skysight-inc/HackerNews huggingface dataset:
I believe you are misrepresenting that letter when you say it "endorsed CA YIMBY's work." To quote it,

"We note that some affordable housing and tenants' rights organizations have expressed concerns over SB 827. Recent amendments designed to safeguard local inclusionary zoning ordinances, protect local residents from displacement through a statutory 'right to remain' guarantee, and prohibit demolition of rent-controlled housing, which we applaud, helps to address some of these concerns."

None of these amendments would have happened without protest from low-income and minority housing advocates against CA YIMBY's work. The letter "applauds" these changes and even supports "additional legislation to expand inclusionary zoning." It merely concludes that "the perfect must not be the enemy of the good" and recommends a compromise.

This is far from an endorsement of CA YIMBY's work. In fact it reads as an endorsement of the opposition and resulting amendments.

> While no group is homogeneous in beliefs, polling very clearly shows that minority groups strongly support increased housing construction.

The minority groups who opposed SB 827 support increased housing construction -- just with better protections against displacement than what CA YIMBY has been pushing. To suggest otherwise is a false dichotomy.

Thank you for the correction on which YIMBY group shouted down the minority housing activists.
Instead of trying to hash the password, just use SSL so the whole request is encrypted. But that doesn't fix servers accidentally logging passwords.

Maybe there could be a standard way to signal the beginning and end of a password string so logging software can redact that part.
Stop this nonsense already. Electron is the greatest thing that happened to the dying desktop software ecosystem. And the performance/resource usage is just fine.
+2 for 1Password. Being able to use it as an MFA device has been brilliant. https://support.1password.com/one-time-passwords/
It's a supply vs demand thing. I doubt anyone is hiring remotely for AI and blockchain right now. Things like this are usually done face to face because they require a lot more communication.

Web skills are still in very high demand and still in low supply. JavaScript is used for TVs too. Java is used on a lot of systems. Few people go past the 1 year mark.

If you really want a niche, ironically, you might want to learn legacy systems, as they pay a lot but are very hard to recruit for. You can also learn a whole stack of systems, get certified with Google, AWS, Microsoft. I'd actually bet on Chinese systems as a fast growing market. So maybe look at Alibaba or Huawei systems.

In general, I recommend learning some low risk, low return skills and a few high risk, high return skills. The low risk skills will get you a job, the high risk skills will get you promoted.
What about thieves? If I break into a bank or a jewelry store and leave with million dollars worth of gold, then get caught. Should I just "restitute" the stolen goods and go back home? My only crime was to harm corporate profits, I didn't put anyone under physical danger. What about if I steal someone's car (not a corporation)? Does it change based on who you target (rather than based on the crime itself)? And if the only punishment is monetary, rather than jail time, does that mean committing a crime becomes a question of "can I afford to commit the crime and simply pay the fine?". Let's say I'm a millionaire that get its thrill from breaking into museum and stealing valuable art pieces. Are we just gonna ask him to give them back (if he ever get caught) and pay a "stealing" fee?
becoming a manager in retail is really not that hard. most of my friends that started working retail in high school are managers by now (unless they left for a better job).
Let's play this out. You create a city of say, 100K, composed of employees from Google, FB, Salesforce, etc. Where do they eat? How much will housing cost given your average income will be several times that of a "normal" city? Do you spread them all out in single family homes (and have massive traffic) or do you force them to live in high-rises?

Where do the restaurants, and arts, and culture they need come from? Who works at those institutions, and how do they afford to live in that city? (Or do they commute from somewhere else?) How do you fund the international airport that's going to be a must-have?

I think it's possible, but I'm unclear how it would actually lead to a low cost of living. It sounds like most company towns - sprawling, lacking the kind of culture that people want from a city... reminds me of Plano, TX, where JC Penny moved in the 80s, or Bentonville, AR, or Sidney, NE (where Cabela's is HQed).

Companies would have a really hard time hiring highly-educated, high demand workers to move there vs being able to live in say, NYC, London or SF. It's not enough to just offer cheap housing - you have to offer a high quality of life, plus jobs for spouses, and good schools for their kids.
Does your idea of multiplatform include the BSD's as well? Last I looked in to it the team themselves only defined multiplatform as Windows, Linux, and non-mobile macOS.
I think it's part of the problem of writing a statement to be read by a large number of people - it could be read as "There is nothing legally forcing us to do this, but we are doing us anyway as it is in the best interests of our users" (which is positive) OR it could be read as "We didn't have to do this; we did you a favour, but there might be situations where we don't disclose this" (which is fairly negative). FWIW, I think the former is the intent.

