skysight-inc/HackerNews huggingface dataset:
>doesn't really make much sense. Of course investments are pre-sales tax. The sales tax applies after the investments are liquidated to cash and the cash is used to purchase stuff.

Say you have 100$ and you're rich. You invest that in the markets, compound for 40 years and end up with 4500$. You then get to pay sales tax on that after you've gotten your capital out multiple times over. If you're poor though you spend all the 100$ and pay tax right at the beginning, so you don't get to benefit from the compounding of your earnings because you have to use the money right away and thus have to pay the sales tax right away. Compounding is extremely important over even a single lifetime and rich people get to use it over generations.

>Let's say our hypothetical person is "rich", but it doesn't translate into extra consumption spending, then what's the point of being rich? It's not like he's getting anything out of it.

People put a very high value on aquiring wealth to pass on to their heirs. And even without that if what you buy is property there is no sales tax and you get to use that property throughout your life. If what you buy is investments you get to defer consumption till later and thus get much higher incomes through capital gains and thus pay all your sales taxes from investment gains of the pre-tax money you don't need to spend on day to day spending.

>You do have a point about estate taxes not affecting the majority of people, but estate taxes do affect estates with value greater than $5MM, and I'm working with the assumption that you and I are discussing "rich" people. The marginal estate tax in the U.S. ranges from 18% to 40%, which is higher than any sales tax.

The estimate from Wikipedia is that estate taxes apply to 0.2% of estates. That's what I mean by estate taxes being completely irrelevant for this discussion. The 0.2% of cases where your argument apply get to use all sorts of other tricks to avoid taxation, this is just about the difference between the people living paycheck to paycheck, the ones that get to put a little away and the affluent middle class. For all those 99,8% of the population estate taxes are irrelevant and sales taxes are extremely regressive.
Food trucks don't get 'planning permission' and these boxes do get food safety inspections, so again - doesn't seem any worse to me.
Show HN: 600 kubectl bash aliases that help me work with Kubernetes faster
Where I live you almost never see kids alone. They get dropped off by car at school, when they take the school bus the parents wait in the car until the bus has left.
Dark Leviathan: what the Silk Road shows us about libertarianism and the state
Yes, although I believe it's weighted by population density inside the triangle (the in-game explanation is that you gain points by influencing minds inside the field, in a global struggle for control of the human race).
Hygiene inspection is still being carried out. From the article:

“Dan Warne, Deliveroo’s UK and Ireland managing director, admits the company did not move quickly enough to speak to the council and residents in Southwark, but says Roobox kitchens are clean, hygienic and checked by the Food Standards Agency.”
Well maybe better way to state, less 'conscious' and more 'things they're conscious of.'
I'm not too familiar with ccache, but I assume it caches files? This compiler caches expressions, so you can change parts of a file without affecting the cache
I’m not saying these people were reasonable or thoughtful in their comments. Most of them are downright despicable for saying what they did. But being a hateful moron shouldn’t be illegal.

You’re really cherry picking the cases. A lot of the arrests have been over nasty things said about Muslims as a group, not calls for violence. The people who said them are wrong, but they shouldn’t be made into criminals. This man for example, was arrested for tweeting that he asked a Muslim woman about an attack and didn’t like her response: https://www.theguardian.com/uk-news/2016/mar/23/london-man-c... . It’s certainly rude what he did, but not illegal and it’s not even what he was arrested for. He was arrested for the tweet.

Out of respect for the moderators of this site, misguided as they may be in wanting this conversation to end, I think we should end this conversation or take it elsewhere.
With 65% of the population under the age of 35[1], India will be a tremendous market over the next 20 yrs. That is the reason why you see Google, Facebook, Amazon all playing a role there, which will only accelerate.

But to activate this market India needs to get its act together on sociopolitical front. And I’m barely optimistic about that.

