skysight-inc/HackerNews huggingface dataset:
It's often called an "Intellectual Property Assignment" agreement, and they are usually way more restrictive than a simple non-compete, although you need to read either very carefully.

I found out the hard way about IP assignments after I accepted a software engineer position in my earlier days, around ~2005. The centimeter-thick document arrived by certified mail. I was raging mad, called the HR director that hired me and asked why this was not mentioned earlier. She said "everybody signs them" and "it's fine".

To me, this was Not...Fine. They knew full well during my interview that I had side projects, including real software sales, real customers, and an LLC.

I immediately consulted a lawyer, who gave me multiple options/ideas other than just signing the document outright.

The HR Director, my future supervisor, and the Division Vice President I was to work under all met (this was a $700 million USD revenue per year company at the time, with 1400 employees, so not exactly small). The VP was visibly irritated and said things like "why do you even want to work for us anyway?". Things became heated quickly, and I remember inhaling one last time, grasping my chair with both hands in preparation to get up and walk...but the HR director intervened.

We solved the problem by adding an addendum to the original IP agreement doc, listing all my side projects.

I felt pretty weird on my first day on the job. :D

Side Story: A few weeks on the job, I needed a special software utility to help do my work. That same VP (who is now the CEO) made me explain to him, one-on-one and for nearly an hour, on why I needed that software. That utility cost $45 USD. Pretty sure he didn't like me.
You can do something similar with ffmpeg’s palettegen/paletteuse or imagemagick’s fuzz option. Generally speaking, fuzz/IM does well for recompressing GIFs, especially high-noise or static background. If you still have the source video, nothing can beat ffmpeg though.

(Those options usually require a bit of tweaking though. I can’t compare these at work, might give it a go later.)
> Education is not indoctrination.

This tends to last until someone realizes that an educational system is a wonderful indoctrination tool to advance their goals. Often enough this is followed by enacting that.

This isn't new. "Give me the child for the first seven years and I will give you the man."
Which aspects of HTTP strike you as particularly elegant or well-designed?
You could do a multi-tiered subsidized housing approach or rent control.

The real answer is that even massive building isn't a solution because you're externalizing huge costs onto existing property owners. There's no way to do this without redistribution so we need to make sure we explicitly protect the poor during that redistribution.
This is the crux of it. The short disclosure window could hurt 3rd parties unnecessarily.

Although I enjoy reading grandparent's counterpoint
Firefox does have permissions already, for things like push notifications and accessing camera/microphone. You can grant/deny them overall, or on a page-by-page basis.
But why did it make you so angry? My guess is because my viewpoint is completely unfathomable to you. You can't even believe that someone would advocate for it. In situations like that, I always try and put myself in the shoes of that person. Sometimes they are wrong, and sometimes they have a point. But it's always a useful exercise.

To your parent comment -

No, I don't think it's a cabal of "grumpy old men" - I think it's a cabal of morally righteous security-minded people who have never worked for small companies or realize that most dev teams don't have the time to deal with all this forced entropy.

You care about security, I care about making valuable software. Security can be a roadblock to releasing valuable software on time and within budget. If my software doesn't transmit sensitive data, I surely do not want to pay the SSL tax if I'm on a deadline and it's cutting in to my margins.
> I'd love to find out more about how we could resolve that issue.

Perhaps you could have a privacy policy which clearly states no text from user emails will be looked at by humans.

It's possible, though not easy, for a limited form of client-side encryption to be used while still offering autocomplete; e.g. if each word is encrypted client-side with a per-client secret, an encrypted "next word" could be determined and returned without the server ever knowing the specific words and sentences it operated on (other than length).
There are other caveats here.

