skysight-inc/HackerNews huggingface dataset:
> "The IETF likes separation of concerns" but they're letting Google et al. ram through MTA-STS

This is a fundamental misunderstanding of how the IETF works. The IETF codifies industry standards but, as with the W3C, it doesn't have some sort of veto authority over what companies actually implement. If major vendors are using MTA-STS, it's in everyone else's interest that it be described in a public standard. The IETF does get high-quality feedback and I see no reason to question the sincerity of Fastmail's stated reasoning and expressed appreciation.

Similarly, “the authors believe mortal men are not capable of understanding DNSSEC” might be an amusing rhetorical flourish but it's not as convincing as the actual numbers showing that DNSSEC is not reliable on the internet now whereas HTTPS has near-universal deployment _and_ doesn't have the various design flaws which the DNSSEC community is slowly fixing. If you want to protect users, it's usually better to pick something which doesn't require hundreds of parties around the world to make significant changes — and that certainly fits with the “rough consensus and running code” ethos.
https://www.youtube.com/watch?v=3uiEyEKji0M

Here is a relevant video from the creator. It has some fun illustrations to help with what its going on.

/edit - letters
I'd love it if you could share some more information or materials on this. It's something I've been trying to comprehend and understand in my own way.
Call me a cynic, but I don't trust anything IBM puts out on AI. There have been so many bullshit PR articles, with lots of nice working packaging bullshit. This one feels the same.

It's so discouraging hearing all about Watson and health for past X years and then reading AI insider articles refuting the work as total bullshit and a PR job to keep IBM relevant today.

Don't know why this would be any different.
What's the purpose of the software?
I enjoyed your explanation as well.
PART 2: “The novice programmer” – Setting up ExpressJS with TypeScript
The Stories We Were Told about Education Technology
Dex is another OSS option:

https://github.com/dexidp/dex
Thoughts on Rust in 2019
Although there’s a certain segment who would/could react positively to that kind of approach in the second half, I’d just caution anyone reading who finds it demotivating to not get down on yourself about it. I’d personally offer two observations:

1. At micro, any job will have good times and bad times. Times when you’re super engaged and times when you’re slogging through it. Try to push through a bad time, there’s a feeling of accomplishment in coming over the hump. Try to find change when the hump is insurmountable over a long period with no chance of change.

2. At macro, everything in life is like this too. Some periods will just be about showing up, and that’s okay. Showing up is something you can build on. If all you’re doing is showing up and it ends up not being a period but a new normal, seek change.

Entitlement has become this derogatory term over the last several decades, but every person is entitled to pursuing greater levels of happiness. Good on you for not settling.
No difference.
> I am on 100% remote team now for past 3 yrs and remote teams lack any human connection, team culture or shared struggle. Sure I know where everyone lives and how many kids they have but I don't have any real connection with any of them. There is no random conversations/ideas to be shared at lunch ect.

Man, this, 100%. We have solid communication as a team, lots of slack or hangouts/webex/skype/go2meeting/whatever, but no one really interacts in a social sense. All communications feel like talking to a customer, and there is a constant CYA vibe that makes routine questions feel like walking on eggshells.

HR meanwhile keeps blasting us with emails about the Ugly Sweater parties or bake-offs in the HQ office that doesn't apply to any of the technical teams. Only reinforces the disjointed feeling, tbh.
As discussed elsewhere in these comments the booking agent will likely not be processing the payment and probably won't perform validation of the details save for a Luhn check on the number.
Swift development in 2019
I think the distinction is that, if you intend to have a publicly accessible API, tokens are preferred vs cookies. For your own mobile clients, doesn't matter
const packageManager = require('package-manager'); // QED
People used to say that opportunity is everywhere, you just need to pay attention. Fun is the same thing.

Some things that make every day fun

- trying to know for who you are building your software for, talk to this end user, get to know how useful (or useless) your construction is actually solving something or not. I'm 100% sure that if you see many people using and feeling thankful from what you made, that would make you feel great. Nothing less!

