skysight-inc/HackerNews huggingface dataset:
My point is criminal behavior is defined by the ruling class. So this pervasive 24/7 monitoring doesn’t necessarily reduce the overall harm to a society - in fact it may make it worse.

Also:

> We have millions of black people incarcerated, the result of systematic discrimination over generations.

Not even close to the extent China is persecuting - today. I won’t speak for generations past, clearly not ideal. But I think that’s kind of the point, we agree it’s not ideal.
I think broadly these are governed by GxP compliance?
Our kids get limited screen time, like an hour a day on weekends and 20 min during weekdays. A lot of the rest of the time it’s “play with your sibling” although we do board games sometimes. I’ve really been impressed how my kids use their screen time. My son builds projects inspired by what he sees and our daughter sings and pretend plays. They come up with games on their own. It’s really been awesome to see how they’ve integrated it.
H&M Hires Cambridge Analytica Whistleblower Christopher Wylie
Using Open Source to Deliver Streaming Bytes You Hope Are Just Video
> scofflaw https://en.wikipedia.org/wiki/Scofflaw
> taking to the cleaners https://en.wiktionary.org/wiki/take_to_the_cleaners
> juicers https://www.reddit.com/r/LimeBike/comments/89tpqy/is_anyone_...

Apologies.
> If we allow decisions and conclusions being drawn by the AI without a clear explanation of how it got there

The funny thing is expert systems were doing that 30 years ago. Seems like this would be a perfect use of them but it's not a buzzword any more.

It's crazy how many wheels get poorly reinvented in the software world.
Pretty sure they distribute these appliances to ISPs...
Chinese New Year Is World’s Biggest Human Migration
The great thing about HN is that it consistently shoves into my face how many, seemingly common, dev tools or frameworks etc... that I've never heard of.

Event sourcing isn't anything I've ever heard of, let alone something for which broad marketing promises need debunking.

How common is this framework/archecture/product? Google isn't helping me determine how widely used it is.
Not all of them do. Gmail can be set to only respond to people who you've had contact with before.
"it is not very good at explaining the process it has gone through to reach such a conclusion".

The above statement is just too convenient and practically superstitious.

AI is data hungry. That implies that there are so many past incidences of corruption you can generate large training data sets. So perhaps even a random guess would be too efficient since it is right more often than not.
How about going from queens to NJ? Some people need to pass through Manhattan in order go somewhere else. Because it was designed this way unfortunately
Event sourcing is REALLY hard to figure out how to do “right.” A lot of getting it right is modeling knowledge/experience, understanding your domain.

That said, you can succeed at building your entire arch around it and once you do, it’s glorious. Kafka Streams makes the technical aspects easy once you figure out how to model correctly.
98point6 | Seattle, WA | Onsite | Multiple Positions | https://www.98point6.com/

At 98point6 we are reimagining the future of primary care through in-app messaging and by pairing physician experience with AI and automation. We've recently raised a $50m Series-C and last month launched in all 50 US states.

We're moving quickly in the digital health space and hiring for numerous positions. Open engineering roles include:

- Software Engineer, Data Engineering
- Senior Software Engineer, Machine Learning
- Manual Test Engineer
- Mobile Software Engineer - iOS/Android
- Back End Software Engineer
- Senior Back End Software Engineer
- Front End Software Engineer
- Senior Front End Software Engineer
- Senior Software Engineer, Infrastructure
- Site Reliability Engineer (SRE)
- Support Engineer

If you're interested please email me grinich [AT] 98point6.com or apply directly at our careers page: https://www.98point6.com/about/careers/.
Hostility toward spiritual traditions may be hampering empirical inquiry
They meant bicycles, not motorcycles.
How much of books like Rich dad, 4 hour workweek etc is practical? Kiyosaki is more of a salesman than an investment wizard. Tim Ferriss is successful, but works his ass off, far from 4 hours a week. Not saying these books are useless, but wondering if we should take them at face value.
Except they were not.

