skysight-inc/HackerNews huggingface dataset:
>Obviously I can only answer this conclusively for one person, but it's de-humanising. It turns your online life, which is increasingly becoming a larger part of many people's normal life, into a Truman show; you--with your ups and downs and whereabouts, become a hapless player in a ruthless monetising game of which the goal is to siphon agency of your own life away from you.

But what does this mean functionally?

I don't mean to disparage your argument, but I've never been able to get a clear answer on actual pain points from Facebook data mongering, answers are always some variation of above, which I take to mean "it's icky, I dunno, it's just icky."
People, the author included seem to think it’s wrong in some way that the author is not just assumed to be an absolute authority on his work, though I think it’s quite appropriate and that this example illustrates exactly why you would want the author to provide his oppinion and statements in a manor that is referencable.

If he had been allowed to simple change the page at will, then he could at any time in the futur decide to change the statement after the fact of what the inspiration was, as it stands now even if he change me his mind the New Yorker story can be referenced as a fact that he at that time made these claims.
How is it with no expectation of profit? E.g. in CSGO you could pull skins that are worth 100s of dollars... and then sell them on 3rd party sites.

Also the rare skin itself can be the profit because you get a higher status and prestige within your peers.
> Loot boxes give you variable entertainment, but for that to be gambling you have now defined entertainment as the element of prize

Variable entertainment? Then a lottery scratch card is "variable entertainment", whatever that is supposed to be.

As is I can't distinguish a scratchcard from a lootbox except one has some regulation. They have a feature prize that is the reason for purchase, they have small odds of achieving the feature/promoted prize (Game loot boxes frequently don't give the actual odds), they cost real currency, they can give something of value.

Do you then claim that a scratch card is not gambling?
Anyone still working on Space Elevators? Seems to me, if we could actually get one of those going, maybe interplanetary travel could be much easier and more economical. Sure Musk has made great strides with reusable rockets but imagine saving on a lot of the fuel by using an elevator that might not require as much or any rocket fuel (to exit the atmosphere), that could save a bunch as well.
I'm still an intern in the industry but have worked for a few places, you normally start by poking around/recon, look at where things get complicated and where systems are connected because those are often the breaking points.

During recon, if you can find what tech is being used you can see if it's outdated at all or where vulnerabilities were found in the past. If you're doing penetration testing/vulnerability assessment you're not inventing new exploits, just using what's already out there and tweaking it. Research on new exploits is more rare as a job I think.

See [0] for the steps of pentesting and OWASP [1] for everything regarding security.

[0] https://www.cybrary.it/2015/05/summarizing-the-five-phases-o...

[1] https://www.owasp.org/index.php/Main_Page

Also there is a big security community on twitter where you can see researchers tweet about a lot of the stuff they're working on right now.
It's...still satire.
Okay, I appreciate npm and everything, but nowdays new versions come out on a weekly basis yet something still breaks, either locally or in the CI for us. This made me fear two things the most lately: `npm i` and `npm i -g npm`.
I'm actually blocked by the main person behind NPM because I disagreed with him over a politically motivated tweet he made... so it wouldn't surprise me in the slightest.
Thanks @ammmir, I would love to review it. By 4:30 to 6:30 pm IST. I will post the review.

P.S. I am currently reviewing side projects, android and web-based projects.
For your average Kenyan it is ... rather large.
I guess buying physical cards is not so addictive that anyone would pay attention. In mobile games, everything is set up for you to make repetitive purchases in the hope of winning bigger: your credit card is on file, the design of the boxes echoes casinos, etc.
inaccessible even via VPN for me...
Corollary: There is no shortage if the salary is low.
I am remote, and for the last few years did not work in a fixed location. My SO traveled with me and managed us, but had no job.

Because of the way we lived I think my communication skills have gotten better. Each new place we either lived with locals or other expats, or we worked out of pubic places like cafes. During non work hours we regularly went out and interacted with others.

For work I only need to be "in office" during certain 4 hour chunk of the day, the other hours could be worked whenever I chose. Often my schedule would change from day to day. This is bad for keeping regular eating and sleeping schedules. I feel this indirectly affected my social skills at times.

When I am in Asia, that four hour chunk corresponds to when most weekday meetups happen. This limits some of my opportunities to meet new people, and be sociable during the weekdays. On the other hand, I can do random daytime events that most people have to take off for anytime they come up.

I never had an extremely healthy social work life when I did work at the office. It was an office of 1-2 other IT people, and a majority of my work time was spent coding, not socializing. The same is true now, except when we socialize it's via hangouts instead of in person.
Card packs are also obviously gambling.
this is what I've wrote
I think you're mostly right (or at least insightful), but there's a caveat. Decentralization can't create big companies, by definition, but it can destroy big companies.

