skysight-inc/HackerNews huggingface dataset:
I think it's on purpose, because it's a fake marketing site designed to steal the money of gullible people.
I don’t mean killing IPv4 - I mean all infrastructure and ISPs supporting IPv6 and treating IPv4 as legacy. Like V12 gasoline engines. They exist and are even produced today but the world has pretty much abandoned them.
It's sad that HPKP is being deprecated. It's one of the best ways to defend against an attacker with bgp hijack capabilities assuming you pin your own public key. Difficult to scale though and prone to disastrous misconfiguration.
Travel Question: Are You a Thinker or a Feeler?
thx for taking the time, will consider the feedback in our re-launch (we were working already on making our pos better) this thread took us by surprise while reworking it
> HSTS just means use HTTPS. It doesn't validate the previous cert. That is HPKP which almost nobody uses unless they control the client, such as mobile apps.

I thought HPKP is TOFU, not (necessarily?) preloaded? Meaning you don't need to control the client for the client to be able to take advantage of it?
I like to pose technical problems that can scale to the candidate's level of experience. If I sense I'm hitting the candidate's comfort level, I can back off. Otherwise, I can take the problem even deeper with more technical questions. Either way the candidate still has a positive experience.
1-2% on a large scale is pretty significant. If each request on average takes, say, a second, and is then reduced by 1-2%, that'd be 990ms. 10ms saved per request.

Let's say that on average, 5 uncached pages are opened per day per chrome-mobile user. I don't feel like looking up the total amount of Chrome-mobile users, let's estimate that at 500 million.

5 page loads * 500,000,000 users * 10 ms = 25000000000ms per day saved, that's 289 days of page loading saved on a global scale per day.

I don't personally think measuring the improvement in terms of time is very interesting, it's very hard to interpret, but each ms of loading takes up a certain percentage of your battery, the amount of electricity saved daily on a global scale because of an improvement of 1-2% is fairly significant.
> Even Science, like CNN, doesn't know correlation from cause.

This is factually incorrect, aside from bringing CNN in for absolutely no comprehensible reason.
Maybe it'd work to just timebox the task, i.e. 'work on one bug for an hour', along with 'document everything you find and learn' (and add it to the public issue). I'm a habitual documenter and I could imagine something like those 'papertrails' being a useful way to evaluate someone's thought processes (and written communication skills).
> The account number is literally on the bottom of your checks. It's not a secret and shouldn't be treated as one.

Both parts of your second sentence are true, but, I think, irrelevant in practice: much like the SSN, which isn't meant for and shouldn't be used for identification but nonetheless is, the account number shouldn't be treated as a secret but is, in the sense that banks permit withdrawal activity on the basis of just the account number. They shouldn't! But they do.
It would really mean something to all twelve of us.
This might not be completely true. It would be trivial to determine who is requesting the data dump and include/exclude content based on that.
"implement __dir__ for Tensors, so that editors can automatically auto-complete and query for the possible fields in Tensors"
This will probably be the most underrated part of this update. Used to bug me quite a bit.
Sounds like someone who never understood statistics, still doesn't, and doesn't want to.

A particularly glaring issue is this offhand comment:

> this is a statement about what happens when the null hypothesis is actually true. In real research, we don't know whether the null hypothesis is actually true. If we knew that, we wouldn't need any statistics! In real research, we have a p value, and we want to know whether we should accept or reject the null hypothesis.

That isn't a question that any statistical approach will help you with. There's a reason we talk in terms of "rejecting" or "failing to reject" a hypothesis. We don't do statistical tests to accept hypotheses, only to reject them.

The concept of accepting one hypothesis based on a comparison between it and one other hypothesis is ludicrous on its face, suffering exactly the problems associated with Pascal's wager.
Urchin [1] was a popular one. It was bought and killed by Google.

[1] https://en.wikipedia.org/wiki/Urchin_(software)
Can someone explain why the average user would prefer this over using venmo?
> 3. Erlang runs on beam which is a well established VM that has years of development behind it making it a robust core for your project compared to some other operating systems that you may load onto your RPI.