Cars are just too dangerous to have anywhere near people. They should be banned from cities and suburbs. 40,000 people die every year in the US because of cars. Dumbest idea ever.
Using an app allows you to use a custom protocol. Standard VPN protocols do a good job of protecting your information, but they don't even try to hide the fact that you're using a VPN at all, so they're not suitable for a situation where you're trying to get around a system that tries to block them completely.
EDIT: To be clear, I don't think this is a serious threat whatsoever, and went through the exercise as an explanation. Go easy on my comments, just having fun thinking it through.

Impersonate the person out of town to escalate to their privilege level.

Imposter: "My password isn't working, can you help me reset it?" Yes, this is unlikely to to work in smaller orgs where you know people face to face. It is more likely to work as the org scales up in size (think enterprises with their own helpdesk).

Once you have email and/or other federated access, you have a toehold. Bonus points if you've cloned their work cell SIM or have rerouted SIP for their desk phone to keep them out of the loop. I have seen weaker phishing attacks on financial/accounting staff who have the authority to move millions of dollars of corporate funds.

EDIT:

> Whom the would-be attackers send this email to?

Phishing target

> Do they send this email from their own email address?

Throw away address or spoofed address from a familiar-to-the-business domain.

> Is there an assumption that sysadmin/support team will blindly reset a password on someone else's request?

This is one assumption.

> How do attackers bypass corporate VPN?

VPN access might not be required to obtain the level of access desired. Do all of your SaaS providers require 2FA? Your business bank accounts?
All of it came out of mobile phones and r/c hobby gear IMO.
What a weird way to compare OCR to humans. If a human can't see the writing because the page surface is curving away, they'd adjust the page surface. Likewise, getting decent scans is the most cost and effort effective way of getting good performance in OCR.

I personally found tesseract to be incredibly good, and have even used it in non-traditional OCR applications for doing things like reading signs.
There are many configurations you cannot do via the Settings UI. Want to auto-connect / connect on demand? iOS supports this but not in the UI. For me it is important that if the VPN disconnects, the system will reconnect instead of silently using no VPN for all my traffic.
If you can't be flexible on the delivery date, you have to be flexible in feature scope.

That means building a simple verison first that still fulfills the purpose while not being perfect or polished. Then iteratively improve it to what you and the customer ideally want.

That way, if the deadline comes before you're done, you at least have a working version that fulfills the basic need and allows the kind of workflow that's necessary, even if it still has some rough edges or even gaps in rarely used areas.

Of course this approach requires you to write your contracts in a way that doesn't tie you down too strictly on how exactly things will be solved.
I was not familiar with this term until now. You can read very far into this article without realizing that the topic is not some technique to gain a few inches in height.

> There are now several growth hacking bootcamps and large conferences.
So who is the set of people who are both technically savvy enough to know they want a VPN but can’t follow the set up instructions I listed above if they were given by a VPN provider?
> of course. Any sensible driver will not drive the car without a speedometer.

I think you missed the point of my comment entirely.

Knowing your speed is not required to be safe while driving - being observant, correctly signaling, and driving at a speed appropriate for the conditions are.
You can't make l'omelette without breaking l'eggs.
Show HN: Vue Workshop aimed at engineers with no front-end knowledge
Don't know about Linux implementation, but sendfile would only need AES, and today's CPUs even come with hardware support. I can't talk about security aspect, but it is not like the openssl is implemented in kernel or hardware, just the symmetric encryption and that only transforms the data.
If this is so, how does it know when I've mis-labeled?
This reminds me of Klaatu's speech in "The Day The Earth Stood Still." They created a race of robots to prevent aggression.

