skysight-inc/HackerNews huggingface dataset:
Under a hypothetical US version of the GDPR, Google might be prohibited from sharing that data with non-governmental third parties. But it wouldn't be prohibited from collecting and storing that data, as showing someone their location history (with clear opt-out language) is actually in the legitimate interest of providing better mapping services for that individual. And law enforcement wouldn't be subject to those third-party restrictions.

There are additional laws that could protect citizens against overreach. But something like the GDPR alone would not do the trick.

This is especially dangerous given that there is already overreach in which data on the correlation of travel and behavior with crime, is being used to unlawfully detain people: https://www.npr.org/2017/12/05/568351544/teens-arrested-on-g... This data would only serve to multiply that problem. It's not an easy problem to solve.
hm, how much does parents income determine education though..
That'd be great but you can't teach everyone to be awesome critical thinkers. There is a question of aptitude.

That focus also overlooks the fact that much of the propaganda is emotionally-driven and appeals to certain instincts. For even the most rational of human beings, emotion can overwhelm critical thinking.

So, while we can definitely do better in teaching critical thinking skills, we're just going to have a percentage of the population that is susceptible. And, given the fact that we're split almost down the middle politically (the election came down to 85,000 votes across three states), the ability to affect even a small percentage of the population can have a huge impact on the direction of the country.

A more effective root cause mitigation might be to break the two-party monopoly so that a broader set of ideas can flourish. This binary for-or-against system is also unhelpful to say the least.
Same, my feed was still filled with inane posts no matter how much I tried to mess with it.

I just gave up.
He states that it could be twice that not that the actual amount is that value.

He was stating that the 7.5% return they wanted is not likely, that 6.5% is much more likely, and that he wouldn't be surprised if the return was less than that 6.5%.
Like the GP said, to get people angry by getting them to argue publicly using 140 character sarcastic quips (though limit has increased recently). The angrier they get the more they post, the more they post, the angrier others get, and so on. Therefore lots of engagement and activity. With bots around, and some probably with better AI, it is much easier to "engage" a lot more people on a lot more topics at the same time.

And it is interesting to watch because people get into arguments trying to convince each other seemingly but in 140 characters it just sounds insulting and terse. Well sometimes it is simply insulting: "Oh you called me a stupid idiot! Of course, that's a great point. I will step back and ponder an alternative approach to this problem"
if you 3rd party log in w/ your google account you can browse pages the same as the spider. quora knows the google spider is the google spider, so they've got a pretty good argument of equivalence there... plus you can still open links in a new incognito tab if you want to bypass registration like I did for years (kinda clunky though, & I was definitely feeling annoyed w/ them at times too)
I'm not actually complaining, I'm happy the webpack team is making improvements so fast.

The reason I upgrade so often is they actually make meaningful fixes. Bugs that I find tend to be in github issues as closed and available in the current release. Hence the pain of upgrading.
I think UCSC is higher on the list of party UC schools
Our value systems aren’t really relevant here - I would love a pension and I’d love it if we all had them, but that ship sailed a long time ago. Am I mad that public sectors with strong unions fight to maintain their benefits? Nope, I’m just not willing to pay for it since paying more for the same services does nothing to better my situation.

As a software developer, I’m unlikely to find a position with a pension and a decent salary. I could go work for a university that might provide a pension but the pay would be dismal. In a system with choice between pensioned and non-pensioned competitors, eventually the pension burdens will make them less competitive.

Just to provide some background, my dad worked in a union (UAW) for nearly 40 years - so I benefited from that system.

