skysight-inc/HackerNews huggingface dataset:
That is not true at all. I'd encourage you to generally make sure you understand an issue before making pronouncements like this.

https://www.forbes.com/sites/forbestechcouncil/2017/12/04/ye...

> The organization would have to target a data subject in an EU country. Generic marketing doesn’t count. For example, a Dutch user who Googles and finds an English-language webpage written for U.S. consumers or B2B customers would not be covered under the GDPR. However, if the marketing is in the language of that country and there are references to EU users and customers, then the webpage would be considered targeted marketing and the GDPR will apply.

If Techcrunch has offices or business partners in the EU, or targets EU users for example by having a Dutch-based version of their site, then they would need to comply with GDPR. But if they don't have any of that, then they don't need to comply.
We don't! Bizarre. Would you like to email us a screenshot to hn@ycombinator.com?
I use a system-wide ad/tracker blocker (1Blocker X) and Signal. I have a local maps app (maps.me) that I only use when hiking, so I don't know how good it is for general use.

That leaves:

(1)AGPS (which I'm not informed on, I've never thought of turning it off)

(2)real Firefox (aka alternative rendering engine that you can set as the system default)

(Develop for your own phone without rebuilding or paying isn't a security thing, just a convenience thing)

vs. Google mining your data at every opportunity and Google/carriers dropping support for phones as soon as they can get away with it.

I'll take iOS.
I'd suspect they do that already - based on what I've read they're not relying entirely on signage and the lidar is looking for potential hazards. I'd suspect it act similarly to a human in that situation.

Maybe it'd run it if there's no one else around, but a human probably would too in that case.
Does anyone have a good list of alternatives to Amazon, perhaps labeled by category?

The few times I've wanted something and checked Jet.com first, what I wanted wasn't there. Only successful gotos I have are backcountry.com and rei.com.
It's not the RIC-V cores that would be the concern - 'tis the motherboards, NICs, etc...
>t seems like it wants to make a lot of (often stupid) decisions for me. When I want to connect my phone via cable to transfer some files it is always a hassle. I can't sideload apps that somehow goes against Apple's will. As an example, NewPipe is a blessing on Android if you enjoy YouTube (not available via Google Play). The fact that full phone backups are done via an video/audio player (iTunes) makes zero sense.

This is what bothers me too. On an iOS device, you have to do everything in an app, and if the app doesn't support what you want to do, it's just not possible. Want to take an mp3 file from the web and play it with iTunes. Not easy. Got some audio books that you want to load in and play in your podcast player? Not easy. Everything has to go through each app, and there's no way to move data from one app to another, unless the apps have specifically setup that hand-off.
It's shared source, behind a register wall. You can clone the git tree and privately hack to your heart's content, but commercial usage and sharing of the source are under (fairly reasonable) particular rules.
> Because the NHTSA data includes all car, including the very cheap cars with bare minimum safety/help systems, old restored cars, ...

https://crashstats.nhtsa.dot.gov/Api/Public/ViewPublication/...

94% of crashes were caused by drivers, 2% by vehicle failures. This implies that the age or state of the vehicle has minimal influence (only the 2% that actually failed) outside of the propensity for older vehicles to have less safety features.

And comparing the new safety features that reduce or mitigate the driver error to those of the average vehicle is exactly the point -- the difference in outcomes is large. This actually matters even across price ranges because people may be willing to pay more for a car if it's more than four times less likely to kill them or their family.

It would be nice to have a comparison separated by class as well (obviously that data would have to come from the government rather than Tesla), but the comparison to the average still has value because it at least informs you whether a more expensive car is worth it.
If you're doing a simple Pivot, sure. But here are the things I run into constantly.

1. When I group by days (i.e. group by 7 day chunks), why does Excel refuse to sort chronologically?

2. How do I make my Grand Total column add up all the subtotals when those subtotals are averages of the underlying records? (It will only do an overall average)

3. Why can't I collapse just this row without collapsing the counterpart rows inside other groups?

4. Why can't I make a chart of just this part of the Pivot Table (rather than the whole thing)?

5. Every time I refresh the PivotTable, new column headers are a different font size/alignment/wrap. I have to manually update the formatting each time. Why? (It won't let me set font formatting in the PivotTable Styles)

6. My PivotTable won't let me add a new item to an existing group. It instead adds a new level to the group hierarchy and the whole thing blows up.

7. Whenever I try to hide the last row in a certain PivotTable, I get an error message: "You cannot hide this selection." Why?? If I move the row somewhere else, it then lets me hide it.
To continue your analogy, the revenue that Trump has made to date has been by selling the furniture. It's like a new Google CEO came in and sold the datacenters and said "look at the revenue!"
cool, glad you like the idea. lmk how your session goes!
> I just yell at them and tell them to stop using excel sheets as makeshift databases.