- improving the environment of your company. Look, everyone has a big problem. They are also coming to work with some problem on the back of their heads. If we could just light this a bit, it is immensely rewarding. We're going to die anyway, so why not make our existence a noble one? :D

- find a topic that you like and present it to your boss, try to find together a way to combine both. He may have some idea, or the boss of your boss. Everyone wins when you are motivated

- plan your big escape: if your goal is to only study, consider making some money, moving to a cheap place (Thailand?), and with a leeway for a few years, you can try to experiment some ideas. Why not put some courses on udemy for example? Teach all you could, in the best way possible and learn how to promote what you do

Have fun!
I think the problem is that moving air (such as an updraft) can alter the angle of attack independently of the pitch angle. That is important during landing where low thrust levels are set and the air is turbulent. But in other phases of flight it should be possible to keep the aeroplane stable using know thrust and pitch settings and ignore air speed and AOA sensors completely. Of course that requires fully functional control surfaces and engines. Maybe it would be better to remove the erroneous sensor type completely and have procedures that can cope with that.
Well they never really stopped, they just claimed it would be used for research and the meat was sold after the research was done.

From the article "Japan has caught between about 200 and 1,200 whales each year, saying it is investigating stock levels to see whether the whales are endangered or not."
>"Failing to send one of those messages has consequences, whether that’s a missed receipt or—even worse—a missed notification letting a user know that their food is ready."

This may be tongue-and-cheek, but it is not true. That is a great example of a scenario where it is okay to lose messages. The consequences are extremely low if one a billion people is not notified that their food is ready.
if you read emacs/lisp mailing list, people were already crying about the vast difference in capabilities, ergonomics, ease of use.. saying that emacs was really really below what lisp machines editor would offer. Not even talking about the near fully reflective OS.

Can't find the newsgroup url yet. But still it seems that we are far from peak even 30 years after these systems died.

There's a smalltalk/pharo mooc online, it was also pretty telling how a single system can offer cohesiveness and peace of mind. I'm not extremist against unix way of things but it's a duty to try other systems (maybe oberon, or even amiga os) to see what can be done differently. Otherwise we live in a local optimum blur.
I'd also like to mention that getting to the documentation for anything with Rust is fairly annoying, mostly because a ton of the stuff in the book links to the first edition and getting from the first edition to the current one is really cumbersome. It'd be great if you would be redirected from the old book to the latest version instead of getting to it and only get a warning that it isn't the latest version. Especially since there's no easy way to go from the first edition chapter to the corresponding one in the latest, it's at least three-four clicks and annoys me every single time.
Public access Linux system: Your non-profit shell provider since 2002
I thought it was a real adventure, an extreme form of hiking in a very extreme and cold environment, as well as an exercise in managing risks. I have the impression that he did it just to see if it can be done, as a kind of personal adventure, as a way to win a victory over himself.

I recently read an interview of a retired ex-paratrooper who lost his friend to Piteraq in Greenland (similar katabatic winds exist at Antarctica), the tent broke, exposing the people and they froze to death. With winds up to ca. 80 m/s and double-digit subzero temperatures, the wind chill effect is insane and a new shelter must be up within minutes.

It was a dangerous undertaking, no doubt. But then again so was Thor Heyerdahl with his raft, and Apollo 11 with the flight to the Moon, and so on.

Tip: if you want to concretely experience extreme cold, and the sheer brutalness of it, look up a cryotherapy room. -110 C or so for a few minutes while wearing swimming gear (and some cover for the extremities) felt like a hopeless, prolonged open ice swimming without the immediate endorphin rush (which eventually did come sometime later).
https://www.fastmail.com/help/guides/interfaceupdate-2018.ht...
Well, did you downvote me once you saw it?

With regards to your offense that is fine when it is used in this way. However, what is your evidence that anyone in that group was there as collateral damage? The target was alt-rights in a livestream with 3000 views in total, and the context of his words clearly doesn’t match your characterization.

