skysight-inc/HackerNews huggingface dataset:
Thanks for your feedback!

If I understand correctly Macaroons would be very suitable for example, to build a framework for a Single-Sign On service, such that an Auth Server mints the Macaroons depending on certain access policies and then whatever services need to be secured behind the SSO can implement a verifier that consults the Auth Server for the access policy and then grant or restrict access to a request with an attached Macaroon.

Then if I decide to delegate access to someone else (or e.g. to myself in another device), I can attenuate it according to some specified parameters (by time, by allowed operations or access, by device, etc) and then send it over. Then whoever I delegated access to could in turn do certain restricted requests to the services behind the SSO without even going to the auth server to get an access token again (as long as the attenuated Macaroon is valid).

Is this correct?

Since I discovered Macaroons I've been wanting to fiure out how well would they fit to build an auth server to restrict access to an API by user roles, requested instance or even API routes for example. This way implementing things like "Share" links should be easier/safer as well as hierarchical access to an API (i.e. if I can access route X I can also access routes below X, or not, etc).

Off topic: And THIS is why I absolutely love Hacker News. After asking something I got a response from both an author of the paper and the author of the blog post where I found said paper. This community is just amazing! :)
Feels like everyone in the ethereum community has sick frontend design skills
I'm not OP but I went through fire academy in the US with someone doing a similar career change as you're thinking about. He was in his late 30s or early 40s, and as I remember, academy was too physically demanding for him and he dropped out. Fire service, and in particular urban and wildlife firefighting, can be quite physically challenging. More suburban or rural areas are less demanding, but are mostly staffed by volunteers.

Four things to keep in mind: first, in most US jurisdictions these days, firefighting is coupled with EMS. So if you're squeamish around trauma, it's probably not going to be a good fit. Second, it's pretty physically demanding. Even if the academic side comes naturally to you, it's a very physical job. Third, it can literally kill you. If you don't handle stress well, it's not going to be a good fit. Fourth, it's a team effort. Even on extremely understaffed departments, you're always dependent upon other people, and they are always dependent on you -- sometimes, in both cases, for survival.

Out of my academy class, roughly 1/3 the class struggled with the academic portion, roughly 1/3 struggled with the physical portion, and the last 1/3 had to work at it, but didn't really struggle.

For reference, these are some of the kinds of things we needed to do:

+ Simulated rescue of 165-pound dummy

+ Move hose lines, both charged (with water) and uncharged (no water)

+ Climb ladders until you suck the bottle dry

+ Crawl through a wire entanglement tunnel in full gear (I think we also went through one round with "blindfold" inserts in our SCBA masks)

+ Drills with time limits on almost everything (donning gear, doffing gear, bottle changes, on-air, off-air...)

And so on. My advice would be, get in shape first, and manage your expectations. Many departments will be pretty hesitant hiring someone who's 20 years more senior than all of the rest of the recruits. Volunteer would probably be a better fit, but less of a career change and more of a side project.
Arrays and the CLR – A Very Special Relationship
> In their defense, Apple hits home runs with those kind of products.

Apple makes plenty of turkeys; it's just when they score a hit, they hit it out of the park.
Analyzing React’s Source Code for Type Mismatch Operations
I would think if any human-speakable language were promoted for AI uses, it would be the machine parsable language based on formal logic, Lojban. I've thought for a while that this is the perfect halfway-point for human-computer communication.

https://mw.lojban.org/papri/Lojban
At the same time, a maintenance position can offer benefits as well. With the exception of emergency bug fixes, maintenance is likely to have a more stable work load which might appeal to those who want more work-life balance. Some engineers may prefer to spend their time on lower level tasks that aren't showy but are nevertheless important to get right. Working on threads/locking/synchronization may not be glamorous, but it's critical for the operation of everything else and difficult to do right.

I think we should be putting more effort into recognizing/compensating those involved in maintenance work rather than steering folks away from it. The raw technology invention is important, but the maintenance work is what makes it ship and continue to work for customers. There are also plenty of widely-used projects remain relevant only due to maintenance. Projects like OpenSSL or the Linux Kernel come to mind here.
Easy, they just have to find an investor with 10 times as much money to irresponsibly blow through as the Saudi sovereign wealth fund. That exists, right?
Not merely ski resorts, but specifically Aspen (in Pitkin County) and Vail (in Eagle County). These are not merely fit retirees, but the richest retirees in the world.

Further, there is a bit of selection bias here in that the town of Aspen is at 8000 feet of elevation. You need to have a decent baseline of physical fortitude just to step off the plane there as an older person...

Finally, for what it is worth, day to day life in Aspen (even outside of the ski season) is extremely active and everything about the town promotes that activity.

