skysight-inc/HackerNews huggingface dataset:
Giant media corporations owned by billionaires, run by millionaires, and overwhelmingly staffed by members/partisans of a single political party pump out propaganda on all of their mediums 24/7 and totally dominate and saturate public opinion but we are supposed to understand that "bots" are a threat to democracy? As someone who has been deemed a "bot" by people who do not wish to hear information they do not like on more occasions than I can recall, I note an insidious aspect of this emphasis on "bots" is that it allows the ready dismissal of any individual expressing heterodoxy and glorifies/sanctifies the "official" media previously described. Yet we saw this past week that social media users were able to win a rare victory in bringing the "official" media to heel for their lies and manipulation in setting upon a group of innocent schoolchildren. The official media hates it when their marks push back and thus we get propaganda like this study.
We exist inside absolute infinity. Reality is not physical. math is just a subset of the infinite number of dimensions in the godhead we inhabit.
I think it’s less likely the parents than the institutions. Most of the private schools are hard to get into. If the parents sue one of them, their kids are probably not getting admission into any private school.

A public school, OTOH, won’t be able to block a child’s admission on the basis of their parents’ litigiousness.
I haven't found the occasional card replacement to be a pain, but I have two or more credit cards at any time.
Many game developers support unionization, but few think it’ll happen
This may be true, but it's not what was said before by Tesla. Personally, I don't blame them for chasing the higher profit models, but it's against their stated mission of the past.

My decision now not to buy a tesla is about elon musk's public behavior (I could afford the $37,750 if I wanted to, but TBH, I buy used cars now).
Afraid of being sued? For what? What would that lawsuit look like and are there actually any real cases on record for parents suing over in class cell phone bans?
Guide to WebAuthn (with code examples)
Massive HIPPA breach or all 600k signed release?
Monitoring Windows per-user registry settings with Osquery
This sucks because, in the first few years, flow had much better soundness and typescript had some serious issues. I'm a little disappointed and feel as though, similar with Kube vs Swarmkit, the worse technology is winning.
Investors should have consulted researchers in the biomedical field before investing. They would have told them that what Theranos was promising is impossible. Everyone who invested in this fraud did not do their due diligence.
Maybe the goal here wasn't to be technical (although I'm not sure why given it's an article about docusign api integration) but this is a WHOOOOOLE lot of text with basically nothing worth reading.

>I was annoyed that they didn’t provide a secret key to authorize API requests

Yeah... they don't do that for a reason. They appear to support a fully fledged OAuth implementation (https://developers.docusign.com/esign-rest-api/guides/). I haven't used it, so maybe it's terrible, but I'm suspicious of the author at this point.

>DocuSign API docs are very quirky

But no discussion of why, or what he would expect instead. This actually sounds like the author is lost because they don't understand OAuth again (and to be fair, I've implemented OAuth and it's easy to get wrong).

>Someone on the team noticed that if you refresh the page, you get logged in as the user that was making the API request. [...] About a week later, we were informed that this is intentional, and they were worried about breaking anyone that is using this as a feature.

This honestly sounds like they were politely telling you that you haven't implemented OAuth correctly. You should be making the request with the token of the delegated user, not a generic account.

>I got this working, but it took some janky work to re-work the JWT flow to manage hourly expiring tokens for all of our user that choose to enable the esignature feature.

This is what refresh tokens are for. I highly doubt the refresh token expired in an hour, but hey - I haven't used it so maybe I'm wrong.

---

I honestly believe I can summarize this whole article as: Dev takes first steps into OAuth and gets lost...
Does anyone know of a similar list for DDG?
My tuition would keep going up so I don't know why they can't afford to pay more professors.
Automated testing scales easily, but properly reviewing code/proofs/technical prose really doesn't. Lecturing scales even more easily, though maybe not if you want students to be asking questions in class.
I was on this project and can speak a bit more on the technical details here.

A couple of high level goals:

1. We wanted to use their embedded flows, to keep the experience within our application as much as possible.

2. We wanted to avoid having to create a DS user for every user in our application that turned on this feature. We were looking for using 1 “API user” to make requests, handling data scoping ourselves within the application.

The actual issue in more detail:

1. Go to an embedded page, authenticated as the “API user” (which looks like you’re sandboxed within DS to the embedded page)

2. Refresh the page

3. You now can click around the entire account - viewing any data that belongs to the API user (in our case, all of the data).

At this point (as the OP called out), we realized we had no choice but to create DS users. But we still wanted to hide this process from our users, keeping DS as embedded as possible. The issue was their “regular” user creation flow involves a email going out to the user to confirm - obviously this is unideal if our goal was to wrap DS and hide it’s existence as much as possible from users.

