skysight-inc/HackerNews huggingface dataset:
Another one is 'use the correct status codes for page requests'. Seen far too many sites returna 200 OK status for a non existent page, which may cause havoc with search engines indexing 404 messages and what not.

Oh, and make sure you actually use heading tags properly. God, so many sites and apps seem to be designed with no thought put into heading structure, with random h2s and h3s strewn about at random. Especially don't forget the h1 tag, and try and make sure it (and the title tag for the page) are both unique on every page.

Basic I know, but come on. Too many SPAs seem to be built with no thought put into even the basics of HTML structure or on page SEO.
Most censorship comes from subreddit mods, not Reddit the company.
That is not an edit.

And of course! It is their house. Play nice, or see the impact. And they do have accountability. Users are here because it makes sense. Should that change, so will users do something else.

Nothing out of the ordinary there.
Where is ThreadX? (ThreadX runs on the RPi GPU cores)
The entire subreddit was calling him a paedophile, this is actually mentioned in the post this thread is about, so I'm not sure how you could have missed it -https://www.reddit.com/r/The_Donald/comments/5ekdy9/the_admi...

It seems a bit like your feelings on this issue are stronger than your recollection.
USB installation media
> What needs to die is the belief that you can rely on just software (i.e. memory safety) for isolation between trusted and untrusted code[1].

I don't understand how you came to this conclusion. How does spectre indicate that you can't rely on software for isolation?

> meltdown bypasses hardware protection, but that's Intel specific

It's not Intel specific. Certain ARM and POWER architectures are also vulnerable.

Spectre bypasses hardware protections too, just in a more subtle way.
> If the admins can edit comments without any indication to the users...

I feel like this is possible on every website ever made.
The mental exhaustion (Con #3) is why eXtreme Programming included an exhortation about 8 hour days and 40 hour weeks.
This is not entirely true.

The federal minimum wage for tipped jobs is $2.13/hour, with the employer only required to make up the difference if the employee doesn't break $7.25/hour in tips + wages.

In these situations, the tips received between the minimum tipped wage and the minimum wage work exactly like the DoorDash / Instacart wages: they are net zero for the employee.

Of course state and municipal minimum wages sometimes supersede these minimums, but they often have their own separate minimum wages for tipped jobs.
goaccess has the option to anonymize its data using --anonymize-ip.
Show HN: Experimental no-magic Python test framework inspired by mocha
ThreadX isn't open source.
Can we see the Cloudflare Worker?
Again, this is always possible, its possible on HN, its possible on gmail, its possible on every single site on the internet, that is how the technology works.

This isn't some kind of dark secret backdoor spez built into the reddit codebase. Immature and stupid action maybe, but some kind of scary sentinel of how admin power can be uniquely abused at reddit, it isn't.
Restaurants in Seattle that are raising the minimum wage aren't telling me not to tip for the most part except Tom douglas. I'm capable of doing math... I'm tipping so I already am. Tho I realize most peipyare just straight confused by tipping ratios. And I as the patron shouldn't be figuring out your staff's w2.

But also I know bartenders at a decent tipping bar (any with a good weekend business) make a lot more than $15-20 minimum wage.

A
Worked as a bouncer at one of the best bars in STL for tipping (high end late hours) and they'd make 95k+. Wasn't a job you could keep much past 40 unless you just didn't drink tho.

As an aside Was one of my better non co-op college gigs, I worked security and valet, so I made 100-200$ tips a night and 10/hr (1995) as a valet bouncer and it was a 12 hour shift (4pm-4am).
+1 Second your recommendation of Johann Hari's book. Maybe the best I've read on the drug war.
Good to Know Eugene. Thanks for the heads up.

After having to deal with a ton of issue requests, I am sure GitHub will see the light and change this to a better requirement.

