skysight-inc/HackerNews huggingface dataset:
I'm just going to respond to a few of these:

>>Response: Cancer has never been conquerable. Chemotherapy increased survival rates.

This is a reference to the confidence early researchers had, as a result of the rapid pace of progress. Your literal reading of it is disingenuous.

>>Response: True, but misleading. Critical question: What treatment is being replaced? When nothing else worked, you might as well try something.

An article is limited in the number of caveats it can include. It's pretty harsh to describe a pertinent fact: that human experimentation came much earlier 70 years ago, which in turn resulted in some rapid advances in cancer treatment, as "misleading", because it didn't outline every other contributing factor to the change.

Also, there are cancers today that are 100% fatal. We don't see the rapid time from discovery to human use for drugs used for this class of cancer.

>>Response: Among other things, if you just run a study and then try to find some benefit, you will ALWAYS find some benefit.

This is hyperbole, and in any case, doesn't negate the point about the rising costs of doing human studies.

So you start your comment with:

>>Ways this article misuses statistics and history (lies):

And all I see is you misreading the points made, or disagreeing with the implications of the points made.

If you're going to accuse people of lying, you have a moral responsibility to be more rigorous with your arguments.
https://bugzilla.mozilla.org/show_bug.cgi?id=697436#c14

"Mozilla went through a year long legal discussion with GA before we would ever implement it on our websites. GA had to provide how and what they stored and we would only sign a contract with them if they allowed Mozilla to opt-out of Google using the data for mining and 3rd parties.

We now have two check boxes in our GA premium account that allows us to opt-out of additional usage of our data. Because Mozilla pushed Google so hard, those two check boxes are available to every other GA user in the world regardless if they have a premium account like we do. GA also doesn't track IPs or store PII within the tool."

--

Seriously, those bastards.

Only having internal controls and debate, sustained legal engagement, and ultimately DNT-obedience.

I expected more. /sarcasm
Then maybe those poor exploited employees should go and generate surplus value for themselves without the company.
"Research is what I'm doing when I don't know what I'm doing." Wernher von Braun

Of course lawyers bill for research, phone calls, and emails. So do consultants. Why would considering work emails during commuting counting as work be at all a controversial? What's the contrary argument?
Thought this was the panacea for serverless authentication
I started using Venmo a week ago to pay babysitter.

Transactions are still public by default and you can browse strangers and see what they are paying for.

Crazy!
See http://openbenchmarking.org/result/1808296-RA-SMELTDOWN82&ob... for the full data set.
Introducing the Tink cryptographic software library
He probably just meant being a good or bad kisser.
> The most optimized versions of refcounting I'm aware of get their wins from things like precise knowledge about live references and update coalescing-

I know Python, objective-c, and swift all use refcounting, but just for my own reading, what language has the most optimized ref counting right now?
This is ridiculous. It's 2018 and you're complaining about a few MB of bandwidth and a few seconds of CPU time? The whole point of JWT is that they are basically cookies for places where using cookies uniformly is not feasible. The author's solution is to go back to using cookies, which just doesn't work well enough. I'll stick with tokens for now thanks.
He was always a buffoon. Despite having full access to the Snowden docs, he completely botched the reporting, still getting PRISM wrong to this day.
So you've minted a token, stored that in the DB as well, and every time you see that token you verify the signature and then you look the token up in your DB to see if it's still valid. You do realize that at that point you could've just handed out a random string instead and avoid (1) creating and verifying signatures and (2) the size inflation created by those signatures, because you're not even getting any of the theoretical advantages of minting tokens.
I love this idea. However, I think it is crucial that you have some sort of demos available for people to look at on the front page.

Edit: You should also allow users to change fonts / text colors, as well as section background colors. I would be very annoyed if every single restaurant website looked exactly the same. I'd also recommend allowing them to upload their logo as an image.

Also, let them download their menu as JSON maybe?
I'm a huge fan of his guides for their readability and straightforward delivery. I'm always on the lookout for more authors like him - have you come across any similar authors?
And what would you suggest as alternative, given that normal users (e.g. people who've never even heard of HN and make up the majority of browser users) expect to search with Google?

As far as I recall, the Google search is part of the funding agreement (because Mozilla is still a non-profit, the money has to come from _somewhere_ and we, the users of the browser, sure aren't paying them?) with the explicit agreement that it is trivial to change the default search engine for people who don't want to search with Google.