> Privacy and security are extremely high on our priority list

The lack-luster privacy policy doesn't show that at all.
Actually I would estimate 15% of all youtube videos are sponsored by Squarespace.
There are good IMUs that can be used for dead reckoning (and, if an old professor is to believed, watching the thermal expansion of a building over the course of a day) but they're hard to come by and extraordinarily expensive.
No one defined "black hat". Just what authority do you think sets that? There is none. Black hat is not a standard to which people are scrutinized.
Actually Odersky has been pretty explicit about Scala being related to OCaml, which is certainly a true ML descendant.

https://twitter.com/odersky/status/598224956636450816
For fixed-depth trees merkle trees are fine though. I have used them for just such a purpose.
A startup is pitching a mind-uploading service that is 100 percent fatal
Indeed. One could also argue that fighting wars is primarily a logistics problem that sometimes involves using weapons.
In that case, what else is a lie?

FWIW, the article says things like "If you accept the issue as nuanced and that all parties are well-intentioned, then you’re giving up the joy of being the Good Side crusading against the Bad Side".

That means the introduction, "trying to unprovactively discuss a topic", is also a lie. The word "crusade" is provocative, as we learned after G.W. Bush used it shortly after 9/11, and the structuring of "all parties are well-intentioned" vs. Good/Bad-Sideism, is also a lie, as those are not the only two ways to structure this argument.

For example, one could argue about what "hostile workplace" means in the context of civil rights law, what a company might need to do to defend itself against an EEOC claim, and a discussion of what a "quite severe" incident might be ("quite severe" comes from the EEOC guidelines).

Bringing up "political correctness" is also part of the provocative language choice, as it is only really used as an off-hand dismissal of any challenges to the existing status quo based on a history of white, male, rich power.

For example, if "political correct" had a broader meaning, then we should say that politicians who defend the Constitutionally protected right to bear arms far more than they defend the Constitutionally protected right to an abortion are also being politically correct.
My experience has been the opposite. It breaks every Amazon Pay integration and a lot of Paypal integrations as well. It also breaks online banking for the two credit unions I use, both of which seem to use some 3rd party service to run their backends. And then just whitelisting the domain isn't a great solution because then that means they can drop any 3rd party cookies, not just the desirable ones. So suddenly my online banking works, but now I've got google trackers and whatever other crap they want to drop. I believe I was able to whitelist just those cookies but that was quite a few versions ago and the interface is different now so I can't find where I did it. The cookie interface is really terribe; when you go to the site information it tells you whether the site is storing any cookies, and many times it says "No" but if you click the "view cookies" link it shows a ton of them. This happens when the domain doesn't match exactly (for example www.example.com vs example.com) so you can't really trust the Yes|No info box.
The difference with regular torrent seeders is that they have no incentive to seed once they have the content. In this case the main purpose and goal is to "seed" and provide content to others, so the long tail should be more resilient.
If that's the case I was thinking of, that was a single regional ISP in North Carolina. VOIP would have happened anyway.
The irony here is art187 has illustrated CoCs not working while espousing their virtues. HN guidelines is a CoC, even though it isn't named that. It has all the hallmarks of a typical CoC.

Here, art187 has made a generic comment and, as you point out, posted a shallow dismissal of the author's work. Both in violation of hn guidelines.

The original post by art187 could have succinctly been stated as "I disagree" which basically adds nothing to the conversation.

No action has been taken after 17 hours. It's still the top rated comment.

The author's submission highlights what the author thinks is "The Problem": CoCs don't work.

It's fine to disagree with that, but it's helpful to point to examples of a CoC working rather than creating another example of them not working. At the very least, comments ought to discuss specific points. None of that happened here.

Contrast that with benign comments that moderators label as "personal attacks"

https://news.ycombinator.com/item?id=16456045

But when there are actual personal attacks made against people with the "wrong" opinions,

https://news.ycombinator.com/item?id=16449741

https://news.ycombinator.com/item?id=16449842

https://news.ycombinator.com/item?id=16067802

No actions are taken. The implications are clear. The CoC here is used as a stick to smack people with opinions that the moderators don't like. All more evidence in favor of the author's stated assertion that CoCs don't actually work.
Brainless Embryos Suggest Bioelectricity Guides Growth
Show HN: Larry's Cheap Houses – Deep Learning Powered Real Estate Deals
What if I told you you can lose money on straddles and bear spreads.
This is actually one of the major advantages retail still has over online purchases: returns to online providers require paying for shipping, and the initial shipping costs aren't refunded either. Even with 'free shipping', the cost of shipping + everyone else's returns is just built in.

