skysight-inc/HackerNews huggingface dataset:
I'd say, don't avoid the gray market. You'll get lower prices, and you probably won't need to use the warranty. It's a net win, if the price drop is good enough. Many popular watches (e.g. JDM or non-USA-market Seikos) are only available gray-market in the USA.
I am not the author, but have you tried AWS config?

https://aws.amazon.com/config/
The rubber bands are a really dangerous catching hazard.

He has great control (lots of practice I expect), but it also seems a longer lever should give greater acceleration - it's not quite hitting it. Hence no clear comparison and obscuring sound effects.

OTOH the story isn't about boots, but tilting at windmills, a perenially relatable theme. There's magic in realising an imagined experience.
I have five websites with hundreds to thousands of users. The first hundred to every website are the poor souls who have to experience the broken interfaces, find the bugs, and eventually leave.

But they are also the most valuable because that lets you scale. Learn why each customer left and fix it. In a few hundred customers you’ll have the next thousand or tens of thousands.
Because that's immoral.

You can get a non-replica Chinese watch.
There are no established risks to health. My fears are based on the hubris of a community that thinks changing a system through its public API is exactly the same as changing that system by flipping variables inside the system, when the system is only partially understood.
Opioid company executives set to go on trial in Boston
Unless you try to sell the watch as real, why would it be immoral?
Is going to HR and saying "Hey, I'm skeptical of these new HR hires, convince me" really a winning move? It seems like a losing one.
Tricking people into buying fake watches is their business model, and it's a violation of copyright and trademark.
I think the question is what prevented Amazon counterfeiters from selling their fake merchandise under the Spanx name on Amazon. But as said above, Spanx may have had the resources to fight this.
Coroutines (unlike async/await) would allow one to wait on an async result without losing the stack which is waiting. This would avoid the need for (often) inscrutable callback state machines (Javascript's version of GOTOS).
Container Runtimes Part 4: Kubernetes Container Runtimes and CRI
In most electric markets in the US, you can’t gain access as a consumer to electricity spot pricing. Consumers and regulators value stability and predictability in power pricing.

Additionally, the system is a lot more stable if a central utility can control these water heaters as a bank of shapeable demand, rather than having each individual device making independent decisions. It’s more efficient for them to give you a periodic rebate for participating in the program and have them manage the details.
As a law prof, I have mixed feelings about this.

- On the one hand, as a piece of legal education, this post is brilliant and lovely.

- On the other hand, I wonder that it is just part of the regrettable tendency in the legal profession as well as the tech industry to take intellectual property as well as funny contractual-esque terms far too seriously.

The exemplar of point (2) is the Crockford clause (along with the discussion in this comment[1]). Nobody in their right mind would litigate this; there's no universe in which "use for good not evil" is actually a legally enforceable constraint. So what harm does it do?

Like seriously. Look at this[2] complaint:

Without a clear definition of “good” and “evil”, people need to seriously consider whether they are safe to use the code – because if the developer and users’ interpretations of the terms differ, there could be hell to pay. Would you want to ship a hardware device – let’s say you’re making a smart TV – and have some developer of a library send his lawyers around to tell you “sorry, TV rots kids’ brains, it’s clearly evil” to get your entire distribution channel shut down by injunction?

No. Just no, no, no. Find me a judge who is going to issue that injunction. Worrying about that is paranoid in a really unhealthy way. But, alas, we lawyers do that all the time, and that kind of worry is contagious, and we've spread it to everyone else, and it's just silly.

I find it really uncomfortable to think that there are people who are seriously like "THIS DOESN'T COUNT AS AN OPEN SOURCE LICENSE BECAUSE IT FORBIDS US FROM DOING EVIL." Like, really? What litigation are you actually imagining? The only way I can ever imagine someone with a Crockford clause actually convincing any court in any non-dysfunctional jurisdiction to award damages for copyright infringement for unauthorized evil use is if the use is so deeply unambiguously evil that copyright liability is by far the least of the unauthorized user's problem. I mean, we're talking about linting the JSON containing the list of the peoples to be genocided level of evil.

