skysight-inc/HackerNews huggingface dataset:
From: xxxx
Sent: Wednesday, August 10, 2016 3:03 PM
To: 'xxx' <xxxx@sprig.com>
Subject: RE: Introducing Myself and $20 from Sprig

Hi Billy,

The problem with Sprig is price. A normal lunch costs $9-10, while Sprig’s lunch with all fees is $17.

Thanks

xxx.

From: xxxx [mailto:xxxx@sprig.com]
Sent: Thursday, February 18, 2016 12:08 PM
To: undisclosed-recipients:
Subject: Introducing Myself and $20 from Sprig

Hey there -

I wanted to reach out and introduce myself. My name is Billy Blaustein and I'm acting as the new Manager of Sprig here in San Francisco. I'm a Bay Area native that cares deeply about healthy accessible eating.

I'm reaching out now because I know that used to be a big fan of Sprig, but for some reason we haven't had you order from us in the past few months.

We've done an amazing amount of work at Sprig rebuilding our app, rebuilding our menu, and trying to build a great brand for busy San Franciscans. I can personally attest that a lot of our food is completely redone.

I've put $20 of Sprig credit into your account that you can use through February. I'd love to hear from you about your experience.

I apologize for emailing, but this is a personal outreach from my personal account.

Looking forward to hearing from you -
BB
You don't want bike lanes, you want separate routes.
http://www.aviewfromthecyclepath.com/2012/07/unravelling-of-...
I think there is a community that would like this. Not sure how big it is.

I drive old cars (newest is a 2004 year) and use old computers (my laptop is a 2009 Macbook Air) because they are a fantastic value and they do what I need.

I use a phone for making calls, texting, light web browsing, as a portable music player, and for maps/navigation. That's really about it. Maybe a 10yo phone would struggle with maps but a 5 year old phone generally would not.

I'd be on this in a heartbeat.
In most cases, you can still replace the battery. It just isn't that easy.
"female driver"

I suspect her gender had nothing to do with it.
Acknowledging luck as a factor is good sense.

Flatly attributing to luck is foolish.

Tearing down the wealthy because they happened to be lucky in some way is hostile.

Statements like 'Most wealth is appropriated from others, not made.' are hostile and toxic.

Not just toxic but toxic along several axes.

First, it obfuscates the real problems. The problem isn't inequality of income or assets -- it is when that inequality leads to monopolistic situations for the have's or desperation for the have nots. This is a much easier problem to solve than forced equality thus making a surmountable problem seem much more intractable than it is.

Second, it unfairly vilifies an entire group of people. For the most part, in functioning societies where wealth is generated through voluntary exchanges of value, the wealthy are, generally speaking, doing a ton of good in the world. If we discourage people from taking that path by vilifying it, we are doing much more harm than good.

And finally, it allows people to feel good about doing little. If the wealthy are only wealthy because of luck, well, not generating wealth is as good as creating value for other people and generating wealth, right? Wrong.

Luck is a factor in wealth generation, no doubt about it, but luck is a secondary characteristic. Focusing on it, especially while discounting all of the other factors of financial success, is a mistake that hurts everyone.
It's enumeration through 32 bits of 0-4294967295. There are only so much IPv4 addresses.

If you add a salt, then that "net location ID" becomes of very limited use. You won't be able to grep through the logs for request from specific IP, you won't be able to tell how many distinct IPs are accessing your services, etc etc. The only use I can see is keeping it in the session to check if IP address had changed, as a security measure.
"Sprig, which had raised $56.7 million"...a lot of money to be on a company that including delivery costs probably had negative gross margins.

