skysight-inc/HackerNews huggingface dataset:
It sounds like an Internet equivalent of a Nielsen box?
I still live here. Yes, we need a severe and sustained crackdown to change the dynamics in this city. But some things are harder to undo than others, and major investments like facial recognition would live on indefinitely even if/when crime declined.

Having said that, the San Francisco government has demonstrated beyond all doubt that they are incapable of carrying out even basic functions, let alone implementing a brand new, cutting edge facial recognition system. So a law like this is pointless to begin with.
It's mostly built in for Pixel: it warns about spam calls under the caller ID and allows you to report spam. In addition, there's the new call screening functionality [1] (which also now works on the Pixel 2).

[1]: https://www.digitaltrends.com/mobile/google-call-screening-h...
Would customers give the money if it were not labeled a "tip"? No. Is it a tip? No. Does Instacart gain something of value from this deception? Yes.

That is textbook fraud.
Galois (finite) fields are very much relevant in error correction codes and cryptography.
Any time you want to manipulate bytes (or words) as numbers which you can add/subtract and multiply/divide you end up learning about finite fields. In fact, doing CRC or even XOR sums you are already making the first step towards the topic.

A recent problem I needed a solution for: given n blocks of data of equal length generate all possible XOR sums of the blocks in-place (no additional memory). The answer is an irreducible polynomial of degree n with a primitive root over GF(2).
Uber/UberEats drivers get 100% of every tip, that is completely outside the equation for their pay.
The issue was opened 11 Apr 2017, and closed today.
Yeah the whole idea of parimutuel betting is that there is no "bookie" and that you are betting against the other gamblers. No central entity is taking a side in the bets. This makes sense when you realize that the central entity is, for example, the State of Kentucky. Do you want a bureaucrat making millions of dollars in bets on behalf of taxpayers? Probably not. Instead, let's just collect all the bets from race fans, take out say 5% for the state, and then pay out to the fans holding tickets for the winning horse (forget about exotics like exactas and trifectas to keep things simple, but the idea is the same). That way, we don't need to have handicapping experts set odds in order to ensure the state makes money. Instead, it's all simple math that can easily be audited and still guarantees a profit. The side-effect of this is obviously that you can't know the final odds until the last ticket has been sold at post time.
Reusable Time Travel with React Hooks and Immer
I like the idea... except for neodynium magnets anywhere near electronics.
Until someone manages to open source the ME of various CPU chips tools like this don't offer much more than a cushion against basic surveillance. I can only imagine the shitstorm that is to follow when someone finally leaks it.
It's probably the case that there are no scientists besides maybe Einstein (E = mc^2) and Newton (apple falling from the tree -> gravity) that the general public would be able to identify by name and refer to one thing that very roughly approximates what they did.

Who knows though, given the public's enthusiasm for modern tech and its stars (Jobs, Musk, Gates, Bezos, etc.) maybe one day scientists' work might make a "Casey's Top 40"-like popular countdown if presented the right way!

Till then there's always Epic Rap Battles of History, here's Einstein vs. Hawking (120 million views):
https://www.youtube.com/watch?v=zn7-fVtT16k
Or advocate for disabling the ability for your web browser to run 3rd party code just by clicking a link.

Google is not trustworthy because between Chrome and Search they have too much of a stake in the eventual outcome of anything that could replace URLs. Any system that eventually does replace URIs should be able to tell me at a glance: is it http, ftp or a local file? Is there a TLS cert? What is the domain of the server I am accessing? Approximately where in the site directory am I?

I simply don’t trust browsers or sites which try to obscure what is actually useful information because some UX guru told them it was unnecessary. If anything, I want URLs with even more information. Which version of “http” is in use would be a nice start at this point.
Scientists release press releases claiming to solve cancer (and Alzheimer's, etc) every day, sadly. It's spam. We should not only ignore a single study's press release, but even a single study's paper.
Ask HN: What are your go-to checklists?
People use checklists all the time. What are some examples of checklists that you find extremely helpful/useful?
https://igurublog.wordpress.com/2014/04/03/tso-and-linus-and...

