skysight-inc/HackerNews huggingface dataset:
We like to talk about, say, the compromise of integrity and/or authenticity, information leak and so on, but they are not only things TLS/HTTPS was prepared for. Indeed, it is often overlooked that we have two kinds of exploitations in this space. I tend to label them as "active" and "passive". One of the best known passive exploitations is a JavaScript injection from ISP---Comcast did it in 2017 [1] for example. They alone are typically harmless or annoying at best, but they are indicative of the real security problem lurking around, and often can evolve into active exploitations.

It might be probably true that APT is a simple service that does not require the full TLS capability. But APT is only prepared for active exploitations. Passive exploitations will effectively compromise the availability, by compromising the integrity in the relatively predictable way. I don't think APT is also prepared for passive exploitations---casual users will be much more prone to them.

[1] https://forums.xfinity.com/t5/Customer-Service/Are-you-aware...
Failing that, remodulate the shield frequencies and generate a tachyon field.
and don’t forget the reverse problem mentioned originally: false negatives.

you can have someone who is a whiz at practical and specific solutions, who thinks critically and analytically and just gets an enormous amount done WELL. And empowers those around them to boot!

they have the reverse problem to speaking about other peolle’s work as their own. instead, they speak of their own work as teamwork.

this effects many great people. also women and poc are particularly likely to do this because they have been socialized to not speak too highly of themselves. “model minority” etc.

if you as an interviewer are already skeptical of what someone says, you will increase false negatives with people who you are asking to verbally “prove” their work and yet have cultural memories of being penalized for “bragging”. they’ll describe a solution and downplay it as challenging or hard because women aren’t likes le when they’re the smartest person in the room, etc.

an interview process should seek to understand many skills: practical, implementation, execution, problem solving, design, high level, communication skills.

a varied process that focuses on a few specific skills, one at a time, is likely to convey the most accurate signal.
> It seems to be a one-way ratchet toward political extremism, because it encourages people to immerse themselves in communities that respond with adulation whenever someone sinks deeper into their ideological wing

It's more nefarious than that. Social media lets you curate not only your message, but who sees and gets to react to your message. Anger is–by far–the most viral emotion. (Second place, if I remember correctly, is awe.) Previously, deploying anger in politics was constrained by the opposition objecting. But if they see your message long after your base has reacted, that's no longer a problem.

In a world with Facebook, if you want to get people to show up to a rally, you piss them off. How? Take exaggerated pot shots at a totem of your enemy.

The irony is all sides are hiring–and friendly with–similar people at similar lobbying and activist engagement shops. But on the ground level, hyper-targeted AE is (a) an effective way to re-position policy priorities (particularly at the state and local levels) and (b) more cost and time effective than traditional door-to-door knocking.
Technology doesn't even need to factor into it.

Wealth creates wealth, regardless of the available gadgets. We are now at a stage where the wealthy have used their wealth to accumulate more and more wealth. And as we speak, they are using that wealth to get more and more and more.

That's the feedback loop.
The most heavily funded "ugly produce" subscription box got all the way through their Shark Tank episode without anyone even bringing this up.
I agree that this would put basically any service in existence into non-compliance.

As a user, I do agree that a "blanket opt in" button/ default checked checkbox is so pointless that it could as well be left out.

A EASILY DIGESTIBLE page explaining what data is stored and how it is used , with an agree button at the end (and separate opt-in for different sets of data/functionality) should be mandatory.

Emphasis on the easily digestible, because we all know that the "terms and contions" pages out there are constructed to be as obtuse and uninformative as possible to make users just skip them.
> beautiful language with inferred [...] a preprocessor that translates back and forth to standard

Most focus is on transforming code for machine consumption (compilation). But underappreciated I think, is that code can also be transformed for humans. Reversibly (editing), and not (analysis). Colorization and outlining are common. Less common are syntax transforms like yours. Fortress-like mathification. Reverse templating and macros. Intensional programming. The idea of a collaborative-compilation environment with an editor-like UI.

