skysight-inc/HackerNews huggingface dataset:
I guess the world feels different to people in different places.

I'm a young Boomer / Old Gen Xer, and to me things are pretty good right now. Jobs are available, 401k balances are good, etc. My own kids are in college or headed to college, and the same is true for most of my friends (across the economic spectrum).

I read about how disastrous things seem to this author, but I haven't seen it. My business travels have taken me to both coasts and I live in the middle, I don't see the widespread misery described. I see opportunity for all stripes of people being offered and taken.

To be sure, I do think life will be tougher for our kids. The same economic opportunities I had have changed, but there seem to be new ones springing up.

I think it's just life going on. Good luck to next generations....
Why should Mozilla be the representative? Why not X organization?
But a publisher is paying people to produce the content - so I'm saying after the planning, shooting and producing, the cost at probably a few thousand for a publisher. Supporting that with video ad Rev is really, really hard if you're like the typical online magazine that doesn't have a look at T of scale.
It primarily depends on the size of the project. Past a certain size, I am definitely more productive in C++ than in Python. Though the compile-time checking of Cython might balance things out and make scaling a Python project easier.

std::visit is broken, sure. std::vector<bool> is a mistake, too. You don't have to use it. Select a subset of the language which gives you what you need. That's part of what's great about having so much in the language.
Right. But a magazine has to pay salaries - I'd wonder how many of your favorite YouTube channel creators are completely supported by their craft.
If you are paying for a subscription there isn’t necessarily an incentive to provide security updates even more, since they have the functionality of your app hostage if you decide to cancel and the automatic monthly billing has no ties to the quantity or wuality of updates they push out.

That being said, security updates shouldbe part of the price you already paid, since a security flaw is a flaw in their original software.
> I think one of the things that Europeans don't realize is that its not like Americans are choosing between private companies and European-style public services.

Estonia is in Europe.
My Prime Time to Leave Amazon
The technology is affordable, it's the hired staff that is expensive - magazines have to support time spent with ad revenue and the numbers don't work out well
As far as I remember nobody really had any problems after the LastPass hack, since the data was encrypted anyway?
That would be the problem. The HN policy for styles is:

style-src 'self' 'unsafe-inline'

This means they can include CSS from the same origin, or inline. It would need "data:" adding to the list to allow data URI's as an accepted source.
Making a Simple Music Sequencer Using CSV Spreadsheets
Lucky for MacOS users we don’t have to use it like iOS users on the iOS app store.
Irish Pride T-Shirt
Well than I have a bridge to sell you. You can not make a system where there is no personal consequences to making dumb decisions there is no "they" who will take a fall for you.
How Security Can Bridge the Chasm with Development
> I find it a bit amusing that the headline uses the term "Extreme Juggling". Not because it's too clickbaity, but I think the juggling community should have invented that name. "I'm going to an extreme juggling event."

The International Juggler's Association (IJA) has indeed hosted "extreme juggling" since 2006 or so. However, its description indicates it is not strictly an event where the goal is to juggle as many numbers as possible.

> Technical juggling skill has reached an all time high, but the most difficult (and most radical) tricks aren’t performed on stage. What if there was a place to show off these cutting edge tricks? This is a competition where jugglers on the cutting edge can shine.

> https://www.juggle.org/programs/xjuggling/

A google search for "ija extreme juggling" yields lots of entertaining results.

> The hard reality of every juggler is just: Do a few simple three ball tricks and people will get excited, show them your five ball routine they will fall asleep.

I believe others have mentioned this already but there is a lot of daylight between "doing juggling moves" and "doing juggling moves while being simultaneously entertaining". A little showmanship goes a long way, in other words.
I agree - for profit colleges in particular seem to prey on this.

For example, we had like 3-4 chef schools nearby - 100K in tuition?!? That is a totally false dream, those "degrees" do not get you anywhere!

But my point though was - the article left out what HAD to have been some feedback from parents AND what her degree was. How we can read this whole article without some context about her degree.

