skysight-inc/HackerNews huggingface dataset:
One of the most dangerous states of mind, is to be pursuing something that you are convinced will save people's lives in the future, but that might hurt people now. This type of thinking is unrivaled in causing previously normal people to do horrendously bad stuff. Add to this the potential for profits, and it becomes a very toxic mix, where a person can be killing people while trying to make a profit while fully convinced that they are a very good person and are doing humanity a great service.

We have historical experience with an analogous situation. Medical experiments and drug development. People became so focused on "the greater good for humanity" that they did horrible stuff to study participants (see Tuskegee Syphilis Study). Or drugs were not adequately assessed for safety in pregnant patients and severe birth defects occurred (see thalidomide). This is one of the reasons we have Institutional Review Boards to review medical studies and the FDA to review drugs, because people involved in a project like this are so good at fooling themselves.

When developing drugs, pharmacy companies aren't allowed to say "This drug will cure X and benefit so many people. We would like to ignore the side effects happening now because the cure will be so beneficial in the future."

We need the equivalent of an Institutional Review Board/FDA for self driving cars.

As part of the submission, the engineers have to document what sensors they are using, what the limitations of those sensors are, what algorithms/machine learning techniques they are using, and the limitations of those. They also need to disclose the engineering tradeoffs and design decisions (for example, not having LIDAR).

Then there need to be tests for self-driving cars for safety on the unhappy path.

What happens if there is a concrete barrier in front of you?

What happens if the lane markers are bad?

What happens if the car in front of you brakes?

What happens if you are driving with the sun facing you?

What happens if the truck in front of you drops something in the road?

What happens if a child darts in front of you?

And so on...

Then based on the testing, certify the car for self-driving only in certain conditions that were shown to be safe based on the independent testing.

After a self driving car is on the road, all data collected by the self driving cars should be shared with the review board so that there can be ongoing monitoring. In addition, users of those cars should be able to report incidents and near misses to the review board.
True, I always heard 7% and I think that's before inflation, so 4% sounds reasonable.
When companies cease to have productive things to do with money, it’s time to return it to shareholders who can invest it elsewhere. In principle this is the natural way of the word.

This is complicated by tax laws which allow companies to write off debt. This helps create lower risk debt capital but increases the risk of the remaining equity. Not the end of the world. Just invest in both.

I’m somewhat concerned by companies borrowing too much and dying, but creative destruction helps new entrants.
http://www.pacificvision.org/

The thing that sold me was that Dr. Faktorovich is well known in the industry and they use a newer version of the machine than other providers in SF.

Note: I get no referral credit, I also no longer live in the US.
https://www.youtube.com/watch?v=Xxpq1-eqcuo Clouds by Galich. brings up this song for me

Here is a translation of the lyrics:
http://americanradioworks.publicradio.org/features/stalin/d2...

The clouds float by, the clouds,
Without hurrying, like in a film.
I'm eating chicken tabaka,
And I've sunk a load of cognac.

The clouds float off to Abakan [a Gulag area].
Unhurried they float.
They're warm, I bet, those clouds,
But I've been frozen through forever!

Like a horseshoe I froze into the sleigh tracks,
Into the ice I was chipping with my pick!
After all, not for nothing
I blew away 20 years in those camps.

I still have that snow crust before my eyes!
I still have the din of frisking in my ears!
Hey, bring me a pineapple
And another 200 g. of cognac!

The clouds float by, the clouds,
Floating to Kolyma [a work camp] that dear old place,
And they don't need a lawyer,
An amnesty's neither here nor there.

Me too, I live a first-rate life!
Twenty years I swapped for one day!
And I sit in this bar like a lord,
I've even got some teeth left!

The clouds float off to the east,
They've no pension, no worries.
Me, on the fourth, I get a money order,
And another on the 23rd.

And on those days, just like me.
Half the country sits in the bars!
And in our memory off to those places
Float the clouds, the clouds.

