skysight-inc/HackerNews huggingface dataset:
There are two possible outcomes with any security issue:

1) The issue is so obscure that nobody else in the world will ever discover it, so not disclosing it to anyone but the vendor is the right choice.

2) The issue has been discovered by someone with malicious intent, and every second that you hide the details from the users, they're at risk.

You can't know which case applies, which is why policies about disclosure are useful. If a vendor is informed of a security hole, and they immediately fix it, great, users are saved. If a vendor is informed of a security hole, and they do nothing... eventually users will have to mitigate the risk in their own way (which is usually "stop using the flawed product"). A disclosure deadline strikes a balance; in many cases it's pretty likely that no evildoers have independently discovered the flaw, but would be able to exploit it if they knew the details. So giving the vendor a bit of time to fix the issue is the best solution. But given infinite time, all bugs will be discovered and exploited, so the longer you wait to fix or mitigate, the more risk you take on. Therefore, I think Google's policy strikes a very reasonable balance between protecting through patching and protecting by telling users to use something else.

With that in mind, I have no real qualms with people that disclose flaws immediately (letting users be aware of their risk), or vendors that fix an obscure bug that's not being exploited slowly. In the end, if users want to be free from all risk, they should be finding and mitigating these issues themselves... anything you get for free out of someone else's goodwill is a benefit.
Note: A power law is definitely not the same thing as an exponential fit. Using the two interchangeably is disingenuous.
Does anyone know of something similar for architecture diagrams?

I've tried PlantUML's component mode (http://plantuml.com/component-diagram) but wondered whether there were any other options out there, as being able to write maintain source-controlled diagrams as code/text would make me very happy!
"Scrum is probably the worst way to build software, except for all the others."
I doubt it's where it originated, but I was using multi-select/multi-caret editing in jEdit before Sublime came around.

That and arbitrary window splitting (split any pane horizontally or vertically) are two features I really miss when they're not present. The latter's surprisingly hard to find; Sublime and VS Code don't do it (Atom does).
> Because all product decision authority rests with the “Product Owner”, Scrum disallows engineers from making any product decisions and reduces them to groveling to product management for any level of inclusion in product direction.

Only if your Product Owner sucks. Their job is to communicate with all stakeholders, which includes letting the engineering staff have their say. If the engineers feel left out, the product owner isn't doing their job.

> Scrum, in accounting for all the engineer’s time in a tightly managed fashion, discourages innovation — which typically occurs spontaneously and outside of any schedule or system of good predictability.

It doesn't. That is why there is a 'focus factor' baked in, to allow for their time to not be tightly managed.

> Scrum encourages “least amount of work possible” solutions — to conform to it’s strict predictability requirements.

No, it doesn't. The scope of a task becomes a negotiation point for assigning stories into sprints. Sometimes you do something quicker to make the sprint work. But that shouldn't be the default answer. It should just be a talking point. Most of the time, the engineers dictate the effort required to complete a feature, and if they always pick the quickest easier way.... well, then that is a problem that needs to be resolved with the team.

I could go on for every point. But I'm not seeing a single shred of evidence that this author actually understands Scrum. They seem to have been exposed to poor scrum teams, focusing completely on processes and documents, not the communications, negotiations, and discussions that are truly the heart of scrum... admittedly put within a defined structure. I'm not saying Scrum is perfect. It isn't, but you definitely are going to hate it if you have never even seen it done well.
That's bezerk. You should turn off the CPU in your computer, too, and just use the screen and keyboard. The CPU is where all the security breaches happen.
Sports athletes do this. For example players won't attempt end of the quarter half court shots since that will lower their percentages, or QBs taking sacks to not lower their QB ratings. What they do in sports is keep advanced stats. Instead of just giving a pure mortality rating have mortality rating, by surgery type.
There are three groups.

- The Elites. In current parlance The 1%.

