skysight-inc/HackerNews huggingface dataset:
This clearly implicates that Facebook has, almost without reserve, the ability to read messages from user to user (even though it might limited to messages to oneself), and exposes that ability to its employees.

You can view and search your message history on Facebook, so there is not really any question that they have and can read all messages. I never explicitly checked it but at least I never noticed any gaps, i.e. missing messages because I sent them using the Messenger app.

I believe to remember that Messenger is supposed to use Axolotl Ratchet for end-to-end encryption but that is hard to reconcile with the availability of your message history on facebook.com. So maybe it's - quote - end-to-end - unquote - between the phone and the server?

I never really thought about that. Or is it just not available or disabled in my Windows Phone version of the app?
When you were 10 or 11 then what you THOUGHT?
> A secondary reason we do not follow the "open source" idea is that, frankly, over the many years we have used open-source projects, we have been struck by the simple fact that a great many of those projects are maintained only to the extent the author decides to do so

I'm sure this company will be maintained only to the extent the company can stay alive.
Show HN: I Made a Massively Multiplayer Board Game to Test Django Channels
http://codewords.io/

I've been trying to get permission to run a game of it from the publisher and designer (CGE & Vlaada Chvátil) but I haven't heard back. I've found demonstrating that there's interest in what you're doing is the best way to get ahold of people. So..

Anyone interested in trying a massive game of Codenames over Twitch? Not quite "For Science!" more "For Engineering!" Which, let's be honest here, has a much better ring to it.

If you'd like to know more, I put up an FAQ up here: http://codewords.io/faq/

If you'd like to sign up to help, there's a form over there: http://codewords.io/

Screenshots and a game play overview can be found somewhere under this: https://imgur.com/a/3xtZC
We have an encryption scheme where all user data has its own unique user based key. So compromising 1 user key only lets you have access to that user data and that key has access to nothing else. Your statement is correct when you said that automated systems which need access to all data will inevitably lead to mass decryption and compromise. In the system described above, there is no way for an automated system (or anything) to have access to all keys and therefor no system or person can access all data.
Digital camera sensors can actually be used to detect gamma particles. There's a legitimate app you can use on some android phones that can act as a relatively accurate cheap radiation detector. It requires you to tape over your camera lens with a piece of electrical tape and then to calibrate your phone in an area with only normal background radiation.

The app is https://play.google.com/store/apps/details?id=com.rdklein.ra....
To be clear I prefer generics. The cases for why other Go developers don't want generics seem to mostly fall on "it will change the language / encourage people to write stupidly complex code" to "it's too hard to implement". The first one is valid--Go's constraints give it this nice property that there is (more or less) one obvious way to write most programs, and that will go away with generics; however, I think that cost is worth the gain. The other criticism seems like a cop-out; the Go team has far and away more than enough talent to slap generics onto the language.
To be fair, you don't really need to declare your constants elsewhere. This is just a pattern people stuck with, because they're stubborn about constants, I think. Doing a find/replace is so incredibly easy that it's kind of silly to add a bunch more boilerplate to protect against one DRY quip.
AMD SSG supports up to quad-SSD built right on the graphics card, presumably to improve bandwidth.
Hear hear on anti-design! It is avoidance of design. Designing well is hard. Easy escape route: metrics!

By the time you ship a design with these metrics, much like usability testing, it is too late. You have just spent a bunch of time building and QAing something to a shippable state, only to find out some major usability issue. But the team thought they were almost done.

No single user is another great point. Complex software has multiple personas (types of users) using it. They have different needs and sometimes they are not served well. This HEART score needs to be at least segmented by persona to start being useful.
Do you really want a ritual to summon sex crazed beings? You may want to be a little more specific there.

Djinns are the BOFH of the magic world.
Thank you for bringing sense into the discussion. I don't know how many times I've been asked "but will our data be encrypted on your server, in case someone hacks it?" and I need to explain this basic concept to otherwise intelligent people. It's like demanding that the driver's side door in a car must have a child lock installed.
“Official story” according to whom?

I agree with your sentiment, but think the headline could simply omit the phrase “corruption probe” without losing any information.
> Wow, I wonder where people are getting the idea that they need to learn Redux

Because everyone with a React job or substantial React project uses Redux (or a similar library). It is common for junior devs to rush through learning libraries in hopes of being employable or a "real developer" as soon as possible.
Certainly, and that's the way to do it. My point is, you end up converging on learning Redux. You really do learn Redux no matter what, so it's kind of a myth that you "don't need to learn Redux."

Theoretically, you can get by without learning it. In practice, the moment you try to build a real company, you need it. That necessitates learning Redux.

I think this is an uncomfortable thought because it implies that Vue is way easier for devs to get into, and that's step one to displacing React+Redux. But that seems like an uncomfortable truth.

