skysight-inc/HackerNews huggingface dataset:
I don't normally call out this type of post, as tit does not necessarily warrant tat. However, the previous poster did a good job laying down how things are supposed to work. I could point out that there are yearly ethics trainings at the Federal level at least that make it VERY clear that the type of behavior described IS, in fact, illegal and was made illegal due to it's prevalamce, and as far as I am aware, the laws forbidding this type of behavior apply equally across all three branches.

Note that does mean the practice of "taking a Representative to dinner" would also be an ethical violation at least, and possible anti-bribery statute violation at worst. I find the frequency with which I hear tales of this type of behavior most disturbing.
I don't know what to think here. On one hand, Google is writing code to make YouTube faster on its own browser. This is reasonable. On the other hand, Google is also using its dominance in internet video streaming to make Chrome look like a better product than the others. This is anti-competitive.

It is wrong to optimize for your own ecosystem, without optimizing for others?
Twitter is “shadow banning” prominent Republicans
> This seems like a poor choice of technology rather than an outright nefarious decision.

How would you tell the difference?
1. This is understandable.

2. Your criticism of IMAP is awfully convenient when it allows you to design a platform which has vendor lock-in. IMAP might not be designed for encryption but people have been using it for PGP since the start and it's worked fine. Every other email provider does fine with the bandwidth. You're a terrible email provider if your bandwidth constraints don't even allow for IMAP. Having an API is fine, but it's no replacement for open and standard protocols.

3. Excellent. You'll still hear me criticize Protonmail for this until the promise is fulfilled, though. You don't need the software to be perfect to make it open source, you know.

>Yes, it's monitored. I was notified of this problem today and will look into it.

Thanks!
It doesn't work how you seem to think it does. Your password never goes to the server: https://protonmail.com/blog/encrypted_email_authentication/
The Twenty Dollar Swim
Qlik Acquires Podium Data as BI and Big Data Coalesce
Would that act cover things like targeting health insurance ads based on genetic traits?

How about displaying recruitment ads to people with lactose tolerance gene, effectively excluding most of worlds non-white population?
If you don't mind using a desktop app, there are still many great tools for hobbyists and for teaching.

Recently I've used:
Qucs: https://sourceforge.net/projects/qucs/

Circuitmod: https://sourceforge.net/projects/circuitmod

These were also in my bookmarks of tools I've explored:
CEDAR Logic Simulator: https://sourceforge.net/projects/cedarlogic

Logisim: https://sourceforge.net/projects/circuit/

For teaching LogicWorks is still my favorite.
What exactly makes you believe that rocket science is a domain that's easy to transition into?
That's the first design-related documentation I've seen presented, so thank you.

However, it's merely an indictment of the POSIX standards process and sheds no light on why the AT&T implementation was the way it was in the first place.

I keep reading what, to me (essentially an outsider with no horse in the race), sound like either hyperboles at worst ("brain-dead", "really stupid", "no excuse") and arguments advocating the MIT Method (of "Worse is Better" fame) at best.

It tends to beg the question, "If it's so horrible, why did anyone bother to implement it that way or use it once it was there?" I'd expect, if it's actually as broken as everyone makes it out to be, that it would be worse than nothing and would get no use.

Apparently, the major db vendors didn't bother, at least at the time, but that could well be because there was no reliable [1] cross-platform option.

So, again, how about some actual, contemporaneous evidence of the original design process, for a fair, contextual critique?

[1] i.e. reliable or good enough, not reliable in the sense of implementation correctness covering all corner cases, as seems to be demanded by certain commenters and the MIT Method in general.
Preventative targeted therapies lead to over testing. Even worse there is the perverse incentive of having a for profit company marketing the intersection of their products with person's potential future ailments.

Having the same information available to your doctor (or an AI, ha!) that could parse it objectively would make more sense than a single pharma company. Does anyone really think that GSK is going to suggest you take Viagra (Pfizer) over Cialis (GSK product)?
Only logistic and linear regression for now. For use cases it covers, this will save a lot of plumbing.
Augur protocol leads to Ethereum-based ‘assassination market’
My number is 10,000 USD per month AFTER taxes. Don't ask me but this is what I need to run a family of 4 and just have a little bit extra.