I personally don't think there is anything actionable or interesting[1] about Aspen and Vail having high life expectancies - they are completely non-representative of any piece of the real world.

[1] Well, other than fitness and activity increasing your lifespan, but we all know that already.
I thought it was 'big piece of pie'.
> What exactly "needs to change"?

The EU feels out of touch, unresponsive, "undemocratic". Whether it is or not isn't the issue; it feels that way to too many people. Many people therefore feel very little emotional affinity with the EU. If the EU is going to survive, that needs to change, because it opens the door to anti-EU populists in several countries. If enough win, the EU could become a skeleton of what it is now.
I think there are services designed to store and provide secrets... maybe one of those.
> How is this a US problem?

One word: Mobility.

I lived in a slum in India and went to a private school that catered to poor kids. Got scholarship and worked my way up to start living into a high-rise. The private school had a big role to play in it.

That is not possible for low income neighbourhoods for USA anymore. The mindless regulations make private schools expensive. It is not possible for a retired school teacher to run a class-room in a garage at night and call it a school. That teacher will end up in jail and sex offenders registry. The poor hispanic neighbourhoods of south San Jose will have to rely on the pathetic public schools and those schools will ensure their students flip burgers. Those kids will find it hard to move to Palo Alto.

Public schools not only distort the housing markets but they feed into that evil spiral of poverty. I would love to see department of education dismantled completely and money given to kids to chose their schools of choice and let entrepreneurs make money by catering to the needs of all kids.
I spend half of my time in a food desert and half my time in a hippie foodie mecca.

I think the answer is both. Rural areas lack the population to keep fresh food entrepreneurs from locating their businesses there.

At the same time, rural food culture tends to be shit outside of garden season - people think that potato chips and brownie mix are somehow valid ingredients in a recipe. They swap these "recipes" with their friends and look at you funny if you skip the bun and double up the veggies on your burger.
AptDeco (YC W14) Is Hiring a Customer Experience Manager in NYC
Time to start an alternative to EPA. Perhaps volunteer effort by academics, non profit. no government dependency.
The belief in smaller government and general distrust of it in some such areas (but not all) is, IMO, often because paternalistic urban policies don't effectively meet rural needs. Which is taken as proof that government can't solve their problems.

The politics of benefits in such areas are also frequently driven by a perception of affordability -- it's all very nice to have paternity, maternity, sick leave, etc., but when the perception in the community is that there are few jobs, and what jobs there are can barely afford to pay people's wages to begin with, of course it's going to be accompanied by a belief that forcing the provision of benefits is just going to destroy jobs and not help anybody.

I think it's important to take some sort of needs hierarchy into perspective - when daily living is tenuous and stressful, I think many of the benefits the "too stupid to know what's good for them other parters" don't seem to be moved by are addressing the wrong steps of their needs hierarchy, or fail to take into account the financial and environmental realities of their day-to-day lives.

Just as housing has turned out to be an important first step in combating homelessness (as opposed to medication, employment, etc.), I would not be surprised if there were different first steps needed to support people in poorer, more rural, areas than what are perceived within them as very white-collar benefits.
Man with no coding experience built App to bring Solar to Yemen
I'm lost, what does pronunciation have to do with syntax?
What prevents Turkish ISPs from blocking peer-to-peer IPFS connections within the country?

(I'm having trouble figuring out exactly how IPFS presents itself at the network layer, and whether an IPFS connection over TCP/IP is noticeably different from some other normal connection type, so I genuinely don't know the answer to this question. It looks like it uses SPDY over TLS, but maybe something in the certificate gives it away?)
But it won't grow unless others can download IPFS software to continue hosting it and there is no reason to believe they could not simply block it internally as well to prevent spreading.

As said before, it needs to be used/useful to many normal people (like a previous example of GitHub) before there it requires too much political will to effectively block.
Speaking as someone who watched this come together on IRC, it definitely was NOT a business decision! This is just a problem being solved by smart people with great tools! That's how it should be!
No government "dependency" means no enforcement.
I went through academy (didn't work as FF though, just as EMS)[1] in Cleveland, in a program heavily oriented towards professional programs, and would echo most of this.

[1] I graduated just fine, but had pretty major time conflicts with grad school and decided not to go into FF full-time, which pretty much precluded my ability to do it at all, unfortunately.
The ultra high-end market has always been turbulent. Look at Silicon Graphics. They dominated for a good stretch, but then a wave of less expensive windows based machines (like Integraph) followed by commodity graphics-card powered PC boxes completely decimated that market.

During that entire time Apple was always positioned in a niche. For a time it was desktop publishing, video editing, photography, audio. A lot of that had to do with loyalty of the developer community, who produced killer apps that only really ran on Apple hardware, as well as appealing to a customer base that deeply preferred Mac OS.