- Their enablers. They're the next 14%. We really don't have an acknowledgement of the existence of this group. Examples would be politicians, the majoriry of the media, etc.

- Everyone else. In 1984 this was The Proles.

The 1% v 99% lens is __all wrong__. Any discussion via that lens is all but pointless. It puts the 14% on the wrong side of the line.
So is OpenCL dead? Because that's how everyone is talking. The tools you choose, and their licensing, matters!
> ... and colleagues would objectively assign a degree of difficulty score.

He asks for a level of "objectivity" that you just can't get. What do you think medicine is? Like repairing toasters? "Why don't you simply assign some objective numbers" - it's so easy! No it is not, unless you only count a set of basic and routine procedures. Even things like a broken bone vary greatly - and then add the additional variance of the people having those broken bones.

You can sort of get some objectivity when you do statistics of lots and lots of patients in many places over long periods - but the problem OP wants is to be able to make statements about individuals (doctors). Being able to say something about a population is very different from saying something about an individual within the population. "Statistics" about a single doctor are and will be full of randomness.

Besides, if they did what I quoted from OPs statement above what would probably happen is that everybody declares everything as "very difficult" (or just below) expecting colleagues to do the same for them. In Germany private insurance has a multiplier on the amounts they can charge for something. Guess what: Everything is now declared as "very difficult" (with some short fuzzy explanation), multiplier 2.3. Almost nothing is charged at the "normal difficulty" rate.

> Did they improve longevity? Did they improve quality of life?

Given that each doctor is highly specialized, and that on the other hand your GP, the one who treats you long-term, can't actually do much when there is anything serious, those numbers are mostly out of the control of individual doctors. You would have to get such numbers system-wide, not per doctor. Medicine is supplied to patients throughout their life (incl. late life) by a network, not by an individual. There also is a huge impact of ones own life choices (e.g. obesity, smoking), and no, you can't just correct for them - not individually (for populations we can). All those numbers would look terrible for doctors who treat more of the worse cases. It would lead exactly to what the article is about.

I'm not arguing against trying to measure surgeon outcomes - I'm against trying to use those measures for things they are not good for.
I guess I just assumed that Arab Spring back in 2010 was the US using social media. But not really very useful to chat conspiracy any more, although that’s not stopping NYTimes.

Also funny that they are singling our Facebook as the match instead of the other social media players. You can likely wreak havoc with Twitter and Google ads as well. Lots of ways a bad actor can misinform.
On the one hand sure, Q is just a LARP'er engaging in baiting a lot of foolish, gullible conspiracy theorists.

But, then again .. what if there really is a secret cabal that aims to bring down governments all over the world by way of establishing pedophilia networks among the members of the states being targetted? That is just as nefarious and evil an infiltration/propaganda campaign as the idea that "Q is a LARP".

Using sex as a means of usurping ones enemies has been common trade craft in intelligence agencies for centuries. It shouldn't come as any shock to any reasonably well-informed student of history that the potential for corruption through sexual deviancy has always been there, and there is nothing at all particularly resilient about our modern governments which lends them being immune to this factor. Pedophiles do conspire to establish networks of power; coverups of government complicity in such crimes is proven to have occurred, even recently - and there is really no general way for the public to govern the government over this issue, considering it is absolutely heinous, usually means that there are national security issues involved, and thus it all gets wrapped up under government security blankets.

What if Q is correct, and that there really is a perverted, evil, pedophile network, hell-bent on corrupting our governments and bringing them down through coercion? The likelihood is very high that this is occurring. It would explain the large and cavernous disconnect between establishment politics and general culture.
Of course, money alone does not fix this.

I've had a class on homelessness and public policy. I spent 5.7 years homeless. I'm the author of the San Diego Homeless Survival Guide and something of a SME on homelessness. I'm trying to develop real solutions and I'm jazzed to learn that the state I moved to last fall is trying to establish statewide single payer healthcare. I just found that out this morning.

