skysight-inc/HackerNews huggingface dataset:
The redeeming feature about OAUTH, like pretty much anything security related, is that if you don’t give people a standard to follow then you are probably going to end up with something that is insecure and poorly implemented.

A lot of people just don’t have the background to do good security work, and when you try to explain why a short lived credential is good, or why we can’t have a plain text password embedded in the git repo, their eyes glaze over and you lose them. So it’s much easier to just dictate it will be a tls connection and you’ll use OAUTH, and then they go download a library and everything is good.

Where I ran into problems is with using OAUTH for federated user logins. I did a proof of concept with Facebook, then after a couple hours they decided I was a robot and that was that - account closed, no recourse. Luckily that happened before I had a large user base using it - I don’t know what you do if Facebook decides your a robot and suddenly 50,000 people can’t authenticate to your site, guess you learn something. A week later most of the other sites decided I was a robot and terminated my accounts. Google is the only site that didn’t. (Which is good because I have a decade of e-mail and photos I’d hate to lose)
1. 0.3 * 0.97 = 2.91

2. I don't think the author is trying to make it sound big, but they could have worded it differently. I think the author is making two points:

> a. 3% of all downstream traffic is file-sharing traffic.
> b. 97% of file sharing traffic is bittorrent.
I finished the sentence you've truncated on the assumption that the government would choose the option of allowing write-offs rather than the investment-killing theoretical option of not doing so. But that approach radically shapes investment decisions too: capital will be allocated to riskier projects when the government takes 70% of a good year's return on capital but allows capital owners to write off years of losses against it than when the equivalent tax rate is 15% or 20% of a good year's return on capital. Sometimes that might actually be a good thing for the economy, but either way the effects are a lot more complex than the government simply earning higher revenue.
that is the ideal path, but sadly most things indicate the system prefers the opposite path, especially if we look at "responsible disclosure" where the contributor is expected to give a centralized temporary secrecy agency advance warning, and we blindly have to trust them not to weaponize what essentially amounts to an endless stream of 0days (or trust them not to turn a selective blind eye to malicious exfiltration of these 0days)
Agreed, sensationalist and inaccurate title. I find that when publications or blogs with massive readership do this, it reflects poorly on their potentially valid argument and editorship. A better title might be "Oracle purposely underpays minorities"
Inverting facial recognition models
One of my biggest fears with this line of rhetoric: Extreme is a relative descriptor.

From the blog post:

I am not for the emerging progressive Robin Hood narrative. I am certainly not for the entrenched conservative Let Them Eat Cake narrative. I am for a new narrative that understands that everything must change if we are to find ways to support everyone in our society.

As far as I can tell, all societies have some form of redistribution as well as some form of Pareto distribution. This is because the Pareto distribution just appears everywhere in the same way the Normal distribution appears everywhere. However, the social instincts of Homo sapiens operate on a relative basis. Social unrest can well be brought about from relative poverty. Evidence indicates that crime is strongly correlated with relative poverty, not absolute poverty.

https://www.youtube.com/watch?v=M3XYHPAwBzE

Calling Pareto outcomes "immoral" is insanity. It's ideology denying historical and scientific facts. However, denying the social effects of relative poverty is also ideology denying historical and scientific facts. We do need a new narrative, or perhaps an old narrative updated for today. (We need to stop the squeezing of "everyone" pastimes for luxury profits.) Great wealth is only stable in a society where people feel the rising tide lifting all boats. In any case, a narrative that vilifies entire groups of people is the last thing we need in 2019.
Wonderful work, Rohan! I love it when tech and charity come together like this.

My questions:

1) Is there any assistance that your service can provide to students who have student loan debt, particularly those from predatory private institutions?

2) Have you had any conversations with the group, RIP Medical Debt? They have a similar goal of helping those in need, they've abolished $120 million in medical debt for about 60,000 Americans(https://www.ripmedicaldebt.org/about/). I think it would be great for you to connect, even if it's just to be on each other's radar.
Distributed Phoenix Chat Using Redis PubSub
USA.... you have liberal kartels everywhere
Does anyone know if they fixed the automatic brightness adjustment that you can't turn off? I have 5th and 6th gen XPS 13s and they both have this awful "feature" where the display readjusts brightness based on how dark/light the colors on the screen are. It's really obnoxious to scroll over a gif on twitter and have your brightness start cycling up and down with the image. Or to highlight a line of code in a text editor and see the screen noticeably dim.