But it's worth keeping in mind that the Mac Pro wasn't really ever dominate in certain high-end spaces like 3D. I mean, I'm pretty sure I remember hearing that the ID team at Apple was for a long time using non-apple hardware to run their CAD stuff until one day Ive and Jobs were like, 'this is unacceptable'.
Basically everything from this list https://en.wikipedia.org/wiki/List_of_common_misconceptions
Google security researcher discovers 'crazy bad' vulnerability in Windows
What makes a language more or less expressive? Do you have scientific evidence for your shocking claim that e.g. English is "less expressive" than Latin?
That's about what another developer and I took to move a similar app from 3.2 to 4.2. We should move it again to 5.1 as soon as the customer agrees to invest in it.

I think the biggest step was between versions 2 and 3, when Gemfile appeared. Then the asset pipeline (3.1?).

All considered, the time saved because of following reasonable conventions trumps the time spent upgrading. I'll be updating a Django app from 1.8 to 1.10 soon, I'll be able to compare it with upgrading Rails.
From the article you cited:

A strong argument in favour of computerisation, however, is that the worst delay caused to trains in service as a result of these types of failure was 30 minutes long – with the mean average delay time across all 700+ automated system failures being just five minutes.

That is amazing. Bear in mind that the Victoria Line runs over 30 trains per hour in the peak! I don't feel that "troublesome" is an appropriate description.

In the UK at least, a large number of railway routes really are constrained by the safety margins required for trains. In the late 90s, when the West Coast Main Line was upgraded, there was an abortive attempt to implement a modern moving-block signalling system – but it was predictably too difficult for such a complex line.

I don't doubt that you're right about the incentives being different on low-traffic lines though. It does demonstrate that there are various benefits to more automation that need to be traded off against the complexity, cost, and rust of failures.
I was a little worried linking there since I can't vouch for the rest of her output. But that particular article seems solid to me.

This anti-establishment part of psychiatry certainly attracts fringe views. But I find the core criticisms of neurochemical imbalances and psych drugs to be convincing.
When the language was made 40 years ago, the extra overhead was unbearable.

Or rather, more likely, they were so focused on efficiency (because that's what you do when you have a 1Mhz computer), that the idea of making things easier for people in this way didn't cross their mind.
Very interesting, haven't thought of it. But at the end of the day selling directly to the customer still is a competitive advantage, right?
Average consumer willing to pay $4,500 extra for fully autonomous vehicle
They also bet pretty heavily that the bandwidth of DisplayPort/Thunderbolt would make it possible to expand the capability of the machine through external modules. Not just hard-drives or displays, these were envisioned for external GPUs and more, that perhaps Thunderbolt might become as sensible a design decision as PCI-e. Ports are the new slots!

That didn't work out. There are external GPUs today and they perform surprisingly well, but it's just not the same as having a card you can slot into your machine.

The one thing that the Mac Pro was supposed to do well, it killed at though. Final Cut on that machine can chew through 4K video without issues. The problem is the people that want that machine want more than Final Cut.
Yep! Specifically: https://thelastdriverlicenseholder.files.wordpress.com/2017/... (that's them parked in the lot on Harrison) and then you'd erase all the OTTO branding :)
Also, fixed costs vs variable costs.
And who will take their place? Lobbyists?
> No, I'm saying that neither humans nor machines can determine gender solely by looking at a picture, no matter how well they're trained. There will always be examples they get wrong.

This is irrelevant and dishonest. Don't go around making factual claims like something can't be done when it manifestly can usually be done.
Show HN: Grab a Lyft right from your Mac's menu bar
Imagine if they all drove close together and had roof railings so you could hop from one to the next for a visual inspection?
We will fight now, but sooner it will come back. We won the last battle but what about this and the ones that will come if we win again. This is going to be never ending battle until we lose and corporations win. There should be a strong amendment with irreversible clause on Title II .
NYC Subway is really hard-core about train stops. There's a trip cock on every subway car, near the right front wheel, and it works by directly operating an air valve to the brakes. The train stop lever alongside the track is raised by a big spring and lowered electrically, and the signaling system senses when it's physically up, ready to trip. Only then can the preceding train stop lower. There are always several train stops up between trains. A signaling failure or power cut will raise the train stops.

"The central principle of signal placement and engineering is that the control lengths of the signals be so designed such that when a train running at the highest possible speed under the worst weather conditions, with any semblance of functional brakes, is tripped, it will come to a halt before encountering the other train or obstruction that is causing the signal to be red."

Some signals have timers, for speed control. Go through a block too fast, and the signal ahead won't clear. Then the train stop will stop the train. This is common in downhill sections and ahead of curves.

Resetting a trip cock in NYC requires getting out of the cab and climbing down to the tracks. This is Not Fun.