Also, have you heard of Netlify. They will Host it to their Global CDN for free and they are fast as hell. Also can use private repositories on Github also.
Agreed, but it’s not a perfect world and those who take into account that headings, structured data, ordered lists, internal linking structure, etc have positive benefits and rewarded by Google will prosper...until the day that Google’s algo is sophisticated enough to not need those anymore.
If the first html load isn't on SSL, and someone is able to intercept your traffic, they can change the embedded https url to be a non-https url anyway, so I can't even imagine the attack that is prevented by using https into something loaded over http.
> If you read something in a major publication, you can trust it more than if it was just posted to a website.

I'm not sure that is true, I've studied a fair bit of statistics and I can usually find flaws in most social science studies I read. So I trust an article combined with a few hundred HN comments a lot more than I trust anything published in scientific journals without comments, since usually if something is wrong someone in the comment section will find it. Even on reddit if you wade through it you can usually find some nitpickers adding good discussion on articles with a few hundred comments.
This should be completely backend agnostic. I was never a Django person, but you’d just put that script tag in your main template so it loads on every page.
I feel this fails a user expectation that simply hovering over a link doesn't inform the server of anything.

It's curious you mention checking where links link to, because I think that's also another user expectation failure. The url that appears in the status bar below (or what was once a status bar) is not necessarily the link's true destination. You can go to any google search results page, hover over the links in the results and compare with the href attributes in the <a> tags. They're different. It looks like you'd be going directly to the page that's on the URL, but you're actually first going to google and google redirects you to the URL you saw.

It used to be that checking the url in the status bar allowed you to make sure the link really would take you to where the text made you think it would take you, but that's no longer the case. It seems one can easily make a link that seems like it would take you to your bank and then take you to a phished page.
I think we live in a golden age of $n simulators. There seems to be one for everything, allowing people to escape their realities and become the truck driver or farmer they’ve always wanted to. I wonder what the replay ability of those is though.

And it all started from original flight and train Simulators. At least with those simulators you can get various plugins to really expand the environment and gameplay.
Eh, not sure I'd say SEO shouldn't exist. At least, the techniques used for it are all things that should be the expected default on every site, like having a logical HTML structure with heading tags, having a useful unique title for every page, having a description shown in listings, logically linking to relevant content, rendering the page on the server rather than the client, etc.

Maybe black hat/spammy SEO shouldn't exist, but at a certain level, good SEO is basically just about designing a good product and marketing it well.
Quotes from OA that struck me as on the button...

"A prejudice that was strongly confirmed was the value of mathematical fluency. Barton says, and I agree with him (and suggested something like it in my book Mathematics, A Very Short Introduction) that it is often a good idea to teach fluency first and understanding later."

Agree fully with Barton and OA here. Until recently I taught GCSE Maths re-take students aged 16 and over in a further education college. They were constantly tripping over really quite basic little skill issues and that prevented them from seeing how to tackle the longer and more complex problem solving questions.

"I would go for something roughly equivalent [in the solving of equations such as 4x - 8 = 2x + 2], but not quite the same, which is to stress the rule you can do the same thing to both sides of an equation (worrying about things like squaring both sides or multiplying by zero later). Then the problem of solving linear equations would be reduced to a kind of puzzle: what can we do to both sides of this equation to make the whole thing look simpler?"

The idea of just playing with the notation is one I fully intend to try but getting people to think in that abstract way is hard work.
This is the premise behind https://blog.tildes.net/announcing-tildes

Sadly invite only for now.
And the Usenet was the original Slashdot and the original social media.

Oh, and moderators were pigs and fascists even in the Usenet that was not controlled by any greedy corporation.

Any Meow War veterans here?
https://en.wikipedia.org/wiki/Meow_Wars
It could be a way for browsers to encourage GET to be used more correctly.
That’s what “speculating on the bond market” means.
I used to trade on a fixed income desk, which includes trading bunds.

What you are quoting is the coupon, not the yield. What this means is that back then if you bought 100 worth of the bond, you'd get a promise from the government to give you 4 back each year, plus the principal when the bond matured.

