skysight-inc/HackerNews huggingface dataset:
Because MoviePass can drive incremental demand. Like an unsold hotel room or airline seat, the theater gets zero every time a seat is empty. If MoviePass purchases that ticket at half-price (and maybe the customer buys some popcorn), how does that hurt the theater?

Have you been in a theater on a weekday afternoon? Most are ghost towns, even with reduced matinee prices. This suggests that matinee prices, although discounted, are still too high. MoviePass can grow a theater's attendance and revenue without requiring it to lower its window price to the general public. Why wouldn't they be "interested in" that?
I find that I really don't allocate set time periods for reflection on hard problems. Instead, I tend to think about pieces of it over hours and days in order to flesh them out properly, and tend to "attach" a piece to the solution whenever I feel like it's ready to go.
I get that and I think that with that very narrow definition of college experience that may be true. But I don't think that is the the college experience that the majority is taking part in. I also think it is insulting to suggest that a student who works full-time is not making real progress towards a degree. I worked full-time and made real progress, although I eventually quit because I realized I didn't need a degree. It's is meaningless. The only thing a degree proves is that the person was able to sit through some lectures and doing some rote work. But this is all anecdotal and therefore not really valuable for proving any useful point.
I don't do any real business in the EU, but I'm a fairly succesful online marketer. Being able to flexibly use SaaS businesses is so, so valuable for testing and iterating on marketing plans. I would fight pretty hard against a company policy that limited it, since today's marketing test is tomorrow's major revenue driver.
(I am a member but the submit links won't take any article or comment:I am stuck posting it here, sorry.)
Was it a presentation about their novel new signal bars?
The author explicitly states that they believe that Tesla is correct to only include miles driven with autopilot enabled, specifically they say:

"I agree with Tesla’s methodology on Autopilot mileage because the road conditions under which a partial autonomy system is rated for operation (highways, clear lane markings, etc) are systematically different from manually-driven miles."

But if that were the case you must also only include crash data from manually driven cars in those same circumstances. But the majority of automobile accidents do not occur on freeways -- which are the most autopilot friendly roads being driven.

We can't easily work out that traffic split, but we can do something else that should be just as effective:

Compare accidents per million miles driven in autopilot enabled cars, to accidents per million miles driven in regular vehicles. If autopilot does meaningfully improve driving safety, we should expect that the average for autopilot enabled cars to to be lower than other cars by a statistically significant margin.

If we want to get specific per [1] more than 50% of accidents occur at intersections, given Tesla's sample will dramatically over-represent intersectional crashes we could go extreme and say that their statistics should be immediately less than half the crash rate of non-autopilot vehicles. (this is an exaggeration, but given they're not being honest I don't really care)

Personally I'd also control for class of cars we're comparing -- I suspect the stats for high end cars are different from low are different from sports cars, etc.

[1] https://www.fhwa.dot.gov/research/topics/safety/intersection...
Joe Sixpack won’t browse it then
It happens to me a city of 160000 in California. I have a Boston prefix and occasionally confusion ensues. I start with 781 which they do not recognize and so assume I am skipping the prefix and then the number ends up 3 digits too long :-)
"you are required to comply with the laws of any country you do business with."

Prove that.

Because that's not how "the law" works. I am Canadian, my business exists only in Canada, and there are only two types of laws that apply to me. Canadian laws, and treaties that Canada has signed on to comply with.

No other country in the world can just make some "arbitrary" law that affects me. Unless my country agrees. And to my knowledge, Canada has not signed a treaty with the EU regarding enforcement of the GDPR.
> Theorists have proved that some mathematical problems are actually so complicated that they will always be challenging or even impossible for computers to solve. So at least for now, people who can push forward the boundary of computationally hard problems need never fear for lack of work.

That applies equally well to humans. Consider the complexity class of Go.

> Meanwhile, many of the tasks that seem most basic to us humans—like running over rough terrain or interpreting body language—are all but impossible for the machines of today and the foreseeable future.