Yet just two days ago, we see Linus Torvalds (the creator of Linux and maintainer of the Linux kernel), launching into a tirade against – yes, you guessed it – systemd developers because of their atrocious response to a bug in systemd that is crashing the kernel and preventing it from being debugged. Linus is so upset with systemd developer Kay Sievers (gee, where I have heard that name before – oh, that’s right, he’s the moron who refused to fix udev problems) that Linus is threatening to refuse any further contributions from this Red Hat developer, not just because of this bug, but because of a pattern of this behavior – a problem for Kay because Red Hat is also foaming at the mouth to have their kernel-based, no doubt bug- and security-flaw-ridden D-Bus implementation included in our kernels. Other developers were so peeved that they suggested simply triggering a kernel panic and halting the system when systemd is so much as detected in use.

The key phrase there is:

a bug in systemd that is crashing the kernel and preventing it from being debugged

Honestly though when you get Linus flaming your behavior you're doing something really wrong.
What about variational homoencoders tho? See https://arxiv.org/abs/1807.08919
If the app is hard coded it shouldn't trust another cert. Note though that browsers, like Chrome, ignore cert pinning if the cert chains up to a locally trusted CA. So the answer is more "It Depends".

> Chrome does not perform pin validation when the certificate chain chains up to a private trust anchor. A key result of this policy is that private trust anchors can be used to proxy (or MITM) connections, even to pinned sites. “Data loss prevention” appliances, firewalls, content filters, and malware can use this feature to defeat the protections of key pinning.

http://www.chromium.org/Home/chromium-security/security-faq#...

EDIT: Spaced on the fact this is a phone app. While Chrome on Windows ignores certificate pins, I'm unsure if this also applies to Android / iOS root stores as well.
This is actually a great comparison, because I think both boil down to (a lack of?) informed consent. I think there's nothing inherently wrong with selling all your data for $20 a month. If you know exactly what you're doing.

Very likely the kid didn't understand exactly all the risks and wasn't informed when selling his kidney. And I would guess it's the same thing for a lot of kids signing up for this facebook thingy thinking "free $20 a month? Let's fucking goooooooo!"

But I honestly feel just as creeped out by apple dictating what people can install on their phones and what they can't.
Of course. Facebook doesn't have an app store like Google or Apple. You think Apple isn't using usage data from the app store to figure out where to invest resources? Apple is essentially stifling competition on their platform. Facebook's entire business relies on the success of its apps, which are at the mercy of Apple and Google's policies despite being competitiors in message, video, etc.

Facebook paying for this data makes sense, and I see nothing wrong here.
Because the majority of people that report bugs are most likely customers who don't know how to do something with their device.

Whilst that doesn't excuse people from providing positive customer service, it certainly contributes.
Why React Suspense Will Be a Game Changer
Yep, exactly. I started using Instacart when it first came out. It was very convenient. But then I started to see more stories about how the company was changing the compensation structure. It got so bad that the delivery people were leaving flyers in the bags, made by that person, explaining how Instacart was basically screwing them.

I haven't used Instacart since then.
Jesus Christ, how do they get these titles? do the people posting even read the damn article?
Google continuing to undermine the founding principles of the web for that sweet sweet ad revenue, a very minor part of the actual web experaince for a dwindling population of ad clickers. Digging a hole straight down sugarcoated with BS and delusion.
I wonder if a party at the remote end of the traffic that Facebook is monitoring could have valid grounds for damages against Facebook.
Reasonable action here would be to threaten to pull the affected apps off the store if Facebook doesn't react within a few weeks. I am very confident that Facebook would not take the amount of bad press this would create. Apple has a lot of leverage here, they don't need to just ban facebook apps outright.
All you need is a little slit on the bottom of the phone that you can insert the smartcard into. It doesn't even have to go in all the way, just enough to get the contacts touching.
If you think this is predatory, what about the even higher late fees imposed by landlords?

