skysight-inc/HackerNews huggingface dataset:
We have lots of restrictions on corporate behavior because markets do not solve human problems, they solve corporate problems.

The corporate response to long hours and low pay is to put up suicide nets. In the U.S. we have minimum wage, hourly restrictions, break, and overtime laws.

You can't trust the market to weed out bad players when the bad players are the ones with enough money to buy public perception and government influence. You have to force them to do the right thing through legislation.
Anyone have any good articles about design patterns that they've bookmarked or feel like sharing?
> if it is "industry standard", does that make it ethical

Nope, not at all. Standard practice does not override ethics. Tobacco companies would consider advertising and promoting smoking as industry practice, but we cracked down down on that because encouraging people to do something that is demonstrably bad for their health was something we decided wasn't ethical and would be cracked down on.
You're supposed to enumerate all uses of the data (and they need to be sufficiently detailed and specific). The user has a choice to opt-in/out of each of them separately.

There is currently no detailed description as to what the definition of "sufficiently" is. For example:

- can I use your data to build a targeting machine learning model?

- can I use it to target you?

- do I need specific opt-in for every model?

Most things in GDPR are not specified in order to both give flexibility to the sites and to reduce the number of loopholes (which are technically legal but against the spirit of the law). You need to decide on the implementation and be ready to defend it in case of an audit.
This is often parroted. Comparing long time runners with those that have not run has shown that runner's joints / knees are actually better than those that do not run.

Run with proper form, don't ramp mileage and intensity too fast. Humans are built for long distance running.
That’s a good link, but it relates more to stories which disappear and resurface periodically, wherefore the term “Submarine” in the title. When it’s just a brief flurry of activity that isn’t tightly focused (Such as the NYT’s pushing Instapots) I’d bet on pure laziness.
Can’t get to sleep early? Science is on your side
As a consultant who used to fly every week for three years, and hated it, I cannot believe people will voluntarily do this. My consulting travel almost killed my marriage.
> "If you outlaw freedom, only outlaws will have freedom."

Couldn't help but think of Malcolm Reynolds and his group from the Firefly series, given that I was re-watching it last night.
Let's celebrate scientists, engineers, etc. with same interest as celebrities
Location: Bangor, Maine

Remote: Yes

Willing to relocate: Yes (preferably Boston, NYC, or some other northeast/mid-atlantic location)

Technologies: Python, Java, Machine Learning, Big Data

Resume/Portfolio: isaacmg.github.io

Email: isaac@paddlesoft.net

I'm looking for full-time jobs involving machine learning/data science. I'm experienced with the Python DS stack (i.e Pandas/Bokeh/NumPY/Keras/SciKit). Additionally, I'm also familiar with Java technologies like Flink, Spark, Kafka, and Hadoop.
What are your thoughts on the "rest" of Frederickson's research? You seem content to debunk only Losada's math (charitably characterized as a "brain fart"), where this article seems more willing to lambast positivity research on the whole as self-serving mumbo-jumbo.
If you're a supporter of minimal legislation then what's wrong with the courts handling it, as in this case?

A major tech company tracking users across the web beyond their own limited use-case platform is a relatively new phenomenon but now that it's been established in the courts as a big financial and PR risk then there is a big deterrent from future companies doing it. And often courts in other western countries take note of precedence defined in major foreign courts to define their own.

Formalizing this in legislation always seems to sound like a good idea in the short-term. But in practice it's often really hard to define preemptive regulatory systems that work efficiently (and relevant to todays realities), especially in technology, as well as more expensive to enforce via agencies/auditors, and will likely end up wastefully crossing over into many areas/situations which are totally harmless in practice or having negative side-effects which outweigh the benefits, such as harming innovation.

I'd rather we deal with negative behaviour on a case-by-case basis.
That’s crazy.

Do you remember the other mail you got that day? What about other Steinway ads in the past? Are you 100% sure you never received one or are you just trusting your memory?
'var transactions' is enough information for most people to understand it's a list of some sort. If it really matters to you then use the IDE. The full type info is just not that useful. That's why most languages are moving towards inferred typing - typescript, c#, java, c++, rust, go, scala, etc...
> Isn't EROI the more important perspective?

Yes.

> Comparing the total cost of solar power with the cost of ONLY the uranium in a nuclear reactor... that's very misleading.

