skysight-inc/HackerNews huggingface dataset:
> ...so either we improve the Web, it's security, performance, and capability, or we freeze in place, and hand our lives over to the App Stores of the world

Considering the most-important browser and the second-most important app store are made by the same company, with the company having about the same capabilities of control in both, I wonder if there is really that much of a difference anymore.
Sorry, I should have qualified that statement a bit more. The web has the most robust permissions system of any _consumer-facing_ platform, period.

Obviously if you're willing to trade convenience for security there are millions of ways you could build a more "robust" system, but it doesn't help to have the most secure system in the world if it's too inconvenient for anyone to bother using it.

With that being said, the web's permissions system _is_ very robust:

> First off you're dependant on the browser implementing that correctly (that's not always the case)

When is it ever not the case? Zero-day vulnerabilities? That's not a very convincing argument; every system has vulnerabilities on occasion.

> often there are thousand different ways you can still do naughty things even if those permissions are implemented correctly

When is that ever not true of a permissions system? The point of permissions is to _limit_ what naughty things an application can do, not eliminate bad behavior entirely.

The web's permissions model was built with the expectation of abuse in mind, which is the reason why it's so robust in the first place.

> Then there are the thousands of vulnerabilities built into the very design of the web that developers (of both web and browsers) are constantly having to code around (XSS, et al).

I don't see what vulnerabilities in third party apps has to do with permissions. XSS can't bypass permission prompts.

> the current problems we have with data leakage and privacy concerns that we seemingly have little control over at all

You actually have a _ton_ of control. Just look at some of the crazy things you can do with extensions like uBlock or Privacy Badger: those extensions can actually reach into the internal workings of a web application and disable tracker code or replace it with noop stubs. No other platform affords that level of control over third party apps.

Yes, this stuff was built out of necessity; the web is a much more hostile environment than most. But _because_ these web platform features were built with that environment in mind, the web's permissions system is the most robust of any _consumer-facing_ platform.

> VLANs, subnets, firewalls and other network ACLs; or Linux servers where you have tools like SELinux

These are not remotely consumer friendly. Again, my apologies for not qualifying my earlier statement.
We're adding datacenters all over the world, rewrote and are still rewriting the tech stack.GraphQL, SPA (single page app) etc. Your load time sounds exceptionally slow. Shoot us a support ticket and we can try to figure out what's going on.
Why Can’t Instagram Get Anybody to Care About IGTV?
I no longer live in CO, at this point I assume most people who buy off the black market just have a friend with a lot of plants who can grow it at a cheaper price.
It's not just Amazon. The next generation is far less materialistic than generations of the past. No one can blame them for not wanting to spend 500$ on a Gucci gucci bag or 400$ on overpriced jeans, especially when they've got all that student debt. Workplace clothes are changing as well. Less people are opting for the fancy suits. Retail needs to keep up with the changes and start offering something people actually want, like: coffee bars, museums, libraries, book exchanges, 2nd hand stores, places that offer experiences (like sculpting classes, etc). Or here's a crazy idea: let's actually start using some of the 2nd floor+ space for housing/residential and maybe the place won't be such a ghost town when more people can afford to live there.
I was moved to action by this comment as well. I found a local chapter of Code for America that seems pretty active. Maybe your city as something similar?
> And, this feels like an issue that will naturally fix itself over time, as landlords realize what they're asking for isn't reasonable.

Except it won't, exactly because landlords are rational actors. Let's say the upkeep for a space is $400/mo, and the rental for that same space is 3000/mo. A storefront could be vacant for 2 years and a landlord would still turn a hefty profit if they were able to get someone to sign a one-year lease after the 2 years of vacancy.

NYC is a big place- for every 30000 people that think that the rent is unreasonable, there's 1 person who thinks that it is, and landlords only need that 1 person. Renters have no leverage here.
GPL (distribute your code) is better than BSD permissive (do what you want)? For whom?
This looks like email, but with shared storage of emails similar to the way IPFS allows nodes to cache pinned content.
This means the fade-out will eventually become cool and make a comeback.
> I don't know why / who said that pipenv is the official recommended way, if it is it should not be and I hope it is not.

The Python Packaging Authority says that pipenv is the first "recommended way" for managing application dependencies: https://packaging.python.org/guides/tool-recommendations/#ap...

Except if pipenv doesn't meet your needs. Then use pip.

Or, if you need cross-platform support, use buildout.

Or, if you are doing scientific computation, don't use any of those, use conda, Hashdist, or Spack.

Or if you need to create a package, use setuptools and twine.

So, no, pip and virtualenv don't solve the problem, because there are a lot of different problems and use-cases. I can say from my experience that conda is _the_ best solution to the problem for scientific work.
I suppose I wasn't clear.

In my experience, in computer science, "kind" is generally used in an informal way, whereas "type" is used to refer to the technical concept of type in type systems.