And, you know what? If you use JSLint to do a genocide, I hope Crockford does sue you.

[1] https://news.ycombinator.com/item?id=19014052

[2] http://apebox.org/wordpress/rants/456
>Tricking people into buying fake watches is their business model

You know nothing about the business and are just coming up with things

>and it’s a violation of copyright and trademark

I’m not sure that this would make it immoral, and how does this affect the customer anyway? As far as immoral things businesses do this one seems extraordinarily mild, hardly any cause for boycott.

I rather doubt this has anything to do with morals.
It's akin to the issue with traffic, and adding more/wider highways. It doesn't let the existing cars move more freely, it just attracts more.
>we actually know very little about how well two-factor authentication works

Actually we have known literally for years, maybe over a decade, that SMS-based two factor is insecure and prone to phishing... that's the point of TOTP/shared secret based two-factor auth...
Obsolete means to no longer be produced or used... These things are not obsolete.

They aren't cool / widely used but definitely not obsolete if half the worlds financial systems still run on them.
Klub Dengan Pendapatan Tertinggi Musim 2017/18
It should stop where the liberty eroded for anyone is greater than the good provided to someone else. Also, where is the exploitation? Are people locked into contracts and cannot leave their job? Most of these jobs are in states where non-competes are not enforceable.

It's a trade, one person trades their time, knowledge effort and skill, the other trades money and other compensation. As I said, I'm not even anti union. I would rather see a guild around software development over a union though, based on reputation over protecting the bad performers. It could be considered A union, but wouldn't act like a typical union in practice.

If you are more senior, and submit that a junior is ready to move into a journeyman role, your reputation is also at least partially on the line if they cannot do the work, or put in the effort to get there.

No person's wants should ever infringe on another's rights.
And DNS can be easily poisoned. China's GFW does DNS poisoning as the first step of blocking websites.
Ironically there has never been a better time to buy an affordable mechanical watch than now.

Quartz won because the mechanical watches that most people could afford in the 1970s were very inaccurate. A cheap quartz watch was more accurate than any mechanical watch and anybody could afford one by the late 1970s -- although they were very expensive at first.

Affordable mechanical watches on the market today are much more accurate than they used to be, and they are perfectly good for everyday use.
That's good to hear. I stopped going to best buy when every question I had for staff was answered by the staffer reading the card on the shelf. I go to a meat-space store when I don't know what I want and I need knowledgeable salesmen to help me. The BB in my neighborhood never ever had that, so I stopped shopping there.
It's a fact that when buying watches, you have to watch out for fakes, because people pass fake watches off as the real thing.

> I’m not sure that this would make it immoral, and how does this affect the buyer anyway?

It doesn't just affect the buyer. It affects the company being faked.

And it's illegal, so you're helping a criminal enterprise.
What's vidya?
Would this actually be effective or could i tback fire?
I think the point of the article was to spook the non tech crowd into moving away from SMS based 2FA. Obviously the tech crowd has known for a long time but most other people are oblivious to all of this.
Price based on monthly total use is the opposite of surge pricing.

If those wealthy people are happy to pay a 5x or 10x rate, you can use it to install tons of renewables (with batteries). That's not something to complain about.

> Meanwhile, a middle/low-class family would be paying 1.5x the rate to keep the lights on home.

If it's not low, middle, or upper class, who do you imagine is paying the 1x rate?
Sliding Puzzle – Solving Search Problem with Iterative Deepening A*
It might be more of an attempt to scare them than anything.
Yes absolutely this imo. I worked at Saks Fifth Avenue around the time Spanx we’re taking off. It was absolutely about the “lifestyle” and the brand. There might have been competitor and there might have been knockoffs, but they were just that: not Spanx. And that was very important.

I remember one of the top sales girls joking with her clients constantly after Christmas one year about how she’d had too much to drink at the Christmas party and she’d fallen and rolled or something and “next thing I knew my Spanx were hanging out”. And they’d all laugh uproariously as they held several pairs to buy.

