skysight-inc/HackerNews huggingface dataset:
As the proportion of international:domestic trade continues to increase, I'm pessimistic it's ever going to be effective to inspect inbound shipments.

Aka blacklist vs whitelist computer security policies

It's too easy for a willful infringer to cloak their goods in the sheer volume of imports. The vast majority of which, by economic necessity, will never be searched in a thorough manner.

Furthermore, if you do detect counterfeit/dangerous goods on the inbound, what can you do without cooperation of the exporting country? About the only option you have available is "ban all X from Y" until the other party does something.
Rust should have forced you to specify behavior whenever the compiler can't prove that the difference doesn't matter, like so:

1. default - fail the compile if an overflow could happen

2. wrap - like gcc's -fwrapv option, and C's unsigned type

3. trap - like gcc's -ftrapv option

4. saturate - common DSP behavior

5. unsafe - like gcc's C signed integer cruelty (fastest code)

Eh, is it too late to add this? For compatibility with old code, there could be a compiler option to override the default behavior for a whole source file.
Fair enough. The problem is that in the context of this particular article the CEO could easily make the case that he's doing just that so invoking this as a counter argument against what the CEO did makes no sense.
It's the rubber duck effect. It's easier to reveal deeply personal things to something that does not react in the way a human would.
With cameras the size of a pixel, you may be up against some quantum limits re resolution and lenses. It would probably be easier to ape the effect by digitally altering the image on the fly.
How does hiring remotely work financially? Should I set up a company and invoice the company that hired me? Does it make to go off-shore?

Any info would be helpful, thanks.
Interesting project. Seems like a modern version of Kannel [1], a battle tested SMS gateway that supports a very simple HTTP interface for applications and both SMPP and EMI ECP protocols for the backend.

For an alternative Java SMPP implementation, see CloudHopper [2] (Twitter use it for its SMS infrastructure)

[1] http://www.kannel.org/

[2] https://github.com/fizzed/cloudhopper-smpp
I agree with everything you say about the economics of the situation, but ours is the omly industry I know of where inability to make enough money to pay for a sufficient workforce translates into a workforce shortage. A cattle rancher isn't going to compalain about a "ranchhand shortage" if she can't afford to pay enough to attract them.
Maybe future generations will develop some tolerance or actual interest for this kind of video-from-blog-post format [1], but I find it irksome. Speedup tricks aside, video is unskimmable, so I can't consume it at my own pace unlike I can with text.

But I understand, from a business perspective, the appeal of:

- preroll ads, which are (as of this moment) harder to block than other types of ads

- the promise of organic 'virality' brought upon by a visually stimulating format

- the desire to use automation to cut down on the human element of producing such converted content

[1] https://youtu.be/M5OGd_S9mxc
What city is this? Just curious. I don't know any such city in the United States
I agree that upvoting every other comment is not a solution. But maybe the 'art of ignore' is. If no one would comment, that someone would eventually give up. After all, that's what those bad comments are seeking for: attention, support of any kind or just annoying someone.

Have you thought that by downvoting you could be leaking to that person that he/she annoyed you, therefore empowering him/her to continue with such bad comments?

In the other hand, if you downvote a comment just because you disagree with it you may be leading that person to give up on commenting/contributing.
The suit has nothing to do with employee wages.

From the article:

On Friday, Judge Theresa B. Doyle of Superior Court in King County, in Washington State, ruled that Dan’s brother, Lucas, had failed to prove his claims that Dan had overpaid himself and inappropriately used a corporate credit card for personal expenses. The judge also ordered Lucas to pay Dan’s legal fees.
The better indicator of quality is how well the yolk and white hold together. A low quality egg will have a runny white and the yolk will break very easily.
In Britain, he'd be called a guard or brake-man, and rode in the brake van.

