skysight-inc/HackerNews huggingface dataset:
> In continental Europe, nobody expects it to work like that. ... To someone who grew up in that culture, your wild-west thinking seems a bit, well, primitive? Or uncivilized?

One should challenge that setup by asking the question: has contintental Europe's policies resulted in high wages?

France has far lower wages than the US, with 1/4 to 1/5 the wage growth rate of the US over the last two decades. Germany, Britain, Spain, Portugal, Greece, Italy, Austria, Belgium, all have considerably lower wages than the US.

Continental Europe also includes dozens of nations that are dramatically poorer than the US, both in terms of median income and median household net worth.

Wouldn't it be more primitive or uncivilized to be using the French approach, since it has resulted in dramatically lower wage growth for decades now? Wage growth in France averaged 0.5% annually the prior two decades. In the US, 2.5% wage growth is considered very slow, with 3.5% to 4% being average in the 1999-2009 time frame. If their system works so well, where's the wage growth (and we're talking about the last 20 years, not a blip of time)?
Parent's downvotes are undeserved as they are spot on.

Users don't want federation in a sense that they don't _care_ if it's federated or not. Not that they actively decide against it.

They only care if they can start chatting with people from their address book right after installing a chat app.
That's a cool idea. It would be neat to have some way of sending that to the githubber builtin to the tool. Maybe send an email to the githubber if they have an email published or maybe just post it to a gist that then you can send them the link to?
In general I think that people with very specific perspectives and points of view on a narrow category don't care for general review sites. I never liked Consumer Reports for high-end camera reviews. But I've generally found Wirecutter to do a good job and they provide enough rationale for their choices to help me decide if they're making their decisions using the same criteria that I would.

Review sites mostly have various conflicts of interest but the best ones seem to manage them reasonably.
Yeah yeah, I’m excited too. But it figures this is being done by Amazon- for years they’ve been out to condition us to like having all our needs met by an inhuman yet weirdly friendly technological regime.

Good odds the Minds all sound remarkably like Alexa. :)
Insane Kid Pranks Entire World with Monk Costume
>I don't doubt that white sugar is damaging to arteries and effects the microstructure of arterial walls, but I'm skeptical that there's a statistically significant difference between white and brown sugar for cardiovascular health. Can you cite any studies that break out white vs. brown sugar?

I have no studies to cite right now, my son just did a research paper for school on the effects of white processed sugar though. He may have something, but I feel this would require more effort than just googling this.

The source I got from this was a doctor at the Mayo Clinic, who treated my friend. I would consider this a reputable source. (but hard to properly reference)

Modern brown sugar is just white sugar with molasses added back to it. I have no sources for this though, just info I've run into, and my experiences with real brown sugar (looks nothing like the stuff in the store). Look up Sucanat, a brand of unprocessed sugar, it still has the molasses in it, but it's dry. :P

Edit: This article from Mayo Clinic seems to saying the connection between refined sugar and heart disease is unclear, the message I got from my friend (through doctor at Mayo) was that it was not unclear.

https://www.mayoclinic.org/healthy-lifestyle/nutrition-and-h...

Also, another friend (don't talk to her as much so I forgot this one) is that refined sugars cause inflammation in arteries. I can't recall if she had gone to Mayo as well, but that was from her doctor as well.
If courses were less expensive, they could afford to be less practical. Maybe this wouldn't quiet the hiring managers, but it's easier to tell someone to screw off when what you're selling isn't a huge investment which has been built up to be vitally important to justify that pricetag.
Indie vs. Real Slug Fest (2015)
Because we unfortunately often see competing political viewpoints on what should be a major win for most, and so things don't always get the political funding they deserve.
> If you use a password manager with all the benefits this entails (long, random passwords, each only used for a single site), the only benefit 2FA really gives you is if your password manager is compromised somehow.

I don't think this is true. Your long, random password can still be compromised, for example if ever type it on an insecure device (a friend's computer? public or shared computer? etc). 2FA keeps that single compromised password from being useful.

