skysight-inc/HackerNews huggingface dataset:
My exact point is that in these cases it seems like the employer in question announced that they believed the accuser before looking into both sides and the evidence. How do you think this does not illustrate that?

How is one supposed to come back from your employer making these kind of statements while you are being investigated?

## Edit: @joshuamorton Can't reply to your comment below so doing it here.

Honest question: We have three threads here where we engage in discourse, and I want to ask you a question from my experience of it. If you have already made up your mind and are not willing to engage with any evidence that shows that you might be wrong, why do you engage in discourse at all?

I see this pattern all over social media and to me it just seems like identity grand standing and a declaration that you believe in the dogma of that identity. Neither helps facilitate a productive discourse.
The Rise of the State Machines
Think of the work necessary to prevent that screen from ever being used to display a nasty video signal from –– gasp! –– another computer. It's just such an insult to customers.

They just didn't bother adding the circuitry for "video in", due to cost; there is no active opposition here.

For many years now, you can buy "LVDS converter" boards[1] which will let you use any display panel as a monitor. I'm sure demand will mean such boards appear for the iMac Pro displays soon, if the existing ones aren't already compatible. I haven't looked too closely at this but the display might even be eDP or similar, which means only a physical converter is necessary if you want to connect a DP output to it. That's been done with iPad displays before[2]

[1] http://www.ebay.com/bhp/lvds-hdmi

[2] https://hackaday.com/2013/04/22/connect-a-retina-display-to-...
Yeah, I'd agree that pubsub _is_ a form of indirection in and of itself.

For comparison:

state.counter += 1;

vs

store.dispatch({type : "INCREMENT_COUNTER"});

// counter slice reducer
case "INCREMENT_COUNTER" : return state + 1;

That's indirection, because we're no longer going in and modifying the state right there. So yes, any function call that encapsulates or abstracts behavior would be a small form of indirection, and the act of describing the event or desired update as an action rather than directly implementing it is definitely a form of indirection.
Moonlight Sonata Visualized (2012) [video]
I understood this to be a technical limitation of Thunderbolt 2: it can't push enough data fast enough to drive the 5k displays. One would have hoped that Thunderbolt 3 was sufficient.

This is the key thing that's keeping me on my 2012 (!) iMac. I was really looking forward to the Pro until I heard this.
Ads are pollution. Information pollution.
Can it be? Probably. Should it be? Hell no, lobbying is bad enough with humans doing it, let alone algorithms.

Hopefully no Silicon Valley startups think this is the next multi billion dollar industry to 'disrupt'.
Binance Exchange suspended registration-  KuCoin Exchange is an alternative
Why can't it be financed from the returns on the YC portfolio?
I wish they would have left the Xeon and Pro GPU components to the new Mac Pro instead of putting them in this. It would’ve been nice just to have top of the line consumer grade hardware available in a Mac instead.

That and the amount of time they’re taking on this modular one is just nuts. All people want is a simple tower. They could just bring the damn cheese grater back.
> Anyways, a nice feature of Swift in this context is that Swift can directly access C APIs w/o any "wrapping".

Well, you have to write a modulemap, but I see what you mean.
> 1. As a developer I can not know with certainty that a package I publish will remain published under its current name.

You can as long as your package name isn't trademarked or likely to confuse users installing the package.

> 2. As a consumer of packages I can not trust that a library I am using won't get changed to a different piece of code due to someone else thinking they deserve the name better.

I'm actually fairly sure npm won't blindly hand over a package that is depended upon, to another entity. When they handed over 'kik' it wasn't in the same league as 'left-pad' which was widely depended upon.

> What you say is also a problem. The fact that they claimed to have solved the unpublishing problem when they apparently hadn't is pretty huge

I agree it sucks, but the fact is they 'prevented unpublishing' to bug-fix one vector for this problem, but then introduced a bug in process that appears very similar to unpublishing. If you've never had this sort of thing happen to you as a software dev, (had some stakeholder question 'but I thought you'd fixed X') you're very very lucky.