There's ample historical examples of that. The Internet (originally) built upon the plain old telephone network, but eventually ended up supplanting telephones, AOL, the big-3 TV networks, and many other communication monopolies. Open-source software has commoditized many formerly-profitable software businesses. Napster and the P2P craze failed as businesses, but not before taking down the record industry and opening the door for iTunes & Spotify.

For many of crypto's proponents, that's a win. They'd be happy if a bunch of banks & VC firms faded into obscurity. There'll be new evil corporations built on the backs of crypto (just witness the community blowback against Coinbase), and in the long term some form of centralized power will just colonize the crypto space the way Google & Facebook colonized the Internet, but in the meantime it may shake up quite a few old industries.
thank you. I've been saying it is nothing new... baseball/hockey/MtG/Pokemon cards are essentially the exact same.

as long as you aren't hiding game changing content in loot boxes (ie. all skins or something) I think they are perfectly fine.
GDPR only applies to EU citizens. This would apply to California residents. It also is covering a different behavior.
I'm sure you've already tried this, but here go my two cents about back pain.

My job is also sitting for 12 hours a day (although much better regulated and not as damaging as yours).

Try stretching your psoas, look for gymnastics, cycling or dance stretching. It's been the only thing that has helped me. I started having problems to straighten each morning, constant pain in the lumbar zone, bulging disc.
A job partner told me about the psoas stretching and it works! It's the only thing that can make the pain go away. I'm telling everybody I know now! And usually helps a lot.

I only need to stretch it once a week but I must be constant if I fail to do it, the pain slowly returns.
Python – Managing Team Drives with Python and the Google Drive API
This is a deep topic. Here's an answer to it, which might not be everyone's go-to answer:

Consider the case where you know either the software or the system which is the target. Consider also the case where your goal is "get a reliably exploitable vulnerability while coming in under budget" as opposed to e.g. "enumerate a sufficiently broad swathe of vulnerabilities such that a stakeholder is pleased with your diligence." You will probably prioritize vulnerability classes which, in your experience and/or that of the industry, are numerous and high-severity. You will probably also prioritize "the joints" of the system, because (if you've done software development professionally) you know that handoffs between scripts, teams, servers, processes, etc etc are never as well-implemented or well-tested as something which is deeply within a particular set of borders.

Thomas has posted a list of features which are high-probability candidates for game-over vulnerabilities several times on HN; see second half of this comment: https://news.ycombinator.com/item?id=7936921

Research prioritization in a wide open space is research prioritization in a wide open space, and is broadly a hard problem. Broadly speaking you look for leverage: how does the set of things you are capable of causing get to a disproportionate (potential) impact? If I were hypothetically in Google Zero, I'd be looking primarily for widely deployed software which sits in poorly-understood places, operates at least part of the time on user-supplied data, and is colocated with terrifyingly sensitive systems. Bonus points if that software is boring and so hasn't had anyone take a serious look at it in a while, like e.g. png rendering libraries or request parsing libraries.
The blog post is accessible through IPFS here https://ipfs.io/ipfs/QmY2LufsW3v6AfxTTkp6SGqDGa5AeJhSZXH8RSs... in case the original link doesn't work.
Since they introduced package locks `npm i` breaks way too often for us (we have win-mac-linux machines), it's a royal pain in the back.
England and Knight (along with Swift) are the worst. Not all companies work like that though. Literally, your mileage may vary.
After working from home for a decade (own projects + freelancing), I have now taken on a full time role mainly because I wanted to change the scenario a bit.

My routine was very haphazard while I was working from home. Being an introvert and with a very small circle of friends, I was lagging on social activity - in general a pretty miserable situation.

Now, 15 days in the new routine and I already feel way disciplined as I have to sleep early to get early for the office. Also, staying away from home for 10 hours makes me feel eager to return back to family, and they seem more welcoming too :)

I may not continue this job (office politics, incompetent management) but I will try to find another day job or some sort of activity where I can spend at least 8-10 hours out of home.
The lootbox mechanic can be easily disguised without making it seem like gambling:
1.Buy lots in-game currency with cash or grind X hours for it.
2.Buy "A ticket to dungeon Y" with in-game currency.
3.The dungeon has a boss that is essentially a easy to kill walking lootbox.
Tada, all gambling regulations bypassed.
If you want to play loot-centric games this is your choice.
All MMOs that revolve around items and loot will bypass the "lootbox" ban with a system as described above or better.
(for the record, this system is actually in widespread use in Asia-based MMOs)
The entire traffic light metaphor of status pages and dashboards is questionable IMHO.
Moreover, the chance of a verbatim GDPR in the US being interpreted the same way is even smaller.

Though I do have hope that there will be a common base that gives compliance amongst all regulatory areas.
Actually, 503 is better in this case. Internally it shlkld report 500.
Personal attack is not allowed on HN and we ban accounts that do it.