It’s this magical sweet spot where they were just expensive enough to be special and “the real deal”. Competition didn’t matter. Price didn’t matter. Spanx mattered. I found it insanely interesting.
Yes, it seems there is a lot of talent left out in the cold. It does seem to be an issue of supply and demand, but the market I am in is starving for senior developers, but swimming in entry level developers. (Good juniors with 1-2 years of experience are hard to find too, but not as hard as senior talent.)

I suspect there will be another winnowing of software development jobs. However, we aren't back at the dot com days when it felt like there was so much demand that hiring standards fell. If anything it feels like hiring standards (match all of these technologies and your experience must have been at scale) are higher than they have been in the past. (Could just be an artifact of the jobs I have applied to in the past vs recently.)
That's fine for cheap watches, but once you get into the $500+ price range you are taking a big risk.

If the watch has problems you'll need to pay out of pocket for repairs, and parts and service can be difficult to obtain for a watch not normally sold in your country.
The reality is quite the opposite.

There are plenty of opportunities here and most of the candidates are grossly incompetent. Many passably competent candidates confuse their status for greatness (Dunning-Kruger). As a result many companies persue visa sponsorship for immigrants at greater expense to supplement their hiring targets.

This level of incompetence should not be a surprise to anybody since software and software hiring are completely unregulated. There are no licensing, certification, or objective standard qualifications to define competence.

If in fact a candidate is objectively better than average they can go where ever they want. For these people the most challenging part of their career is finding a team/product that thinks like they do.
moments was odd. i never saw it promoted on facebook proper, but noticed it was very similar to a startup project i was involved in years ago. was always surprised it wasn't promoted.
Could just be the date of install in UTC as a prefix, the other part randomized on the first of the month... they could still calculate relative drop off, and still get better stats more anonymously.
A Python Popen that does not suck
The article mentions Yubikeys, but it doesn't mention that Yubikeys implement U2F.

The article reports that Google internally switched from TOTP, but doesn't report what Google switched to: U2F.

The article describes, in some detail, how TOTP and SMS two-factor authentication can be phished, but doesn't describe a two-factor authentication method that is quite a bit harder to phish: U2F.

There is a pattern here, and it is puzzling, to say the least.

EDIT: Changed "phish-proof" to a more realistic adjective.
It's a shame they don't mention this only applies to some forms of 2fa. U2f / Fido does the verification both ways. It also authenticates that the url requesting the credentials is the expected one. As long as DNS+TLS did their job, you can't abuse it via a fake login site.
> FAANG - I kind of included similar large companies (Microsoft, LinkedIn, Salesforce, etc)

FAMLANGS
> The site owner (pg) has previously indicated that he encourages downvoting to indicate disagreement.

Do you have a link handy?
Really? They mention YubiKey but it seemed to me like they just lumped it in with less effective SMS 2FA.
Exactly what I thought: Kickstarter
Our citation practices make no sense
That's right, you are -- but with these watches usually the movement is a basic standard one, and a movement swap is a cheap fix.

You're already signing yourself up for that sort of cost, after a few years of wearing.
Is it not possible to capture both the login credentials and TOTP code from a phishing form and submit them to the real service in real time?

It would seem push notification style 2FA ala icloud/gmail/Duo/blizzard is the better solution but that also opens up a vector for users who simply accept every push notification request.

U2F would seem better than both those options but alas that can still be lost or stolen and compromised before access can be revoked.
I still don't understand what I'm seeing. Was this a choose your own adventure Twitter thread?

Edit: Yes, it was. This wasn't immediately obvious since the Thread Reader site strips out all of the polls.
Original Twitter thread is here:
https://twitter.com/vornietom/status/1088883750857887744
I'm not sure "national security" and "without proof, is it a threat" go together. In national security, you make your best estimate, with evidence, but often with less than proof.
Well, with our AMC stubs pass my wife and already pay monthly to see up to three movies a week. We are just as likely or not likely to go see a movie as we are to watch it on Netflix. The cost is just our time either way.
The "risk" he was taking was slight. Given that his goal was to be promoted, the status quo — remaining a line manager on a struggling team — was a failure, rather than being neutral.

