skysight-inc/HackerNews huggingface dataset:
Depends on the company. I had a friend who spent most of his time at work not doing any work, but for example browsing catalogs and fixing his new apartment (while financing that with his salary). Although after a year or two he started to hate it and quit, changed to something that actually requires his attention, as I think he was afraid he's losing skill this way.

I'd say anything between ~30% and ~70% "time-weighted attention" required within those 8 hours a day doesn't surprise me. And when I say "required" I mean if you put in less you'll be eventually fired.

Edit: this is not to say that working hard doesn't pay off, it certainly does if the company is set up properly (and many are). I'm taking about bare minimums here.
Réunion Island
Recruiters are like Realtors.

The vast majority are crap. The really good ones are worth their weight in gold.
The 1st, 2nd, 4th and 5th have been under full assault since the early 2000s.
v9 was good, but I still prefer 7, the version just before JASC switched to .NET. v7 is lightning fast, and nearly 20 years later it's still the version I use first for Photoshop plugin development, because of its speed.

From memory, v9 isn't compatible with Windows 10 (the installer won't work properly), so don't feel you're missing anything.

Serif's Affinity Photo is giving PSP real competition, but Affinity is still quite buggy in some ways on Windows. I'd probably recommend Corel PSP 2018 / 2019 over Affinity for the moment. Paint.NET is great too.
Apple's Sweet 2018 Holiday Ad: Inspired by Steve Jobs' 1983 Mac Death March?
Thank you, you made me smile.
> With that constitutional amendment, we entirely removed federal authority over alcohol.

Where are you getting that from?
Most people believe that this garbage patch (aka plastic continent) looks like what is in their trash bin. The picture in the article reinforces this misconception:

https://www.theguardian.com/environment/2018/dec/20/great-pa...

However, most of this plastic is actually so small and sparse that you cannot even see it. That makes cleanup really difficult.

From wikipedia:

> Disintegration means that much of the plastic is too small to be seen. In a 2001 study, researchers found concentrations of plastic particles at 334,721 pieces per km2 with a mean mass of 5.1 kg (11.3 lbs) per km2, in the neuston.
Woah. Memory lane. I remember helping with a Corel Linux install fest way around that time at the University of Ottawa. It was pretty good for that time in that the installer was "friendly"...I think...this is going back many years here.
Wait, Blind doesn't use end-to-end encryption?
Is there an alike book that would provide functional implementations of the algorithms alongside or instead of imperative ones? In Python preferably but I don't mind any other language. I would like to learn implementing algorithms and solving problems the functional way.
Right I get that in both cases the business can't operate, but if you take an example of a modern web application and a ddos with an ounce of sophistication it can be hard to quickly understand what is happening. So your autoscaling ramped up then you realize something extraordinary is happening. By that time you start trying to stop things at the edge, but some costly damage could have already been done as far as hardware resources or engineering time. Now your spending more money than you would have had to in a normal day of business, and you aren't making money is my point.
Actually, I think you just have to read this in its beurocratic context. The new law has removed hemp from the schedule 1 list. So it is no longer completely illegal. But at the same time, this press release from the FDA is trying to make sure everyone knows that the FDA still maintains their jurisdiction over it within their umbrella of power. And the FDA has power over any medicine or product that makes a therapeutic claim AND all food products.

The thing they don't mention (and this is the most important part) is that hemp products can now be sold legally. Because they are no longer a controlled substance. BUT you can't advertise them as being for human consumption or having therapeutic value.

This is why you can't buy antibiotics without an RX. It falls under FDA authority. But you can buy those same antibiotics for fish, without a license. Because some types of animal products don't fall under their authority.

So I'm betting you will be able to buy CBD oil "not for human consumption" to fix squeeky wheels or as an air freshener or whatever. But the FDA will have to go through their normal review process before a product can be sold in food or in a supplement.

As for all the products already out there, I have no idea. Because my understanding of FDA regulations is that they were already in violation since they were being sold as dietary supplements or something with therapeutic benefit.
Fast facts:

- Hemp is defined as Cannabis sativa L., inc. parts and derivatives, with no more than 0.3% THC on dry weight basis.

