skysight-inc/HackerNews huggingface dataset:
"The draft statement, issued by the National Highway Traffic Safety Administration (NHTSA), was written to justify President Trump’s decision to freeze federal fuel-efficiency standards for cars and light trucks built after 2020. While the proposal would increase greenhouse gas emissions, the impact statement says, that policy would add just a very small drop to a very big, hot bucket."

Unbelievably evil.
/me lives in the Tokyo area, ethnically Japanese but grew up in the USA.

I still call these "grue" lights "midori" (green), confusing people around me.
Though extremely difficult, it's possible to exist in the USA without paying any tax to any entity.

You would have to be unemployed, receive food and water through non-sales-tax-included methods (like living in New Hampshire or going to a local soup kitchen or boiling grass), and never own a home or rent even.

Well come to think of it, you could probably eat sleep and drink at a casino all day, if it's on native land.
What an accuracy hit.

Few years ago I was watching across some YouTube video about drones. In one video, some guy was flying a hacked DJI drone to workaround the limitation so just he can fly it higher.

I of course concerned about it because the altitude he have reached is well above the limit set by FAA. So I wrote a comment to ask about hes acknowledgement on those FAA rules. And what's followed was a debate that lasted almost a week.

Today, you can still found that kind of videos on YouTube where people are flying hacked drones to "Break/Test the limits".

I hope somebody like FAA can do something to prevent people from doing stupid things (Hack their drone so it can fly higher etc), and make the sky safer.
Does anyone else get rubbed the wrong way by this sort of irreverent infringement? Even if you have zero concern for journalists’ copyrights, it puts this forum at risk.
Just the help factor alone is a big one.
Your guidance has been noted and is appreciated.

I'm leaving my initial post unedited not only for context but because I feel it conveys a certain gravity as to the discoverability of the best practice that was missed here. I'm generally a fan of the feedback pattern you described... but not always. Egregious impermissible disclosures of any sort--security, PHI/PCI/PII/FERPA, etc. all fall in the "not always" bucket for me.
From: Facebook <notification@facebookmail.com>
Subject: Event Invitation {string}

Body starts with:

{my friends' friend} invited you to {page}'s event

There's no Join button, but there is a set of Going / Interested / Not Interested buttons in the standard Facebook styling. It's a calendar invitation.
A Geyser Erupted in Yellowstone and 80 Years of Human Trash Poured Out
History seems to disagree with your basic premise. There are entire classes of security vulnerabilities eliminated by high level language features. (A trivial example: buffer overflows are a non-issue with runtime bounds checking.)

In theory, it's possible to write bug-free code in C or assembly. In practice, it just doesn't happen. The rule of "worse is better" ensures that the rare projects that put in the necessary effort to manually eliminate the bugs that HLLs catch automatically will get steamrolled by projects that don't (witness the adoption rates of Linux versus OpenBSD).

That said: I think that tool developers have only scratched the surface of the possibilities for compile time checks. I'm always amazed how little the industry has learned from projects like Ada. There's an opportunity in there somewhere to have that cake and eat it too.
That's false. He was arrested on pedophilia charges.[1][2] I don't understand how that's "unpatriotic".

1. https://www.newsweek.com/men-uncovering-stalin-era-atrocitie...

2. https://themoscowtimes.com/news/gulag-historian-detained-ped....
Reposurgeon’s Excellent Journey and the Waning of Python
Generally you want to build systems in compliance of future regulations before they kick in. GDPR at big companies is a multi year effort.
Makes you wonder - if not the first comer advantage would have google made a name for itself?
Every product google puts out is an arguable failure and their search engine and email client aren't particularily amazing either - just they were there first.

Maybe they should start getting back to the roots - try to secure that first comer advantage by launching experimental products. Oh wait google glass, inbox...

For a company that is praised for biggest software talent they sure fail to deliver anything of value to the medium time and time again.
Huh, this is really interesting. Can you go more into this? How do you know the cause of the error? What kinda numbers are we talking here?