Wow no.
I didn’t follow how it is that LocationSmart gets access to an unaffiliated person’s phone location in the first place.
Alan's buried next to a large boulder on the Pacific coast north of San Francisco. There is a nice tree there that you can sit in the crook of and spend some time with him.

You can get there by walking through the Marin headlands. Give the Green Gulch folks a smile as you pass through. Have a good one :)
Autopilot isn’t self driving. It’s glorfied cruise control.

And Tesla’s had two autopilot fatalities. And Uber had one.
I had a Corsair H50, it lasted about 5 years or so. The pump died on it. It was actually quite annoying to track down. At idle it would run for an hour or two before shutting off. But start a game it would only last a few minutes.

Seems obvious in hindsight, but I had no fan (pump) speed warning or anything.
Slightly disconcerting (though unsurprising) to see insurance companies are customers of LocationSmart: https://www.locationsmart.com/company/customers

I kinda had no clue 3rd-party services like this existed, and assumed realtime cellphone location data was only available to law enforcement in emergency situations... Cool..
It's only a fallacy if you use the attack to claim the comment is wrong. Right now it's just a question
haha, oh they would when countless major news orgs carry the story!
>I used to use Reddit a lot, now I'll use it a bit but generally I avoid all but a few subreddits. The others are unbearable, /r/politics is a swamp itself

Is it "politics" that you want to avoid? or just views that differ from your own?
Good. The last thing we need is people manipulating AI to write fake articles to generate dishonest revenue (and frankly, it’s probably half-happening already).
https://gdpr-info.eu/recitals/no-13/

> To take account of the specific situation of micro, small and medium-sized enterprises, this Regulation includes a derogation for organisations with fewer than 250 employees with regard to record-keeping. 4In addition, the Union institutions and bodies, and Member States and their supervisory authorities, are encouraged to take account of the specific needs of micro, small and medium-sized enterprises in the application of this Regulation. 5The notion of micro, small and medium-sized enterprises should draw from Article 2 of the Annex to Commission Recommendation 2003/361/EC¹.
It all depends on the type of college that you go to. I also think it's funny to suggest that a "large part of the value of the degree" is out of class activities. But if that is true it kind of supports my argument that a degree proves nothing. A degree doesn't reflect those out of class activities.
There are many replies in this thread that seem to be forms of 'yeah but there are issues with other stuff too!'

Not a convincing rebuttal.
Dang it.
NUMTOTS everywhere! (Is this peak transit?) In all seriousness, it's definitely more fun than vanilla facebook, although I'd have a hard time calling it a shelter from politics or praising its level of overall discourse.
Yes, indeed. At a no-illusions-about-it middle aged person (46!) I have this in both weight training and Brazilian Jujitsu - it's very easy for my brain and nerves to send my muscles a message that they really shouldn't have acted on.
> The example of the cookie law (for which it's hard to argue that it has not utterly failed) should act as a bad precedent, not a good one.

It is an utter failure but mostly because services try hard to turn it into a travesty and simultaneously manage to deceive their users by attributing blame for the annoying cookie warnings to regulators.

"We are required by law to show you this stupid warning because our site uses advanced features that need cookies to work. Without them, you couldn't even login! (OK)"

Which, of course, is utter bullshit. If you can stop this deception, things might actually work out as intended.
Sites may rethink their need for personal data gathering if cookie warnings would have to look more like the following.

"We'd like to analyze your site usage for ad targeting and other things that make us some more money.

Do you agree we use cookies for that? (yes/no)

NOTE: Even if you disagree, standard site functionality like logins will continue to work unharmed."
Ask HN: What to do when discovering a vulnerability?
Hi HN,

My wife just realized she's been victim of identity theft (bank account opened at her name, address, even her SIN) and when she thought about the last place where she entered these information, she remembered a portal for city services where she recently created a profile.
I looked at the network activity on Chrome dev tools, found the profile page HTTP request, and played it with another ID.
You can probably guess what happened next: I was able to access other people's profiles.
This website is a portal for around 300 towns, and I estimate there are about 150,000 users with all their confidential information: name, address, phone, email, DoB AND, most importantly, SIN.