If Haskell gives a precise meaning to "kind", I'm going to have be careful which word I use to refer to the informal concept.

As I said, type theorists say things like "Type systems let us reify what kind of data we are dealing with".
Yep. CO in general is a very white state so I wonder how relevant that is? It is interesting regardless.
Wait until someone from the python community recites to you "there should be one and only one good way to do something" ....!
YC's Top 100 Companies
Practical TLA+
Thank you very much for this. This should be the opening of the article. I don't know why articles start like novels. With so much information being published nowadays, I would think the start of the article would include a summary/abstract to help the reader decide to dedicate the time to read the entire article.
a very apt comparison, i think.

we understand the risks of gross poisoning, as the ancients may have eventually, but our understanding of the peripheral risks of chronic exposure are more or less childish. but what we do know is that they're bad when there is chronic exposure.

but we're too addicted to stop.
Microstructure&performance of carbon fibre Li-ion structural battery electrodes
The Robinhood High-Frequency Trading Scandal: The Plot Thickens
Sounds like the DotCom era too. Tech is due for a market crash.
They do state they have considered timing attacks though I do wonder what their mitigations consist of.
He's not saying that you _should_ install conda within a virtualenv, but that some have tried with some success.

At the end, one of his conclusions is: "If you want to install Python packages within an Isolated environment, pip+virtualenv and conda+conda-env are mostly interchangeable". So don't change if you don't have to.

But he does give reasons why conda may be superior to virtualenv -- managing different version of Python, tracking non-Python dependencies, true isolation of environments, etc.
The data they return is data you basically entered. So you get it back.

Inferences though... things that they think might describe you, which is changing over time, does not come out. Something like profilelens.com might provide these insights.

I think the CCPA talks about data flows too. Ask for data flows. Ask for justification.
> After a few confused questions, he agreed to call a meeting with the managers and his attorneys and figure out if we really do need a non-compete, or if the lawyers are just making work.

I just want to say that I'm super impressed that happened at all. Nice work!
You need to accumulate the data somewhere. If you don't fetch if from the node, it has to accumulate there. Custom sync protocol does not eliminate this.
From the release notes:

sendmsg(2), sendto(2), recvfrom(2) and recvmsg(2) are run without KERNEL_LOCK.

The lock is being removed, slowly with care, piece by piece.
It is ethically impossible to ask for DNA samples to every participants in a social science study. Parent OP comment is equivalent than stating that social science is impossible. As any opinion, it can be held, and yet some people may find it ludicrous.

As for the conclusion of the study, it is rather mild and has been known for a while: social class has impacts on people, especially on education related outcome.
This is cool but I'd rather not have any magic happening when running commands
I would love to hear a reasonable counterpoint on this.
All three of these practices are basically a repudiation of both democracy and our legal system with extremely negative effects for society and representative government. I completely agree with you.

Non-competes and forced arbitration are the beginning of a new system of corporate feudalism. (Want to move? Too bad, you're stuck on the fief by law.)

What's that? Your lord wronged you? Well, appeal to the Duke and see what he says about it, forget what your peers think.

NDAs make it so that the ills and wrongs of society never see the light of day and so can't be appropriately considered by citizens at the ballot box. Kind of like it used to be a crime to speak ill of the king...Yay modern lèse-majesté.
I may have a slightly bent view on this... the technology exists, is being created, and is getting commoditized. Why increase the cost to taxpayers?

As to increasing lethality, wouldn't this in effect be decreasing the risk of collateral deaths?

The bigger issue to me is probably unsupervised police usage at a local level. That said, the tech exists and will be used. I'd rather it were less costly. We, as a nation (in the US) already spend far more than we should be on the military. I'm in favor of most technology that reduces costs and mitigates risks.

That's not to say that I approve of the use of drones on sovereign soil we are not actively at war with (the country itself, not "terrorism"), without that country's permission. I wouldn't want China, Russia, Mexico or Canada flying armed drones over the U.S. and don't think the U.S. should be doing it either. That doesn't mean I don't think drones should exist. Policy, use and technology are not the same and shouldn't be conflated like this.
I'm pretty sure that, just as you pay to reuse Sears' old building, you also pay to build a new one. If the Sears building is cheap enough to be worth the remodel (plus the awkwardness of using a building that isn't custom-built for what you have in mind), well, then you reuse the Sears one.
Good question. I do not know but I would guess that your domain hosting company and the range of IP addresses it uses could be blacklisted, or, the email provider has a well known data signature that vendors associate with spam bots and again, blacklisted. I would be interested to know myself. Best guess; perhaps change email provider or hosting company and see if situation can be replicated. Ensure your email addresses have not been compromised. Good luck.
I found that same exact issue in Terraform Go code where it generates passwords for AWS IAM users: https://www.cvedetails.com/cve/CVE-2018-9057/

We need to find out who is teaching this stupidity and make them stop.
There is a cool conspiratorial take on it.