DocuSign offered a workaround for this, which involved basically getting shifted to a legacy version of the API, with no hard promise of it not being sunsetted. By then, we had had such a poor experience with non-answers from their team that we called it quits.

I hope this clarifies some of the technical problems we were trying to solve for.

Edit - I'm sure DocuSign can solve for some use cases. Obviously, they have a large user base and I'm sure most of them are at least satisfied, if not happy. But if you're trying to wrap an e-sign provider within your application, I would recommend HelloSign 1000x. HelloSign's API is a first class citizen whereas DocuSign's felt more like an afterthought.
Is this actually a good thing? In Germany (esp Berlin) homeless people do this a lot, but I've seen them basically empty a whole trash container on the street to get a few bottles. While it's great there is a revenue source for the homeless; I can't help thinking that it's not a great way to do it.

Must cost a fortune to clean up the trash after people have been through them, way more than the few (euro)cents you get back...
Wisdom is knowing when to say "I don't know".

It seems that she is very, very wise
..
> Yarn is currently fully covered by Flow types, and to be honest it works pretty well for us - the key part being “us”. Because we want to make it as easy as possible for third-party contributors to shim in and help us maintain this awesome tool, we'll switch the codebase to TypeScript. We hope this will help making the codebase feel more familiar than the projects your already contribute to.

Seems like Flow works just fine for them, they just want to make it easier for others to contribute.
One tiny detail.

If payment options are not convenient to the customers, fewer customers will agree to pay. Maybe too few for the whole thing to be sustainable.
I find the comments laughable. If you look at the actual "operators" -- its a bunch of 'inurl' and 'intitle' stuffed with keywords.

Heck, give me ten minutes and I will prepare 100 of these operators. Weak article.
Planned Parenthood has their own period tracking app called Spot On, which probably doesn't share your data.
Every single FB I have seen has either been pointless or a product that is directly insulting me.

Facebook allows you to mark ads as interesting, but unfortunately I can't mark ads as insulting, or just a bad product.

The irony is that I have money and an interest in gadgets, but I don't think I have ever seen an ad for them. Did see an ad for the local bus company though, because they wanted to "reach those 18 or above and living in $COUNTRY", aka marketing can't set up a Facebook campaign.

Then they suggest I get my masters at the university I already had one from, which they know because I put it into my profile...
In Kansas now this is not even relevant. Police just have to claim to 'smell marijuana' and they can search a home without a warrant. The 4th amendment is being whittled down to nothing.

https://www.countable.us/articles/17230-kansas-supreme-court...
Is this still even a thing? Michigan also has a 10 cent deposit, and fraud was an issue in the 90's, but it's been fixed since. Grocery stores use automated bottle scanners to check barcodes. I'm not sure how you could "fool" a machine that needs a barcode for each physical bottle return.
Bundled in that statement is an assertion that there is something about the human visual system that is magic, I think that is frankly ridiculous.

Our eyes are pretty terrible cameras, it's our post processing that makes us able to drive and unless I'm mistaken I'm making relatively straightforward judgements when I'm driving. That processing and logic is really hard right now but I don't see any reason to believe it is impossible.
I’m amazed that web sites still let ads run arbitrary scripts. Serve and image and/or some text along with a link and call it done. If interactivity is somehow really necessary, define a few templates and allow no deviation from them.

But I guess these sites would rather just continue to be a conduit for screwing with their viewers.
Yes at least the U.K. isn’t as obsessed with cash as Germany is. I had trouble until on of my Europoeran colleagues told me about Amex Vicinity. You can see places around you and it can make it easier to use corporate Amex cards.[1]

[1]https://www430.americanexpress.com/mrec/mersearch/index?intc...
I don't think there are places in the city to take them. You need a car.
"doesn't really strike me as that privacy-invading, given the nature of the app"

"the privacy implications get worse if the data is sold to third parties"

Aren't these two statements in direct conflict with one another?
This is great and all for the environment but as someone who lives in downtown Portland the effectiveness of this program has actually reduced "quality of life" downtown.

Homelessness has been an issue here for a while, but by making it more economically viable to do bottle deposits this program has created mini hubs for the homeless to converge on.

There is a large Target store downtown with bottle deposit machines, there is usually a group of homeless folks who hang out overnight waiting for the store to open to deposit their goods -- and they leave a trail of trash and needles behind. And generally make it unpleasant to shop at the store.

Bottle deposit isn't really a means of addressing homelessness but it is just another factor when considering how chronic Portland's homeless issue is.
I'm not sure I follow, you think that employment goes up during economic downturns?
Did they win Pulitzer by working for Buzzfeed?
Even if this data isn't collected on behalf of a healthcare provider I don't understand why the collected information wouldn't be considered PHI and therefore subject to HIPAA's rules.
Hear hear. This is exactly the type of message that I want to be sent to entrepreneurs. If you ruin people's lives and externalize your failures in order to perpetuate fraud, then you'll go to jail.

