skysight-inc/HackerNews huggingface dataset:
I've been using Slackware as my primary OS for a few years now (even my work computer runs it). In retrospect, Slackware fits the article's mentality remarkably well; instead of the approach taken by most Linux distros (where everything is neatly and tightly integrated with a dependency-resolving package manager and dependency-resolving init system and all that jazz), I instead work with a system that sure, maybe some of the pieces don't fit together perfectly, but they're readily adaptable to all sorts of different situations. It's a less fragile system specifically because it's built around accepting the components for what they are instead of trying to patch them to "perfection". And of course, the conservative component choices certainly help, too.
We were paying around $100/user/year for our around 300 users.
Correct, as 2019 just started. But, even if it was 2018 then that is not far.
2018 MacBook Air: A Recalcitrant's Review
It's a better source than you provided.
Ok, I’ll be that guy... here we go:

The world is like a ride in an amusement park, and when you choose to go on it you think it's real because that's how powerful our minds are. The ride goes up and down, around and around, it has thrills and chills, and it's very brightly colored, and it's very loud, and it's fun for a while. Many people have been on the ride a long time, and they begin to wonder, "Hey, is this real, or is this just a ride?" And other people have remembered, and they come back to us and say, "Hey, don't worry; don't be afraid, ever, because this is just a ride." And we … kill those people. "Shut him up! I've got a lot invested in this ride, shut him up! Look at my furrows of worry, look at my big bank account, and my family. This has to be real." It's just a ride. But we always kill the good guys who try and tell us that, you ever notice that? And let the demons run amok … But it doesn't matter, because it's just a ride. And we can change it any time we want. It's only a choice. No effort, no work, no job, no savings of money. Just a simple choice, right now, between fear and love. The eyes of fear want you to put bigger locks on your doors, buy guns, close yourself off. The eyes of love instead see all of us as one. Here's what we can do to change the world, right now, to a better ride. Take all that money we spend on weapons and defenses each year and instead spend it feeding and clothing and educating the poor of the world, which it would pay for many times over, not one human being excluded, and we could explore space, together, both inner and outer, forever, in peace.
First Silicon for Photonics Startup with Darpa Roots
Just look at Unreal Engine's blueprints. You can code an entire game in visual programming without writing a single line of C++. And it will perform really well as it gets compiled down in production.
I'm frankly not that surprised that in this day and political/social media age that a teen would think that tweeting @foxnews is a viable way to get breaking news out.
I wonder how they're going to re-enable it. Can they disable group FaceTime only for people who aren't on the latest iOS version once it's patched?
Not too pick on PMs or MBAs, but everything described as "bad" here is terminology from those world, not UX design. Aside from the fact that UX literally has the word user in it, this is not the language I ever hear fellow designers use except when adopting business-oriented terms in business contexts. Most of the time those I talk to simply say "people." People looking for X, people trying to do Y.

This is sematic nitpicking while simply reiterating "human centered design" talking points.

There's nothing necessarily wrong here but it feels like standard Medium fluff.
> Have a look at the heading under "Gruppe." It's the formula of the element's oxide.

According to the Periodic Videos video (linked from another comment), the reason those are there is to justify splitting the list of elements into rows in those particular places. The reasoning today is to do with eletron shells (I'm not a chemist but I presume that electron shells are also the root cause of those formulae) but at the time periodic table was created electrons hadn't yet been discovered!
You realize that you can still tip, without all of us living under this broken system, right?
But as soon as someone 1099's you, you're out of luck. Found this out the hard way when I got 1099'd by a startup I was working for in 2017. The IRS has a mechanism on the Federal level to fix things enough to avoid the higher tax burden, but WA state explicitly requires a W2 from an employer for even the most basic of unemployment benefits (the determination letter from the IRS apparently doesn't count).
AHAH, I'm rich now, I bought shares this Monday (lot's of them, for what money I had), because I know no matter what happens (Apple hit on point their revised estimate of $84B), their stock was completely under-appreciated.

