skysight-inc/HackerNews huggingface dataset:
If you think the problem is solely (or mostly) on one side (regardless of which side that is), then there's no point on continuing this discussion, as you're completely ignoring my opening point: that good communication requires all sides to participate in a constructive manner. You must take into account the effect your behavior and words have, beyond your intent, and beyond what you believe the content of what you're trying to convey. You need to take into account the human in general, and if you know more about the human you're engaging with, what you know of them.

If that's not something you believe, take to heart, and practice, you're part of the problem, and it's not worth my while to continue attempting to engage. This is regardless of one's ideological views, and something Haidt hammers home repeatedly.

Edit to add: Of course HN has imperfections. (And to answer your other question society has imperfections: to suggest otherwise is facile and disingenuous.) Online discourse is hard, and new, and we haven't come close to figuring out the best ways to do so. That doesn't excuse each of us taking responsibility for trying to make it the best we can.
Must be nice to live free of consequence.
Exoplanet Hunting with Machine Learning
Those read more akin to safety rules with "hacker" tacked on for theme.
Yes, I've seen the movie, thank you very much.

Though I wonder whether it would be that useful today, with the state of voice recognition and machine translation technology? Just because you throw away those fancy digital radios doesn't mean that your enemy will forgo modern tech. ;)
I don't think you got what I was saying.

All of these things are alarming, yes. But not because Trump is involved. These issues should be investigated regardless of who was doing it.

And I was trying to convey to the parent post that these issues of data use and disingenuous campaign practices would have come up, Trump or not, because it's happening and we don't like it as a society. But since Trump is the one, right now, people will point the finger at him like he's to blame for it all. That's why I mentioned Obama (because people did the same to him).

It looks, to me, like Trump sought help from shady people in multiple cases. And that's worth noting but it's irrelevant to the fact that those people were doing shady things in the first place.

> We have actual documented evidence here, and that's what so startling.

No. Sadly we only have a situation where an app was collecting data using Facebook and a video where two individuals were pitching their product by saying things to try and win a customer.

We know that the Trump campaign hired them, but we don't know that the Trump campaign knew about their data practices any more than their other customers knew. They had many other customers before Trump.

PS: I'm not a Republican and am not supporting Donald Trump. But trying to spin this as real evidence is stooping to their level of misinformation. We don't know that the Trump campaign knew about this. And we don't know that the recent videos weren't just CA lying to sell their product. But yes we absolutely need to investigate both of those possibilities.
You are right and make many succinct points. I imagined this in the context of the todo list example given in the article, and assumed there would be a sane limit on items in a list, and that each record in the database would be tied to a list ID, or user ID, or some other method to allow only pulling the items that are actually in the list.

That being said, this would not alleviate the problems you mentioned when walking the list. It would need to be arranged once retrieved either by the client, or by the backend before passing to the client. I imagined that I would traverse the list recursively to order it before passing it off to the client. This should take O(n) time, since we only need to traverse the list once, and we haven't retrieved from the database any unrelated rows (list ID, user ID, etc - there has to be some boundary in place).
Dash - How Oculus Rift Will Replace Your Computer Monitor
Many of them are staying at their parents still.
How to hold workshops that are fully remote accessible
> They don't understand the technology well enough to do it safely, so they just build it with the assumption that it's going to go FOOF someday.

Accommodating for failure modes is not lack of understanding... most chemical batteries have some inherent combustive or explosive danger, lead acid can produce hydrogen explosions, LiPo can slow burn when the layers are punctured through expansion etc.

Failure in a car is one thing (make sure it doesn't happen violently so that it can be controlled and escape is possible), but in a house you just can't afford for it to happen at all, sticking it in a separate building is a very reasonable and simple precaution for such a large quantity of chemical batteries on one place.

It's bad enough when small laptop batteries burn up, and those have to pass safety test... imagine a few crates... in your house... under high load from having to power all of your appliances.
Hmmm, how about amateur psychological manipulation that went viral because it's emotionally effective?

I think this is the risk we pay by reading the Internet? The filtering implicit in things going viral is a mixed bag.
But the last guys that made big bad weapons with unforeseen consequences weren't as smart as we are. Trust us, this time is different.
Show HN: Savefromweb.com – Download Instagram Stories, Photos and Videos. Free
How about a strong fan that blows the leaves around. Something red shows up, pick it.
Show HN: TheNoteOnline, each note costs $1
This has been the chief complaint about Telegram, and the entire reason I've never even tried using it. As long as you're trusting the corp with your keys, you're just as secure as any other site that provides chat over HTTPS.
What one parent considers reasonable is not necessarily so. For example a neighbor in our town house community considers it reasonable to allow his 5-year old and 3-year old to play outside unsupervised, including "free-ranging" across busy streets and such.
Yes, the other companies are probably just as bad, but one at a time, please. It is very hard to keep the attention of the man on the street, we should not split it across multiple companies.
Angular Universal PWA (serverless Support; AWS Lambda and Google Cloud Functions
Hello,

I would like to invite you to using Angular boilerplate created by me.

