skysight-inc/HackerNews huggingface dataset:
Maybe I don't understand the second option, but it seems to me that if you do the second option and a wrong email address is provided in step 1, then in step 2, the wrong person can take ownership of the account and provide his own password. So I agree with codetrotter that the third option is best of the three, to protect the two people from each other.

The possible disadvantage I see with the third option however is that if you are at a service desk, and they are trying to sign you up for a membership of some sort, they can't complete your registration on the spot. You would have to go home and use the computer to complete your registration (unless you can use email client on your smartphone). Which means they may lose a possible member if they don't ensure that you finish the registration right there and then.

For that reason it may be better to collect the email address, all customer details, and the desired password (typed twice). Then when the confirmation link is sent, the confirmation link should take you to a link that asks you for your password again (once) before your account is validated. This ensures that the person at the service desk is really the person using the email account to do the validation. Mere access to the email account should not be enough. The main advantage here is to make sure as little
work as possible is left to the customer to do by himself when he gets home. I agree that this is a lot more messy than Doug Webb's approach, because the only accounts in that approach are validated accounts.

However to the extent that one does not want to lose a possible new membership because someone went home and decided not to continue the process because it is a lot of work, it may be worth it.
Sounds like you're writing a design pattern!
Quick guide to Internet privacy for families
You may be able to get into a trial. In a therapeutic setting, folks are often able to release the underlying trauma and move beyond it. A great book about this is Trust, Surrender, Receive by Anne Other (AnneOther.com).
Travel is overrated, and environmentally catastrophic. Enjoy where you live, or if you don't like it, move.
Still using it and love it...certain services aren't working anymore though as they're being discontinued.

Very stable and responsive on hardware nowhere near what the current gen Android had.
> The DMCA causes huge costs for search engines because of all of the bogus takedowns

The search engine could ignore all takedowns and be in exactly the same situation as it would be without the DMCA; the safe harbor provision isn't a mandate on them, it is a benefit to them. They deal with takedowns because the cost of doing so is less than the cost of copyright liability they would have without the DMCA, which means the DMCA is saving them money, not imposing a cost.
Conspiracy videos? Fake news? Enter Wikipedia, the ‘good cop’ of the Internet
I have a very short email address and get lots of these. What I do is immediately log in to the service and change the password. Then, if possible, I log out any other devices that are logged in.

Then they can never access the account and continue to to use the service.

Where available, I will delete the account as well.

I found that if I don't do this, then I am just going to be receiving notification emails forever from that account.
The issue with biometric leaks is that it could come from anywhere, like this leak from the PDS system (ironically) in Gujarat[0]. Using biometrics for authentication is like forcing everyone to use the same password everywhere.

Aadhaar isn't the only biometric database in the country.

[0]: https://www.medianama.com/2018/02/223-gujarat-bleeds-biometr...
>> Lived experience is critically important, but it does not trump data.

I would argue that for an individual, lived experience trumps all data - for them. Data is an aggregate of individual experiences. A single persons experience is a data point, not an anecdote.
Ask HN: Any resources or tips to making a really good (Tableau) dashboard?
This is great! About 6 years ago I created a worms destructible terrain using canvas. Still up on my website all these years later, no promises on code quality though :)

http://jastanton.com/experiments/Destructible-Terrain/
It is on a UIDAI-hosted system that has access to the CIDR, so it is possible.
I asked for quotes and got:

“Shapiro and Yiannopoulos have absolutely said fascist things.”

So no quotes then? We’ll just take your word for it?
The Godfather was pretty close to the novel, with much dialog line-for-line identical. The main difference was the subtraction of a few egregiously daft subplots.
WhatsApp lets you delete the recipients copy of a message
Anytime this happens to me, I immediately log in and change the password.

They can work with customer service to get the email corrected.
The article shines light on three separate failures on Netflix's part:

1. Canonicalize email addresses

Whether or not dots or +asdf is considered okay, an email address used for identification needs to be canonicalized in order to avoid duplicate sign-ups.

2. Never leak information through sign-up forms

A login attempt either succeeds or fails. That is all the user should know. Telling the user if the attempted email address exists or does not exist is a privacy breach and a security breach as demonstrated in this article.

3. Never assume ownership of an email address until it is verified

Some services verify email addresses at some point in the user flow, some never verify, and few verify at the right point. The best sign-up flow I've seen is Slack where setting a password is part of the email verification flow and a user cannot set a password and own the account until they have verified the email address.

Thus, sending transactional emails beyond verify your email or reset your password before the email address has been verified opens one up to security breaches as in the case of Netflix.
No, no and no. If I watch even 10 Youtube videos without building anything, I give up.

I'd love to learn electronics. You know what I need? ONE Youtube video, and a single kit I can buy on Amazon.com to build what's shown on the video. Then a second video, and an exercise (either with the same kit, or something else).