Importantly, with the benefit of experience he's now in a position to identify that moving teams was less risky than he'd even assumed. This is not just survivor bias either — in management you aren't rewarded for keeping a floundering team afloat. You need to attach yourself to a team that is making your manager and their managers look good.
>It's a fact that when buying watches, you have to watch out for fakes, because people pass fake watches off as the real thing.

Sure, but I don't think that this makes manufacturing, buying, or selling fakes immoral. Most fake watches are sold to people who know that they're buying a fake watch.

>It affects the company being faked.

I don't believe you. Rolex isn't losing any sales because of fakes.

>And it's illegal, so you're helping a criminal enterprise.

This hardly seems like a real argument. There are many places where it's criminal to get high or be gay.
JS was born a horrible language. It needs to be fixed before it becomes so entrenched that you might write code in it that has to work for decades.
I disagree on JS libraries having a lack of support... I'd say that most current libraries have Promise support (which works for async/await). You even have async generator support, which is pretty damned cool for an alternate I/O interface that's imho cleaner to work with.

Other than that, I do agree, I really like C# a lot and am glad the effort that's been put into making sure Core works cross platform. I still shutter every time I have to work in VS (not Code) though.
We are now in an intermediate hell of Babel and webpack though...the language is cool, but the toolchains are really crazy right now. Someone could dismiss my argument if they got a comfy setup but often times if you're doing even just a little trailblazing you get into some wtf territory. I spent all day this week setting up a karma test cause my node module was failing only in the browser so then I added Babel and karma-webpack, but then regenerator runtime kept giving me errors, then mixing require() and es6 import gave me insanity errors and I almost gave up. Deep googling gave me barely enough clues to get through it...
And here's another one. It introduces maze building ideas in a simple way.

http://www.jamisbuck.org/presentations/rubyconf2011/index.ht...
One could imagine various countries contributing to large open hardware projects and those governments preferring to use specific components that were manufactured 'locally.' That way you theoretically know what a part does, how it works, and you know it was at least not manufactured somewhere that worries you.

I wonder if the cost of local manufacture would just be too high for the economics to work (edit: it would certainly help create jobs anyway)
Fandom wasn't "new" when Eminem wrote the song "Stan" back in whenever it was that I can't be arsed to look-up - far from it, actually. See: The Beatles[0].

I'm guessing they're now called "stans" because, apparently, that allows more letters to fit into a snazzy Twitter post? Fucked if I know or care, nor will I be fucking calling them "stans" because there's already another word in the English language to classify them but fuck grammatics, amiright!?

The piece seems to just be a long complaint, proferring information that the rest of the world already knew; so, I have to wonder what the value-add is? O.k., it's unhealthy. And? What are you saying that adds anything of substantive value, other than the fact that you got in a tiff on Twitter (the trailer-park of the social medias) and that your account got banned?

What - precisely - is unhealthy about fandom? Any studies or reports to support your statement in the recent years? Any suggestions to make it better?

Is there anything substantive to come away with from this "article" - whatsoever?

[0] - https://en.wikipedia.org/wiki/Beatlemania
Good and Inexpensive tools for creating banner ads?
Maybe Costco, I hear they've been doing well.
“严书记”等四川众贪官落马视频曝光 多人落泪腿软
2018年，四川各级纪检监察机关坚持稳中求进工作总基调，把深化监察体制改革牢牢抓在手上，监督、执纪、问责，打虎拍蝇一体推进，反腐力度不减、节奏不变，交出了一份全面从严治党的亮丽成绩单。

2018年，全省纪检监察机关立案30219件、处分28998人;其中，立案审查调查厅局级干部66人、县处级干部984人，严肃查处严春风、青理东、杨跃、许述生、周介铭等严重违纪违法典型案件。
i agree with you. it really reads like Python and seems more explicit from the little i have seen. i wonder how you went about learning it? can you recommend a book? thx.
> LinkedList is almost indistinguishable from an growable array. Since the JS array grows by default, you're covered for the kinds of things you'd want a linked list for (in fact, most older JS implementations actually implemented arrays as linked lists).