Please (re-)read https://news.ycombinator.com/newsguidelines.html and post civilly and substantively, or not at all.
I think there is tremendous potential in baking in these sorts of games into some kind of chat application.

The creators of Chatroulette originally wanted an app that could connect people around the world, it just turned out become a platform for people exposing themselves over webcam. If you could avoid that, and build a platform that nudges people into building these intimate conversations across the world, you might bring huge value to a world where people are increasingly lonely.
My thoughts exactly.

We are one step away from very bad shit hitting the fan in a very painful way... so let's pretend everything's fine and try not to think about these things.
hyperkube was what i used when I got my first cluster up and running (this was when coreos still hosted kubernetes baremetal setup guides not just pointing everyone to tectonic), I remember it fondly :)

I didn't include it due to that caveat, and the general feeling that the processes really are meant to be started separately. I haven't seen anyone try and run these processes with some sort of supervisor but it seems like that's not "the way" and wouldn't really even offer any benefits.
This point comes up a lot when discussing loot boxes.

Essentially, it's a matter of practicality and extent of impact on the public. Industry regulation with regards to some widespread practice is usually the final step of an extended period of failure to self-regulate [the practice that is producing some undesired side-effect].
This is very interesting, the amount of rendering complexity they pull from volume data is nothing short of impressive. Having never ventured beyond Orthogonal projections for pseudo 3D in my work, this is some fresh air.
But it's rather useless as a standalone technology. Much of the appeal comes from pulling color and using it to render from segmented volume data, which is rarely the case in the field.
"Scattering effects are modelled using a local gradient shading model"
This can mess with perception, if done incorrectly, especially where precision is spares like Volumetric data pulled from Ultrasound, not to mention such a rendering model in non segmented data sets is questionable.
But one hell of a tool to convince a board meeting of whatever.
Do you have any benchmarks showing how much time is spent in on webpack plumbing vs babel, comparing to sucrase?

As in, how much does this actually buy you in a real world scenario?
What to consider when creating choropleth maps – Chartable
Ahh. The RAG status.

Professional truth-massaging
Maybe they have specific targets or categories of software in mind.

Or maybe the individuals focus on a specific theme or pattern.

They can often use the experience if they follow a similar pattern.

For example someone might focus on password manager applications.

If they find one family of weaknesses they can often go test other similar applications to see if they have made similar mistakes.
Reports of the Impending Demise of Operations Are Greatly Exaggerated
I recommend "The Art of Software Security Assessment" (Dowd, Mcdonald, Schuh) if you want a exhaustive book on the subject.
Haha, I see what you did there.
Maybe µBlock° was blocking it. You can access it directly at https://l3.evidon.com/site/425/3445/22.
Better choice: move away from Node.
Update multiple UI with same source data in Android using MVVM
They are where form and contour matters, which you can't always deduce from a orthographic 3 Panel view.
In my current case the form and thickness variation of nerves in Parkinson's patients is looked at and analyzed. Since nerve curve through space like worms, looking at curvature in raw image data is unpractical, especially since it's not always apparent whether you look at the cross section at an angle.
If they are annoyed by the spam, they can “mute”.
I, for one, agree. Jordan equivocates so much on his more controversial ideas because he wants to maintain the pretense of objectivity.

"I'm not right wing, or conservative!" from the man who says "Abortion is clearly wrong"
Grow Your Online Business in Lebanon
This is why I make clients drop/replace SaaSs. When SaaS don't update status page, or in a transparent and prompt way, because it's not 100% outage it rages me, especially if the reports are found elsewhere - twitter/reddit/hn.
I'd say otherwise. It's not like it's really important here, but in a book, that would be a very bright sign of amateurishness to me. Just like with sans serif dotless `i', `n' and `m' the only difference is not the number of the loops, the same with the hyphen, endash and emdash, they mean different things. Hyphen compounds words or breaks them across the line break, endash connects them in logical relations, and an emdash can stand for a colon or a pair of parantheses, indicating a subordinate clause that serves as an aside, generally. When these are mixed up, parsing the text becomes harder. It's not much of a trouble here in an internet title, but when this kinds of misuse appear in a long, difficult period in some rather complex text, it can end up consuming too much time.
Docker as a Tool Provider
Are you willing to pay dramatically higher prices for literally everything you buy? Solutions like “just raise wages” are simplistic. Markets don’t work that way. You raise wages, trucking gets more expensive and demand drops, causing all sorts of unintended consequences.

What very few people talk about is eliminating taxes on diesel fuel. That would lower costs and increase margins which would result in companies being able to pay more. Trucking is on razor thin margins as it is, cutting taxes would be another way to make “raising wages” possible. Trucking is so competitive that most companies would go out of business if they raised wages 200-300%. The world is governed by reality, not wishes and hopes and mandates dictated by people that have little understanding of the economics of logistics — or the economics of anything for that matter.
I like to use GitHub to find vulnerabilities.