This plastic epidemic is not an accident- it's population control.

Plastic is fundamentally tied to endocrine disrupting chemicals, endocrine disrupting chemicals interfere with testosterone, and reduce fertility. Furthermore, that reduction in fertility is passed down epigenetically, compounding with each generation.

I don't understand why people waste their time imagining chemtrails when the plastic endocrine disruptor theory is so close at hand, and the consequence of it is easily proven. The only part that is a conspiracy is the part you can't prove anyway.

https://www.ncbi.nlm.nih.gov/pubmed/28842957
I wonder if a vacant parcel tax would help here. Vancouver did this with varying success[1], and Oakland has this on the November ballot[2] If real-estate owners want to "wait" for a better deal, they should pay for the resulting blight (and speculation)

[1]: https://vancouver.ca/home-property-development/why-an-empty-...

[2]: https://www.kqed.org/news/11689739/oakland-wants-to-tax-vaca...
They max out because the benefits max out. IN THEORY, your SS and worker's comp payments pay for your own benefits, as if an insurance company was calculating odds and investing the money.

In practice of course it is politically easier for government to borrow the money and spend more than income, until Greece happens.

Anyway, charging high-income employees more for SS and then paying them less on retirement would ruin the illusion that it is a retirement plan and not simple theft from the future.
The Physiological Basis of Psychological Disgust and Moral Judgments [pdf]
Strictly speaking, those are usage messages not help messages.
2018 UtahJS Pay, Education, Job-title Survey
I rarely find the links to be technically relevant or useful

Reading articles like this one gives you things to talk about, which makes you someone people are more keen to engage with. That will give you an edge in a lot of interactions but particularly in sales. If you can't sell then your startup will fail. That's why they're relevant.

You need to be able to talk to other people about what they are interested in. That requires broadening your interests. A few articles about things you wouldn't typically read can be very useful.
I remember him saying that thinking we were going to save the planet was pure arrogance- we were trying to save ourselves, because “the planet isn’t going anywhere- we are. Pack your shit”
He seemed to be pretty supportive of the idea that climate change was man made.

And maybe we ought to rebrand saving the environment as saving our property and arable land and it will resonate more with some skeptics. Because Carlin was right: this rock we call earth will continue orbiting the sun without us, but “we’re f*ed”
It's due to the first past the post system strongly favouring two or few parties per constituency (otherwise if you have two parties that are closer to each other politically, then they're at a disadvantage against the third one.
I think a lot of economic models severely underrate the extent to which overheated real-estate markets eat economic vitality alive. It's because most of the costs they impose (initially) aren't that easy to quantify, but you're basically grinding your seed corn by making it impossible for working people to be able to afford to live and making it impossible for small businesses that aren't bars or restaurants to have a viable business model. Where's your next generation of innovation going to come from when you've done that? What happens to the community that lives in a place when the people with all the land and political power have no stake in the community itself?
Are their profit margins (even with high prices) paper thin? Maybe the people making money are the one selling franchises?
(Pardon for my lack of understanding of the retail NYC market.)
Hey, if Mickey Rourke could have a career....
This could make sense. The hardest part of the English SAT section was my abysmally slow reading speed.
The book Jennifer Government by Max Barry (and of course Snow Crash by Neal Stephenson) is one of a bunch which touches upon this subject.
You're conflating the financial district / midtown with the entire island. Trust me, up here in Northern Manhattan (which is like, you know, almost half of the island) there's a pulse.
https://www.cdc.gov/acute-flaccid-myelitis/afm-surveillance....

> All of the AFM cases have tested negative for poliovirus.
On the other hand, this is often enough cover for not knowing where to go.

Listen to the original recording of "How Could I" by Cynic - it fades just as an absolute shredfest gets going.

Then listen to the remaster from 2008(?) - the fade is removed, revealing that actually the band just kept on going until they gradually gave up one by one...
My parents would basically (with a few exceptions due to price) buy me any book I wanted growing up (without it hitting into my allowance); they thought it was incredibly important to grow up well-read, and even more important to learn how to teach yourself stuff, and similarly every standardized test I took was insultingly easy.

I'm definitely not some pillar of intellectual vigor either (I don't even have a college degree), so the fact that my reading comprehension is good, I think, is because of the exposure to books.

That said, I realize that one anecdote doesn't mean anything.
Let’s not forget that MacOS X is considered a BSD by many.
What are some stores, companies, or brands that seem to survive and thrive?
The challenge there is that new device setup is already burdened with more essential tasks.

