skysight-inc/HackerNews huggingface dataset:
No, I usually generate a new username per site with a script if a username is required. Either that or use a name generator to pick a random Firstname_Lastname username.

(It's not actually 'Fuck You,' but something similar and I do sometimes change it up with a few different simple phrase answers. I did own an 88 Cutlass Supreme [worst car I ever owned], but it wasn't my first car.)

Maybe that should be a security question, "what the worst car you've ever owned?," now THAT'S easy to remember all the times you're stranded on the side of the road, stalling in the middle of heavy traffic, and all the repair bills.

Problem with "other password approach" is "I just put a bunch of random characters in there" becomes a valid response to an overseas customer service rep if you're talking on the phone.

EDIT: Ok, any English word or phrase would work for "other password" just fine. I guess after idk how many years of trying to use the "secret questions" as intended I just get angry every time I see them.
One hack around is to search the author on Youtube. You will usually find a 5-10 min interview during the book tour where the author has to distill the book into quick soundbites. You can then decide if the book is worth reading. For more complex topics on physics, biology you'll often find an hour long talk which covers all the material in the book. At 1.5x speed on Youtube you can
save a lot of time screening out BS.
Most of the Product related articles you see on medium or on internet are mostly ideas or advice.

There are very few "rubber meets the road" kind of resources.
Seems like a heavily volatile way to store your "net worth."
The entire security model of the PSTN is just broken. It's not just SS7, it's stingrays, caller id, robocalls, porting numbers, etc, etc. It's time to deprecate the entire system.
Everything2 is still around.
> Uh, I thought everyone does.

I thought no-one does!

:-)
Thanks. Moderating HN has taught me that most of what looks like trolling is unintentional.

Most of us consider our comments to be individual statements; we don't think of them as roots of the next possible subthread. But that's actually what matters for discussion quality.
Elon announces that Tesla will not patent it’s tech (2014)
Show HN: I built a todo-list/messaging hybrid
Veridian Dynamics
They are not far-right or alt-right but they continually show sympathies with such ideas, and defend the same status quo that the right-wing wants to support. They are continually invited and supported by right-wing speakers. It's not as though these people are exactly centrists, and even if they were, there's a reason for a left-wing individual to critique them too.

>Charles Murray

Is a member of a right-wing think tank and the serious criticism of his work often alleges him of using scientific racism. Is it a far stretch to say that a proponent of scientific racism is himself a racist? Is it wrong to denounce people on such matters? Perhaps the critique can stretch beyond the mere empirical validity of the results and into the philosophy of what the authors are arguing. These methodological issues are in the purview of critical theory too.

>his also leads to a self-fulfilling prophecy where speakers presenting their ideas find themselves shunned by group X, and supported by group anti-X.

I'm skeptical of the idea that the only reason why such people are supported by anti-X is because they have been shunned by X.
I think it really depends... I don't know that there is a perfect strategy here, but even reducing to a 5-minute token with refresh, I'm not sure the 5 minute window is that bad. And if it is, there are more serious issues at play.

One of the advantages of JWT, especially with public/private key signing is that you can verify a token without a potentially long network/service request or lookup adding latency to every API request. And if one API passes down to internal APIs it's even more of an impact.

In the end, pick your poison, but if you want to expire them, may as well generate an identifier as a token/cookie and lookup against Redis, or another session database/table for the identifier itself. Having the data in the payload doesn't do much good if you're validating against another service for every request anyway. If you want broader replication Cassandra or a similar database with nodes for replication near each server could help mitigate things, again no need to include the JWT payload in the token at that point though.

Using hooks to propagate revocations is almost worse, because it's fragile and may see misses in practice.
In the decision allowing states to make out of state sellers collect tax, the Supreme Court said that a state could only do so if it wasn't unduly burdensome on interstate commerce.

They did not give precise rules for what qualified, but did mention that South Dakota (the state involved in the case) was part of the SST project as being an important factor in South Dakota's law not being burdensome.

The general opinion I've seen has been that if a state joins SST, sets thresholds similar to South Dakota's, and does not make their law retroactive, it will almost certainly pass muster.

My guess is that this will bring most of the states into SST. That gets them safe tax collection right away. If they go it alone, they risk merchants making the state prove in court first that their particular law is not burdensome.
When Facebook exploits a child who has bad parents, there are two roots to the problem. If facebook thinks children with bad parents are fair game (they obviously do) then they are deeply immoral.
I called it last thread (https://news.ycombinator.com/item?id=19038328), but I'm legit impressed Apple went through with it.