I'm going to sell this when the new iPhones come out next September, because it's always the same game every year.

People, it's free money, don't believe me?

https://www.youtube.com/watch?v=wwHlKbfX_0Y

This video was made last year!
As someone who has studied science extensively (geology, geochemistry, microbiology) there is nothing wrong with this and I find it refreshing.

There is no such thing as "settled science" and whenever you see that phrase you should become immediately skeptical. It's a dangerous term that is an imminent threat to scientific progress. Think about all of the "settled science" that has been upended across human history.
This is the only book I've read in a single sitting. I started at about 5p one day, and finished about 7am the next day. I seriously couldn't put it down. What's great about this book vs. a book like "Takedown" is the author doesn't pretend that he's a mastermind for being able to track down a criminal. He is quite humble and candid telling the story. I read the book probabaly 20 years ago, but one candid incident still pops into my head occasionally and always makes me smile. It's the time when his shoes were wet, but he had to meet with an FBI agent, so he put them in the microwave to dry, when the FBI agent arrived, he asked if there was a tire factory near by. Kinda sticks with me as there used to be a rubber factory near where I lived that had a pretty bad smell.
Yeah, "remember to keep these two files in sync by hand" is the opposite of simple. Like c++ header files, without the benefit of a compiler that will complain at you when you get it wrong.
They do if they want accurate comparison of growth. Otherwise you're just measuring inflation by proxy.

A lot of companies are actually flat when you adjust for inflation.
> We include tips in the calculation so that you can get a more accurate picture of what your earnings will be after completing the batch.

> Tips have always been included in our calculation of earnings and it helps provide a reminder to customers that you are providing a valuable service.

Being fed garbage like that is pretty insulting, though it's interesting to see how far they're willing to stretch logic to try to put a positive spin on it. I mean, "we reduce your earnings so you can feel useful"? Man, logic broke right there.
A tipped employee must receive at least the tipped minimum wage before considering tips, and the normal minimum wage after considering tips. The only adjustment an employer is allowed to make is to increase an employee's base wage if the base wage + tips is less than the normal minimum wage. In no case can the base wage be less than the tipped minimum wage.

The people delivering here are "contractors", not employees, so this doesn't actually apply to them; what Instacart is doing here is merely reprehensible, as opposed to illegal.
And the mods remove it if it's posted on negative news.

Wait, you thought HackerNews was impartial?

Brb getting banned and blacklisted.
What a confusing post.
Using `Git worktree` to have multiple branches checked out at once
This is an outrage. I used instacart for awhile and eventually stopped - it just became too expensive. I would always waive the service fee when possible and tip the driver in cash. Glad I did - now knowing they use it to deny living wages.
Does Uber use Salesforce? I’m asking because I’m saying no way with all the work their engineering team does, custom this and custom that. I know there is a random blog on the internet that says they did in 2016 but I think the source is wrong. They have smart people and a need for big data quickly, throwing money at enterprise Salesforce just seems backwards to how I see them work. I think it’s cool they push technology and would love to know what the politics of that is like internally and how the higher ups trust the engineers vision.
Many people are willing to work for minimum wage, so I'm not sure I understand your question.

He didn't actually get 80 cents an hour, but he also didn't get the wage+tip he expected. Instead, Instacart got tipped, and he effectively got the regular wage. I hope!
Hey, I really enjoy the imperial system (besides fahrenhiet). It gets more fun when you get beyond yards and pounds and into stones, hundredweight, and imperial tons and rods, chords, and furlongs.
You’re being down voted for saying, especially, “we can choose to live differently, to be kind to each other”.

You do have to be careful with that sort of language, we have a bit of a history of nailing people to trees or shooting them for suggesting such things.

