skysight-inc/HackerNews huggingface dataset:
> Do "corporate VC" people have the mindset of a VC in that they're aware that most investments will fail and that's ok as long as a few "moonshots" go really well?

In my experience, the VCs themselves do. Their bosses say they do (hence why the corporation started a VC arm). But after a few failures, that tends to change. (Analog: why many corporate cultures try and fail at emulating Skunkworks.)

> Was Yahoo! buying tumblr an example of corporate VC? How about Facebook buying Instagram?

No, that’s M&A. Generally when one says Company A bought Company B, that’s corporate finance.

GM investing in Lyft is corporate VC. Tyson investing in Beyond Meat is corporate VC. Minority stakes, early-stage companies and a strategic motive describes corporate VC.
It's probably about coming up with names.

If I'm rewriting a tool like Awk in go, then coming up with new name is hard and naming it as goawk, means it is a reimplemention of Awk in go.

If one names it as xyz, then it would probably gain less attraction, and in comments people would complain that this is a reimplemention of Awk in go.
> Even before i could start writing a single line of code the CTO left the company after a spat and without proper hand-off. I wouldn't wish this scenario even upon my worst enemy.

I know that feel. My first full-time job right out of college, the lead developer left only a week after I joined. I individually inherited a 70k+ SLOC project (in Java, but still...) of his that sorta kinda worked, in a domain I had no experience in. Especially as a new grad there was a massive amount of anxiety trying to get up to speed with nobody to ask questions to. But as the months went by I learned every nook and cranny of every class in the codebase, and was able to make big sweeping changes. It turned out to be an incredibly valuable lesson in soldiering on and not getting intimidated.
I agree with you but the way you express this is still too distant from each individual's experience for the audience to actually understand it. I tried above in another comment but I suspect I will get the same answers that you received...
> for i in *; do du -bs "$i"; done
du: illegal option -- b
usage: du [-H | -L | -P] [-a | -s | -d depth] [-c] [-h | -k | -m | -g] [-x] [-I mask] [file …]

cool
Hey thanks for writing this out. I’ve felt similarly about quite a few hacker news discussions lately.

I worry that HN is turning into hot takes and gotchas and getting away from enthusiastic curiosity.
I don't see the phrase "MUST exist" anywhere in 3501? I see the word "exactly" in two sentences, neither of which appears to be the one you mean. Can you provide a reference?

I don't want to argue about the disadvantages of flags vs. mailboxes. It's a valid subject but I don't want a subject change.
People make the same complaint against Signal.

I expect it's frequently the same people.
I think the encryption thing was more about Facebook not being able to intercept your messages, read/store them, and remain unnoticed.
Of course they can "still" read your messages as they could rewrite the app in a few subtle ways to achieve that easily, but that's nothing new.

I guess that if the app starts looking for the chats within the devices, it would be much easier to spot than it would if the messages were just analyzed as they went through WhatsApp's servers (so that's what the encryption is for).
no one cares

his book of essays is interesting, at least
Looks like Craig Wright was wrong about crashing the Bitcoin Cash network
> It's not brewing by the pressure you are applying but time + agitation. The press is just removing the grounds.

Is that right? I’ve never understood the purpose of the high pressure air pocket inside the Aeropress. If the pressure has no effect, why does the Aeropress brew more quickly than a French press?
Detect door opening, post the image to the slack channel.

Or don't jam the door open in the first place.
Another report: https://lushka.al/osd-summit-2018/
If the terms "PETSCII", "Amiga ASCII" and "ANSI art" do not mean anything to you, then this font and what can be rendered with it will be completely meaningless to you and you will be confused like you are. You had to have experienced it to appreciate it, which you do not apoear to have. A shame, really, since you missed out on a lot of cool art.
Sounds like an opportunity for a third party 'market maker'
My task: Take a top 500 website, all written in smalltalk (no documentation), and port it to a modern scripting language. The company has: no money, a hostile customer base, angry previous engineers, angry management, and hostile current employees. The site generated billions of webviews and was all unstructured (no database) user generated content.