So with absolutely safe investment of a 1% checking account, I would say 12 Million USD in Cash ? I know that there is inflation factor but in 2018, thats the number.
Usually is a request for more documents. A few days ago USCIS published two new rules where they can skip the "request for additional evidence" step completely and already start a deportation (in the case of a H-1B renewal, or even green card process).
>Protonmail's method of encryption allows them to encrypt the entire message, including headers/metadata

I would prefer to see them promote standards to extend PGP rather than invest that time in a new, proprietary system with no buy-in from the email-related-software development community. I can follow the logic but I can also see their eyes lighting up when they realize this is a great excuse for having a proprietary, locked-in platform.

>It also encrypts the messages received that weren't encrypted when they weren't first sent

This could be done with PGP
Gotcha, thanks a lot for your reply!
I use `pipenv install --deploy --system`. Doesn't create a virtualenv and verifies the lock file.

Of course, I definitely understand where you're coming from. It took quite a while for me to figure that out, because --deploy is not well documented.
In the lead up to the launch I remember seeing their artist impression CGI rendering of how they expected the launch/landing to go, and both boosters landed at the same time.

I thought to myself "I bet they don't land both boosters at the same time in the actual landing" and then several days later they did. It was amazing.
The Real Creators of the Billionaire's Parlor Game
Explore Time Off for Travel with Wealthfront
> If I had a choice between working on the original iPhone and writing yet another software as a service CRUD app, I know which one I would have chosen.

So those are the only choices there are? There are a lot interesting things than working on the iPhone and a CRUD app.
It's more important to us to address what developers want and many developers are using MySQL even on clouds.
concrete pours are still priced by the cubic yard (such as if doing a radio tower foundation or any commercial project).

a lot of construction related things that are priced by the cubic volume are still in cubic yards.
While we're on the subject, allow me to plug Electrical Age: https://electrical-age.net/

It's a minecraft mod, yes. It's also a fully functional DC electrical simulation, with realism as a primary focus. Any inaccuracies are either strictly required (= it runs at 20Hz for most purposes), or allowances for decent gameplay.

(Or bugs. Those are probably my fault.)
Technical ability alone does not qualify one for an H1b visa. You need to be above and beyond what is able to be sourced in America. Specifically, the skills need to be so advanced that you cannot find any American workers to fill the job.

I imagine this test would discredit nearly every H1b software hire.
I'm currently teaching an electronics class and have used this site heavily for in-class demonstrations. Some of the concepts (like a Push-Pull amplifier) are much easier to understand when you can see a visualization of how it works.
Use a fresh virtualenv for each project

As a form of version pinning, this locks in old versions and creates technical debt. A few years downstream, you're locked into library modules no longer supported and years behind in bug fixes.
Oh come on, don't straw man the actual issues. Nobody is worried about GSK getting rich, but are worried about actual issues like insurance discrimination, loss of privacy, loss of control, etc.

I think few people would argue against the benefits of genetic testing, but just because it's a great thing doesn't mean that being complacent around adjacent shady business transactions is the right approach.

You can be for it, but also for privacy, protection against insurance discrimination, etc. at the same time.
What Quinner said lousy like 'lousy with lice' (infested with lice).

From memory the Northern cap alone would cover Mars with something like 14 inches (it's close to 15 I think) of water :)
I see. Still, this process can be performed by a mail client using IMAP or SMTP extensions, the same way the web client does - I would be happy to implement this in my own IMAP/SMTP-related software. Google also has a feature which supports a separate IMAP/SMTP password from your account password, a similar system would be easy to implement for Protonmail.
The key point here is that they made it in a way that uses a deprecated API that will not be implemented anywhere else but in Chrome. Even Chrome own platform status page[1] says v0 is deprecated and scheduled for removal. By making their web properties rely on APIs which are no longer in standards tracks, they essentially harm the interoperability of the web. It is very comfortable when you control both extremes of some web property (the video sharing platform and the browser) to make sure they work well together and let the rest of the world play catch up.

