204423904275949&se...

http://l.facebook.com/l.php?u=http%3A%2F%2Fwww.drthomasebrow...

http://www.psychiatrist.com/jcp/article/Pages/2012/v73n07/v7...

^^ 16 year follow up of life outcomes, know that getting medicated gives you remission the majority of the time. I can post more links if necessary.

https://t.co/n1mUvGpOrn

^^ Medication effects on I.Q && Working memory. WM > I.Q. There is one study that has found an increase of up to 4.5 points for kids that are medicated if they have ADHD.
Very serious. Deserves to be taken very seriously.

Stop doubting something extremely real and significant.

http://l.facebook.com/l.php?u=http%3A%2F%2Fwww.medicalnewsto...

^ 2-4x increases your mortality rate.
This is very true. But you aren't the Secretary of State. I'm sure there are people at a high enough level at wherever you work now that the normal rules don't apply to them. That's the nature of any organization. C-level executives, military generals and high level politicians can all decide not to follow certain rules if they choose, especially when it comes to IT policy. I'm not saying that what Clinton did was right or good, but this kind of thing does happen at a large number of organizations. It should not be surprising that an internationally famous figure would be treated differently than a mid level employee.
"Now, in Python 3, we finally have Unicode (utf-8) strings"

This is not correct. Python strings are either ASCII, UCS-2 or UCS-4 depending on what code points they contain. Python 3 source code is by default UTF-8 and string literals are converted to the internal representation.

You have to encode strings into UTF-8 bytes to actually get UTF-8 when executing the program.
$7.99/yr I believe.
Depends what you mean by 'session'. Unix has long had a concept of sessions, where the login shell will send SIGHUP to everything in the session when it exits; daemons like tmux (the server side) indicate their intent to start a separate session using setsid(). Apparently systemd has its own concept of session which is the same idea but completely separate, and requires some systemd specific magic to split off. Yay!
And not to mention how difficult it would be to apply Oracle's logic to the innumerable applications that have modified a java version for their own use. I know this is argued in other posts on this thread, but just how in the world can Oracle justify FOSS and its implementation thereof a violation of copyright in these cases as well?
If you pay your candidates, then by all means ask whatever real question you want.
Ah, indeed. Looks like we tried to simplify it recently:

https://github.com/facebook/react/pull/6148
Yes, this is the issue. I noticed just now they have since tagged this for discussion and also a possible change in version 2.0.
> it's called a kindle, or an ipad, or an iPhone.

iPads are heavy and backlit. iPhones are tiny. Kindle is B&W.

This is totally different.
But if it's the highest-earning 2.2%, that's a huge hit for states with high income tax.
Plot.ly is becoming a serious contender in the charting-libraries space. Their OS libraries are fantastic.

https://github.com/plotly/plotly.js/
An Ontology of Technological Dynamics
It's already a huge problem. Post-op infection is common and hard to treat. There are new approaches in use to reduce risk. I recently needed to have surgery.

A preventative measure was a gown with ventilation ports. I was told circulating warm air over the body surface has been shown to reduce post-surgical infections. As well, in the hospital IV antibiotics were administered as a further precaution. Fortunately for me I escaped infections, but a number of people I know did not have as favorable an outcome.

As you point out, using disinfectants is not a new idea. Readily available materials other than bleach are effective and not as malodorous or irritating as bleach. Hospitals are usually pretty careful about that, there are always mishaps, chance of carelessness, infections are hardly rare.

By all means avoid surgery if that's feasible. If not avoidable, may we find an excellent hospital with great, dedicated staff and be blessed with generous insurance benefits. And of course, one can never have too much good luck.
Well, if you are hiring a secretary and there are two applicants with minimal experience and same resume, but one is called Jane Smith and other is Shereesha Taulava, name does have meaning since you probably can only pronounce one of these names right just by reading them. So you are more likely to interview them first. And if you have a quota to send X amount of letters, then these easily pronounceable names do have advantage. Still I see no racism, people just naturally go through path of least resistance with these sort of things.
Sure he does... Anyone advocating for assembly language necessarily cares about registers.
Out of curiosity, why did you write the function like this:

const MyRootComponent = (props) => {

When it's shorter and more obvious what's happening if you write them like this:

function MyRootComponent(props) {
That's why we usually have maternities - to give birth in places where people are NOT sick.
Microsoft and Facebook's MAREA
I wrote and posted a statistical analysis of the OKCupid dataset, but took it down immediately once the information about how the data was obtained came to light.

The problem here is that the data included in the release (answers to questions) can only be accessed by logged-in users, and the scraper they used utilizes a login, in which case the researchers blatantly violated the ToS and a DMCA takedown of the dataset was a valid response by OKC.

However, almost everything else in an OKC profile, including username, city, and sexual orientation, is public to logged out users by default. (see this analysis of mass-scraped OKC data: http://yakamo.org/?p=112). That makes things a grayer area than usual, and serves as a reminder that nothing online is private.
Say no to software patents
While that is a possibility, I do appreciate the discussion and advice goven, should I ever find myself in a similar situation.
OWASP 2019 A7: cross-site framing.
/best/most/ - can't edit any more.
I did some work for an organization, who, after the Ashley Madison leak, downloaded the entire leak and searched through it to find out if any of their employees were in the dump.

I wondered, wasn't the data still technically private data that was just stolen and released? And wouldn't it be against the law to then download a copy of that data yourself? But it was actually the legal department that downloaded the dump, so I didn't have much to say.
Yeah but what happens further down the road when it doesn't run well anymore? My old company was facing issues where they were struggling to find SMEs for legacy systems
> So they're still not profitable

Why would a company want to raise money (IPO) if they had a high net profit margin? If they're profitable and happy about it, the insiders could just dividend out the money.
Ask HN: Any resources on using type systems to model your domain?
I have heard a good deal about how powerful type systems can help you model your domain and its constraints effectively. I am looking for a good resource on this topic, similar to how there exist books about Entity-Relationship modeling, or object oriented design. Do you know of any?