This might open the floodgates for Apple to shut down even more certs.
I feel less vengeful satisfaction from this one, but I respect that they're applying their rules consistently. I just hope it doesn't backfire. On a totally personal level, I'd rather Facebook feel the hurt for its audacity than Apple be forced to backtrack because they made too many enemies.
If you use entr in non-interactive scripts, make sure to use the -n flag to avoid weird lock-ups:

https://bitbucket.org/eradman/entr/pull-requests/10/add-n-op...
Finding Kafka’s throughput limit in Dropbox infrastructure
Do CDs beat inflation? At times at least, I think they have failed to do so. (My dad called them "certificates of depreciation" for a reason.)
I don't want to pass judgment on whether Google (or in the previous case, Facebook) was in the wrong, but it doesn't sit well with me that Apple wields so much power on what software their phones can run after it sells them. You may very well think that they're using their power sparingly and benevolently, but who is to say that will be the case next time around?
You should diversify. Have some money in a 401k, and an IRA or brokerage account invested in a whole market fund mostly, with a smaller amount in bonds. Buy a house.
I've heard it makes Kotlin integration a pain also if you are ever planning on that. If your Kotlin code depends on Java lombok classes, the compiler fails. Most people probably don't have this concern, but IMHO a mixed Kotlin-Java project is better than any of the current 'data class' libraries available for Java (Lombok, Immutables, Joda-Beans, AutoValue) ... ymmv, and I'm eager to see what comes of the "data classes in java proposal".

https://cr.openjdk.java.net/~briangoetz/amber/datum.html
Geez, that would suggest a massive amount of noise or deliberate jamming on either or both 315 and 433.92 MHz, a mass delusion or something like helium wrecking the clock circuit. We should send Dave from EEVblog and Thunderf00t to investigate. ;)
Might be a silly question, but what is "the TFA"? Googling didn't help me.
Reminds me of Bill Hicks.

"...He’s going for that anti-marketing dollar. That’s a good market. He’s very smart."
Actually, per capita, the US is worse

Time to get up
Would you accept a job at a startup if they didn't let you know exactly how many share you would receive and have that in the contract?
Not sure if you spotted the links in the post itself, but there's a working (basic) proof of concept here: https://github.com/vimist/packet_differential_encoding

Boyan commented on the post itself suggesting applying coding & modulation theory, which I thought was an interesting point.
The attack described is two-part:

1. The criminals launch a phishing campaign against you specifically to get your bank username and password.
This is defensible, although the harder step, by being vigilant, not clicking links, regularly changing your password, ensuring your password is unique so they won't be able to find it on a database of another breached web service, etc.

2. They intercept your SMS-based 2FA.
This is not possible if you are not using SMS-based 2FA. Switch to a more secure method of 2FA, or communicate your concerns to your bank if none is available (really, make it public, because this is a big deal), or switch banks.

I believe there are things you can do to defend yourself, although having to do these things is clearly not ideal. Hopefully just knowing about it will improve a person's defensive posture against such types of attacks.

Edit: formatting (for anyone who's ever wondered: https://news.ycombinator.com/formatdoc)
> Implicitly, whether something is paywalled or not is already included in that judgment.

No, it's not.

If those of us who despise this could downvote the article, then your statement would be correct.
You might find this post by Jamie Wong interesting: http://jamie-wong.com/2016/08/05/webgl-fluid-simulation/

Doesn't seem to work on mobile though
This is a joke, right? It's hard to tell because online Musk fans often give off the air of a new cult member, where everything the leader says is true, and any criticism is false.

Finance is a 'new science'? Maybe if you're building trading algorithms, but that's not what a CFO does. And the thing about not wanting to work long hours is ridiculous when that's what every CPA is doing during tax, audit and earnings seasons.
Also https://blog.racket-lang.org/
Not all cars. Audi certainly doesn’t.
How do you keep the interviews on the DL? The few times I've moved positions it's been a nightmare trying to keep my current boss from figuring it out.
It’s an unfortunate symptom of our times that we need to spell out every argument in minute detail, lest someone will do a bad-faith hack job willfully misunderstanding it.
Bay Area’s Reality Distortion Field Is Reflected in Startup Funding
I had high hopes for /r/ProductManagement/, but it's not very active. That said, here are a few of my favorite product management resources:
- https://medium.com/@johnpcutler
- https://www.productplan.com/blog/
- http://firstround.com/review/
- https://www.kennorton.com/
>Bush voters got what they wanted. Nader and Stein voters did not.

And had Nader voters voted for Gore, they would not have gotten what they wanted either had Gore won. They voted Nader because they did not want Gore.

The only thing I can take away from your comment is that if your candidate lost, you wanted the wrong thing.

>As far as registered Dems voting habitually R.. yeah, that happens, you should see the south.