Also, are cosmic rays really the main source of single bit flips as apposed to just bad ram maybe?
It's rare in young healthy-acting people.

For example, http://www.sca-aware.org/sca-news/aha-releases-2015-heart-an... says that the incidence is 0.24 per 100k annually for high school athletes in Minnesota. Extrapolating that rate to the whole US population would give ~800 deaths per year. The observed 400k number includes quite a lot of people who suffer cardiac arrest after a history of heart disease.
The legendary Facebook killer, by the name of G+, here's a list of products it successfully killed:

- Google Reader

- Google Buzz

- iGoogle

- Picasa Web Albums

- Google Talk

- Google Latitude

- Google Wave

Now the latest victim was added to the list:

- Google+
This is useless .. it has a license that prohibits any meaningful use of the product.
They weren't first in email or search. There had been decades of email clients and at least 5 years of web search engines.
You do realize that all the production necessary to win the war was done by countries that did have weekends.
Fire the BFG. It's a no-brainer.
Just wanted to thank you for pursuing such a noble cause. We need more people like you putting their time, energy, resources, and brains towards solving real hard problems in society, such as access to affordable (mental) healthcare, affordable housing, climate change, and ethical ML/AI systems.

Keep up the good fight friend, you'll be an asset to any country lucky enough to call you their citizen.
Yep, you're absolutely right, I did double-count the double-tax. Your comment had me re-run the numbers, and this is what I came up with. You are correct that Social Security goes down to $0.

Medicare contributions have no cap, and are 1.45% by both the employer and employee and the 0.9% Obamacare surcharges on the employee only portion (until 2035) kicks in over $250,000 also. Therefore, social insurance contributes a marginal 3.79%

So, the numbers to the best of my knowledge should have been:

13.3% of all income (State) +

39.6% of all income (Federal, including the Donny double-tax) +

2.34% of all income (Medicare, Obamacare - Employee Contributions) +

1.45% of all income (Medicare - Employer Contributions)

=====

56.69%

Then you still have to deal with the fixed portions, the $19,616 [1] in healthcare premiums, the $7,347 you'd have paid in social security tax and the $7,347 your employer would have paid in social security tax. [2]

[1] https://www.kff.org/health-costs/report/2018-employer-health...

[2] https://www.bizfilings.com/toolkit/research-topics/managing-...
Facebook launches Portal auto-zooming video chat screens
We are still around (improving our algorithms) and offer our tech to clients for various events. We all have full time jobs and families to sustain.

We'd love to find those connections who sincerely want to guide us (are well connected) so our next big meeting with a FANNG or another tech company is a win for all! I believe if we went in the meeting well connected in the Valley things would have been different! Not treated like dogs!
It's really the memory manufacturers who are enforcing and profiting from the ECC shakedown though, AFAICS.
Well yeah, if someone is going to try and simplify how the world economy works in one paragraph, I would expect large amounts of simplification.
Dude I just got into a new place at Dovercourt and Dundas. I'm on the second floor of desirable house paying $850 CAD ($650 USD).

Yes you can spend $3k CAD on a shiny new two-bedroom midrise condo if you want to, but that's the exception. Most people live in places that cost between $600 to $1200 per person. Max $2k ($1.5k USD) if you live alone.

Nobody I know is paying $400 in heating. That's northern Ontario electric baseboard heating rates. My total electricity bill for all of 2016 was $400.

Beer is not $10. It is $7. Entrees are $14 ($11 USD), not $30.

You're missing my point. I was making $200k+ at 27 in 2012. You can make money here. It's not SV high, true, but it is high enough. There are other things that matter than raw salary.
If Berlin salaries are 66% lower than California, then yes, it is 3x. For people like me, I would make about 80% less were I to work in Berlin vs the US.
I consider myself lucky to know enough to avoid putting personal information with Google and its properties. But Google is the main platform for many people for many things of a personal nature, and they also end up giving it a lot of information through Android. So any breach has a huge damage surface.