Chicago has self-resetting trip cocks, which resulted in an accident in 2013.[1] A train parked in a service yard had a water leak into the control cables, which caused the train to move, slowly. The train hit a train stop, the brakes were applied, and the train stopped. But
the trip cock reset, and the train started again. This happened five times at five different train stops. Workers noticed, but were not able to stop the train. This continued until the train hit an occupied but stopped train just outside the yard.

This is why you want dumb train control.

[1] https://www.ntsb.gov/investigations/AccidentReports/Reports/...
3 Stages of Successful Team Bonding
Show HN: Get an Uber right from your Mac's menu bar
Battery will never happen, they're no longer a singular thing you can replace but a multitude of inter-connected parts, each carefully positioned and glued in place. Why is this a problem? Apple will replace it for a nominal fee should you be experiencing problems, and if it's a dramatic malfunction, like the dreaded bubble battery, they'll often replace it for free.
>Pain management, optometry, and many other non-psychiatric disciplines also rely on self-report.

That's just plain wrong on the optometry part. While there is a lot of self-reporting used in optometry because it's faster and easier, it's entirely possible to remove it, because you can't fake not being able to read stuff when your vision is too blurry. How do you think the DMV tests your vision? It's not self-reporting; they show you something that you don't know beforehand and you have to read it. Optometrists also use vision tests to gauge your vision as they try different lenses. If they really wanted to, they could move from static tests that you can memorize to dynamic ones to prevent "cheating", but why would anyone cheat on an optometry exam (like they really would for the DMV)?
I think that steps 2 and 4 are the biggest questions for me, but the details about keeping the cars running & clean are also good ones. Right now Uber can externalize the costs of a running clean car. Running their own fleet will mean that stuff like gas, maintenance, cleanliness, misc stuff that 5 star uber drivers do (free candy, water etc) will no longer be externalized and bore by their drivers.

P.S. did you mean bearish instead of bullish?
Once again:

1. "Hard-code" the simplest possible sound crypto construction that solves the specific problem the protocol is meant to solve.

2. Put a version on the whole protocol.

3. If the crypto constructions later need to be amended, upgrade the whole protocol.

The anti-pattern is attempt to use a static "outer protocol" with a negotiated and regularly changing "inner protocol" --- that's an architecture we know from experience does not work well.

You know you're in trouble when developers are forced or even encouraged to make decisions between things like RSA and ECC.
In the past UBER was supposed to lead in shared rides(i.e. UberPool) , and their VC's talked about that as the thing that will bring UBER to replace private cars.

Currently, other companies seem to have the lead.And btw, when done well, this segment has a pretty strong network effects.

In the same way,if most of UBER's advantage is awareness and installs, credit card numbers, and common trip data, in the context of real self-driving cars, that's almost nothing:

Awareness and app install - a working self driving car will the miracle of the century. Everybody will hear about the company who offers it, constantly. from there the road to installs is short. And for such value as self-driving cars offer, entering a credit card number doesn't seem like a big deal.

As for common trip data? well at the very least Apple, Google, Moovit, Cellular ISP's, and maybe others have plenty of that(in one form or the other) to start.

But most importantly:time. Self-driving cars are a risky technology. it also takes time to scale manufacturing. so they'll probably be deployed relatively slowly. That gives the companies who own them enough time to not need UBER.

But UBER still has one strong card to play: flying cars.
So have tighter blocks more often.

A block is a discretization of the continuous track, and in track-space, your absolute "GPS" location isn't relevant -- just where you are on the track.

The on-vehicle location detector ("GPS") is essentially a cost-effective alternative to having infinitesimally small, fixed blocks.

The benefits are equivalent: the tradeoff is between whether you want to spend money on maintaining fixed trackside infrastructure, or more advanced equipment inside on-track vehicles.
It works on most cases that people normally get right, and is useless on most cases that people normally get wrong.

Overall, it's not useless, but it's really not worth modifying the language for it.
Pruitt has stated he would like to see officials from the industries being regulated taking these positions.
https://en.wikipedia.org/wiki/Otto_engine
I was going for the smallest amount of hydrogen that would form a star. I suppose the joke would be improved if I used a number measuring the Sun's initial hydrogen content. I suppose that's why I'm not a comedian :P
"A spokesman for the E.P.A. administrator, Scott Pruitt, said he would consider replacing the academic scientists with representatives from industries whose pollution the agency is supposed to regulate" sounds like it
> The only rational response is an organized campaign to convince American citizens to remove Trump from office as soon as possible.

Why is that the ONLY rational response? What removal mechanism do you propose?
Basically, yes. The wolves will guard the henhouse.
7 Changes You Notice After Just One Month of Telecommuting