I think single payer health care and adequate quantities of affordable housing would make a serious dent in the homeless problem. It won't fix it for everyone, but if it cut it by 50 percent, that would be awesome.
Sure, I totally agree one should be careful about their info & travel & drugs. But, that's what both @acetoxy and @cbluth were already saying.

I assume what you meant to say is that you personally wouldn't trust YouTube as a source of high quality or trustworthy information about drugs in South America, because it's demonstrably and absolutely true that YouTube videos contain information. Millions and millions of people successfully use YouTube to share and gather information on a wide variety of topics.

If you actually wanted to help someone who's trying to be careful, perhaps suggest some more trustworthy sources, or how to find them? What makes a book or person or pamphlet or phone call or any other source any more trustworthy than YouTube? Even if there were scientific research, what makes it trustworthy? Peer reviewed papers are proven wrong all the time. How does one go about being careful?
Thank you very much for your in-depth explanation, I believe the only thing left for me is to run FDB myself, sounds very promising :) FDB replacing zookeper + sth else would reduce the complexity of target distributed system, almost too good to be true.
Gods above, "tremendous" is an understatement. I don't think I'd be strong enough to work on a story like that.
By the end of a day, he reports number of lines written and committed.
I've found that "certificated scrum masters", "certificated project managers" and their ilk are the problem. Anyone who says we must follow a specific process because that is how agile development is done is missing the point.

The actual agile manifesto makes a lot of sense IMO.

http://agilemanifesto.org/
Housing.
No corporations aren't people. That headline is pure clickbait. Some rights are extended to corporations due to corporations being a group of people who come together for a purpose.
Yes, at least in the UK, we have a series of national clinical audit programmes.
Create a News App for Android/iOS in React Native
Regardless of system, you still need good quality managers.
Is it just for front-end developers?

I'm a back-end developer, but, when I wanted to indent that HTML in order to post it, I switched over to the instance of vscode that I virtually always having running in order to use its pretty printer.
For something speedy, and as programmable as vim or emacs but in a sane language (lua), try textadept.
I understand what you're saying but I'm just not sure I'm prepared to wait at a service station for an hour or more to recharge my car.

Today I drove from the south east to the Lake District - a distance of about 400 miles. I made 3 5-10 minute stops en route for food, toilet and one for fuel. I found that once I'd stopped for 10 minutes I just wanted to get going again and get to my destination. I'm really not sure I would be happy hanging around a service on the M6 toll road for 1-2 hours because I needed to recharge my car.

I don't often do long trips, perhaps 2-3x a year, but when I do I really just want to get to my destination as soon as possible.
What, specifically, is Facebook doing wrong today? How could they improve?
Thanks for clearing this out. I too was intrigued with the same curiosity.
Yes, it does, at least since 2010.
> Dear Cloudflare, please turn on ECS by default.

Cloudflare has made it clear that they won't. From https://developers.cloudflare.com/1.1.1.1/nitty-gritty-detai... ,

> 1.1.1.1 is a privacy centric resolver so it does not send any client IP information and does not send the EDNS Client Subnet Header to authoritative servers
People have always hated each other and unsubstantiated rumors/gossip/fake news have always been around too. Something about the volume of information and the speed at which it propagates makes things like twitter and facebook extra dangerous, but it's happening on whatsapp and surely text/email too. It just happens faster digitally and the pub/sub model seems to be especially bad for inflamed tensions.