The issue to me boils down to economic competitiveness. Pension systems are expensive and pose immense risk. Most businesses can’t afford it today. Governments can just borrow money to make up for gaps - until they can’t (Detroit.)
> it's hard to automate with AI

I disagree. At least it shouldn't be that hard for a company with Twitter's level of engineering and data science sophistication, and yes, I do realize that most of their best technical talent is long gone.
Great checklist. One recommendation - the checklist page has a lot of CORS policy violation and unsecure end points errors/warnings. Being that this list, and your company represent a security product, these errors undermine the credibility a little.
To watch everyone mugging for the camera?
This is great. Somewhat orthogonal, can anybody venture a guess on if we will ever be able to open raw sockets in AWS Lambda functions or if their continued restriction is necesary for their container security model?
I think it's great that so many apps are available for mac or linux that wouldn't otherwise be available. Electron provides a baseline that simply is much more difficult with platform specific code, or other cross platform applications. It's not all in the box, and far from perfect. But the fact is, I get to use VS Code, Teams, Spotify (I know not electron specifically, but similar enough) and a handful of other apps everywhere I run.

For the most part I stick to cross platform apps, if that means a "lesser" electron based app, so be it. And most of them look far better than other cross platform and even native options a lot of the time.
It is hard to say Seattle "gave them the opportunity". They would likely have succeeded anywhere and one could argue they "gave to Seattle" with their creations.

Another billionaire, Ballmer, said at a private party that he does not care about the Seattle startup community. "Not in a callous way--I am all for more startups succeeding--it is just that I have only so much time in a day. Right now I care about my basketball team , my non-profit and learning Hebrew".
You may then want to see this one too: https://git.io/security
It's not a bad list, though it is a bit of a marketing tool for "Sqreen" (though, I guess if we did one, it'd come off as a marketing tool for us).

What I actively don't like is their use of "Seed", "Series A", "Post-Series-A". It's cutesy but, more importantly, their categories are mostly wrong.

Here's their "Series A" list:

* No shared accounts
* Centralized account management
* Centralized logs
* Server list
* DDoS protection
* IP restrictions for internal services
* Monitor metrics
* Public security policy
* Special security for non-tech staff
* Real-time monitoring/protection
* Customer 2FA
* Monitor suspicious activities
* Security-oriented test sessions

Many of these are things you want to be doing ASAP. That doesn't mean they take priority over product/market fit, but it does mean you're not waiting for a milestone to build them. For instance: most competent teams have centralized logs. Every competent team restricts access to internal services (and IP restrictions aren't the way to do that). If you don't get this stuff started early, it's a nightmare to start later.

Other things on the list are things that mature, profitable companies don't bother doing, because the ROI isn't high enough. Customer 2FA is an example --- if you need it, you probably know. Real-time security monitoring tools are another big one; chances are, if you're reading a checklist like this, your monitoring needs are too idiosyncratic to buy COTS.

Post-Series-A is worse:

* CloudFormation
* Incident Response
* Internal security policy
* Asset inventory
* Bug bounty program
* Security audits
* SDLC

With the exception of bug bounties, which you might not bother ever doing at all, these are all ASAP items.

You could also start a list of important things they're missing:

* Security testing integrated into CI/CD pipeline
* Automated routine network monitoring
* Segmenting AWS accounts
* Having a process to tag PRs for security review
* Adding a security page to your website

This list reads to me like it was originally shrink wrapped around a product, and then expanded with bullets with links to random websites to throw the scent off.
I could go for a service like that. Even without the anonymous option.
> He addresses some of these issues on personal Facebook posts, but seldom talks to the press about them. Last year, he spent most of the year doing photo ops with people around America, but did not show up when Congress asked questions about how the Russians used Facebook to influence the 2016 election.

So he is not absent and communicating directly to users.

> This year, he announced his annual personal challenge would be fixing Facebook — in other words, doing his job as the CEO of a publicly traded company worth more than $500 billion. In past years, he's taught himself Mandarin and hunted his own food.

The job of a CEO is to keep the shareholders happy (which has always been the case since IPO AFAIK), not to fix it. I stopped reading at this paragraph, Zuck is not perfect but his personal challenges are impressives and dismissing them like that is not what I consider journalism.

His statement earlier this year regarding what he'll do to fix FB in 2018 is gonna be interesting, his last posts have shown a work in progress and we can expect a post-mortem in December that wil be more important than this clickbait article.
Grantham on finite growth:
https://www.zerohedge.com/sites/default/files/images/user5/i...