It is not quite the same as the yield.

Now consider if later a bond came out that paid 8 each year per 100 that you invested. The ones that pay 4 are still around. What would happen?

Well you would be able to buy the old 4 coupon bonds at 50 from the old buyers (the government will still give you 100 at the end). That is the price that makes the yield the same.

Why is this the case? Why don't the people who bought the 4s simply insist on getting 100 for their bonds? Because if they did, everyone would just spend their 100 EUR on the 8s. And that would continue to be the smartest thing to do until the 4s yielded the same as the 8s.

Simplified a bit, so no convexity, term premium, on-the-run premium, repo rate, futures, basis and so on. But worth googling if you're interested.
The analytics should only be triggered is the page is rendered, assuming it's done client side. I believe Google does this for first top 3 results if I'm not mistaken.
You're asking consumers to take an optional payment and make it mandatory. Even if they ended up paying the same amount, they'll prefer it be optional.
> What about poorly-coded websites/apps where GETS are not idempotent or have side-effects?

They're already broken, exposing that is a good thing.
Even if the user got it wrong, you can't edit a user's speech and claim to be a place for free speech. Speaking incorrectly is a part of free speech.
you can also checkout app.binaryedge.io for more data like this from other countries! it's crazy the amount of stuff that is out there. to me the most baffling is still the amount of DBs with customer information on 'em
'You probably don't have a choice ...' is a reach. The rest is well-argued.

Anyway the most telling point is if OP gets his wish, then next time a bunch of people burn to death the public will clamor again for mandatory fire escapes, inevitably. We aren't the sort of people he wishes we were.
It only has that benefit because of investment, and that investment would have never come had it been a non-profit.
Is there a way to notify AWS of bugs in managed services?
I would love to run such a saas business. Unfortunately, we have to hire and increase revenues just to be cash flow positive and for that we have to hit the streets with our VC pitch bowls.
What it doesnt explain is that this was very hard work to be eg a trader for top sites near impossible to even get access to one. You would work 8-16 hours a day to always be ready for a release and then when a release hit your Heartrate would double as you rushed to transfer files to the sites the allowed it All of Whom had hundreds of rules and Which you had to know by heart as the races on the Best sites were over in less than a minute and you would be lucky to transfer 5x15mb rar. 20-30 times a day you would have this short but intense moment. If your group dident perform Well it would be changed for another as top groups were rated against eachother. It became an addiction. Getting into building sites was much better for my health.
So was Slashdot, Digg, etc.

There will be other places.

Stop enabling centralization, and promote decentralised options =D
Top-down performance analysis methodology
> so you're one of the people...

I am too. I'm happy you're happy. You got exactly what I owed you.
It just needs to be a set of instructions. No need to make a business out of it. Could be hosted on Github/Gitlab or pretty much any other collaborative version control system and the design could be documented in Lego Digital Designer or similar programs. Of course the real thing probably would be better made out of special purpose parts but Lego would still be a good starting point for many experiments.

Edit: point out that I realize Lego is not the best long term platform.
Right, I'm not denying that the story linked was about fraud in China. But nowhere do they state that the problem is limited to Chinese researchers.
That's the American position. You'd like to ask recent immigrants about tipping, and you'd think that a substantial portion of them would like not to leave tips and would prefer that the employer pay their staff proper wages.
It's a sign of how rightward the Overton window has shifted that people could think that you have to be full-blown Stormfront before you leave the realm of "really tame". Against my own better interest I spend a significant amount of my day surfing reddit, and I claim that the current trend of right-sympathetic talking points (e.g. anti-immigrant and anti-feminist sentiment) on the front page is seeing a steady and significant rise in 2019 after falling off heavily in 2017 and remaining relatively flat in 2018. Here's a comment thread that reached the front page yesterday: https://www.reddit.com/r/worldpolitics/comments/aogcjg/opini... . You don't need a dedicated /r/nazi when it's far more effective from a propagandist standpoint to diffuse through the site to ostensibly "neutral" subreddits to shift discourse in a given direction.
With the $3B alternative data industry exploding, hedge funds fear crackdown
There is one (voat) but unfortunately it turned into a cesspool. What I would like to see is the concept of sub-reddits decentralized. Each subreddit could be it's own instance and you peer with the ones you like. It could even be API compatible with Reddit so app developers could just let users enter all of the domains they want to follow. If Reddit bans a subreddit they could just move to their own server and users could just add the domain to relay, sync, Apollo, baconreader or whatever
But in how many cases has a CEO of a multi-million-user site done it themselves, off the cuff? It means there's no oversight. Oversight isn't expected if you're using Joe Schmoe's 2 person game forum. It's expected at Reddit.
There's nothing stopping GET requests from having side effects.