It's not that someone else would say your first gen so do a practical degree, I'm saying that a first gen immigrant family - they are talking at the family level about this. And practical degree can mean doctor, it can mean computer programmer - so it's still shoot for the moon. But these are degrees with big and growing markets.
> but probably not enough to justify the added infrastructure complexity.

If you want to avoid infrastructure complexity, I'd go for dedicated hosting most of the time. Most of my past clients have ended up paying for more hours on operations for AWS setups than for dedicated. AWS and similar tends to force a lot of ceremony, some of which is good, but a lot of which is unnecessary on dedicated setups or on premises setups.

But yes, if your costs per unit are that low, I've typically told clients it largely depends on what they're most comfortable with. Some then pick AWS and it's a perfectly good choice.

What I'm seeing though, is that a lot of people pick AWS without first pricing out the options, and then later end up with expensive migrations to get off it.
Ask HN: GA for simple sites. Is JS Opt-In required for GA under GDPR?
Assume we are talking about basic static websites, no forms etc. Is it necessary to implement a JS Opt-In before sending any hits to GA? Or is using GA's anonymizeIp=true enough and the JS Opt-In/Opt-Out is not needed in this case?
Want to Debug Latency? – Observability+
No, they shouldn't, they should throw away legacy code as they've been doing ever since.
>Kroger charged much higher prices for substandard goods in poor/minority, transit-dependent communities

Kroger isn't a monopoly. If Kroger was truly price gouging as you're alleging, then any other company can just sweep into that neighborhood and take all of Kroger's business.

As Black economist Thomas Sowell notes: "despite higher markups in prices in low-income neighborhoods, there is a lower than average rate of return for businesses there — one of the reasons why businesses tend to avoid such neighborhoods."

In other words, the cost of doing business in poor neighborhoods is higher. You can attribute this to higher taxes in urban areas, higher cost of transporting goods to the area (increased traffic leading to longer duration supply routes, higher insurance requirements for transporters), higher cost of securing the business due to higher crime levels.
That’s the problem when most laypersons (including many in tech) talk about AI. It adds noise to what machine learning actually is today, and makes it hard to argue about the ethics of it when most people don’t know how to frame the problem.
Right, op made it sound like they are. It is good that spending is not restricted though, as otherwise it would create all sort of unpleasant effects.
"Palo Alto is a ghetto of wealth, power, and elitist liberalism by proxy, meaning that many community members claim to want to fight for social justice issues, but that desire doesn't translate into action,"

Seems like a smaller version of the brand of liberalism that emanates from Hollywood / media world.
Considering the EU has brought cases against Microsoft, Apple, and Google, I’m not really sure how you get this impression.
> Now, the in state tuition in my state (NH) is over $28K a year.

https://admissions.unh.edu/tuitionfees

Looks like 18.5k$, which is still about 8.5k$ higher than most other states.
If they have no incentive to upgrade, that's because the newer versions don't add any value for the user. This makes sense: 1Password is a pretty mature product at this point and there probably isn't much room to add new features, unless you want to expand the scope of the product.

That is to say that I personally (and again, this is just my opinion) don't care about any new features and would be unlikely to upgrade from version 6 on that basis. I may upgrade to ensure I will continue receiving security updates and OS and browser extension compatibility updates, but it would be nice to know how long such updates to version 7 are guaranteed for (presumably they will eventually release version 8 for a new fee and discontinue such updates to version 7).

> (and servers / APIs for it)

The users (like me) who are against subscriptions are only using local vaults (managing the storage sync ourselves) and do not care for or want the web/sync services.
Another choice bit: one of them wants to stop "mental health professionals" from using the church (presumably to provide services to the community), because its allegedly a zoning violation. How petty is that?
The first graphics clearly shows that the 0.1% increased their wealth disproportionately in the recent years. It does not show this for the 9.9%, so I'm not quite able to follow the conclusion.
Cashier thought a black man’s $10 bill was fake. He ended up jailed for 3 months
The price of Prime goods is higher to build in the cost of "free" shipping.