That's how I would stick to it.

Too often, people like you think that the issue of learning is about finding information. It's not! In the age of internet and being one or two click away from everything, the issue is simply to keep the motivation high.
This. I tooled around with it a little bit using a data set I often use for teaching (from Klein and Moeschberger's survival analysis text) and it was remarkably easy to get an answer without any clue as to what was happening, and that's...not reassuring.

As you note, getting an answer and getting the statistically correct answer aren't the same thing.
I think it's pretty clear that Moorcock is showing how ambiguity is an important or even necessary part of the human experience. He himself doesn't know for certain whether he was kicked off due to

A) Kubrick not knowing for certain who he was, or

B) Kubrick knowing exactly who he was but aiming to prevent Kubrick's earlier proposals to collaborate with Moorcock from coming into public view.

I notice that two different commenters here have reached two totally different yet sensible conclusions, based on exactly the same evidence. To me, Moorcock seems to be staking his flag into the ground over the inalterable need for truth to be filtered and interpreted by the human psyche - and that if even direct and worldly concerns like this have no straightforward single answer, the idea that our species might encounter spiritual or transcendental truths without ambiguity over what they actually mean is pretty tenuous.

But I could be mistaken.
Analogies can help but if taken too far, will provide only illusionary knowledge from superficial similarities. Consider, if you trace out the hierarchies induced by interactions in biological networks and then do the same for an OS's call graph, you find quite different topologies reflecting their different priorities. In computers, in part, efficiency and reuse. In biology, robustness, minimized interdependencies, developmental stability and more.

There are things that concern our electronics that do not matter for biology and there are many things biology must allow for that our hardware cannot. Tying things down to the peculiarities of our systems too narrows the scope of applicable models and understanding. Sometimes it is more useful to think in terms of stochastic differential equations than in terms of operating systems.
A government website with a decent mobile version. Is this a first?
I don't know. Looking at the mental landscape of a transhuman, pretentious late-sixties posing is probably the best you can hope for.
Why scrape when, at least in the US, all the major players (USPS, UPS, FedEx) have free API that you can use to query tracking information?
Yes, I agree. My point was just that the dots did have an effect in the initial submission story.
Which region/country are you referring to? What's the use case?

IANAL, but I used to work at one of the large transportation providers. For the high-volume tracking use cases, web site scraping probably won't cut it (too slow, probably get blocked by the carrier). Most high-volume trackers used the carriers' APIs. It was sort of a love-hate relationship and my carrier would sometimes block high-volume carriers who ran refund services on behalf of other customers.

In short, whether it's "legal" or not, if you are doing a high volume of tracking for refunds you will be at the mercy of the carrier who could cut you off at anytime. A firewall against that is to have a bunch of high-volume paying customers of that carrier who would pitch a fit if your service was turned off.

[Edited for clarification]
Don’t discount lithium, it may turn out better than modafinil for you.
Ahh, thanks for the clarification. My bank supported e-Verify (EVC on the link you gave) via netbanking so it worked out.

Apparently, there are other EVC methods as well (ATM/mutual fund)
Neither was Microsoft a monopoly when they got their eyes sued out and a consent decree slapped on them simply for making their browser the default browser on their own OS. A lot less than Google did to stifle competition from WP.
Actually, its interventional cardiology for heart attacks and neurointerventional surgery/interventional neuroradiology(NIR) for strokes. (Not IR which cover non-neurological and non-cardiological interventional procedures).

I'm a NIR and most of us are not paid per surgery/intervention. Also these interventions tend to be loss leaders in terms of hospital reimbursements. Funding for stroke centres can be profitable but that's a very long discussion.

In addition, at least 7 randomized clinical trials have shown the benefit of thrombectomy in acute stroke (actually something of a modern medical technological miracle).
Not only that, but apparently he was able to change Eve's account details without having to enter a password.

If instead Netflix had prompted him before allowing him to change the credit card, it would not have worked, because he wouldn't have known Eve's password and Eve wouldn't have known his.

All around very bad security design on Netflix's part.
For those interested, the DAWN Trial (http://www.nejm.org/doi/full/10.1056/NEJMoa1706442) provides more detail on the value of thrombectomy, especially in cases where the collateral circulation is strong.
Yup! I would just like people to stop blaming the medical profession for us not being quite there yet when it comes to clinical applications.
I wonder if there is some analysis of how the administration of science has changed to be more results oriented.
Thank you I appreciate it a lot.

Thanks for the suggestions. The thing I like about youtube is unlike other things like books, articles, that I always bookmark to look at later, I can immediately immerse myself into youtube.

Any recommendations for home improvement? Or maybe other hobbies you find interesting like watch making?