Google+, with all its missteps, was one of those products that even a company with Google's money, resources and people (like Luke Wroblewski) that couldn't get better at all. I liked the concept of "circles" as opposed to the concept of "lists" on Facebook that most people don't know about or use. The only mistake that Google+ did was not copying Facebook on its features. That increased the barriers to adoption and made the product almost worthless. Even something as useful as creating an event was buried in a classic G+ interface, and in the new interface it's buried under profile. Treating vanity URLs as very scarce commodities and letting people live with long unspeakable links, not implementing a groups like functionality well (called "Communities"), and many other things could've been handled if they just copied what Facebook did and took the good lessons from those.

It's sad that Google+ would be gone soon, though it could've been a viable competitor for Facebook as far as centralized, ad supported platforms are concerned. But it's good that an abandoned product gets a quicker death, and that's exactly what Google+ was — an abandoned zombie product trying to figure out whether it was alive or dead.

I'd take this as one less commercial social network to worry about, and await the adoption of a decentralized social network.
Pullman, WA or Moscow, ID if you're okay living in the middle of nowhere, but like the West.
"Last Ninja" soundtrack: BEST.SOUNDTRACK.EVER!

R.I.P. Ben Daglish
Exceptions in Selenium: Have you ever “met” them?
I imagine there are actual use cases for it but what are programs doing spinning up thousands of threads? I've never seen a program like that. Whatever happened to worker thread pools?
I liked the idea of circles when posting, not just consuming. I know my work and university friends would appreciate techy stuff, but not my regular social circle. Same is true of my communities of which I'm a part.

On the other hand, this can enforce echo chambers, but as long as one is aware of that effect (and sadly, most wouldn't care), I really like broadly selecting my audience.
Thais too or other foreigners?
Linear memories (default or otherwise) can either be imported or defined inside the module.

...

In the MVP, linear memory cannot be shared between threads of execution. The addition of threads :unicorn: will allow this.

To me that sounds like, "define multiple linear memories, then import them after you instantiate the module." But I could be misinterpreting.
Senior positions in the US in certain types of engineering can easily result in income in the 50-70k range.... per month.
I’m hoping more research and ultimately therapies are developed around treating neurodegenerative diseases with psychedelics. A cursory google search seems promising.
Manipulating Istio and Other Custom Kubernetes Resources in Golang
You would need the right because there are severe repercussions for failure in suicide.

- The stats are against you with a far higher risk of surviving any suicide attempt. Yes, in older age that risk "goes down" probably due to subconscious acceptance of the killing action, whereas a youth might use suicide as desperate cries for attention and not fully commit to go through because there's a glimmer of hope in the back of the mind that someone will save you from yourself. You can look up the stats, even shooting yourself with a gun in the head is usually _survivable_ although you may end up in far greater pain both emotionally and physically, locked in a comatose or paralyzed state and sustaining heavy damage. The 'easy' ways out that are entirely painless, even euphoric, and completely reliable methods of extinguishing consciousness are heavily guarded by gatekeepers who will make sure that it's not accessible so as to keep miserable, dependent, but profitable people in the land of the living even if that means torture in this worldly purgatory.

- The resulting involuntary commitment to psychiatric "services" which will most likely involve a long-term chemical straightjacket and physical confinement that externally may appear to be vegetative and without markers of sentience or apparent pain, but internally are a hell that few truly experience while here on Earth.

- Succession legalities that are currently minefields including the specifics of property transfer, insurance payouts, and in more theocratic/authoritarian states/communities the family members left behind may be the victims of ostracization, excommunication, or even incarceration.
“One must free oneself from the illusion that international climate policy is environmental policy. [What we're doing] has almost nothing to do with the climate. We must state clearly that we use climate policy to redistribute de facto the world's wealth.”

“ Climate policy has almost nothing to do anymore with protecting the environment. The next world climate summit in Cancun is actually an economy summit during which distribution of the world's resources will be negotiated.”

— Ottmar Edenhofer,
co-chair of the IPCC in 2010
It's not weird at all. I hope I can learn to be so thoughtful. Maybe you have helped me do that.
Of course that is a possibility.

I don't think you should do it that way though.