So much potential fun. But so little R&D funding. And a discoordinated profession. So decades slide by.
My corporate network used a transparent https man-in-the-middle proxy. That is, transparent as long as you're using a Windows machine that has been configured by the help desk and using applications that utilize the Windows certificate store, which doesn't include git, pip, or npm.

If pip or npm used gpg signing of packages rather than https, this wouldn't be a big deal. But as it stands, it's a nightmare on various Windows systems, Linux boxen, and Docker images to get the code you need.
My experience with professional products is that price does not matter too much. If your customer needs a solution, in many cases they are willing to pay whatever you ask if the price is within a reasonable range. We did some experiments with changing prices and to our surprise there was almost no effect on the quantity we sold.

I would rather recommend to work on a special feature that your competitors do not have. Your product may be inferior, but maybe there is a feature that some potential customers are looking for, but cannot find in other products. This may be more attractive than a really cheap price, which also may raise suspicion if the price is that much lower than the price of competing products.
Also DIN 1451: https://en.wikipedia.org/wiki/DIN_1451
Fascinating read. I am amazed how they have allowed to create monopoly on the back of goverment subsidies.
I'm HACCP Certified: That's an odd interpretation of the law. From the section you're quoting:

"If time only, rather than time in conjunction with temperature, is used as the public health control for a working supply of potentially hazardous food before cooking, or for ready-to-eat potentially hazardous food that is displayed or held for service for immediate consumption"

Many baked goods are not considered "potentially hazardous foods". Things filled or frosted fall into a different grouping, but most plain breads (even those including eggs or butter) are shelf stable for days. They suffer a sever drop in culinary quality (ie; stale) but they don't suffer a drop in culinary safety.

Maybe the guy is extremely risk averse, maybe his area has a very zealous food safety department, but it seems like he's not super interested in trying to make this happen (which is fine, he can spend his time doing whatever he want).
Do you feel like you have enough real estate?

I have a pair of the Dell P series 27/4k screens, and the moment I installed the second one, I wanted more real estate (I run them without scaling).

I have since added a pair of 23" ultrawides below them, but I just can't wait until 55" 8K curved monitors become affordable so I can have the equivalent of a 2x2 grid of 27" 4k monitors and fewer cables to deal with (but I also know I'll want more real estate the moment that gets installed).
Funny you should ask:

https://www.independent.co.uk/news/long_reads/mileva-maric-a...
Perhaps not completely related to this topic, but interesting nonetheless, a small picture into Dijkstra's life from Dutch tv (subtitled in English): https://www.youtube.com/watch?v=RCCigccBzIU
There's also a current and ongoing "discussion" (I say pejoratively) regarding the same issue with VideoLAN. They can't (easily) use HTTPS because they don't control the mirrors. However the package download/update itself is also signed with GPG, thus guaranteeing tamper resistance.

https://twitter.com/videolan/status/1086672630994927616
What's not allowed is pre-checked opt-in. As France mentioned that's not the case for google. Only a default configuration is pre-checked. The opt-in is a separate immediately seen checkbox saying you agree to data usage for personalization etc. Along with a link explaining how to adjust.

Edit: I should say that this approach was deemed acceptable by Swedens dataskyddsmyndighet which is the government regulatory agency and is a common approach in many sites.
> Proving equivalence between programs is not computable (by easy reduction to the halting problem)

It's decidedly not computable for Turing machines (because the input/output space is infinitely large), but you can theoretically compute it for any linear bounded automata.

