skysight-inc/HackerNews huggingface dataset:
As you can see leaking through in a few of the examples, the scenarios where it matters are the ones where non-experts are reading to and writing from the database. If a data entry clerk is just typing values into a form thinly wrapping an INSERT, you'd better make sure any input that would break implicit assumptions is rejected. If you have a legion of Bobs from marketing who "know some SQL", you can't hand-optimize every single query they try to run.

When the database is just serving a webapp you control end to end, the only part that'll really have a huge impact is making sure you can partition by the primary key effectively. Which is good, because complex indexing schemes and foreign key constraints actually scale very badly.
What I learned in 2017
List of products based on FreeBSD
Thought exercise. You're on the Fortune 500. Your goal is to be on the top of that list. So you decide you want to spend $1B to build a single venture to create something with stereo typical VC return expectations: >100x.

IOW, you're looking at potential trillion dollar markets. Not too many of those! Taking on Amazon may be one of the most accessible, IMO. Start by dominating a region that Amazon has trouble in, like the Arab world.

But like any startup execution and team is more valuable than idea...
Two people in my class at high school had the exact same first and last names, and they were not common names like "Matthew Smith".

The thing that upsets me here is the idea that dropping the constraint later on is easy. It's only easy if you are a software engineer!
>I have been thinking about why we have ended up here, and why not just native apps.

In my opinion its because operating-system design wasn't sexy after browser-companies came and ate the OS-guys lunches with all that big bubble fuss. So the OS guys went all apathetic and forgot that a majority of their OS is a freakin' browser, and .. here we are. Inception.

Its great we can compile C++ to 'native' assemblies now. We've always been able to do this, btw. The only difference is the delivery mechanism ..
Rehab Giant Under Attack
A look into the state of mailing list opt-in incentives (freebies, e-books, etc)
Yeah. Generalizing, naturally, but "exposure therapy" is an approach of getting people past phobias and trauma that involves lots of small steps in controlled environments, and it's not recommended in all cases or for all conditions.

I think it's also a bit simplistic when we frame avoidance solely as a product of being unwilling to face pain. In some cases (certain forms of PTSD), substance abuse is used to numb because you've exceeded your local tolerance for the pain you've been facing, or because the only thing you've been experiencing/facing is pain and its exhausted your coping mechanisms. Learning at mid-life that you're no longer the person you knew, while also dealing with the traumatic source, compounds the process of processing the events.

Particularly when getting into how life altering traumas work, coping and accepting are processes that require different treatments/approaches at different times.
They are willing to pay up to what the work is worth for them.

The work is not worth more just because you happen to live in the bay area.
> we've pretty much come full circle?

If want to play old classic games like Heroes3, AoE2, Diablo 2 on Windows you have to install it using WINE.
Why not offer a digital edition as subscription?
Janitors, receptionists nor cooks get such high salaries, altrough the place is the same.
Lessons and Experiences of a DIY Smart Home [pdf]
> The answer is that browsers provide something that users desperately need and no operating system has ever provided: a sandbox strong enough to run completely untrusted code. The success of browsers is an indictment of the entire field of operating systems research. They have either failed to recognize the need or simply failed to deliver that kind of security.

The JVM more-or-less managed it. Modern hypervisors do it - you could use something like Qubes and run completely untrusted code in its own isolated VM. It's not that academics weren't working on this stuff, adoption is where it fell down.
It goes like this -- as you are waiting for webpack to rebuild your modules, you gaze into the crystal blue water, see someone getting a massage for five bucks, and realize that you're the only one without a beer. Webpack finally finishes up, but you don't notice, and for good reason. Nothing else gets done the whole day.
Just up the beach from my $6/night bungalow in Thailand there was a resort that costs $1,500/night. The work I'd do from there would be functionally equivalent from my employers' perspective.

So as long as we're covering expenses, I'd prefer they cover mine at that second place. The fact that I might actually be living cheaper is none of their concern.
They are to some extent but my point is that a doctor from NYC or Austin TX is more likely to think like someone from SV than a programmer from Boise or Bangor.

The SV way of thinking is present to some extent in most urban people of similiar socioeconomic class. A plumber from SF will not necessarily take the same things for granted that a programmer from SF will.
I’m not aware of any previous model where Tesla has offered a full price preorder. Certainly they haven’t done so for the X, 3, or semi.

I don’t understand how “This is not what Tesla has ever done” could mean anything other than that they were wrong.
The page you link says that they drink more often, not necessarily more.

I imagine rich people use alcohol to spice up other entertainment and poor people more often entertain themselves with alcohol only.
I thought 12 was a really young age to start making games, but then I realized I made games like this too at 12. Both code and art.

A lot of my game making friends from that group became millionaire game developers by 30.