Most websites either have free shipping and higher prices, or non-free shipping and lower prices. Take your pick. But with Amazon, you're giving an extra $120 per year for the privilege of paying a higher price for that "free" shipping.
1password seems to have better apps and is supported by multiple apps on iOS.
The FCC takes a dim view on 911 call failures. All phones must support disabling GSM encryption as a fail safe. Never disabling encryption would be “fail secure” (like door locks that remain locked during a power outage).
They should not be supporting new features on old versions, and 1Password does not require servers or APIs. If you are paying for their cloud hosting then that is a justifiable subscription cost, but I’m already use Dropbox.

They should be supporting security updates and this should be built into their costs. Security updates represent flaws in their product.

If the user is frustrated by an old oversion and looks to upgrade (whether to a competitor or a new version), then that makes upgrading justified, transparent, and intentional.

Their subscription model just serves to make upgrading less intentional, less transparent, and takes away power from the consumer. Also at their current pricing it’s a massive increase in cost without really deliverying much more value. You’re paying more than what it normally costs in a year, to only be able to use it for a year. It’s like forcing me to pay for their product on an installment plan, but I don’t rven get to keep using it in the end.

Whatever benefits they claim a subscription provides can also be achieved by having more frequent, smaller, incremental updates for features you can pay for.
Blockchain without Blockchain
It was developed for spam filtering. It’s really good - probably the best open source option for this type of problem.
Three sided football
I am not sure if that’s really true. I think EU meeting like having a meeting at work: looks serious, but often are ineffective. For show.

If you know how EU politic works, you might be aware of the defeated device of VW and other Europrean car manufacturers. EU’s own poulltion level is getting worse each other because of governments covering their own domestic manufacturer’s ass. See Netflix’ documentary.
What part of his comment gives you any comfort? ALL of the quoted text below looks insanely scary to me when we are taking about potential fines of $20 million:

“2) many of [the regulators] are in disagreement about enforcement and priorities; 3) much of this is really about pseudo-taxation.... 4) some regulators are going to fight about who "gets to" go after certain companies;”

So it says a) the rules are extremely unclear, even to regulators (which means that each of the 28 countries WILL have different interpretations of GDPR), b) that it WILL be abused to “tax” international companies; and c) each of the countries are so eager to abuse their newly granted “pseudo-taxation” collection powers that they will literally be waiting in line to do so.

None of that gives me any comfort.
Somehow, this particular argument against opt-out organ donation doesn't sway me in the least. I can think of a few ones that would, but this sanctity-of-the-body business just doesn't connect with me. I'm left wondering how much of that is just cultural or personal difference, and how much is because I don't have a doctor's understanding of the full ramifications of losing sight of that sanctity.
iCloud Keychain is pretty good, but it tragically fails in the followings cases:
* Any browser other than Safari.
* Apps that MacOS/iOS don't parse for password fields for some reasons so you can't generate a password right there — and it's a huge pain to add them manually, practically impossible on iOS.
* Cloud access (if you need your account and don't have any of your devices). Your Keychain is in the iCloud, but you can't access it from icloud.com

So Apple could easily make it much better but they haven't.
Here are the first few exercises, all for while juggling 3. In all of the following X and Y should be taken as all possible combinations of Left and Right.

* Throw really high from hand X, catch in hand Y, and carry on;

* Throw one from hand X, hold up the ball in hand not(X), catch ball back in hand X and carry on;

* Do that twice in a row with the same hand;

* Do it with the left, then immediately with the right;

* Do it with the right, then immediately the left;

Email me when you've done all those a minimum of 10 times each.