The fission materials intensity number includes the mass of an entire plant and all the fuel that will ever go in it. The assumed technology is also 40 years old and very far from optimal for fission.
How many different early-90s display adapters, audio adapters, and such does it emulate? It also means that you'd have to source the OS and drivers. If the goal is to run old DOS games, Dosbox is generally more convenient.
Just to legitimise it in public perception is still a big win for wannabe tyrants. That's a good first step upon which they can incrementally build on and tighten the screws, just like the anti-piracy groups have done. So it's not at all ridiculous. It's devious, and a cunning attempt to gauge how apathetic the public are to their own freedoms.
It's doubtful that anyone would fire an employee looking at fine art. The more realistic issue is that some coworker might be walking by and catch a 0.5 second glimpse, think they saw something that they didn't, maybe turn it into a bigger thing or at least start a conversation or two about it, and months later maybe a boss is less inclined to give a big raise or promotion, because there's a sliver of a worry that this person might be problematic.

It's never as black-and-white as "boss walks by and fires person looking at art."
That almost makes me wonder if this is being pushed by someone with a financial interest in the outcome.
Why isn’t it the same when you hand them your credit card?
Don't forget that most new phones have locked bootloaders and cryptographically secure boot processes. If lawmakers required manufactures put a piece of software on every phone, it would be technically possible and very difficult to bypass.
It had better cross in a straight line, or it will arrive filled with vomit.

I’m so tired of hearing about hyperloop, or “Vac-Trains” as they were known in the 1800’s. Like Magic Leap’s original claim of FSD it sounds good to people who don’t understand the physical and physiological limitations. If you do understand them, it’s just a terrible joke.

Drawing a vacuum deep enough to confer benefits in this case? Not easy, energetically expemsive, and requires extreme engineering.

Safety. So many aspects of safety.

Remember that fine tolerance engineering you did? Hope it wasn’t somewhere seismically active...

Cost. Oh god the cost.

Your turning radius is going to be huge unless you want to see what people look like after 30 minutes of projectile vomiting in a small space.

And more.
I'm a morning person and so, even in Vegas (or moreso since there's no clock in the room), I was up at my normal time. Since I'm also normally on EST, this meant I was awake at 0300 or 0300. The first morning I tried to find breakfast early and found that the slots were full of disabled and/or elderly people who were trying to win their way to riches. And it was the slots that they seemed to think was the best way to get there.

Talk about depressing ... I didn't mind spending a few bucks gambling for the entertainment and comaraderie but these people definitely couldn't afford even a single pull of the handle. Talking to a relatively low-level employee at the casino, she said that the floor was full that day because it was the week that public assistance checks were received in the mail ... and that the casinos shooed them out of the building by 0600 or 0700 so that the regular guests were unlikely to see what was happening.
Read their faq... this question and the one after it:
http://humantraffickingpreventionact.com/#q2

They encourage retailers and manufacturers to charge more than the $20 and pocket the difference. They are marketing the bill as pro-business.
I'm not sure how effective or distributed the best knowledgebase softwares are (ours is OneNote and it isn't working IMO), but I think having the knowledge at your fingertips would be far less distracting than a minimum of two people occupying each other's mental resources long enough to exchange IP. Then what if people leave and take the IP with them. Have there been studies specifically measuring distractability or overall work performance with/without distracting instant messaging...? I'm not convinced these IM tools are the answer, but maybe with some sort of "Guide"/KB integration coupled with ML.
It's worth notice that many of these same states[1] mentioned in the article lack any interest in enacting an assault weapons ban to protect their citizens from deadly violence.

[1] https://www.washingtonpost.com/graphics/2017/national/assaul...
When will people be able to buy these?
funny, whenever I'm stuck at a casino (I've had an inordinate amount of "retreats" for work at casinos), I take $100 out of the ATM and hit up the lowest deck table of blackjack I can find, and spend the evening entertaining myself.

when the inevitable "are you counting cards?" question comes, I simply answer, dryly, "no, I just understand math". it's usually at that point they close the table for the night.
Dear American registered voters: Mulvaney won't investigate Equifax. He's too busy gutting the CFPB. The end of the linked article below has a choice quote at the end:

As Mulvaney said after his first day as acting director: “Elections have consequences at every agency.”

And in 2020, we have the opportunity to prove that by dumping the current administration. However, real oversight of what's happening at every level of our government is a crucial first step, and that can be accomplished this November. So go vote. This is the most consequential midterm election in at least a generation.

https://www.politico.com/story/2018/01/18/mulvaney-funding-c...
Rest assured, many of the brightest minds are aware of Facebook's business models and incentives, and many of them predicted the current situation and rejected the company many years ago.
Didn't even think of that. I still find instant messaging to be disruptive to my own work, but you're right: People would just find me and get up in my business if I couldn't dismiss them with a flick of the wrist.
This is a cool article. It helps explain what how people approached the web abs search before Google, which I know little about, and in a way explains Google's rise (without ever mentioning it).