I didn't really accomplish much besides cutting my teeth doing project management, debugging, learning the horrors of waterfall.

I would love to see the new generation continue this.
I would at least fix that bucket rather than endlessly discussing hypothetical fixes and get nothing done. Perhaps I would gain some insights on how to fix the rest, too.

A one-size-fits-all solution might very well not exist.
You get used to it with enough time. I spent 3.5 years working in Burkina Faso and after the first year or so it didn’t bother me at all.

The occasionally annoying thing was that I, as a foreigner, was always expected to be on time, even when no one else was. I recall once, late in my time there, arriving to a major community meeting about half an hour after the appointed time. People who were already there complained about it while we waited, a good two more hours, for the local officials to arrive so we could start the meeting. As soon as they rolled in we got the meeting started and no one said a thing about their arrival time, hah.
* descriptive, long passphrases, that I usually have no trouble remembering. e.g. Facebook could be "I talk to my friends".

* salt to make stupid password rules happy and to make it somewhat safe to write down passwords. e.g. "mysecretsalt42$". This gets appended to all passwords and doesn't get written down anywhere.

* encrypted text file, used rarely when I forget a password. e.g. `vim -x socialmedia.txt`. I find this a bit better than Keepass or pass because it's not one obvious attack target (both the file and app).

* optionally, a paper backup
The appeal of patreon for many is the fact they do not have to manage their support/subscriptions at multiple locations, or have to give out their payment info to multiple sites

You sign up for single site and can support 100's of people and get rewards like a digital subscription.

You would be surprised how much more donations can pick up if you eliminate even one form field let alone the entire form. People are lazy, they are even more lazy when they are giving money, the easier you make it the better
> It started to increasingly seem like an arbitrary choice, and if we were going to make one such, why not go for the best and the top?

So you picked San Francisco? Not London, Hong Kong, Tokyo, Singapore, etc? Why not pay everybody as if they live in Manhattan?
Photos seems like a good example of a product that is in such a mess that you should be discussing what a general user should use instead at this point. You even confess in the recent post about Marzipan about what a debacle drag and drop not working for a year in Photos is. But you've never written a piece about "why is Photos in such a mess"? Because it is. Basics of the platform still don't work, more than a year later (export original files and watch it hang, with no progress indicator! Drag and drop between applications is a joke!). Why not turn some light on that, why not discuss alternatives than general users should be looking at instead?
> They then move around a small light

...or wave around a checkerboard pattern of known size to make calibration faster perhaps?
All of these businesses share one common theme.

They are all aggregators.
The Other Half of Science
I member
Because it might as well be a timing or a strategy issue.
All the projects I've most enjoyed working on had clear, explicit test failures, which almost always gave me enough information to hunt down what I'd broken and where. Obviously that's not realistic for some kinds of projects. But even in a legacy C project, if I had to pull out stack traces and profilers and GDB every single time I wanted to understand why a test failed, I would say I'm working in a pretty terrible codebase.
What is the advantage over UUIDs? The author says that the surrogate keys should never be exposed outside of the database anyway, so no problems with data leakage. If an artificial key is to be exposed then it can be obfuscated to prevent information leakage.

I think it should be obvious that it is obfuscated, though, like Youtube video IDs, for example. If you generate integers then your users might assume they are not obfuscated. Eventually a customer will get some low value integer and might assume that they are "customer #5" even if they are not.
You can get some real headaches with auto-incrementing integers if you have to go to a multi-master or some other distributed system for data inserts.

How do you know which integer to insert next for a table that is replicated across systems? One system could do even numbers and one could do odd. One could do every other 100 integers. Or you could use UUIDs and not worry about it.

My argument is that auto-incrementing integers are inherently not scalable. They can scale to a certain extent, and then you have to switch key systems.
No, the attack is simply a timing side-channel infoleak attack made possible by the TLB speeding up page fault handling to locate kernel structures mapped into the process' address space.

As far as I know PCID hidden entries in the TLB result in the same page fault as non-existent entries, so the page fault handling becomes constant timed.
Airlines are pushing for more premium classes and less economy seats. 853 is all cattle class. The configuration of the A380 I flew with (LH/BA) has lots of cabin space reserved for Premium Economy, Business and First. I believe it’ll only grow more pronounced as the established carriers are fending off low cost airlines.
How short should life expectancy be to consider 12 years as "forever"? 35? As in, you grow up and got 12-ish years to live?

By the way, Kenya's life expectancy is over 60, varies from source to source. One could argue that this is life expectancy for people born today and older generations have it much shorter. But it was over 50 since late 60s! I'm pretty sure 20-something expecting to live to 50 or 60 do not consider 12 years as "forever". Nor do 40-something who expects to beat the statistics.

https://www.theguardian.com/global-development/datablog/2013...
The Return of the City State
Just from looking at a 200 member club I'm part of, I can see at least two name collisions in our current club roster. So absolutely agree with your assessment.
> Do we really want for-profit corporations working to create demand for heroin and meth

There already are for-profit corporations creating demand for heroin and meth. They are just exempt from taxes and product liability laws.