Not sure. Of course, the BEAM VM is robust and good for the things it's good at, but I don't think it's much more "robust" than, say, Linux, which seems pretty good, stable and robust these days. I'm not talking about software that runs on Linux; though the coreutils etc are pretty stable at this point (understatement). Linux is a fine platform to run your project on, and I claim it's no less robust than BEAM is.

Nothing against your other points though.
If you have RSS on your site you can use the search script I made for my static web site/blog: https://www.webtigerteam.com/websearch/
Earlier discussion: https://news.ycombinator.com/item?id=14717182
Too many people have foot-gunned themselves with that one. As someone who has to readily fight technical fires for other people (when they should have googled their problems) I am glad to see HPKP go.
Surveiller un telephone: oui c'est possible
Show HN: Facechart App – keep a record of your looks
HN might not like to hear it, but what this hive mind likes to think of as "hot stack" - React, Node based software in general, etc - is not even close to the "hot stack" of almost anywhere except in the microcosm of California around SF.

At the end of the day there will still be a dozen programming jobs in .Net or Java to every one in the latest and greatest web tech. In equal parts because on one hand finding people who stay contemporary with the "latest and greatest" is expensive and because businesses don't want to use the latest and greatest if it means changing the software they already wrote twenty years ago.
Hunger Is a Gatekeeper of Pain in the Brain
Totally agree. As someone familiar with their scale model tests, I can attest to them knowing very little about what they are doing. I will/cannot not go into too much detail, but (1) not wanting to listen to any wave experts and (2) them expecting a failing(!) scale model test to magically work on full scale are laughable and major red flags.

The only reason the project has gotten so much funding is because it allows companies to buy an indulgence of sorts and clear their conscience. I am 100% certain it will not work, and will actually pollute the ocean more, for the "machine" itself will turn to waste.
One of the best articles covering this issues is Meehl[1][2]. You can find discussion in various places like Gelman[3] and Reinhart[4].

[1] Meehl, Paul E (1990). Why summaries of research on psychological theories are often uninterpretable. Psychological Reports, 66(1), 195–244.

[2] http://meehl.umn.edu/files/144whysummariespdf

[3] http://andrewgelman.com/2015/03/23/paul-meehl-continues-boss...

[4] https://www.refsmmat.com/notebooks/meehl.html
We should pay fishing boats to haul in garbage.
Cutting a product often comes with layoffs. The other products may or may not be able to support the staff that were working on the products being cut. Obviously the larger the company is the more likely there are other options aside from layoffs.

In this case I expect he might have made a spot for those employees working on a different product, but that's not certain - technologies & skills were different & the vertical markets were completely different.

And in this specific case, the two staff thought it was an amazing opportunity for them - I think their short-term salary went up & they got a lot more flexibility plus potential upside if they could grow the business even slowly. Obviously some downsides in terms of benefits, etc. But even if it didn't work out it would have been a pretty good line item on their resume. :)
people need to lookup what "middle class" actually means. what's being banded about in this article is nowhere near the definition of middle class.
HSTS does prevent clicking through the warning. Here's a test page: https://subdomain.preloaded-hsts.badssl.com/
I think that you're misunderstanding the spirit of the "full force" comment. The fact that I'm subject to the "full force of the legal system" to with regards to preventing murder, doesn't justify every new regulation and its effects.

Does the law prevent it, if I don't want to spend time adding a full account verification system for personal data dumps, permanent data deletion, and other requirements?
Maybe. I've deleted it now, but the headers looked OK to me. If I'd actually ordered something (e.g. it had come a day earlier) I'm sure I'd have taken it as being legit.
Maps are the biggest reason I still have a data plan. We even already have a GPS with a giant screen, but when I'm in the middle of nowhere and need to find the nearest gas station/restaurant/whatever, the dedicated GPS is useless.