The US probably has a different term.
Sandpaper? File?
Proposer and Supporter of the “Snooper's Charter” Will Be Prime Minister
As your own citation points out, that duty belongs properly to the board of directors (the CEO is often also Chairman of the Board of Directors, and many of the CEO's initiatives may be either directed by the Board or require its approval, so in those senses the CEO's actions may be subject to the Board's duty, but the duty is the Board's, not the CEO's.)
Niantic spun off https://plus.google.com/+Ingress/posts/GVvbYZzWyTT
every transaction that happened to be on the dropped chain.

I never said the hard fork was specifically to target a particular transaction, the result is that every transaction on the dropped chain was reversed.
Ask HN: When to say NO to introductory meeting?
From time to time I have a new client which wants to meet with me personally and what is significant he/she refuses tell me what will be exact topic of the meeting. It cost me my time and transport expenses. I think they just want to bounce ideas around or pick my brain or whatever for stealing my time.

Do you think it is toxic client and it is OK to say NO?

What would you write/tell such client?

Do you know some interesting online strategy materials on this topic?
Amazon’s CTO Offers to Help Pokemon GO’s Server Issue
Agreed, unfortunately it's very hard to find jobs paying properly in EU right now. It's amazing what is expected of people for the money offered.
Ruby doesn't really have "magic" syntax anymore than any other dynamic language does. Too much "magic" is a frequent criticism of the Rails framework, but I've never heard that directed at Ruby.
Why Product / Market Fit Is Overrated
For the curious: double-decker carriages do not have to be shorter or have shorter axle distance, per se, but in the UK, they have to because their rail network is older, and can't handle the load that a double-decker train of 'normal' length exerts on the rails. https://en.m.wikipedia.org/wiki/Bilevel_rail_car:

"Bilevel cars may not be usable in countries or older railway systems with low loading gauges. This includes much of the rail network in the northeast of the USA and almost the entire British rail network. In some countries such as the UK new lines are built to a higher than the existing structure gauge to allow the use of double-deck trains in future."
I think that is rather cynical. I think that UBI is an attempt by some to solve a problem that society has had a very hard time dealing with. How do you make sure everyone's needs are provided for while also keeping them incentivized to be productive members of society so that there are enough people creating real value in the world to keep it all in motion. The struggle of poverty is real, I've lived it and seen it first hand. The solutions are certainly more complex than UBI (as if that would be simple). This discussion is paved with good intentions, even if you disagree with what the outcomes will be.
It's fascinating to see this game making such a cultural impact in a matter of days, with much more room to grow on both the social and business side of things. It has massive potential to double as a wallet not only for digital goods, but items that can be purchased in the physical world.
Putting a laptop on a cart, keeping it at just the right position relative to the whiteboard wall, and jotting down notes and diagrams for the guys on the other end, is frustrating. Repeating ~10% of the statements in a meeting because of audio issues is frustrating. There are a lot more technologies that need to be brought to market, or improved, in order to eliminate the drawbacks of remote work.

Right now, I find that working with the remote people is fine when there is some separation between our work, like an API, and it is excellent when I can get work to pay for me to travel. But debugging or pair programming over a call, where we can only share one screen, is just painful.
See also https://gnu.org/s/guix
the crazy thing is while I agree with your statement about CS PhDs, the greenspun article really hit home (I'm a chem PhD). In chem and bio, there's a lot of pressure to get hands on a project, so more students are trained than there are jobs for them when things get out. There's even a term for this "postdocapalypse". We don't know what field OP is in.
uh... genius... niantic IS google. they can already read all your email. they already have full access. they have more access than you've ever had or could ever grant to anyone else.

adam reeve is an idiot.
Is your project's code public? I'd gladly use it as an educational source since I am learning Elixir right now.
‘When You’re Accustomed to Privilege, Equality Feels Like Oppression’
From https://en.wikipedia.org/wiki/Draft_Communications_Data_Bill