Edit: fixed a word.
Same. I just tried to cancel my membership but the link isn't working. I contacted customer service to get a working URL and I will report back here when I receive it.
Instacart, a YCombinator funded company pays their workers $0.80 cents an hour.
>The win would be a scientific publication that takes science seriously.

I agree that there is a winning option for the editors (to do a good job), there just isn't one for Thiel after the editors have done a bad job.

I think Thiel purposely set out to fund a "maverick" journal that published things that other people weren't. If you're doing that you can't just pick whoever is the most successful today to edit it - so, you will probably have a few nutters in the system. The no-win situation arises once the nutters get together and make a bad decision. Do you let them make a bad decision, or break the veil of independence?

If the financial backers were allowed to decide what is serious science and what isn't, I'm willing to bet that their version of "tobacco cures heart disease" will be the serious science while "leaded gasoline is a public health crisis" will be pushed aside.
I don't mean the downloadable thing, I mean the online thing that runs in the browser.
Yes, he made a mistake, it's not HackerNews fault, it's every single mainstream media outlet out there.

You'll see things like "flagging iPhone sales", "failing iPhone sales", "post-iPhone era", "iPhone sales slump", etc. etc. etc.

You'll start to believe that.
Well perhaps it's mathematics that could benefit from an update to its representation. Mathematical symbols have evolved over hundreds of years and aren't really suited to modern systems of representation. When it comes to computers is it really easier to look up the unicode symbol '∩' or its LaTeX representation when you're trying to write 'A ∩ B' -- or would it be better to begin noting mathematics online in a portable way such as: (intersection A B)
Nope, what you are describing is capitalism, not democracy. Unfortunately we are so deep into the game now that it's had to imagine a world without it. I understand that it's hard, but try to imagine a world where workers can demand a living wage and not have to rely on the generosity of "good people" for the right to live.
>What's the value of museums? Of history? //

To devalue my comment in this way is not at all fair, that is not at all what I asked.

If you have a picture of the poster then I can see exactly what students at the time had, even that amount of detail is largely superfluous to any benefit - beyond mere curiosity - that I (or seemingly anyone) can derive from it.

As a society, it strikes me we should get over clinging to stuff just because it's old. Rather than preserve a not-especially-interesting artefact for posterity; record it, report the detail of it; then leave it in private hands. Use public money for now; University money for current educational needs.

Your last para at least approaches the question. But, (and I've done this) the experience of playing an 80s game on an emulator is largely the same, close enough to the experience that you can learn anything implicit in the experience itself IMO.

But, this is quite different, that artefact isn't going to be put up in a lecture hall of the C17th, if anything a facsimile will ... at which point the artefact, despite your protestations, still appears to have a intrinsic value approaching zero.
That might be legal in Texas, but in Washington it's explicitly illegal. In the state, tips are completely irrelevant to base pay, all employees must get paid at least minimum wage as base pay.

Instacart is going to get fucked very quickly by the Washington AG. This is as bad as Walmart not paying employees for overtime.
A lot of commenters in here are saying "oh yeah, I've done something similar, not that hard/different." What they're glossing over is how the author also blocked all Google IPs, meaning that Google Cloud Platform is no longer available, along with assorted services. This means authentication like captchas, anything that uses maps besides Google's own offering (Lyft, Uber, Yelp, etc), and photos being hosted on their version of AWS S3 is included.

There is a ton of web and data infrastructure being hosted/ran by Microsoft, Google, and Amazon that we often don't think about. The only big service provider I can think of besides those three is Digital Ocean, and it's not a 1:1 comparison, since they're more like infrastructure.

*edit: Basically, if you find Amazon so abhorrent that you want to cut them out of your life, you can't unless you eschew huge swathes of the internet. Which might work for you. But think about that: they own the digital land under our feet.
No, they don't, apparently. According to the top post in the thread, they have $130 billion in cash on hand.
I love how they are just "turning it off and on again".
Perhaps it's related to the DNS flag day [0] that's coming up on Friday?