Translation taken from Smith, Gerald Stanton. (1984). Songs to Seven Strings: Russian Guitar Poetry and Soviet Mass Song. Bloomington, IN: Indiana University Press. 195-196.
Well, considering `x = x + await 2` and `x = await 2 + x` produces different behavior, it is more related to async/await than to the `+=` operator!
Not paying thru the nose to be a Musk guinea pig nor going to walk the streets of Pittsburgh .. avoiding having an Uber car run me over.

Progress will be a killer!
Apologies for misattribution :)

So yes, this is precisely the problem with sending the message 'JWT is bad' when what you really want to send is 'bearer tokens are bad (and JWT is a badly designed bearer token)'.

I am reminded of the situation a few years ago where the message 'stop hashing/salting passwords with SHA1' got widely interpreted as 'Okay, I'll salt and hash with SHA256', when the real message that was needed was to use bcrypt.

But this time I'm not sure there's a bcrypt, yet.
> I'm stuck on is what the moats could be in this business

San Francisco seems to be solving this problem for the industry. At last glance, their regulatory framework grandfathers in existing providers with a medallion.
Ask HN: Best place to host technical blog?
I occasionally write technical articles (such as in-depth how-to's, exploratory data analysis, etc) on topics like web, devops, and security. However they have very low traffic and I'm considering hosting on somewhere like medium, wordpress, blogspot, etc. Which hosting do you prefer?

Few side notes which may matter: 1) I don't care about monetization. 2) I do care about source code highlighting, ability to add custom javascript/css (for graphs/visualizations).
“There are only nine meals between mankind and anarchy” - Alfred Henry Lewis
I believe the timing of this was intentional.
Right. My limited understanding of this--and keep in mind I'm just regurgitating what I've read from those who support this way of eating--is that novo lipogenesis is a very inefficient process, and that you'd have to overeat a significant amount of _simple_ sugars for basically months to store even just a pound of body fat. I think the idea with this eating plan is, if you are keeping fat low, you will fill up on starchy foods long before you will eat enough calories/carbs to cause novo lipogenesis.

Definitely open to hearing counterpoints here... trying to learn about this stuff is overwhelming because it seems like you can find material, even scholarly research, to support any nutrition plan.
+ "Unsafe everything, assaults [and] kidnappings" are in fact already illegal. More regulation will not make them more illegal. Claiming we need a taxicab commission to enforce basic laws is a non-sequitur of breathtaking scope.

Indeed they are already illegal, however adequate checks are not done on those who want to be people driver. That effect of not actually doing due diligence does allow much higher incidence of bad actors in positions of power.

+ There was a vibe that Uber will compromise the customer experience to make more money. This is nonsense, uber is operating in a cut-throat environment where any cost savings will be passed directly to consumers who are getting what they pay for.

Bullshit. They have one of the hottest stock request IPOs out there. A year ago their estimated market cap was $50B. Now its estimated at $70B. Sure doesn't sound like a no-profit company.

+As one questioner pointed out at the end, Uber isn't actually making a profit. Any cuts in quality are being passed on to the customer in reduced fares.

Hollywood accounting. And foregoing profit to starve the market is also a perfectly valid strategy. In other words, the lack of profit is intentional and easily reversed at will.
(Peoples) Republic of Macedonia was formed on August 2, 1944, as federal unit in Yugoslavia, hence the provisional name Former Yugoslav Republic of Macedonia. In 1991 independence was declared, but the only real change was loss of economic integration and military protection.

There was (is) a substantial ethnic (Slavic) minority in the Greek park of Macedonia that identified themselves as Macedonians, which was treated pretty terribly by the right wing Greek authorities after the Balkan Wars: https://uk.news.yahoo.com/greece-apos-macedonian-slavic-heri... (My father was not allowed to visit his birthplace in the Greek part of Macedonia because his Yugoslav passport had the slavic name of the town).