That said, this seems like just bad policy that leads to the problem. Why should stores allow returns without a receipt or other proof (lookup using credit card)? That seems to be the major issue. If they require proof of purchase, it means they at least aren't refunding theft or products purchased from other stores.

Accepting returns of opened but non-damaged product that can't be resold (eg: missing parts/packaging, obviously used, etc) also seems to be opening themselves up to abuse. Of course, how they handle this has to take into consideration the fact that easy returns are a competitive advantage. This is maybe where the analytics firm can step in, to help identify people that frequently do this.
Your closing argument is essentially “if you’re not with us, you’re against us.” which sounds like quite the zealots argument to me.
In France it is the location of the entity which sold the ticket (which they proudly advertise via "10000 EUR won here!")
The internet is communication technology, and communication technology is network-effect-heavy. The value of "The Web" and "The Internet" is more than proportional to the number of people using it. Email is useful only when the person you are messaging has email.

So... If much of the web (by usage) exists on Facebook, much of its value exists on Facebook. That value is under Facebook's control, logorithmically to scale.
I stopped buying things like motherboards, RAM and so forth from Frys quite some time ago. Just too much stuff was returns, and not marked so.

(I once bought a desktop computer from them. It was, unsurprisingly, busted -- it wouldn't boot, and the OS installs I tried all failed. I had to threaten to reverse charges on my credit card when they refused to take it back; their argument was it was broken and they were unable to put it back on the shelf and sell it to another customer!)
The upside of this is that most of these vulns are ineffective after disabling AMD "Secure" Processor at boot which is now an option in most firmware. Without breaking manufactures firmware upgrade key you cannot execute the first one to toggle the settings.

The interesting one is against Promontory. It still requires VM host access to exploit so the impact is limited.
... also process context / managment / residency / systems level architecture

everything is running synchronously in the current thread on the same machine (or can be roughly abstracted as a single machine where all backend is simply 'invisible')

like a tv.
No.

CORS is designed to protect two things:

- The user's cookies for other origins, which the browser will normally send on any request to those origins.

- Behind-the-firewall servers that might be accessible from the user's browser but not from the public internet.

Neither of these things apply to Workers: a Worker obviously has no access to the browser's cookie jar, nor does it have the ability to see behind-the-firewall services since it's not behind-the-firewall.

CORS does NOT protect against DDoS: Typically, CORS does not prevent you from sending requests; it prevents you from seeing the content of the responses. Any web site in a browser can use an <img> tag or submit an invisible <form> to cause a cross-origin request, CORS or not -- but it can't read what comes back.

So, Cloudflare Workers do not enforce CORS. We've implemented different measures specifically to mitigate DDoS.
While I know that there is abuse of the return option, and probably quite a lot, an immediate return is more likely to be because the item has simply been checked for fit and finish. Someone planning to wear something for a particular event before returning it is likely to have it delivered a few days in advance.

I will not order items like footwear for mail delivery if I cannot return items that do not fit, and it is up to the retailer whether they want to trade with me on that basis.
Expo Template for ClojureScript and React Native
Reminds me for Flattr, which didn't take off either.

Patreon seems to be the most successful player in this type of market, although they're not really micropayments .. and only a subset of people gain a significant following.
National Geographic: For Decades Our Coverage Was Racist
A series about pioneers in video-game design, development, and programming
AWS Free Tier: Smart Resources Handling with CloudWatch Events and Slack
Here Dragons Abound: Exploring procedural generation and display of fantasy maps
GraphQL is a convention on communication, like REST. Redux is a way to manage application state. They are apples and oranges. You could ostensibly feed a Redux store with GraphQL.