I think no one is fooled at this point by activists working hard to find something to be offended by, so that they can use it to attack a viewpoint opponent.

Maybe Patreon will becomes the first example of a company that gets serious damage by pandering to activists.
> Some brief digging reveals that the most likely cause is some combination of casting a "000" CVC to a "0" int before a subsequent boolean test (most of this is Perl), or some form validation using PositiveInt etc.

Probably worth noting in the bug report that the problem is not that '000' needs to be special cased here so that a resulting 0 is allowed from the cast in that case, but rather that the cast to an int should not be happening at all.

The CVC code is not a number. It is a 3 or 4 character alphanumeric string all of whose characters are from the set {'0', '1', ..., '9'}. The only validation that should be done on the merchant side is checking the length and checking that all the characters are members of that set.

It's kind of funny. The credit card number is also an alphanumeric string all of whose characters are from that set, but I don't think I've ever seen anyone cast that to an int. I wonder why people make that mistake with the CVC but not with the card number?
I am far from convinced that the FCC is capable of picking a technological solution by fiat that will actually solve the problem, especially since, like almost all crypto, it will surely be easy for the telcos to be lazy and mess up the implementation in a way that robocalls get through.

Instead, I think the regulation should focus on the outcome: if a telco allows an illegal call through and cannot trace it back to a responsible party who can pay the fine, then the telco messed up and should pay for it. Then they’ll have a financial incentive to solve the problem in a way that works.
Auth0 at least used to pay for blog content.

I am not sure if they still do that though - last time I did that was about 2 years ago.

I wrote about their tech and how to integrate it in a different stack. I believe they paid about 200 USD for it.

I'd look it up but I am on mobile atm so it's not convenient. Might be worth to look up their website if it interests you.
What is Digital Intelligence?
Can you please file bugs when you see this? I'd be happy to update them to point in the right place.

We have some constraints that make plain redirects really hard; we cannot run a web server or use a ton of JavaScript, for example. Maybe this situation is painful enough for community consensus to change...
According to the article “
Pro-whaling nations expected the moratorium to be temporary, until consensus could be reached on sustainable catch quotas.”

If this fishing is truly sustainable and doesn’t threaten the whales with extinction there shouldn’t be a problem. Why should whales get protection that pigs, cows, and other animals don’t?
>The part I think is a little silly is the paparazzi with telephoto lenses shooting into the window of a hotel from a quarter mile away. Technically, it's a public space because the window was open. Doesn't matter it's the 37th floor and the photographer is several blocks away; since anyone looking into the window could see what the photographer took, it's fair game.

I agree, the whole "if it is visible from a public place it is fair game" thing seems a little crazy. I think the argument is "do you have a reasonable expectation of privacy" and if you are standing in front of a window, would you? I certainly do not assume so, but I also don't live on the 37th floor. But if I can see out a window then someone can see in. I think if I was famous enough to have the paparazzi photographing me I would just get tinted/mirrored/something windows that I could see out but they couldn't see in.
Off topic, but why do some websites use a www subdomain on a subdomain?
Haiku Beta is finally here
any shop that is considering Rust would need to consider the question of how to hire or train a sufficient number of programmers. With any mainstream language you have a big pool of programmers up for hire, my guess is that this is more of a problem with a new languages like Rust.

Maybe that's the reason why they did hype Java to such an extent when it was a new platform, i think SUN understood that it is quite difficult to gain acceptance as a mainstream player in this game.
Auth isn't rocket science - I'd encourage people to recommend well-guided DIY here for newer developers in a lot of cases, because foundational tech learning experiences are critical to growing as a developer.

There's value to many in SaaS offerings, but any decently-sized programming ecosystem has a crap ton of auth offerings. e.g. Devise [0], Dotnet Identity [1], Django Auth [2]. Authorization is the fiddly/annoying part. For authentication, a reasonably motivated developer can expect to have workable, secure password authentication going in a couple hours, as long as they don't try to invent their own encryption scheme.