Personally, I'd probably just say "We felt that we had to disclose this to protect the interests of our users" (and not acknowledge that they might not, or that they had to make a decision to do so), or just say what they _are_ doing ("We are disclosing this in order to protect our users") and avoid the possibility that it is misinterpreted. I don't think there is anything to be gained by saying that they might not have done this.
Every time I come across Brendan Gregg's work I'm blown away. And I come across his work a lot! (It also brings a semi-patriotic tear to my eye to hear his aussie twang)
Anyone try "Podcast Republic". That's my go to podcast app.
In the past, I've seen logs monitored for high-entropy strings that could be API keys or passwords. However, in a NoSQL/UUID-using environment, this could be really hard to implement.
> Lower power Kilopower systems, like the one kilowatt version, can power a basic toaster,

Toaster is a bad example, a laptop uses around 30 watts so the 1kw version can power several dozen laptops.
Neither site is ideal, even restricting choices to the USA.

For polar orbit, obviously northern Alaska is proper. This minimizes the amount of east-west movement that must be cancelled out.

For more typical orbits, being near the equator is better. There are many choices, but Jarvis Island is probably the best. It has excellent weather and is nearly on the equator. Other good choices are Palmyra Atoll and Baker Island.

There is something to be said for altitude and dry air. Altitude is kind of obvious, yet not. Although the height is not significant relative to orbit, getting above a few miles of thick air is nice. Dry air is helpful with cryogenics; remember that ice destroyed a space shuttle. Due to the high heat inherent in solid-liquid transition of water, ice formation puts lots of heat into the cryogenics. These considerations point toward a site near Tuscon or on Hawaii's big island. The astronomers probably don't want to share either spot, but hey, they might get space telescopes in exchange.
It was also missing a setting to only download on wifi. It blew through a couple gigs of my data on my drive home once, background data. I wasn't even using it.
> Right, you support it on the other side of the neighborhood.

He didn't say that at all. In fact, he said if his neighbor decided to build higher density he wouldn't oppose it.
Maybe to not the same degree, but the same issues - NIMBYism, a focus on SFH, a sense that established residents are pursuing housing policy that punishes younger / newer residents.
https://www.nytimes.com/2018/01/03/upshot/zoning-housing-pro...
In a recent NYT interview, here's what she had to say about that: "[T]iming is everything... Yahoo’s offerings could consume hours a day, and trying to regain that moment in time was really hard... regaining that contextual relevance that was afforded to Yahoo in 1999 and the early 2000s was difficult."
The limited scope evangelist has arrived... Sigh.
Neat!

60 requests per minute is not very many.

Sadly I’m not sure any service will be able to do what I want at an affordable rate. :(
Then how does the server check that it's valid?
+1 from me as well. Great for storing literally anything sensitive, syncs flawlessly across devices (I currently use dropbox to sync the vault, but it supports other options & they have their own syncing/account system (that is not required to use 1password)).

It is not open source but the vault format is open.

I've no affiliation, just a satisfied customer.
"Unaffected" was probably the wrong word to use. What I meant is that one of the mitigations (making the executables position-independent) should prevent the bug from being exploitable for remote code execution on Debian.
I was pointing out that it's an international problem not just the USA. Thus making it more of a generational issue.
The new GitHub Desktop experience, now uses 5x more ram!
I think you’re correct in your last point (and others, though I have no direct experience).

I guess I’m skeptical that any qualification is 100% effective at evaluating/training (but that possibly says more about my own biases).
But then you have to store the password instead of a hash of it because it would change each time thanks to the salt. A much worse situation.
Is there something new here? Hasn't the electron desktop client been around for a while now?
Not GP, but KeePass user: I store my KeePass database on a small thumb drive (SanDisk Cruzer Fit), together with a copy of the KeePass executable. If I absolutely need to decrypt my password database on someone else's machine I can take the "secure" software from the USB and hope for the best. The USB also stores a copy of Truecrypt and a large Truecrypt container with backups of my encrypted private keys (PGP, SSH).
Unit tests are mostly worthless for machines like this, you need formal proofs.
The tipping point for me is to consider how they do their work.

London Breed is trying to make San Francisco a city for everyone, and she does not let personal feelings get in the way of good policy.

Jane Kim may know how to say the right things, but get on her bad side and she will abandon your policy and destroy your company’s projects.
This is likely the best reference we have to date given the size and timeframe of the study:

https://jamanetwork.com/journals/jamainternalmedicine/fullar...

There are many other short term studies that support this fully. You may not want to believe red meat consumption is indicative of negative health indicators, but most notable cardiologists in the field fully support the position.
Freedom of speech does not give the freedom to violate terms of service. The first paragraph of the complaint states that the site was not compliant and apparently GoDaddy agreed.
Scott's complaint is basically that the IRB regulations don't match the regulations that apply to standard psychiatric treatment.

For example, the department had a huge amount of patient information stored in their regular computer system. But the IRB demands an archaic pen and paper system for storing patient records, rather than using the computer system that exists. You could argue that maybe the department computer system was bad, but in that case it should be fixed, rather than creating a parallel system.