"The test of any such higher authority is, of course, the police force that supports it. For our policemen, we created a race of robots. Their function is to patrol the planets—in space ships like this one—and preserve the peace. In matters of aggression, we have given them absolute power over us; this power can not be revoked. At the ?rst sign of violence, they act automatically against the aggressor. The penalty for provoking their action is too terrible to risk. The result is that we live in peace, without arms or armies, secure in the knowledge that we are free from aggression and war—free to pursue more pro?table enterprises. Now, we do not pretend to have achieved perfection, but we do have a system, and it works."[1]

[1] https://www.rottentomatoes.com/m/1005371_day_the_earth_stood...
How did they measure this? What qualifies as “online”? Does leaving Skype on and open while I go about my day count me in the statistic?
It is more widespread in the enterprise software development space and particularly in the Microsoft/.NET ecosystem.
Stuff like this is what keeps organizations from taking corpsec guidance seriously. Whatever the infinitesimal risk you accept by setting an autoresponder, it's dwarfed by the risk of convincing the rest of your team that you're a crank, and that what you have to say about phishing and email attachments isn't to be taken seriously.
I am starting to think that I may be a machine given how many time I fail that stupid test...
The traffic light is absolutely the worse. Should I select the box that includes the vertical yellow pole? And what about the horizontal one between two opposite traffic lights? And if just a small fraction of the border of the traffic light is in a box what should I do?
I can’t wait for a captcha solver as a service honestly...
"it is not very good at explaining the process it has gone through to reach such a conclusion".

To be fair, generating human-understandable explanations of predictions in a complicated nonlinear model is difficult in general. You typically need to come up with some kind of simplification of the model (like LIME [0]), and it's far from perfect or generally-applicable.

[0]: https://homes.cs.washington.edu/~marcotcr/blog/lime/
I think the context of the blog post, "the lonely sysadmin", means "working mainly with customers" isn't its target audience.

Bikeshedding for a moment, I suspect the right response for people "working mostly with customers" is for the CRM to automatically re-route known-customer and cold-call emails to someone else on the "working mostly with customer" team, instead of first up telling customers or leads "Sorry, Bob's away for 2 weeks", which is _never_ going to be the message you want to be sending there...
Why do we assume landlords are “well to do?” After paying the note, management, maintenance, taxes, etc., many properties net just a few hundred dollars per month, per unit, if that. Certainly there is capital appreciation, but there is also risk as well. Rental property ownership is a business like other businesses and subject to price pressures just like any other. We could argue that giving money to the poor simply makes well-to-do grocery store owners richer as well. Except grocery stores aren’t required to sell their products at discounts to poor people as a condition of doing business. Why do we expect housing owners to discount their product for a certain percentage of the population or else they aren’t allowed to operate? The difference is that there aren’t widespread restrictions on food production, so grocery stores are able to serve the market demand without having set-asides for specific groups. Want lower housing prices? Make it easier to supply houses. It really is that simple. The reason housing in Houston is affordable is because there is plenty of it and it’s relatively easy to build more. There isn’t a need for artificially “affordable” housing in Houston because the government there has a less hostile attitude towards building housing. In California, if you want to build something, you might get your plan denied if there is even a chance that some endangered worm is within a 50 mile radius or if some Palo Alto matron is afraid of “undesirables” living too close, or if there’s a chance someone’s view might be impeded. Building housing in the Bay Area is a total mess. I am not sure why Tokyo or Seoul style high-roses aren’t a thing in California — but that could be a solution if there was the political will to allow it.
Out of office? Its an invitation to a thief with the address attached in the signature.
When people discuss “knowledge work”, they often slip into imagining an “idealized” knowledge worker: one who is very engaged, and doing “big” meaningful things one at a time.

In reality, (1) we are all distracted, (2) our work usually consists of a large number of small chunks that are spread over time (3) we all have a large pile of undone work (both “job” and “personal”) that we're always feeling guilty about.

What do we do about this difference between the ideal and reality? We could just give up on the ideal and resign to the reality — or even make it worse. Or we could try to fight it superficially, and fail (there's a reason things are the way they are). Or we could start from accepting the reality (instead of ignoring it), but try to move towards the ideal, e.g: (1) reduce whatever it is that makes us seek distractions (very different from blocking distractions), (2) make it easier to get back on track (e.g. keep track of the task being done).