Click on the drop-down on the left of the search field in the browser, you click "change search settings", you pick your preferred search (options for which include "duck duck go" these days) and you're done forever. That... feels like a perfectly fine way to go about offering people what they want: make what the majority wants the default, and make it trivial to change for people with different wants or needs.
Mistake?
At least there is visibility. I don't know what the answer to the issue is, but I know hiding it in the corner, unobserved by the masses is not the answer. This leads to NO social push back, as there is nothing to push back about.
Other cultural pressures can overcome people's strong desires to please/attract mates, so I'm not sure that's the only way. Cars and clothes as status are a themselves a consequence of culture. If culture moved away from that to something else then it would just be that other thing that mates selected for. But your general point is well taken.
That's not as big a drawback as you might think. There's a guy on YouTube[1] that with a channel fashioned after one of those Saturday morning edutainment shows who debunks hoax videos, and one of the tricks he frequently points out is when the video quality has been deliberately degraded to mask editing flaws. It's good enough to fool anybody not looking for it.

[1] https://www.youtube.com/channel/UCEOXxzW2vU0P-0THehuIIeg
I wonder if that would make java more suitable to game development since pauses need to be <8ms, ideally.
I'm less concerned about the search engine than I am about tracking from within the browser. Feel free to mock me for that if you disagree.
Too bad they've now been replaced popups that occur in the same window as the website you're viewing. Is there a name for this new type of popup?
sure, but the smoke isn't hitting any city quite as bad
Microsoft will require suppliers to offer paid parental leave
When you hit a critical size your database can no longer handle the throughput of the lookups. You'll then install memcache or some other tech and the stack JUST FOR handling the tokens is a majority of your datacenter load.

Most startups and projects never hit this size, they usually fold before that level of growth. It is much lower than one would assume though since every request made to an API has to do the lookups etc.
Ask HN: Running a business from the command line?
Do you know of any businesses that run from the command line? What I mean is that most, if not all, employees interact with the company's computer systems over the command line rather than through GUI applications. They build shell scripts at the group/team level to extend the functionality of their software, rather than waiting for the central IT team or a consultant to build those features in the GUI app.

A friend runs a small warehouse and installation operation, and he was describing the cobbled mess that is their operational software stack (inventory management, scheduling, etc). I immediately thought of the UNIX philosophy and am wondering if it has been successfully deployed broadly at companies out there.

This is the Unix philosophy: Write programs that do one thing
and do it well. Write programs to work together. Write programs
to handle text streams, because that is a universal interface.[1]

I wasn't around in the '70s and '80s, so I don't have the experience of the workplace prior to widespread GUI deployment, but I assume many companies did just this. Now GUIs (and Web-based software) dominate the workplace software world. The problem is that these custom enterprise stacks are usually half-baked (reference hundreds of HN comments here), so everyone is less productive and ugly hacks are bolted on to the stack.

[1] https://homepage.cs.uri.edu/~thenry/resources/unix_art/ch01s06.html
I did use client side certificates for a while. It's a real pain to get the certificate installed, as it is different per OS and browser.

And I wouldn't call it 'really secure', I'd say it's just as secure as any other client side secret.
Scott Alexander (Slatestarcodex) had a post about this earlier this month:

http://slatestarcodex.com/2018/08/01/cancer-progress-much-mo...

The gist of the post was that cancer rates since 1990 have gone down primarily because smoking has declined, not because cancer treatment has improved.
Or my relatives in Geneva, who regularly shop in France, dine in Germany, and then drive home, in the same day.
F-35 program is in large part complex software project but it's not just any software project

- it's a large software integration, sensor integration project with many suppliers and interfaces

- it includes incredibly advanced logistics, inventory, health and maintenance software ALIS that is essential for the program's success. Without ALIS F-35 can't keep readiness and availability needed

- It's technically bleeding edge: augmented reality, mesh networking, ... (bleeding edge is rarely painless)

- almost everything is safety critical or at least mission critical.

The project has so much momentum and so much sunken cost that it may take a decade to see if it can really deliver.

The ultimate test will be a high sortie rate mission that lasts few weeks. Lockheed engineers (civilians) are now on site doing custom work and repairs for individual parts to make the planes fly. If operational tempo increases, it's likely that the system can't keep up.
In Firefox I could also enable a developer profile but it's still a pain and not equivalent to just a setting.
Looking at the car it reminds me of the replicators in Stargate SG-1.
> When you hit a critical size your database can no longer handle the throughput of the lookups.