Blue Apron's model of delivering just ingredients has a big advantage that they don't have to cook food nor deliver quickly, and they probably charge around as much for a meal as Sprig did. Much more promising business model in theory...and one that's working great.
One year at Y Combinator Research
Have you ever visited Milton Keynes in the UK. You can get across town without touching a road, as they have a completely separate cycling infrastructure. The red routes. Sadly though as they are out of sight, they are used by hoodlums and gangs at night, to the point people don't want to use them. Shucks, people. They are also used by mobility scooters.
Go and a not tiny amount of memory
The Cloud Computing Cybersecurity Challenge
https://usepanda.com/app gives SSL certificates errors so will hold off investigating until it's fixed...

do people not check this stuff?
OP makes some good points but should go on vacation in the Netherlands. Way ahead in road safety. For example:

https://youtu.be/FlApbxLz6pA

Or more extensively:

https://www.youtube.com/watch?v=l0GA901oGe4
Tech giants ask lawmakers to reform NSA surveillance law
Thanks for the nightmares.
My point is more that systemd makes less sense if you think of it as just init. "Why does init need to manage -foo-?" is a valid question. But "Why does a general 'system daemon' need to manage -foo-?" tends to be self-answering.
If you're going to add a unique salt every operation you just destroyed the value of that IP address for tracking purposes. Which was the whole point of the discussion to begin with. By your scheme you might as well store a random number. So, either you store the IP in such a way that you can later re-associate a new call with the previous IP or you might as well not have it.
For an example on how it should work look at Bash On Windows. They are really doing a great job there.

https://github.com/Microsoft/BashOnWindows/issues
By law bikes in CA are supposed to stop at stop signs [0]. Most cyclists ignore it.

[0] http://www.latimes.com/opinion/opinion-la/la-ol-cycling-coll...
I bought $50 because I have been calling Bitcoin a pump and dump scheme for a few years.

I figured if others were going to do it, why not me? Plus if someone wants to buy some at $5,000 / coin or whatever it ends up at, go ahead.

You all should check out /r/Bitcoin. They are "predicting" $1m / coin already.
I've read this one[1] a while ago, and remember being annoyed at the usage of some words, like 'nature'. Is it different in other translations?

Then there's also the irony of the most powerful man in the world writing a book where he recommends the reader to be content with their station and to preserve the status quo.

1 -
https://en.wikisource.org/wiki/The_Thoughts_of_the_Emperor_M...
One small difference is that the activity on GMail or large email providers is generally two-way and it becomes clear when you understand that clicking "Send" sends your mail away to be stored in GMail forever unlike where photos somebody would be taking with their friends are not aware if it is put in Facebook or similar social places.
No, not at all. The case for protected bike lanes is rock solid, but it's been tread so many times that it's only worth addressing the article itself:

https://en.m.wikipedia.org/wiki/Betteridge's_law_of_headline...

Remember, in this age conflict, not content, drives journalist profit.
Same engine but it is tweaked heavily to run lighter and they have a nice power saving mode as well.

Watch out for Opera's add block, it works through a proxy to compress data, thus they know your every move online too...
They can build up a graph and they'll see your emails when sent to a gmail recipient or from a gmail originator to you.

With a very large fraction of all email now passing through Google's servers you can expect them to be able to piece together the missing bits with high fidelity.
Art as Research
Not sure why this was dead.

FYI, graph at the start is missing the most recent years. End graph is more up to date: http://www.datagraver.com/thumbs/1300x1300r/2017-05/ter-we-i...
Importance of this is that it is discussed.
That isn't true. Many domains are routed through Gmail where you have absolutely no way of knowing up front that you are going to be sending that mail through Google. It looks like any other email address on a private server.

https://gsuite.google.com/signup/basic/welcome
I saw this idea way back on amazon:

https://www.amazon.com/Bathroom-Patent-Wall-Art-Prints/dp/B0...
Snowden Reveals Documents: 'More Intelligent Homo Sapiens Exist Underground'
There wasn't any copy protection in the e-books I bought from amazon. However, I haven't bought an e-book from amazon in 6 years. So that may no longer be the case, if more publishers have started using DRM.
The question is that how many actual people realize it.
It would be great if phone makers commit to something like this as part of their environmental plans
Because those things imply a team effort not an individual one? But demonstrating you've been part of one of those teams is a good indicator.
No idea, any evidence that Google uses email content do generate external profiles (vs. the user who received the message)?