[0]: https://dnsflagday.net/
I'm not sure if this is a bait or not...

> i thought i had aspergers but it turned out I was actually transgendered.

As a trans woman, I must say that I am confused as to how you might mix up those two. The symptoms are really different. Those are not exclusive either.

> people who are transgender are literally in a constant state of mental anguish

Only until you get therapy and treatment. Once my gender dysphoria was under control, I was free of any negative mental health issues related to being transgender.

> as a transwoman my career options are now prostitution, pornography, and the drug trade but probably will be overlaps.

Nope, still working in STEM. I know quite a few trans programmers.
Goddamn liars.
I know this sounds right to you and many people, but it's very flawed. The idea that everything will be fine if consumers in a free market use their purchasing power wisely and ethically is cant. A particularly ugly side of it is the tipping culture in the US, where Joe public gets to decide on how much waiting staff get paid according to their personal assessment of how good their waiting was. It's a fig-leaf over the society's love of controlling, criticizing and ordering others what to do.
There is a difference between an open mind and a hole in the head.
I don't live in US, but for sure the only way to ensure your tip goes to the right person is to give it with cash.
I don't really see Abstract Algebra as a super relevant topic for modern computer science. I agree on Linear Algebra and basic abstract algebra (like group theory, cyclic groups etc, stuff needed for understanding topics like RSA), but stuff like Galois theory and other advanced topics are just not relevant. They still teach you a different way to think about problems (which is good) but rather belong into a math curriculum than a CS one.
yes, please always tip in cash for any service. there's no reason the business needs to be a middleman there.
https://outline.com/x2v2Sm
Ask HN: Which APIs do you pay for?
I thought it was the teen's mother, who may be an attorney
Measuring the value of health
> net income stayed the same

the WSJ article says it was helped by a tax rate that declined to 16.5% from 26% a year earlier prior to the 2017 tax overhaul.
Sorry how could you pirate "the online thing that runs in the browser"?

The problem is that recent OneNote versions (at least on Mac), require Microsoft signin and can't even open local note files.
That works, until it doesn't.

They are extremely likely to make another, more subtle bad call.

People who think this is OK can be very difficult to motivate.
>If you want to make that same sort of impact, it is not just important to be a great mind, but to spend a bunch of time practicing how you communicate that information.

The most insidious cause of this is that getting a permanent position in a department still often depends on publishing in the top journals within that department's subject, which means explaining it only to the point that it is coherent to that subject's experts. Any further elucidation is sometimes seen as simplification or over-analysis, and to the detriment of getting an article accepted in subject-leading venues.

Or, to put it another way, putting more bits down the channel than are needed for comprehension by the editor is seen as unnecessary redundancy.
Problem here: Isn't Instacart but the so called rich-hipster millenials that need / want / to use Instacart. Or lazy or just for the sake of convenience at the sake of a poor soul, don't wanna shop groceries for themselves. If your time is limited then you could easily use Amazon fresh/ Walmart / Boxed for your groceries. But nah, it's SV 2.0 Human exploitation at it's finest, Capitalism as usual. & to people building these services, put humans first. It's sad to see someone in HEB wearing a green tshirt shopping for someone - it's like society has rendered these people useless only fit to serve master. Basically slavery 2.0 with a little wage on top.
jQuery foundation, nobody thinks about how much they might know about you...
Surely the best measure of whether a politician speaks for the people is whether he or she is elected. In which case assuming the politician attempts to follow through on his or her campaign promises, that politician would not be a populist. (Of course, this assumes that there is such a thing as "the people".)
Rewording (and hopefully simplifying) for my own benefit because I think the OP is a little loose with the details.

There are two parts:

Part 1: Subdomain takeover

1) DNS for domain X points to service Y (Y=Heroku in this case).

2) Service Y allows anyone to claim an unused domain.

3) Domain X is then claimed by an attacker.

4) Domain X is then served by an attacker.