[1]https://en.m.wikipedia.org/wiki/Demographics_of_India
Unfortunately, for even highly simplified idealised problem spaces of only moderate complexity, the best algorithm would take longer than the life of the universe to find the global maximum. Worse, for most of them, even if I gave you the global maximum solution, it would take you longer than the life of the universe to verify that.

Or, put another way, actually producing something before the heat-death of the universe is, imho, a prerequisite for quality.
What do you mean by "the odds"? It's quite hard to write an application that doesn't cache better than the overhead involved in hitting a database on every request (building SQL queries, waiting on the socket, marshalling the result data...)

The app developer has a tremendous advantage over the database simply because she knows what the data is. Personally I find that it makes a lot of sense to think of in-memory objects and their layout first, then treat the database as a persistence solution. This was not doable in the '90s because of memory constraints, but today the cheapest cloud VM instances have more memory than what you'd get on a high-end box back then.

You asked why this doesn't happen more often in practice -- I guess there is simply a lot of inertia involved. Many popular frameworks like Rails are designed around the broken stateless model and can't be reset easily. There are also large platform vendors who benefit from the low-performance solution: companies like Heroku are very happy to pretend that scaling means buying more crappy stateless server instances from them.
Kids being unsupervised is a good way to get arrested for endangerment in many parts of this country, or at least result in an investigation by authorities such as child protective services. This [0] is the most widely cited recent example, but this idea is widespread and by no means limited to Maryland.

Even when I was growing up 30 years ago in a not-quite-as-urban part of the country, me being alone would occasionally result in a call.

0: https://www.washingtonpost.com/local/education/maryland-coup...
>After the prisoners' sentences were completed, the town celebrated with a circus. The performance included an arrest of its own: A clown dressed as a cop entered the audience, grabbed a surprised Sinclair, and marched him away from the show.

Surely the author meant to write a cop dressed as a clown?
I agree with the sentiment - but it's not the workers nor the union that's responsible for those shitty conditions. Also, when companies in Sweden hire workers from other countries at lower pay, the unions will protest. And try to raise the newly hired non-Swede's wage to the Swedish standard.
Heard of Swift?
The harder it is to fire someone, the more reluctant companies will be to hire people, and the more choosy they'll be.
Donald Trump After Hours
An EeePC 901. I regret not keeping it.
Well the original idea was to get people to walk more, and to learn about their environment.

Pokemon egg hatching took this to a new level.
Seconding the recommendation for the Python Cookbooks (by O'Reilly). I have both the Py 2 and Py 3 versions. I've read the 2 book (multiple authors) pretty much fully (and much of it more than once), except for a few more advanced recipes, or areas that I was not that interested in, and found it really good. Used some of the ideas and techniques in some production code. The chapter in it on iterators and generators is particularly good (some of the stuff in it is by Raymond Hettinger, who also, IIRC, designed and implemented much of the iterator and generator functionality in Python 2). I've only read parts of my copy of 3 so far, but it is good too, though the style is somewhat different. It is more brief (per recipe, though the book overall is as large or larger than 2), and you have to do more work yourself to understand the recipes. The authors explicitly say this.
Illustrator Tips and tricks Add lines inside text by infinetsoft
This is why I introduced LockStrings as a key feature of THT (a language that compiles to PHP). It takes the opposite approach to Perl's taint mode. You mark string literals as safe -- everything else is untrusted.

Functions that do risky things (Database, System calls, etc.) only accept LockStrings and are responsible for escaping, so all you have to do is provide the placeholders.

https://tht.help/tutorials/language-tour#lock-strings
"[...] the universe is more or less a frothing foam of energetic particles [...]"