If I write "Leroy Jenkins likes rushing" in an email, does Google create a persona called Leroy Jenkins, assigns a quality "likes rushing" to it and tries to match it to other data?

I always heard that user data is firewalled by default inside Google (PII data from one user isn't used on other users, unless explicitly shared).

Even on Photos Google seems to only allow you to appear as a suggestion on your contact's photos after you explicitly opt-in and explicitly selecting "which one is your face":

https://9to5google.com/2017/05/25/google-photos-suggested-sh...
> However at that point surely you just add a salt?

How would that work? You'd have to use the same salt for every IP (which completely negates any benefit of the salt), otherwise how do you know that bcrypt(salt_1, IP_1), which you stored in your database yesterday, refers to the same IP as bcrypt(salt_2, IP_1) that you stored a month ago?
This statement is horribly wrong. The sad state of even wireless ac drivers in Linux today show that there is a severe lack of driver development. What makes you think that a more proprietary and more guarded cellular modem will have better driver support than the current state of driver support? Isn't this just wishful thinking?
Really easy indeed. At least that explains your username!
Very interesting, thanks. Which Android version is LOS 13?
I'm trying to think of where I could even drum up an Xbox One, but I think I'd be up a creek without a paddle myself. None of my friends own one (though they own 360's and PS4's) and none of the MS employees I know own a Xbox One.

I think I'd just try to hijack one at a Microsoft Store, if they have those available to "demo". Though they may have ripped that out for the Vive areas iirc...
For your statement is correct. The article does not back your second statement up.

Please don't draw conclusions of fact where there are none.
Are they so likely? Do you mean they keep logs of every attempted connection to every vps? Even in countries like Netherlands? I'd bet that's less likely than keeping a log of their paying customers' names
Whenever we talk about protection, I always harken back to the study that said kids who learnt martial arts with body armor actually ended up getting hurt more than the kids who don't use em. We see a similar effect in case of body immunity etc: Third world countries just live through so many environmental effects that they build a natural immunity.

IOW, I wonder if it is sane to restrict these or just let people figure it out: I remember a time when everything on facebook was about zynga games and then they just went away.

I mean the ability to focus on a given task persistently has produced so many good results: Why wouldn't we want to hone and develop that by providing as many distractions as possible?
They link to the meat. This is an article in a general newspaper, why would you expect technical data?
Your post is great, well made and articulated, sort of the anti-plunger post.
A major part of the Dutch system is the bike network has the most direct routes, while cars generally have to go around.
>If so, then what was the point of locking him up for 5 years? Who did that help?

If someone can get away with a huge robbery and not suffer any consequences, that completely undermines the justice system.
Snap Acquires Drone Maker Ctrl Me Robotics
I disagree. In my experience, Xcode 8's view debugging is a bit of a joke compared to Reveal. Reveal's visualization of the view hierarchy is much better, especially when it comes to illuminating some subtleties of view ordering. Next, every time I've used Xcode's support, it kills our app. Fun times! I've never had a problem with Reveal interfering with the running app state. Last but not least, Xcode's view debugging doesn't allow live modification, which is key to iteration speed. These features together have saved me enough time that Reveal paid for itself before the trial was over -- and I'd used Xcode's view debugger well before I discovered Reveal. I wouldn't have put down money for a tool that wasn't a big delta from the Xcode baseline.

Setting up for Reveal is trivial, making your "messy" speculation seem baseless. For an app that uses CocoaPods, it's literally just adding one line to the appropriate target:

pod 'Reveal-SDK', :configurations => ['Debug']

If that gets into your release build, you've got much bigger problems than an external SDK.
Personal opinions don't have to be in the best interests of the company you founded.
Microsoft has tens of thousands. Does Windows do more for its users than Ubuntu Linux?
"They cooked and delivered their own meals."