Do you know SiteSwaps?
The author has an axe to grind and pamphlets to sell. See if you can find a pattern in other stuff from this guru: https://news.ycombinator.com/from?site=acloud.guru

To directly address the author's question: My customers aren't speaking HTTP with me. Surprise! There are other protocols out there too. I don't have what you'd call 'frontend' development. No JS, only small amounts of HTML for informational pages, and most effort goes into keeping big backends alive.
Yeah, this wasn't a coding question.
No link offhand but I recommend mastering 2-in-one-hand juggling (zero in the other) three different ways: columns, clockwise, and anti-clockwise. Learn to do each of those patterns such that you forget which hand was ever dominant to begin with and then you're ready to try 4 throws and catches of 4 balls.

Another good exercise is to juggle 3 balls in the usual fashion (cascade) and make a decision to go directly into juggling 2-in-one-hand and hold the other ball steady. Then resume your cascade and try it again, but this time, use the other hand to juggle 2.

These exercises are fun and give you a sense of accomplishment in and of themselves, but they also really help lay the groundwork for a solid four ball pattern.

When finally learning to juggle 4, some people prefer a synchronous columns(1) pattern or an asynchronous fountain(2) pattern. For the best results, try each until you forget which one you ever had a preference for in the first place.

(1) http://libraryofjuggling.com/Tricks/4balltricks/FourBallColu...

(2) http://libraryofjuggling.com/Tricks/4balltricks/Fountain.htm...
Re-inhabited Circle Ks, 2007-2015
I dunno if we can call this a "deep dive". Its a good introductory blog post on the subject, but without a discussion on multi-armed bandits, its kind of impossible to fully understand UCT, and the Monte Carlo Tree Search built on top of it.

The Multi-Armed Bandit is a very simple / idealistic model. You have many slot machines, all of which have different probabilities of winning. Your ONLY ability to estimate your future earnings is through experimentation: trying the slot machines one at a time.

The Multi-Armed Bandit problem then asks: what is the ideal strategy for searching through all of these slot machines?

UCT, despite being a very very simple algorithm (its just a sqrt and a few adds), is asymptotically ideal. There are better multi-armed bandit solvers out there, but UCT is incredibly fast to compute and ideal for the "inner-most loop" of AI problems. That's why its used.

---------

Go (or really, any turn-based zero-sum game) can be seen as a multi-armed bandit problem.

Which moves will most likely result in a win for me? Well, you try a move by simulating it out, then record the win/loss statistic as a "win" or "loss" as a slot-machine in the multi-armed bandit model. Then, you try again, and again, and again.

The two factors of the UCT algorithm are exploration (trying new slot machines), and exploitation (repeatedly trying the best slot machine).

UCT proves that "exploring" at a rate of approximately sqrt(total visits) is asymptotically perfect. After 10,000 "slot-machine pulls", you want to make sure that you have ~100-visits in all of your choices. (Exploration factor).

Otherwise, you want to favor the slot-machine that has won the most. (Exploitation factor)

The sqrt(explortation) + exploitation factor is UCT in a nut-shell.

At the end of the say, UCT is an asymptotically perfect "multi-armed bandit" solver composed of just a sqrt(), a few multiplies, and a few "adds" here and there. Its outrageously cheap to calculate but (when configured properly) explores the tree "asymptotically perfectly". (Like Heapsort. Its not the best sorting algorithm, but it's asymptotically perfect, and thus useful)

---------

Anyway, this blog post is fine and all. But without explaining the 'Q' or 'U' formula, or even saying what they mean (exploration factor vs exploitation factor), its certainly not a "deep dive".

And there's no discussion for why you'd expect UCT to do well. Just a simple statement for why UCT is asymptotically ideal for the multi-armed bandit problem would go a long way for the reader's understanding IMO.
I'm of the idea that when you see a competitor doing something stupid you shut up and you just let them do it

"Serverless solves all problems" yeah, right.
Seems like a good case for a Wikipedia reader/plugin that indicates the level of controversy/abuse going on in an article. As a bystander, I get the impression the management/senior editors are not at all interested in such a feature.
Developing for serverless is no harder than "traditional" development. The traditional API you have a controller that has methods that are called based on HTTP verbs and routes. The controller methods translate the request to the backend.