> as is the fact that the flaw exists to begin with.

Easy to criticise in hindsight. At the time of left-pad, several other package registries (e.g. PyPI) also allowed unpublishing.
I understand your logic about the house but I don't see why it is an apt analogy. It would help to explain what kinds of problems you are imagining for the house and what they could correspond to in the food web, both at the lower and upper levels.
What do you think if event discovery tools like drop!in (http://www.idrop.in) would this solve your problem with events?
A different approach I wrote in rust

https://github.com/posix4e/rpgffi

With some example consumers:
https://github.com/durch/google-bigtable-postgres-fdw
https://github.com/posix4e/jsoncdc
It's not the indirect jumps that concern me but all the conditional branches, such as loop conditions.
This question is important: what are the alternatives to npm? Surely someone has something out there with code signing and single-use package names for node/JS?
>A couple more clicks after that, and we’re looking at a summarized version of a bill tackling cybersecurity that the software has considered and rendered a judgment on, when it comes to the probability that it will become law. We’re not talking a rough estimate. There’s a decimal: 78.1 percent.

No way in hell is it producing probabilities calibrated to 3 significant digits. If some kind of testing of calibration produces proof it's even within 1 percent calibrated I will be shocked.
Sure, but those same speculative execution attacks also trivially defeat ASLR. And practically speaking, memory safety in formally proved software tends to be pretty bullet proof.

So, outside of memory unsafety, is there another threat profile where ASLR gains you something?
It’s the headquarters of the FCC.
It wasn't so much a leak as someone putting two and two together and the cat getting out of the bag.

Anyway, this is a nonsense argument in the context of the thread. They tried to keep things quiet by limiting the size of the circle, among other things. Their attempts at secrecy did not entirely succeed, although they made it 90% of the way to the embargo date without things coming out. Their inability to make it 100% of the way does not inform us at all about whether they should indeed have limited the circle of those who knew.
Is this what is missing to get something like Gmail search working at the same level as web search?
Committing your `node_modules` is a bad idea. The best answer is to either use an offline cache of package tarballs that have been committed to your repo, or an NPM caching proxy.

Yarn has an "offline mirror" feature built in, and Shrinkpack is a tool that can create an offline mirror based on an npm-shrinkwrap.json file.

I wrote about using Yarn's offline mirror here: http://blog.isquaredsoftware.com/2017/07/practical-redux-par...
I’ve always wanted to see a search engine thar takes the top SEO tips and penalizes sites that use them.

For example searching for how to grow a garden. I never want to see howtogrowagarden.com. I’d prefer to find more genuine l, non seo juiced advice.
SIP SoftSwitch CCNQ4: Call Processing Using Middleware
> How is the military being crippled? What non-civilian military programs need more funding and why?

Speaking generally: Readiness is very low; large amounts of equipment is out of service do to lack of parts, and training is severely cut back, meaning the personnel are not ready to perform their jobs - a major issue when they may die and national security may be harmed; AFAIK training is what has long given the U.S. military its edge. There are not enough personnel, forcing the current ones to work exceptionally long and hard, which is also affecting morale. One recent example are the collisions of navy ships in the Pacific; basic navigation and seamanship training was cut for the officers, they were constantly deployed and exhausted, and they worked 100+ hour weeks. Here's a recent article I saw from a respected defense publication:

https://breakingdefense.com/2018/01/2018-forecast-can-the-na...

Also, the military cannot afford weapons programs it needs to compete with 'near-peer' threats such as China and Russia. Generals/Admirals and Secretaries of Defense, for multiple administrations, have been warning Congress for years that they are unable to fulfill their missions with current funding.

That's all off the top of my head; there certainly are more problems I'm not thinking of. Also, I don't understand what you mean by "non-civilian" programs.