What’s inside?
* Angular
* Progressive Web App
* AMP
* Server side rendering (Angular Universal)
* Serverless support (AWS Lambda & GC Functions)
* Push notifications

Use it! Share it! Star it!
It's kinda amazing that Wansink has so much reach when his work has been the subject of an upsetting amount of retractions: https://retractionwatch.com/2017/12/28/another-retraction-ap...
Georgia House Committee Hearing on Computer Trespass Bill, SB 315 (56 Min Mark)
I seriously hope other states take the opportunity to review this legislation for similar adoption.

As a parent, the shuffle to drive or walk my bike-capable kids 0.5 miles to their school costs us time or money (to have someone shepherd them).

These days we have ways to track kids or kids have their own phone, tools like Nextdoor and crime levels are low. Why shouldn't we trust kids to be able to navigate (perhaps in a group) themselves to a local school?
Ask HN: Good 2FA backup practices
Recently I've been trying to come up with a good practice to follow when activating 2FA on new services. Obviously when you set up 2FA for an account you get 9 backup codes you can use, in the event of emergency, e.g., phone stolen.

Hypothetically if lets say your house burnt down, and it contained all your 2FA backup codes on mobile, tablet, paper, external devices and your computer what's your plan of action then?
The documentation or lack of it thereof doesn't help with that. I can't think of a single google query that got an answer when I was building LOS for my own device. Another thing that doesn't help is that it takes enormous amount of times to make a clean build and quite often some final touches to the installation file have to be made to make them compatible with TWRP etc. My point is that no volunteer has time to document stuff and because of that no volunteer has time to document stuff repeat ad infinitum.
Although reviewership is a useful thing that gets put on CVs, I can't think of a position I've ever seen where "review X papers" a year is part of the job requirement.

A more salient point about why it is important to note that peer review is unpaid is that academics, as authors, submit their work---for free---to a journal, where reviewers review it for free, and then the journal turns around and sells the article for $35 apiece.
To use an analogy, this would be like blaming the developer of an antibiotic or anticholinergic for rendering your weaponized anthrax or nerve gas ineffective. Cyberweapons can easily fall into the hands of criminals (especially given their low-bar for deployment) and the marginal cost of using them is almost nothing. For an example, see WannaCry, which used the EternalBlue vector also developed by the US.
(dust contaminated with lead)
LightSail Energy Enters “Hibernation”, Quest for Energy Storage Runs Out of Cash
Oh, I was under the impression that business relation was with some university researcher and finished a while ago. The researcher didn't delete the data, and instead brought it to CA (Facebook didn't deal with CA directly). Facebook found out some time ago but did nothing more than tell them to delete it and trust they would, without really informing anyone or pushing further.
> Yahoo Briefcase, for instance, did cloud storage long before the likes of Dropbox, Box, and Google Drive.

Ha. Yahoo! had an internal idea portal and a review team. Expanding Y! Briefcase storage was the first thing I submitted to that portal upon joining the company in 2005 (I am sure I wasn't the first to think of it, but there was no way to see previously submitted stuff).

The response from the ideas counsel was that Briefcase at the time was primarily used to illegally share music/video, and expanding personal storage would only exacerbate bad behavior. It would be in company's interest to sunset the service, not expand it.
I thought Apple was pretty good about respecting user privacy. If you opt out of sharing analytics with Apple, what information to they still gather and store?
You don't know that. Nobody knows anything because this is all spy vs spy stuff so it's impossible to know what news reports are real or propaganda or disinformation. But fwiw:

- WSJ: Russian Hackers Stole NSA Data on U.S. Cyber Defense: https://www.wsj.com/articles/russian-hackers-stole-nsa-data-...

- NYT: Israelis hacked into Kapersky and caught them using their software as "a sort of Google search for sensitive information" https://www.nytimes.com/2017/10/10/technology/kaspersky-lab-...
We also went with option 1, but sidestepped the OP's problem by not requiring the index to be unique. I guess our naive approach was pretty expensive, but in two steps, we first incremented all values from the target position, then inserted the new item. It was performant at our scale, and seemed elegant at the time.
> It's your decision whether or not you install them.

FYI Even without GAPPs lineageOS contacts Google with IMHO way too much information, for example when you connect to a WiFi network a request to Google is made.
Is this age and sex bias a silicon valley problem?

I am nearly 40 and most of the developers I have worked with in the past 10+ years have always been older than me (aside from college new hires). They have also been 20-40% female. I have spent this time working in the Westlake, Irving, Plano technology corridor of north DFW.