"Particles" is plural, implying separation. It that, too, a "matter of consciousness"? Sounds a lot like "consciousness" is being used to do a lot of passing of the proverbial buck.
Sorry, I don't know what country you are talking about, but it actually does not matter. I don't think that any restrictions like representation by political parties or geographic districts really make any sense. Modern political parties today are hostages of their own agenda and promises to the sponsors. They rot and smell and loose their power everywhere.
I ended up using mitmproxy as TLS reverse termination proxy with CA cert installed on local machine/phone for local development. It handles TLS connection and forward unecrypted request to your application server. I'm running it in docker container. IMO it's more convenient to not be dependent on external CA like letsencrypt which certificates are only valid for 3 months. The main use case is developing PWA with features that require https like navigator.getUserMedia()...
Just unsubscribe from marketing emails. I receive zero marketing emails from Amazon, and I'm a prime member that orders fairly frequently. I do receive AWS product announcements, but I want those.
This is the ideal architectural choice for web application architecture. It allows for multithreading and multiprocessing in your web application without the need to reason about state across threads and processes in the web application. This is why developing CRUD apps are so easy, the database abstracts all the race condition problems that could potentially occur away from you so you don't have to think about it.
Sometimes direct votes do make sense, but it's 1% of all decisions. They should exist, of course, but they won't scale to large and diverse countries like USA or China or India. They will not work even in countries like Spain or Ukraine.
Well that was odd. Tried to read page two on my Android Oreo device, had "virus" like alerts springing up. Sorry, this is off topic, but I think there's reason to suspect that web page.
> high-end restaurants don't have their own delivery infrastructure

The New York City analog is Caviar. High-end restaurants love them because they pay real chefs to help design the interior of their delivery trucks and train their delivery people. They also develop special packaging for every restaurants menu. For example, ramen comes with the broth separated from certain toppings separated from the food, the broth in a relatively thermally sealed container and the noodles allowed to sweat (to keep from getting soggy).
Show HN: Free Risk API for spam detection
Richard Branson: Dyslexia and Exams
In the red corner, a rag tag bunch of scientists trying to get people to make choices in their own self interest.

In the blue corner Google, Facebook, Coke, Mars, every advertising agency, marketing guru, financial advisor, corrupt politician and dependable scientist with questionable funding.

Well good luck red corner.
Interesting thanks for the link!

I’m curious how many tests were in the small size range for that chart which provides evidence to show the size-flakiness correlation holds in tests that use tools associated with higher than average flakiness...

I’m also feeling like I want to have more clarity around the mechanism for measuring flakiness — the definition they use is that a test is flakey if it shows both failing and success runs with the “same code” — does “same code” refer to a freeze of only the codebase under test or also a statement about change to the tools in the testing environment ...?

I wonder what the test suites for tools like selenium/WebDriver look like ... do they track a concept of “meta-flakiness” to try and observe changes to test flakiness results caused by changes to the test tooling ...?
On a similar note, the Student Cluster Competition at SC'17 makes use of a reproducibility challenge, where teams are expected to reproduce the results of a selected paper [0]. This year it's the Vectorization of the Tersoff Multi-body Potential [1]. Overall, teams are expected to read the paper, figure out what the claims are, try to reproduce the results on a cluster your team built, and then analyze the final results.

As a student participating in this challenge, I can say that the challenge has been a really fun and illuminating experience. It's given me the chance to deep dive into some computer architecture (vectorization, intrinsics, etc), and also get some basic exposure in molecular body simulations.

> An unexpected outcome of this project is an increased role of students in the networking research community.

This is in line with my experiences, as well. One challenge we faced was that the specific paper experimented exclusively on Intel clusters, whereas we were running a Power machine. Since they hosted their optimizations on Github, we were able to create issues when we had challenges porting to our machine (which we quickly resolved).

All in, a really fun experience. I think this "reproducing canonical papers" would be a fun and hands on way to learn about a new field.