Not only they have different performance for various operations (append, prepend, indexing, removal in the middle), but perhaps even more importantly, linked lists can share data if it's immutable. So an array is not a replacement.
Declaring U2F "phish-proof" seems premature at best. It is certainly much better than other existing options, but I wouldn't suspect it to stand up very long at all against a nation state adversary. Feels very much like "air-gapped networks can't be actively infiltrated" before Stuxnet.
I'm not sure that after a month you know enough to really evaluate a language (any language, not just Python). You know the problems and headaches that went away. But you haven't found all the new ones yet...
Entirely off-topic (or maybe not given the nature of like 20% of the comments here), but it's getting seriously annoying how in every thread even tangentially related to programming there are ten or so people (not the same people, not trying to call anyone out) trying to proselytize about functional programming and/or static typing.

They're not panaceas, they're just alternative approaches to programming no worse nor better and they don't need to be brought up in every. Single. Post.
One of the main projects I'm working on is using JSON for a more normalized usage of stored procedures with MS-SQL `method(tokenJSON, inputJSON, out outputJSON, out outerrJSON)`, so using Straight ADO.Net for most calls and responses. I'm not a fan of DB heavy logic, but it has made the API layer super thin and works pretty well.
You're going to respond to the dumb post but not the people that gave sound arguments in favor of the chart's direction?
More leftist propaganda. Protip: Wealth is generated through creating value; not theft.
Local manufacture could still be compromised by employees working for foreign governments, compromised suppliers, parts or finished goods being intercepted or modified during shipment, etc.
And yet ES6 exists. If the community wanted, it could do the same with the standard library.
Grabbing both, thanks!
Results based work is the most profitable approach, if you are good at your job.
I'm not sure about now, but in the past every time I touched Java projects, it just seemed really wonky as well. I see a lot of that carries to the "enterprise" side of both areas. But will say C# was much easier to get a grasp of both with and without tooling for me.

NuGet, I'm still not sure of either, but at least it mostly works transparently. Though I haven't actually tried publishing anything to it, only consumed. npm seems to have the least resistance imho, for good and bad results alike.
Left out of the charts, is the entire 19th century up until 1913. Under a regime of NO income tax, the United States moved from a rural, agrarian society to the worlds leader in oil, steel, autos, airplanes, radios, telephones etc. Immigrants, like my grandmother, who arrived penniless in 1911, flocked to the country. But that was before we became
'progressive'.
Note raptorjit is a fork of luajit.
Week two was definitely worse than week one as people got lulled into complacency I think. I walk through the city every week day during commute time, and the first week was surprisingly light of traffic, and the crowds for the bus were visibly larger. Last week, bus crowds still seemed large but suddenly traffic through downtown was very backed up.
Async/await has a logical stack that is distinct from the physical stack(s). Quality tooling would show you said logical stack instead of a mish-mash of physical stacks from different async functions that happen to be intermingled on the current thread. Example:

https://blogs.msdn.microsoft.com/devops/2013/07/01/debugging...

So you don't need to deal with "inscrutable callback state machines" anymore so than you need to deal with the assembly labels and jumps that your for-loop compiles into.
I’ve avoided any serious JavaScript development for years because of crap like this except when absolutely necessary. I’ve learned it well enough to get pass “full stack developer” interviews, but as soon as I get hired, I get migrated to the back end.

I’m just now putting the finishing touches on my first Node/Express microservice for production. I’m putting off front end development for another year or so.
worth noting it was huawei employee got investigated for spying, not huawei itself.
If you take an existing design and plop it underground while ignoring cost, maybe.

For getting the most safety per dollar, probably not.