Grantham on finite resources:
http://www.theravinaproject.org/JGLetterALL_1Q11.pdf

There was a nifty quote in Green Mars. Think it went something like "need to shift from sustainable development to sustainable prosperity".

And just for giggles:
https://www.youtube.com/watch?v=PTUY16CkS-k
Because most pension systems are not fully funded.

http://www.governing.com/gov-institute/voices/col-public-pen...

https://www.cnbc.com/2017/10/18/state-pension-funds-continue...
> Another option is to wait just a couple of months to upgrade

I did that when webpack 3 was released and now I'm two versions behind.
I think it's more of the long term pattern of the leadership of facebook: anytime things get difficult they just sort of teflon their way through it and ignore everyone. Remember the Facebook Beacon fiasco? That was the first scandal in dozens, all following a pretty similar narrative.

In that sense, yes I would say leadership has been absent or maybe unaccountable is a better word.
You could try Liquibase.
Not bad for the SPARC considering it was introduced at around $25,000. Of course, by 1998 it was only as powerful as a dual processor Pentium Pro. I think the RAM maxed out at 512MB though.
I own a copy of "The School of Niklaus Wirth" :)
I really appreciate the pragmatism of Wirth's designs and his quest for simplicity.
Ask HN: How to legally collect/share data like names, address, etc of disputes?
Additional info: I hate scammers and it seems there is endless supply of them. I want to create a searchable database to collect information on all scam related and business loss incidents. An example of this is fraudulent charge-back among marketplaces such as eBay and Amazon. There are also organizational theft, bad business practice, and other topics that can result in significant monetary damages to business owners, consumers, or both. There are ridiculous app such as Peeple so I believe it’s not impossible for this, but I prefer to start it right or at least with a good faith.
Oh I'm going to try that rabbit dish. These sound quite interesting (and fairly straight forward compared to other 'traditional/regional' dishes that I have been trying lately).
It's the difference between a carbon tax on meat and carbon permits (cap and trade) on meat.
This whole bot thing is turning into a classic hysteria.

I really hope it doesn't end up harming a bunch of the 'good guys' like most of the quickly assembled shoddy 'solutions' most public hysterias generate, rather than stopping the legit 'bad guys'.

There have been countless examples of well-intentioned but heavy-handed intervention being a net-negative for society [1].

There could very well be some really interesting legitimately useful bots that will get swept up in this. Or platform limitations added which cripple the utility of all bots...with some an unmeasurable potential loss via future bots which were never created as a result. ....Meanwhile the 'bad guys' find a hundred loop holes to keep operating.

The key is keeping this to a case-by-case enforcement...whether at an individual or specific use-case based level. Not some overarching limitation or stigmatization of bots (across all social media).

[1] See: the drug war, 1970s NYC/Toronto rent control laws resulting in a far lower supply of affordable housing and more dilapidated tenements, anti-oil pipeline activism resulting in more environmental harm via rail and truck transit, pro-poverty housing regulation creating isolated urban ghettos, wage laws reducing total long-term net income for all low-income workers than it gains employed workers in the short term, etc, etc.
Let’s just look at one difference: firing someone in corporate America is fairly easy. Firing a government worker is darn near impossible.

So right there, we are compensating private sector employees for the reduced job security.

I could go on many more, but that one is pretty solid.

And yes, private sector people are paid too much just on this basis alone.
Todoist, ui/ux is intuitive, allows you breakdown tasks into subtasks, set reminders, group project tasks, can sync to google calendar. Though what I like most about it is the 7-day tasks view's simplicity. (I'm on premium, the free version losses a bunch of features eg reminders)

I was using Trello for a while but found the UI to be a bit of a pain as both mobile and desktop require a lot of horizontal scrolling and it was hard to take a high-level view of upcoming tasks. Maybe I was just using it wrong.
>gives me a scary black box feeling, like if it really wanted to it could stop working and I would be unable to fix it

This was verbatim my thinking when evaluating Vue 2 a while back. Its reliance on Webpack or Browserify for optimal use really gave me pause. I could just see myself losing days trying to figure out which bit got flipped to stop its working.