What do you recommend to them as an alternative for makeshift databases? There could be a nice product opportunity for a lightweight database web app that is like Microsoft Access or a spreadsheet without formulas. Airtable probably fits that bill, but even it might be more complicated than many people need.
Is it english only?
Interesting how this demonstrates that showrooming can affect online retailers too. Popular retail websites that introduce consumers to products can lose out on the sale if a discount is available by buying directly from a merchant, just as physical stores can be bypassed if a discount is available from an online seller.

Most people probably won't take the initiative to make an enquiry with the merchant for an Amazon marketplace order, and it'd be too inconvenient to do this consistently for small purchases, but maybe part of the motivation for promoting merchants tied exclusively to Amazon is an awareness of the threat that online showrooming might pose to some of their business in the future.
To think he could have chalked up the price hikes to an Excel formatting error! I think we all would have related.

Real missed opportunity.
Most platforms with dynamically-loaded shared libraries do something similar. However, that only avoids having multiple copies of the library code and read-only data in memory—each process still has to run its initialization code separately, parsing configuration files, setting up global variables, etc., and any data which is written during initialization but read-only for the rest of the program is not shared. The Zygote model allows the system to perform this initialization just once and share the results with any number of child processes.

I believe the Apache web server's Prefork MPM module does something similar—fork() allows the server to spin up new child processes in a pre-initialized state, ready to respond to requests. Servers in general tend to be a good fit for this style of execution.
The Next-Gen Drive-Thru Is About AI, Not Mobile Ordering
I played The Wolf Among Us twice through. I thought the story was very interesting, and wanted to see what happened if you did everything different. Obviously you know a lot of content is going to be re-used, but by and large probably 95% of it was unchanged. It lowered my opinion substancially, though I still liked it more as a movie/TV show, than a game.

While story based games do have to fight combinatorial explosion of possibilities, games like Planescape Tormet deal with that by having actual gameplay: random encounters, item drops, side quests, leveling up. All the traditional RPG mechanics.

Life is Strange was also panned for having the illusion of choice, but I think was able to resist some of that criticism due to the strength of the story, and the different environment: most of the game is peaceful and sullen, not thrilling, so the limited gameplay isn't necessarily a problem.
> My guess is that they know that everyone's confidence in them would crumble.

Why? Even if this were all true, the sum total of the accusation is that a small number of servers 4 years ago were compromised and Apple's security chops are so good they found a completely never-before-seen hardware attack and stopped it with the help of the FBI - all without any customer data being at risk.
There's nothing awful about AGPL if you consider it a form of expressing protest.
Yes, and on the flip side of that you have other sellers wholesale copying a popular listing. I look at every purchase as a gamble. In the marketplace's defense, Ali Express dispute arbitration has always led to a satisfactory result for me, so the gamble is just on what I'm going to get, not on whether I'm going to lose the entire cost of the item or not.
it's almost spiritual: in an ideal world where I automate everything, what do I do ?

these days I get brain chills whenever I do something un-intellectual but very sensory-based: crafting wood, molding things, taichi..

Work today is a twisted version of sharing group survival/happiness.
I run Oracle and Postgresql databases and would much rather work with pg only. Oracle seems to make things unnecessarily complicated. Even the documentation is easier with pg.
I don't think the argument depends on simulations being able to infinitely and recursively create sub-simulations. You only need one layer of simulations to make the odds work.
I think you need to have a European office. The issue is that many do - if not to have a legit satellite office, then because they moved their "official" HQs to Ireland to participate in tax shenanigans.
First rule of development, client needs a custom report, export to Excel or ask them their Excel files
yes, currently all English. But the expert opens a shared sheet that you work together in, so you can collaborate in Google sheet or Excel. Hope that makes up for English only
the story tries its best to make it sound like some defect in the bank's handling of the transfers. although there were minor issues, they were correctly caught via "defense in depth" techniques, ie many many layers of process.

the story focuses far too much on the bank's handling of the transfers and not enough on the obviousness of a standard con and gullibility of senior government finance ministers.

where these guys really really went wrong was not having enough of a starter fund so as to plant moles (who would later be abandoned to the police with no useful info) within the bank that would have allowed the transfers to go through. amateur hour, really.
Good question. I lead the marketing team at Buffer, and we've had a couple cases where the computers have failed earlier than the renewal date (every 3 yrs). We reimburse a new laptop if it's needed. Otherwise, I really haven't experienced any "at-fault" scenarios or stolen laptops. My sample size is pretty small though (4 years, 10 marketing teammates).
A lot of business lines of credit for small companies are personally backed.
But maybe he’s so good, nobody would have believed he made an error.

Or maybe he did make an error, but didn’t want to admit it to avoid damaging his “l33t excel skillz” rep. That would be the stuff of legend.
>and I can validate the request based on the origin

Are you talking about the HTTP referer? That's easily spoofable and can't be relied on server-side. The same-origin policy and all the CORS security is implemented in the browser itself, not in HTTP.