This post is like all the others that tout, "moving from X language to Y saved us $3,000 per month on AWS" – it's usually not the transition from one tool to another, it's the fact that you rewrote your application with more knowledge and insight into the problem and have simply done a better job. Or in this case, a misuse of Redux led to a transition to GraphQL which painted Redux in a poor light.

There still isn't a compelling solution to problems like this... Apollo certainly isn't it. I want to feed GraphQL & REST into a central datastore in my application (be-it a Web/SPA/Browser app, or a local app) and abstract away the guts. A lot of devs are leaning on GraphQL for small experimental apps, fetching data in their components and violating every rule in the book on SRP and SOLID. It works for MVP's and hobby projects, but when you have a larger team, userbase, etc... the abstractions become critical.

We, as an ecosystem, need to focus more on those abstractions and not on the one-size-fits-all buzzword tooling. Server <> Datastore <> Application, not Server <> Application with the library of the week bolted in.
Yeah, maybe $39 a year is pretty much if you compare it with carrd.co
This is the kind of thing I wish I thought of right when I saw it.

These naysayers are silly. The amount of investment you put into it will undoubtedly be offset by the passive income you generate with it, not to mention the fun/learning you did while building it.
I did the same. Between Netlify and Zeit.co's Now, I don't see any reason to complain about HTTPS, not to mention the devOps issues that both these services solve.

SSL requires one click with Netlify, and it's on by default with Now.
Public security researchers compete with state-sponsored research teams and organized crime syndicates. Both of the latter entities are better funded than even commercial vulnerability teams, and neither of the latter publish any vulnerability information. I have a hard time ever seeing public researchers as the bad guys in these stories.
It’s not that unbelievable, what software service are you aware of that is sold at only it’s marginal cost?
We should collect some money. I would be willing to chip in $1000 if someone could demonstrate that.
When it's acceptable and when it's not is an important question. And the fundamental problem of command/management is that you want that decision made by the lowest level of command/management who is fully competent to make it.
I'm sure they believe that, but to be blunt, that changes the definition of "black hat" from "compromising people with security vulnerabilities" to "doing things I personally find unsavory when publicly disclosing security vulnerabilities."

If people want to bend over backwards to make an argument about the abstract way in which people are harmed by small disclosure windows, activist investing or information asymmetry in the market, they're free to do so. But none of those things qualifies as black hat behavior. Definitions require precision to be useful, and you throw all precision out the window if you decide to lump people with disclosure habits you dislike in with organized criminals stealing identities en masse.
Why not? If $125/month saves your life some day, isn’t that with it?
Would you be open to having a phone call, or some other more direct way of discussing this?

It may be easier to be more empathetic.
On the one hand, it feels wrong to demand Facebook regulate content sent via it just because they profit; you could say the same about telecoms being “dumb pipes.”

On the other hand, Facebook clearly does not want to be just infrastructure; they try to maximize page views and time spent on the site and profit in a much more direct way from popular but horrible content than do ISPs. And they selectively promote content of their own, unlike ISPs (at least until recently!).

In the end I think it comes down to this: if you want to have control, you need to accept responsibility. If you are OK with relinquishing all control, we can negotiate.
How do you know the variance of your sensors? Do you have to experiment in a controlled environment?
https://fsharpforfunandprofit.com/ is a great resource.
Maybe an adult content blocker from a page not normally expected to have it?
Wow... instead of debating the pertinent points raised, you resort to name-calling.
How to Eliminate the Number One Cognitive Bias on the Internet
You can leave money to be paid to whoever revives you. The money will be invested so as to not lose value. Eventually the cost of revival will fall below the reward, and you'll be revived.

