skysight-inc/HackerNews huggingface dataset:
I'm working hard now on trying to make my project sustainable:

https://getpolarized.io/

It's a weird situation as we're a desktop app. Many Open Source users aren't used to paying for things but if you want good tools there needs to be a economic background.

I've started polling my users to ask WHY they aren't donating and I'm getting some interesting initial feedback.

So far "I didn't know how to donate" is apparently a big issue I have to resolve.

Additionally a top issue is that the user base doesn't feel the core feature set is there.

Now part of this might be bias. They might not want to support simply because they don't have money.

In the next month I'm going to be turning on monetization so this should be an interesting process.
What other reason would there be?

Because any friction in the sign-up process reduces conversion rates, often dramatically in cases like this. Importantly, that applies to customers who would otherwise decide to continue just the same as to those who want to cancel but forgot to do so.

Remember, the only reason a business is offering you a free trial of anything is normally to increase the chances that you'll decide to stay with them and pay them money. If you don't like that arrangement, no-one is forcing you to sign up for the free trial!

Obviously it's scummy behaviour if a business signs you up for something in the small print and then makes it unreasonably difficult to exercise your right to cancel. I don't see anyone disputing that.

But if someone has knowingly signed up for a trial, if it was clearly stated up-front that if they don't cancel before the end of the trial period then they'll start paying to continue using the service, and if a reasonable means to cancel was provided, I just don't see the problem here.
> Wouldn't you feel at least a bit compelled to work the extra odd hours here and there?

Not if doing so raises the risk to patients to an unacceptable level.
Anything from the Alpha release is going to be worth a lot.

Even a set of basic lands will set you back $500.

When I used to play back in '95/96 (4th Ed/Ice Age era) any Alpha/Beta cards were relatively expensive - now they're crazy.
States and localities can regulate dumping in their jurisdictions. No need to have the Federal government involved.
Fun with JEQL Hilbert Curves
Downloading movies from Pirate Bay could potentially lead to cryptojacking
That only works if everyone in the group likes each other well enough, and the boundary of the group is agreed by consensus -- not most families :-)
Paul is one of the most impressive, fun and welcoming people I met at YC. This is awesome — congrats on the well-deserved success, guys! Excited to see what you'll build at Coinbase.
A car loses value when used because the components degrade (presumably, a new car not being driven, but stored doesn't degrade).

An apartment or house could degrade when being lived in - but that's the internal furnishings, which is "easily" replaced. The concrete, walls and other structural features degrade regardless of whether an occupant is in it or not!
Have you ever worked at a company with reply-all spam?
Just so you know, although not very clearly documented, yearly subscriptions include perpetual license for that specific version.

You can see it on the “buy” page.

It’s still less than ideal, but I pay yearly for their “all pack” product and I feel with the amount I use it I’ve gotten my money’s worth every year.
The height is too large. It protrudes too far away from the wrist. Even a bigger face will feel less in-your-face if it’s more flush with your body.
Expressing cynicism and demanding to be proven wrong is not an effective argument strategy.

If your goal is to convince others, you should collect the data yourself and share it with them.
Actually, they didn’t have the votes in the Senate. They still don’t without bipartisan support.

The funding Donald wanted is now less than the cost of the shutdown. $5.7 billion toward border security is not outlandish. Shutting down the government for 30 days absolutely is outlandish.
Sounds like a solid solution to America's housing crisis once transfer booths are invented.
5a) a way for me to add a bounty to an issue, I’ve had team members fix bugs and do pull requests that I’d have happily paid $50 $100 or more to the maintainer instead
"Penny-wise, pound-foolish."
I usually use this on Windows but now that I have all JetBrains tools I opt for DataGrip the most since its cross platform. But also this gets tricky when you want to open a MSSQL db thats local for development I forgot what Microsoft calls it but it may as well be called MSSQLite.
I've long been curious why McDonalds (and the like) don't have automated license plate readers, similar in concept to people counters (though more invasive I suppose) on their drive-throughs.

I'd think they could very quickly & automatically begin collecting data about income, repeat vs new customer, even streamlining the order process by recalling past orders or upselling, etc.

It seems like an area that is incredibly ripe for data collection & analysis; I almost wonder if there isn't a business in here, selling this feature-set as as B2B service.

For the record, I prefer not to be 'tracked' -- I don't know that I can realistically say it would actually impact my fast-food selections though. The concept does intrigue me nonetheless.
Who is "everyone" in your family? According to ancestry.com that's an absurdly large group.
Yeah that's interesting. What I've also read is that property was one of the only private assets not taxed at the same rate in China so is a good place to store capital (or that was the expectation). Secondly, a huge initiative of the Chinese Government beginning in 2008 was to "go west" and they started providing a significant amount of funding for major infrastructure and development projects with the "if you build it they will come" mentality. Still possible that type of migration west could happen -- particularly as China expands trade relationships with the countries to their west as well...
As it happens, my own businesses sometimes will choose to refund under those circumstances. It does cost us a small amount every time we do it, because we still had to have resources available to provide the agreed service even if our customer decided not to use it.