If you need to be certain that a request originated from your own page and not another domain you need to use a CSRF token.
of course, but its still better to make someone waste their cpu time and slow down the attack, instead of beeing just able to enter admin/admin
HN has been amazing for finding technical stuff, and often really knowledgeable people will explain things.

One thing that made my day recently was "Logic Programming and Compiler Writing" by David Warren, 1980; ( https://news.ycombinator.com/item?id=17674859 ) about using Prolog to implement compilers. I was in the middle of writing a compiler for Joy (PL) in Python and it opened my eyes to Prolog. It turns out I've been working too hard. After a quarter of a century I've pretty much given up imperative languages and my productivity has gone way up (more functionality from less code, with fewer bugs, written in less time.)

Ooo, and one time I got to interact with Alan Kay!
The point of a simulation is to find vulnerabilities. When something works the correct thing is to rerun it with the assumption that you have mitigated that attack to see what your next vulnerability is. You of course also make sure the mitigation actually happens.

Lawyers run practice trials all the time, if their opponent in practice comes up with an argument they can't destroy on the spot they know where they need to focus.
People aren't lazy and don't care.

People are busy and have other priorities and don't see meaningful gains for investing time and effort in opposing the endless torrent of technofeudalism washing over them.

Trying to moralize a co-ordination issue is great way to shift the responsibility for bad things occurring from those doing it to those who failed to resist it.
Since we are in douchebags ratings, it is fair to point Heather Bresch which is much bigger heartless bitch than Shkreli. If there were justice in USA, she would be behind bars!

https://www.usatoday.com/story/money/2016/09/21/mylan-ceo-he...
primitive technology dude built himself a hut with some form of hypocaust (fire tunnel beneath clay tiles)
Daemonize – A Tiny C Library for Programming the Unix Daemons
May not be necessary for their kind of product and market. Looking at their company page, there doesn't seem to any salespeople at the company.

Would suggest that you check out Patrick McKenzie's post about SaaS companies. Buffer fits the 'Low-touch SaaS' description pretty squarely - which would mean that they don't necessarily require a dedicates sales unit.

https://stripe.com/atlas/guides/business-of-saas
Reducing allocations isn't about the speed of allocations.
Yes, allocating with a generational GC is very fast, as is stack allocation.

Reducing allocations is about reducing the time needed to perform garbage collection.

That time is zero for stack based allocation and non-zero for any heap based allocation.
Stack based allocation or memory pools etc. reduce the pressure on the GC. Having more GC runs means not only time spent in the GC, with generational GCs it also can mean premature aging of objects - while collecting the nursery is very fast, collecting older generations has a larger cost.

So, with any GC and language, the less heap allocations, the faster your code will run. (Unless of course, your program code gets much worse by trying to avoid heap allocations).
If the serial number is not widely known, then that's at least nearly as good as a secret password, no? And it can be changed immediately on installation...
It does unless you’re running it in another process as part of a WebKit instance, via WKWebView or SFSafariViewController. Using JavaScript core directly still limits you to interpretation.
No. But gag orders do not require the recipient to lie about it. Someone who is under a gag order simply doesn't comment one way or the other about it.

FWIW this is the principle behind warrant canaries. A warrant canary is the practice of putting a statement such as "we have not received any NSLs" in a regular report, and then omitting it once you have received an NSL. Because you've conditioned people to expect its presence, its absence then serves as a signal that you likely have received one (though not proof, as there are other reasons you may have removed it, such as being advised by your lawyer that it's a bad idea as the courts may not look favorably on the idea that, no, you weren't actually violating your gag order, you were technically saying nothing, given that you set up the conditions yourself such that saying nothing is in fact saying something).
Organizer of Concerts for Homeless Among 2018 MacArthur 'Genius Grant' Winners
Ugly American Zine
You're simply using a different definition of "depend" than I am.

When you say "it does depend", you mean that in the rare cases where a domain owner has chosen (weirdly) to sign with DNSSEC, LetsEncrypt will enforce DNSSEC validation on that domain.

When I say "it does not depend", I mean that the basic functioning of LetsEncrypt does not in any way rely on DNSSEC. As I've said in the last several comments, LetsEncrypt will continue to function just fine when DNSSEC goes away, and a security failure in DNSSEC (for instance: if the root keys were posted to Pastebin) would literally not impact LetsEncrypt --- today's LetsEncrypt! --- at all.

I'm fine with you using the word "depend" to mean "uses, in any situation, ever", but you're clear now on what we're trying to say, and the semantic part of the debate should be over.
>Prime Video is by far the best user experience for me, and Netflix is by far the worst.