If your data store(s) can't handle the load of looking up a ~32 byte token (that is, if you are sane and not using JWT), then how exactly are they supposed to hold up to whatever your business logic part of the app is doing?
Sure. The F-35 is a "fly-by-wire" aircraft, which means that computers are required to direct the movements of the control surfaces. The engineering and mathematics here is not my area (my flight test experience lies in data acquisition, instrumentation, and data analysis/reduction) but I do know that the computers run software -- control laws -- that take the pilot's instructions as inputs, observe the dynamics of the airplane, and issue control commands to the surfaces to execute the inputs.
The most optimized version I'm aware of is the RCImmix collector for Java: http://users.cecs.anu.edu.au/~steveb/downloads/pdf/rcix-oops.... It achieved performance parity with the regular Immix collector, which was the fastest (in the sense of throughput) available for the Jikes research JVM at the time. A backup collector is required for two reasons: cycle collection, and resetting stuck counts (they gain significant performance wins from keeping only a few bits for the actual refcount, for a variety of reasons: usually only a small percentage of objects need more, and they tend to be the most heavily accessed objects, so they save a lot of time by avoiding updates to them and also gain from being able to reuse objects' existing metadata fields rather than use extra space for the refcount). It's worth noting that most recent work on tracing GCs has been on reducing pause times, not improving throughput, so it wouldn't shock me if Immix is still the state of the art there.

There may have been further developments in improving RC throughput since 2013, but I'm not familiar with them; outside of Apple, there's very little modern research into optimizing reference counting. I know Swift does many cool optimizations of its own, but I'm not sure how restricted they are by having to remain compatible with Objective C.
I don't think that verse proves the point you're trying to make.

But yes, God is the judge. I'm not. But God has called something sin, I can safely rely on His judgment.
KPTI hurts (a lot). Syscall latency and architectural impact is dramatically increased with KPTI, in large part due to the TLB flush that is typically required.

This is probably why AMD CPUs do not have as big of a drop; KPTI is not (urgently) necessary on AMD CPUs.
Following walking directions on your phone that are optimized for efficiency makes chance of running into nice places and other suprises off the beaten path less likely.

Likewise for planning each and every meal via reviews.

Google translate might mean that you don't even try to learn the basics of a local language.
"Tech company hindered by difficulties in tech"
AR glasses is going to be more than 30 billion dollar net worth till 2020.

Curious to know how audience is seeing it and experiencing it.
To be honest I had no idea they even made transactions public and I'm definitely more proactive about turning on privacy settings than the average consumer. I thought it was just a friends thing......I didn't know it was everyone in the world....
"A surprisingly common part of my life: a patient asks me for a doctor’s note for back pain or something. Usually it’s a situation like their work chair hurts their back, and their work won’t let them bring in their own chair unless they have a doctor’s note saying they have back pain, and they have no doctor except me, and their insurance wants them to embark on a three month odyssey of phone calls and waiting lists for them to get one."

The problem here is that the patient doesn't have a general practitioner (GP, I will call it your/my "doctor" in the rest of the post) or that apparently there's huge wait lists. If I call my doctor, I can get an appointment within 2 work days or roughly half a week. And everyone in my country (The Netherlands) is insured for such visits. In fact, if I want to see a psychologist or physiotherapist or psychiatrist I first need to see my doctor for a reference, for my insurance. That's how it works here. Your doctor is your entry level. So, why not go to your doctor if you have a health issue? Here you would, but apparently in the country this person is from (I suppose USA) that's nigh impossible.

Also, employees have medical privacy here. Yes, a doctor could write such a letter, but ultimately the patient has privacy. Many doctors here flat out refuse such written statements, saying it isn't necessary. Though that might be on a case by case scenario.

On the other hand, I do understand the employer's PoV as well. If person X wants something special, then person A, B, and C also want that something special and before you know it you have half of your employees with -say- all kind of odd food allergies. Although it seems in this case the employee brings their own chair; here that'd be unheard, the employer would arrange a chair for the employee which suits their special needs. So, I disagree that this is a bullshit procedure but I am unsure how to solve the issue in a way where privacy is guaranteed, and then I say: take the loss of privacy in this case for granted and get the written sign.
It appears to be blocked by uMatrix but the author notes further down that firefox is silently ignoring the block. This is very concerning.
No, you cannot block it via umatrix or any other extension. If you read the whole discussion you will see that this only was possible in the old extension tech that Mozilla meanwhile replaced with webextension. And those can't.

They injected a non-removable external tracking system right into the browser that they market as privacy focussed.
Very weak reasons for not using jwt. If 24 megs a month is the reason you could easily remove an image from a high traffic page to get the sake savings.

You are hitting the database anyways reason applies to a limited subset of of use cases.

Sessions are simplier use them on multipage websites. SPA or apps jwt is perfect.
There are a variety of factors that contribute to these wildfires aside from climate change. These are factors that could change over months, years, and decades and absolutely remain to be seen.