Similarly with the issue of consent. The doctors were already giving questionnaires to the patients and already using them to determine what the treatment should be (counselling, medication, etc.) Why do the consent requirements suddenly become completely different when it's part of a study? Should the doctors be asking patients to fill out a consent form each time they give a questionnaire? Should the forms be in pen, even though mental patients can use pends to hurt themselves? I don't know, but I do know that having bizarrely different criteria for a study versus normal medical practice seems unwise.

I agree that it would be good to have better-defined criteria for stopping the study. It sounds like Scott had an informal goal of 100 data points, but didn't manage to hit this goal.

I'm sure IRBs do some good. But it's really hard to take the IRB's side in this particular case. They weren't even following their own rules (the person asking him to take ethics training hadn't taken the training herself-- which would have probably torpedoed his study even if he had done everything else right.)
> But it is the only diet research that can actually generate knowledge.

> The studies you cite are nice and all, but the first two are for studies that measured outcomes after 6-8 weeks. If you assume an average lifespan of 70 years, the longest study represented ~1/450th of a human lifespan. And, as you mention, they only measure what we think are valid indicators, not actual outcomes! And the third study may control for all of the things you mention, but it doesn't control for the other foods the study participants ate!

I fully agree with everything you wrote about the science here.

However, many of the epidemiological studies are over very large populations and time periods, so it's not as though the body of evidence consists of a 6-8 week studies. And honestly the fact that the effects are so strong in such a short period of time strengthen the argument in some ways.

> Really the only piece of information that you need to know regarding red meat is that public health messaging for the last 50 years has been that people should limit red meat intake. And it was successful. According to this, red meat consumption has decreased from 133lbs per person in 1965 to 107lbs per person in 2016. But it is during this exact same time period that the obesity epidemic came into existence. So, perhaps red meat is marginally bad for you, but it is almost certainly not cause of all of the various afflictions that we think are caused in some way by our diets.

Interesting response. I never claimed that meat was bad, only that leafy vegetables were good. I find it almost incredible that your argument against the nutritional value of leafy vegetables is that there aren't enough double blind clinical trials, and then your defense of red meat uses a time correlation that doesn't adjust for any confounding variables at all. It also cites a document from an meat industry group. If you look at USDA numbers (https://www.ers.usda.gov/data-products/food-availability-per...), overall meat consumption has been consistently and slowly rising, however beef is being replaced with chicken, so yes red meat consumption is declining.
Ah answered elsewhere, if the client sends the hash and you log the hash then you still have a problem. The user should change passwords.

Although I think this still improves the situation if the password is reused. I.E. I can't use the logged hashed password on other sites.
> And the performance/resource usage is just fine.

It depends. On my machine with 8GB of RAM and an older processor, Electron apps suck the life out of it. My newer dual core with 16GB of RAM (ultrabook) and an NVME SSD handles them fine. I think most devs working with newer faster hardware get a bit desensitized when it comes to performance. Electron isn't necessarily a terrible thing, but I refuse to call it "the greatest thing" - there's still a lot more work to do, like have a single shared Electron process for all Electron apps.
Exactly my thoughts. I'm currently using a different podcast app that has a neat "fast forward 30 seconds" feature that I only ever use to skip ads.

It's annoying enough having to get my phone out of my pocked to press the fast forward button. If the ads were unskippable, I'd switch apps immediately.
I was waiting for a better interface, but it took too long so I choose GitKraken. It's been great and won't even bother looking.
Agreed that it's unfortunate...
Huh? It’s been on Electron for a year and went 1.0 in September: https://blog.github.com/2018-05-02-everyones-moving-to-githu...
I don't know about the US, but my experience from Europe is that many smaller cities have become, at least relatively, unaffordable as well. It seems like almost anywhere with decent density and transportation has now become part of the global credit, property and holiday rental market.
When I was just installing it now (this post reminded me that I hadn't updated it recently) I was put off by the lack of publisher in the installer and went back to double-check it was the official version. It's really off-putting seeing "publisher: unknown" when installing and my immediate reaction was, "wait, did I install it from the legit site?".
If you don’t have control on the client, it’s a bad idea: Your suggestion means the password would be the hash itself, and it wouldn’t be necessary for an attacker to know the password.
Being a designer is being a good communicator first. The rest is applying the gestalt. But it starts with putting yourself in the shoes of the audience and telling a story (visually).

This is why, no matter how much technology changes, from Paint shop pro, to Photoshop, to Sketch, to Figma, etc. Nothing scares a designer, because designing is a timeless skills with very few variants over time (gradients / skeuomorphic design / flat / combination ...) It's like how would you like your water, with a slice of lemon or ice?