Question: I took 3 screenshots (personal data has been removed), what should I now do? Alert the company discreetly? Alert the city that we used this platform for? Police? Media?
Should I go anonymous?

Bonus, In order to fetch my screenshots, I worked on my computer, I basically created a fake account (you have to have an active session to get the data), and the website does not even do email profile activation.
publish as in, send an email to major news publications
It’s still a major PITA to install & maintain many open source tools, like curl, Ffmpeg, wget etc.

The tool chain is hit and miss.

Recompiling Ffmpeg with h265 support is one command on MacOS. I just recently had to recompile a R package that depended on some fairly obscure third party libraries. No problem, just a couple of brew install commands.

I’d hate to think how much manual work it would have taken to line up all the dependencies for that in Windows. Likely I’d have just given up.
Did it work for Canadian phone numbers?
It seems to me, looking at the chemical reaction whereby a chlorine atom breaks Ozone into two O2 molecules and then two O2 molecules form Ozone, that it actually increases the amount of O2 that is available for forming Ozone.
Also you can bet your ass NSA has a feed
I've had a book in my nightstand for at least 2 years and every once in a while I swear to myself "this month I'm gonna read it, this month..." then I fall asleep.

I better call my layer and get my story straight for when the thought police get here demanding answers.
Remember they need to know which cell(s) you're within range of to get inbound calls to you.

It's not like the networks send a message out via every cell tower on the planet asking if $rolandog{'mobile_number'} is listening every time you get a call or text.

Whenever your phone is switched on, it regularly contacts the tower it's got the strongest signal from and says "Hi, it's rolandog's phone here, if you get a call for me, this is where I'm hanging out! kthxbye"
I have absolutely no idea. If it helps, that company also wouldn't hire one of my best interns without him taking some programming language courses. He had a 4-year degree, too. They also didn't want to hire one of my other good interns into an embedded role despite that being what she went to school for, and despite her having the aptitude for it. They wanted to hire her into SDET instead. I don't believe she took the job.
I wonder why we haven't seen more exploits targeting SMS PDU mode. Is it the barrier for script kiddies just too high? You would probably need a network tester of some kind to properly try to find exploits.

I used to work for a big mobile phone manufacturer and once in a while we would get "secret" fixes to merge into the source. The commit message would be something unrelated and the builds would be pushed silently without much fanfare.

I was in charge for the merging, which is how I know this. Some of those fixes were for SMS PDU mode or related to stuff happening when PDUs were received. Not sure how phones handle these messages today, but I assume they follow spec, which means there are certain SMS PDUs which will be reacted on silently in the background (stuff in the PDU body is parsed and applications launched if necessary).

I should try to get an old R&S tester from eBay maybe. Could be fun to try to explore this area. Could be a nice security business niche to get into.
My baby teeth are anchored to the bone as well, but not very strongly. They discovered them when fitting me for braces and decided they would just leave them. They didn't put anchors on the babies and just told me to pray they wouldn't fall out and they haven't!

I will probably keep my wisdom teeth. They're not fully in yet but I like the idea of not pulling anything out of my face, you know?
There's nothing "wrong" with all those things you mentioned. I use tmux literally all the time. I'll likely never use this built in terminal, but I know plenty of people that love this future in neovim. Everybody has different workflow preferences.
I didn't mention anything about "ending the requirement for a college degree", my claim was that IQ does matter but other features matter just as much, and a college degree turns out to be a solid proxy for _many_ of those features.