... Like Dominos?
Debugging Node.js with Google Chrome
Not sure what it's doing on HN, but this is a really nice piece of journalism, well worth checking out even if you're not interested in the subject matter.
If you have support for coinductive data types then you are Turing complete. Proof: you can simulate a Turing machine. However, Coq's term language is not Turing complete, meaning that every syntactic element in Coq evaluates to a terminating computation.
This is a pretty amazing compilation, is there any recourse for this? Are these security guards protected by diplomatic immunity? Is that a stupid question?
You probably wouldn't have the same opinion if your bank collapsed due to people constantly robbing it, and you lost your entire life savings.
HN is for anything that might interest its audience, you seem interested, and I am too, so it checks the boxes :)
Walgreen's has lightening fast chip readers.

Everyone else, yeah, pretty slow.

I am surprised that apparently only 1 vendor has figured out how to make a good chip reader, and I am sad that apparently other retailers don't care enough to buy from that one vendor.
I'm more concerned about the feedback loops that punish poor people for being poor. Stuff like monthly fees on bank accounts, being thrown in jail for failure to pay child support (in the process losing one's job), etc. It's expensive to be poor in the United States.
America has done the vehicular cycling approach for decades and what we have to show for it is 1% cycling mode share. Vehicular cycling is the transportation policy for the 1% of cyclists (it made sense to me when I was 22 years old and fearless). By contrast Dutch infrastructure is designed for a 60 year old woman with two bags of groceries.
> From the manufacturers point of view phones not being future proof is a feature, not a bug, that way you'll upgrade to that new shiny item which will keep the profits rolling in.

I don't think a better AI chip will be a convincing argument to change a phone one year later.
traintimes.org.uk is a masterwork. The URL schema is simple enough to remember - always cool to tell people "just go to traintimes.org.uk/leeds/london"!
Bill Gates did too:

https://blogs.msdn.microsoft.com/oldnewthing/20091123-00/?p=...
"First your website uses SNI..."

s/uses/may use/

Not every website uses SNI.

For example, the majority of sites linked to from HN do not use SNI.

Also, there are workarounds when SNI is not supported. Workarounds have been published by one major corporation who authors a popular web server software and runs a cloud hosting service.

Is SNI "the only way to do it"? No. There is another way to do stream encryption for mlutiple websites from one IP. It predates HTTPS. This idea goes back to one of the original authors of the world's first web server at CERN. The legacy of this idea survives today as the Websocket "Upgrade" header. Links to further reading below.

Because of groupthink dynamics among today's standards committee people and website owners who follow along, it appears that any online discussion of alternative options to SNI is met with swift dismissal.

http://www.ietf.org/rfc/rfc2817.txt

http://www.ietf.org/rfc/rfc2818.txt

The draft below refers to proxies but further searching will find papers he wrote about how to start an encrypted stream upon connecting to an HTTP server. Any service could sit behind one simple HTTP interface. This idea was revived in "Upgrade" header referred to above. Then forgotten as HTTPS became popular. Then revived again for "Websockets".

http://www.ietf.org/archive/id/draft-luotonen-web-proxy-tunn...

SNI is not the only solution, it is just one approach, and I suspect the next-generation encryption (a TLS alternative that will be readily adaptable to PQ) will not need to send domain names in the clear.
This looks really interesting, I'd love to hear if anyone uses it.
I figured because it was a fairly in-depth analysis of the footage, it was worth posting to the HN community. I'm glad you found it interesting.
~I don't think Lineage OS 13 exists.~ (edit: it seems it does for some models). CyanogenMod 13 was Android 6 I believe and Lineage 14 nightlies are currently 7.1.2.
My 2 cents having gotten about 10 bugs in Microsoft products (mostly Windows and Office, some server, some client, some kernel mode, some user mode):

You basically have to pay for Premier Support or find a way to get in touch with a developer out-of-band to get anything fixed. Even going through Premier is a brutal process, as a consumer, try to find a human at Microsoft or just give up. Even if you do pay the ransom for fancy support, you're still way better off trying to find an alternate way to contact someone on the team. Write a blog post, tweet at someone, post on HN or Reddit, whatever.