With Lambda it's the same thing. You have a Lambda function mapped to an HTTP verb and route and you get s message and context. The handler acts just like your controller method. Converting from Lambda to a traditional MVC is not that hard.
> Of course, when we’re using the word “hunger” to describe the issue of food insecurity, we are indeed describing a problem.
Quantum computers could break encryption within a decade
Based on what metric?
Fortran and Docker: How to Combine Legacy Code with Cutting-Edge Components
Deephacking17gmail.com
I hired Deephacking17@gmail.com what a joke! Here’s what this fool does! First you send him a thousand dollars then he threatens to tell your spouse if you don’t send him nude pictures! He called my husband and tried to have phone sex ! Derrick you are a stupid sob !
If you are tempted to dig further into these techniques there's this book:

https://www.amazon.com/Science-Programming-Monographs-Comput...
The interesting part about Angr (and arguably, its' reason for existence) is that it can execute native (x86_64, ARM, others...) concolically [1] - ie., given a binary and a requested end state, it will strive using both formal methods and brute force to find input required to reach that state. All automatically, including converting binary code to an IL (cle & Vagrant IL via PyVEX), executing that IL (simuvex) and interacting with SMT solvers (claripy). This can be used for finding bugs, reverse engineering and exploit generation, at least in a toy/CTF setting.

Angr is also the open-source part of the Shellphish/UCSB contestant (Mechanical Phish) that competed in the DARPA CGC [2].

[1] - https://en.wikipedia.org/wiki/Concolic_testing

[2] - https://en.wikipedia.org/wiki/2016_Cyber_Grand_Challenge
A group of serverless functions are about the same as one Controller. You get more fine grained scalability and on AWS it is somewhat easier to scale Lambda functions than EC2 instances.
There are multiple centralized solutions that provide (among other services) nearly instant global transfers, Western Union is the first that comes to mind.

However, most centralized solutions that provide nearly instant transfers focus on one market (say, Eurozone or USA) and so they're not global - so there's no single "they" that could provide these with the caveat of higher risk, and it's a flaw of decentralization of international banking; the delays for worldwide transfers are caused by lack of a centralized solution neccessitating multiple bilateral transfers between unrelated institutions. Where a centralized system exists (e.g. Eurozone Target2 system), customers can have nearly instant payments within that system if you're willing to pay for that.
+1 to vendor lock-in. Being an AWS shop can start feeling like being a Windows shop in the 90s... it can creep up on you. You mostly have an open source app and slowly start acruing bits of AWS only functionality. A bit of SQS here... S3 here... Lambda there.

Before you know it your giant app is stuck on proprietary infra and core business functionality involves paying a significant tax to keep things operational.

I’m a big fan of hosted open source for this reason. But those hosts too have incentives to sell you proprietary “value add” functionality.
That being said, security updates shouldbe part of the price you already paid, since a security flaw is a flaw in their original software.

Security vulnerabilities generally aren’t considers latent defects under warranty laws (at least not in NA). I’m not sure what the tech world would look like if it were - for one thing, software teams would probably need a P.Eng. on their teams to ship. For another, using open source software would be even harder to do without an intermediary like Red Hat who would be willing to accept tort liability.

At any rate, your software vendor has no legal responsibility to provide you with security updates. Maybe they should. But you’ll pay for that anyways. How do you want to amortize those security updates? By paying the dividend discount price of the updates up front and risk having the product abandoned in a few years (cheating you out of your ‘dividend’), or by paying directly through a subscription?

If you are paying for a subscription there isn’t necessarily an incentive to provide security updates even more, since they have the functionality of your app hostage if you decide to cancel and the automatic monthly billing has no ties to the quantity or wuality of updates they push out.

That makes no sense - you have it completely backwards. Their incentive to provide me with timely security updates is my continued subscription fees. On the other hand, if you pay the dividend discount price for those security updates up front, they have every incentive to stop releasing updates and cheat you out of your update ‘dividend’.
How Developers Use Dynamic Features of Programming Languages: Smalltalk [pdf]
How about 3d printed bodies?