Additionally, someplace out there is somebody with an idea that could allow the single blood drop idea to actually work. That idea is going to get buried because after Theranos, nobody is going to want to risk getting involved with Theranos 2.0.

A conviction is the best possible thing for entrepreneurs who actually help society and is only a negative thing to entrepreneurs who want to get rich by stealing from others.
Nobody Says ‘Zelle Me’: Banks Struggle to Catch Up to Venmo (2018)
People have organized protests based on Internet chats, FB groups etc, I know because I’ve attended several such protests in the last couple of years based on FB alone. Nowadays it’s pretty hard to gather people on the streets using “traditional” media like TV, radio and print press. Not impossible, just harder, at least an order of magnitude harder. As such controlling the internet means controlling democracy, i.e. the power (kratos) of the people (demos).
Maybe indirect. They may not currently be selling that data.
The whole big data mining AD madness has to stop. Period.
I just add a symlink to the folder inside node_modules (so it doesn't need to be on package.json), not the cleaneast but gets the job done.
You can do this now with https://www.pipes.digital/ :)

And I'm actually working on making the extract block more powerful, having a graphical way to select elements.
I'm not sure I follow... If I understand the async style correctly, the idea is that a task will yield the CPU as soon as it is about to wait for I/O an insignificant time. This allows CPU bound tasks to race to idle, and prevents context switches unless they are nearly certain to be needed.

I guess I understand your concern in the case of multiples tasks that are very CPU heavy, but that hardly seems like a universal issue.

I also think it's a bit of a mathematical sleight of hand to use measures very sensitive to outliers with a distribution that generates large outliers in order to make a point. Perhaps the median or the 95th percentile is more useful. But less dramatic.
Exactly. There are plumbers who just execute exactly what they learned in school but nothing else and there are others who can solve tricky problems. Same for programmers.
https://outline.com/jSuPcE
That is true. To move away from language like good or bad. I would say DocuSign is quite reliable, we had one outage that was their fault and we were an edge case. I would also say that their API is sufficient for 95% of use cases or more with very little work arounds. Their customer success architects or whatever they call them were also pleasant to work with and responded promptly.
Never tried that instead, might just try it, but I got have other banks that might not support this at all (Credit Union). That's where privacy.com works best for me.
By lawyer I meant either hired at big law or running a profitable practice, by doctor I meant made it into residency. This is only one, narrow dimension of "high-status", but still. Newspapers get things wrong all the time.
Anybody know what I should study in order to understand this research paper?
This is not possible anymore though as the minimum target audience size is now 1000 or so
Yeah, this is some cloudflare-level "security" abused to the point where we enter this strange paradoxical state. Advanced features exist, but are not allowed to be used enough by anyone to actually learn them and use often.
It's more "temporarily embarrassed billionaires" imho. Many HN denizens are angling to either work at google or launch a startup that is acquired by google or grow to the scale of google. Why offend the future employer / acquirer now over proletarian issues?

In case you aren't familiar with the Steinbeck quote:

> Socialism never took root in America because the poor see themselves not as an exploited proletariat but as temporarily embarrassed millionaires.
Look at it this way. Would you rather deal with parents of one troublemaker, or with complaints of multitudes of parents of other kids that have their well paid education degraded and interrupted by the troublemaker?

Value of these schools depend on how well they manage this.
Agreed, tho I think it isn't really a question of possibility as much as a question of whether the amount of work is too high for charity.

I wish more people on Linux would adopt brew. I've found brew to be a great supplement to the built-in package manager, especially for things that update frequently like youtube-dl (which, is a python program that is not distributed exclusively via pip).
New app in China shows you who’s racking up debt
This is just sad. When Reagan defaulted to "I don't recall" as his stock answer, he was like in his 70s and getting a bit senile.

This is either serious incompetence or lying. She doesn't get the polite out of "I'm just getting old. Oops."

Plus, there was another detail revealed that Holmes had been less forthcoming about: She admitted that she and Balwani had been living together and had engaged in a romantic relationship. It was something she admitted under oath but had kept from investors.

I've said publicly on HN and on my personal blog(s) that I think things got so crazy out of hand with Theranos precisely because she was a charming, pretty young woman. I've said privately to my sons that if I were an investigative reporter, I would be looking for evidence that she slept her way into power. She long claimed to be celibate because she was so devoted to her work. What better way to try to shut down accusations of sex for favors than to claim she's not sexually active at all?

I'm still waiting to learn that she actually slept with a number of her investors and board members. Some of the men involved with her company were notorious ladies men. In my experience, most men like that won't be deterred by the detail that they are old enough to be my father or grandfather.