Whoever is in charge of React needs to give Vue the Snapchat treatment. Take them seriously as competitors. There's still time.
If you are in this position, you may be able to take secretly actions:

- create tools to help fight what you deem contrary to things that are important to you

- dispatch leaks in subtitle ways so that humanity is not left in the dark

- lead anonymous and discrete community of people sharing your believes, your skills and passion to improve things

Be careful. And best of luck.
ShipBob is Hiring a Senior Digital Marketer
ShipBob is changing the game for e-commerce fulfillment. With a modern tech stack and a network of fulfillment centers, ShipBob is on track for rapid growth.

We are looking for a passionate, flexible, and creative digital marketer that can work on various growth marketing projects. This person will join the marketing team to lead high-impact projects designed to create leads.

You'll use a data-driven approach to conceptualize, test and analyze potential new experiments to determine their viability and potential impact on the growth of ShipBob. You’ll need to have an understanding of marketing, programming knowledge, and analytical know-how.

This is a fast-moving environment. We need someone who:
•	Lives by lead generation, pipeline, and closed revenue
•	Enjoys seeing the immediate impact of their work.
•	Has a drive for solving big challenges and exceeding lofty goals
•	Embraces analytics and has a data-driven mindset
•	Has a passion for cutting edge innovation and discovering innovative lead gen solutions
•	Is a team-player with positive attitude
•	Loves researching, implementing, communicating, and analyzing growth experiments
We need you to have the following skills:
•	Marketing professional with 5-7 years of demand generation experience in a high-growth environment
•	Engineering experience is a plus
•	Understanding across marketing channels including website, social, programmatic, search and email
•	Experience designing experiments such as A/B tests or multivariate tests with proven track record of success
•	Deep understanding of marketing metrics and tracking as well as data analysis through Excel (Pivot Tables)
•	Experience with a variety of tools like Zapier, Segment, Autopilot, Optimizely, AdWords, Adroll, Facebook Ads, and Salesforce with the ability to evaluate new tools and bring them into the marketing/sales mix.
•	A history of delivering results for a SaaS company
•	Strong project management, execution, and communication skills
•	Ability to identify a failed experiment quickly and pivot strategy
•	Experience with Content Management Systems
•	Demonstrable experience with SEO and SEM
•	Experience building custom reports to showcase results of SEO/SEM
•	Solid knowledge of web analytics tools like Google Analytics
•	Familiarity with web design and HTML/CSS
•	Bachelor’s degree or equivalent experience

To apply : email dhruv@shipbob.com with your resume!
Absolute shame and I cannot wait until TY dies its inevitable lonely death.
I've literally never heard of a tech company not offering deferred compensation (either stock options or RSUs).
Why would you want a supervision tree?

This would suggest using an actor-like model, which is pretty senseless for single-machine usage. It's totally understandable for Erlang, where the VM spans multiple machines, so everything is unreliable, but in Go, I take it for granted, that my goroutines won't "just crash".

I'm not sure, but I think this also ends up being good for modelling interactions with good performance, as you know where you do network calls, where you have reliability, and where you have instant local calls. Though not to say that Erlang applications aren't blazingly fast too.
Hey ng12, author here. I totally agree with you. I am the biggest proponents of keeping things simple. I initially was hesitant to introduce Vuex. I've written a few huge apps in Vue without anything else but Vue. The cool thing is you can, of course, continue to do that. But again, you just have to follow some strict patterns. Or, to make it simpler, you can get some help from Vuex and let it help you follow those strict patterns. Either way, one is best off if they follow a strict pattern. If not self guided, then library guided. Especially on a big team you can reduce the stress of that strictness if everyone uses Vuex. With so much code flying through GitLab, Vuex is the answer, for quicker code reviews.
I have the same questions, but to my surprise, there are more software engineer/senior software engineer jobs in bay area than data scientist/machine learning engineer, according to LinkedIN. This is the scenario now ! No idea hows its going to be in 3-5 years from now !!
Centuries ago this was how oral histories were learned, repetition by the speaker and the listener.

Oral tradition must provide some survival benefits to be supported by instinct and genetics. My guess is today people only talk about oral history WRT obscure history or religion whereas when it was current technology, oral history was probably used mostly to store hunting and gathering data.
There will clearly be fewer driving opportunities if a minimum wage is instituted. There's an economic cost to be paid for price floors. They invariably increase the amount of supply left unutilized. If they didn't you could increase aggregate-demand/GDP simply by raising the minimum wage.
when i read "a language for X" I think "ok...no"
"Let me level set by saying I went to a bootcamp and have two years experience. I make 165k...(cash, bonus, and public stock equity)."

I lived and worked in SF for nearly a decade until this year. I operated a company for a good portion of that time. I know what the market rates are.

