skysight-inc/HackerNews huggingface dataset:
Agreed.

ACL's can be set on a per-object basis. So you might have set up the bucket thinking you set it up as "non-public", but them some software sets objects to public when it stores them.

And we all know about misbehaving software and bugs. And how would you know that had happened? I guess you'd have to run something that monitored all the ACLs? (And you'd pay for those monitoring operations, although probably not a significant cost).

It makes a _lot_ of sense to be able to tell a bucket "No public access allowed in here". Which I understand is included in this new feature set? That alone is only sensible.
Depends on your goals.

I suppose Shuttle's goals were heavily skewed by the military. It was a much more reasonable project in the beginning.
It's a great testing resource. Way more concrete than 'well just test all the different strings'
I guess I assumed all data at AWS was encrypted at rest. Disturbing if not. Compare:

https://cloud.google.com/security/encryption-at-rest/default...
I've got an upcoming flight on a 737-800, is it safe to assume that model isn't affected by this?
Adobe XD isn't showing as the available in the Microsoft App Store, but I can download it through Adobe CC desktop.

I should have said UWP instead of store apps, my point being, I haven't seen one UWP app that isn't crippled in some way.

I like what Microsoft is trying to do, but their execution leaves much to be desired.
Only in all too many schools here, many parents cannot read and teachers have up to 60 kids in a class...
Adding new systemd service, for example just requires me to put a file into `/etc/systemd/system`.
Many other applications work like this as well: Apache configs, /etc/sudoers.d on Debian, more examples in `/etc/?.d`

It's generally a good practice to make your system open for extension but closed to modifications [1].

There is no reason, the user database can not work the same way. Just have the system scan `/etc/passwd.d/*` on boot/reload and drop files there.

[1]
https://drive.google.com/file/d/0BwhCYaYDn8EgODUxZTJhOWEtMTZ...
Hmm I’m not sure where I stated I was for total control over what people do.
Well, one problem is that apt-get's uninstall doesn't undo everything that could have happened during install.

It's just like how you need software like Revo Uninstaller on Windows to actually clean up everything: why?

It might not cause you day-to-day problems, but it's a massive defect in my eyes.
It's still too confusing. Too much terminology, too many settings. 3 pages and over half a dozen screenshots to explain how to make a bucket private. Too complicated.

Google Drive folder permissions are easier. Phrases like "Anyone with the link can view" are understandable. Phrases like "Block public and cross-account access to buckets that have public policies" are not.

Hide the fine-grained control in an "Advanced" panel, for those who really need it.
Well, when I read the title of the post, I thought, "there's no way I'm opening that up in my browser". But you managed to pique my curiosity enough that I went ahead and did it anyway. I hope nothing bad happens.
google is using unicode equivalence[1] to remap back to "standard" latin characters. this is important because, e.g., professional type-setting software may replace two adjacent "f" characters with a double-F ligature "ﬀ" depending on kerning. without unicode equivalence, google would fail on a lot of copy-paste queries.

[1] https://en.wikipedia.org/wiki/Unicode_equivalence
Live Fires Map (US)
I don't reproach Shuttle designers. I just try to point at their different incentives. SpaceX has rather different goals than Raytheon or NASA, afaict. This is natural.
Thanks for checking out, I'll definitely look into the font size issue. I would also want the writing feature myself but just haven't got around to implementing it, hard to figure out where to put it too.
Exactly, jumping to the conclusion that it is safe is not helpful.

Grounding the plane is exactly the opposite of jumping to a conclusion. It's declaring "we can't conclude that this plane is safe".
Static web apps with geo-redundant IPFS clusters and Cloudflare, optional CI/CD
It does bug me when I'm expected (and in some cases, nearly forced) to use licensed software for work that they won't buy licenses for.
MacOS Hardened Runtime and Sandboxing
I’m pretty sure buckets are private by default.
If it was an “obvious fabrication” he ought to have been able to demonstrate that in court. Either the UK one or the Swedish one he ran away from.