[0]: https://github.com/plataformatec/devise
[1]: https://docs.microsoft.com/en-us/aspnet/core/security/authen...
[2]: https://docs.djangoproject.com/en/2.1/topics/auth/
The Embedded Rust Book
Huh? Those robocalls are not originated on Verizon cellphones. A contract like that would do nothing to reduce Verizon’s liability, but it would certainly help drive customers elsewhere.
Because animal torture is considered unethical. If you don't agree that's fine. Let us at least agree the line is needed. We shouldn't be discussing this retroactively.
> The government, soapboxes, homes and places of business that are happy to have them.

But if say ISPs start blocking non-beige content, then freedom of speech is dead. Shouldn't there be a minimum internet infrastructure where people can say whatever they want? Aren't CDNs part of that infrastructure?
PhpTree, a fast library to plays with trees
Most of us , whether we realise it or agree or not, work for income which in turn allows us to work on more interesting things. Some may save up some money which lasts for a duration and go do the interesting things. You are doing it right!

However what will help is doing it differently. Can you do time blocking? I assume that while you are doing interesting things at work, no one notices or cares. That is a great job! So why not block your 1st half to do the necessary boring work, and the second half the interesting work. Win Win! I agree this may need some discipline but think of it as a daily ritual! Btw, many greats [1] have had rituals like this, so who knows? :-)

The other aspect you might be missing is 'when interesting things turn boring'. Usually that happens when you want to ship the product and you hit the long tail of shipping. Try replacing 'doing interesting' vs 'doing interesting and shipping'. But we don't want to give up the idea of doing only interesting? That happens when you can work through the boring parts of shipping an interesting piece of work. Keep trying and you will find it, then find a job in that domain or do your startup in that domain and you are set. I realised 3D graphics was my calling the same way, so I am saying from experience.

[1] : https://www.amazon.com/Daily-Rituals-How-Artists-Work/dp/030...
> Well, did you downvote me once you saw it?

No.

> what is your evidence that anyone in that group was there as collateral damage

It doesn't matter if there was damage, it's the principle.
Great but:

> The fact that “Message” meant too many things led to it being renamed as “Email”

No. No no no no no. 'Email' means even more things than 'message'.

1. Address: "What's your email?"

2. Synonym for 'send': "I can email you there. "

3. Message body: "Let me know when you've got the email."
What I would do in your situation is start with reading books. If you’re not into reading, try Audible.

What you mention feels in line with the book Start with Why by Simon Sinek.
If you use cookies as a storage mechanism and ignore the cookie header on your backend, you close the door to CSRF attacks.

Here's one glaring problem with local storage: literally any script on your page can access it (for example, vendor scripts). Cookies can only be accessed by scripts from the same domain from which they're created.
The crowd doesn’t really matter but I would think the band itself would have publicity rights for any commercial (in the sense of marketing or promotional) use. The photographer could presumably sell copies, publish in magazines, etc. A press pass for a concert could have other restrictions I guess but the whole purpose of a pro photographer taking pictures is to sell them.
Top Snaps in 2018
> if they have one

I believe they have a single QA person who is paid minimum wage and whose desk is in a broom closet somewhere, judging from my own experiences...
As a Canadian you should probably first work on getting your country to stop overfishing tuna so the supply doesn't crash like cod did: https://www.cbc.ca/news/canada/nova-scotia/our-failure-to-pr...
The needless aggressiveness aside, this goes completely against my job experience. The boring workplaces were those in which putting in the effort was actively discouraged and punished. Consider yourself lucky if you never worked in one of these places.
First, we can assess the degree to which the US is unusual by inspecting the scatter plot. If US household income was somehow unusually inflated by health spending, then it its residual should be much larger than it is (especially in better models that incorporate some of the non-linearity observed in other countries).