The Draft Communications Data Bill (nicknamed
the Snoopers' Charter or Snooper's Charter) is
draft legislation proposed by Home Secretary
Theresa May in the United Kingdom which would
require Internet service providers and mobile
phone companies to maintain records of each
user's internet browsing activity (including
social media), email correspondence, voice
calls, internet gaming, and mobile phone
messaging services and store the records for
12 months.
Voice control alone is not enough for the Smart Home
Stingray Robot Powered by Light, and Living Rat Cells
Opaleye only targets Postgres, not in-memory relations, but if one were to implement in-memory relations in Haskell then they could/should/would have roughly the same type structure as Opaleye.
Pangu jailbreak for iOS 9.3.2, 9.3.3, 10 release
I was not asked. I put in my username, password, 2FA, and that was it. No permissions dialog - I certainly wouldn't have given it admin rights to my Google Account.
This issue only affects apps though. When granting OAuth permission via the web, you are actually redirected to google's website, and then afterwards redirected back to the site you were on.
My best is 30 sec and with the same technique I could not seem to reduce it further, whats the trick ?

-----

As the cube gets larger, the complexity will get reduced, ( by ratio of volume/surface area ) ? Am I right ?
The other day someone's web app I clicked on, and it automagically signed me in with Google and added itself to my connected apps. Cloudcraft.co, I think it was. When I hit their signup link, it auto-signed in with Google without me even clicking their Google button.

After I disconnected it, it didn't behave that way a second time. So I am kinda mystified what happened there. But it was pretty strange.
The defendant in this case was 60% owner of the company and as such can be presumed to be one and the same as the board of directors for purposes of this discussion.

With that said, the basic principle is that managers are considered to have a presumption of good faith in their business judgement with regards to disputes with shareholders over business strategy.
I assume it's for legal reasons. It's very hard/expensive to deal with international legal issues. Much simpler to stay within your own country.
It's possible it only does this on iOS, because I signed up normally using iOS and I see this at that link:

https://dl.dropbox.com/s/bgii07rzoddj504/Screenshot%202016-0...
Depending on the country, by a lot:

France: 2.01

UK: 1.90

US: 1.88

Switzerland: 1.52

Germany: 1.38

Replacement rate for industrialized countries: ~2.1
Most things that run East/West will align on some day by pure chance. But the sites and research you seem to be mocking align on specific days like solstices or equinoxes.
more like google wants 2 layers of protection from the inevitable lawsuits from stalking victims and families of car crash victims caused by ingress or go.
What did dang say when you emailed HN?

I've found he's always happy to talk about this kind of stuff. The software sometimes makes mistakes.
> I just assumed that an app couldn't grant itself full permissions without notifying me, but now I can see why that might not be the case since they are free to present whatever UI they want in app.

Is that the case? Doesn't this still require going through the standard prompts?
Police: Armed robbers used Pokemon Go app to target victims – WTOP
It's very simple, IMO: people have PayPal accounts. Typing your password is a lot less friction than typing out your card info and billing address.
Court ruling makes password sharing a federal crime [pdf]
I found his comment relevant and interesting enough, and judging by his posting history SmartOS is far from the only thing he comments about. It certainly added more to the discussion than yours did.
Caveat: I've seen a number of players state or imply that playing this game has been the first decent exercise they've had in years. Lack of exercise is a far greater threat to your well-being than having your Google account hacked, so if that's what it takes, go ahead and play the game anyway.
>Mass manufacturing: super hard.

And requires skill sets that seem really similar but are not actually all that similar. They are linked through engineering design but yeah...they aren't.
Not really. There is absolutely no reason for a game, or pretty much any other kind of software, apart from maybe an operating system, to have full access to your Google account. It adds a new single point of failure for everything somewhere you have no control over – I don't think "huge security risk" is unnecessary editorial in this case.
Yes, there's a login button in the Android app.
We also have OCR and autocompletion to help with the typing.
On Android 6.0 I got the correct permissions dialog and I was able to select what the app sees and what it can do. Is this just me?
Been running https://officesnapshots.com for 9 years and I haven't sold it or exited, though I have had various offers of varying seriousness throughout the years.

At this point it would be hard for me to see myself selling because I really enjoy running the site. Plus it would feel strange to let someone else do whatever they want with the thing I've created and spent so much time on.