Quote:

“””as a matter of fact, and looking at all the circumstances in the round, this person (Mr Assange) passes the threshold of being an accused person and is wanted for prosecution”””
I get access to most scientific publications through my employer, but I'm not a member. I used to be a member of the Biomedical Engineering Society as a student.
There are excellent laptops that aren't made by Apple. I feel that Apple's advantage there was lost at least a couple years ago.

At the top of that list I would probably put the Dell XPS 13 , and it can be bought with Linux. HP (Envy/Spectre) and Lenovo (x1 carbon) have laptops that look to be very high quality, but I don't have personal experience with them and they don't ship Linux.
This is actually very common (software setting public access).

I think it's to reduce support burden on software developers.

See mongo with no access control at all, lots of plugins and apps that might serve something public go to ALL public etc etc.

They've had free bucket permission check tools out I think since at least February as well. I think that will continue.
Don't ever do that. Don't ever professionally ruin some Person life. It has a greater impact than you thought.
Users can delete comments within a certain time window if there aren't any replies.
User management could be handled as part of the package metadata, rather than an install script.

Schema migrations would still need a script or something though.
No plans for now, I'm having a bit too much to work on atm, no teammates :(
You’re just using anecdotes to argue against evidence here. Nobody cares who has mere preferences for what. No part of the open plan office debate is about that. It’s just about demonstrable losses of productivity, morale and workplace health.
It's also possible they were simply overloaded by a misbehaving aircraft in very busy phase of flight. Would it have been technically possible for them to recognize and correct that issue? Maybe (obviously we don't know enough to make that call), but even if that were the case, I think "blame" is pretty strong word to use in evaluating the pilots' actions in this accident.
It doesn't answer my question though, especially about Servo part and what parts are still C++.
Most of those biology claims have been found to be mostly or completely false by researchers observing primates and disproving theories of hard wired behavior.

For example, the theory that the most aggressive male primates get most children has been generally disproved since longer term studies show that those males at top generally get dethroned, injured and kill at much faster rate. A secondary issue is that primate females mate not just with the pack leader which means that paternity becomes a statistical probability, which get worse as you go up the hierarchy.

Similar aggression is only a effective strategy if and only if aggression get rewarded. Relative recent trend in primatology is to talk about culture, and it has been observed that it has a massive impact in regard to aggression. All those "hard wired" behavior which people took for certain in primates changed if a troop has a cultural change, which happens occasionally.

A unintended experiment is when a bunch of young specimens of a species is transfer to a new environment (often creating a invasive species but thats beyond the point). Behavior which researcher thought was innate and hard wired is then often found to have disappeared when no initial adult member is there to transfer existing cultural behavior, a fact that holds true multiple generations later.

Instead of looking for biological causes, let ask following questions. What does our culture define as attributes that women should look for in men, and men in women. What behavior defines social status for men and for women, and how do inter-sex competition work men and for women. Feminists who look to blame male behavior (with terms like "toxic masculinity" and "patriarchy") ignores half of the picture that defines gender roles and gender expectations, while also making negative generalization. It is very likely a contributing reason for increased suicide rates and polarization between women and men.
Why do you think extradition from Sweden to the USA was more likely than extradition from the UK to the USA?
Show HN: Perceptions – Better investment results by avoiding behavioral pitfalls
Show HN: Perceptions - Better investment results by avoiding behavioral pitfalls

Hi All, I’ve been working with a team of institutional investors to develop a product (called "Perceptions") that allows an investor to create a thesis (reasoning) for an investment and then add measurement criteria, confidence level as the thesis evolves.

It ensures you stay true to the reason you bought the shares and avoid behavioural pitfalls. It gives you nudges when it looks like you are making a behavioural error.