27 percent sounds like a lot but it is about 2 percent per month. On a $1000 rent, that's $20. Late fees are much higher than that.
It does not. Kustomize only generates the manifests. Typically you'd use a GitOps-driven CD application (ArgoCD, Weave Flux) to create/change/delete resources.
Well, this is the final straw for me. Facebook has been so repugnant lately that it's time to delete my account. Does anyone here recommend an alternative? Right now I'm considering Mastodon and MeWe.

EDIT: I ultimately went with MeWe because it's more user-friendly to non-tech people i.e. most of my relatives.
Well your parents surely would be pretty involved with that, if their 12 year old son needs a ride down to the bank. It's not something that's going to be slipping under their noses.
Gravitational blog posts[1] I've participated in are generally in these topic areas. Any more specific requests?

[1] https://gravitational.com/blog/
A friend of mine mentioned they got that email but we're not sure what specific cert it was for. I told him he must have missed that part of the email. Is there any chance you are sending those emails out without specifically identifying what certificate the email is for?
Information Theory, Inference, and Learning Algorithms (2005) [pdf]
Organ selling isn't illegal because organs are valuable.
That is genius!
They added a visual diff/merge tool for Blueprints in Engine version 4.7 (See "Blueprint Merge Tool" here: https://docs.unrealengine.com/en-us/Support/Builds/ReleaseNo...)
This is basically the argument for removing the minimum wage entirely. Some money is better than no money, right? I'd prefer not to live in that dystopia.

Or we can just make it very clear that companies that engage in outright wage theft should be put out of business, so no other business ever tries it in the future.
Amazing writeup, well done!
React hooks PR has been merged to master
Rediculous. This is not too dissimilar to claiming that reddit or facebook is profiteering of their users as they submit the content.

"If you create content for free&for fun because you can afford to, there is always the possibility that this content will be used instead of content created by paid creators. It's up to volunteer creators to realize if&how much their work hurts paid creators."

Well, I guess it's time to stop posting to reddit or facebook and time they employed professional content creators...
Apple Was Slow to Act on FaceTime Bug That Allows Spying on iPhones
dang, that was quick
I know people make a big deal out of availability, but I personally don't usually mind that much when things go offline. I'm sure it could cause serious problems in specific situations though
> many programmers, who like things to be orderly, see CSS as arbitrary and chaotic.

It is arbitrary and chaotic. It breaks the principle of least astonishment.
The funny part is you always have those people that show up and say that we are "too hard" on Facebook, and that the NYTimes is just pushing too much and that it's just bad PR, not really bad actions.
And yet, after all this bad PR, Facebook keeps being a shitty company.
Duh ;). FB isn't the only one... So many do this, your head would spin twice and it wouldn't even hurt. People need to see the bigger picture. FB is just one example.
> I can't figure out how to turn off that built in one

I don't see the facebook container to be built-in. I have only the multi-account container extension installed, and I can make any website to open by default in the container I have created for facebook.

I think, you will have to uninstall/disable the facebook-container extension, and just have the multi-account container extension enabled.

FB container - https://addons.mozilla.org/en-US/firefox/addon/facebook-cont...

Multi-account container - https://addons.mozilla.org/en-US/firefox/addon/multi-account...
If it is available, it will be used. Either within stretched legal frameworks, or through illegal surveillance.

Not that we can do much about it. It is going to happen eventually .
This is easier to do if it's anonymous, in general. One I've seen is hand out decks of cards, have people put in a card, and if there isn't consensus on moving forward, things stop.

https://retromat.org/en/?id=130 is an example of this. Trust is the most important thing about teamwork imo.
I for one want criminals apprehended. This is more of the typical San Francisco hoopla.
How is this any different than how TV ratings are gathered?
An Inhabitant of Carcosa
It is worse then a blacklist.

Blacklist is easy to understand, as long as we trust Google (lots of us don't) everything would be fine.

With ML, not even Google have a full picture of what's going on.
Tip pooling/sharing is different in a few significant ways, though.

First, restaurant staff always know ahead of time if they have to share tips.