This is one reason I'm relatively patient with the sexism that I feel closes so many doors for me. I'm well aware that "business meetings" between a man and a woman can be a polite cover story for an illicit relationship. I'm also well aware that if it is a polite cover story, it's probably not a case of "It's actually a productive business relationship with a bonus of sex on the side." It's probably a case of "No, the only thing of value she has to offer is sex and the man in question is willing to lie and pretend she's a real business person to get that, but would have ditched her incompetent sorry ass long ago as a business partner if business for profit was his actual motive."

I still am not sure how to solve this for myself. Things are very slowly getting better for me. But I think there are inherent challenges in trying to make sure it's really business if you are a woman and this will likely always be true, though I hope we can develop some best practices for opening doors for women who are serious and deserve a shot at earning their way on merit in spite of being born with the wrong bits between their legs.
They don't own the company.
I give examples of expressivity in my comment above. The multiple dispatch is completely ubiquitous in Julia, being the default. This allows for the definition of flexible and extensible interfaces similar to Haskell's typeclasses. Macros are used to make things like PyCall or generate fast and flexible CUDA code.

This is not easily possible in Python, especially not with high performance.
Deleted my UberEats account when they told me that they could not offer any compensation for not delivering what I had ordered.

Getting a refund on what you ordered but did not receive is not compensation, it's what they must do.
I haven't read the book. I would like to because I have a hard time believing a story where that list of people you mention are "fooled".
sounds like their primary goal is 'attract more contributions' rather than 'strengthen the type system'.
Then force in-state distributors to use packaging with Oregon specific UPCs. I have mixed NJ/NY bottles that I redeem in NY. Some but not all NJ bottles will be recognized by the machines.
It's a simple install and even has a GUI app for right-click support.
>And then there's... whatever this is:

I respect Jamie for the things done and built, but his views tend to be a bit extreme.

I agree that flow is not in a good place right now, but to say that they don't give a shit about the community just isn't true.

Flow has been making significant strides in community outreach, inclusion, and detailing their roadmap lately. And Facebook dropping flow would bring us toward a monoculture which I personally think is a bad thing (it's always good to have some competition to keep new ideas flowing and stuff improving), and Jamie advocating for it seems misguided and shortsighted.

Flow happily accepts contributions from outside people, but because of the somewhat esoteric language choice (ocaml) and the fact that it's significantly smaller in terms of community usage means that there isn't that many people to contribute anyway.
Wouldn't that be 10 additional minutes in the thermal bag? If it sits waiting for 10 minutes for the rest of my order wouldn't the time in the thermal bag be in addition to this. Also, in the U.S. delivery in my experience with others doing this is that is takes more than 10 minutes for the driver to pick up the order. Then another 10 - 20 minutes to deliver. To me this ruins the meal. You don't get a nice presentation and the food is way colder than the chef intends.
I don't understand what the author is trying to do. It feels like a classic XY problem[1] where the author just decided at some point that "I need digital signatures in the database" rather than focusing on what the actual problem to be solved is.

[1]: https://en.wikipedia.org/wiki/XY_problem
There has been a renewed focus at parties over the last few years, particularly within the minimal techno scene and especially in the Romanian subset of that genre, on quality sound at parties.

Granted, those parties and that music are designed specifically for "the heads", so they're few and far between in the larger picture of club culture, but they do manage to throw a lot of festivals (see: Sunwaves) with thousands of people that have impeccable sound.
> when you make a comment in CR, also approve the commit. Trust the engineer on the other end to do what is necessary and responsible. If that become a problem, address it then. It seems like the minimum in professional respect.

I agree wholeheartedly with this. One of my biggest pet peeves right now is having PRs delayed from merging because I can't get the required approvals over tiny non-vital changes.

IMO a code review should only ever be rejected / not approved if it a) will bring down prod upon being committed, b) contains easily correctable but serious oversights (bad run time algos, potential NPEs, etc), or c) is built in a way that is not easily transferable / maintainable / goes against establish patterns by the team.

Too many people use CR as a way to gatekeep and show off. I'm all for discussion, possible improvements, exchanging opinions, and learning - but not at the cost of leaving PRs in CR status for days on end.
From what I've seen, yes.

I'm a big fan of ES6 and I haven't been a fan of typed languages for a long time but I'm liking using TypeScript. So are my coworkers.
Signals from Space: A Lemonade Transparency Chronicle
They would have to prove that you actually do. Also it might be the lesser charge regardless, so it's worth it to take the chance.

For example, if there's an email with Holmes talking about how she's about to lie by saying "I don't know" on the following issues that she totally knows about, then if that's discovered, she's going to get charged.

However, that probably doesn't exist, so it's unlikely to otherwise prove that she really does remember.

(Not a lawyer)
Laundry.