Everything else about these machines is great, but this is a complete show stopper for me. I would happily upgrade to a brand new $2500+ machine, but only if this is fixed.
That was the case with the 2016 and 2017 models of 13" MBP w/touch bar - the right side had reduced PCI Express bandwidth. The 2018 model has full bandwidth on all ports.
> The package manager could run the package's test suite, for instance, and warn you if the tests don't all pass

That's what CPAN does by default. It provides assurance, as well as invaluable real-environment test results back to package maintainers.
The onboarding process of Pipelines is very smooth once you manage to sort the OAuth/account stuff out. And they actually have helpful docs to boot.
Sure for some people this is important but many people purchase loads of clothing online as well as glasses. For me, not being able to try it on vs. not having to goto a shopping center is a tradeoff I usually accept with a smile. Luckily the market can still provide solutions for both options. I believe Warby Parker is continuing to build more brick and mortar stores.
Blocking advertisements when you have a trial version of Spotify is tantamount to stealing. Understandable.

I wonder where this leaves me, a paying user, who has blacklisted all outbound connections to ad/tracker hosts.
> If the person who felt compelled to spend $800 because they actually did not think they had any other option then they are living under a rock

...or they have really bad astigmatism.

Those lenses are not cheap and are usually excluded from 2-for-1 deals and other sales. Short of Lasik (which itself cannot always correct it) there really is no other option.

> being scammed by their optometrist

They also do that when it comes to frames, and it's really obvious.

The cheap/covered-by-insurance rack is usually a single rack in the back of the store, nondescript, and only mentioned if asked about.

After an eye exam the clerk will run your insurance, see what the coverage limit is, and guide you straight to a designer rack at an appropriate price point (unless you express interest in something more upsellable).
Also, how is this a monocle, if I'm able to buy a full pair?
Ok, let me put this from another viewpoint. (I do not work for/endorse Oracle.)

Every year, hundreds of thousands of Asian students (~90% Indian and Chinese) flock to US universities for grad studies. They work hard, get a good GPA and want to continue their stay here. When they apply for jobs, the pool is very very limited because not all companies want to carry the burden of VISA/lawyers/immigration etc.

Oracle is one of the handful of big firms that feed on such students. They have the capital and resources to carry the immigration burden. And they hire students in bulk. I personally know a lot of students-turned-Oracle employees from all major universities.

At that point, the students just want to stay in the US legally, salary takes a backseat. They know the fact that if they can stay for long, money will eventually come.
I ran across a great quote that sums up the situation.

...functionality is an asset, but code is a liability.

http://widgetsandshit.com/teddziuba/2010/10/taco-bell-progra...

Don't know if the OP came up with it himself, but he is now a candidate for the California State Senate.
Tylenol (acetaminophen) is probably a pretty good example. They both seem pretty safe in reasonable situations (a slight difference in prescription value, a couple hundred extra MG dose) but can be hugely problematic at greater levels (lethal/permanent liver damage or completely unable to see anything with a terrible prescription)
A community of experienced technologists. Veterans of successful ventures can skip many mistakes due to experience.
Something i feel isn't easy to discuss are the possible downsides and tradeoffs of the job. As someone not in the "core product team" of the company its easy to feel left out of the cool kids club. We all want to make cool new things. I have had to constantly remind myself that my value is not best expressed in building stuff in private and in closed source, and its ok to not be involved at every stage of every product initiative in the company.
I learned you can't assume anything when you buy an expensive set of noise-canceling headphones and then spend an international flight with two people behind you prattling. It just made their conversation clearer.

Also nearly jumped out of my seat in a terminal when a gate announcement was made. Guy across from me pulled out his IEM and said "you know airports increased the volumes on their announcements because people wearing headphones were missing their flights?"

IEMs - best invention ever. Can't wait for adblock glasses.
When package names change, or don't exist any more, it requires human intervention even when the rest of the update process is automatic. This is the difference between `apt-get upgrade` and `apt-get dist-upgrade`. All you're really doing by putting off the update in that case is compressing all the little bits of human intervention you'd have been doing during every update, into one big push.
These sorts of comments feel to me like they're part of a concerning trend for middle-class and upper-middle-class folks to fail to empathize with the needs of the working-class and below. "The world would be richer and brighter if Walmart never existed" is a value statement on the relative importance of ethical business practices versus being able to buy a pack of ramen noodles for 19 cents versus 40.

And the really dangerous part of this trend is when it gets codified into law. It's most obvious in zoning, where often times the kind of quality concessions that are necessary for building cheap housing that is barely acceptable is made illegal. Zoning that excludes single-room occupancy units, minimum road setbacks, lot width minimums, bedroom size minimums, etc - all things necessary for making things that poor people can afford, but a lack of empathy and awareness of affordability side of these tradeoffs makes a naive upper-middle-class person support grossly classist policies.
Unless I'm misinterpreting, this apparently includes the people whose job it is to make the sausages (i.e. Okta).
It's the 2016/2017 versions of the tbMBP 13". My understanding is that the the right-hand side have all the same capabilities as the left-hand side, but lower PCIe bandwidth.