- Hemp is excluded from the definitions of "marihuana" and "tetrohydrocannabinol" under the CSA. Therefore, it is no longer a violation of federal drug (controlled substances) laws to produce, distribute, or use hemp.

- The THC threshold appears to apply at all times--ie. it is unlawful to extract and concentrate THC from previously legal low-THC sativa. Conversely, CBD oil derived from sativa strains would appear to become unscheduled once concentrated such that the THC content falls below the limit--however, the interim production and possession would remain unlawful without a DEA license.

- This Farm Bill will in one year phase out the 2014 FB research hemp program, and replace it with a full blown legal hemp production program. Under agriculture laws, the only penalties at hand for negligent violations are CAPs and program suspension. The law provides that intentional violations are to be reported by Ag to State/Federal LE.

- The intentional production of cannabis sativa >0.3% THC would be readily punishable under state, federal CSA. However, because the definition of hemp, which is excluded from the CSA, only takes into account the THC content and not the registration status of the grower, it isn't readily apparent how one could be punished for commerce in unregistered, but THC-threshold compliant, Cannabis sativa. However, an unregistered grower has no shield against accidental/negligent over-THC drug charges.

- As the linked press release notes, food and drug law will apply to the interstate commerce in hemp. Thus, it will not be lawful to distribute CBD oil as a "supplement," for example. While FD&C Act violations can result in serious charges, they won't be charged as "drug crimes" ie. controlled substances offenses, and will not have the same impact on federal employment, student loans, etc.

- I'm no expert in this, but it seems to me that it would not be possible to tell legal hemp from >0.3% THC sativa. Thus, it would appear that visual identification of marijuana may no longer be a valid basis for a search/detention by law enforcement.

TL;DR: All Cannabis sativa L. is no longer a controlled substance, provided that it contains no greater than 0.3% THC. States may authorize a legal, tested method of production, for which no one may be penalized for accidental/negligent violations. The FDA will regulate the interstate commerce in hemp products, including CBD oil, because they are considered drug products. The FDA will not be involved in industrial hemp (ex. hemp ropes) because they are not marketed as food, drugs, or cosmetics.

edits: formatting. nb, the law text is at https://www.agriculture.senate.gov/imo/media/doc/Agriculture..., do a ^F for "hemp"
Buy more books (even if you never intend to read them)
...except in this instance, they didn't break the web. That's what irks me about this attitude you hold, which I think is actually what's rude.

This notion that some intern posts an unfounded assertion that attributes malicious behavior to Google, that has multiple other plausible explanations? That is rude--attributing malice where it is wholly unjustified.

So am I remorseful for my tone? Fuck no. My truth standards are such that I'm not about to settle for other people's BS if there isn't evidence to support it. Speculation isn't evidence.
The NSA certified the Boeing SNS Server and BAE Systems XTS-400 as stuff they couldn't hack at that point. They're used as guards to protect secrets on classified site from attacks on Internet side. There's been no published hacks of those systems for almost 30 years. You could try to see if you can buy them. I linked to descriptions of some of those products here:

https://lobste.rs/s/o6x9b3/tech_s_masturbatory_historiograph...

I described what I learned about how high-assurance security builds stuff here:

https://pastebin.com/y3PufJ0V

As I often said, compare anything from security market advertised as secure against stuff on that list. If they're missing something, they're probably insecure. Now, I'm still not saying you can stop nation states and all 0-days. I am saying that most of the $100k 0-days are preventable with architectures like above with apps in safe languages with guards separating trusted things from untrusted things. Ada has also been around a long time with Rust getting popular now.