Vue 2 was new at the time as well, so I wasn't sure about adoption, ecosystem, and/or the maintainers' committment. Looking back, I would've rolled the dice. But, all of this to say glad I'm not alone in that black boxes give me pause in a world where everyone seems to rush headlong into the next big thing, ceding ever more control.
The best thing I've found for fungal infections on feet (more effective and faster acting than commercial products) is simple vinegar and garlic. Crush up a few cloves, (maybe microwave in small amount of water for a few seconds), pour a cup or three of vinegar in a container with maybe 3-4 times that amount of water, put the crushed cloves in, let it seep for a bit and soak feet for awhile.

I'm sure there is a more exact specification, but it all seems to work. Problem gone in a day or so.
s/shaping/pacing/, we're trying to smooth out the bursty nature of sending from high speed links and TSO so a flow is less likely to incur large contiguous buffer drops and tail drops along its path rather than limit the flow's throughput. I have a large fleet of intel NICs on the back half of their life cycle. NIC pacers sound good in theory and I'd like to eventually partial offload but they have limitations in terms of flows and number of pacing rates so will still require a software fallback. On a timerwheel, the system overhead for no offload and a partial offload is not nearly economical as theoretical full offload. And contrary to some misinformation from one of the varnish devs in this thread, taking an SWI/context switch/scheduler overhead (these basic concepts will probably get called "babble" by the dude) comprise much of the overhead.
Can you show me a Higgs Boson?
the scale at China can do things is different from japanese as a function of its population. 10% of japanese population investing abroad in an under connected world in the 80s is vastly different to 10% of Chinese buying up real estate in an connected world with access to lots of resources and information Japanese in the 80s simply didn't have.

Chinese also immigrate into other countries in vastly higher numbers than Japanese.

The japan, china comparison is close to false equivalence
> it’s hard to automate with AI

While nothing is a panacea, there’s little evidence that Twitter is doing even the bare minimum.
But not at 4K... In the end, I'd rather hit 60fps at 4K before 144fps at 1080p.
> But are we really supposed to retweet more than we like? I was treating retweets as a stronger version of ‘like’

I'm in the same boat, but I'm not sure you could take it any other way. At least in my usage, 'like' is a signal to the poster that I liked their comment/it was a beneficial contribution, whereas 'retweet' is that AND I think it would be useful/interesting to a weirder audience. Retweeting more than likely seems backwards, and more like spam.
All my google images searches now include "-pinterest". This has only recently been necessary. Why?
That’s because the policy isn’t derived from first principles, it’s a flexing of relative muscles. Google knows that small sites don’t have any choice but to comply with their guidelines. They also know that if they start filtering out LinkedIn results, if people are looking for something they expect to find on LinkedIn, they’ll go and search LinkedIn, possibly even before they search Google. Google will not allow that to happen.
Prepare Yourself for the Sound of Volcanic Thunder
When I get a Pinterest login popup, I just click the button at the bottom that says "Not now". Then I can browse the images.
A lot of their funding is from Adam D’Angelo’s personal piggybank.
As a noob I actually prefer w3school's page to start ... and then I'd read MDN.

Maybe the noob clicking behavior is influencing the ranking?
Your opinion sounds incredibly racist to gp (and me). And he told you that. So what's the issue?
Testing backups and having a recovery plan is paramount. I have been burned in the past by making backups, but then floundering around trying to redeploy.
Faster to build 3-4 native UIs instead of one HTML based one?
The amount of global bullshit they have enabled in so many spheres of social life is going to take generations to repair.