Second, just where is this extra income supposed to come from? More likely households bear almost all of the incidence of this spending, meaning each dollar spent on health means approximately one dollar less available to households to use elsewhere. This is certainly what the literature on employer health insurance benefits tends to suggest.

Third, the timing of this is all wrong. It’s clear the arrow of causation goes overwhelmingly from income to health spending because changes in health spending clearly follow changes in income. Over the past few decades it takes an average of about 2-3 years for changes income to be fully reflected in changes in health spending due to the large role played by 3rd party payers, employers, etc (the current year elasticity is about 0.2 whereas the long-term elasticity is north of 1.6).

~RCA
Ha! Nice one,will fix typo if it lets me.
Lol this had me dyin. Thanks.
I think it depends on the what area. Criminal Judgement probably shouldn't be a "black box" your going to jail. why? the machine said so.

mathematical proofs. My algorithm solved xyz conjecture. it's true. how? I don't know it's a black box.

Also, from a diagnosis/debgugging problems it can be a problem. Oh, no the was a huge mistake and the system just catastrophically failed. how do we fix it? don't know. Should be keep using it? don't know.

Not saying there aren't places where a black box is perfectly fine.
I realize my response may not be helpful and is not in the normal spirit of HN. But OP said this "My ideal life would be one where I am free to explore things that interest me and share that knowledge with others."

Look, not everyone can be an Instagram model or a YouTube star. Sometimes a good smack in the face is what's needed to spark a little motivation. Sometimes not, but I think it's worth putting out there.

For some less harsh motivation I'll offer this:

https://www.ted.com/talks/mel_robbins_how_to_stop_screwing_y...
Hey Chris! Thanks for all the hard work btw. I had a bug originally with the Julia Opt packages. I think the "Cbc" and "Clp" packages had issues on 0.7 & 1.0 builds. This one was relatively easy to solve in that the windows path it was looking for didn't match the directory it was installed in. I actually had trouble with this one on Ubuntu as well.

Just yesterday I tried to install "Plots" on Windows7 using Julia 1.0 and the installer popped out a ton of red errors. I'll have to go look again later today, but they didn't seem as straight forward to fix. I doubt that helps a lot, but I'm curious why these sorts of things seem to happen a lot (or at least in my limited experience). When the package manager works, it is fantastic!

I'd like to use Julia for optimization, sparse matrix math, genetic algorithms, graph theory, and plotting. Having a free and fast tool to do all of this is pretty amazing. GNU Octave is cool, but doesn't seem to have most of what I need. Matlab and Mathematica are powerful, but unreasonabley expensive if you don't need to use them daily. They do have extremely good integration of scientific tools like plotting. Mathematica is an amazing tool btw and I hope Julia gets as many features some day.
Just like the kids, there’s an alphabet for you to learn for email marketing
The reason you can get a written estimate is because there’s a big book the service writer flips to, “hmm, front swing arm bushings on a ‘12 Corolla: 2 hours. Front end alignment: 0.75 hours...” Worst case is, I get the acetylene torch out for those rusted-to-hell front end bolts, but it’ll take me about what the book says, usually less. Well, worst case is a bunch more front end parts are shot, waste of money to do just bushings, and customer doesn’t want to spend the money (after the requisite phone call). Bolt ‘er back together still broken, and send them on their way.

You figure out how to apply that same scenario to cardiac surgery, and you can have your written estimates.
Work or hobby, you can only choose one for each type of activity.

You need to decide if you want to do programming as work, or hobby.

If you decide to do programming as work, go find another hobby that keeps you interested and treat programming solely as revenue source and don't devote too much into it.

Otherwise, you get to enjoy programming a hobby, and you need to find a source of income. This can be from the hobby, but it kills the fun of it.
This is really true for me, great point. There have been days where I had less than 6 hours of sleep and it’s made me very easily bored and disenchanted with the work that I had previously enjoyed. When I’m very well rested, I could probably enjoy most things for a little while.
https://www.bbc.com/news/world-us-canada-41504796