It was grueling. There was only one smalltalk engineer that would talk to us (the others quit, or weren't paid). Getting the dev environment running was impossible due to license issues with cincom. Luckly, I was able to get 3 smalltalk endpoints that would dump XML -- using the last remaining favors we had with the last small talk dev. Using this and layers of hacks we were able to start porting in 6 months.

The site was sold (3?) times and was ported again to something else.
#Watch_Top_3_Pubg_Tricks_to_win_100%
Watch Top 3 Pubg Tricks to win 100% Sure
https://youtu.be/5UOqIZMf9Io
https://www.cancelsave.com/top-3-tips-tricks-in-pubg-mobile-to-win-100
> When you work without a screen you end up having to build up a mental model of the code, which you keep inside your head. When you navigate the code, you are doing it mentally, inside this cathedral you maintain in your mind.

Interesting! I am not visually impaired (not beyond what can be fixed with reading glasses), but I have always worked like that with code.
Ethereum mining: is it still profitable? Explained
The context of the conversation is how far ahead Tesla is. Using US only sales figures for the Leaf, rather than worldwide which was almost 7k in August, serves only to exaggerate the gap in a misleading way.
> Wow, pelulamu.net still exists!

Yeah, it’s a site maintained by viznut, a well-known Finnish demoscene figure and digital activist.
Watch Top 3 Pubg Tricks to Win 100% Sure
thank you for the link, I enjoyed Corrections and am still puzzled by sections of it that warrant a second reading. Mr.Adams review of the book encourages me to do this soon.
There is a proposal to add them to Unicode, but the process takes a while (and its the third proposal since 2017): https://www.unicode.org/L2/L2018/18275r-terminals-prop-no-at...
Title is a bit misleading in my opinion. If you back up your chats to Google Drive, they obviously won't be E2E encrypted.
If your point is that it is not perfect, you are right. Case in point here is openssl which after decades of usage was so convoluted that people decided to create independent implementations to cut down on the problems that were found in it regularly.

You are also right that appstores are a problem. However, one of the nice things they do is using signatures to prevent tampering with the builds. So having a build system that produces reproducible builds and signatures means users can check whether things line up.

A bigger problem is the reliance on the phone network for identity. A lot of these chat clients insist on using telephone numbers for identifying users. This has been used to shut down chat networks in countries with telecom operators that are collaborating with governments.

If you want to stay secure, most of the chat apps out there are problematic at some level. Signal is one of the very few decent options out there. It is one of the few solutions that has both open source clients and servers and a wide community of people using it and scrutinizing it. With e.g. whatsapp, you are at the mercy of a multinational with a track record of indifference and negligence towards the goal of preserving their user's privacy and, worse, a strong incentive towards doing the exact opposite.
Perhaps targetted ads can be less manipulative and more information rich than untargeted ads.

Also, I think, if I had a product to sell, I would want to spent every penny of my ad budget to be able to get the focused attention of potential buyers who might be looking for products like mine.
Whatapps needs a Google Drive API token to write that backup, don't they? If so, surely they can read it using the same token?
China’s social credit system doesn’t exist – at least not yet
For old scanners, you can try VueScan (paid app under Linux) which is a real breeze for those scanners which you cannot find driver anymore.
Jehanne hacker here.

> doesn't this suffer from a race condition?

This is a good question I should probably clarify in the article as it has been asked before but I can't answer in that forum (see https://lobste.rs/s/fqilcv/simplicity_awakes#c_8pvo0s).

To prevent race conditions the wakeup can occur only during a blocking system call (not even all, some cannot be interrupted to avoid unintuitive side effects).

> it then suffer from the problem that a random buggy library function could request an awake without then doing a blocking syscall (due to whatever logic bug), so then when the process does a blocking syscall that it expects to block indefinitely, it instead gets a syscall with a timeout?

This is by design.

The awake idiom described in the article is pretty simple: if you book a time slice you must release it if it didn't expire.

The operating system cannot prevent userspace bugs.