If you want to keep up on these issues, I'd try these publications; budget is only one issue they cover, but they cover it well and seriously, without much political spin:

https://www.defenseone.com/

https://breakingdefense.com/

https://www.defensenews.com/
I would have liked to read about how their technology works. I imagine they're not building their own index using their own crawlers.
I agree as well. The guy published his kik package well before Kik was even a company. There was no reason for the npm team to resolve the situation they way they did. If someone already owns your Twitter ID or Facebook page name, well they're closed private services. Same if someone buy's your domain name (see the case of Nissan).

You don't have a right to a name on every service on the planet just because you trademark it somehow.
> (some) programmers who do a lot of local compilation for whatever reason

How else do you run/test the code you're working on?
> What we do know, however, is that while girls and women do meet the diagnosis for

>autism spectrum disorder, the ratio between men and women sits somewhere between 5:1 to

>3:1. We also know that men and women’s interests diverge in ways that are congruent with

>Baron-Cohen’s systematising- empathising spectrum. Women overwhelmingly prefer working

>with people, and have “artistic” and “social” vocational interests, and men

>overwhelmingly prefer working with things and have “investigative,” “enterprising,”

>“realistic,” and “conventional,” interests.

I feel, after having worked with kids (boys and girls) with Asperger's, that we as a society have historically missed (or dismissed) the signs of Asperger's in girls, and have done them a disservice in life by not helping them with those challenges. This book opened my eyes to some of the specific problems that girls (particularly young ones) face:

https://www.amazon.com/Aspergirls-Empowering-Females-Asperge...

I realize that only recently have we begun treating boys who are on the spectrum, and I'm happy about that, but we need to do better with girls and young women as well.
It can take a while (years) to transfer one's social life out of Facebook, but I think it's worth the effort of doing it in small steps.
Oh, that has to be it! So it's just a reference I didn't understand.
Why Europe’s wars of religion put 40,000 ‘witches’ to a terrible death
I’m pretty sure npm is shipped as Javascript source by node.js
Podcast Jake Higgins: Head of Growth at Forward Partners
What we can learn from 50 films set in a single location
Could you elaborate what you mean by tighter? Isn't this the whole point MCM designs?
This quote sums up, for the most part, how the system is gamed; "People tend to react more to inputs that land low on the brainstem". Maybe parents and schools should teach kids more about how not to respond in such a fashion.
Kik is mostly popular outside the west, it is pretty popular in South East Asia.
Yeah, I can also absolutely tell the difference and have a hard time using any non-retina monitor now.
Does AppleCare for Enterprise what you're looking for?

https://www.apple.com/support/enterprise/
I was discussing one of the major topics of the post. Quoted directly from the article:

> He said that society increasingly sees groups instead of individuals, to the extent that group rights may supersede individual rights in all sorts of contexts, including politicised work environments. Because contemporary moral codes delineate women as vulnerable or marginalised, we stop seeing them as individuals with unique talents and idiosyncrasies, but as representatives of a victimised class. The reverse is true of men. Because women are now a victimised class, men are increasingly seen as victimisers, irrespective of their individual attributes or actions.

If you don't like discussions on this topic, then perhaps you should stop allowing such topics on this site.
Lol, i have been thinking about implementing this for the ordering logic in my own shop platform ( handling, opening, refunding, partial delivery, paid, ...).

But this article also describes how the data handling is processed, which seems to be totally different from what i was thinking about
Way late on this reply, but it was in chrome. I found that an immediate back button would often work, but if the page you were navigating to was overly large or you clicked into another link or two and then went all the way back it would lose place.
You're kidding, right? After they ditched ruby and wrote finagle, they've been super reliable. They've got one of the biggest Apache Mesos clusters in the world (second only to Apple's Siri backend per Apple employees who presented at MesosCon) and run it all with Apache Aurora, a really nice mesos framework for long running jobs.