The goal is to allow investors to organise their reasoning behind an investment, what’s their expected outcome and their confidence level. Tracking any changes on their thesis and the development of the investment. After the fact, it allows us to report back to the investor how successful they have been and how to adjust their processes/thinking

Although we’ve been working with institutional investors to date, I believe this could be useful for anyone who wants to get a bit more serious and wants to avoid the usual behavioural pitfalls, so… we’ll be opening beta access to retail investors as well with a forever-free tier!

Please let me know what you think, suggestions on the idea and whether this could be helpful to you!

All feedback welcome!

https://www.perceptions.io/
Correction: Mondelez is a spin off from Kraft. https://en.wikipedia.org/wiki/Mondelez_International
What are all these new, 'safe' languages written in that they don't eventually have potential memory issues as well? Don't almost all languages provide C/C++ interoperability?
From what I have seen it is quite simple.

1) There is this pseudo-scientific methodology called NHST (null hypothesis significance testing) devised pretty much on accident in the 1940-50s that tricks people into thinking they have discovered something interesting.

2) It is so much easier to generate these "significant" results than to study a phenomenon and come up with a model capable of making a precise prediction, then have multiple people/groups carefully collect data to check that prediction.

3) People willing to do the NHST thing can publish papers orders of magnitude faster than people not willing to.

4) Number of publications is the primary metric of success in academia.

5) People willing to do the NHST thing slowly take over the field as those who want to do real science get pushed out, retire, or leave for greener pastures.

6) Eventually the field is filled with people generating worthless papers that cannot be replicated in principle and often contradict each other.

- a) Because all that matters is you got a significant result published in a peer reviewed journal

- b) The discovery has already been made, the statistics said so, why would anyone need to replicate it?

And to preempt a common confusion. This has nothing to do with bayesian vs frequentist, testing a strawman null hypothesis can be done using bayesian math just as well as frequentist.

Some decent intros to this problem (yes, it was pointed out long ago but there is no stopping the need to publish apparently):

Meehl 1967: https://meehl.dl.umn.edu/sites/g/files/pua1696/f/074theoryte...

Gigerenzer 2004: https://library.mpib-berlin.mpg.de/ft/gg/GG_Mindless_2004.pd...
Sure, in that simple case explicit types aren't helping, but take a look at this simple function (it's plain javascript):

export const mergeItems = (keyExtractor, oldItems, newItems) =>
uniqBy(oldItems.concat(newItems), keyExtractor)

What is keyExtractor? What are old and new items? You can probably guess that oldItems and newItems are an array of something, and you can probably infer from names and stuff that keyExtractor should extract a key from the items somehow, but aside from that you don't have much. If you didn't know what the lodash function "uniqBy" does, you wouldn't know how to use this without research.

Contrast that with this below (Javascript with Flow type annotations):

export const mergeItems = <Item> (
keyExtractor: (value: Item) => string,
oldItems: Array<Item>,
newItems: Array<Item>,
): Array<Item> => uniqBy(oldItems.concat(newItems), keyExtractor)

With types it is a lot more explicit. Key extractor is given the item in the array, and should return a string key. Now you don't need to know or care about how "uniqBy" works, or the exact details of how you should or shouldn't use it, and if you try to pass 2 arrays with different items, it will yell at you because that's not right, something that type inference can't determine (at least not with Flow's typesystem)
This again is misleading, users blaming AWS for making bucket's public.

The bucket's start out __private__.

The UI when making a bucket public comes with a big warning.

Then a big warning label is attached next to the bucket itself.

It does show I think the scale of AWS that the userbase is so large that this isn't clear. This tool is nice because it means that a perhaps more experienced admin can lock down an entire account a bit more so newer devs looking to shortcut things with world public aren't as able to (which will slow them down for sure).
Well as I said, in the US if you have an engineering/CS/math etc degree from a reasonably good uni and want to work in tech, finding a 6 figure job in a major city stratight-outta-college is not only easy but also is the norm. Whereas looking at glassdoor expecting a 100k job straight-outta-college in Berlin is pretty much impossible, you better expect half of that compensation, and even then there is a chance to not find a job. So your math is unnecessary. Especially the wealth tax part. I can't even see 250k compensations for engineers, say, in Berlin even for senior engineers.
> Strings which may cause human to reinterpret worldview

I laugh every time I see this one. Which is just about every year on HN.
I agree

People blame the power tool manufacture after they get hurt because they wired open the guard, taped down the safety and then developed a habit of holding the saw in one hand and the work in the other.