Certainly not practical for a very large potential input space like the working memory of a PC, but if you can make a trivial enough program to constrain the memory of another and ensure determinism that it is feasibly expensive to verify manually, you can create small LBA and guarantee equivalence to the extent that you verified the constraints checker.
Oh, wow. I'd feel like I was sea sick if I used progressives to code. If you can swing it, I suggest to get a pair of single vision intermediate just for programming. Have someone help you measure the distance from your eyes to the screen when seated comfortable. Bring those numbers to your eye dr. It'll help figure out the best Rx.
5 Telegram Bots for Groups Every Community Manager Should Know About
This is going to be one helluva ride; there's thousands of web site using the same kind of implementation, and a 50M fine does send quite a message.
CNIL itself has "pre-ticked" consent.
CHUMP CHANGE for an outfit as big as Google, their lawyers are all "high fiving" . . . .
Not everybody simply has the option (budget) to buy and eat healthier. I don't totally disagree with your points, but there are tradeoffs here too.
I don't think Forbes Billionaires List is not accurate enough to track wealth changes from year to year as Oxfam does. It can show some trends over several years at best.

https://oxfamilibrary.openrepository.com/bitstream/handle/10...
No, it's a system call, not a wrapper utility. This is for developers, not users or sysadmins.
Some perfectly healthy people can't remember their own lives
As a happily employed person who occasionally interviews for another job, I find coding samples a turn-off.

Why? Two reasons:

- If the coding sample is in a language (or large framework) that I will learn on the job, I don't think I will have any success. Something that's a 20-minute job for one person could be a 5 hour "learning exercise" for me.

- If the sample is something like a bugfix or enhancement where I have to go through the whole process, the time commitment is just too large. I have to come up to speed with new frameworks, conventions, idioms, layouts, designs, which is time consuming. Then, the review process itself may be time consuming, or slow to get feedback if company engineers don't see my work as a priority.

I prefer coding samples that require very little ramp-up and process. Let me use a language that I'm familiar with. (If I will learn a language on the job, let's agree on a language that I and the evaluating engineer are comfortable with.) The coding exercise should be fun, without assuming knowledge of extensive frameworks or processes.

In general, good coding assignments look like a high school coding competition, or a topcoder question.

[Edit]: What I've really liked, in the past, was a company that did a very basic coding sample instead of a phone screening. It took me about 90 minutes to write, and was rather fun.

What I had to do was write a small program that navigated a maze. Navigation occurred by loading parts of the maze through a web service. Other than that, there were no requirements for language, framework, process, ect.

In short, I didn't have to onboard myself, or have extensive domain knowledge, in order to do the exercise.

I find coding exercises that require extensive domain knowledge are only useful when screening subject experts. IE, we're hiring someone who has extensive knowledge in language X with framework Y and design patterns Z. Sometimes teams need domain experts, other times they need experienced engineers who learn the tools on the job.

[Edit 2] The statement "When hiring senior engineers, the company doesn’t choose the candidate, the candidate chooses the company." is very important when choosing a skillset. Part of what sells a job to me is the opportunity to work on a new language, framework, ect. This is why coding assignments that require extensive domain knowledge are, ultimately, a turn-off.
To be fair, all (minimally relevant) social media has been designed with goals to optimise that have nothing to do with the betterment of society - the variables to max out are retention of users, engagement/addiction, etc. A network with positive effects might be feasible, we've literally never tried.
To be clear, the main thrust seems to be this new paper by unrelated authors : http://www.publish.csiro.au/RD/RD18505

Unfortunately, a lot of pesticide research seems to get caught in a strange limbo where each side can't replicate the others results and accuses the other of bad science.
In case it's not clear from the timeline, this is part of a larger project by Audrey Watters, writer of the fantastic Hack Education blog (http://hackeducation.com/).

Teaching Machines is the title of her forthcoming book, to be published by MIT Press.
Oh man the autoplay feature drives me insane
I believe I live in a complex owned by the same company as the Twitter user, and if so, I can answer that.

The owners aren't installing it themselves but going through https://smartrent.com/. As you can see from their homepage, the benefits of the smart home features are aimed at owners/landlords/property managers primarily, with renters' benefits being secondary. Those landlord benefits come from online automation.
I had my eye on it in a couple of places, but I was being very good about not buying another analog monosynth. Towards the end, you could buy a new-in-the-box kit for $899 (and you could probably call and get an additional 15% off). By comparison, when it was announced, list price was $1600, street price was $1200.