In coming up with this problem statement, the author believes he's diverged from the usual problems being imagined: things like trying to block distractions, trying to maximize efficiency, “collaboration”.

[That just restated the post, so I don't know if it helps :)]
OK...

https://news.ycombinator.com/item?id=19062698
> The latest version, reCaptcha v3, announced late last year, uses “adaptive risk analysis” to score traffic according to how suspicious it seems; website owners can then choose to present sketchy users with a challenge, like a password request or two-factor authentication

eg: if you're not browsing the web signed into a Google account and allowing all their tracking. Fuck that.
Disagree. Upper and lower bounds can be realistically estimated. Whether the estimates meet the demands of the market is another question. I'm an engineer, not a CEO or sales person, but I'm a firm believer in selling first and building it later. Building it after it's been promised is one of the best ways to limit scope.
Sorry, still not clear to me.

- Whom the would-be attackers send this email to?

- Do they send this email from their own email address?

- Is there an assumption that sysadmin/support team will blindly reset a password on someone else's request?

- How do attackers bypass corporate VPN?
I'm not sure how this shows censorship. It just shows you if an app is available in China.

Lots of apps aren't available in China or outside of where the developer is based.
Probably, using the average of facebook users spent scrolling to their feeds..
> Don’t tell people anything more than they need to know. Does everybody really need to know where you’ve gone and how long? Probably not. You’re just gone. Set some expectations around response time, though.

That's a borderline contradiction.
I tried a Lime in Paris last fall and it was terrifying. Being 3 feet away from cars going 25 kph, one slight mistake and you're dead. Never again. Bikes feel a lot safer.
Eventsourcing is really a lose set of concepts, and each application of it will look very different. That's also why there are almost no useful frameworks here.

There are some good talks on Youtube about it.

The concept is used all over though: Redux (js) is basically a lightweight form of eventsourcing ( with redux-saga being the "process managers" mentioned in the post).
Any organisation where “hey I forgot my password, can you reset it?” from an unknown email address is an attack that has chance of success is an organisation where there’s dozens of major problems long before you get to auto-responders identifying who is away from the office.
Rep. Ocasio-Cortez and Where Drugs Come From
I spend all day on the computer but mostly I am reading, writing, or scripting that I'm not actually surfing the web. Then again spotify uses the internet.. I wonder how much 'internet usage' is a direct replacement for something that is analog but has the same effect, like reading newspaper.
Wait, so these annoying quizes that keep popping on all social media and that force me to block people because it becomes intolerable - somebody wrote 700 of them just for the fun of it, without payment? This is.... I have no words. I assumed at least somebody made a living out of it, however weird is this way of making money. But just producing clickbait spam filler for free? Surprises ever day.
You're assuming I can't hop on the phone (appearing to come from a known number using Caller ID spoofing, using LinkedIn to get a general idea of the org chart) and bluff my way through it with your underpaid, overworked help desk staff. People are the weakest link.

This is only a few steps above Indian scammers taking remote control of users’ computers and convincing those users to send them hundreds of dollars of gift cards to prevent legal action by the IRS. Consider your average user, not the HN participant.

https://www.youtube.com/watch?v=YVqurfWzB-Q (Hacking Humans : Social Engineering Techniques and How to Protect Against Them - Stephen Haunts)
Bird is how I can be sure that I should just ignore everything I hear about where to find success.

Because, for fuck’s sake, their manner of innovation was to look at bike shares, and do scooters instead. And this is a fucking retarded idea, up there with the Juicero, and yet wowee, shit tons of cash getting thrown around.

There’s actually no way to predict how retarded success might actually be sometimes, no matter how many times success is also sensible. We like the sensible success stories more, and claim that they are more valid, but that doesn’t dispell the very real existence of completely useless companies that are also successful.

It’s like hating some of your more unbearable co-workers, despite the fact that they actually pull some weight no matter how awful they really are to behold.

On a macro scale, this means sometimes, shitty companies with stupid ideas (scooters that homeless people can grift charger duty on) carry the day.