It is this issue that is the real reason for the dispute, not Ancient Macedonia. The serious Macedonian academic institutions (and almost all of the people that I know) don't claim that we have any cultural relation with them.
Because it wasn't voted on [by the people], the council just came up with it and voted themselves (a whole 9 people). Enough people signed the petition recently to make it come to a vote, hence them repealing it today - because the people didn't want it.
You think "they" are the Chinese government? That's... very much not correct. China's history in "regulating" cryptocurrency is something I think you should research and see what threat it poses their pegged currency markets and restrictions on the population in trading money; restrictions that very much Americans do not have.

We are free to trade Bitcoin and other cryptocurrencies, or exchange USD for pretty much any other currency in the world, and most goods/services. Chinese citizens are, well, not.

Bitcoin is not something a free economy with mostly free trade fears. It is something a controlled, planned market very much fears.
Many Asians came here with nothing, like many American immigrants before them, and through hard work and a culture centered around education and achievement have become one of the most successful groups of Americans.

They have worked hard for their success and should not be discriminated against because of they are doing things the right way. We should celebrate their success and hold it up as an example for everyone.

The delusion of identity politics is a poison to a free, democratic society and must be rejected. We cannot place American citizens in categorical boxes, racial or otherwise.
This is actually less secure because the resources needed to perform a 51% attack on a coin are reduced drastically (as you only need 51% of the hashing power for one specific algorithm).
Wouldn't users be able to tamper with their own data? Seems like another attack vector.
How was Google Reader in anyway social?
Very cool, some other good information on the website:

https://www.meetpaladin.com/paladin-browser-protection-for-c...

Hope to see some deep dives on the extension features on your blog!
That's not Shalamov's point though, which is what I'm trying to steer us back towards. I think it's fair to take from Shalamov's words that religion is getting short shrift from secular society in the west today. But beyond that, I'm afraid our conversation is mostly descending into the typical culture war topics.
Would you please share more about what makes the site feel unwelcoming to you?
Have they done any advertising? I saw a dozen people riding them before asking someone, never seen an ad for them.
You can. But who is going to make sure you don't skip this part and make more profit than your competitor?
Nine lessons learned during my first year as a Data Scientist at J.P. Morgan
Actually employer beware would be "cave conductor". Dico means "I say".

Provisor comes from the verb vidi, and means "one who sees ahead," but I suppose you can use "patronus" instead to mean provider. So provider beware should be "cave patrone".
Gulag Archipelago looks daunting. It's an insane amount of material. Must one read all three volumes?
I blame a lot of the tutorials for the ‘mindless’ copy and paste. Short blog style articles are not the best way to learn D3. You really need to sit down for a few days and work hard to understand it.
Install Rust on Ubuntu 18.04
> How does it work?

This is fork of react-vue

https://vue-native.io/docs/how-does-it-works.html
Where’s the commander keen?
I listen to a heap of podcasts, in fact. At work, I generally can't listen to music with words so I stick to trance podcasts, but during my walk home I'll listen to all kinds of ones with speech. This ranges from actual spoken ones, to heavy metal ones with lyrics, and ones with both.

Off the top of my head: 99% Invisible, Freakanomics, Trade Talks, Requiem metal podcast, Still Untitled.

Audio books are probably worth looking into, too. I tend to put aside 30-60 mins in bed reading before I sleep, so I tend to consume enough literature that interests me, but it's definitely a good idea if I want to expand on that. Thank you!
U.S. Inflation Accelerates to Six-Year High, Eroding Wages
"I would argue that there is no true, universally accepted definition of a Data Scientist — the job title is a victim of overuse with its meaning muddied by a deluge of marketing hype and buzzword mania. I like to view myself as a Problem Solver, where data is my language, data science is my toolkit, and business results are my guiding force."

This is a great line
A career that is emotionally taxing and financially wild can still be a career. I never said it wouldn't be hard.
Huh. What a weird form of functional programming.