That said, I do question the feasibility of this as a pedagogical approach. We were able to "luck" out because (1) the paper's author, Markus, had to compete to have his paper published, and (2) he was very helpful, (porting the code to Power, answering followup questions, etc.) In a sense, this was "easy" mode. However, there are a number of cases where it's simply building a paper's code is nontrivial. For example, a few researchers at Arizona tried to simply obtain and build the code of 613 papers from ASPLOS’12, CCS’12, OOPSLA’12, OSDI’12, PLDI’12, SIGMOD’12, SOSP’11, VLDB’12, TACO’9, TISSEC’15, TOCS’30, TODS’37, TOPLAS’34 [2]. Of these 613 papers, they had a ~25% success rate, where success means they were able to build and get a basic run.

[0]http://www.studentclustercompetition.us/2017/applications.ht...

[1]https://dl.acm.org/citation.cfm?id=3014914

[2]http://reproducibility.cs.arizona.edu/tr.pdf
An Unapologetic Plea for Your Help Funding More Personal Essays
> It’s the Google Payment API. After replacing Google Checkout with Google Wallet, and then replacing that Android Pay, the docs have the audacity to call it “The newest way to pay with Google.”

> The Google Payment API only works in Chrome on Android

Why does Google even bother making this?
We experienced our first successful attack at my startup a few weeks ago.

What got us wasn't anything on the top ten list. I'm pretty sure it isn't covered anywhere in OWASP to my knowledge.

Users reuse passwords across different websites. An attacker tried a database of usernames/passwords sourced from elsewhere; a small percentage (about 1000 out of more than 10M requests) succeeded. 100 of those had something to steal. Attacker used a botnet, so our IP-based fail-to-ban logic was ineffective.

We thought about lots of ways to deal with this moving forward. My boss (CEO) didn't want to implement any kind of 2 factor authentication, because it's cumbersome and will lower conversion rates. We took a different strategy which is kind of complicated to explain, but it's not nearly as secure.

Anyway. What gets me is like: Password authentication SUCKS. It's a terrible terrible authentication strategy. It's awful. It should not be relied upon. It would be good if humans didn't reuse passwords. But we do. So it sucks.
> We had strict union regulations

Can you clarify what this means?

In my experience it means paying for more audio, video, and venue staff because the existing folks have been on duty all day but the conference organizers don’t want to pay or can’t afford to pay for a) more people or b) overtime

I’ve done a bit of mix engineering and conference organizers are very myopic: why can’t I be as excited about their stuff as they are? They don’t think about what happens when this is your day job and if you don’t bring the hammer down you’ll end up working unpaid overtime every day of every week because every conference thinks they are the hottest most exciting shit since sliced bread.

One can assume Google is able to pay more but made the perfectly reasonable business decision not to. The mystery for me is why you’re blaming it on the union?

Perhaps the venue completely prohibits longer days but every rate sheet I’ve ever seen simply quotes higher prices if you exceed a “normal” conference day length.

(I’m genuinely curious here but also being slightly sensitive: there are certainly abusive unions - Philly conference centers come to mind where you have to pay master electricians to carry tables and chairs into the venue - but it is far more common for people to be cheap-asses & blame the unions)
Meet “Luca”, the ancestor of all living things
Not all vulnerabilities stem from ignorance, although this seems to be the default assumption of the infosec community.

Writing secure code takes more time than writing insecure code. Time is expensive. In every organization I've worked, security has been neglected pretty explicitly. It's not a case of "OK this looks secure", but instead more like "I am aware that our codebase has some security issues but I need to prioritize rushing out this new feature/improving our CPA".

And this is not always the wrong choice. For most organizations, the probability of having someone who is both malicious and competent enough to exploit an XSS vuln visit your site is pretty small. The chance that you'll go under if you don't get that new feature out or improve your CPA is pretty high.

If you want to criticise the state of security (and there is definite room for criticism), I think there is a need for tools and education to allow people to better make these decisions. We need ways to communicate

a) how likely it is that we'll be attacked?

b) what would the consequences be?