It's like pointing to a list of best practices and saying "everyone surely follows these."

For example, someone changed their signature to `[img]/logout.php[/img]` on a forum I posted on as a kid and caused chaos. The mods couldn't remove it because, on the page that lets you modify a user's signature, it shows a signature preview. Good times.
Absolutely correct. But this is the website owner's problem and their consequences for not using SSL. You can't help or prevent this because it's not your server, it's not your fault they enabled insecure communication that can be exploited.

When you forgo SSL on your own server someone can also intercept your script in exactly the same way, they don't need to hack the website embedding your script. Now they are your consequences, your fault there's no SSL, and your problem may be affecting everyone who embedded your script insecurely.
> In return we regulate the prices they can charge.

And then you don't get the expensive drugs.

Suppose there are 50,000 people with a fatal condition. Researching a cure and getting it approved would cost $5B. Therefore each person needs to pay at least $100,000, or there isn't enough money to fund the research. If you say they can only charge $10,000/patient, no cure.

Whatever price you set as the max they can charge, that's the value you're assigning to a human life.
Can you expand on which CPU exactly you are talking to? I'm genuinely curious.

From what I've seen, every major high-end CPU architecture is affected, because they all rely on speculation. Of course, some low-end CPUs (such as ARM Cortex-M cores) don't have speculation, so they aren't vulnerable. But on the high-performance front, I haven't seen a credible alternative that wasn't vulnerable to speculative execution side-channels. Which one am I missing?
A practice doesn't need to be "scientific" to be effective. If a practice is effective you should probably be able to figure out why it's effective given some effort (half-assed explanations are often pseudoscientific), but not having an a priori theory is no barrier to efficacy.
> Isn't this exactly what aGPS is? One or more data points outside of satellite data?

I don’t think that’s what it is: with aGPS, the phone downloads data of where the satellites are. That allows the phone to accelerate its ability to lock onto GPS satellites.

Triangulation based on cell phone tower location is orthogonal to aGPS. The original iPhone didn’t have a GPS receiver and didn’t use aGPS, so it used the location of the towers as a crude way to figure out its location.

The triangulation + 2 satellites examples could be (but doesn’t have to be) a hybrid of the 2:

Use old school triangularion as one of the location estimates and use 2 satellites as further location estimates.

And then, orthogonally and optionally, you could use aGPS to accelerate finding additional satellites.
That is essentially what I'm saying. The complication is that you can't reliably measure EV for certain acts. (E.g., What is the dollar-value loss for murder? How much should you fine someone for doing it?) In this case, to calculate the dollar-value loss for creating a subset of society which is above the rule of law which uses wealth as a barrier to entry... the penalty needs to take that into account.

So the point is not simply that you need to defer thieves from entering a career of it, but that you need also to deter thieves from considering it as a one-time option for when their quarterly earnings are due, and that you need to do so sufficiently well that even a highly skilled thief with a multi-million dollar company salary won't consider it. So either it can't just be fines (asset seizure/prison, maybe for repeat offenders) or those fines must be legitimately severe as measured by the one committing the act.
And again, being possible is not the issue.