And their hourly compensation, as ridiculously low as it may be, is never adjusted to compensate for higher than normal tips.

And, finally, in most restaurants the tip pool is also split up with bussers, bartenders, and hosts who don't always make tips of their own, but still contribute to the overall experience.
It’s always so difficult to discuss issues like this due to a limitation of English. In particular the words “they” and “want” are far too ambiguous.
You're entirely correct. I'm just using that point to highlight that where I live right now, it's expected that I brag about how successful I am (like someone applying to YC 120), but some people could be uncomfortable with this because a BMW in a small town attracts the wrong kind of attention.

It's a big change of culture to to want to draw attention to your success rather than drawing attention away from it.
And so that is the point. If documents are not exchanged fairly a continuance can be issued without ever getting to court first and wasting the systems time.

If not saying the idea was perfect. I talked to 30 lawyers in different parts of the world to help hash out the idea. Mixed thoughts from them. I think I still have all the notes.

My point here was to Share an idea because I’m not doing this project anymore (way back early 2007) and maybe someone else can execute better etc
>"What we’re really talking about is changing the way site identity is presented," Stark told WIRED. "People should know easily what site they’re on, and they shouldn’t be confused into thinking they’re on another site. It shouldn’t take advanced knowledge of how the internet works to figure that out."

> And while URLs may not be going anywhere anytime soon, Stark emphasizes that there is more in the works on how to get users to focus on important parts of URLs and to refine how Chrome presents them.

I read that as "Google is working on decoupling site identity and navigation from URLs."
The actual tax burden has basically gone opposite of what you imply in your many messages. The top 10% paid 49% of taxes in 1980 and the bottom 50% paid 7% of income taxes. In 2015, the top 10% paid paid 70% of incomes taxes and the bottom 50% paid 3%. (http://www.ntu.org/foundation/page/who-pays-income-taxes) The "top marginal rate" means very little by itself. What matters is the effective rate which takes into account the credits/deductions that are allowed, the other lower marginal tax rates, etc.

Confiscatory high tax rates just result in politically connected groups getting tax breaks, lots of money spent in less productive ways to avoid the high rates and if those can't be done you get dead weight losses from economic activity that isn't done. There is a reason countries moved away from confiscatory high rates.
Security Engineering – A Guide to Building Dependable Distributed Systems (2008)
Zocdoc will start charging a patient fee despite objections from some providers
I mean, I don't think apple is reading the TLS encrypted data of the applications they host.
I disagree. It’s a pretty equal symbiotic relationship IMO. I keep reading people saying “NO other developer would ever get away with this!” Yes they would- if they had 2.2 billion active users on their platform. This may shock a lot in the tech community, but for some companies the rules don’t apply. Ask Procter and Gamble why Wal-Mart gets better prices than a local grocery. I truly believe Apple needs Facebook at least as much as Facebook needs Apple.
How so? The web package comes from the real source you see. The only reason Google needed to serve the content from its own domain is because of security and limitation of content delivery. But with this, they can serve you a "package" that's identical to what you get from the source.
Regardless of whether Facebook was also trying to deceive users specifically—which we'll never know—they likely wanted to deceive Apple. I'm not going to blame any developer for attempting to bypass Apple's stupid restrictions.

Using intermediaries also allowed Facebook to technically not violate Apple's enterprise certificate contract (because the intermediaries were in violation instead).
Ok, so bad for everyone involved. So what the takeaway here? How do you protect yourself as a small business owner from this type of risk?
No, you're not. I travel a lot in Asia and never had any problems with Apple Maps. It's been my main navigation system for more than a year.

The only complaint I might have is absence of certain venues/places that GoogleMap has, but this is something I can live with, putting privacy first.
Eventually they just want to whitelist the "good" sites and make it harder to access small independent sites, further centralizing the web and getting more tools to censor content.

Imagine that they would make it hard to access a small competitor to Gmail or restrict a website that has news they don't like.
Unfortunately the management culture at NASA, something Richard Feynman also criticized, did not change. This lead to managers ignoring engineers' warnings about the foam strikes on Columbia, and also rejecting requests for high resolution images.