What makes most companies not use stuff like that isn't that level of security being unachievable: they just don't want to for management's reasons which range from arbitrary to sound practices in a profit-focused environment.
Have you read the 4 hour work-week, by Ferris? His idea is to spend lots of time setting up a business and automating it so that it takes little time to maintain.
Wow each post is like an episode of the jerry springer show.
Thanks for sharing, Fugazi have a special place in my heart :)
"wet your whistle" has multiple idioms too (slang).
I would assume they are saying that it's a whole lot easier for the average person to say:

"Please remind me every day at 5pm to water the plants", or "Please play this song at medium volume every morning at 7am"

than to learn how to do the equivalent in whatever operating system their device uses, and I'd tend to agree. Cron is certainly a much higher bar than learning to use the alarm app in your phone, but the point remains, particularly in a home context.
I don't like fact that there's an incentive to kill the other members of your Tontine.
I opened 1.8.1 because I thought it'd be the first section with code and the code was not PEP-8 compliant. Having a brief scan, the authors seem to have a pretty severe aversion to putting spaces after commas, which is a bummer because it really impacts code readability. It's inconsistent even from line to line, so it's not a style thing. They're also inconsistent about using single and double quotes for strings.

I skipped ahead to "implementing a stack in python", which is a little weird because the stack class they implement is just a thin wrapper around lists with append aliased to push and "self.items[len(self.items)-1]" aliased to peek (note: in python you can just use negative indexing to access items near the end of a list)

This might seem pedantic, but, like, if the book isn't leveraging Python and it's not particularly clean code then I don't really understand what's on offer here.
Best DDoS Protection for websites
I was wondering this too, and if it might be a factor in the timing of the acquisition.

Parallels used to make Windows & Linux versions of their product [1], so there might still be ways that Corel can continue selling a product even if Apple's new hardware lineup prevents virtualization.

[1] https://en.wikipedia.org/wiki/Parallels_Workstation
The Reid Hoffman strategy of taking decisions with limited information
The article didn't read that way for me. I enjoyed the part where you tried to explain gluten to the crew, it reminded me of a scene from the movie "Everything is Illuminated", where the main character tries to explain he is vegetarian.. https://www.youtube.com/watch?v=um2p4GlEbKg
Even if you're right, please don't post bilious denunciations to HN. Those are a cheap internet commodity that lowers the signal/noise ratio.

https://news.ycombinator.com/newsguidelines.html

Edit: unfortunately, it looks like your comments have done little but break the site guidelines lately. If you keep that up, we're going to have to ban you. If you'd review the guidelines and take the spirit of this site to heart, we'd appreciate it. You might find these additional links helpful for getting a clearer idea of that original spirit:

https://news.ycombinator.com/newswelcome.html

https://news.ycombinator.com/hackernews.html

http://www.paulgraham.com/hackernews.html

http://www.paulgraham.com/trolls.html
Or (android example)...

Physical:

----

1. Find phone (Is this really an issue? Haven't they become an extension of our body?)
2. Unlock phone with thumb (unless of course you're already using it).
3. Type "make a note to do the thing" into the big text box at the top of your screen.
4. Preview / confirm it's what you wanted.
5. Hit "Checkbox" to confirm.

By Voice:

---------

1. No need to find the phone (assuming it close, which I'd say is a fair assumption).
2. Say "OK Google".
3. Say "Make a note to do the thing".
4. Depending on current coverage, wait while it goes to the cloud to figure out what you mean (annoying).
5. Listen while it tells you what it did.
6. Say "Yes" to confirm.

My point is that the equivalent workflow exists via typed text. The workflow itself is not coupled to voice.

That being said, I do agree that it's very convenient to use voice for these sorts of tasks. Especially when driving.
the whole concept of blind is faulty! there is no way you could trust them to maintain your privacy. and of course they can read all the dirt on everything. it’s a guarantee they have no meaningful controls in place.
When the Chinese had a problem with a lot of their citizens becoming addicted to opiates and tried to curb it, the Western powers actually invaded them (see Opium War). This seems like karma.
They just seized the marketing sites domain names? How is this a victory? If the people running these sites are still able to continue their operations then they'll just get a new domain name and host a new signup page. The only thing they might have lost is some brand recognition.
For those who are not aware, there is https://github.com/migueldeicaza/TensorFlowSharp for your arbitrary TF in DotNet needs. Last I played with it, it even work well in F#. Which, let's be honest here, is the dream right? Right?!
Fastmail should relocate to Canada. Just throwing suggestions out there.
How Do You Apply Lean to Digital Health and Life Sciences?
What if you have forgotten the password?