It is undeniably true that storing 2FA secrets in the same vault as your passwords reduces security. However, it's still way, way better than not using 2FA at all.
I have a password that’s a pair of words in two languages with some number substitution that I use a lot on websites I don’t care about and it’s not in the dB. And I’m sure I’ve used it on sites that have been hacked, so I dunno.
Ask HN: How to improve your BATNA whilst unemployed?
Hi, I'm a NEET with several years of software development experience. I usually do not have another job lined up when I lose my current one, so I've been taking one mediocre job offer after another to make ends meet.

While I'm seeking work, I want to know what I can do in the meantime to improve my BATNA (best alternative to a negotiated agreement) when I am not in a strong bargaining position to get a good job offer. Outside of the usual errands, improving my resume and sending out job applications, I spend my spare time self-studying to keep my programming skills fresh.
This cloud computing service runs Windows on Mac and Overwatch on smartphones
I know you can't search username+.*@gmail.com addresses on have I been pwned, but it would be pretty useful if we could.
I got 4,882 times. You're searching * * * * * * * right?
Are you suggesting the au pair you hired has a voice in your decisions on how you raise your children?
Am I over simplifying things in the article to say

"At some point you cannot transparently support multiple target platforms"

we are all used to different builds for intel, ARM, 32/64 etc. why should we be surprised to see Azure and AWS as fundamentally incompatible.

I mean I know i was horrified when I grepped my nose dependancies to find 900+ packages, but i was pleased to
find i had a clear version number on each of them. (Yes I am hand-waving what the depenancy manager resolves which is I guess the point of this post in some
manner, but the post here seemed to be saying when you have incompatible requirements you are stuffed. And yes, that's true. So don't have transitive errors - this is only a problem for package maintainers not for developers, and so i suspect is a package aggregation problem?
This is consumer app mentality.

Enterprise apps are expert systems, they are not designed for the masses. Your goal is not to surprise and delight, your goal is to help people get shit done and go home. That means data needs to be organized tightly and densely, forms often have a lot of inputs, tables often have a lot of columns and tons of rows. A simple separator line between rows and columns, and perhaps alternating background colors for even and odd rows is all you need. Think something that looks more like an Excel spreadsheet, and not some social network with documents.

If a new feature is needed, it needs to plug straight into the existing design wherever there is space. There is no time to think about a redesign, and changing a layout may just confuse an employee who got used to the previous one.
> There was a claim it couldn't go into 2.7 because it was an API change (even though it was backwards compatible)

But it was not backwards compatible. "It works in 2.7" does not mean it works
in 2.7.8, but if you try using 2.7.7 it falls apart.
Composite Pattern in Python
Can confirm that Los Angeles has wonderful supply of engineers and low demand for them. I would rather fight it out here and try my luck than move to Austin/Denver/Detroit though.
Here's my way of explaining to managers why software developers need to be left undisturbed.

Software developers on average write only about ten lines a day. The reason the process is so slow is that for each new line of code, you are trying to accomplish a task, and their are a great many different specific ways to do it.

However, you can't pick just any way of doing it. That's because any line of code will impact on dozens of different things in the program, and generally in bad ways. So you have to figure out a line of code that will accomplish the specific thing you are trying to do, but without having any bad consequences for the rest of the program.

This is a complicated puzzle, and to solve it you have to have the whole program, or at least a lot of it, in your mind all at once.

But few if any programmers are smart enough to keep it all in their mind all the time, so for each new line of code they have to sit and think about the program, look up lots of specifics about it, and then get it all organized in their minds. That takes a whole lot of focused attention. Any interruption causes all this to disappear from the programer's mind, and they have to start all over again.

Now I am not a programmer myself, so I may not have this all right. Maybe someone could improve it. Also, it would be helpful to have an analogy for something similar the manager does.
American Kids
Scholars can often make their work free via pre-print. The issue is that the published version isn't free, and the pre-print is hard to find and often not as nice looking.