We have standards for a reason, so that things such as this are avoidable and you can use your browser of choice, whichever that browser is, on the web. By allowing their web developers to play the "chrome-first-and-foremost" game, they make the net-positive side-effect of acquiring more users for their browser, after all, who wants to use a slower browser right?

[1]: https://www.chromestatus.com/feature/4507242028072960
You make good points but have not addressed the issue of licensing.
I want to love Zotero, I really do. But the last time I tried it seriously, I found that:

- metadata extraction/automated adding really doesn't work right with my research workflow (a lot of google scholar searches, a lot of humanities and social science sources)---lots of inaccurate or incomplete info, lots of downloading RIS files and then manually importing and separately manually importing the PDF.

- documentation for things that would be useful like hooking up to academic library proxies is nonexistent. Take a look at the chain of empty links when you try to get proxy info: https://www.zotero.org/support/proxies

- no better bibtex for zotero 5... Although maybe this has changed recently? Which would be amazing.
I read a really good take once that I can't find anymore, but the gist was: sometimes a company knows about a poor decision or a bug, and just leaves it in because it gives them a competitive edge.
Very little about space is rocket science. Cars are really hard to build and it took thousands of years for mankind to build one, but that doesn't mean the person changing your oil has to know how to fabricate one from scratch in his garage. There are thousands of job titles around the auto industry that require zero knowledge of how cars work.
Why the incoming EU copyright law will undermine the free internet
yes. https://groups.google.com/a/groups.riscv.org/d/msg/isa-dev/e... has a long thread about this. it's not the worst thing in the world, but I think the choice is confusing when it seems easy to sidestep. this is the only negative thing I have to say about RISC-V and it's not very major.
I didn't mean that sarcastically either, re-reading it I can see where it may come off that way.
Are you part of the Personal Genome Project? It's a large community of people who share their genetic data for science. http://www.personalgenomes.org/us
Why Progressives Should Embrace the Genetics of Education
Stripe is coming! This was a big source of pain for us at Elevate, supporting 3 platforms seamlessly.
Webauthn works with both FIDO1 and FIDO2 keys. (Unless you have the new, FIDO2 key from Yubico then you have a FIDO1 key). You might also see them called CTAP1 and CTAP2 keys because CTAP is the bit of FIDO that defines the interface to the hardware tokens. (CTAP: "Client to Authenticator Protocol". See https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-cl...)

FIDO2 keys talk a different protocol and do everything that FIDO1 keys do, and (potentially) more. For example, they may operate in "resident key" mode where the key remembers both your username and private key. They can also support things like PIN activation.

I've only briefly poked the Yubico FIDO2 key. I think it supports a limited form of resident keys and it advertises PIN support, although I didn't exercise that.
It's not valuable if all they find is standard roman clay pot # 123,312 to 124,312.

There was an article about this when they were building the tunnel in Istanbul. They did find some significant stuff, but the vast majority of it was stuff they already had tons of. They literally filled warehouses with the stuff, and dumped most of it back in because it was not rare or significant.
Bloom Energy goes public, but won't answer big questions
Masonite – The Modern and Developer Centric Python Web Framework
I guess you missed the part where everyone was repeatedly saying "public space".
Yesterday: https://news.ycombinator.com/item?id=17606027
Title is clickbait and should be changed. The article mentions no features that make this more or less 'phishing-resistant' than any other physical security key product.
Capcom is known for doing this and the games having these exact problems (framerate drop, wall jumping issues etc). The last megaman legacy collection was nearly unplayable because of it. They knew the issue was the emulator running it, and they refused to fix it. Then they release two new legacy collections and they have the same problem, and no one was surprised. Good thing my phone's emulators have no such issues.
This is awesome! Interesting enhancement idea, slap a NLP topic model on top of it and explore by clusters. I'd pay for a product that did that (and if I ever find the time might try and do it myself).
I saw a fun one that looks much like money laundering:

1. Receive investment from Imagine K12, under the company's name.

2. Rent four apartments in the heart of San Francisco.

3. List the apartments on airbnb, under the founder's name.

Now you've got a substantial income stream under your own name that happens to be funded purely out of your investors' pockets.
That's a good question, although I wouldn't characterize it as antithetical to his beliefs.