Of course it is possible.

That it was done, and why is a big issue.

And it did not need to be done, nor that way.

A direct edit can make sense, and when it does, there is also every reason to communicate why.

The why of what spez did is a significant contributor to the controversy. Lack of a record and no communication, until forced is another significant contributor.
No, I don't think that at all. I just see it as ridiculous to pretend these are "self made" entrepreneurs or innovators in the slightest.

More like, Knighted by the Party?
CEO asks underlings for access to production servers, for whatever reason.

How many are going to say no?
Nice post... even if before clicking through I expected a post about why asking "build me a lisp" could have been a good interview question :)

As a side note, I wrote a similar post in Swift: https://www.uraimo.com/2017/02/05/building-a-lisp-from-scrat...
I was constantly banned from subreddits only recently (past 2 years or so). When I would ask them to show me the rule I broke, the mods would just say something along the lines of, "you don't have to break a rule since bans are at mod discretion, yada, yada, yada." Basically, I was only offending their delicate sensibilities that they didn't care to share. I finally threw my hands up and haven't been back in months. Guess I should formally wrap it up by finally deleting my decade old account.
What's the best way to self scan? I recently bought a wifi camera and digging through the settings I couldn't find a way to block external access.
Ultimately I had to block is access via my router, however consumer models are terrible about blocking access to the internet.
Russian authorities make deal with Google
All companies are beholden to their owners. When a company owns itself, they can make different decisions than when there are investors or share holders.
Right but I just meant doesn’t true wealth have to be injected at some point ? Like at some point someone actually needs to mine new resources and inject the resources into the economy ? I don’t really see the last ten years, countries having mined a 100x increase (non inflation adjusted) in raw goods..?

So that leaves the investment. Then others are investing in all these tech companies.. it is a cyclic dependency graph if you trace through the millions of nodes (assuming you get through the offshore accounts which I presume function as sinks). Then ... these companies are getting huge valuations because everyone else is investing more and more into them? Including themselves investing into themselves ?? When does the buck stop? Doesn’t this wealth need to be backed up ultimately by some gold bars ? Even if it’s fiat and fractional reserve .. so someone’s trust rating is ultimately taking a hit? Is the us printing this money out of thin air on the back of it’s huge credit ? I know the economy is too complex to be boiled down like this but where are these 100x increases in billions coming from ultimately? People credit ratings summed over millions of people ?

I never took any Econ courses so admittedly my Econ is terrible.
I guess it's this part I'm reacting to more than anything:

“We’re taught we can’t trust our bodies and that it’s not enough to listen to your thirst.” But it turns out thirst is a great indicator of dehydration.

“You really can use [thirst] to know whether it’s time to drink or not,” she said.

You'll get thirsty before you are dead. But for me I hit the wall before I really feel thirsty. Nobody describes feeling insatiably hungry and following their hunger as a strategy to avoid bonking- they manage their exertion and monitor their carb intake. For me & water, it is the same.

Perhaps there is some nuance here- perhaps, like with food, your body suppresses the drive to drink during endurance sports. But maybe when you sit on the bench after a play, you do reliably feel thirsty when you need it.
I'm a former software engineer where noise and distractions used to bother me to NO end.. someone dropping a pin would make me cringe with frustration

5 minutes in a noisy sales office with 17 people and it all went away.. the brain adapts quickly..

I know building software is different though.. constructing an entire blueprint in the brain.. it takes focus.

One of my biggest mistakes is I rarely drew things out. If I ever went back to software, I would draw out the system, its parts, and each of the tasks/mini-projects before getting started
Mike Acton has some pretty common sense views on this:
https://youtu.be/qWJpI2adCcs?t=2796

Basically if your making your own game engine then use the context in which you are working. If you are going to end up with something generic like Unity maybe you should just use something like Unity from the start.
They're doing fine, their Daily Active Users is higher than Twitter even.
Imagine if you ran a company that didn't rely on outside investment.