I don't think we should blame the medium through which people share these things, but I hope we get to understand the dynamics and psychology of why digital pub/sub makes things so much worse than IRL 1-to-1 communication.
Then they just dodge the hard cases of each specific type of surgery. It's probably still an improvement though on just avoiding a surgery type altogether.
The Agile movement was all about dropping the process hoop jumping and focusing on solving problems efficiently, that's why it was considered extreme. Too extreme, as the one true implementation to rule them all is worse than what the agile movement was revolting against. This is how the game is played, over and over and over again; any movement that threatens the narrative is embraced, corrupted and ultimately used as a weapon against its core values.
There are process checklist reviews (http://qualitysafety.bmj.com/content/23/4/299) and medical review panels (https://mrp.ky.gov/Pages/index.aspx).
It might not need to be enforced, but it should probably be encouraged or at least advertised as permissible. There's a horrifyingly large number of workplaces where not responding up to a non-urgent email / IM within an hour or so will trigger follow-up calls or queries to a manager.
That looks very interesting! Do you have a recommended point of entry for a non-academic practitioner like myself? :)
I popped over to a different browser to take a peek. That's not an "application". It's static page with some embedded YouTube videos, and some hyperlinks. It just happens to be one where it takes about 5 seconds (on my computer) before the hyperlinks become clickable, for some reason.

I do agree that there is no contract saying you should only serve HTML on the web. But still, you can do better than this.
If you have private insurance, you can choose your own surgeon.
Good point. I saw this in Pycharm but won’t pay.
If their operations were peer reviewed for oversight purposes, assuming they can or would be willing to self-regulate without bias, so the results have confirmed qualitative meaning associated with them - then yes, I'd like to know their history, full history.
> Are you a paid anti-GDPR propagandist? You are somewhat convincing.

I remember this line of argument from the 90s.

Guy: "Actually, Windows is not that bad, and enterprises love its administration features...."

Hivemind: "MICRO$OFT SHILL! BURN THE HERETIC!"
We Should Put Fact-Checking Tools in the Core Browser
One of the increasingly popular uses of JS is to save bandwidth. Using JS, you can ask the browser if the user is on a metered connection or an unlimited one, what their estimated bandwidth capacity is, what their real resolution is, and load appropriate assets (or conditionally load content). With JS disabled, a user on a pay-per-kilobyte 360x640 cellphone is going to get assets deemed acceptable on the manager's 1440p desktop. There are already quite a few websites where disabling JS more than doubles your bandwidth usage -- and sites that are only even usable in third world countries because of JS like this -- and that's going to increase as screen and media quality grow.

Not to mention the huge accessibility benefits that can come from changing the way a site behaves (not just visually but in terms of things like tab and focus behaviour or separating components out) for disabled users. Doing that reliably and effectively for all content on all devices is much easier if you can identify the needs before downloading the content which means JS-loaded content and so it can come down to deciding whether to annoy NoScript users or disabled users.
You can choose where to get treatment and who treats you; the main issue is whether you get the timeline you'd prefer. Generally, patients will choose a clinical center (to the extent that some hospitals have stopped offering specific treatments, because their stats were never good enough - e.g you need to do a certain number of children's heart ops per year to be good enough to get good stats). If you have the option to go private, either through your insurance or the NHS, then obviously there's another layer of choice.

Most of the private surgeons are also NHS, anyway.
Sounds a lot like police work in Japan (they love their stats).
Yeah this seems to be an excellent list on how not to Scrum. Or an what happens when scrum is used by people that don't understand the spirit list. I actually scrolled down to see if it was a joke list or had a deeper point.

Scrum is actually used to make sure the dev team is part of the decision process and there is no reason not to be innovative But of course the enterprise can kill all things good
>I managed to squish it down to 7 MB

wow, what a stellar compression ratio

>Useless Use Of Cat

Oh My God No One Cares
It's Goodhart's Law in action, this time with deadly consequences:

"When a measure becomes a target, it ceases to be a good measure."[a]

[a] https://en.wikipedia.org/wiki/Goodhart%27s_law
Sigvehtml: HTML you can sight-read
In general, one should consider the audience of the content, not NoScript users, in this case.

> JS is a big security/privacy risk.