Personal anecdotes doesn't mean much when the aggregate numbers disagree with you. Maybe you're special. Maybe you're lucky. You're probably underestimating what you'd make elsewhere. But I'll say this: if you're truly getting a significant fraction of your salary in liquid RSUs, you are at a public company, and are quite likely being paid above market.

If you are counting illiquid RSUs, you are doing funny math.
I would strongly disagree that it is ok to use jQuery with Vue. I mean sure, it's ok in that most of the time it isn't going to hurt or break anything, at least if you are just using it to query elements from the DOM.

However, I would argue that is not ok in that it should never be necessary and it's use would be a code smell to me and indicate that the code in question is likely not using Vue properly.

I suspect it would be more valuable in the long term to ask people to take more time and learn to use Vue instead of jQuery to solve the problem at hand.

Edit: I should note that Gitlab came to the same conclusion and I misread their comments on it as accepting the argument that it would be ok for querying the DOM. What the article says:

> At first I had several discussions about using jQuery with Vue. Some had said it might be OK, but only in read-only (querying) situations. However, after doing the research, we found that it is not a good idea to use jQuery with Vue. There will always be a better solution. We found that if you ever find yourself needing to query to DOM within a Vue architecture, then you are doing something wrong.

This I completely agree with.
Yeah, they want to go advertiser friendly and are being ridiculous about it.
It is called PhotoDNA and was developed by Microsoft. This is the same tech that is used to find child porn images even when people go to various lengths to prevent simple hashing from being able to determine photo similarity. It works surprisingly well at the task from what I have seen/heard.
A lot of people are saying here that your career won't be doomed, and I think they make decent points. However, to play devil's advocate, I would like to argue that your career is in fact doomed if you don't learn AI/ML.

A lot of folks like to smugly predict the future based on their individual experience during past technology cycles. The advancements coming out from AI, however, are completely different than anything humans have seen before. It is entirely possible with deep learning that entire sectors of tech could be automated away. Maybe front end development doesn't get fully automated, but perhaps we build tech that makes a single developer 10-100x more productive? Then the labor demand for front end developers could drop in the same way that bank teller jobs have dropped due to ATMs and online banking. I would argue that while software is eating the world, AI is going to eat software.

Don't discount AI. Learn as much as you can about it and perhaps your career will be the last one to be automated away...
Here's a question from the other side of this conversation. What about companies who don't have established salary ranges?
So, has the data been actually leaked, or do you still have to pony up a load of BTC to see this?
It's not that infeasible to have a web platform that encrypts users messages, just each client gets an encryption key. Look at Telegram, or even FB Messenger end to end encryption. I'm not saying they ever said they didn't have the ability to do it, I'm saying it's weird that they would use "message snooping" as a form of user photo submission.
It's "Alternative Minimum Tax", not "Alternative Maximum Tax".
The fads are cyclical too. This isn't the first go around for AI, the last time AI was hot was the 80's, then there was the famous AI 'winter'. It's important to recognize hype for what it easy. Like the thread on meteor.js the other day. After the hype subsided, a lot of people realized they didn't really need what meteor.js provided.
But they have already solved the engineering problems (at least 10 years ago).

They already have "qbits".

The interface issues look to be 98% solved.

And the temperature cooling, the EM shielding, and everything else (that is outside the circuitry design and the physical chipset), a person with a budget of 80,000 USD can recreated in his garage.

Its the results I can't understand.

Why can't X qbits, in the time they stay coherent, produce results that agree with the mathematical analysis of the setup? Why is it always off by a factor so large that its not even productive for any task.

My understanding of it is not complete, this is why I ask. Is the interface issue only 2% solved (and not 98%), etc.?
It doesn't matter if it's visible or invisible. The point is, it cannot go undetected while being used:

- If it were to periodically "check in" with an external server to see if it needs to do any kind of spying -- admins would notice the network traffic.

- If it needed to be contacted externally to "initiate" any kind of spying at all, that would mean anyone behind a NAT would be safe, and furthermore, the the moment anybody notices such a thing, it would make the headlines and get blocked on networks, so this capability would need to be kept secret and turned off except for ultra-high-value targets... which most people do not view themselves as.
HOW? This guy is basically a 1950's white-picket fence gentleman. I think we are seeing a concerted effort to attack major YT channels into leaving YT.
Go devs who want generics are obviously a minority.

Those who care about generics enough probably just avoid Go and use another language.
Fun fact: You can use a dry erase marker to erase the writing of a permanent marker. Assuming a smooth surface, scribble the dry erase marker over the permanent mark and erase.
Presumably whiz-bang space-age cryptostuff, homomorphic encryption and differential privacy et. al.. Things that'd be spectacular if you found them in a startup two years from now, much less in an enterprise that hasn't done any core tech upgrades since 2005.
Yeah. Rather than your typical urgent care facility, this was the hospital's initial effort to significantly expand its effective service area. It was a quite substantial building -- since expanded to the size of some hospitals -- and they had labeled what I used an "emergency room". My family suggested going there as it was a lot closer.