Thanks again!
It's a user's problem. If user is willing to click through some unsolicited email and pay, he will probably click on the verification link too if the service would send those.

It's still a statistics game. Not everyone would pay without verification and not everyone would click the big green button in the verification mail, but some people will without realizing what's up, just like people fall for Nigerian scams mails.

There's no technical solution, only education can help.
I would prefer it not be first tried in a country with such a large population...
Two (weak) reasons I can think of: 1. If doing a low-volume of tracking requests, it could be an easier implementation instead of learning the ins and outs of an API. 2. No carrier approval required for web scraping, unlike the APIs.
The google fi number isn’t your T-Mobile phone number. There is actually a way to find the actual t-mobile phone number that Fi forwards to, perhaps you can get that and use it instead.
We're going to need more than assurances to see your point.
... which is exactly what I was saying? When you don't know how to cure something, you treat the symptoms.
This comes up every so often here on HN:

"Is Meteor.js dead?" - 19 days ago
https://news.ycombinator.com/item?id=16622231

"Is Meteor.js still a thing?" - 5 months ago
https://news.ycombinator.com/item?id=15624623

"Is Meteor(JS framework) is dying slowly?" - 1 year+
https://news.ycombinator.com/item?id=13303345

Personally I still use it but I think MDG made a big strategic mistake in organizing its marketing around DDP (its data protocol that allows for "real-time" updates where the database pushes messages upon update) when I find its biggest assets are its single ecosystem and overall speed.

It's hip to say Vue.js is better but you'll still need an underlying framework -- Express, Nuxt, Koa2, etc. Even if you like the features of Vue better you're likely making the life of some future developer difficult by pairing two relatively unknown frameworks whereas at least with Meteor they only have to contend with a single system.

I also like Meteor's integration with Cordova and have built a single codebase that my company uses for a website, iOS and Android apps. For a very small company like mine having just one technology to deal with the website and mobile apps makes Meteor 100% worth it.

MDG is very active in supporting the platform, just see https://github.com/meteor/meteor/releases

But I can't speak for every use case, nor am I measuring commits or StackOverflow questions so maybe it is declining. But anecdotally it isn't from my POV as a Meteor user.
Human language features are, by and large, egregiously detrimental to programming languages.

An expert speaker of one human language can require years, even decades, to become equally proficient in another.

Woe to a programming language which sucks that badly.
If mdma makes you friendlier, does that mean that people who are shy are suffering from friendliness deficit disorder and can I get a prescription for it.
They were late, and while the Tile/Metro concept seemed to work OK on the phone, they also awkwardly forced it into the desktop version of Windows, where everyone I know hates it compared to the old Windows-7 style start menu. So people learned to hate Metro/Tiles, and when they saw it on phones at the Verizon store they looked at Android or iPhone instead.
Psychiatric meds in general, and SSRIs in particular, are super idiosyncratic.
He said in the post that he was able to reset the password because the account was linked to "his" email.
Are players prohibited from having relationships with other players? Or is it only the cheerleaders who need to be "protected" against exploitation?
Hardcore History’s latest podcast is one about capital punishment through the ages. He touches on some of the stigma or awe these persons were given.

It’s not for everyone as Dan is very descriptive.

https://www.dancarlin.com/hardcore-history-series/
Crypto mining of crypto currencies could influence Venezuala economy?
(Note: This is not a "pro-crypto" post. I am not a crypto proponent nor do I have any libertarian ideologies. I hate the price increases on GPUs, I laughed at Bitcoin when it hit 50k or whatever, etc.)

Shouldn't we expect to see crypto mining of cryptocurrencies (yes crypto-crypto mining) to become prevalent in Venezuela at a scale to influence the economy?

Basically, my argument is that we should expect to see a massive amount of mining from small to moderate scale rigs in the economy. Using the efficient market framework, crypto mining can be seen as conversion of electricity (and the amortized value of hardware) into cryptocurrency.

Because of Venezuela's currency collapse (as well as standard issues of the government propping up electricity prices), there's a huge gulf between electricity prices and the value of USD. My guess is that if you look at the figures, the incentives are truly enormous. This is being exploited by the authorities, but separate to this, but I would expect to see lower-middle class and up to get into mining in a huge way (albeit individually at a low scale).

This is because if I can stash a small rig somewhere, then I can produce currency.This seems like a viable way to save funds at a personal/family level.

If any of the above logic is true, the following questions are interesting:

- Is anyone seeing evidence of this?

- Will this occur on a massive-enough scale influence the provision of electricity?

- Is this one actual use case of crypto currency that can affect history in a benevolent (or at least neutral) way by "democratizing" wealth?
I know the iPad in Portrait and probably the iPad Mini in both orientations resolve to what is considered a "small" screen by Material Design guidelines. It could be that Google's search result display are based on the size of the screen you have and the iPad Mini just may fall under what they categorize as a mobile device.
>Is Meteor.js dead?