5) Bonus points if the owner of X has a wildcarded HTTPS cert, so the hijacked subdomain gets HTTPS automatically.

So now attacker serves content on a domain they don't own (possibly over HTTPS). This is already a known cloud hosting mis-configuration problem.

In this case, investor.example.com for HTTPS was not claimed on Heroku but DNS was pointed to Heroku, so it was vulnerable to subdomain takeover. However, the author only had HTTPS access and example.com did NOT have wildcarded cert, so the author was in an edge case of having control of a subdomain but only over HTTPS with no cert.

This prompted them to look for...

Part 2: Abusing TLS-SNI-01 validation

TLS-SNI-01 works by having LetsEncrypt request a cert with a secret from the specified domain.

1) LE does a DNS lookup of the desired domain.

2) LE connects to that domain using TLS-SNI. SNI specifies a hostname in the pre-encryption request.

3) ACME TLS-SNI-01 has the SNI requested domain in the form foo.bar.acme.invalid.

4) Author claimed the necessary foo.bar.acme.invalid hostname on Heroku (and later AWS).

5) Author initiated a LetsEncrypt cert request for a different domain on the same hosting provider.

6) When LE made the SNI request to that domain it did a DNS lookup and got pointed to the shared hosting provider, but the SNI hostname was of the form foo.bar.acme.invalid which was controlled by the attacker, so it was passed to the attacker's app.

6.a (Side note: Because there was no valid cert offered by the hosting provider, I'm guessing the front-ends passed the SNI request through to the backend app. Because if there was a cert configured for the Heroku app then I think the front-ends just serve the cert directly without checking with the backend app.)

7) The attacker then finished the LE cert negotiation and got a cert on behalf of the other domain.

I'm a little fuzzy on exactly how choosing the domain in (3) and (6) works since the spec[0] doesn't seem to match what the blog post shows, but I'm sure it works somehow.

Corrections/clarifications welcome.

Related specs:

[0] https://tools.ietf.org/html/draft-ietf-acme-acme-01#page-40

[1] https://tools.ietf.org/html/rfc6066#page-6
> It is, of course, entirely possible that the worker in question is not on the west coast

The receipt was for a store named Wegmans. Those stores are located on the East coast (New York, Pennsylvania, Virginia, Maryland, Massachusetts, New Jersey).
can confirm, our SSO uses Azure. I'm blocked from my remote environments until the service is back up.
Startup culture is a study in psychopathy.

- lack of empathy: Uber, Instacart, etc. etc. etc., exploiting the poor

- parasitic behavior: aggressive tax optimisation/tax evasion, Amazon employees relying on food stamps for subsistance

- superficial charm: get rich quick

- pathological lying: cf. Facebook denying they ever did anything wrong

- manipulativeness: "make the world more open and connected"

and my personal favorite,

- grandiosity: "change the world!", "solve physics for good!", "be immortal!"
Might fit under fraud. I hope it does. When I first learned of this tactic, I felt tricked. I assumed with a tip, that I was boosting someone’s salary for a job well done. I’m sure it’s debatable, and that my assumption was wrong? But I imagine most people feel this what a tip is.

Fraud
n. the intentional use of deceit, a trick or some dishonest means to deprive another of his/her/its money, property or a legal right.
also keep in mind that the segregation rules were unpopular with the bus companies themselves (think about the infra you need to enforce segregation), as soon as the court ruled against the local laws, the montgomery bus company was rushing to flip over to desegregated.
Maybe if one wants to exploit a certain type of people, one has to build a corresponding infrastructure/outlet to be in control?
What is there to be afraid of? Put it out there so it is open to criticism. Why suppress it?

Think of it through the lens of emergence, or the shotgun effect.. The more competing, different theories that are out there, the more likely that we will get closer to the truth. This allows future researchers to draw from a larger pool of diverse thought.

"We cannot solve our problems with the same thinking we used when we created them."