I'd wager it was far more expeditious to develop on top of a professional-grade OS than to start over from scratch. He wanted to sell high-end hardware, and it's hard to do that with a primitive operating system.

Anyway, interesting question, would also like to know how that decision was made.
Wouldn't that be ~$10,000 BEFORE taxes?
It’s not about what’s “interesting”, it’s about being able to put something on your resume that lets you write your own ticket for the next few years.
Wrong!
I use the following:

Yubikey 4C
https://www.yubico.com/product/yubikey-4-series/#yubikey-4c

USB C-A Adapter
https://www.amazon.ca/gp/product/B01C43FUIW/ref=oh_aui_searc...
Companies want low salaried employees to cut down cost and they use H1 for it by giving an excuse that there is no equivalent talent in US and we need to import talent from other countries. When it comes to Tech. it all boils down to $/per hour for getting things done. These tactics may discourage H1 applications but unless they force companies to hire people in US H1 will continue to exist.
That's nice to hear, Globz! I hope you enjoy it =)
Hello WeAssembly
Plus the negative effects need to be mitigated by legislation (and to a great extent already are) rather than secrecy.
I can definitely second Kitchener/Waterloo. Absolutely fantastic place to live!
At least with commuter rail you get a few extra productive hours per day, unlike driving. My uncle commutes from Guelph to Toronto on GO most days and makes full use of the silent railcar for work.
It's also that the Romans thought they were going to be around forever so they built everything to last.

If you look at the Colosseum, it looks the way it is because it was willfully destroyed and used for construction material over centuries: when Rome became the seat of the Papacy, the Colosseum was remembered as a place where the early martyrs were slaughtered by wild beasts, not as a nice building to be preserved for tourists.

On the other hand many Roman bridges throughout Europe still stand and some are still in use (yes even by cars). But the really amazing case is the Pantheon, that was turned into a church early on and preserved and restored for almost 2000 years. It's true that not all we see is original, but the structural engineering is.
If you append the magic URL argument "&disable_polymer=1" then things should load instantly in Firefox and Edge.
You should be able to see all five inner planets with the naked eye, even in a city.
Yeah, that's why this objection is pretty frustrating. No one will really believe me anyway so I don't get too worked up trying to convince people.

I think we just need build trust in the community. That takes time and I accept that.
It's not clear to me that raw ISAs can be copyrighted or patented. Worst case there is clean room reverse engineering. Emulators are legal.
We don't store copies of plaintext emails indefinitely (it's obviously exists in the mail pipeline before processing). This statement is based on trust, as it would be for literally any email provider. That said, if we did store mails long term, they would be vulnerable to subpoena, and thus would almost certainly get out at some point, which would be very bad for us. So we have every incentive to actually discard plaintext, just like we say we do.

Obviously this does not apply to internal or external messages that are encrypted, so the real solution is to receive less unencrypted mail, which is exactly what today's announcement is about.
haha you are right. Damn, so more than 12 Million cash then. I am better at Math than this.
> I find the tech ecosystem highly dysfunctional

Could you elaborate? curious what you mean.
Thanks! :)
Yeah, but you can use it for yourself too, just to check your styles or to study the web.
Totally agree on the USB-A models.

On the other hand, my USB-C Yubikey only lasted a month in my pocket before the case fractured and flaked apart. Whatever plastic they encased it in was not up the job of being on keyring. Additionally the plastic sleeve inside the USB-C plug broke and the thing became trash. Yubikey shipped me a new one, but looks to be of the same design. That was last summer. The photos on the website appear to be the same, hopefully they've improved the quality.
Sure there are bluffs. They don't tend to be vertical at water level for a very long distance. Anyway the tragedy occurred within non-motorized-rescue distance of the dock for "The Showboat Branson Belle", which is an area with more gently sloping shores. Here's a view of that area from the north:

https://www.google.com/maps/@36.6044492,-93.3119691,3a,75y,2...