Double-checking my memory, Reverb listings from 2017 are showing it selling secondhand for $700-$900.

More recently, the last one that sold on eBay went for $1500+, and the one that's on Reverb now is listed, quite absurdly, for about $2500.

I was in the middle of some really expensive construction at the time, and just didn't have any room for non-essential spending.
It's pretty tough to be optimistic when so much unnecessary death and suffering happens daily to ensure that those 26 people remain extremely wealthy.
wait so now the fucking article summary is now a conversation against the post?

this twitter shit is a fucking terrible presentation medium, additionally
There was a TED talk on this idea a while back, and the answer to when can the oysters be eaten was “around 2050”.

https://www.ted.com/talks/kate_orff_oysters_as_architecture/...
Sidewalk Labs debate needs to be about more than just privacy
You should be aware that the Soviet-Afghan War started as an Afghan Civil War, between the People's Democratic Party of Afghanistan (the ruling Afghani communists) and the Afghani civilian populace who were being brutally repressed under that government. It was that communist government that requested Soviet intervention in Afghanistan; an invitation that the Soviets declined for over a year. It was the opinion of the Soviets that the PDP were being unnecessarily brutal. The first thing the Soviets did when they finally did move into Afghanistan was murder the then current head of the PDP, Hafizullah Amin. Amin had come into power by ordering the murder of the previous communist leader of Afghanistan, Nur Muhammad Taraki, who had also been chastised by the Soviets for brutality.

The key point here is that Afghanistan was already in a civil war before the Soviets entered the country. It was that civil disorder that prompted Taraki to request Soviet intervention. The fighting in Afghanistan did not start with the Soviet 'invasion' of Afghanistan, it started as a response to the Saur Revolution.
They were married in 1994. MSFT was already doing well at that point, but you're looking at a shared price of $2.50 vs $100+ today. So yeah, from a raw numbers point of view, it's not comparable at all.
Big community on reddit about it https://www.reddit.com/r/zerocarb
From a chemical standpoint: butter/eggs mixed with sugar (even if it's cooked) is substantially different and more likely to spoil than butter/egg mixed with flour and cooked.

You should throw out cakes and cream puffs. You can donate bagels and challah bread.
Learn Vanilla JS
Susan G. Komen for the cure. Prevention is so boring.
Informed consent is the bane of any business that relies on dark patterns.
I really like Nuclino personally. It's alot less bloated then a wiki solution.
Here Is How UX Design Integrates with Agile and Scrum
To be honest, I don't think your questions were good enough to filter out the smooth talkers. I was in a senior position at a successful agency and was hired before they changed their interview style to match the eye-rolling "technical interview" that is now gold standard. I repeatedly argued they were getting too many false negatives and only a certain kind of developer with this style, but they believed "if Google and Apple do it, it must be good".

Then I was put in a position to hire backend devs and, even though I couldn't entirely change the format of the interview, I came up with questions I believe could filter out the BS artists/not-yet-good-enough from the talent. And it worked.

Example questions that are truly hard to BS:

1. I want to build a new service that crawls the internet for used bikes and presents them for sale. Roughly sketch out the architecture you would use and how all the parts fit together.

- Why this question is good: it is impossible to successfully answer this question if you don't have experience building systems. Even if you try to BS it, your answer will come off shallow and break under any sort of probing. It also reveals how the dev's mind works when approaching problems.

2. Name your favorite tech stack. What is your favorite thing about it and what is your least favorite thing about it?

- Why this question is good: any dev knows that every tech decision comes with good things and terrible things. I love Python, but GIL, circular imports, shitty deployment/package management, 2.x vs 3.x nonsense all suck. If you haven't been in the trenches, you can't answer this _specifically_... you can only answer it _broadly_. And it's very apparent right away to interviewer.