Some people just can't accept that they dug their own hole even when it they clearly went out of their way to find the shovel.
>Why does scientific reductionism need an antidote?

If you have to ask, you will never know.

It would be a good question for a Voight-Kampff test.
I'd say if you can afford it, it's not real risk.
Have you had any experience with computers in a school setting? It's all most school in Germany can do to keep their computer infrastructure up and running. Never mind rural Africa!

Setting up and operating such a network requires some serious know-how - know-how that pretty much nobody in your scenario is going to have. And never mind the practical problems of running computers in a rural setting (see my post above).
Correct, the 800 is a "Next Generation" series jet, not a MAX, and so it doesn't have the MCAS that is suspected to be related to this accident.
Cloudflare: Intoducing Apps with Workers
They are private by default. This is just making public/private settings very explicit, and also helping to ensure that anything that was public before the default setting was changed to private is known.

This is really just extra CYA because people who really don't know what they are doing are apparently still being put in charge of buckets by companies.
There’s precedent; Microsoft outlived the US government in the antitrust case.
>Why would reductionism reduce the majesty of complexity? Cellular automata are about as simple and reductionist as you can get, but they produce breathtaking complexity.

Because we (well, some of us) don't really like breathtaking complexity that's reducible to some simple rules.

Or at least don't like that kind of complexity to be the norm.
An upper bound of "maybe, who knows" is not useful or informative enough to make a whole "rule" about it.
Here Comes ‘The Journal of Controversial Ideas’
To buy or to build (AI): That is the question
Buffalo jump
Ask HN: Taxes for Canadians working remotely for US company
Are there any other Canadians who work remotely (as an employee) for a US company?

I understand more or less how it works for contractors, but are Canadians allowed to work as a FT employee for a US company (no Canadian entity) while a PR of Canada?

- Do you require a working visa if you are not present in the US?
- How do taxes work? Currently, my employer pays me to my US-based account and they also withhold my taxes - which will go to the IRS. However, technically I should be paying these taxes to Canada (the country where the work is taking place). How will this get resolved come tax time?
- When I get paid in US dollars, is it possible to keep this money in USD? Also considering things like TFSA and RRSP - can I contribute in USD? I assume the Canadian government wants all my income to be declared in CAD.

Thank you. Also, if anyone has any recommendations for a Canadian based tax person (preferably in the GTA) let me know!
Xbox One supports Freesync (open standards adaptive sync), too. I'm wondering how long Nvidia can go against the current, but I guess 70+% market share is a tough nut to crack.

https://www.microsoft.com/en-us/p/xbox-one-x-1tb-console/8nq...
Montera – Platform for Freelancers to interact with their clients
Serious question: Why do you care Microsoft (or any company for that matter) collects your code editor telemetry?

Addendum: Check our Google Analytics, Hotjar, and Facebook ad targeting if you _really_ want to see “violation of privacy”. In reality, companies want to know how users use their products to make them better.
Easy, implement the config upgrade in the software (launcher) itself. 1. check config version on launch. 2. if old version upgrade.
As far as I know there are at least 3 private space companies in Russia with some ongoing projects. But state owned Roscomos definitely have some problems lately.
I wonder about analysis tools for c/c++. I know those tools have come a long way. Is the problem the decades of time where those tools were proprietary or expensive or free/open and poor in quality where most of this code was written? Or do these tools actually fall short of their claims of memory safety and the only solution is a rewrite? Or I guess it can be like opening an old solution in visual studio seeing it has 100+ warnings or doesn't even build anymore with current tooling so changes go on the back burner because that small change turns into a few days of work because nobody has built it in the last 10 year's...
Makes sense. I thought I had entered the weirdest timeline around then, and it's only got worse!
Having someone to bounce ideas off of, ask questions, is just so much more efficient and helpful when it comes to understanding.