No, 3rd party JS (and 3rd party cookies, JS regardless) allow you to be tracked. And ad-blockers deal with that. Blocking 1st party JS is of tenuous benefit w.r.t security/privacy.
Sort of, yeah. It's because of the same kind of limitation: You can't get the whole image at the desired framerate, so you only get a small slice of it over time. You can see the same technique applied in sonars, some kinds of radar etc.
Question, do you use any of the Elixir linter/debugger/highlighter plugins? Have any recommendations?

I'm early on in evaluating ElixirLS and vscode-elixir but have run into some issues with both.
Can you explain what you mean by cabin fever? Is it just boredom with being inside? And if so, how does it relate to being near the mountains?
http://stanford.edu/~nadal/A-Decentralized-Data-Synchronizat...
Having been a manager, PM, and lead engineer this article really resonated with me. Scrum has a brief window of utility if a team isn't delivering at all, and has lost management trust. It also has a large window of dis-utility where everyone haggles over points, shows velocity as results, and leaves customers and businesses wondering what their engineers are doing. Trust your engineers to do the right thing on their own and they might just surprise you.
That doubtless provides some reasonable bandwidth savings on certain media sites, but I'm pretty sure the whitelisting approach is going to come out far, far ahead in general, as most ads don't load and some Javascript assets are themselves megabytes in size.

Also, IME, disabled users hate javascript. But my experience is limited to a few vision impaired folks.
Secrecy. The USAF routinely orders enough (?) spare parts for secret equipment, then scraps all the tooling. They love shredding/burning amything classified. Then the system gets extended to a longer life, and an expensive new store of spare parts gets rolled into upgrades.

Full dosclosure: old guy who experienced enough of USAF to be a touch cynical about procurement.
Scrum isn't good or bad, but the way the OP (or their company) uses it seems to be a reflection of an inflexible culture.

For example, the OP argues how scrum strips engineers the autonomy they need to get the job done and how it's super inflexible. When we did scrum with my team, the scrum master role was rotated among engineers, growing each of us significantly as professionals. We also made changes to the "core" of scrum after our retrospectives when we decided it was stuff that did not work for us. When management tried to use story points for tracking or forecasting we told them to forget about the whole thing. We added bugfixing sprints after we observed the bugs piling up.

I can go on - we made scrum work in an environment where we were empowered to do what makes sense. The crux of the post seems to be that OP has some very rigid management and devs cannot change the mindset.

Instead of complaining about scrum, I suggest the OP either try changing the culture from the team level. Or if it won't work, just get out and work at a place where there is sane management who does not drink the rigid scrum kool-aid. Luckily, there are more and more places like that these days.
I've been using VS Code as a light sql server workbench.

I have got to check out the docker features as well.
That's the spirit of pointless, offtopic shitting all over a thread. You can and should do better than this.
Yes, the system is horrendous and broken. There should be complete oversight and full transparency for self-regulation purposes, which includes ongoing learning and education, and get lawyers involved once the self-regulating is found to be inadequate - such as a surgeon who repeatedly makes the same mistakes and hasn't bothered to learn or care to improve their skills, or prevented from continuing.

From my own struggles of trying to find healing for chronic pain I have, I have realized that doctors/professionals are selected for for their memorization and not for critical thinking skills.
Last time when nobody cared about a broken nest of security holes in the center of the Web, a small minority had organised a campaign to annoy people with complaints.

I mean Mozilla's campaign asking users to send complaints to each and every webmaster writing IE5-only sites. It somewhat worked.
Indeed, although all the anecdotes in section 3.5 refer to instances where the temperature outside of the body would have been below freezing.
You’re offering a product for 19/yr, but will this product exist for that long? Lack of privacy policy, hosted on glitch, and you’re constantly throwing things up on there.

Things noticed: SSL is not enforced, therefore your payment page is being served plaintext. Telegram already has this service embedded for free. You’re using a free host, with no custom domain, what if they decide to disappear next month without notice?
Do not Doctors Surgeons disclose the potential errors and things that might go wrong in the US? I have had several ops in the last 18 months in the UK and they always go though what can go wrong and tell you the odds.