I also did not claim that the IQ test itself was biased. I'm not quite certain which of my claims you're responding to.
The high-tech laws and regulations of the EU are a bit more sophisticated than in the US so it may take some time for the rest of the world to catch on.
But they seem to be _super_ switched on about how much shareholder value they can create by monetising the data.
WE'VE BEEN TRYING TO WAKE YOU UP FOR YEARS. MOVE YOUR FINGERS IF YOU GET THIS MESSAGE. WE LOVE YOU SO MUCH.
Hmmmm I cope with that by programming or playing music...recently I've started carving stone for fun. I know exactly how you feel though...hobbies help for a bit but eventually that trapped feeling returns. I've found talking to random people on the internet helps with the loneliness...I dunno I downloaded a few random chat apps and talk to people in different places around the world about their lives...that's kinda cool and it helps put your own life into perspective sometimes.

Having sex most nights helps with the nagging and such trying new things with that also helps. Though I understand with kids that may be harder to do.

But the bleak, desperate, lonely trapped feeling never really goes away. I think honestly that's just kinda life...the thing i've found the most is that those times come and go....getting absorbed in the moment instead of the future or past helps....also meditating....and mushrooms...mushrooms are the shit...they will fix your brain....try eating small amounts of magic mushrooms...not really enough to start hallucinating but enough to kinda detach from your ego a bit....or you could just say fuck it and take enough that every layer of your personality strips away until you're just kinda nothing for a while...then you come back together and all the bad shit in your brain is gone...it's pretty terrifying doing it that way though...lately I've found small amounts occasionally when I start getting down about life helps me see things from more of a bigger picture.

Also, I smoke, smoke weed constantly, drink ridiculous amounts of coffee and drink 2 or 3 beers a night pretty much immediately when I finish work...so there's that.
There is hardly anything more overreaching than US tax, securities and accounting law.

People in other parts of the world have gotten used to that. As a current example, see US threats re: European business with Iran.

Even if the GDPR were overreaching (and I vigorously dispute that notion), it would simply be a taste of America‘s own medicine.
Yes, artificially, by using Dexedrine (basically the same as Adderall).
Design Thinking is Bullshit
might be worth taking a look at - http://blog.querystorm.com/index.php/2018/04/04/whynow/
The Scientific Detectives Probing the Secrets of Ancient Oracles
What can Europe do to you?

Assuming you are American, the only court you need to worry about is American court. Your company is American? Your bank is American?

What's the actual liability here? Worst case?
"OOP is a load of horseshit"

"Well, OK, if you do it this way it kinda works. But design, design is absolute horseshit"

Give it another decade or two, and maybe he'll encounter a code base that justifies using OO design as well, and he'll write a new article (on how OOD is horseshit, except when you do it his way :).

It's almost as if you choose different tools for different purposes.
I don't know if this is correct, but, I once got the impression that Signal Desktop was under the sole purview of a new hire at OWS. In other words, Moxie doesn't review the commits. I hope I'm wrong, but even if I'm not, I suppose it makes no difference, as he's arguably responsible either way.
The problem of people being incensed by the political situation (from either side) is caused by politics. The problem of everyone feeling that they have to shout their politics to everyone around them, all the time, is caused by something else. Loss of civility? An almost religious attachment to Team Red or Team Blue? It's something more than politics. It's a breakdown of some elements of social unity that used to exist.
Django 2.1 alpha 1 released
No, she is saying you shouldn’t just count the miles where autopilot is turned on. Her reasoning is that you can’t compare autopilot-on miles to regular cars because there is no comparable data for regular cars.

That might be acceptable if you compared Tesla autopilot capable cars to other luxury cars, where the only significant difference in safety is autopilot.

But that wouldn’t account for things like: maybe certain Tesla safety features save a lot of lives but get canceled out by a very dangerous autopilot.

And she doesn’t compare to similar cars.
Release notes here: https://docs.djangoproject.com/en/dev/releases/2.1/

I'm looking forward to some of the admin improvements. View-only permissions, better template overriding, etc.

I might also use the improved FileResponse.
“If we asked you to sell more ads, which graph would you choose?”