It's better to have 100 customers, each responsible for 1% of your income.

Source: self
Well say that you're building a micro service that needs to handle a high number of concurrent requests. A server running Go will handle ~100x the traffic of a Python or Ruby app. Your milage will vary depending on the use case, but the difference is huge.
Firefox crash reports include the contents of registers and a few instructions around the instruction pointer. If the crash is in compiled code, not JIT code, you also know where in the binary you were and can get symbols from a symbol server, then compare what the instructions should be to what they actually were.

Some of the time the instructions don't match up, indicating corruption _somewhere_.

For the specific case of crashes in JIT-generated code, the contents of registers and the instructions can be related in various ways (e.g. if you have a jmp instruction the register better contain your code location). And if you know where your code locations might be (because you're a JIT, and are generating the code and aligning it in memory yourself) and the register with the code location looks like the sort of address you would end up with but with one extra low bit set, say...

I am having trouble right now finding the bug report where some of the JIT engineers were analyzing crashes in jitcode, but about 1/3 of those were due to bitflips if I recall correctly. What that means in terms of absolute numbers (or numbers per user-hour, which would be even more useful), I don't know.

Note, by the way, single-bit flips can be a consequence of a bad memory chip, not just of cosmic rays.
https://github.com/torvalds/linux/pull/437
Cursory google searches often do
One obvious example is that you can continue monitoring for evidence of attempts to use the vulnerability. A delayed honeypot, so to speak.

In other words, you don't have evidence that this vulnerability wasn't abused in 2 weeks, you have evidence that no one abused it in ~6 months. Still not perfect, but a more compelling argument that it wasn't abused.
> Not buying their moral arguments at all, given that they are about to enter the Chinese market again

Their "moral" concerns are driven by the noisy section of their workforce that reflexively opposes the US military. These people aren't outspoken about the behavior of the Chinese government, in fact they probably don't think about it much.
under an incognito tab?
How's it collapsing? The satirical legacy of Nathan Barley lives on
In regards to 7, prompts are great for teaching new users how the program should be used.

Instead of failing then spitting out --help or manpage style info, the program just ask the user enter the needed argument or flag to continue. Having more ways to learn usage is always good IMO.
> I can sum this up simply: jerks ruin everything. Drones were unregulated and would remain so, except for people being jerks.

When were drones ever unregulated? I don’t remember any such time. I remember that before 2016, the legal requirement for drone piloting was to have a pilot’s license, which most people ignored yet scoffed and complained about endlessly. In 2016 they made flying drones less than 55 pounds in class G airspace under 400 feet with line of sight without a pilot’s license or registration legal, but it was not unregulated.

I don’t think that jerks is the main problem here. Use of drones in the last 5 years has skyrocketed. The percentage of jerks could be going down dramatically, and still the accident rates will rise due to the sheer number of people playing with drones. There are many many times more people flying drones now than there were in 2010.

Anyone who’s used a drone more than a handful of times has crashed their drone, or had their drone lose control, or run out of battery mid-flight. Having flown many times and crashed a few, I might be a jerk and not know it, but I’m also 1) lucky I haven’t hurt anyone, and 2) in favor of mandatory registration and some, any, mandatory safety training for drones. Even ignoring FUD about airports and spying neighbors, I still think a little regulation is a good idea.
Are there any "Unicode art" edition?

Way more code points to render.
This sounds weird but I've wondered something. Since California is a sanctuary state, can't workers come over with H1B and then simply not leave when the Visa expires?
> "so that you're never too satisfied or unsatisfied, just constantly craving more."

That quote reminds me of Louis CK's interview with Conan (https://www.youtube.com/watch?v=5HbYScltf1c) where he says about mobile phones:

"You never feel completely sad or completely happy, you just feel kinda satisfied with your product... and then you die."
Tìm hiểu thuốc chống co thắt Buscopan
> The user may have reasons for just not wanting this fancy output. Respect this if TERM=dumb or if they specify --no-color.

Or if they specify `NO_COLOR`[1]!