Fuck me. I hate this shitty future.
I got the Dell Mini 10v and I think it's still my favorite machine of all time. I've dj'ed several weddings with it, using mocp. It was the only machine I used in grad school. That was a truly righteous machine.
And if the standard on all this stuff is delayed, we're risking multiple incompatible APIs on all these features. Case in point: on Win10, PWAs get full access to the platform WinRT APIs (https://docs.microsoft.com/en-us/microsoft-edge/progressive-...). So they can do anything a native app can do - but that code isn't portable anywhere else.
Schumer and Sanders: Limit Corporate Stock Buybacks
San Francisco – where drug addicts outnumber high school students
I tell everyone over 50 they need to make a habit of gaming

This is great news to me.
I agree with you that under these circumstances autoresponses could be a security risk. But then I'd better fix the underlying security problem(s) and let everyone use autoresponders if they wish to.
Here's my take on Event Sourcing: it's not particularly well defined what an "event" is. Did the event happen yet? Did it succeed? Which part? I didn't like having an event ledger say "comment created," where my application is then meant to consume this, handle validation, potentially fail on the db operation, etc.

So here is what I do: I basically combine Event Sourcing architecture with CQRS. Whenever a client makes a write request, that "command" gets written to a log. Then when things happen as a consequence of that command, for example, a successful DB write happens, I write another log that references the command.

So I'll have an event that says:

id: '1234'
type: 'command'
data: {type: 'createComment', text: 'Ayy', userId: '1234', postId: '6543'}

And then that can get picked up and processed by the application, which will create another event like:

id: '2345'
type: 'dbWrite'
data: {model: 'comments', data: {text: 'Ayy'}}
commandId: '1234'

There's a lot of redundancy, and you can instead rely on something like your DB WAL for some of the consequences of the commands, but separating out the commands from the results like this has made Event Sourcing work quite well for me.
I think it works by labelling something like half the images, but doesn't tell you which is which. At least that's how the older text recaptcha stuff worked - you could easily identify the pre-labelled text by the kind of distortions they used and just enter any old gibberish for the rest. So actually the training stuff is extra work beyond just classifying you as human
“Chinatown” was a simplified take on the water wars in California ( https://en.m.wikipedia.org/wiki/California_water_wars ). The book “Cadillac Desert” is a somewhat depressing history of what happened. The whole thing, including the present day, is the story of how something beautiful to the beholder can be built upon a squalid mess from the get-go.
Haven't books dripping with philosophy also always been considered appropriate?

But I agree. Just look at an airport book shop's best sellers: is anyone really getting anything enlightening out of a trite mystery book that they don't get from TV? We (or at least I) feel some guilt for not having read classics and then attribute the same feeling to any sort of reading. Provided it's on a dead tree.

I've spent ages reading A Song of Ice and Fire, ultimately that is just the same as time wasted on the internet or TV if what I'm valuing is time spent on self improvement. Even reading a manpage is more valuable.
The Paris bike share system became completely dysfunctional last year when they changed the contractor. It's a huge embarrassment for the city, because it had worked well before. I hope they fix it.
Top things not to do as a new grad SWE
Does Seattle have Bird scooters? I haven't seen any scooters here, just bikes.
A game's exe dir is a long-lived but potentially replaceable thing, like a car. Saved games may be persisted across game versions, so you don't necessarily want them to be in the same directory. Admittedly not the best analogy, but was just observing that it's strange and incongruent to store the 2 together.
Out of curiosity, how do you deal with consistency guarantees across aggregates? (which is much more relevant when your whole architecture is ES)

I realize this is highly domain dependent. Some will be much less affected than others. But it's another drawback not mentioned, because now you start to need sagas/managers that coordinate across services with commit/rollback patterns , conflict resolution., etc.
Depending on the state in question, there can be many exemptions for those tests - e.g. if a car is new enough, and certified to comply with some standard or another.
How a ‘Monster’ Texas Oil Field Made the U.S. A Star in the World Market