However, we have absolutely no obligation to do that, either ethically or legally, and I don't see why it should ever be a card company's decision rather than ours. The job of any payment service is to collect payment from a customer and give it to the merchant. It's already bad enough with chargebacks, which as any merchant can tell you are sometimes abused with the merchant losing out through no fault of their own. The idea that there should be a normal, advertised mechanism through which card companies would retrospectively pull back money paid by the customer under a legitimate contract is legally nonsensical.
The thing is there are already multiple services offering endless virtual CC numbers. This doesn't work at all as an unique identifier. It just adds drag.
How do you out-tech somebody with no tech? Google has no smartwatch division. This represents a brand new product category for them.
Forget going email - I am thinking of going back to snail mail. I received a written card invitation in the mail yesterday from a good friend [0] inviting our family to a dinner, and it felt indescribably nice to get it and read it.

Something nice about holding it in your hands and reading it, then placing it on my desk somewhere so I could see it and be reminded of the good feelings every time I glanced at it.

[0] - https://twitter.com/dsabar/status/1085727043956830209
Yes agreed. would be nice to understand if downvotes are legitimate or a troll strategy :)
LaTeX, with TikZ for diagrams.
Have talked to Dave about sustainability. Strongly recommend.
They do! For instance, for the crypto problems David studies, security experts wrote Nacl, which brought cutting edge curve and AEAD crypto to developers with an almost user-proof interface.
For someone who likes to work at bullshit companies, absolutely.
Your guess is wrong. When you sign up for something, your agreement with the provider will be governed by the contract you make with them. MasterCard are not a legislative or judicial body, and we should be very wary of allowing organisations like that with monopoly/oligopoly control of such a fundamental aspect of the market to exercise quasi-judicial powers.
I generally look at the data on the specific product. If it's been discontinued for a year already and new model has been out for a year and it's still selling, that tells me something.

I look at a lot of things, and like I said I don't just do discontinued items.

Right now I'm holding onto some Samsung Blu-ray players from 2015. Samsung stopped making them, so the 2017 models are the latest, but the 2015 are cheaper and still selling quite well. I expect the price to go up a bit as the other guys selling it sell out, and then I'll make maybe 30-40% on my money for holding it for 4 months or so, minus costs/returns.

Very doable if you have capital and are willing to be active and take some risks.
I think there is a bit of wisdom here. There are substantial cultural differences across states. Thus the policies that they want vastly differ. State law will attune itself to the wishes of its citizens. However, the more emphasis on Federal law and programs receives in governance, the greater the mismatch between what people want and want they get in that governance. The stakes become that much greater and feeds political polarization, extreme views, and a whole lot of anger. De-emphasizing (again) the power of the Federal government could very well heal divisions, and increase the effectiveness of government.

There are objections (e.g. 60's Civil Right Movement was helped by a Federal Constitutional intervention), but I do not think those objections invalidate the observation above and in the article. My bigger concern is that State budgets are, unlike Federal budgets, much like our personal budgets: You can borrow, but you can't print your own money; states are forbidden by the Constitution from printing their own currencies. That flexibility in Federal budgets using Treasury bonds gives the Federal government substantial more flexibility to institute well-funded policies. The Federal government can give States money, but it rarely comes without strings attached, hindering autonomy of State governments. I feel that a solution would be to fund States directly without restrictions on the use of those dollars.
I did try to use their "fraud waste and abuse" line, thats how i got to an investigator. I just think the report went into the circular filing cabinet.
When I was a kid I swapped a friend one Lego spaceship for his entire collection of original star wars figures that he didn't want.

If they were still carded their current value would be astronomical.
>Would it be nice to know who upvoted you?

No. I have better things to do. Sometimes I wish I knew who donwvoted me, so I could hunt them down. Probably not knowing is for the best. :-)
tensorflow.js?
Speak not untrue generalizations is better. Not that the opposite is true, by no means. Generalizations are extremely rarely found to be true.
I’ve heard the best housing “hack” for the Bay Area is to live in a houseboat. Anyone doing this or calculated how much you’d save?
At FastMail, when we moved from our old in-house blog engine to Ghost(Pro), we moved from blog.fastmail.com to fastmail.blog, because the blog engine was being run by a third party, and if it was at blog.fastmail.com then we’d be giving our *.fastmail.com authentication cookies to said third party. So it was always going to have to be a different domain; then it’s just a matter of fastmail.blog being nicer than fastmailblog.com.
Does this get around MAC anonymization done by iOs and Android? Researchers have shown it can be defeated, but curious if this takes it into consideration
Yep, most of their watches have the display on all the time. The term to look for is "transflective memory-in-pixel" in specs.