It's definitely confusing and a bit frustrating that it's different if you're in a scenario where the bandwidth matters, but at least it's just numbers rather than devices outright not working.
I may be missing something fundamental here, but I'm not sure what that post has to do with Russia or propaganda. You say it's obvious they didn't die last week, but it wasn't obvious to me upon reading - perhaps because I'm not American. But if there's no date in the text, maybe your mum just didn't remember the original event, thought some soldiers had died, and she would be honouring them with some copypasta?

I guess I don't see a need for a conspiracy, Russian or otherwise, to get people re-sharing posts on Facebook that explicitly say "if you don't reshare this you're a bad person".
ok here's one of the depressing ones.

When I was on the DoE grant, the place I was working for was applying for a biology DARPA grant (different office from the DARPA grant that I was on later, that was in CS). At the time, Arathi Prabahukar was the DARPA chief and it was being whispered that she was very much grooming one of the "meta-PMs" (I don't know what to call it, but a head of a group of program managers) to a key part of her administration and possibly even her successor someday.

So there I was, at the head of the research institute's very nice mansion overlooking the La Jolla shoreline and we were throwing a party for the DARPA PM to try to, uh, nudge the person towards funding the project, basically currying favor. I guess us plebs (postdocs) were invited because it was necessary to show off that we did indeed have some smart people around.

Anyways, we didn't get the grant. Around that time, though, a friend and I were enjoying a bit of postdoc-schadenfreude following several science controversies (through retraction watch and pubpeer) and a huge fight broke out over a story that is now called "stripey nanoparticles". In short, a postdoc at MIT was asked to repro some results in the lab and couldn't and was convinced (and made very convincing arguments) that the previous PhD student's work was entirely an instrument artefact. This postdoc was then abused, retaliated against, and railroaded by the Principal Investigator (MIT Professor). Suddenly I noticed that the PhD student's who produced the unreproducible work name was familiar -- it was the DARPA head PM! The head PM's PhD thesis was basically all junk. Really I don't mean to criticize the PM, for this, in particular there should have been more guidance from the MIT professor. But the point is that DARPA just looks at the person and says 'hey, PhD from MIT, must be smart'. There's no deep review.

So we were taking bets on how long the head PM would last, and it was about two or three years before the PM disappeared quietly from DARPA activities. I think eventually the furor around stripey nanoparticles got to be so bad that politically the PM's career in the government was effectively iced.

I was curious as to what the PM is doing now, and it turns out that - no joke - CTO at a microfluidics-based medical diagnostics company.
Walmart wanted to charge me $180-240 just to replace lenses in my frames. Even without a brand name it's still expensive!
It seems to me that everyone is trying to normalize terminology and job titles instead of normalizing skills and disciplines. Why not read a book or follow a tutorial? Anyone can learn CSS from zero to expert in a week. Instead we spend time giving ourselves a new title that is just the right mix of accurate and ego-stroking.
It depends on the vendor. Warby Parker, for example, requires you to scan/upload the prescription given by your doctor, which obviously has a date on it. I guess it's always possible to just edit out or change the date on it though.
One word: Costco. The hearing aids alone pay for decades of membership fees.
my wife is an optometrist.

it's amazing the stuff she finds. she's found brain tumors and literally saved people's lives by referring them early to a neuro-ophthalmologist when they came in just to update their prescription. many latent systemic problems are also clearly visible in the eye: hypertension, diabetes, etc.
I think the point is that in a genuinely rich country (as opposed to a country where 0.3% are rich and 99.7% are fooled into thinking they could be if they just worked harder) the state income from taxes are sufficient to properly fund public infrastructure such as buses to the point where taking the bus is something you find yourself doing equally often as driving no matter what your income is.
Maybe the parent uses jmps for coroutine style programming?
Where would you go? Asking as a Silicon Valley person looking for a place that’s a step less Silicon Valley, but not quite middle America.
The US is not even a member of CERN.
We also use travis + a monorepo and yeah TRAVIS_COMMIT_RANGE is broken. We end up just tagging successful master builds and generating our commit range off of that.

But yeah, so much of it is flaky, and the pricing is noncompetitive. Our current iteration has travis's docker client tunneling to an ec2-based docker server; it's both cheaper and faster and will hopefully make it easier to rip out Travis in the future.
Well I sincerely wish they pull it off (not just cosmetically of course, but in a way that prevents all tax avoidance) but I also sincerely doubt they can.
They are not comparable to RAII, see my comment above. Even the fact it has to bifurcate into defer and errdefer suggests that it lacks the generality to replace a totalizing resource management solution.
Millions and Billions – Celebrating Patrons, Creators, and Major Milestones
Has anyone been able to find the link on the Canadian site?
Pursuing Nerd Quality Over Nerd Quantity
I'm not sure how long you've been a JavaScript dev or how senior you are, so forgive me if this sounds condescending. For what it's worth, I'm genuinely not trying to be condescending.