I would like to hear what kind of demographics people encounter by geographic location. I always hear about age and sex bias online, but I simply don't see it in my area.
Really interesting comment.

I've started working on a Rails project. I don't have any professional experience with Rails in particular.

Can you recommend any code bases I can read that meet these criteria?
You're missing it. If the original law is overbroad, it makes sense to modify the original law, not pass a second law adding exemptions where it doesn't apply. If something as innocuos as letting your kids walk home was "endangerment", there are still other, equally innocuous things that qualify as endangerment but aren't covered by this exception. In other words, if the standard is wrong, change the standard (but keep it uniform), don't add (non-uniform) exceptions for the examples that showed the standard was wrong
I absolutely agree with one caveat. I think it’s important to be able to read an historical article even though you are no longer paying the subscription.

I think there’s subtleties to the subscription model though. Will it really cover all newspapers, even the super expensive and rare ones? The aggregator will get to choose what you could read on its platform. Also, certain articles are likely to be of higher quality, so there should be a good way to “fairly” distribute the subscription that is beneficial for you and humanity.

I love Spotify. I think it does the subscription model really well, and I like how it does not restrict you. At least compared to Netflix which is super annoying with its geographic, VPN, and increasing DRM restrictions. I refuse to use Netflix (and Amazon video) because of the pain it has caused. It’s still not perfect because I want to play the songs using my own choice of music player.

There are two different services that I know of that might be of interest. The closest service that I have found is Blendle which charges a small amount per article rather than a subscription. The second is the basic attention token which, I think, could be used for this though it is much broader. I haven’t tried either.
I'm personally more concerned with the sheer volume of information that Google/Facebook/whoever collects about me. The Cambridge Analytica scandal shouldn't have surprised anyone that is remotely concerned with privacy. If the data is collected and stored, it's creates vulnerabilities to be hacked/leaked.
> It's kinda amazing that Wansink has so much reach

it's kind of amazing that he has a job
GeoCities in the early 2000's is where I first created and built something with a computer and the Internet and the experience started the journey towards becoming a software developer. I still remember using a hit counter to track how many people visited my cartoon fan-site (I was 10, 11 years old) and getting excited over 20 visitors.
> As it is now, basic, essential information vanishes along with each maintainer who loses interest in the project.

Binary blobs come from the OEM's system image, I can't recall when that isn't the case.
LtU is a pretty good resource on all things programming language: http://lambda-the-ultimate.org/
Scrub to the 56 minute mark to start. This is with regards to SB 315, http://www.legis.ga.gov/Legislation/en-US/display/20172018/S.... It is being pushed hard by the State Attorney General's office after they could not bring charges against the security researcher who tried to inform the State of improperly published voter data that was publicly indexed by Google, see http://www.cbs46.com/story/36192656/man-who-uncovered-georgi....
Thanks for coming back and sharing your success! It's very inspiring for me. I just graduated with a Mechanical Engineering degree and debating going back for a CSE Bachelor's degree but unsure if it would be worth it.
It's a relative to the RSS model [ETA: or email is maybe a better analogy]. Scaling happens naturally as both more instances show up (scaling out) and individual instances scale up.

Every instance's own business model is often somewhat unique.

My primary instance at this point is on a domain I registered ages ago that I point to a SaaS host that runs and keeps up to date a growing number of small instances. I'm their customer and I expect them to charge me fairly based on my instance usage (CPU, bandwidth, et al) appropriately subsidized by their scale versus if I was booting my own VMs/containers and running it elsewhere.

If the worst happens, I expect I can move my business elsewhere, and given I control my domain itself, I can (use a data backup to bootstrap a new instance somewhere else and just point my domain DNS to the new instance).

There are a variety in business models among instances and the people hosting them.
> with nice sane defaults

I disagree. They seem mostly targeted at low-end cloud providers who overcommit on memory and ignore application response time (gc latency). And they don't even do a good job at this.

Their configuration uses the ParallelOld gc and tunes it to aggressively shrink the heap. What that means they don't care about frequent and long gc pauses (unless you're running small heaps below 1 GB). They just care about reducing the memory footprint of the application. On multi gigabyte heaps you accept full GCs that take several seconds. They increase the number of concurrent GC threads to the number of cores. This defeats the whole purpose of the concurrent GC threads which are supposed to run concurrently with your application without stopping it. That value should be below the number of cores.

gc logging does not work on Java 9 or Java 10

If you really care about reducing memory usage you probably should do this in addition:

-XX:-TieredCompilation hurts startup perfromance, but we just established that we don't care about performance so that's fine, but easily takes 35% out of code cache

-Xss512k cuts the thread memory usage by half, this can usually be done without any issues, often -Xss256k works as well. We run Spring inside a full profile Java EE application server with -Xss256k.