Yes.
It's more the original KYC law I was asking about. I find the attempt to deprive people of anonymous communication problematic and I'm curious as to the arguments that have been used successfully to do it so I can better argue against them.
Thanks for sharing! You thought this one through more thoroughly than I have. And your closing line about it being impractical is unfortunately all too true.
Equipment there occasionally have phone numbers and other identifying marks in non-obvious spots. Multimeters have traceable calibration certificates and flash drives and laptops are wiped by hand by something called "Operations", a separate part of the business. They are incapable of handling SAS drives, and they are sold unwiped. Don't worry about that.
Interesting - I have bipolar too (that is, bipolar II), also misdiagnosed as pure depression for a while. However, the SSRI didn't flatten my affect, but instead amplified my hypomania to where it was severe enough to be diagnosed. Now I'm on lamotrigine and sertraline, and the two together keep me stable and up.
Meteor 1.6 supports Node 8.9.x. What's questionable about Meteor's use of Mongo? Reading the oplog? You don't need to use the reactivity if you don't want it. There is a simple API to either use polling or turn off reactivity altogether if you don't care about it.
I think when you wrote "gregarious," you meant "egregious."
And comments:

Muhammad.(I am the greatest) Ali @(the)Vegas.WBA

(an example lifted directly from RFC-822, apparently written by a madman in love with 70s parser theory).
Why would you be running SQL queries in R, a language with built-in support for handling tabular data?
Are you sure it wasn't sold at a loss even then, just to try to establish market share?
Er, ok, I formed my opinion as to the relative liability cost as the executive in charge of DMCA of a search engine that raised $63mm. I dislike appeals to authority on HN as much as the next person, but you sure seem confident at knowing something about small search engines that only a small number of people actually have experience with.

And if you've never gotten a DMCA takedown from Perfect 10, you probably don't understand the true terror of the DMCA process.
Fully agreed. Question is, what's the best course of action? Is this common?
The desktop version is ridiculously huge though. I need to zoom to 66% to get a reasonable view.
Did anyone else read this title as implying that heart attacks were a potential treatment for strokes?
Travel is fairly trivial environmentally. Having a long commute by car is worse than traveling around the world by air every year which is extremely uncommon.

On average a passenger mile on a modern jet uses significantly less fuel than driving that same mile.
I think the idea is that you tell the compiler to assume that this particular chunk of code does no wrong, and compiler shouldn't bother to try to prove it. Of course if you lie, then everything else can break down.

But in general you're incentivized not to lie (and not to trust liars), so while its not provably "safe" to use, we can show everything else is safe as long as the assumption holds.

The type system is sound, where it exists (in "safe" rust), and not sound where it doesn't (in "unsafe" rust).

In the same fashion that nothing is sound if you don't trust your cpu to perform primitive operations correctly. But if you do trust it, then the type system has a chance at being "sound".
> or that R is available for free.

Along with Python and Julia.
As citizens of Earth, our responsibility is to retain the stability of the system or to positively grow the system. Ambitions are often completely in the way of that. Many ambitious projects resulted in colossal damage to the environment or other people. I do not believe that "citizens of Earth" and "huge ambitions" really even belong in the same sentence, as a person with huge ambitions is focused on the short-term progress of the individual, and not the Earth they are a citizen of.

Being happy from fulfilling your dreams only works if your dreams are fulfillable. If they're not, you might very well end up rather unhappy. Happiness in this sense often comes down to a balance between legitimately required things, and managing expectations. Ambition, or large dreams, hardly seem required for happiness, and I'm inclined to say are actually detrimental to it.

Happiness and success should really be kept separate, and both be ends to themselves. A given person deserves their happiness, and useful projects should be completed because they're useful. Deriving happiness from completing a project means you have now made the project all about you, and from here comes corruption, such as continuing a project that has lost its usefulness, taking advantage of other people, or manipulating p-values.
And usually aren't.
Ask HN: Clever ways to run a media-heavy website on a budget?
I've been taking a break from working to relax and visit some friends in a few countries. So I don't have a lot of money, but with my newfound free time, I've been inspired to take a shot at a few ideas I've always wanted to build.

One idea is particularly media heavy. I have 5+ TB of media that I'd like to build something around.

Services like S3 are pretty expensive, especially bandwidth. Backblaze has been trying to market their storage solution (https://www.backblaze.com/b2/cloud-storage-pricing.html) against S3.

But I can get even cheaper by using low quality hardware and bandwidth like Kimsufi's 2TB machines for $10/mo (https://www.kimsufi.com/en/servers.xml).

Does anyone have another ideas for stretching a dollar?