I made a github repo of my last paper published in an Elsevier journal. This was cool because I could put the latex and simulation code for others to copy.
https://github.com/lewis500/distribution-of-trip-lengths

The final version differs a little bit because they had a copy-editor go through and make some good improvements, even after the referees made their comments. Interestingly, the journal was fine with my linking to the repo within the text of the paper, as a way to share the code.

There is nothing like real open access though. This journal has wonderful typesetting and such and is totally free: https://www.jtlu.org/index.php/jtlu/article/view/835/860

It's funny what tricks they use to justify their existence. Always emailing me about bizarre author features no one will use. Makes me sad to think of the engineers sitting in a big room year-on-year polishing features no one will use.
Programming has much more in common with literature than what engineers typically realize. (Not to mention its relation with philosophy, with classes being a pure Aristotelian system of universals).

Even for programs that are meant to be written and compiled once and never maintained, the programmer needs to build in their mind the whole story of the required computation, and put it in words for the compiler to transform it to low-level instructions. The clearer the programming language, the easier will be to reason about that story.
Maybe you should be comparing effective tax rates and not statutory rates.

> "Comparisons of corporate tax rates should focus on the measures that reflect what companies actually pay, not the top statutory rate. Proponents of slashing the corporate tax rate often note the U.S. statutory tax rate is the highest among developed countries. But many U.S. companies use an array of targeted tax breaks and loopholes to significantly lower the taxes they pay. These include tax subsidies for certain types of investments (such as in research and development) and for particular industries (such as oil and gas).

The Joint Committee on Taxation estimates that in 2016, while the corporate income tax raised $300 billion in revenues, targeted subsidies delivered to companies through the corporate tax code cost about $270 billion. As a result of these subsidies and other tax avoidance measures, many large U.S. companies pay very low rates. For example, Pfizer paid a rate of about 7.5 percent on its $12 billion in worldwide pre-tax income in 2014. Studies generally also find that U.S. companies’ tax rates vary widely by industry and type of investment."

https://www.cbpp.org/research/federal-tax/actual-us-corporat...
I'm building a web app that needs video streaming but ultimately serves to provide high-quality image extraction from the videos. I've procrastinated solving the video delivery part and so your service intrigues me. While we have your team on the line, I have some questions :):

- Is this a crazy use of your service?

- If I request the full-size thumbnail will it be a lossless image from the original video?

- Your front-page says "With Mux Video request a single thumbnail with a simple request or an entire storyboard to use in your player to scrub preview images." but the docs don't mention anything about storyboards. Is it not done yet? Or is the implication here that I can just make several separate requests to the thumbnail API to build a storyboard scrubber?

- One of your pages says "Note that there is a default limit of 30 thumbnails per asset. If you need more, contact Mux." but the thumbnail API doc doesn't mention this limit. Is that actually a limit?

- The thumbnail API doc says the timecode param is a float. Does this mean that if I calculate the timecode based on the framerate I can get high-precision, frame-by-frame stepping in my video player? Any chance you'll offer a version of the thumbnail API that takes the frame instead to make frame-stepping easier to build?

- Can I send you a hard-drive full of videos to ingest into your system?

- Is a signed playback_policy the only way to secure the video from public viewing, and if so, when will this be implemented (doc currently says "signed: (coming soon) ...")

- Your pricing seems extremely reasonable but I'll be looking to cut corners at least initially. If I require fewer output formats (e.g. I don't need to support mobile devices, only desktop browsers), can I get a cheaper storage rate? I'll ultimately have high storage needs (starting with 31,860 minutes of video and then eventually getting closer to 100-200K) but low streaming demand.
Commit to growing with your co-founder as you both evolve
Strange notion of inherent virtue...
I mean it isn't like any of these makers are sharing their tax returns or anything, but for example eat_the_food is the designer and manufacturer behind "Nightcaps" [0]. He ran an event called "Poisoned summer" where he had 80 days of "micro batch" sales, where each sale was for somewhere between one and fifteen or so caps, priced between $60-80 each. Most days the sale was only open for about one minute, and in that minute he would have hundreds of entries to randomly draw "winners" from, and then the winners would get to buy the keycaps. I'm pretty sure he hit six figures in sales on those 80 days of sales alone, and those were not his only sales throughout the year. He isn't even making keycaps full-time yet, he still has a day job.