And finally the most important option of them all -XX:HeapDumpOnOutOfMemoryError is missing. You absolutely, positively need this, always. It's the only way to debug OutOfMemoryErrors.
Nope, different lithium batteries have different chemistry compositions.

A LiFePO4 will happily catch on fire if you charge it with the same voltage/current curve as a LiPo(3.6v vs 4.2v).

[edit]

To expand a bit, this[1] is a fantastic reference on exactly how complicated and involved the different chemistries can be. This is talking about Lead -> LiFePo4 but a lot of stuff applies to LiPo and other variants as well.

[1] https://marinehowto.com/lifepo4-batteries-on-boats/
> it made me realise you can generally achieve the things you want in life if you focus on them

I'd be cautious here; video games are designed, artificial worlds where difficulty level is carefully controlled by the maker. They are designed to give you sense of accomplishment and empowerment, so they cannot be too difficult, whereas real world accomplishments can be brutally difficult to achieve.
That site's ads were . . . surprisingly tasteful. Got around my adblocker because they were hosted by the advertisers, not an ad company, and, while I wasn't a fan of the Samsung auto-playing video, the Mailchip ad was novel. It felt like reading a classier newspaper, which I can't say I dislike, personally. Plain-CSS ads are the way to go.
Can't hurt to send Troy an email. Probably would be a useful feature for companies, too. Could be achieved relatively easily w/ DNS validation.
Transition from Project Lead to Program Manager
Being in 2018, what it takes for a Project Lead of a Software Consultancy Service Firm to get hired and successfully contributing as a Program Manager in a Software firm who build and sell their own products. Concrete points/ first-hand experiences is most appreciated.
Google q anon posts but skip the dot com on mobile.

Seems as though something big related to integrated intelligence and politicians about to happen.
Ikeida lives mainly on social benefits but also makes a little money by writing online articles from his room.
Only focusing on Facebook's scandal shifts attention away from the real issue, which is tracking on the internet in general. Most people aren't aware of the extent to which they are sharing information.
You can root Lineage OS with one of the su downloads from https://download.lineageos.org/extras

Afterwards, you can enable root in the Developer Options.

You don't need Chainfire's SuperSU, if that's what you're referring to.
My paranoid side wonders if this is more clever marketing/pr by or for Tesla. Why headline this 'powerwall' rather than 'home battery packs' or 'rechargeable lithium-ion battery home energy storage'?

'Powerwall' is like a prelaunch version of 'Hoover' for vacuum cleaners, a brand name used to describe a generic. People have been experimenting with capturing energy from solar panels for years. We know it is fraught with risks.

Powerwalls are really expensive, barely launched and not a proven household name with reputation like Hoover. Is this ultimately a 'better choose safety and choose the known brand' gambit?
Has there ever been a time where a lawyer helped promote a new product idea? Seems like they are in the business of saying (kinda like accountants). This is a useful protective function, but can definitely cause stasis. Not sure how to balance it.
It is unpaid. A lot of reviewing for conferences is actually being done by Ph.D. students. They have to do it, whether they are on a stipend or not. Equally, a lot of reviewing is being done by (in some cases, former) academics whose current occupation does not provide resources (time) for doing peer review.
Back when I first moved out, I greatly overestimated how many people actually read coffee table books. That said, some of the Star Wars cross section books are really fun to look through.
Unlearning toxic behaviors in a code review culture – and what to do instead
> If the employer suspects a leak of information by the employee

or if they suspect any other illegal activity.

Even in EU countries where arbitrary inspection/monitoring is not permitted wholesale, there are exceptions where regulatory or other legal requirements trump privacy. Though often there needs to be sufficient suspicion of something worth looking for, I still wouldn't count that as a truly private channel (nor would I expect my employer to provide me with one).
From the court case,

In particular, the national courts had failed to determine whether the applicant had received prior notice from his employer of the possibility that his communications might be monitored; nor had they had regard either to the fact that he had not been informed of the nature or the extent of the monitoring, or the degree of intrusion into his private life and correspondence. In addition, the national courts had failed to determine, firstly, the specific reasons justifying the introduction of the monitoring measures; secondly, whether the employer could have used measures entailing less intrusion into the applicant’s private life and correspondence; and thirdly, whether the communications might have been accessed without his knowledge.

There is nothing in that case that prohibits EU companies from monitoring the communications of their employees. Half of that case revolves around legal procedural problems in the original case, and the other half is about whether the company could have fired him over his personal correspondence _without proper notice_. That case, if anything, only upholds corporate EU rights to monitor their employees, so long as they provide some trivial legal notice.

yes, EU law does protect private correspondence more than US law, but almost none of that applies to business correspondence, and the EU is just as liberal in that regard as the US.
New versions of.....?

The Google Play Store has a change log.

Websites virtually never have change logs.
How Privacy Fails: The Facebook Applications Debacle (2009)