As I matured into the profession, I went through stages of dependency. In the beginning, I wanted to build everything myself because I was learning. In retrospect, this was a good choice because I was way too green to pick a dependency and at least I knew my own code was crap. Then, I reached a place where I wanted to stand on everyone's shoulders - I agreed that any code I had to write myself was code I had to maintain myself.

Lately, I see all the grey in between those two points. I'd sooner not try to reinvent React because that would take me an obscenely long time. But, for more trivial things like left-pad or escape-string-regex, I've discovered that it's cheaper to implement and maintain it myself than to go through all the steps to vet a new dependency.

There's a strange place in this industry where rolling your own solution is cheaper in the long run.
Thank you Balero, I hear your words.

Only see this your comment now, long time after.

But Thank You for taking your time to help me seeing those things, really.

Cheers and wish you all the good in the universe!

Thank you!
What bioRxiv’s first 30,000 preprints reveal about biologists
It's almost entirely the more in-depth stuff. For example, differences I find annoying include seeing raw ajax values, re-runnning those queries, and how Chrome can't select individual log levels to view in the console.

On top of that, various parts of Firebug's console UI was better than either one's current console, mainly in how it displayed data.
I am not sure what you mean by "fails algorithmically," but I do know functional code that performs no (logical) mutations is often dependent on a really smart compiler to do "the right thing" (e.g. convert tail recursion to iteration, re-use memory, etc..).

A "functional" quick-sort in C++ that is also performant sounds like a hard challenge. In this case I am no purest -- I'll use a mutating version -- I suppose that is why Common Lisp provides a destructive version of sort.

If you do create a non-destructive quick sort, you get reentrancy for free so it is easily parallelizable. Writing concurrent routines using non-mutating code (as Carmack says) is much easier to get right.
One of my friends (white female) is a long time Oracle employee. Oracle systemically underpays "underrepresented people." She ended up finding out she was making 40-50% less than new interns were getting out of college. And was underpaid compared to her male peers with less responsibility and impact.

She ended up getting a raise and additional stock to make up for it, after her VP got involved to rectify the situation. Her boss was like "whatever."

So imagine if white women are underpaid - it is a lot worse for people for color.
Yes, it's an incredibly complex topic. Most people without a strong background in finance pick up their education on the topic from oversimplified source, such as:

- their family/friends' opinions,

- Wikipedia,

- documentaries,

- movies like The Big Short

To be frank, unless someone has spent a significant amount of time doing hard research on the topic or is a professional in the industry, they shouldn't assign any confidence to their opinions about what caused the crisis. They can agree it's bad and shouldn't happen again, but beyond that most message board conversation is simultaneously prescriptive, uncritical and conflicting.

In this particular case, we're seeing people talk about the topic who are evidently unfamiliar with the legitimate use of risk pooling in finance. It's rather too complicated to be summarized in a few paragraphs on HN.
Traditionally the valley has clearly been the best place to start companies. Many VCs still believe its the best place today. Hard to say if that's true, you won't really know till companies that are started today end up growing and succeeding. That takes about 10 years to play out, so in 2029 we'll have a good idea of where the succesful startups came from. I'm going to go ahead and guess that a larger percentage of them will come from outside of the valley. There is more VC funding outside the valley than before, great startup knowledge is available via books, classes, techstars outside of the valley. Due to cost of living talent has moved outside of the valley. So yeah definitely expect to see more startups succeed outside than has been the case historically.
My girlfriend's worked in the eyecare industry for over 10 years now in just about every aspect of the industry. Cheap lenscrafter type places, respectable optometrists, opthamologists and the factories where they make glasses.

Just about everything is bullshit. The expensive brand name frames come from the same place as the cheap ones and cost the same, around $5-$10 for the store to purchase. Frames are marked up typically 200-300%.

Stuff like anti-reflective coating should not be charged extra. Most lenses are made from plastic with this built in.

Also, lenses take about 30 minutes to make on small CNC routers, which many places have in house and are usually made by the opticians working there in those cases.

While working for some of the shadier places, my girlfriend was told to straight up lie to customers(not patients....they don't think of the people that come in as patients) about what they needed to get them to spend more.

My recommendation would be to avoid opticians and chain type optometrists, they just want your money and they have no problem lying to get it.

The whole industry is ridiculously corrupt.
Just a clarifying point:

Optometrists are different from Ophthalmologists. Ophthalmologists are medical doctors (i.e. they have an MD), optometrists are not. Optometry also involves post-graduate training, and results in an OD (Doctorate of Optometry).

In the type of store you're talking about, it's much more likely you'll see an optometrist, not an ophthalmologist.