Twitter, Soundcloud, Salesforce, Pinterest, FitBit, Tumblr, Box, Foursquare... What do they all have in common? They all run finagle in production. For java, it is about as battletested and as good as you'll get unless you want to write your own. Personally, I'm more of a golang and python developer, but respect where it is due. Twitter is massively more scalable than the overwhelmingly majority of the sites on the internet and they've gotten their act together since abandoning Ruby and the fail whale.
Very disheartening to see that NPM has not grown from the kik or left-pad incidents. Users should not be able to republish on top of old package names without some kind of intervention.

Of course, NPM's response to the kik/left-pad problem was also pretty awful. Make it so users can't delete packages. Cool. For those of you using NPM's private offerings, this also applies to you, so hope you don't care about cleaning up your private NPM registry content.

Getting pretty tired of this. Their open source operation seems to suffer from poor handling of community and technical issues, at least from a high level. Their private registry operation is very lean on features, and also suffers from very confusing limitations. I'm surprised at how long it took there to be read-only API keys. Until last year, you literally had to give your CI keys that could publish to your organization if you wanted access to private packages. And you had to pay for an extra user for the privilege of doing it wrong. It's fixed now but it still blows my mind that it took so long. Aside from faster installation, it's actually a lot better to just use private Git URLs instead of NPM's private offerings.

NPM will never properly take the fall. They will take just enough blame to seem responsible and then shift the majority of the poor decision making onto other actors in the community in their explanations. Third time in recent memory.
How do you rest your hands in the tiny space above the keyboard?
I noticed this a few times when having a massive number of open tabs around (500+). In these cases one process of firefox consumed 100 % CPU and another 40-60 %; restarting Firefox removed the excessive CPU consumption and the spinners as well.
> Sales of the Touch Bar MBPs surpassed the sales

It would be fair to mention, that if you wanted the not-the-weakest-CPU or more than 2 USB ports, you had to get the touch bar version.
Wouldn't those concerns be resolved by being open source? Could run the new automated system in parallel for some years first, like a second umpire in sports.
(1) Pinterest
Those two are different on very relevant aspects, though.

Practically no one supports sexual assault. We abhor it, that's why the legal punishment for rape is so severe, why many lynchings of black men were about rape accusations, etc. Sexual assault has thrived in some places - like parts of Hollywood - despite that, not because of it.

Equality for black people was completely different from that: 100 years ago, very few people believed black people were equal or could be equal. It's only recently that the majority position sees things that way, and there are still notable minorities who disagree.

And that's why "changing hearts" isn't the issue here. You already have the hearts of the public, which sees rape as evil. What MeToo achieved was to show that that thing we all hate exists in more places than we thought.

To make this concrete: Weinstein had enough influence in Hollywood and the media to quash stories about his crimes. But once enough women spoke up, the public became aware, and quickly hated Weinstein. The problem was awareness, and the victims fixed that.
Many SEO tips, like using H1 tags, make the site more usable IMO. I imagine removing the top million leaves you with some pretty ugly sites.

I’d like to remove just the top 10K or 100K.
tl;dr: pretty interesting reading material found crammed into cannon recovered from Blackbeard's ship. Conclusion: pirates were sophisticated readers.

Probably used wadding for the cannon? So no, not what they were reading; what they had pirated from other ships and their passengers, and had torn up and stuffed into cannon to hold the powder and ball in place while they aimed. In other words, what they regarded so little as to use as filler/trash.
Calling for a new approach to depression
It's not a "breach" technically. No malicious person caused the packages to be removed by circumventing authentication/authorization systems. It is a security issue though. A bug and serious security issue, yes, but not technically a breach.
> For wide-spread issues

Frequently because they're forced to, by the threat of litigation and/or a smackdown from consumer-protection organisations. There's too often a window where Apple won't acknowledge there's an issue but your warranty's expired so eh...maybe they'll make an exception for you? Or maybe not.