Seen today, it's remarkable how human these early search engines were. For example, Yahoo:

> Yahoo! works like this: First, the URLs of new Web sites are collected. Most of these come by email from people who want their sites listed, and some come from Yahoo!'s spider – a simple program that scans the Web, crawling from link to link in search of new sites. Then, one of twenty human classifiers at Yahoo! looks the Web site over and determines how to categorize it.

Or Oracle:

> Already, more than 100 person-years have been spent building ConText's database of knowledge. To do so, Oracle has employed dozens of "lexicographers," a lofty title for what are often college interns who do the necessary legwork. "We've sent people to grocery stores, to scientific conferences, even sex shops," said Wical, with a touch of amazement at the resources Oracle can marshal. There, the lexicographers identify the subfields of metallurgy, for example, or the types of pornography, and then incorporate the results into ConText's ontology.

Reading through these and other search engine ideas helps illustrate what set PageRank apart -- nothing listed here hits on the core idea of organizing pages by their relations/links to other pages. Instead, everything is about looking at the content of the page itself and figuring out where it fits. Viewing the internet as a basically relational object seems to have been a big step to take, and perhaps required looking at the internet as its own new thing instead of a souped up library or set of TV channels.
tl;dr Docker != runc. runc has only had one known partial container breakout that required host coordination, and all of the runc CVEs are useless in rootless containers (which is what jessfraz is using).

Of the vulnerabilities you've listed (while searching "docker") only four were actually runc vulnerabilities, and most required you to be running root inside the container (or required you to have some form of privileged access on the host). Also, runc doesn't use chroot -- we use pivot_root.

You've also just done a full-text search for "docker" and several of the CVEs just have the word and are not actually vulnerabilities in "docker" nor runc. I don't understand what this is meant to show.

In particular, these are the only vulnerabilities in that list that are arguably related to your point.

* CVE-2017-16539 -- a default configuration error allowing a DoS if you're root in a non-user-namespaced container. The PoC in TFA uses user namespaces and thus this attack is pointless. Not to mention you shouldn't run as root anyway, please stop doing that.

* CVE-2016-9962 -- a partial container escape if you have another process joining the container, there were also several kernel bugs found as well as a result. Also requires root, and user namespaces had a fix for this in the next kernel version. Again, stop running stuff as root.

* CVE-2015-3627 -- an information disclosure that requires a malicious rootfs (so you have to have host-side coordination to set up the rootfs before the container starts), and was never present in "runc" just the library that predated it.

* CVE-2015-3629 -- a partial container escape that required significant host-side coordination (you have to change the configuration of the container to be malicious). Also wasn't present in "runc" just the library that predated it.

So, there has only ever been one plausible container breakout in runc to-date and it was CVE-2016-9962 (and it still required using bad practices). You could argue that CVE-2016-3697 was also a runc bug, but that code was only used by Docker at the time (more of a library bug than a container breakout bug). CVE-2015-3629 requires you to effectively create the container that you're going to break out of, so not viable from a "bad code in a container" perspective.

I'm not excusing these bugs, but they should be put in context. CVEs have CVSS scores for a reason -- they are not all created equal and you need to look at each one individually before coming to conclusions.

I do respect the folks who work on Xen, don't get me wrong, but I don't understand this argument for the security of Xen. If I only consider the 11-year-old floppy privilege escalation[1], then runc is already on better footing in terms of "which project had a worse example of a vulnerability resulting in containment escape". Whether this is due to the young age of containers on Linux, or because containers levarage many different security features, I'm not sure.

Source: I'm a maintainer of runc, and I found CVE-2016-9962.

[1]: https://xenbits.xen.org/xsa/advisory-133.html
This is mindblowing. "I can't believe" is so watered down it can not express the feeling felt when reading things like this. This past year has been insanity - this is just insanity..
Eh, for amazon? I think it is location dependent. The majority of your datacenter costs, if you want to run your own hardware rather than amazon? At first, those costs will be dominated by people, and this is why it makes sense to run on amazon until you're paying a quarter million or more a year.

Sure, you can get part time sysadmins. Not that bad for planned work. But getting someone who will answer your pager? You pretty much have to hire someone full time and they need to be really dedicated. (being the only guy on pager is a rough experience.)

If you can find someone with my skillset in, say, Cleveland? they don't have the option of super high paying local jobs where you get fed three times a day and don't have to carry a pager. The me in Cleveland is gonna work a lot cheaper.