(It happens. I took a break from work for 3 weeks due to chicken pox. Totally forgot all my passwords.)
It must be nice to have a mental model where "businesses" is this big fuzzy blob containing all the fat cats at either the giving or receiving end of an externality. Show the moneypants how much it will hurt him! Then the other moneypants will stop ignoring things!
The people you should be criticising are the fad diet people. It is they that are bringing gluten intolerance into disrepute.
”I have over 4,000 emails, pictures, addresses, SNS
...
People just submitted it.
I don't know why.
They 'trust me'
Dumb f*s."

-Mark Zuckerberg, 2004

The more things change, the more they stay the same.
If this allows Facebook to monetize WhatsApp without introducing ads and the privacy corrosion they would bring, then this would be a very good development.
I think what’s more telling is the opposite implication. That despite ample sources of data, it’s not actually that valuable.

Did you ever consider that the reason that self driving cars are overhyped is because the underlying science is bad, not that there is insufficient data? Wouldn’t it be in Waymo’s interest for everyone to believe that it’s all about data, while they bide time trying to make something that works?
Not only was this a good read - the site is well done the way a site should be: Painstakingly hand-crafted, very much reflecting the style of the writing - short, sweet, fluff-free, unpretentious, to the point, and highly competent. And that footer is pure genius.
The original cron daemon
Prototyping in Python for a large subset of people is NOT friendly. To quote a famous book or something; "My God, it's full of shapes!". Shapes whose shape matter, just not so much to the language and tooling you interface with them from. It's like trying to drive a 3d world from a 2d world :|

IMHO F# has the potential to be WAY more friendly for prototyping and more. It's all a matter of the libs.
Riot is the only client Matrix.org calls stable.[1] I would not call the desktop version good. The only third-party clients that are close to complete are Nheko (which has been abandoned) and FluffyChat (which is for Ubuntu Touch).[2][3]

There are no stable servers.[1] The reference server is being completely rewritten.

Matrix bridges work about as well as XMPP bridges in my experience.

[1] https://matrix.org/docs/projects/try-matrix-now

[2] https://matrix.org/docs/projects/clients-matrix

[3] https://github.com/mujx/nheko
> I live in the USA. I'd like to put my software (https://github.com/bediger4000) in the public domain. What actions do I need to take to do this? [...] I presume it's not as easy as just telling a few people, "all that's in the public domain".

Well, it indeed isn't that easy. You'd have to provide some kind of fallback clause, which allows people to choose CC0 or some very liberal license (ISC, MIT) at their discretion – CC0 isn't OSI-approved and ISC/MIT has an attribution requirement, so there's once more a choice needed.

People could just believe you and use the software despite having no valid permission from the copyright holder if they're willing to take that risk and just act as if the code was in the public domain.

> I mean, pre-1976 you just didn't put a copyright notice on it. That was enough, it defaulted into public domain. Post-1976, it defaults to copyrighted, notice or not. What otherworldly ritual do I need to perform, or notice to put on my code, to ensure it's in the public domain?

You still need to perform an otherworldly ritual even if you have pre-1976 code. This is because even if you've failed to acquire copyright in the U.S., you still have completely valid copyright in states where copyright was already automatic at the time and where international private law refers to the law of the state for which IP protection is sought.
Topic modification? CBD is not legalized, apparently. Hemp (<0.3% THC) is, but CBD is not.

“It is true that section 12619 of the Farm Bill removes hemp-derived products from its Schedule I status under the Controlled Substances Act, but the legislation does not legalize CBD generally. As I have noted elsewhere on this blog CBD generally remains a Schedule I substance under federal law . . . The Farm Bill ensures that any cannabinoid — a set of chemical compounds found in the cannabis plant — that is derived from hemp will be legal, if and only if that hemp is produced in a manner consistent with the Farm Bill, associated federal regulations, association state regulations, and by a licensed grower. All other cannabinoids, produced in any other setting, remain a Schedule I substance under federal law and are thus illegal. (The one exception is pharmaceutical-grade CBD products that have been approved by FDA, which currently includes one drug: GW Pharmaceutical’s Epidiolex.)”