> Wouldn't it be better for the awake syscall to take another syscall as a parameter

This is an option I discarded during the analysis.

It's a matter of trade offs: an additional argument would increase the complexity a lot.
In particular, you would need to maintain a map of syscall->wakeups in userspace if you want to be able to `forgivewkp` the right one. And, on successful completion of a sequence of syscalls, you would have to `forgivewkp` all unexpired wakeup in such map.

Thus a single addictional parameter would largely increase the complexity both of the kernel implementation and of the user space code, making several bugs harder to reproduce.
There are 7+ billion people on earth. No way every 6th of them has apple device.
Human Terrain: Visualizing the world's population in 3D
> When possible errors are part of the function specification, on the other hand, we are almost OK.

This is the single best piece of advice in this article. The second thing you have to document is the postcondition in case of an error - what state is the program left in?

With both a normal and an error postcondition you can fully specify your program. Like the author, I'm convinced that most of the pain with error handling stems from programmers ignoring the consequences of an error. That's the reason why approaches that force you to deal with errors explicitly (Maybe a, Result e a, etc.) end up being more robust. Otherwise, a part of the program just ends up missing.

However, from a theoretical perspective, exceptions are superior. The reason is that the error postcondition really does represent a non-local exit. Just like an ordinary return statement, it should be implemented as one instead of forcing programmers to walk the stack by hand. The latter is both less efficient and more error prone. Additionally, resource management must be integrated with error handling anyway and exceptions provide a clean opportunity to connect the two. This is one of the things that C++ gets right.
ZFS is not suitable for desktop computers. as for example that one anecdote in the comments of the article shows, ZFS doesn't work well on a single disk. the author of the comment is confused by the behavior, and doesn't even consider that this might be by design.

another point that shows that ZFS is unsuitable for the desktop is it's reliance on EEC RAM: https://forums.freenas.org/index.php?threads/ecc-vs-non-ecc-...

i considered getting EEC RAM for my machine just because of ZFS, but i could not find any 16GB strips to fill my board.

that's two strikes against desktop use, and enough to let me prefer btrfs.

EDIT: i am very happy to see so many replies proving me wrong. when i last researched this topic i was not able to find any counter arguments to needing EEC.

greetings, eMBee.
If it had "snooze" I'd give it a shot. I don't want to run client software or third party extensions.
Proton team here. We are very much against censorship, in fact that's one of our core principles. However, as mentioned on Reddit, we needed to lock the thread because too many bot and fake accounts were posting.

Many people fail to appreciate the full extent of the defamation campaign that was waged against ProtonVPN by PIA and others. This was not the case of a couple fake accounts that could be handled with manual moderation. We're talking literally hundreds of accounts trying to spread false information, to the point where it became a case study on fake news: https://twitter.com/conspirator0/status/1036353291662360577

The fact remains that to this day, ProtonVPN remains the only VPN service that has been thoroughly and continuously vetted by an independent third party, Mozilla no less: https://protonvpn.com/blog/mozilla-partnership/
Occams Razor applies heavily to Southeastern Florida politics.

I would bet what little money I have that incompetence is the issue with Dade, Broward and Palm Beach counties.

Since I've been in Florida (1980) I've seen and heard of city and county commission seats, county sheriff, city manager and the like getting traded like baseball cards in the '60s.

Look at the names of past city commissioners for cities in PBC and County office like Clerk of Courts and Supervisor of Elections and search from there.
You can just disable cloud backups, no?
To be fair, C is kind of like that, too. You could move the declarations of static functions to the top, but then you'd still have declarations that prevent you from getting to the real meat.
Precisely. This was not the case of a couple accounts, it was hundreds of accounts, on all social media platforms, where a blanket locking of the thread became necessary. On Twitter alone, 500+ accounts: https://twitter.com/conspirator0/status/1036353291662360577
But you were paying money to that utility company.

I have some sympathy for free services not offering customer support.

I assume google's point is that an individual free user probably isn't generating enough value to justify customer support.
Is there a way to reconcile the two?