This was the main reason I loved my pebble watches as iirc all android wear watches couldn't do this.
there are no such thing as houses in urban china. these homes are apartments you basically get on a 40 year lease. when the lease is up the govt pays you to move out. also, when you buy an apartment in china, it's not finished. there's no flooring, paint, appliances, etc. the price of a finished one is the same or less as an unfinished since the new owner will usually redo the interior. so a lot of these new apartments are left unfinished in anticipation of the next 10x payday as has historically and repeatedly happened in urban cities.
I write letters to a friend in the U.S. from NZ at least once every 2 months. If you don't have stamps and envelopes handy it can be annoying at times but there's something about spending an hour reading, re-reading and then writing a personal letter by hand.

Also, once you write something, there's no backspace. You either re-write the page completely or leave a mess.
A CIO is usually in charge of budget, strategy, planning, and execution of internal IT initiatives at a company. Priorities and projects, vendors, licensing, capex/opex, support and maintenance, etc.

A CTO is usually focused on delivering company value through technology. So in oil and gas this may be drilling tech and seismic imaging software, in retail it's the mobile app and the in store kiosks, etc.
Objectively wrong. They HAD the votes in the Senate. There was absolutely nothing stopping them from employing the nuclear option to fund the wall. A simple majority was all they needed.

If they wanted to fund the damn wall, they could've funded it. You're right that shutting down the government for 30 days is outlandish, and it falls squarely on Republicans and Trump.
I upvoted your comment. I'm not sure why you were downvoted. This is correct. Even different plants of the same strain will have different levels of these depending on growing conditions, drying, curing and other factors. Even two clones grown in different conditions can vary greatly in cannibinoid ratios.

There was also an excellent study i read a while back on the effects of different terpenes on the kind of high you have and how they interact with thc and various other cannibinoids.

This article summarizes the study pretty well:

https://lift.co/magazine/terpenes-cannabis-strains
I agree, but certainly those who are banking 30%+ of their gross six figure income have, in general, both the luxury to pick a market and the temperance to stick it out for several years before their momentum breeds its own growth and a long-tail retirement plan in itself. It’s only easier said than done by those who have never made the commitment to suffer to try.
You seem to place a lot of faith in uncontrolled social science studies.
Please consider approaching Segger. If a real IDE supports Rust compiler and builds in real debug, more than just some hobbiest weirdos (heh) will be able to consider it.
I'm sorry but this is way too click bait-ish for my taste. I always assume that no one is stupid.
As a new go programmer you just saved me a bunch of time, I didn’t know about either of those.
Despite being written in Java, DBeaver does let you connect to a server, then pick which database you wish to connect to.
There are lots of good reasons why application developers sometimes don't write secure code. For example, security can be an afterthought if the logic is so complex that you can barely get it working in the first place. Another example is that it's not necessarily clear when you write a component that it will be exposed to potentially malicious inputs. And there's always pressure to ship a working product so, without a clear mandate from the organization, security can fall by the wayside as a priority.

One thing that's not a valid reason is the one that the author gave. "Hur dur I develop web apps and I've never heard of XSS" isn't excusable. You have to know about this stuff, even if it's not your expertise.
They could regulate dumping in their jurisdiction, but I think this is one scenario where it is a good idea for the government to step in and prevent people from dumping hazardous chemicals into vulnerable areas.

Unless you'd like to see what Flint Michigan but Worse might look like on a more national scale.
and you realize that you haven't written the login page yet. It now dawns on you that you will have to figure out some rate-limiting password attempt mechanism, a way for people to recover their passwords, perhaps even two-factor authentication... But you don't want to do all of that, do you?

If you are trying to write your own login and authentication system, I dare say that you probably are an idiot or really smart.

Statistically, it’s probably the former.
I'm also working on that with www.discocrypto.com but admittedly my API is not there yet.

Tink from Google is making good progress.

Libsodium is often mentioned as having a good API.

PS: it's not just frameworks. Languages like Rust and Go are doing huge things as well for developers.
Zero-packaging stores are helping people kick their plastic addictions
A car that you bought 20 minutes ago has suffered no measurable degradation of the physical components, but has lost a very large portion of its "new" value. The lost value is purely from the "new" label which the car no longer qualifies for. That is why people will tell you never to buy a car new.
> It is easy to criticize founders when they launch something new. Given enough time, you'll often look smart for doing so since nothing is perfect, and most startups don't end up the way founders hope at the beginning.