Can't wait for heads to roll at Facebook/Twitter/YouTube. And they will. It's high time.
That doesn't seem surprising at all - a CEO's reputation is tied to the reputation of their company, so it makes sense that a poorly-performing company would have to pay more to attract the same level of expertise as a well-performing one. If the poorly-performing company fails, then the CEO's market value will decrease. Higher compensation offsets that.
Ah, this is a great idea, and I can see how this could be extended beyond simple deblocking.

In essence, it computes the uncertainty from the JPEG quantization step (the source of most of JPEG’s compression) and uses that information to select a decoding that minimizes a particular error metric (here, discontinuities at block boundaries).

But it’s not limited to just that, in principle. It could optimize towards any decoded block within the quantization range given a suitable prior - and I imagine that this could be paired with e.g. a DNN to faithfully reconstruct an image from a JPEG with much better accuracy.
There are many adult actresses, camgirls, etc. on Twitter that are trying to build a following that would still meet this criteria. Not all of them are bots.
I can beat that.

Get some bleach, mix in a basin with some water. No good exact amounts, it should smell bleachy and be diluted a fair bit past the point of burning.

Do this, then a couple days later, do it again. Whatever has taken residence on your feet will have moved out.
I can’t help but notice that some entity with deep pockets is leading this entire media war against Facebook. Articles like this don’t write themselves. These are classic zero information articles that keeps popping up systematically as if someone is running media puppet. There were couple of guys going out on limb in to conferences and media strongly making a case for “regulations”. Guys like those don’t do it for free to travel all over and keep making same points over and over while getting expensive media minutes.

Question is who is pulling all these strings and why?
You could. That would tax meat production even more. In order to raise cattle, you first need to grow the alfalfa to feed them.
Not necessarily. Lambda calculus is Turing-complete under Church-Turing thesis, and it has nothing to do with 0s and 1s. That’s just von-Neumann architecture encoding.
And if you're working in a section that takes 10-15 seconds to get to and multiple steps? Each time you rebuild, without hot-reload you've killed your focus.
In China it isn't uncommon for newborn babies to be bathed with tea tree oil (and other plant/herb products) for the first few weeks. I'm not sure what the strength is though.
Ahh, yeah it would be more comparable. Though I think a sin tax is more workable that getting a cap on meat legislated.
I must admit that I did have second thoughts about posting this after I'd properly typed it out. It sounded less pointed in my head.

You are technically right. The specific issue was that youtube-dl had a bug downloading WAVs from soundcloud. The WAV in question was privately linked to me, and it was the first WAV I'd ever encountered. It's not possible to search for "has WAV" on soundcloud. I had no idea how to find one, and was unsure how to go about uploading test media (eg if it would be taken down etc).

I'll admit that yeah there was some laziness and "just fix it" and unimpressedness in there. I'm at fault to an extent.
I wonder how this applies to all the instant coffee vending machines around South Korea and Japan.

The ones within subways and outside bus stations feel the most suspect.

And some of those bus drivers and maintenance workers drink from those 10x/day.
Your comment reminds me of this story told by Bill Moyers about LBJ:

We were in Tennessee. During the motorcade, he spotted some ugly racial epithets scrawled on signs. Late that night in the hotel, when the local dignitaries had finished the last bottles of bourbon and branch water and departed, he started talking about those signs. “I’ll tell you what’s at the bottom of it,” he said. “If you can convince the lowest white man he’s better than the best colored man, he won’t notice you’re picking his pocket. Hell, give him somebody to look down on, and he’ll empty his pockets for you.”

It makes sense today, too. If the wealthy can convince the poor that their hardships are caused by immigrants, then the newly poor won't consider how much of their previous wealth is being concentrated in a few hands.
> IP restrictions aren't the way to do that

I think they might talking about something else — like restricting db access to only certain IP where apps are hosted. That’s the problem with checklists — they aren’t very clear at times.
How pension costs clobbered one small California city
Take This App and Call Me in the Morning
It less about a car needing rework and more about Tesla knowingly delivering cars with major issues to customers.

But as someone else mention on HN, they have a customer base that will accept it, so i can see why they do it.