I do - and I see more Dems responsible for Bush than Nader voters.
Stocks for inflation, bonds for deflation.
how big is your project? what's your test suite run time? I honestly think unit test purity is very worthwhile if you have a large project. It means the difference between a 1 build time vs a 6 minute build time.
Has anyone noticed how few "Who's Hiring?" posts are looking for PMs. In an avg month with nearly 1000 comments, I see maybe 10-15 instances of the word "Product Manager"
Be careful when storing data. Flat earth data could be deleted :) it violates community guidelines lol
Reading this article made me really frustrated. As an individual I can't do much about government sanctioned surveillance but at least I'd have hoped that people such as Stroud that worked for US intelligence would have a stronger moral compass than what the article describes.

She was comfortable targeting human rights activists (such as Ahmed Mansoor who are working hard to make a positive change in the world) on behalf of a country with a horrible track record of human rights / etc. But she felt "sick to her stomach" when these targeted individuals were US citizens? How can she justify that citizenship is the differentiator between what's right and wrong?

> Stroud said her background as an intelligence operative made her comfortable with human rights targets as long as they weren’t Americans.

> Prominent Emirati activist Ahmed Mansoor, given the code name Egret, was another target, former Raven operatives say. For years, Mansoor publicly criticized the country’s war in Yemen, treatment of migrant workers and detention of political opponents.

> Mansoor was convicted in a secret trial in 2017 of damaging the country’s unity and sentenced to 10 years in jail. He is now held in solitary confinement, his health declining, a person familiar with the matter said.

> She found the work exhilarating. “It was incredible because there weren’t these limitations like there was at the NSA. There wasn’t that bullshit red tape,” she said. “I feel like we did a lot of good work on counterterrorism.”

> “I was sick to my stomach,” she said. “It kind of hit me at that macro level realizing there was a whole category for U.S. persons on this program.”
I generalize this to saying "have N+1 replicas, where N is the number of simultaneous failures you want to survive". I'm perfectly happy having my .emacs backed up in 1 place, GitHub. If all my computers and GitHub lose data at the exact same time, I will just make new key bindings. The same might not hold true for your family heirlooms or company's invoices or whatever. Just make the right decision for your application, and don't trust any one system too much.

I also feel like adding, replication is less likely to work correctly the more abstract it tries to be. Compare hardware RAID (pretends to the rest of the computer that there is one disk instead of two) to application-level replication (don't return success until the document has been written successfully to 3 nodes). That first one never works correctly, because there's so much that can go wrong and so little you can do to fix it. The on-disk format depends on some random firmware that is treated as disposable by the manufacturer of your motherboard; with no documentation or source code to be had. The second one pretty much always works because it's simple, and when it breaks, you can just examine the content of each node and figure out what went wrong, because you designed it and it's as simple as it can possibly be. (If you want to not store 3 copies of your data, you add your own Reed-Solomon coding to the data you write, and pick the ratio of data size to lost chunks to suit your needs. That's what RAID-5 is, just abstracted over an entire POSIX filesystem and hundreds of thousands of lines of code with no unit tests.)

I would never use RAID again, as I consider the complexity too high for the benefits. Treat filesystems and disks as disposable and transient; don't try to build a filesystem that's durable.
Problem with that is "I just put a bunch of random characters in there" becomes a valid response to an overseas customer service rep if you're talking on the phone.
Big companies should be treated the same way as small developers. I'm glad Apple applies the rules to everyone :-)
The barriers to switch jobs (tech interviews) are so high that people who are willing to switch may not be able to. This reduces their negotiating power in asking for raises.
There's a good practical look into how this works in Martin Vigo's talk.[0]

0: https://media.ccc.de/v/35c3-9383-compromising_online_account...
This is already possible even in vanilla C:

Friday Q&A 2013-08-02: Type-Safe Scalars with Single-Field Structs

https://mikeash.com/pyblog/friday-qa-2013-08-02-type-safe-sc...
sound like a war declaration who follows? amazon, miscrosoft...
> Nowadays people get told that if they think they’ve figured out something about gravity, they’re probably a crackpot. Instead, they should wait for very large government-funded programs full of well-credentialled people to make incremental advances.

Maybe we approach limit of human cognitive abilities and another Newton is not possible for current problems? Maybe to find a cure for cancer you need to spend 10k hours studying biology, 10k studying chemistry, 10k studying machine learning and then spend 100k hours on the problem, which it's not possible for a human being.
Amazon Web Services reports 45 percent jump in revenue in the fourth quarter
Positive PR hit for Apple vs minor inconvenience for competitor/client...easy decision by Apple.
In the case of Facebook, there's no judgement or moral side to take. They broke the rules Apple set when allowing Facebook to be in the App Store and use internal enterprise certificates. Objectively, Apple's behavior was fair.
Indeed! We spent some time running isolated benchmarks before deciding to dive into the project: https://github.com/jordanlewis/exectoy
Xiaomi announces $90 Android Go budget phone
Huh for sure? I could see it on Amazon around $20-40. But yeah I got pretty lucky, cost me $5 or $10 or something along with some other Mac programming books from that era. Aww yeah :)
Pros and cons of joining Nutanix vs. Cohesity as a senior programmer
The backstory is that I have offers from both of these companies - Nutanix does primary storage and hyperconverged, Cohesity does secondary storage and backups and what not. But I have zero insight into how the two companies stack up in terms of culture, work-life balance, and overall as employers. I have not heard any reliable reviews so far, hence the question.
Isn't everyone here presumed to be living in the US, or at least the Anglosphere? North Koreans can't be worrying about the latest JavaScript hotness.