I had about 4 - 5 of these questions. None of them required a single line of code to be written.
You could quantize these with up to 10% padding and cause a very large number of collisions, but that wouldn't be useful without HTTPS. Is the core argument that privacy is not attainable, or that it is not valuable?
The pubkey is delivered with the CD and signed with gpg, listed on public server.

This is no longer secure then trusting the CA list in the preinstall Windows in pc.
I've heard good things about it as well!
Of course no-one is spying casually on HTTP APT traffic specifically. Nobody is arguing that strawman - nobody here is "living in that world", give me some credit please.

But people spying casually on HTTP traffic in general do exist. People able to spy on HTTP traffic in general casually is one of the main reasons we care about HTTPS in the first place. Even though people can do a targeted content length analysis for nearly all other the stuff we read/watch/download online, too. We still care about HTTPS for all of that. And we should probably care for that with APT too, if only a little bit.
“I Have a Dream” on Wikipedia and Spotify
https://en.wikipedia.org/wiki/I_Have_a_Dream

https://open.spotify.com/track/5PUoEOYCSx6ebj1Erfetli?si=NLMgHgSnRPmMi28Nk5GSGw
When it gets around to it they will just farm it out to them.
Agreed. Seems like the author had enough education on the subject to be able to form an opinion that sounds credible enough, but lacked the capability to hammer the point home.

Sure, many of the points made are valid - work is still ongoing. Progress however, has been staggering. Ignore the whole quantum computer aspect, and you still have condenser matter, nanomanufacturing, optics, material science, modelling, dilution refrigeration, metrology and many other fields that directly benefit from the funding that's going into quantum computing at the moment.
If you need progressive lenses and spend a lot of time in front of a screen do yourself a favor and invest in some "office lenses", preferably "premium" office lenses: https://www.verywellhealth.com/progressive-lenses-3421915

When I first needed progressives I quickly developed severe shoulder pain. I was unconsciously tilting my head up to view the top of the screen through the middle of the lenses. It took two or three years to realize that my shoulder pain was caused my head tilt pinching a nerve in my neck.

"Office" progressive lenses have the middle of the lens focus at screen distance and the bottom of the lens focus at reading distance. Premium lenses are even better in that their region of sharpness is larger. When ordering glasses I also specify how far up on the lens I want the screen distance to be set so it's at my preferred screen distance.

Since I started using office progressives my shoulder pain has vanished.
Oh, awesome! This is the book I learned ray tracing from. The basic math is still very relevant.
MIT tool for non-statisticians that automatically generates models from data
Manchester United urged to sign up Alderweireld and £108m Koulibaly
Expect the attacker can tell the package version in https.
Read the footnote in the article.
GPL can be revoked
#!/usr/bin/env python3
Right! I did think it was interesting that he said this adrenaline rush made it difficult to keep from laughing. It seems completely inappropriate, but makes sense at the same time. "Really, this is happening to me right now?"
My pet peeve is getting a coding assignment with a bug or syntax error or misplaced curly bracket that turns the coding exercise into a trick question. The compiler or editor would catch all that stuff so don't expect me to do it by hand unless you're paying me to work in notepad.
> People railing against anti-scientific attitudes by spouting the first shit they made up that makes some intuitive sense to them about psychology and/or group dynamics.

How is making hypothesis anti-scientific? If anything, it's the basis of science.

What's anti-scientific about flat-earther is how they ignore evidence. This is 100% what we discuss when we talk against flat-earther. Can you show me any comment here that ignore evidence?

You are free to argue anything that's being said here and to show evidence of any of this. This is part of the scientific process and it's alright.
> They are apparently already planning to create some new cities to address this.

Unless they plan to build them somewhere else, I doubt that'll help. Large swathes of the middle east will become completely uninhabitable, quite possibly during our lifetime.
60 Year Downfall of Nuclear Power in the US Has Left a Huge Mess
Yeah, if you are constantly evolving, but those offshoots aren't as effective as the root, evolution is still occurring, and if the environment changes the species will, but if you're at a high level of suitability, you'll remain as you are.