It's gotten much better with the recent ability for one iOS device to prime the pump for a new one, but I have a hard time picturing Apple treating this setting as vital to the device setup.
i think it may have to do with the type. I won a free yearlong gym-membership in a contest, from a govt workplace and was told I would have to pay imputed taxes on it. Needless to say, I turned it down.
For the last couple years, I've conducted a survey of software engineers in my region about their pay, education, and other career related things. I believe strongly that opening up discussions about pay will help everyone overcome some of that information asymmetry especially early in their careers. 2017 Survey info for comparison https://mdjasper.github.io/utah-js-pay-data/
The standard is controls with adopted identical twins.
While that did happen from time to time, it was not especially stable, and I think there is a better name for it - (military) ocupation
Williamsburg, Dumbo, Park Slope, downtown Brooklyn, just to name a few.

I'll spare Brooklyn residents the pain of ratting out their less well-known haunts.
Use this daily. Have it aliased to ‘ff’ though.
Favourite use is pushing a new branch
Bencode is such a piece of junk though.
Who says you need to feed it directly to the replica. Logical replication provides infrastructure for decoding changes, and you may fetch it any way you want / how often you want / feed it wherever you want (file, another database, ...).

It would be trivial to write something that connects to a bunch of machines regularly, fetches the decoded increment and feed it somewhere (say, to a single database over a shared connection).

See test_decoding / pg_recvlogical for examples.
They tried with https://en.wikipedia.org/wiki/PC-based_IBM-compatible_mainfr...:

”The XT/370 was an IBM Personal Computer XT (System Unit 5160) with three custom 8-bit cards.

The processor card (370PC-P) contained two modified Motorola 68000 chips (which could emulate most S/370 fixed-point instructions and non-floating-point instructions), and an Intel 8087 coprocessor modified to emulate the S/370 floating point instructions.

The second card (370PC-M), which connected to the first with a unique card back connector contained 512 KiB of memory.

The third card (PC3277-EM), was a 3270 terminal emulator required to download system software from the host mainframe.”

I don’t know whether that indicates that this was a monstrosity (not only did they combine a pair of 68000’s with a 8087, but both were modified. How did they ever license that?) or that it just was very hard to ship something that could run System/360 code at somewhat decent speed at the time.

Edit: more info at http://www.cpushack.com/2013/03/22/cpu-of-the-day-ibm-micro-.... Apparently, this was a step towards having a ‘real’ 360 on a chip.
> Everyone understands that one risk of failure is that it tarnishes your reputation. But, unfortunately, people will sometimes decide that your mistakes reflect on your field as a whole. This means that messing up can also set back other people in your field.

I find this to be the case with non-profits and others attempting to make big pushes to promote local entrepreneurship. I have objected to several attempts based on the organizers focusing on the wants of donors (not the entrepreneurs), lacking any marketing plan beyond "if you build it they will come" and not having long-term plans for sustainability. Every failed attempt sets back the next one by 2-3 years but no one wants to listen to a naysayer.
Make sure the PRNG does not source enough entropy thus dramatically weakening all session keys to a crackable level.

Or do like WEP and recycle your one time pads. Lots of subtle design flaws one can introduce that generally get spotted in blackbox testing, and not in code.
Have you implemented DKIM/SPF/DMARC? If you have not, that is a first step.

Are you sending from a "consumer" network IP block (cable modem or DSL)? If so, that's going to be big points off (probably not since you are sending through fastmail).

In my limited and somewhat dated experience, some email service providers are very aggressive in blocking email senders. The better class of these had contact information and would respond to requests to be whitelisted. Some email providers blocked emails and had no contact information to request white-listing. For them, my only recourse was to send emails to them through an email forwarding service (I used Dyn at the time, Dyn apparently sold their email forwarding business to DuoCircle).

https://en.wikipedia.org/wiki/DMARC

https://en.wikipedia.org/wiki/Sender_Policy_Framework

https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail
This is why property and land taxes are good. Land is, as they say, the only thing they're not making any more of. If you're owning it and not putting it towards any productive use you ought to pay back into the commons for the lost utility.
Jira PM here. Sorry to hear about your experience.

We're constantly working hard to make performance improvements on different fronts.

The new 'next-gen' projects are more performant due to a tech stack update - the interactions and are snappier and updates are near realtime. Come check it out by creating a new 'next-gen' project in your Jira Cloud instance.

Outside of 'next-gen' projects, we're currently working on general performance improvements that will benefit all users.

We're currently making transitions between different parts of the product a lot faster through data pre-load and pre-render techniques. We're also working on optimising the front-end and back-end calls for faster loadtimes in general. We're looking at investing in more datacenters to keep lag times down for you.

Please keep a lookout on performance improvements. It might be hard to notice this day to day, but we have been and are always investing on this.

With age we've incurred some technical debt but rest assured we are unwrangling the complexity everyday so we could optimise our software for you.
> Easiest way is probably to get the pink salt from the Himalayas.

It's from Pakistan, but I think your point stands.