[1]: https://no-color.org/
A beginners guide to Packages in Golang
HubSpot CRM vs. Salesforce: Which One Is Better?
Golang Structs
Security researcher cited in Bloomberg's spy chip story casts doubt on veracity
yep +1. A lot of times users are only ever going to run a command once. Better to ask for the right information than bailing out because it's not perfect syntax.
5-15% seems like a bargain compared to the massive slowdown everyone noticed after the first meltdown patches (not that this would have fixed that problem, of course).

If this approach took off, maybe it would light a fire under the chip industry to put a little more thought into hardware-assisted garbage collection.
yes, adding this
Spring Boot Quartz Scheduler Example: Building an Email Scheduling App
Facebook Launches Video Device, Says Privacy Is 'Very, Very, Very Important'
yeah but you're still paying for a service from a provider which pays tax to the government
Actually, Google+ never aimed at feature parity with Facebook. At least not in the way of having the same set of features and accessible as easily as they were/are on Facebook. Having used both platforms for a long time, this was a huge barrier to doing anything on Google+ even if one didn't mind many people not being on it.

If it had copied Facebook shamelessly, it would've given an alternative for all those people fed up with Facebook for the last decade or so, and thus increased usage too.
Indeed, the speed increases seem superficial - they probably could have achieved those speeds in earlier iterations but couldn’t be damned to do so.
Location: Austin, TX, USA

Remote: Yes

Willing to relocate: Yes

Technologies: Angular, Java, React, Node.js(Express/Nest), Javascript/Typescript

Résumé/CV: https://albertogodinez.github.io/

Email: alberto.godinez90@gmail.com
Take a look at what we're up to with https://textile.photos. Threads are private groups you can create and share with (currently photos, later any content). Very circle like.
ShowHN: Flaggy - A fresh take on Go subcommands and flags
None of that is on all income; base Medicare is only on labor income, the Medicare surtax is on either (specifically, the lesser of) labor income or net investment income above certain thresholds, and the rest is on “normally taxed” income (but not, e.g., long-term capital gains, or gifts and inheritances—which, even when beyond the enormous exempt quantities, aren't taxed as normal income for the recipient, but to the giver or estate, and in California at a lower combined maximum state and federal rate than normal income tax, 40% federal and no state.)
My approach is usually as follows:

1. Identify a real person in whose position I would want to be 10 years from now.

2. Figure out the path from that person to my current situation. Usually this involves figuring out filling missing gaps along multiple dimensions: e.g. knowledge, connections, financial situation.

3. Create 5 year and 2 year checkpoints/goals on each of the dimensions.

4. Break 2 year plan into monthly goals.

5. Execute, learn, critically analyze every quarter. Brutally prioritize.

6. If there is a learning which requires major change in plan, start again from step 1.

I think the most important part was step 1. Rest is execution. It is also important to align your goal with something that you are passionate about. You would need passion to drive you towards your goal.

I put some of the thoughts on company building at [redacted] during sleepless nights with our baby. I will put more thoughts, especially around immigration sometime next year.
No I don’t, and no it doesn’t.
No, Incognito forces a login.

My browser has a Facebook user logged in. However, this user is a dev account that has zero friends. This shouldn't, IMHO, change anything.
Our default policy is to keep generic RPC server logs for O(weeks). It's best practice as we log a lot of structured data that can be large -- especially at our QPS. Furthermore, we have data retention timelines to keep.
Now imagine if Google acquired Instagram...
Very much agree. I've ended up using Instagram as a de facto circle of people I actually care about, and rarely use up facebook proper, except to connect with more distant acquaintances.
In fact, I'd like my C compiler to use bounds-checked arrays by default, with an option to disable it in performance-critical code. Safe by default, performant only when needed. That's the only way to build secure software.

Since nothing in the C language prohibits bounds-checking for arrays, we can retrofit this to existing insecure languages rather than forcing all programmers to rewrite their software in some other language, which realistically won't happen for a decade or longer.
The Redox leader did ask https://twitter.com/jeremy_soller/status/1042261893367250944