If the stack is walked up automatically programmers aren't going to deal with errors explicitly. No?
Would there be any way for a user to see if/when the token has been reused? Doubtful but perhaps Google provides (or could provide) some kind of log similar to how Facebook lets you view Active Sign Ins and Sign In history.
> Plus in this case the awake call could be named something more intuitive

This is an interesting objection.

I find awake/awakened/forgivewkp intuitive names, but I'm not a native English speaker.

I'm not going to add the syscall parameter (I considered and discarded that option during the analysis), but I welcome suggestions for a better naming.
The "Remote Login" checkbox in System Preferences actually does something equivalent to the `systemsetup` command. If you uncheck it, the daemon stops running, and you can then make changes or run it yourself.
You can't ignore this project.
https://cloudflare-ipfs.com/ipfs/QmZm1zqUz44xF8fJAJJjUwmsuTb...
>not that long ago, old-guard public utility companies [had reams of money]

Back then the phone service was rather expensive as compared to present day - especially long distance calls.

Til very recent Google was free for most users; currently its taking a sizeable cut from Android app sales and Youtube donations & subscriptions. Not sure how that'll develop into the future.
There are exploits written in Javascript that run on a browser.
But many such pieces float around in the media with Zuckerberg's name. Sandburg is very vested in FBs actions and policies, however most media coverage on her treated her as 'saint' compared with the distrust showered on Zuckerberg by the same media.

Perhaps, I do feel they feel Sandburg comes across to them as a normative person, while Z often acts and speaks like someone on the Spectrum.
My assumption was that the data gets handed off to Google/Apple functions on your phone that handle backups. Could anyone confirm?
China ‘has taken the gloves off’ in its thefts of U.S. technology secrets
According to this reasoning, almost no 'journalists' are journalists, because almost all media is ad supported, therefore, they're all just advertisers.

This reasoning would also say that an organization that doesn't sell any thing, but gives away its product, is essentially, 'nothing'. So most open source organizatons are not technology orgs, but charity orgs.

So for example, Wikipedia isn't really an encyclopedia, it's really just a charity.

A tech company is a company that employs engineers to create technology. How that is funded, be it directly, indirectly, charitable contributions, or even government grants, doesn't really change the fact that these institutions are creating technology.

You could argue that how they obtain their funding influences their behavior, but you could also argue that public companies are not just beholden to their customers, but even more beholden to their shareholders, and so for example, whether or not Apple behaves in a way that protects privacy will in fact, come up against the need to show EPS growth to wall street, which means that no amount of piety on privacy will get them to give up their domestic Chinese revenues by directly opposing the Chinese government.

Microsoft's direct monetization of Windows licenses did not prevent them from getting into ad tracking, so clearly, being a paying a direct paying consumer doesn't insulate you from corporations trying to diversify revenue streams.

This 'meme' has been repeated over and over again on HN, but it's a radically simplified view of the motivations of the boards of these trillion $ cap companies, one that appeals to idealists.
Unfortunately that list seems to be incomplete, for example nospec_store_bypass_disable or stf_barrier
The Coming Crisis in Home Computers (1983)
Messages may be sent encrypted, but I bet they are analysed before being encrypted. Without an external independent audit I'm not sure I'd trust Zuck.
Neofetch for your source code
It was indeed a deliberate choice, and we have explained the reasons why here: https://news.ycombinator.com/item?id=18479922
Awake in itself is intuitive in some contexts, but it doesn't seem to describe the semantics you want in this case. First of all it's not obvious that it's related to syscalls. Secondly it doesn't really mean the process is guaranteed to awake after the specified time - if the syscall doesn't block or finishes faster, the process might well stay sleeping at the alleged awaking time. Someone who doesn't know all the details will easily get the wrong idea.
California cities now have the worst air pollution on Earth
I love that album Joni did with Jaco Pastorius. Coyote is a beautiful song and the bassline is one of the most melodic I've ever heard. It's really difficult to describe how amazing it really is...
Product Strategy or Execution?
News from a couple weeks ago was they will start showing adverts in the status feature.
I've used this trick many times when people underestimate how long a few minutes can be in certain contexts. It works astonishingly well. Happy to see I'm not the only one!
Typed-html: macro for building HTML documents in Rust code with JSX-like syntax
Waymo CEO says self-driving cars won’t be ubiquitous for decades
The problem with this is a shifting of the "Overton window": it's not quite as bad as it could possibly be, so it's fine.