Not saying I wouldn't sell, but I wonder if many other single-person companies are in the same boat and feel the same way. Would love to hear :)
Costco?
Just chiming in that I am another person (using a OnePlus One with cyanogenmod) that does not even see pokemon go in my "Apps Connected to your Account".
I strongly suspect a direct Google/Nintendo tie was considered less favorable than some little ex-Google company that still uses Google servers working on a Nintendo game. The announcement timing was pretty close.
Anecdote: On Android 6.0 the Pokemon Go game requested 4 permissions on first launch. Account, Camera, Storage, and one other I believe. I had to individually approve each one.
Thats a fair point
> So now Google has access to our Google data? Don't see the issue.

Even if they were still owned by Google, a compromised phone with Pokemon Go has a nice juicy access token with admin rights to your account to siphon off.
It seems strange that nobody has mentioned Dodge v. Ford Motor Company in this thread yet (except implicitly, by way of popular misconceptions about what the law does or doesn't require of executives.)

This lawsuit, even though it isn't explicitly about the well-above-market wages paid to the employees, seems like a century-later version of Dodge v. Ford, given that context.

https://en.wikipedia.org/wiki/Dodge_v._Ford_Motor_Co.
How do you know it's the case with your account?
400k is market rate for top-quality bay area engineers, depending on specialty [0]. You don't see job ads for those folks, because hackers like that don't read them.

[0] And even for lower-paying specialties (like UI/UX), 400k isn't even 2x market rate.
Thanks. It never occurred to me that it might be a Parse replacement. I need to improve it a little bit and it might do the job.
> Sort of makes my point. None of these have anybody (of statistically significant percentage) outside the UK salivating, or have ever created something like a "British restaurant" to be found abroad (like there are French or Italian restaurants everywhere).

British-style pubs that serve those exact dishes are very popular in Canada.
i've been reading up quite a bit on this, and slowly figuring out how to best sample c/v and gates - i've purposely left room in my skiff to build one.

the article linked is missing one of the diagrams, but if you check the image url's, you can find it.
I also see this. It asked for I think 4 separate permissions that you could allow or deny.
Ring side seat for you:

https://news.ycombinator.com/item?id=12071667
If I had a time machine I'd go back and convince them to align the grid more perfectly, so that it happened precisely at the solstices instead of just before/after.
"Pokemon Go Release" has "full access" and yet "Ingress" (a game very similar to Pokemon Go from the same company) only has "basic account info". I removed the access and when I started the app, it crashed right away. (I'm on iOS, by the way.) Subsequent launch I'm stuck on the "LOADING..." screen, and then it says "Failed to get player information from the server." I hope the servers are just down and I didn't lock myself out. (Or maybe I should be glad until this fix this breach.) Edit: Deleting the app and reinstalling allowed me to log in again.

It appears to be the iOS version only that's doing this, according to this article:

http://9to5google.com/2016/07/11/psa-pokemon-go-full-access-...
Facebook is falsely RSVP'ing friends to sponsored events
4 Often Overlooked Ways to Reduce AWS Costs Today
The best steak I've ever had in my life was at Rockpool in Melbourne. It has ruined me. I can't really order steak and enjoy it anywhere else anymore.
I also do not have a Pokemon/Niantic entry in my list there. No idea what happened for OP
I take it this was due to the magnetic North at the time perhaps?
This seems like a massive security fail on Google's part. There's no reason the OAuth flow should be able to request admin privileges silently. As a user, I really must get a prompt asking me (and warning me!).
Skate wing is legitimately tasty. It definitely has a shellfish taste to it, so I can see how you could fool someone into thinking it was a scallop.
Rules for Desigining Great Cities
According to the article, it does not.
The lawsuit is not about the $70,000 minimum salary.