You're framing it as if we're living within a constant choking haze of smoke. The air quality really has only been that bad for 1-2 days per year in the last 2 years. People might want to live there because the other 363 days of the year, the weather is pretty great - our high salaries and unparalleled access to mountains, sea, and desert notwithstanding. If you're earnestly interested in learning about the air quality here, you can check out this blog post: http://wasmoke.blogspot.com/2018/08/too-many-apples-to-orang...

But I digress as I don't really want to convince anyone, let alone someone who already doesn't want to live here to move here.
There's nothing computational going on in an ordinary globe either, but it also encodes a kind of rotation in its physical arrangement.

I think this is part of the point: that it's not much more complicated than an ordinary rotation.
Firework: Leveraging Microsoft Workspaces in a Penetration Test
anyone want to give me an invite :)
Before email there were phones, and from speaking to older friends in manufacturing it was pretty common for people to be called at all hours of the day and night to fix critical machinery (on the phone or to attend site in person) whether officially "on call" or not.

This is not a new phenomenon.

Edit: Just wanted to add that I'm not trying to justify this behaviour. It was wrong to intrude into people's personal lives and expect unpaid work then and it's wrong now.
Who cares outside of the valley? The average tech worker can find a good job in just about any city in the world nowadays. Startups are some of the worst places to work but tech penetration is so deep, established companies that need tech work and have decent working conditions are everywhere. Why pay the insane costs in the valley when so many other options are available? As far as innovation, that's just a small percentage of companies and often it happens at established companies. Given the cost of living (sky high) and quality of life (mediocre at best) in the valley, I'd say it's one of the worst places to be a tech worker. It is a good place to start one's career for a few years as it really makes one appreciate working at a decent company rather than the startup insanity culture in the valley. There are decent companies in the area, but they are hard to find due to the sheer number of mismanaged startups and scams. The valley falling out of prominence is great news for the rest of the country and the rest of the world, if it's true.
Revenue can collapse fast in SaaS if you don't have churn under control. Let's say there's a downturn (for economic or competition) reasons and new user acquisition falls to 80/month and churn goes upto 7%.

You're now losing 60 customers/month. In three months you'll be down 10% on revenue and your costs will likely be the same.

This isn't a VC funded vs bootstrapped issue, it's a fundamental dynamic of the subscription mode - I've seen plenty of VC funded startups struggle with the same challenges.

Living on the edge where your best efforts only net out churn is hard. Everything becomes harder from recruiting to sales. It's super demotivational to a sales and marketing team when their best effort essentially nets out to zero.
You forgot about Russia and China in the statement above.

You can't make an absolute statement that every gun comes at the expense of the poor, because if we hadn't had guns, I can assure you we all (including the poor) would have been worse off under a Nazi or Russian Communist regime.
6 places to host your Git repository – Opensource.com
localStorage can be vulnerable to XSS attacks in cases where cookies are not.
For a subset of developers, definitely. Overall I don't think it would lead to significantly more adoption, as the main draw (write once deploy everywhere) is already accomplished by engines like Unity.
Let’s not forget the upcoming mobile Purism OS coming with the Librem 5.[0]

I believe the development kit for apps is now available.

[0] https://puri.sm/shop/librem-5/
Show HN: Thorium – Starship Bridge Simulator Controls
Show HN: I built a jobs board to find the best paying tech contracts
> It's 2018 and you're complaining about a few MB of bandwidth

Ah, yes, 2018, the Year Where Everything On The Internet Is Connected To A Cable.
The real scourge at the time was actually pop-unders, which you would never figure out where they came from and saw them potentially hours after visiting the site that produced them.

It's honestly an improvement that sites have to obscure their own content (and thus spite their nose to save their face) and nothing else in order to give you intrusive ads. You'll always know what websites don't put value on their own content that way.
Geo-engineering: Should we dim the skies to save the world?
> a.) all my female friends told me "Dude, you're skeevy just for even mentioning them"

The whole point of Red Pill stuff is that there's a disconnect between what people want and what they say they want. Also I seriously doubt your female friends have ever actually read any of the material and only know what it is from second hand information. So really their opinion on it is worthless. Also first rule of fight club.

>and a married coworker was like "Well, it works on some girls - usually the type that's a total trainwreck in a relationship anyway."

First, he's married so he's not exactly PUA material. Second, it works on some people, and it just so happens that there's plenty of people out there who are trainwrecks in relationships. It's part of why they're single. It's selection bias. I don't think there's any real correlation.

Disclosure: I am not into Red Pill or PUA or The Game or whatever people call it. There is good information in there that is not obvious to some people who haven't dated much or spent time to really analyze human behavior. However there is also lots of sexism and women hating surrounding that information.