Visual hierarchy, grouping, aligning on grids, contrasts, use of colours and tones, that's the part that's easily learnt. The why is where design is interesting.
Log line -> high entropy check -> false positive uuid check -> alerts

I’m not seeing how it would be a challenge in a uuid based environment, unless there’s a nuanced detail I’m missing.
He has a conductivity coefficent K (W/mK) = .151 and air = .026. Since everything else in heat flux eq is linear, approximately 5x rate of heat movement per degree that the HD is heated beyond surrounding air is expected.
Ask HN: Startup to enterprise and back to startups – how?
I started my career 15 years ago in a startup. Worked there for 4 years and went from zero clients to over a 1k enterprise customers. I learned a lot and it's still the job experience I'm most proud of.

Somehow I ended up getting seduced by a position at a big name IT enterprise, joined other enterprises and now working remotely for 3 years for a medium-sized company.

I think companies look at my 8 years at big enterprises and think I'm not a good fit for a startup. The truth is, I never felt at home in enterprises and was always fighting the processes and complaining. Go figure.

What could I do now to make myself more employable at startups?
They should go find a web host that is supportive of their message. Freedom of speech does not mean every platform has to give you a soap box, quite the opposite.

All in all its got nothing to do with freedom of speech.
Did Washington kill civilians? He was a slave owner. Not sure mass murderer is on the money like it is for Stalin and Mao. Don’t know enough about Che.
Not Tuscon but just west of White Sands Test Range (hence the Virgin Galactic spaceport) having the advantage of White Sands' unlimited restricted airspace to keep launches clean.
Risks and Benefits of School Integration: Evidence from a Randomized Program [pdf]
But at least, with salt, it wouldn't be applicable to other sites, just one. Better to just never reuse a password though. Honestly sites should just standardize on a password changing protocol, that will go a long way towards making passwords actually disposable.
Given that he was so cavalier here that has these noses bent out of shape, and that he was tweeting April fools jokes about being bankrupt, could it be that he is actually pretty confident in Tesla's credit worthiness and that capital raising will not be required? Seems like a pretty dumb bluff otherwise - particularly on April fools.
The presentation here is the most user friendly I have encountered so far: https://gdpr-info.eu/
I think the problem with this is that with no notion of truth, there is no way to test your predictions.
Are they? I just signed in on a machine where I had signed out and got no prompt to change it. Is it only certain users?
> As of writing this comment, I have five fingers on each of my hands.

Well, if you are not a brain in a jar, maybe. As far as I am concerned, I don't have any undeniable evidence that you even exist, nor that I have hands.

That's a pretty useless kind of skepticism, but as long as you are going for objective "truth" you must face that kind of problem.
It's not weird. SF wasn't a "global mega city" until perhaps the late 90s (it's honestly pretty debatable that it is one today).

If you purchased property in a quaint, romantic seaside town in 1980, and starting in 2012 the global tech industry decided it wanted to make that small town into New York, why wouldn't you oppose it? I'm not saying I agree, but the motivation is perfectly rational.

Honestly, the only irrational thing here is the desire of the global tech industry to cram itself in a 50-square mile patch of land on a peninsula in the Pacific ocean when it could go literally anywhere in the world.
How does one write down those axioms?
Along those lines, “only break one law at a time.” Another sage piece of advice.
Same thing here. I ditched the online password managers a few years back for a similar setup and it's been just about as good as lastpass was, with the added benefit of being stored locally.
It seems that the hobo code isn't at all about living outside the law. It suggests to me that you can live as a free individual while obeying the law.
In particular, the point is to make it so that the thing you store can't actually be used to authenticate -- only to verify. So if you're doing it right, the client can't just send the hash, because that wouldn't actually authenticate them.
True, but at least the attack surface area will have been reduced by a large amount which is worth something.

Disabling Javascript served over HTTP is such a good security improvement that I'm surprised no browser vendor has implemented yet, in the age of Let's Encrypt. It'll break a lot of websites, but better than compromised routers and ISPs serving JS malware.
The last time I needed a password on a someone else's machine, I just looked it up on my phone and typed it in.
> To claim that having to spend my hobby time implementing a bunch of extra features is just "complying with the law" is bullshit, I'm sorry

100% agree. And your situation applies to millions of hobbyists, personal websites, projects, startups, and small businesses around the world.

GPDR appears to be intentionally burdensome, a classic regulation strategy aimed at protecting large incumbents while stifling small business, innovation, and newcomers, or even side projects like your own.
You're clearly not engaging in good faith, but for everyone else: Grow The Richmond, Build the North, Progress Noe Valley, Castro for Housing, East Bay for Everyone, and all of the peninsula groups ALL advocate for building in their neighborhoods. There are some neighborhoods, like the Mission, Bayview, the Tenderloin, and Hunter's Point that have suffered under racist policies for decades. The same solution doesn't fit everywhere.