Even the mere act of inputting an address can be so painful on these GPS models that are so slow, especially because most don't have touch-capacitive screens but rather pressure sensitive ones. Leaning forward to reach it across the dash, it usually registers about 70% of my "key presses".
Lot of people want eink on a laptop (including myself) - mostly for the benefit that it's readable in the sun and low power. My understanding is the refresh rate is still too slow and the cost of a large panel is pretty high.

I'd just grab a used thinkpad, chromebook, whatever and treat it as a dumb terminal. Pretty much how I used my laptop these days, ssh -X to a powerful machine and go. emacs --daemon / emacsclient (and of course a couple tmux/screen sessions) means I never lose my state.
I think we are thinking of something different. AWStats?
Well, there are tons of people that use facebook to the smallest extent possible and that only because they are forced if they want to be informed of certain events etc. This is a huge step in the right direction for a lot of people.
> If you're not working in the hot stack, you're not going to have job security

What do you think happens to all the software written in languages / frameworks after all the hotshot devs have moved on? They still need features and maintenance, and they’re not rewritten nearly as often or as quickly as people want to think.
This is awesome ! As a largely self-educated engineer I recall feeling (and still do) that most of what I was missing from taking online courses was the « lecture hall » feeling, having discussion immediately afterwards, &c. Nice work !
Even Steve Jobs is disposable.

How many here remember where they were and what they were doing when they heard Steve Jobs passed away? Almost like being able to recall where you were when 9/11 happened.

When I heard of his death I was shocked, I wondered how Apple would survive, how the world for that matter would move on? But sure enough the next day the sun still rose and and the earth still rotated. Today Apple is doing just fine without Jobs and is making record profits. Everyone is disposable and money will always make the world go 'round.
Survivor Syndrome to the T. It's a part of our modern life I'm afraid. It could be a lay off. A car crash. Any event of trauma where you didn't feel in control. I've been laid off 3 times now - there's not a lot of ways to spin it. Rather than trying to find it as an opportunity or BS any it all it's just best to say it really sucks that are minds can mess us up that way. It just sucks. Leave it at that.
https://www.instagram.com/p/BgHeTAjFlmZ/, https://www.instagram.com/p/Bdxps6lHBE2 are not renders, yes we have working versions of phones. We're not accepting any money before youtube reviewers post their reviews (June) for now pre-ordering right now just reserves you a spot
It looks like Amazon announces /23s, but there were announcements for the more specific /24s today, starting from around 11:05:42 UTC, the routes were withdrawn at 12:55:35 (to be more specific, that's when RIPEs probe saw the changes).

https://stat.ripe.net/205.251.192.0%2F24#tabId=routing

As far as I know, most of ASNs only filter routes coming from their direct customers (if even that and even in that case they are likely to accept those prefixes from their own peers), so once route gets into the tier 1 ISPs routing tables, it's going to be propagated pretty much everywhere.
No OP, but IMHO GitLab is getting quite heavyweight and that's why people are looking for more lightweight alternatives.
Pessimistically, they won't.

Optimistically, they solve consumer micropayments by allowing the unbanked to send and store money via WhatsApp.
Not really disagreeing with you necessarily, but you can hack pre-registration too, in a way that becomes more tenable with smaller studies, which benefit less from pre-registration anyway.

The tables are misleading too: of course p(h0=T|p<.05) is going to be about 0.50 if your power is 0.50 and p(h1) = 0.10. That is maybe the bigger problem than p-values per se. Also, he fails to compute the other cell, which is p(h0=T|p>.05), which ends up being about 0.95. The problem in that table is have no power to detect anything.

In real life, you don't know p(h0)--that's the point of doing the study. So Bayesianism doesn't really help you.

The real problem is lack of power.
> But MEW doesn't have HSTS? I would never use it personally on a public Wifi, but many people will for sure and they have no idea they'd be MITM'd.

Even without HSTS a bad actor would have to either trick a user to install a root cert or trick a certificate authority to generate a cert for the domain. Both of these are possible and have happened in the past, but they're also are a requirement for the attack you mention that you seemed to have completely forgotten about.
MIT: Tangible Media Group
I am totally looking for a phone like this which serves the minimalism purpose.