That ER doctor just gave me the prescriptions and sent me off. No follow-up care. I guess you'd have had to see my level of discomfort. My family was equally surprised and disappointed.

I take your point. And much of the U.S. health care system keeps pushing patients towards urgent care and "the doctor at hand". Not that there aren't good urgent care staff; nonetheless, it doesn't exactly promote medical management.

Also, I've delayed some care because I've been uncertain of the approach and awaited more information and perhaps improved procedures and techniques. This might well be called a conservative approach -- and these days, so much of the U.S. rhetoric is about the need to be "conservative". Well, much of that is actually "Conservative", which is actually a rather different ideology.

Yet, insurance keeps worsening by the year. Patients who might otherwise be inclined to be conservative and await better knowledge as well as what would normally be lower costs (in most other industries, "product" costs decline with age and with technical improvements and growing marketshare). Well, in U.S. health care, patients can feel compelled to "act now", because while technology and standards of care may improve, next year's insurance may well not cover it or cover it enough for it to be affordable ($5000 deductible? $7500?), if one even has insurance next year.
There's a lot of articles on this, the belief is that children crave predictability so they re-watch movies to the point that they can predict everything that will happen.

https://parenting.blogs.nytimes.com/2009/11/12/kids-and-movi...
"Testing is still a third-class citizen" The exact reason meteor is disqualified for me. Even the basic manual is broken and wrong in some ways. Internet searches point to frameworks which are broken or obselete and to the meteor testing site (If I recall correctly even docs point to it) which has a notification for a long time about being "rewritten" and no actual content (and would be a paid book .. :( )
If testing is a third class citizen then No real professional software development can take place with it. A real deal breaker
Hash by strictest definition is just a function that maps any input to fixed size output. There is a special subcategory of hashes that are locality sensitive and change a little when input changes a little, just like there is a special subcategory of crypto hashes. See: https://en.wikipedia.org/wiki/Locality-sensitive_hashing

Technology for searching for similar images (I have no idea how it works interally) already exists and is very widely deployed. You can easily find an image similar (uncropped, cropped, with different filter, greyed, ungreyed, with a logo in corner, etc.) to your input image on https://tineye.com/ and https://images.google.com .
Tesla Model 3 had 'poor overall initial quality,' says analyst
> Fused Video Stabilization on the Pixel 2 and Pixel 2 XL

Aside from gatekeeping, what does any of this have to do with the Pixel 2? Why is the headline not "Fused video stabilization for any Android device with a camera"?

I mean, Microsoft published inertial image deblurring using entirely unintegrated devices in 2010 (https://www.microsoft.com/en-us/research/publication/image-d...), though I swear I remember seeing a poster from them earlier than that.

(Also, I can honestly say that I've never seen a video recorded on a phone that had motion blur or shutter wobble anywhere near as bad as what they show in their examples, so those examples seem contrived, but obviously it's great to have an algorithm that can handle exceptionally bad cases.)
I was taught manuscript print first and then cursive. I went through grade school in the 90's so keyboards and computers where not common. We did not have a keyboarding class until 6th grade. As far as handwriting went, I had very sloppy handwriting. If I really focused, I could make my handwriting legible but it caused me wrist pain from over gripping my pencil. Later in life I realized that a thicker pencil was the solution.

Now days I write almost exclusively in cursive. Through school I found that cursive characters were easier to differentiate from numbers in math (a five and lowercase "s" look very similar when I write them, for example). After that I just stayed in the habit of writing in cursive. I don't believe it is superior or inferior, it is just what I like.
Smartcoral's user interface is also pretty similar, though, and that shows up in Quantum Thief proper. :)
That's fair. It is something of an indication that "Yep. This is final." It's a bit silly in the case of a check that you have mailed but it's not a completely unreasonable practice in general.
I'm a really big fan of the Ducks pattern where your action types are private to each reducer unless they're explicitly exported as an API. In my own code I don't even do that, instead exporting a function which operates on the state.

https://github.com/erikras/ducks-modular-redux
computer hardware, seems, especially compared to like the eighties to the nineties, stagnant. we won't see much in hardware to care about until a computer hardware revolution ie. quantum processors

this is a "super summary" of obvious shit that is WAY too little understood by, fucking anyone
No? I don't follow. Did you reply to the wrong comment?
Wow. I don't have enough upvotes! Thanks! That's awesome!
> How about an official statement from Facebook itself over a year ago

That also doesn't count as proof; it carries barely more weight than the Facebook exec's statement.

However, you're quite right about the decompiling argument. And chances are that security researchers have done just that.
Yes. Even in handwriting there are more forms than just D’Nealian or Palmer cursive. Why not Spencerian, Fraktur, or Carolingian?