The problem, of course, is finding a me in Cleveland. I'm sure you can, but there just isn't the density there as there is here.
> understanding session management with cookies a precursor to [JWT]

+1
Precisely. The Overton window for this topic seems to have shifted pretty far. The default position should be one of positive consent and assumed privacy. But then again, I think it’s all moot considering that Facebook’s existence is predicated on them collecting data. Asking them to do less of it is like asking a plant to stop photosynthesizing. That is to say: it’s their whole raison d’être, which means they won’t change it without a little encouragement from third parties.
So I know the organisms likely for after a week in the stratosphere, but the resiliency of the cells mentioned make it seem impossible that we didn't take life to mars.
From a Marriott job listing for Social Media Manager;

2-year degree from an accredited university in public relations, communications, marketing, journalism or a related professional area; 4 years' experience in Marketing Communications and Social Media.

OR

4-year Bachelor’s degree in public relations, communications, marketing, journalism or a related professional area; 2 years’ experience in Digital Marketing Communications and Social Media.
>Perhaps there should be a central clearinghouse for people who don't want to be tracked by certain sites.

This the most G. K. Chesterton-esque comment I have ever read on this site.

Poe's law may apply, but if you're actually being serious, "Let's build a list tracking all the people who want to avoid tracking" first, probably wouldn't work, and second, is the surveillance equivalent of a "standards problem" [1]

[1]: https://xkcd.com/927/
Golang Developer
Hey guys, I have been learning Golang and I am now looking for some hands on experience. If anyone has a project or has a repo that I could help with that would be sweet!
Can There Be Good Porn?
The very best office collaboration tool I've used was a self hosted copy of Reddit that was hooked into our ActiveDirectory for authentication.

We didn't have it too long before I left that company, so I'm not sure how it turned out, but it was pretty excellent for discussing things.
Why Low Level Lisp is my preferred language for Ethereum Development (2017)
that might make an interesting movie script ;)
...and promptly took a job at a Google? Sorry, but someone is working for these companies, and they’re clearly bright enough to make the necessary tools. I’m sure some extremely bright and principled people refuse to work with anything like an Orwellian nightmare, but enough do to make up the difference.
tl;dr a series of satirical photos of people holding a piece of glass milled in the shape of a conventional, contemporary cellphone. For a longer video equivalent, see motherboard's youtube video review of a display phone https://www.youtube.com/watch?v=CurrggRdaUY

In these situations, I'm reminded of Bret Victor's criticism of planar interaction http://worrydream.com/#!/ABriefRantOnTheFutureOfInteractionD... . Unfortunately, until we are closer to programmable matter or an economic powerglove https://www.youtube.com/watch?v=TAeViKt45eA I doubt we will escape the local maxima of variety we can offer via a touchscreen
Die Hard, Bearer Bonds, Ethereum
I have heard that casinos sometimes have balls of slightly different size/weight.

Basically to throw off anyone who might try this technique, as dealers often will throw very similarly for each spin.
A Great Man. Rest in Peace.
Generally in languages that have a let, it means const var.
>It also doesn't help that every state in the midwest has been slashing educational budgets and in some states has enacted almost a war on education.

Yeah, uh, this is going to end badly; I left the central valley for the anti-intellectual culture. It's a long term problem, and I don't really see how you combat it.

Educational funding, I think, might even be a trailing indicator of this; If your culture doesn't value learning... you have a much bigger problem than just underfunded schools.
Wow, they're being so goddamn vague with it as well in order to mislead people. "Protecting children" my fucking arse.
https://news.ycombinator.com/item?id=16517601
that sounds really cool. What was great about it?
Was about to post the same. Ghostery for me reports 22 trackers on the website, 3 of which are from facebook, including the "pixel" tracker that is mentioned in the article.
I completely agree in terms of people saying FB 'listens' as in records audio.

But one thing people often overlook with hyper-local geo ads are bluetooth beacons which are tracked at most major retailers these days. Doesn't help that Apple trying to help people use wireless headphones now likes to turn bluetooth on every day (the lock screen bluetooth button defaults to 'off until tomorrow')
Wouldn't there be an incentive to make yourself ... less pleasant looking in the hopes nobody sits next to you?
I guess I'm mostly thinking of apps that aren't well supported. If the developer doesn't notchify their app and someone opens it on their new notched phone a year from now I'm wondering how android P will handle that.
Ha, more people live better now, both absolute numbers and percentage of global population, than ever before in human history.
Don't Panic It's the Douglas Adams Papers (Radio)
"I can't believe" is so watered down it can not express the feeling felt when reading things like this.

I believe the suitable phrase is now "I can't even."