All I need is Calling, SMS, Whatsapp, Browsing (HN), News Occasionally, Email, Calendar, Navigation (maybe Uber)

Apart from the Black and White UI and amazing looking device, why is this any different than installing Copperhead[0] on Pixel XL and sideloading chosen apps?

https://copperhead.co/android/
Show HN: App to find local cricket teams nearby and schedule matches
This is some leftist shit. The C level executives are also disposable. The company itself is disposable. They are providing some product and service and trying to convince people to buy it.

So you feel powerless eh? Try creating a successful business. THEN you will feel really powerless.
Awesome! I dumped Disqus and Google Analytics earlier this year, too. I hadn't thought about Google Fonts, so I'll dump that soon, too.

Since you are using CloudFront, I highly recommend http://s3stat.com for analytics. It grabs CloudFront's (or S3's) server access logs and visualizes them.

For search, I like this method Mat Hayward uses for Jekyll: https://github.com/mathaywarduk/jekyll-search
Dump the site contents out into a JSON file with the titles and links accessible, crawl through the JSON file with javascript whenever someone runs a search, then display the results. I know you use Hyde instead of Jekyll, but you can port over the general idea.
That's reasonable, but at the same time, unless it's a top-secret clearance job, don't threaten me with doing web development on an air-gapped machine. We both know it's absurd, just don't do it.
This is the link you're referencing, right? I also found it a useful model of how social and economic ranks can substantially but not completely overlap. https://web.archive.org/web/20151006183427/https://michaeloc...
Assuming that there are about 2 million Chinese who are millionaires or higher, your annecdote only affects up to 0.11602610587% of the population
Your opening paragraph on its own makes me wonder how this is not the top comment.
Standards are set by experience; the better your experience, the higher your standards.
That's the idea :) We welcome your feedback on our privacy policy: http://www.getsiempo.com/app/pp.html
> I do think you have a point in that there should be marketspace for what the old Nokia was - something that could stay on all week without babysitting the battery.

There is, besides aliexpress which has a huge selection (including nokia knockoffs) most carriers have a couple super budget non smart phones.
Why do we need need human intelligence? To solve problems. Many of the world's problems need vast amounts of intelligence to solve, more than we can find people to do. Existing software already helps, and AI has the potential to help more.

Some big projects that are vital to the planet or society where AI is likely to help are:

- Getting carbon-free power. We need a lot of brainpower to scale up solar panel and wind turbine manufacturing processes. There are many 1000s of engineers working on this now, but it might take 10 or 100x more to solve all the problems before the planet overheats. AI might help make breakthroughs in other technologies, like fusion.

- There are about 90,000 scientists worldwide working on cancer. We've found partial cures for some, but lots of people still die. We need 10x or 100x the rate of progress. AI drug discovery and cancer treatment planning have huge potential. The same goes for most serious diseases.

Pretty much anything you've read in a science magazine of the form "Technology X could improve Y, but it's not ready yet" is a candidate for how the world could be better with AI.
It was my impression that vacuum tubes also tend to be more readily able to handle high voltages than transistors (whether absolutely or for a given price), which might also be a factor; the tube amp might just be able to pump out sound at a higher volume, which tends to be a big deal for live performances (especially outdoor performances with large crowds).
But, the entire reason this case was brought is because Congress changed the law.
Same thing happened to me. I was taking my first vacation in two years and I got a call just after lunch. My boss said, "I need to let someone go because our numbers are down from where we want them to be. And it's going to be you, because you'll probably have the best chance of finding a new job."

Highest grosser in the region 5 years straight. Aced the performance review. Brought in several clients, a few of which are YC graduates. But because Bob in NY wanted us to hit 25% growth for the 5th year in a row and we were only going to reach 5-10% YOY, someone had to get cut so the partners wouldn't see a drop in expected take-home payments. And I was the most expensive employee in the region.