Follow up: “Which graph would be better at tracking and monitizing our users? Preferably, it would be optimized for lowest memory usage while also not letting our users know how we exploit their trust in us.”
Well, I guess I didn't count the effort of pasting the secret.

But I am indeed talking about the total effort to setup clients and servers. I have two IPSec gateways running OpenBSD, one IKEv1 and IKEv2. And I've setup macOS, Windows, Android, and OpenBSD clients to use it. Others have connected to the former with Linux (including a MikroTik router), and that was by far the biggest source of headaches.

L2TP is more complex on the OpenBSD side: another couple of lines in /etc/npppd/npppd.conf. Allocating addresses over IKEv2 is much easier as its baked into the same layer, but last time I tried a couple of years ago macOS's IKEv2 support was experimental and Android was (and is?) still stuck with IKEv1. But WireGuard doesn't have equivalent functionality anyhow, so it's all irrelevant.

If we're talking about a static configuration that tunnels private IPs over public IPs, on OpenBSD it's the same one-liner. You can also tag packets coming out an IPSec flow and manipulate them using PF, but that's just as easy if not easier than with WireGuard because comparing PF with iptables isn't even a fair fight.

If you compare apples-to-apples--e.g. focus on the few encryption suites commonly supported by most IPSec implementations, and ignore things like X.509 certificate authentication which WireGuard doesn't support--then IPSec doesn't have to be difficult to setup.[1] The biggest headaches from a usage standpoint IME are (1) the horrible configuration and management story on Linux, and (2) all the shoddy firewalls that cause network hiccups, which WireGuard will also enjoy once it sees the same kind of widespread deployment.

I won't dispute WireGuard has its elegance. But it's most prominent on Linux. And it explicitly avoids addressing other complex problems that are commingled, for better or worse, in IPSec stacks; problems that often can't be avoided anyhow.

If I needed to setup a VPN for a cluster of Linux servers, then WireGuard would be a no-brainer. But to support non-Linux clients, why would I have them install some third-party application when there's a perfectly good and useful IPSec stack that comes natively? I hate SSL VPNs and OpenVPN for precisely the same reasons. At a previous job I refused to install the ridiculous SSL VPN client and instead dropped a tiny OpenBSD box on the corporate network that established a reverse IPSec tunnel to my own gateway. A single line in /etc/ipsec.conf on each end to setup the IPSec flow, and some simple PF rules for LAN routing. Easy-peasy.

[1] X.509 certificate authentication doesn't have to be hard, either. It's also rather trivial on OpenBSD, though the story on macOS and Windows is mixed.
Take a look at - https://www.chalk.com
+1 to FastMail. I hosted my own previously but I am incredibly happy with the decision. I've been with them for several years now.
that is a throwback, starting a phpBB forum was one of my first forays into the web back in 2001.
What public spaces? They're all either reserved in advance for a yuppie wedding or being defecated on by untreated schizophrenics. There's just too many people for the amount of land to accommodate everyone comfortably.
> The issue was using innerHTML (or rather $.html()) with strings concatenated together from user input.

> The Signal devs thought $.html() does some kind of escaping

I mean, it does do a kind of escaping. If you assign javascript to innerHTML directly, it won't execute. jQuery specifically checks whether you're adding a script tag, and if so, it takes the extra step to execute it for you.
A Publisher's Playbook to GDPR
I have experienced both, and they are rather different. On the computer, I just get this sinking feeling in my stomach when falling, but there was no hesitation before jumping. In VR, my brain did not want me to step near the ledge at all. I had to probe the floor with my foot, make sure there actually is solid floor there in reality, and really will myself into moving there.

In the end, I ended up making a tiny tiny step and leaning forward enough that the game registered me as having jumped. The two experiences aren't even comparable. In one game where I was in a hot air balloon I even freaked out and panickedly searched for the button to exit the game.
I think Zed Shaw proposed the best system:

http://programming-motherfucker.com