We should be careful not to let the frog boil.
Very impressive - well done!
Are people kerping (private) lists for these? Would be great if they felt like sharing!
Good question. On something that's minimal impact to lose, I like the https://spike.news model of saving state: you're given a token (a string of a few words) to log back in with later. No email, no risk, everyone's happy.

Please don't use email if it's not necessary.
In the states, that is merely a deterrent. Most cars here are manual transmissions. If you cannot drive a manual, you have a special driver's license restriction stating that.

Edit: I can't help but to comment that I had one better. I had a 1990's hatchback. The rear hatch didn't lock, but you had to do the right motions to open it lest it act locked. It was an automatic, but didn't have much "oomph". Finally, the handles to roll up the windows didn't stay on the doors. I stored them on the dashboard. (they would still roll up/down the windows, but would not stay).
It asks you what colour your device is? Haven't run into that yet.
Is there any way these could be mitigated at the browser level in this case?
operative sentence: [the system is not real], or at least not yet
I have also noticed seeing ads related to my voice calls and images shared over WhatsApp. Has anyone else noticed the same?
I have a 3 months old, no car, and I buy groceries and go out without it. Sure, I chose an apartment close to transit, but I'm saving a lot by not having car hassle anymore.
And I took cabs a bit more often in the first month (no idea how to even hold a baby, let alone wearing a carrier).

When I buy groceries, we bring stuff back with 2 carts, 1 backpack and 2 ikea bags (the ikea bags are kept very empty, to avoid unbalanced weights). Baby travels in the carrier with me, or in the stroller with mom, in which case I pull 2 carts.

Aside from groceries which is the one that requires more organization, we can go anywhere else (except movie theatre, of course )
I think you already answered your own question when emphasizing ‘public’ there.

Security isn’t fun, and at best a relief (when nothing is found). When a pentest was successful, as in, the tester got in you can be sure it’s kept under wraps.

So no, I don’t think there are many, if any public records. The fact that there is shame and status involved in not being completely air tight is a big driver of the persistent insecurity of the world at large.

Anonymized records would go a long way in achieving a shift to safety and awareness but as you can read here they are easily construed as stories of fiction.

Everyone likes talking about that growth hack that drove a 1000% revenue increase. No one wants to talk about the database hack that spilled thousands of client records out in the open.
> Even Walmart’s “Great Value 100% Whole Wheat Bread” contains seven ingredients that Whole Foods considers “unacceptable”: high fructose corn syrup, sodium stearoyl lactylate, ethoxylated diglycerides, DATEM, azodicarbonamide, ammonium chloride, and calcium propionate.

http://www.slate.com/articles/life/culturebox/2014/02/whole_...
And if you obtain the knowledge required to solve it, the problem will start to look easy in hindsight.
Ezboard?
"End to End" needs defining. It's accurate, but disingenuous, to say "we're e2e between us and the clients". Most people would call that the MITM.
BillDesk: Indian Unicorn
There should be a term for this type of fallacy - the idea that you're not allowed to criticize or advocate change of a system that you're part of. It's similar to when people say "If you think taxes should be higher, then send a check to the government!" - obviously, we have to live within the system that already exists, and it's not reasonable to ask someone who wants to change the system to put themselves at a personal severe disadvantage while advocating for it. The dominance of social media platforms means that many publishers are forced to encourage people to share links via those platforms.
I'm currently living in south America and thanks to a lack of net neutrality it's very difficult to not use WhatsApp. For as little as $2 a month you can have unlimited use of WhatsApp, messenger and Waze. SMS and classic phone calls are expensive so individuals, businesses and even universities depend on WhatsApp.