Source: https://www.bostonglobe.com/news/marijuana/2018/12/20/hemp-o...
I think that's a stock photo (jokingly implying that they were responsible)
Really impressive work! For folks that like this sort of thing:
A modern 'calligrapher' I randomly came across on IG: https://www.instagram.com/joey_bearbower/

Calligraphy is also huge in Islam and there's tons of beautiful Arabic calligraphy:
https://www.pinterest.com/salmaaslams7/islamic-calligraphy/?...
What I Learned about Life by Learning Chinese
if you enable Alexa to tune to your voice, it retains recordings. You can listen to the recordings in you Alexa mobile app- so it shouldn’t be that much of a surprise.

It shouldn’t be a shocker if you understand ML and infer what “tuning to your voice” implies. Most people aren’t sophisticated enough to infer that, however.

To me- this is a big demo of unexpected consequences of GDPR. Sounds like a great law, but forcing companies to share everything they know about you increases the risk that a nice package of everything is shared with the wrong party.
Find Policies to Solve Climate Change in Energy Policy Simulator
How to Get Magento 2 Attribute and Attribute Options Programmatically
Elements of Programming Interviews in Python is excellent imo. The authors give a crash course in all of the data structures and all of the code is written extremely cleanly. Most of the problems give standard solutions and also idiomatic ones using iter/functools. I've been programming Python for years and felt like I gained a lot from it as a developer even though I bought it to interview prep.

Quick example of the "look and say" problem:

def look_and_say(n: int) -> str:

s = '1'

for _ in range(n - 1):

s = ''.join(

str(len(list(group))) + key

for key, group in groupby(s))

return s
But who's using cron to set a reminder or an alarm on their phone?! That can't be it, but if it is, then they are ironically overstating.

I mean you can use the GUI (launching apps etc.), or literally just type "remind me every day at 5pm to water the plants" into the home screen search bar (on Android at least).

The voice recognition and the assistant parts are decoupled.
Use secure devices, development practices, and so on. They've all existed since the 1980's on the market. IBM itself invented some of it in form of Fagan Inspections, VDM methodology, Cleanroom Software Engineering for low-defect development, a CPU that blocked leaks that violated a security policy, and a smartcard OS (Caernarvon) done by Karger et al to high-assurance standards. They could've afforded to use Ada, SPARK, and/or static analysis for protection by default from tons of 0-days. They had their own language, PL/S, with some protections. They instead of McAfee could've acquired Secure Computing Corporation or some other company if they wanted this expertise early plus some products with it. Boeings SNS server, which has no public hacks in 20-30 years, used the LOCK platform from SCC. There's small, new companies using lightweight, formal methods on kernels, protocols, and VPN's. One to four people groups in CompSci do the same thing regularly. IBM has even more developers.

You mentioned Cisco in another comment. Why buy Cisco if their stuff is known to be insecure or not proven secure? If not knowing high-security, I'd consider genua just cuz they use OpenBSD at the core. There were two others using INTEGRITY RTOS, one Sentinel's HYDRA and another discontinued, with both having few buyers. There's still going to be attacks but way less of them choking attackers further year after year. Hell, even leaks in CPU's were found from 1992-1995 using these same methods as LOCK et al in VAX VMM. We knew then with companies and security folks just ignoring them because those high-performance, lower-cost CPU's let us do some awesome stuff, right?

We're not getting hit because of ridiculous resources opponents put into 0-days: we're getting hit because of ridiculous resources put into known-insecure components and methods after people with those resources ignore stuff that works, often letting it die off. Totally, different problem. When phrased that way, one starts thinking maybe they should be regulated to use what works or liable for some of these decisions for ignoring what works using what's high-risk. I favor regulation after seeing positive results in TCSEC and DO-178B markets in terms of assurance activities.
If You're Not Lazy Loading Your Images, You're Wasteful
I miss messy 90s sites
would you consider hacker news to be anonymous?