Several other members of the mechanical keyboard community (especially in the artisan keycap subsection of the community) have managed to turn their keyboard hobby into a full-time job and make a pretty decent living out of it.

[0] https://geekhack.org/index.php?topic=79513.0
I'd normally leave something that is already this meta alone with just an upvote, but even though I've often clashed with you on this board, I had to comment to say this is the best advice on handling downvotes I have ever seen posted on HN and I kind of wish it (well, at least the #1, #2, and #4; #3 is probably to specific to the specific circumstances to work as any kind of general guideine) would be attached to the commenting guidelines.
PhD student here.

I think refusing to transfer copyright is a better option in fields that have no open access journals, like my field. While I haven't published in a journal yet, the discussions I had with a few representatives of publishers at a conference suggested that some publishers will accept only a license to print if you ask. One publisher even showed me an example of an article where they did not own the copyright.

Pre-prints are also a good option, but you won't own the changes made in review if you transfer copyright (for a journal that is not open access).
In case you're wondering, FO = Fan Out.
I keep unused but "maybe be useful one day" code in a directory name "museum".
I love that idea! I think you could use the anonymous gist API. Have the tool output to stdout/pbcopy the gist URL that was created upon encrypt and similarly have it accept a gist URL to decrypt. Nothing to send on either side beyond the URL.
They already got 250M USD. Why do they need to get Filecoin to work?

The easiest and least stressful outcome is to drag it along forever while paying themselves giant executive salaries from that stash. As long as there’s some minimal progress, it’s not fraud.
I read in the CFR (Code of Federal Regulations) somewhere that 128-bit AES is under the threshold so can be self-classified (but IANAL!). Anything stronger and the legal constraints seemed to be more than onerous.

Cat is quantum undetermined in my book - maybe someone from Open Whisper Systems, Signal Foundation, or the Freedom of the Press Foundation will share some wisdom.
I lived in San Diego. That was worse than Denver by a lot. I think I got 1 interview at, oh Jitterbug? Went back to Denver, now I am in Austin.
> 2. Walk the fuck away and shut up sometimes.

I struggle with that one. It's very useful sometimes though, agreed. It can be easy to fall into a discussion spiral that just goes negative all the way down, ending in frustration all around.

> 3. I left for 18 months

It's probably a good idea, broadly speaking, to take breaks from communities. If nothing else to just reassess time allocation to sites (whether HN or Reddit or whatever it may be). It surely helps with commenting perspective as well to step away. I too frequently find myself getting into low value political discussions on here, and that's my fault; I suspect it considerably lowers my enjoyment of HN.

I appreciate your reply, it was very thoughtful.
They don't trust F-Droid.
> But it emphatically does not protect against keylogging

1. A keylogger on your password db is useless if it does not also upload the db (at which point you're looking at a targeted attack, and you have far bigger problems than that).

2. Keyloggers are more and more often browser-based. KeepassXC is immune to those.

3. KeepassXC supports 2FA for the database encryption itself. If you're that paranoid, use that. There's always more you can do.

> And so, the responsible advice is to not use it.

No.

Just as you see in the article where Troy has to make the difficult decision not to include a "Do not put your password anywhere not even here" disclaimer, the same holds in my message: I weigh the pros of someone turning 2FA on as far more important than the cons that come with the less-than-ideal security 2FA adds.

Your advice keeps people from turning 2FA on. 2FA is a pain in the ass for most people.

You are one of the lucky few who understands the tradeoffs involved, as you yourself said. So use that knowledge of yours to actually get people to secure their accounts.