Prime is good while watching. For finding content Netflix is superior IMHO. The recommendation algorithm is better, plus the search is better. Amazon Prime treats seasons as distinct entities - so you need to manually add each available season of a show.
It's not about the problem ever happening, it's about how often it does.
He didn't say anything about it being new, I don't know why you would try to take the opposite side of an argument that didn't exist.
Looks like good work, but this sort of post, showing how easy it is to set up your thing, never does very well on HN. I think that's because people haven't heard of your thing and don't know why it's interesting.

You'd have better luck writing an article telling the story of your project, how you came to work on it, what makes it different, what makes it hard, and giving lots of unexpected and technical details about how you've made it. HN readers find those stories much more interesting.

If you want to do that, you're welcome to email a draft to us at hn@ycombinator.com. We might be able to give you some editing advice (but be warned that the inbox gets over-full sometimes!)
Admittedly it's probably not perfect to compare Amazon returns to Ali Express returns, because I too have received refunds without having to ship the product back. I have had significantly fewer products I've had to dispute through Amazon than Ali Express though.

I don't know where you live, but I don't think receiving an item from Ali Express in 1 week or less is normal, unless maybe you live in mainland China. I'm in the US and I really think I've never received something quicker than 2 weeks.

You said you have received things in a week or less. What do you think the average is though?

I just don't believe that Amazon does not generally provide cheap products conveniently. There are outliers, as with everything, but I think it's the norm that the prices for the majority of products are competitive, and the user experience is convenient.
Libnop: C++ Native Object Protocols
How would you represent that? On HN and similar every response is its own thread. This is true with email as well, but I don't have experience with any significant threads or mailing lists.

The naïve solution would be to just limit nesting and order nested comments chronologically. Another solution may be to CC @postid in your messages and have posts display "responding to: id1, id4" at the top and "responses: id91" at the bottom with appropriate links. There's a question here about which post to write or display your response under. Finally, an extravagant solution would be to really represent discussion as a graph and I think a lot of time would need to be spent creating an interface with minimal frustration as I feel it can get really involved (i.e., a lot of clicking).

Curious what you or anyone else thinks.
Microsoft, Google Applaud as NJ Gov Antes Up $2M, Joins Governors K12 CS Club
To nitpick, the time for stack allocation isn't zero. Stack objects still have to be traced.

But yes, there is some benefit to reducing allocation. The biggest benefit to escape analysis doesn't really have anything to do with allocation at all. Rather it's that promoting objects to the stack enables SROA, which unlocks a lot more optimizations.

This article wasn't about that, though. These were short-lived benchmarks that are dominated by throughput. In those types of benchmarks, allocation speed matters much more than mark and sweep time. So, the best way to optimize for these sorts of workloads is to add generational garbage collection with bump allocation in the nursery.
Here's a summary:

1. Get a website: don't use a readme on GitHub.

2. Use Prose: don't generate from source, you need more.

3. Give permalinks for citation purposes

4. Your URL should acknowledge the documentation version and language, for future-proofing

And now for my own opinion:

1. No, not every project finds it rational to put time into creating a website. Especially if they're small. Sometimes, the time is better spent doing dev work than creating a pretty site to satisfy you.

2. Rails' documentation is generated from source, so is Node's. A lot of documentation is. They give accompanying guides, sure, but there's nothing wrong with generating the majority of your documentation from source.

3 & 4. These are nice to have, sure, but not requirements. If a project is small, I'd rather the solo dev spend their free time solving tough problems.

Essentially: if you're judging a whole project in 30 seconds, I think you're the problem and not the developer that spent all their time making a project for you to use. So, go ahead, "close the tab" as many times as you like there. But if you really want to help someone, open a pull request, or at least file an issue in a curteous time.
It isn't about being helpful or not, but about letting yourself be abused or not. Often times, the only difference between myself with a technology and the person asking me for help is that I am willing to read the documentation while the other isn't. Often, the person seeking my help doesn't even realize they are abusing me but still, if I point out that they can read the documentation as well as I can, I get a look of disgust. There is countless sources of documentation, howtos, and useful tricks in both document and video form on Excel available for free on the internet. People just refuse to use that, even when I point them to it. More over, if I hold firm and say you can read this yourself, the person often will just ignore me and try to find someone else to do their work for them.
Can I check what data Apollo had on me?
Here is some hope they extend it.
Yes, the challenge is the software. Not so much the native Mac software created with XCode. That would probably rebuild at a button press. The elephant in the room are VMs. Many Mac users (for example me) are running x86 based operation systems inside VMs on their Mac. This wouldn't work without a dynamic translation like Rosetta. But as Apple is making their own processors, I would consider it a possiblity that they add some hardware accelerators for a Rosetta style software to their chips.
I feel like grep/awk/sed (actually just perl) should be taught in High School just due to how often I find myself using them in day to day life. Maybe not even the entire programs/languages, but just regular expressions.
Ericsson for one.