For now, when these questions are asked, the answers are almost always "pretty small" and "uh, possibly like really bad, depending on the attacker"

We need ways to translate these into numbers that we can compare with profit margins, etc. This is way more important than actually learning how to mitigate SQLi.
> proc identity*[T](x: T): T =

Personally, I still have symbol-overload PTSD from my Perl 4 days. When I see a flurry of that many symbols crunched together, followed by a dev saying "what's weird about them", I stay far far away from that language. Could just be me.
Unless you're a static content site that is using TLS just to be an Internet Good Citizen to prevent passive traffic analysis, you absolutely should have HSTS enabled; it's not really a judgement call. Without HSTS, you almost might as well not do TLS at all; HSTS prevents a serious, effective, and easy attack.

By way of comparison, it has never been a good idea to default to HPKP. Privacy-sensitive sites should be pinned, and if you can't safely manage pinning, that's a pretty good sign that you're not mature enough to engineer privacy for the site either, so I don't have that much sympathy for the argument that it's a foot cannon (this is, of course, very easy for me to say). But if you're just selling coffee beans or scheduling laundry pickups, PKP has always been a very bad idea for you.
Dmitry Olshansky has written an experimental extension to the D compiler to cache the results of CTFE (compile time function evaluation) between compiles. CTFE started out as just a more capable constant folder, but has evolved into a way to run arbitrarily complex programs at compile time. It's used to generate regex machines and grammar parsers, for example. These can slow down compilation significantly, so the idea with the cache is to remember previous results to avoid recomputation.
I drove 'wglb to our Matasano reunion (which is amazing) yesterday night and he pointed out to me that UChicago has a seriously excellent theoretical computer science department; it's just not as competitive a applied science program.
This is why worker protection laws are so dumb. You just can't force other people to give other people money, they'll always find a way not to. Worst case they'll just practically never hire people in your country. So those people are desperate to get into another country without those worker protections, e.g. US or UK or NZ, so they can get a job and make some money. This is happening in France, Italy, Spain, etc.
Use Mender to Provide Over-The-air Software Updates for Embedded Linux Devices
To each country their own model. This works for us. Probably helps to be one of the largest economies in the world. You get to make your own rules at that scale.
OpenFermion: Open-Source Chemistry Package for Quantum Computers
On a couple of specific points--

It'd make no technical sense to try and expose a low level hardware-oriented API designed for multi-threading to a slow single-threaded language like JavaScript.

Web Assembly will be mature soon, and on the timescales we’re speculating about it could well have some form of threading.

Let there be vendor specific and proprietary stuff in web apps.

Unfortunately that would be a security nightmare. The Flash and Java plugins are good examples.
Pandas Cheat Sheet
One or two cups of coffee a day before lunch. I've tried quitting caffeine. No effect. Could try again, that experiment was many years ago.
I'm afraid you didn't quite catch that. The article says "both short sleepers and long sleepers are more likely to have a range of diseases", and that's also how I read that elsewhere. There is no claim that long sleep was a cause of disease. The opposite seems, to me at least, more likely.
Deckset is awesome. Markdown is easy to write and Deckset can export to PDF. It’s my choice nowadays
> I'd rather Amazon show advertisers' influence transparently with the obvious "Sponsored" label.

This is basically how Google works too, right? Do people distrust them for the same reason?
I knew about Freehope, which is another single-tax community. But not this one.
What's the insight here? How they handle the accounting of it?
I agree, I think ruby strikes the perfect balance between symbols and words, and I think that spirit has been kept alive in crystal despite it's syntax extensions. I truly enjoy crystal's "visual weight" (apart from proc syntax, thats just ugly).
Small noises will wake me up instantly, I have to have a fan or white noise filling the room to sleep soundly. Also if you haven't already try to make your room pitch black, tape any leds on electronics and get blackout curtains.
Lots of reasonably decent sites seem to participate in ad networks that apparently allow malicious ads that hijack browsers... It's not clear to me why this is still an unsolved problem after so many years... :-/