Linda Ham, the manager who rejected these requests left the space shuttle program after the Columbia disaster and was moved to other positions at NASA.
https://en.wikipedia.org/wiki/Linda_Ham#Columbia_disaster_an...
Are we talking about an idea or ideals? As an idea, FB is monstrously successful.
> GPU databases are brilliant for cases where the working set can live entirely within the GPU's memory.

Probably true for current computer software. But there are numerous algorithms that allow groups of nodes to work together on database-joins, even if they don't fit in one node.

Consider Table A (1000 rows), and Table B (1,000,000 rows). Lets say you want to compute A Join B, but B doesn't fit in your memory (lets say you only have room for 5000 rows). Well, you can split Table B into 250 pieces, each with 4000-rows.

TableA (1000 rows) + TableB (4000 rows) is 5000 rows, which fits in memory. :-)

You then compute A join B[0:4000], then A join B[4000:8000], etc. etc. In fact, all 250 of these joins can be done in parallel.

----------

As such, its theoretically possible to perform database joins on parallel systems, even if they don't fit into any particular node's RAM.
In theory if you outbid all the advertisers you could more or less achieve this. But I’ve read some reports saying that users are worth on average something like 50 bucks a quarter, and have users would be worth way more, so it would be pricey.
WIRED published a (relatively positive!) article last fall entitled "Google Wants to Kill the URL": https://www.wired.com/story/google-wants-to-kill-the-url/ I'm interpreting the title as a reference to that.

And the relevance is that AMP shows its own fake-URL bar, and Google could choose to "kill the URL" by trusting https://www.google.com/amp/ with not-URL overrides. (But, they could do that presently and trust themselves with URL overrides.)
I see these comment sections get somewhat rowdy and negative. Anyone care to comment on the other side of things?

Are there any "it may be down, but it is up quite often and saves us heaps of time and labor, totally worth the occasional outage" type experiences?

We're considering G Suite and O365 soon.
They've been running wild with "KILLING THE URL" for some time now. Put it right next to "Google murdering ad blockers" and "Google decapitating hangouts classic".

Is there any unbiased article out there going over the proposals?
Lawyer Sues Apple Over FaceTime Bug Eavesdropping on Client Chat
Warning Everything Is Going Deep: ‘The Age of Surveillance Capitalism’
I agree that the first two points are significant, but I don't think they're particularly relevant to the viewpoint "as a tipper, I feel I'm being defrauded when this happens".

The third point is also correct, but in that case I think it supports the idea that the tipper is being defrauded when it happens.
You could do this quite simply by requesting trusted apps to be identified by Named Information (ni:// or nih://) URIs (see https://tools.ietf.org/html/rfc6920 ) using a digest algorithm of sufficient strength. But the ability to "seamlessly" replace web apps is something that many websites would insist on, I think. Of course ni:// and nih:// can be applied to documents as well. They work on the IPFS model, where you enter some digest of the desired content as your URI (it's actually a URN, not a URL!) and then it's the user agent's job to fetch it from wherever, perhaps in a decentralized way.
Thanks for the reply. I do see how you could have honed a knack for picking out particular tells like those, that knowledge isn't going to be immediately obvious to most consumers.
you are actually protected by the browser's sandbox... this analogy does not address the fact that you add another party that tricks you with the removal of url and that is Google
Flying taxis are making progress, one minute at a time
How are they able to pay or contract with users under the age of 18? Or do they get parental consent. Not sure how that works. Referring to the 20/month, I assume under 18.
> In a similar vein, economic dependence limits the pressure the US and other western countries can put on China in the name of Chinese human rights.

Serious question, what pressure does the US currently put on China in the name of Chinese human rights?
>It is standard (though not universal) practice for restaurant staff to pool and divide tips, which would appear to be the same thing from a defrauding-the-tipper perspective.

In that case at least the staff get your tip. In this case Instacart is taking it for themselves.