My goal isn't to keep Edward Snowden's accounts secure. It's to keep the bored HN user's account secure. The average HN user has medium-to-high technical literacy and low-to-medium security literacy. A lot of people on here reuse passwords, I'm sure. This is what I'm trying to fix, and I won't advise Ed to keep his TOTP seeds in the same database.
The US government doesn't need to break the encryption of the application to monitor it. It can do remote screen grabs.
> Maybe I'm old fashioned but my dedication to my work goes beyond things like test coverage it goes into the details of how I conduct myself talk and dress when I'm the clock.

I agree with you, and I work with people who think similarly. No one is drinking during the day or getting drunk at work even though there is beer in the refrigerator. I was responding directly to the parent comment about seeing people drunk at work. That's completely unacceptable.

> I dont want to drive over a bridge or fly on a plane designed by people who dont take a similar level of seriousness to being on the clock.

I would be much more worried about lack of sleep leading to issues[1] than if someone had an occasional beer at the end of the day.

[1] https://www.huffingtonpost.com/lissette-calveiro/studies-sho...
Not true:
http://www.math.cornell.edu/~oconnor/sia.pdf
https://ncatlab.org/nlab/show/synthetic+differential+geometr...
> - Working backups for text and media.

Yes pretty please! For Android, any kind of media (bulk) backup option would help, for example. (IIRC iOS doesn't even have plain text backup). This is affecting a lot of everyday common users who cannot move to a new phone (or uninstall and then later install again) without losing all the media in the conversations. Saving the media items one by one (and detached from conversation and context) is not the same and sometimes impossible due to the sheer quantities involved. And so on.

I know the resources have been really scarce but since this is hopefully changing now, this would be greatly appreciated. There's been some recent related work[1] required for encrypted backups to work, though. Also see ongoing discussion[2], GH issue thread[3] and possible implementation PR[4] etc., for anyone curious. Alpha testing[5] may help, too. (Me, I'm trying to find time and energy to help with this, but so far have only be able to grovel and complain). :)

[1]: https://github.com/signalapp/Signal-Android/commit/f36b296e2...
[2]: https://whispersystems.discoursehosting.net/t/encrypted-back...
[3]: https://github.com/signalapp/Signal-Desktop/issues/522
[4]: https://github.com/signalapp/Signal-Android/pull/7380
[5]: https://whispersystems.discoursehosting.net/t/signal-android...
I took his statement more like the difference between building an airplane vs building a bird. Both fly, but in totally different ways and with different strengths and weaknesses. We can build an airplane and fly across the world in a day, but we are completely unable to build a bird because the level of complexity is much much higher.
It is basically the prisoner's dilemma. The free publication platforms do not yet have prestige because few prestigious researchers publish there; but only few prestigious researchers publish on free publication platforms because they are not prestigious enough.

The only way to overcome a prisoner's dilemma is education and trust.
You could make curl read netrc from a pipe.

Something like this should work:

#!/bin/bash
password=$(...) # replace with code to extract password from the the password manager
generate_netrc()
{
printf 'machine www.example.org login foo password "%s"\n' "$password"
}
curl -v --netrc-file <(generate_netrc) http://www.example.org

No need for sudo and no risk of hitting swap. :-)
One thing I don't like is that sometimes when I reference a go library, sometimes it's vendored dependencies are exposed. This forces me to constantly keep my vendor file in sync with theirs.

Is there something we can do about forcing a check to ensure things aren't out of sync? Maybe a module can define dependencies as internet/external? If a dependency is marked as external, the referencing library must reference that same exact dependency/library version?
But digging deeper, Europe has a bigger middle class than the US, and the US has the largest lower class and upper class, the latter which pulls up the overall average.

So is the average citizen is probably better off in Europe than in the US.

Data: https://www.citylab.com/life/2017/04/euro-vs-american-middle...

Also, Europe is catching up on the US average income too, which is really more relevant than what the past or current average is. It means that recent US policy is not working in favour of the average citizen.