If you do go through Premier, hope that your bug repros every time with a procedure that takes no more than 5 numbered steps. Anything beyond that, give up. Never ask for advice or assume common sense or anything with any room for interpretation.

Hope that your bug is in something that is about 1 year old. Any newer and support has never touched it and is surprised anyone in the real world uses it. Much older and they won't risk a change.

This has gotten better recently, but be prepared to fill out a lot of questionnaires about why some data corruption bug or memory leak is a problem for your business. These will be insane in context. At one point I had to write 8 pages about why Task Scheduler (their cron, more or less) should run tasks on the defined schedule, as opposed to not running them.

Hope that your issue is in a core-ish server product. The support teams for AD, Exchange and SQL are significantly better than anything client side. Just as long as it's one of these older established products and not something new, if it's new, support won't know what it is.

There are incredibly competent and helpful people in Microsoft's support org. Like fix your bug in a 15 minute phone call after a hundred hour case, cut you a private build and ask you to confirm the fix - competent. I'd estimate there are about 4 of these people in that entire support org, and you don't get to talk to them until you've invested a month or two in escalations and repros.

Oh and answers.microsoft.com is an anti-service. It's like experts exchange in the dark times, only worse. There is no useful information there and it serves only to add noise to your search results.
G Suite has different privacy practices than GMail.

https://support.google.com/googlecloud/answer/6056650

> Does Google use my organization’s data in G Suite services or Cloud Platform for advertising purposes?

> No. There are no ads in G Suite Services or Google Cloud Platform, and we have no plans to change this in the future. We do not scan for advertising purposes in Gmail or other G Suite services. Google does not collect or use data in G Suite services for advertising purposes.
One wonders: is there ANY point at which the Congress or even the Courts will step in and say that the abuse has been excessive?

Yes, and it's happened before:
https://en.wikipedia.org/wiki/Church_Committee

The LE and intelligence agencies just go back to doing exactly what they were doing, with zero accountability as usual, and nothing really changes. Except they get a little bit better at covering their tracks.
> with automated tincans on wheels

I think this was the most insightful part of your comment. When cars are self-driving, there's no reason they'll look like cars any more. There will be people-carriers, but they won't be the only vehicles on the road when they don't have to carry people any more.

Instead, what about small cargo carriers, like bike messengers without the bike? Imagine basically coolers on wheels, zipping along with cars. Why have a full-blown car or motorcycle when you can have a tin can on wheels deliver stuff?
Ha - if anybody says that, ask them if they can kindly lend you their phone for a few minutes, so you can browse through their photo gallery, browser history and emails.
A lot of the move to requiring laptops, particularly district-supplied Chromebooks, is not driven by an effort to improve education per-se, but to improve the education workflow for teachers, and to go paperless.

Students are given a Chromebook and a G Suite for Education account, and all papers/homework is required to be submitted in Google Doc format. The accounts and the Chromebooks are, of course, centrally managed.

Because all students receive these devices (and in our case have to pay a $20/yr. insurance fee to cover any potential damage) any objection from poor or under-priviledged families is eliminated.

It is sold to parents as a way to improve education? Of course. But in reality it's not for the benefit of the students. It's for the teachers.
Even an established chef, David Chang (of Momofuku fame here in NYC), tried something similar with a startup called Maple. Raised millions. Shut down a few weeks ago for similar reasons.
I can answer you here: same applies to bathroom. We only close it because it is currently considered socially inappropriate to do otherwise.
Google does some pretty scary stuff too.
I made a point of never giving them my mobile number or any "real information" about me.
When a friend of mine added me to his contacts, on his Android phone, he also added one of email addresses to the contact, which is the same one I used to register my Google account.

The phone automatically connected the mail address to my Google account and now every time I call him the (anonymous) picture of my Google profile shows up on his phone. Which I guess means that Google now also connected that phone number to the mail address/Google account.

Tbh that's really offputting: You can be as careful as you want and it will still be all for naught because friends&family just end up leaking your details everywhere without even noticing it.