>On Friday, Judge Theresa B. Doyle of Superior Court in King County, in Washington State, ruled that Dan’s brother, Lucas, had failed to prove his claims that Dan had overpaid himself and inappropriately used a corporate credit card for personal expenses. The judge also ordered Lucas to pay Dan’s legal fees.
From contribution guide

> DO NOT USE #REGIONS full stop.

Why is that?
You don't say what sort of business you're in, or what sort of clients you have, so it's impossible to say. However, if someone insists on a meeting and doesn't tell you what it's about, I think it's reasonable to discuss some sort of payment for your time and input.

You can make it clear that if the meeting turns into something that is of mutual benefit then it will refunded, rescinded, or otherwise paid back. But equally, make it clear that your time is of value to you.
It's a free game everyone.

When something is free to play, and involves you walking around with geo services and a camera on, you and your data are the product.

This is just massive data collection disguised as a video game.
Animating programmatically with Redux and React
Now matter how much you may want to get an authentic product, you can't expect to get it without regulation. As the article shows very well. Therefore the reason for the regulation can't be the expectation itself.

The reason for that regulation is a combination of protectionism on one side and a desire to be well informed about the products you're eating.
I suppose this means that I've been working on the uninteresting problems in web development (basic CRUD stuff for Rails), and none of the fun networking-related problems, or otherwise. That's pretty disappointing.
> Lack of exercise is a far greater threat to your well-being than having your Google account hacked...

This is by no means universally true. Plenty of people get enough exercise outside of the app, and plenty of people have Google accounts for which compromise could be very significant.

It should at the very least be disclosed in the OAuth flow that I'm giving away admin rights to the app. Facebook's flow won't even let me give away my email address without an explicit decision to do so. The current silent-but-deadly flow is inexcusably risky.
There are enough kids playing this maybe the FTC will get involved. Maybe some sort of basic privacy requirement.

How is it possible that signing in didn't inform me what permissions I was granting? I didn't think I was giving anything except my email address.
Why in the world would they do this? Or was this just merely an accident?
Even better title: "iOS users using Google Account sign-up affected by Pokemon Go permissions bug, Android unaffected"
I get the sense that the issue might be you. I would first work on a major attitude adjustment. You're going to run into people that are difficult to get along with. It's useful to be able to make those situations work.
Help me understand this. How is maxing out a 1Gbps connection with a 4U, 4 socket (so presumably 24-32 core) Xeon server supposed to be impressive?
Okay so if you didn't post this I would never have known about sheetsu. Great project!

I wish HN would do one day out of the month where commenters could post their "Show HN" that they released that month. Much like the Who's Hiring threads. It would help me find some awesome software that didn't quite make it to the front page.
I think a combination of simpler tax/administration and timezones.

Working with a distributed team across the world's time zones (f.ex. Bay Area and much of Europe are 9 hours apart) is an entirely different game from working with a distributed team in roughly the same time zone. The latter allows you to organise as a digital version of a colocated office, eg you can you standups, easily plan meetings without negotiating against half the team's evening plans.

The first makes most sense if you manage to be mostly meeting-less. That's more challenging in my book, but maybe also more rewarding - and not only for hiring reasons (after all, meetings easily become a waste of time).
If google auth as a platform grants full access to your google account without any sort of confirmation, isn't that the security risk? Whether or not it's intentional or malicious on the part of Niantic, that seems like the real problem here.
That's just access to your phone, not your Google account. Those permissions don't cover the app's ability to read your email.
Ask HN: What marketing/advertising problems should we solve for you?
We’re a couple of entrepreneurs and software developers currently working on software for marketers.

If you work with marketing, advertising, etc., what problems do you have that you’d like us to solve?

What is too time-consuming, expensive, boring or difficult?

Thanks a lot for sharing. Highly appreciated!

Some background: We made Understandly[1], a content manangement system for marketers especially suited for international marketing. Even though one of us works in marketing, we’ve realized that we don’t understand the space and marketers’ problems well enough. That’s why we’re asking you to share your experiences.

[1] http://www.understandly.com/
No, they make their money through IAPs.

No one signed up to let Niantic read their email in exchange for free items.