The second one is the really important issue. Having drugs illegal is what shields the producers and distributors from product liability law suits. Without that there would be no billion dollar business in this shit.
The only caveat I’ve found so far is that a number of browsers and especially corporate proxies do not support the certificates and SSL protocols used by CloudFlare

Which browsers and which proxies?
How Ticket Touting Hurts the Music Industry – The Blogging Musician
Could some middle-ground device exist where the lens is still manufactured for this use-case but still lower cost overall as the system has a high tolerance for quality/defects by implementing the calibration step?
When you listen to your doctor, or your lawyer, you become vulnerable to manipulation. You are indeed rolling the die, like a high roller of Vegas.
Thanks for the clarification! And yes, I agree as well that privacy does have a price. However, with transactions growing tremendously with the increased popularity and speculation of crypto-assets, there will be a point where enough is enough. I hope that a further iteration for greater efficiency will be found in the future.
The cat population can be simply and easily controlled with the introduction of some eagles...
Having some random thoughts about the comments here, some of which talk about having a "browser" drive large parts of what we consider today an "operating system". I agree that certain aspects of what most modern operating systems do today can be abstracted away behind a unified, convenient (and perhaps browser-accessible) API. The entire user-experience stack comes to mind immediately, but there are counter examples as-well. The answer to non-unified execution environments (as in different operating systems and architectures) was the rise of high-level, interpreted languages (in addition to corresponding VMs), and runtime environments which exposed a platform-independent set of APIs. We've been exploring the possibilities of implementing bytecode VMs in hardware (https://en.wikipedia.org/wiki/Java_processor), or running a managed code operating system (Microsoft's Midori) for a while now, so the concept itself isn't particularly new. What is WASM's advantage over, say, Java's bytecode? Did we really have to go through so many hoops (reinvent another instruction set and a VM that can execute it across multiple platforms)? Why wasn't an existing technology re-used here to achieve the same/similar goals?
Building a really fast website from scratch
Yeah it reminds me a lot of the HyperCard games me and my friends would make as kids.

What tools are kids using these days to make point-and-click style games like this?
Ready Player One Is the Worst Thing Nerd Culture Ever Produced [video]
there will be strong link between hiring experience and the kind/quality of people they hire (your potential future coworkers), so that's one reason not to talk to asshat recruiters.
Is the reality that your home-grown solution is genuinely going to be more secure than one of those current password managers? I doubt it.

However, I agree that for some people existing password managers seem either too complicated (KeePass) or expensive (1Password). In that case, I recommend:

1. Generate a password randomly using a 'diceware' type methodology

2. Use a standard prefix in front of all your passwords.

3. Write the password without the prefix in a notebook that you carry everywhere.

It's still not as good as 1Password because the passwords are not encrypted. But it's better than using a predictable algorithm that you have to remember. And of course, it's better than the system this often replaces - using the same 8 character password everywhere.

But I still strongly recommend paying for 1Password. How much do you pay for a padlock for your bike, or a burglar alarm for your house?
> None of these things were new, more inbox space and better spam protection were available for real email services. But the point of every other free email service at the time, including Hotmail post acquisition, was to upsell you their paid service.

Hotmail and the like required a US address and credit card for their premium service, though.

They weren't options where I was. And nor is it the norm anymore.
Something like that needs to be built into Github or a similar site. Along with fork and download, 'compile to web' should be an option.

Keeping code alive would also make long-term archiving of obsolete software viable, more so than just putting the code online, anyway. This is important because so much of our culture has been expressed by and tied up in software.
> I have a GPS beacon that sends a distress signal to a satellite which then may a cause a plane to get in the air.

I've been wondering, are there any such satellite-based distress-signaling tools that only charge you for the service if you actually use it? I imagine most people would gladly pay through the nose for actual emergency services, but would otherwise not desire to make a single cent in monthly payments for a service they don't use...
I wonder if this was designed for an Apple product? Maybe a new iMac or Mac mini?
As an add-on, a lot of characters can be represented in different ways. For instance there is the character ä and then a with 2 horizontal dots. For the "usual" cases a normalization solves this though.
It's the 4 engines which gives airlines A380/747 fuel cost problems. Both fulfil relatively niche markets and are gradually being displaced by the more-efficient and flexible twin-engine A350/787 types. We're just starting to see the secondary market for A380s now which is a good indicator for its long term commercial viability.
ooo Berlin, my amazing city. wannabe startup people, German mentality of taking any risk, cheap labor and hipster. Also, is not cheap anymore :)
But what a joke. Compare:

https://www.noon.com/en-sa/search?q=i7-7700hq

https://www.amazon.com/s/ref=nb_sb_noss?field-keywords=i7-77...
SF pay rates are usually cited as the highest in the world. It’s shorthand for “we aren’t going to use locality as a way of getting outbid”
Agree... in this case, you'll have lots of janitors apply to the job, and no surgeon.