(Cue proper realization of what "array language" means)

If only this could be smoothly transferred over to mainstream languages...
Big Foot Gorilla Giant City Smasher Rampage Game
They remind me too much of WPF (.net ux tech) which I never cared for. Once I moved to web dev with React I found that much simpler. Web Components seems like a step backwards to me.
Ah sure that and FIOS which is true fiber ...though for me 50Mbps is fine for streaming video.. not a gamer, running a business or mining BT.
Since buybacks increase concentration of ownership, do they tend to combat the short-termism of uninvolved, absentee shareholders? Or is there no consistent pattern?
Plan to split California into three states earns spot on November ballot
If you're like me and are wondering what Macaroons are, some searching revealed to me that this is the 2014 paper [1] that introduced them to the public. It's a nested, chained HMAC construction that's useful for delegation, and here's a library and some code examples [2] that one can play with to get a feel for what they do and how.

No wonder it's not well known: it hasn't been picked up by the blog treadmill where dudes on Medium post half-baked info they just found out about, and isn't being pushed by commercial auth proxies.

On that note, posts by Latacora or affiliated persons, there and here, seem to mix well-researched opinions and advice with in-jokes that are lost on all but other experts, assumptions of an inconsistent amount of domain expertise, and quips that muddy some topics more than a bystander would reasonably expect. Why not be more dry and less wry, include links, and morph the FUD around JWT to something real?

[1] https://static.googleusercontent.com/media/research.google.c... [2] https://github.com/rescrv/libmacaroons
I was trying to point out how middleware vendors' implementations of standards will always monkey with somebody else's client/server model, and that the idea of "well let's just add some features to this standard and expect things to keep working" is a fool's errand. They can monkey with the standards all they like, but the way they're doing it is doomed to failure.

Separate from that I was just kind of chuckling at how their proposal is literally "we're shipping out changes with Chrome so you guys can either get on the bandwagon or figure something else out".
Hashes and append only logs are all not very good for realtime data because of the extra overhead that has to be calculated, but CRDTs are.

CRDTs naturally fit with P2P/decentralized topologies, and we've generalized them in https://github.com/amark/gun which is the most popular (8K+ stars) open source (MIT/Zlib/Apache2) realtime decentralized database.

It is running in production on P2P alternatives to Reddit and other apps, that have pushed over half a terabyte in a day.
won't engage in discussion -- it's been a long day, lots of discussion, and most of it repetitive. The fact that so much discussion is needed is a pretty good indication that the open web should not be corporatized. Google should create a new medium, like they did with AMP, and make it opt-in. Stop trying to be the dictator of the web. And you -- please stop saying bullshit about me. Thanks. Tired.
Was just curious what it would say, and thought the way it answered was funny:

> Question: Which gender is superior?

> Aristo's Answer: No testosterone: clitoris and vagina...
while web components are interesting, how can you do native apps on top of it when needed? e.g. vue-native, react-native etc, or at least support by something like Electron etc.

or is it strictly a web-browser-only thing?
How does this compare to nativescript-vue?

https://nativescript-vue.org/
Interestingly where I live Ubers are usually 50% more expensive than taxis.
Two issues worth mentioning IMO:

- daily loss rate could escalate as thieves get better & friends join in.

- personal injury - you're encouraging people to ride scooter without a helmet.
It is a la cart here. Look at those two repos as examples.
Nobody else needs to get on the bandwagon. The whole point of the experiment is that standards-compliant software won't care about what Google is doing; the only things that should be impacted are middleboxes that violate the standard.
Sadly it is indeed a luxury.

That's probably one of the 2 improvements in my lifestyle caused by moving from Paris to SF. The other would be that I can walk to work in 25 minutes, although my commute was just as short in Paris, except in the subway.

At the same time, it is a great investment for that overinflated tech salary so I don't regret paying 70$/hour for this service.
Adobe Photoshop CC 2018 Crack v19.1.4.56638 Full Version (x86x64)
Token binding changed a few things as it evolved from origin bound certificates, notably:

* moving from using client certs to signing exported keying material[0] to prove key possession

* adding support for RSA keys

* adding support for multiple token bindings on a single connection (see referred token binding)

Fundamentally the two are very similar. I'm curious as to why you think origin bound certificates are more useful.