Obviously several things could go wrong, but the plan isn't obviously doomed.
A CRUD App with Apollo, GraphQL, NodeJs, Express, MongoDB, Angular (v5)
> I assume Google realized the market is too small for them to worry about, but if someone could build them in bulk I'm sure they would find an audience of people willing to pay a decent price.

Definitely underestimating the market if that is the case. My gear acquirement syndrome is already triggered.
Wild guess / conspiracy theory:
Intel, afraid of the damage to their image just made worse by diminished performance advantage compared to AMD )due to Meltdown), fearing long-term market loss, quickly found ways to tackle the issue by, instead of pedaling to regain trust, damaging a competitor's image. It seems like a reasonable long game to support and perhaps steer the disclosure of AMD vulnerabilities that CTS-labs had been investigating. Or maybe is was Intel investigating themselves, had some cards up their sleeves, but needed some other entity to do the public disclosure.

Other theories discussed here seem less far-fetched than the above, but in any case, it does smell funny.
Seriously. If you're like any normal person and occasionally return stuff, you're fine. If you're just "renting" products 30 days at a time (yes, this really does happen), retailers don't want anything to do with you. If you fall into this second category, instead of getting all indignant, perhaps stop taking advantage of return policies and retailers won't shun you.
Well if you do and you constantly do chargebacks then you will get hit with fraud from your credit card company.
There's an attempt to make this all sound like a conspiracy, but it all makes sense to me.

There were accidents. They slowed the train to improve safety.

The train is about as safe as ever. Why? Many, many more people are using than the trains than before. It's harder to keep that many people safe, so more caution is warranted.

The only problem I see, if it's true, is that they classified delays stemming from maintenance under the wrong heading. And so far as I can tell, there's no real proof of that.
Thank You a zillion!. I followed along, got a free membership and am chatting with their helpful community on slack. Their Feb Mentoring program is closed but they have another one coming up for September cohort. All in all looks promising.
I think it's more than incremental speed up - it's the amount of mindspace it takes.
WWDC 2018 Registration now open
I disagree, Tor isn't a sandbox or firewall for your apps. If they make undesired network traffic then the vulnerability is in the app (and arguably, the environment it's running in).
Show HN: I made a Chrome extension to hide social metrics, judge objectively
It is interesting to see Chrome Plugins being accepted into YC. Is the potential really worth a billion dollar market ? I would think that YC wants to invest in startups that could scale to high growth in a short span of time. Are Chrome plugins really worth that much ?

Or perhaps this is just the MVP and idea is to scale it further ?
[0] https://www.theatlantic.com/politics/archive/2018/03/still-e...

[1] https://www.theatlantic.com/magazine/archive/2018/04/the-las...

Two other recent articles on Christian Evangelicals, their history, and relation with Trump/Politics. I find this article to be an interesting one in juxtaposition with them, especially the history included in the Last Temptation [1], which points out the history of Evangelicals included a strong anti-slavery component at one point and the later division with Fundamentalism (which is called out in this linked article).
Thanks, I will do so.

When Firefox optimised for multi-process, did they test for single-core? I'm on a machine released this decade - a rare instance of a single core x86_64 machine (fanless Atom NUC)

Facebook is pretty much now unusable with they do their asynchronous page loading of stories.
That's an interesting comparison. As it was put to me by my sensei, black belt is when you have the basics down so that you can begin to learn.

So many "learn to code" sites, books, and programs lead people to believe that the journey essentially ends there when it's actually the beginning. Sure, people understand that further experience is needed, but without some kind of guidance it's very haphazard.
I initially bumped on this one too, but "obligation to consider" doesn't mean "obligation to quit their jobs over". You consider the ethical implications, you push back against management, management tells you sit down. Are you now obligated to quit? If you decide to keep your job, knowing that the code will be written either way, are you now ultimately responsible for it?

(Completely unrelated but the first thing that came to mind: https://www.youtube.com/watch?v=GKdgDX2dGh0)