I'm looking for something a bit more systematic. On an iMac Pro that starts at a shade under £5000, it wouldn't hurt them to make the default warranty 3 years and offer an extension to 5 (I mean, who's throwing away these machines after 3 years, never mind one?).
> Already, clients are signing on to the idea: Toyota and the National Institutes of Health, to name a couple.

Toyota I can understand & accept, but is it appropriate for a branch of the executive to hire lobbyists to lobby the legislature? Just feels a bit unseemly to me.

> Quorum says its system also powers one well-known late-night comedy show—it won’t reveal which one—helping staffers scan YouTube to pull together almost instantly a selection of footage about topics they might use on that night’s show. Says Wirth, “They’re like, ‘What kinds of Roy Moore clips do we have?’” The software has already machine-read heaps of video footage, turning them into tagged transcripts, and sends off exactly the correct clip to that evening’s show. Millions of Americans, without knowing it, are getting their political news curated for them in part by a Quorum bot.

Sounds a bit like Last Week Tonight.

In the cases of lobbying & clip-selection alike, what I worry about is how we'll groom the higher-level people without running them through their lower-level paces (since the lower levels will all be automated). What I mean is that a lower-level job has at least two purposes: one is to perform a job, and the other is to audition for the next higher job. The former is what AI excels at. It's really, really easy to automate the job of an 18-year-old who answers phones and hands them to the next person. It's not so easy to automate the job of a 24-year-old who answers phones and hands them to the right person. It's really, really difficult to automate the job of a 36-year-old who answers phones and decides whether the topic is important enough to hand to his boss. It's really supremely difficult to automate the job of a 48-year-old who answers phones and makes decisions.

The problem is that every 18-year-old answering phones isn't just answering phones; he's also auditioning to be that 24-year-old finding the right person (experience he gets from the job itself). Likewise, every experienced 24-year=old is auditioning for the job of the very experience 36-year-old. And all those 36-year-olds are auditioning for the few slots as decision-making 48-year-olds.

We can really easily automate those lower levels away. But what will be our 'farm team'? Where will we grow the talent and depth of experience necessary for the higher levels?
>> 1. As a developer I can not know with certainty that a package I publish will remain published under its current name.

> You can as long as your package name isn't trademarked or likely to confuse users installing the package.

Trademarked where exactly? You know, there's quite a lot of world beside US.

> I'm actually fairly sure npm won't blindly hand over a package that is depended upon, to another entity.

What makes you trust them in this matter? They haven't displayed such
behaviour, and their behaviour up until now slightly suggests the opposite.
Here is a better article that gives away how the clues were matched to the book, the book being the same one that inspired Robinson Crusoe:

https://www.livescience.com/61351-blackbeard-pirate-book-fra...

We are somewhat naive about how people understood the world in former times. People have been trading goods across continents for thousands of years. Much like how we have no idea where are stuff from China comes from in any detail, so it was in former times when buying spices from Africa or India. You might buy pepper corns and have no idea they came from Africa.

Much of what we call piracy was the unofficial British Royal Navy, trading stuff all around the world. Britain was highly invested in everything maritime and sailors were the astronauts of the day. They did difficult navigational things with sextants, compass things and much more, all requiring manuals and therefore requiring literacy. Plus reading was fun in an era before TV. So why do we portray pirates from times gone by as speaking funny with parrots on their shoulders and a peg-leg?
I left an Ethereum related project precisely because of the house of cards feel of it being built off JS and npm modules. They're a great example of how a project can be exploited by a malicious module which could proceed to extract all the tokens.

If my hat is black, I'm writing a daemon which monitors relevant npm modules and uploads subtlely modified versions if and when the possibility to do so occurs again. Particularly, but not only, targeting crypto currencies.
In terms of the features on offer (on-site repair, SLA) sure. On pricing...

> Contact Apple, an Apple Authorized Reseller, or an Authorized Carrier Partner to receive a quote for AppleCare for Enterprise.

Not so much. I guess what I'm really expecting is that for a workstation-class machine this is the rule rather than the exception.