Granted that also requires a good teacher but the payoff is so high compared to just having text or video in front of you.

Standing at a whiteboard thinking out loud with an instructor or peer has always lead to my deepest understanding / biggest breakthroughs as far as understanding a concept goes.

Humans are social animals and we learn really well that way.
This is very true. I had a fantastic apartment that I got by walking in and asking about availability. They always seem to have something available within a few months, but don't advertise at all, anywhere. Yet remain at near-100% occupancy.

Actually the only ad they really have is a "now leasing" sign with a phone number near the entrance.
And then we could replace the children with tools and no humans are needed for education!
Well, for me this is a question who owns the config file:

* If the package owns the file, and the user is not supposed to make changes to it, then package updates may do whatever to the file on update. It's good practice though, to leave a copy of the old file in /lost+found.

* If the user is allowed to make modification, then the user owns it. The configuration syntax becomes and API and should be treated as such. Breaking changes should be rare, preceded by a deprecation period and announced as major versions. As you say, it's questionable if such updates can/should be automated.
Yes that will definitely help you blend into the crowd.
William Goldman, Writer of Princess Bride, Dies at 87
Europe Rose Because of Jurisdictional Competition
> Telling people of your bad design is still bad.

IIRC the person who took over maintenance and added that warning isn't the one who created the tool.
(so what's easier about that?)
Because that gives the employer a lot of leverage if the candidates last salary was lower than your expectation.
I'll do you one better - when my first wife was in nursing school, part of her education involved many hours of unpaid internship. So she was working 2 years for free giving care at a hospital she could not afford to be treated at herself and which did not have to provide her insurance.
I can’t find it now but someone responded to one of these threads that is actually illegal to negotiate your bill except for hardship cases.
That's not what reductionism is.

It says there are certain elements that interact with each other in certain ways. It does not concern itself with the nature of configurations of such elements, and how those evolve. These may be extremely complex configurations, of huge numbers of the elements, that evolve in very complex ways.

A really important point about this, which is usually misunderstood, is that "does not concern itself with" is not the same as "dismisses" or "views as invalid or unimportant".

Also, this is not a matter of what we "like" or "dislike". It's a matter of how reality is or isn't, and what we like or dislike has no bearing on that.
Conscious Guide to Portland, Maine
While this is great and all, I don't think this title is accurate. This is just some guy hawking his add-on for one browser, not actually providing a way to fix this blight for everyone.
Honestly Airtable is the future, I'm very excited to watch it grow. 90% of software I create for enterprise companies is just spreadsheets on the cloud.
This stinks to high heaven IMO - they're threatening to release e-mails detailing "rampant pedophilia" among high-placed individuals? Sure, that's not odd at all. I guess that's there to leverage the pizzagate believers for extra publicity.

That said, there is a claim that should be verifiable - that Protonmail have not enable SRI and that this leaves users vulnerable. Does this claim hold up? I'll admit I'm not familiar enough with SRI to even say whether it does what the pastebin suggests it does. Them calling it "mandatory" seems like another manipulation, though - mandated by who?
> You simply cannot constrain the entire software world to operate in a file-oriented, declarative manner.

You can, if the community wants to go in that direction.

Ideally the software which loads "plugins.xml" is updated to support a conf.d-like directory full of "plugin-pkg1.xml" through "plugin-pkgN.xml", each owned by separate packages. Many OSS projects have done this.

If that's not possible (closed-source, too much work, whatever) then it seems simple enough to build a separate XML-merging tool that the package manager invokes which combines the separate XML files during package installation.