That's fair, which is why I typically haven't commented on Show HNs/Launch HNs. However, when a startups receives a substantial amount of venture capital from a(nother) top tier firm based on that startup's idea, it's also fair to open the startup to more scrutiny/skepticism.
Amazon Ruined Online Shopping
> just because they don't know what you know, doesn't make them idiots

If you're making a product, then it's your responsibility to do so in a way that doesn't put your users or the general public in danger. Not knowing security best practices when you get started doesn't make you an idiot, but releasing something without first putting in the work to learn and then implement the best practices kind of makes you a shitty person.

I mean otherwise you might as well just say something like, "I just wanted to make a car, I don't care if it's safe or not because that's not the fun part."
You cannot C&D art style. They're not using copyrighted assets or names. "NES" isn't trademarked either and the project claims no affiliation to Nintendo.
Where do you draw the line? They need to know about XSS. Presumably you think they need to know about SSRF, too. What about clickjacking? Cache poisoning? What percentage of web developers in the industry do you think understand cache poisoning attacks?
Regarding 1: Please no. Prefilling the entry box is a decent compromise and doesn't require turning the Github issue screen into a Jira issue screen.
That kind of demand requires a simple mindset: make doing the right thing easier than not. I was impressed, when working for mature software companies, how the teams providing internal tools that were easily overlooked (security, data logging, experimentation framework) managed to lead by having the best option easily accessible.

You don’t want people to write passwords in your codebase? Make getting the password as an environment variable easier to find; document where they are, how to refresh them; better: change them often and have the system that changes them support the use case better than a human with an easy to compromise post-it.

You don’t want people to store personally-identifiable information? Make all the relevant information associated with an irreversible hash; have all the business logic that process logs into something legible matching that hash. Soon, no one will use the `user_id` that is also used in the public profile URL.

It’s significant amount of initial work but that beats repeating basic things for every new joiner, by a mile.
Most applications we look at supply some sort of bespoke login and authentication system.
All generalizations are false.
>What problems did MongoDB run into? Can you link to any specific instances?

MongoDB does not specify, to quote their FAQ on the new license:

>As a result, we have observed organizations, especially the international cloud vendors, begin to test the boundaries of the AGPL license.
> One where it's not OK to write on Workplace that white privilege doesn't exist

For some reason Sillicon Valley missed out on a "golden rule" that exists everywhere else -- do not talk about personal politics at work. I don't see someone denying white privilege as a problem so much as the fact that such discussions were happening using company resources on company time.
I so deeply hate that there is so much good content on Twitter that is simply lost if I don't happen to login on the given day. God forbid I'm not on the platform at all. It's so weird how RSS + Blog is a better experience for everyone, except advertisers.

Anyway, I'm super curious what someone is doing with Rust and Zelda. How do I learn more without Twitter?

Looks like this might be it? and then maybe I'm just missing out on images and videos that are only in some ephemeral tweet? https://github.com/CryZe/WindWakerBetaQuest
This has been a favorite for nearly 20 years.
This. Right now I'm basically on a year sabbatical where I'm doing almost entirely open source software without worrying about funding, but I also know that's not sustainable

I hope you manage to find some good balance that keeps your work funded!
You can flip between postgres databases in dbeaver quite easily (dbeaver calls it changing the "active object"). I used to use pgadmin3 every day, and have found dbeaver to be much better, and about the same as DataGrip. Although some things still feel better in psql or pgcli.

The vast coverage of JDBC is probably a good reason so many tools use Java. I'm sure you wouldn't prefer they all used ODBC or DBI instead.
Thanks interesting, thanks for your feedback.
> You don’t want people to store personally-identifiable information? Make all the relevant information associated with an irreversible hash; have all the business logic that process logs into something legible matching that hash. Soon, no one will use the `user_id` that is also used in the public profile URL.

I don't understand this. The user_id in the URL is not itself meaningful. If you know that my user_id in Slack is 642819733, that information is neither personally identifiable nor useful in any way.

But if you exfiltrate a bunch of data from Slack and learn user 642819733's birthday and billing address, then you've probably managed to identify me. You've done it even if you didn't know beforehand that there _was_ a user_id 642819733. The problem wasn't that 642819733 was a sensitive value; the problem was that it was the same value in all of Slack's records. Which your solution doesn't address.
Before January 15 when YouTube removed annotations there was a game called "Kaizo Trap" by Guy Collins.
I have serious doubts about these 'opportunity zones'. I live close to the edge of one and I doubt there's a lot inside it worth less than $500k.
What's the most convenient tool you've found for Postgres?
On the other end of the spectrum, I have little software engineering experience but having dabbled in competitive programming, I can solve almost all algorithmic interview questions optimally within minutes if not seconds. I still failed half of my interviews though (including Google even though I believe I answered every question perfectly). Perhaps it's due to my presentation, or my lacking portfolio, or perhaps the positions have simply been filled.

On another note, OP seems to rely on recruiters to approach him? Wouldn't it make sense for OP to actively apply to positions which may have better fit?