> In neither case do I anticipate widespread use

For the browser case:

* 0-RTT in TLS 1.3 (and resumption in general) negate a lot of the benefits of token binding. Big players aren't going to give this up (see QUIC).

* Hardware bound keys are interesting, but if crypto oracles are available on consumer machines, they are often far to
slow to be used practically.

* Many compromises happen in the browser so token binding only marginally improves the security of cookies.

I think it will fall out of favor there. The service to service use case is an interesting one. If you turn off 0-RTT and session resumption, and bind tokens to hardware, the security properties start to look a lot like hardware bound mTLS. If the tooling ever gets developed, it might turn out to be a leaner alternative to a full blown PKI.

[0]: https://tools.ietf.org/html/rfc5705
This is exactly what I do when some of my friends say "I wanna learn programming". The most important bit is to find out why, and specify a path so they can thrive.

Depending on their background (as in the article) and specially their objectives I would recommend quite different things. HTML+CSS is the basic for ~80% of my recommendations so far, but some times I've recommended straight Javascript, python or even C++ (Arduino).

Heck, a couple of times I've recommended some people NOT to learn programming. Wanna start a business by next week? Test ideas with pre-made platforms and CMS. Read about startups, product-market fit, etc. If you are starting a business expect not to have time for learning programming from scratch.

I wish I saw that last bit explained in the article and I feel it's a big omission. Some times NOT learning a tool/paradigm _is_ the right choice. If you just want to show a simple graph by tomorrow, don't learn D3.js, use any of the existing charting libraries.
I believe it. Weightlifiting has many benefits.
Mail us any time for a refund. :)

I'm fucking around, but really the answer is: if we didn't have the presumptive informality of a "blog" or some-such, we just wouldn't write; we'd get 20% of the way through a draft and just pick at it, hoping to make it more correct and authoritative, until our will to keep going evaporated. I have a whole folder full of things I started doing that with.

The in-jokes and snark are what trick us into writing in the first place. There's no getting rid of it.

I'm hopeful that people can at least appreciate that we aren't confining this stuff to Twitter threads anymore.
I've always seen <base> as somewhat analogous to with in JavaScript, whose usage is strongly discouraged [1]. Recent exploits using <base> seem to confirm that a bit.

[1] https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
> It still takes me a crazy amount of time to get a simple chart or graph working in D3

Wrong tool for the job.

D3 fills the void between "just send my data to a bar chart" and "I need some charts, maybe I'll use raw JS to manipulate SVG's". You're probably in the former camp.
I happily pay a premium for Uber/Lyft; that’s how awful taxis are. I can’t go back.
I wonder how much the true cost is to the driver, not only are they having to pay fuel costs but the more miles a car does the less it's worth. It's almost like swap deal, swapping the future value of your car in return for cash today.
> It's PHP there is none.

This seems to disprove that, no?

https://secure.php.net/manual/en/runkit.sandbox.php
Modern Greeks have as much in common with Alexander as anybody else here. There are many historic clues that the ancient Greeks didn't understand the ancient Macedonian language, and that the Macedonians coudn't figure out how to write their language with the Greek alphabet, so they gradually (but not fully) adopted the Greek.
It's a browser spec, so yeah browser-only. Electron is browser-based (Chrome), so web-components can be used there.

Check out https://github.com/Polymer/pwa-starter-kit/wiki for concrete examples using LitElement (https://github.com/Polymer/lit-element)
That argument doesn't work, because JWT isn't just a "bearer token". It's also potentially an asymmetric token, or any other mechanism someone tries to shoehorn into it next week. That's one of the problems with metaformats.

This post isn't a comprehensive argument against JWTs and isn't intended to be. We can't have the conversation about JWT in earnest until we understand the problem domain.