If they had started out right next to the dam, they couldn't have driven up onto that, but in that case they would have passed about half a mile of shoreline before sinking.

If this sort of thing happened at Lake of the Ozarks, the main obstacle would be all the lake-home seawalls... CoE regs prevent installation of those amenities at Table Rock. Of course, given the Lake's wealthier/more prestigious clientele, duck rides would never prosper there...
I heartily agree with this. I really dislike the tools that provide their functionality by mucking around with the shell environment in (essentially random after accounting for platform variations) ways ...

Tools like nvm, rvm, ros ... If I can use a solution for managing a development context that doesn't involve mucking around with the shell environment I much prefer it. Configuration via the sourcing of shell scripts is a very fragile interface, doesn't work when with good (ie non-bash) shell, and almost always eventually leads to bugs when some workflow triggers processes in a manner that fails to inherit the shell environment...
The Mach kernel was never really open source, I think?
I usually recommend Fastmail to people who ask me for recommendations and aren't comfortable running their own mail server.
Ask HN: What about Steve Jobs?
Steve Jobs was very successful. Everybody agrees on that. However, his character traits are very controversial. There is the notion that he was successful despite his flaws and thus you should not emulate him if you seek success.

I wonder what HN is thinking about these points:

(a) Was he really as “bad” as people think/say he was? I’d love to hear from people who actually worked with him

(b) Do you think that he was successful despite his traits or is this whole notion of “soft skills and being a coach and supporter” just BS?
Thank you! Definitely a bit overboard.

`returnif` is fun, but there's certainly value in the simplicity of restricted, opinionated syntax (e.g Go).
I am with you. I want to see a world where Google is nothing more than a search engine.

But in this case I don't think they are at fault. As far as I understand it they didn't they just over-optimize for their own browser, which is not quite the same as degrade performance on other browsers on purpose.
Punishing people who try to help. What is this phenomenon called? Anti-Good Samaritan? No good deed goes unpunished? Resentment?

As an election integrity activist, I've had multiple people scream in my face very threateningly about stolen elections. "That's why I'm here buddy. Why y'all yelling at me?"
Is anyone able to assess the quality of information security at GSK? I would expect reasonably protective InfoSec from 23&Me because of their close ties to Google, but GSK feels like a company too large to care, and without enough hackers at the top to be worried.

I was taken aback by 23&Me’s anti-deletion contract, but with good security, I only have them to fear. If someone less scrupulous can access it, then I depend on their own security and that cascade tends to end up on haveibeenpwned.
Right, but who's to say though whether some breakthrough in space travel will lead to technology that ultimately helps cure cancer?

In fact, if you look at NASA's spinoff brochure (space technologies that have trickled down to daily life) for this year [0], two of the items are directly related to cancer research.

0: https://spinoff.nasa.gov/Spinoff2018/pdf/2018_Brochure_web.p...
FIDO2 is an improvement over the U2F standard, mainly with the ability to now perform password-less logins [1][2]. This had to do with a shortcoming in the U2F protocol and/or devices such that they didn't need to have much storage on these devices [3]. To address this, the new FIDO2 devices are now required to persist your username(s) for a particular site. The new CTAP2 protocol has also been extended to accommodate more sophisticated authenticators, like those crypto-currency wallets with a display.

If you are looking for devices, check out reviews of various devices by agl [4] and Brad Hill [5].

[1] https://www.yubico.com/2018/04/yubico-and-microsoft-introduc...

[2] https://fidoalliance.org/fido2/

[3] https://www.yubico.com/2014/11/yubicos-u2f-key-wrapping/

[4] https://www.imperialviolet.org/2017/10/08/securitykeytest.ht...

[5] https://github.com/hillbrad/U2FReviews