I mostly do cryptographic engineering, so when hunting for issues, I search for things that are usually problematic. For example, searching for something like "XOR encrypt" and you might find someone doing something they shouldn't.

You can also try to find problematic implementations of standards by searching for those standards and trying to find comments or similar code. You might find some interesting stuff by searching "ECIES" or "NIST SP 800".

If your goal is to begin research, typically you'd find a problem, exploit technique, or vulnerability class that interests you. Then you start looking for places where you might be able to see how people defend against it (if at all). This is when you start finding issues pretty quick since you develop some sort of custom heuristics on code you examine.

Best tip from me would be to get to know some standards and see if they are being implemented correctly.
Solitary Confinment, here i go, turn the cage.
Papua New Guinea bans Facebook for a month to root out 'fake users'
That's the hope! To be honest, I haven't worked with Jest a lot, and the plugin is sort of a first pass to get things working on the Apollo codebase (which uses Jest), so e.g. it may not be as smart as babel-jest for things like caching. Contributions welcome, though!

My specific use case so far has been running Mocha tests on a large codebase, so it's replacing babel-register (which uses a cache) with sucrase/register (which doesn't). For that use case, it seems to significantly speed up test startup time with a cold cache and somewhat speed up startup time with a warm cache. Just loading and saving the babel-register cache takes a fair amount of time, at least in Babel 6.

It's good to keep caching in mind when thinking about this stuff. In many cases, Sucrase won't be faster than loading results from cache. Sucrase helps with initial startup time and avoids the cache fragility issues that I've seen with lots of caching systems. And, of course, you could cache Sucrase results and get something at least as fast as cached Babel.
It's true that availability is not "automatic" as per the software itself (rarely is in P2P networks). To make sure the data stays online (whether IPFS or OrbitDB), one needs to make sure there are enough nodes serving the data. In OrbitDB the replication protocol will make sure the full database is downloaded and served upon opening the database and as all db-data is IPFS-data, the db will be served just like any content on IPFS. So for example, for an application built with OrbitDB and IPFS, one would probably want to run some nodes themselves to "pin" (IPFS parlance) the databases and serve them to the network.

Edit: There's an open issue for a "OrbitDB pinning service" (https://github.com/orbitdb/orbit-db/issues/352), it's in the works atm.
Hey man, where did you do most of your skiing? Also I would love to chat with you about how you went from ski bum to professional programmer (I'm assuming) but you don't have an email in your bio. Cheers
Yea, but the difference, the likelyhood of you dying from such a rush is minimal. Truckers die often from sleep deprivation mostly due to bullshit haul times. Google "trucker deaths per year".
Why It's So Hard to Learn Another Language After Childhood
In many games you can cash out, either above board (steam marketplace) or in the grey/black market. But even then, does it necessarily matter? Things of value still have value, and digital goods still have value. People pay cash money for software constantly and we don't question that, we believe that software can have tangible real-world value, sometimes considerably. If someone gifted you a copy of Photoshop or AutoCAD etc. you wouldn't think of that as valueless. The same is true in entertainment products too, and just as with professional software it's a matter of enforced artificial scarcity.
Revolving doors are usually delayed compensation for services rendered, not the future potential of the candidate going through the door.
MailSlurper 1.14.0 released
Data Driven Post-mortems
I present you, the litany against fear..

"I must not fear.

Fear is the mind-killer.

Fear is the little-death that brings total obliteration.

I will face my fear.

I will permit it to pass over me and through me.

And when it has gone past I will turn the inner eye to see its path.

Where the fear has gone there will be nothing. Only I will remain."

---

from Frank Herbert's Dune series.
Etihad Cargo on Humanitarian Missions to Kazakhstan and India Amid Ramadan
Many commenters have highlighted faults in this article. Maybe the 9.9% aren't to blame; maybe they aren't a meaningful classification to begin with; maybe there is more to the story than people hauling the ladder up after themselves. Yet these criticisms miss the author's warning: regardless of the causes, when substantial inequality obtains, opting into the social contract looks like a good idea for a smaller and smaller subset of people. That's when civil society falls apart. To not beggar thy neighbor is not only generosity, fairness, respect for human dignity -- it is also prudence.
The error was on the server side, not the client side. The server was not following the HTTP spec. The fact that it was server side was why they were able to fix this so quickly.

Since it was a server side error, and the issue was not a client side one, the 500 error code is most appropriate. The fact that the npm client itself is the first one to trigger this error is not the issue here, as it could have just as easily been yarn or another client. Following standards are important, and we weren't trying to make tea.
So maybe in the future we accept payment upfront for our privacy or through incideously free services.
No risk in getting shot either I suppose, except for the issues of bleeding out or puncturing a critical organ.