The market does regulate these things normally, if there's no coercion. That's why socialist countries are oppressive, to enforce a vision that goes against the will of some individuals, to the benefit of other individuals.

You can't have freedom if you refute freedom of choice.
As someone who worked in Manhattan and San Francisco and currently lives in Japan, San Francisco wages for tech workers are definitely the highest and most competitive that I've seen. You can argue that the cost of living offsets the higher wages, but that's not what Basecamp or its employees need to deal with.
If someone's gone through the same experience of building a website from scratch, please do share notes.
What do you mean by "more regulated"? If you are trying to imply that criminal sentencing for marijuana possession is more severe than for methamphetamine, that simply is not true.
Only works if you clean their cookies first
There is no animal good model for Alzheimers.

You raise a very good point which is almost all the animal models we have are terrible models for human disease that is supposedly being studied.

Cancer models of cancer are just as bad. Interestingly the only good model of human cancer are spontaneous cancers in human pet dogs [1]. Of course we hardly use this models despite most dog owners being willing to volunteer their pets for study.

1. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3130881/
I might be lost, but are you talking about about year-over-year real estate tax or "death tax" as in inheritance tax? My comments are based on later.

> That's a different scenario; but, again, there's a straightforward tax answer to it: treat such vehicle use the same way as it is treated with personal use of a company vehicle using the Annual Lease Value rule; the other mechanisms wouldn't apply.

Good luck trying to figure out who is the actual user of a house or a car. What if family shares the vehicle? Tax parents whenever their kid drives?

Let alone that this would, again, much more affect middle class than the uber rich.

> Replacing the estate tax by taxing inheritances as income to the recipients would not reduce the scope of funds taxed both when originally received by the first owner and then again when transferred as inheritance; on the contrary, it would increase it and make it more consistent with the progressive income tax system, with the tax rate when inherited based on the total income of the heir, not the size of the estate.

So you split inheritance on small bits before death to fly under radar. Or split inheritance to different people. Possibly consolidating it back later on. Or do the trust fund trick...
I use GitHub Pages with a custom domain to publish a static blog. I post about once a month and my audience is small. Would someone please explain why I should worry about HTTP vs. HTTPS?
so does the concept of the 'browser is the OS' , improve security? Is it analogous to a hypervisor running on a server somewhere, then when you log into the server, it spins up a vm os just for you. Now any hacking done on that os is isolated and disappears when that instance is closed. in the same way, when the browser is the os, none of the files,apps or stuff on your machine is available to it?
He's probably exaggerating, but I can see the allure of remote work. You may be working on a laptop in a cheap room in a hot country, but when 5PM comes, you'll be a few steps away from the surf.

And depending on the client's timezone, you could start work later during the day...
Dude, you broke the future
The concept of "Public Domain" sounds absolutely bonkers to me. You own something and then suddenly you no longer own it. It would be like if you woke up one day to see a family of squatters living in your house, that you can't get rid of, because the person who built your house died 70 years ago and your house is now "Public Domain".

We should just get rid of the public domain exception and recognise intellectual property as normal everyday property, not something that can magically becomes ownerless one day. Communism has been tried and it doesn't work. Let's not repeat the mistakes of the past.

On the other hand, I do hear the plight of preservationists &c. There should be a lot more rights granted to people to use copies of other people's property. For starters, all non-commercial use should be allowed, so that old movies could be digitised and stored in better formats. After all, the studio doesn't own the tape or the DVD that contains the movie, it owns the movie itself and the type of media it's stored on shouldn't matter. This probably would also mean that noncommercial free peer-to-peer filesharing would also be legal, but honestly, if you can't compete with torrent sites, which blast thirty porn popups and show you a dozen false download links, your business probably deserves to die.
Hello. For now Keybee it is not optimized for smartphones in landscape mode.
I've never really had a problem with opiods. I've gotten prescriptions for oxycodone a number of times. The only time I had any problem was when I broke my hand in 2 places, and they gave me a 2 months supply (filled twice, not all at once) of 10mg. I had some of the standard opiod side effects, but no withdrawal or addictive behavior.

I actually just had a prescription this year for a car accident, and did not find myself compulsively taking them or anything like that. On the other hand, I don't find they help me as much as others seem to be helped by them in terms of pain killing properties.

I wonder why this is?