Fuck loyalty.

On the bright side, my new job was only a small pay cut, but literally half the work load and all the vacation I could ask for. In a sick way, getting laid off worked out for the best. But those weeks between jobs were the most stressful of my life.
Strategy and Tactics in Problem Solving
There might be a small preload list for HPKP. I'm pretty sure google uses key-pinning on their domains on chrome. Not sure if they use HPKP for that though.
Salaries are not high in Europe compared to the US.
Is this a way for the EFF or something, to attack patent-trolls effectively? It seems too good to be true from the descriptions in this thread.
I thought it worked retroactively too.
It serves to build and explain the neo-scientologist motivation of the antagonists. And in my opinion it is somewhat more sane than real scientology mythology.
"You are disposable."

A kinder way might be to say that no one is irreplaceable. I'd argue that that's actually a good thing.

But yes, the first time you go through layoffs it is shocking, especially if you've built your identity around your job.
Aerodynamically this is quite a bad idea. Better to send two missiles, and have one use a jammer and the other not.
If this happens, would they not just redeploy and begin collecting again? It's not like dispersion is additive.
What does the percentage figure visible on the app tiles convey?
>"That isn't a question that any statistical approach will help you with. There's a reason we talk in terms of "rejecting" or "failing to reject" a hypothesis. We don't do statistical tests to accept hypotheses, only to reject them."

In (Neyman-Pearson's) hypothesis testing you definitely can accept an hypothesis. This is not true for (Fisher's) significance testing though.

This paper is probably fine to explain it:
https://onlinelibrary.wiley.com/doi/pdf/10.1002/0470013192.b...
> If you delete your account, only your data is erased, not your "ghost profile". I don't know if it is the official term but your ghost is all the data Facebook has about you that doesn't come from you.

It is not the official term, because Zuck is shocked—shocked!—at the term:

> Lujan: So these are called shadow profiles, is that what they’ve been referred to by some?

> Zuckerberg: Congressman, I’m not, I’m not familiar with that.

(https://techcrunch.com/2018/04/11/facebook-shadow-profiles-h...).

(OK, I realised just after posting that you said 'ghost profile', not 'shadow profile'. Anyway, my snarky point stands that there is no official term for this, because it doesn't officially exist.)
neat phone.

website is totally disjointed at non-standard resolutions, making it very difficult to read.

(i'm using 1200x1920, portrait)
N-API: Next generation Node.js APIs for native modules
Just checked this on chrome 65 on https://badssl.finn.io/ seems to work (also need to press enter).
The real myth is that your job is going to make you who you need to be and provide for you.

The only thing that will make you who you need to be is you, and that is going to require hard work to determine who you want to be and who you are capable of being.

The only entity that can provide for you is yourself, and your determination and willingness to work hard and take advantage of the environment you are in to the best of your ability.
Not if you're offended enough to never visit the domain ever again.
Changed to "This is unsafe" (followed by enter) in chrome 65. Try it at https://badssl.finn.io/
Stop Egypt’s Sweeping Ridesharing Surveillance Bill
We've already asked you to stop with the off-topic national swipes. Please?

https://news.ycombinator.com/newsguidelines.html
I would have book-marked your page to reread it later (I've been working on a new blog design). Unfortunately, something on your page is blocking pinboard.in.
Googling stuff to copy is one of the most important skills for programmers. I was appalled when a middle aged senior programmer at my first internship told me this, thinking he was lazy and unethical... (people are paying you after all!)... how naive I was!
Why? The naysayers have some very good points (discussed elsewhere in the thread).
California Bill Would Guarantee Free Credit Freezes in 15 Minutes
This is an absurdly narrow view with regards in what the market/industry wants, especially in regards to geolocation.
not sure how to proof we're legit, but here are some more links : from berlin university (https://bit.ly/2vDJHSs) & our
trademark registration : https://bit.ly/2HoiXed (why would we bother if it was a scam?)

pictures are a mix of renders and post edited photos, the models changed over time as we tested / verified components