(I don't live in a rich, English speaking country, but I can pretend so)
> it doesn't sit well with me that Apple yields so much power on what software their phones can run after it sells them

At the end of the day, you can compile and run anything on your machine. This is just regulating distribution. Given the specific breaches at hand by Facebook and Google, a balance seems to have been found (acceptable to most users) between freedom and security.
It may not start the car, but will it at least let you put the car in neutral?

The poster a couple levels up said people where paying full towing price to have cars moved 5m. If you can put the car in neutral you should be able to push it that far yourself.
A related discussion from last year: https://news.ycombinator.com/item?id=17674944.
I shocked and surprised that Apple went this route. At least they’re enforcing the rules consistently. My company uses enterprise certs for internal beta/QA builds and I’d hate to see Apple change this program to make things harder for those who have been following the rules.
real-estate. Although may that is the same concept as hoarding gold.
I'm surprised this one hasn't been posted yet, because it can be a huge signal:

- Is there a plan for a liquidity event? or

- Does the company have a liquidity event target?

And some follow-ups, if so:

- What date is it planned for?

- What are the conditions the company is planning around?

It's important to know what a startup's goals are. Some exist purely for a liquidity event down the road, while others want to "change the world," etc. Taking a job with a startup that was targeting liquidity in a year or two means you have to balance your offer very carefully and understand your compensation package.
I think their problem is in calling electricians. Wrong specialty..
You buy an iPhone knowing full well that Apple has this control, and for many people is the reason they buy their iPhone.

So far they have used the power sparingly, at the end of the day it could have been a cute cat app and did nothing wrong but it still broke Apple's terms that these companies agreed to and Apple acted accordingly.
Unless Google takes action against Apple.
I know what cryptocurrencies are. I should have been more specific than "Other than hoarding gold" to include other volatile commodities.
There are different schools of ethics, of course, but utility counts for something.

500k dead Iraqis on account of how that election swung. You sure showed us Democrats.
Phone number hijacking is a real problem, especially with cell phones, and thieves use it as part of an overall identity (and retirement fund) theft approach.

For those who didn't catch it, that's a somewhat "famous" phone number.

In the 80s, there was a song by that name: "867-5309 (Jenny)" by the band Tommy Tutone. https://en.wikipedia.org/wiki/867-5309/Jenny

Neat tip: you can use your area code + this number in almost any system that asks for a phone number (especially useful supermarket "loyalty" customer tracking systems). If they ask for a name, just tell them "Jenny".
My model of it:

It will cost $500 to ditch Apple and replace them; there’s a 10% chance I will have to switch before I’d make my next purchase anyway; and Apple has to date saved me over $50 in frustration via their control of the ecosystem.

So I’m willing to ride it out and see what happens.
Operationally, every major tech company has some sort of mechanism for removing software it doesn't like from end-users' devices. Apple, Google (with Google Play Protect), and Microsoft (with Windows Update).

If you don't, we end up going back to the Blaster worm days of 2003, where software gets installed and regular people don't know how to get rid of it.
The progressive secular government was the one under Mosaddegh. Though Reza was the Shah at the time, he did not have the tyrannical power until after the US backed coup, and that period is the pro-west regime I mention.
I always have trouble finding books that describe the "internals" of some technologies I want to learn in a decent and technical way. Some O'reilly books do a good job when they work with the actual people that invented the tools but there are many more out there that don't have good books on that.
there was a spinoff professional networking/mentoring group whose name is escaping me at the moment, but she can find such resources via women in product: https://www.womenpm.org

yc’s ffc ( https://blog.ycombinator.com/?s=ffc ) is also useful for the more entrepreurially minded.
Spotify Sued by IP Company Which Claims Streamer Infringed Yahoo Patents
>I don't want to pass judgment on whether Google (or in the previous case, Facebook) was in the wrong

I'll do it for you: both Facebook and Google were crystal clear violations. Like, not anywhere close to the intended use case for Enterprise distribution
>RTL-SDR

Specifically, $27ish dollars shipped, and basically the cheapest still reasonable way to get into SDRs. Receive only though, so while you can explore the spectrum below about 1.9ish GHz, you can't play with it
No. They pulled in both other intelligence agency officers and more traditional civilian subject matter experts. Results were mixed with strong opinions on both sides. Check out the Human Terrain projects http://ssi.armywarcollege.edu/pdffiles/pub1308.pdf