skysight-inc/HackerNews huggingface dataset:
The "explore languages" link is now fixed. Thanks :)

Feel free to open an issue at https://github.com/exercism/exercism for the random language order. If there's consensus then it's an easy one to change.
Everything you said about NYC really applies to Manhattan. The point of the incentive is to encourage development outside of Manhattan.
Which is all well and good until you need to authenticate with a captive WiFi network....

For that I use this

https://www.amazon.com/TP-LINK-TL-WR810N-Wireless-Adapter-Re...

It lets me connect to one WiFi network and bridge and create a second private network. You can then connect and authenticate from another device and the Roku worked.
You can “disagree” all day long, but the fact remains your comment demonstrated a clear misunderstanding of how tax incentives work.
How coincindental this story came from the Washington Post - - owned by Amazon's Bezos.
What's your current situation? While exceptions exist, internships are usually designed for full-time students who are supposed to go back to school in the fall. If you don't have a hard commitment like that, companies would typically prefer to just hire you full-time.
I'll give my perspective as a web dev, it can be tricky to time the requests and decide when to query the API asynchronously.

Consider a user starts typing an email address, when do you send out the first async request to find out what authentication flow is required?

On each onChange event, first time the email is valid, would have issues that your email is foo@bar.com, but foo@bar.co is already valid, so you're probably going to debounce the call by a few hundred ms.

What if the user makes typos, or if they are typing in the email very slowly, and so on.

You might say it doesn't matter, just don't show any UI feedback until its valid, or keep refreshing the current status, but the problem is your control flow is decided by the email that's typed in. You want to redirect certain users to an SSO page, others to type in their passwords, and so on. susan13@domain.com might need a different authentication flow than susan13@domain.co, which are both valid addresses.

Another choice is the onBlur event, but this becomes clunky. Think about when it's triggered and how you would incorporate this into a nice UX, I don't think it's possible.

The inversion of control, giving the user time to fill the form in, and press an explicit "Ready, I've typed my correct email in, what's next?" button, makes the flow easy to code.

I hope this helps.
TFA should be called: "How to oppress your employees into doing exactly what you want"
It really depends on what the site is and what the user ID is. For example, I know the account "NLips" exists on hacker news, that's not a "security failing," nor can that information be hidden, however, it would be a security issue if I could put my boss's email into a porn site to see if he has an account.
> Of the $11.4 billion in net revenue the company generated in 2018, $3 billion came in the last three months of the year, up only 2 percent from the previous quarter.

To what degree does Uber's main business have seasonality? Are people going more places when it's nicer out in the Northern hemisphere?
Comparing liquid and solid stages, it seems like significant reason to use a solid booster is to maintain proficiency in building big stages which could be used in military.

For space launches it seems to me liquid stages have overall edge in usage.
It should obey DHCP or static dns settings like any normal network device.
It's so typical of google's attitude of "know better" and imposing arbitrary rules of their own just because they can.
This "proper function" actually breaks any function on firewalled network. So paint it as failed.
New link for freelance interview engineer: https://boards.greenhouse.io/karat/jobs/4209954002
The way google does auth is also two screened, email -> next -> password

But! the "screen" is fake. the password field exists and is visible to the password manager (but not the end user) right off the bat, so it doesn't disrupt them.
Kind of rich for a company which pays hardly anything (if anything T all) in taxes to ask for tax revenue.
I had considered making a ray tracer that worked that way, but with the slight difference that rays didn't have to hit the camera, but would just have to hit a point within line of sight of the camera. Obviously there would be massive gaps between pixels, but I would fill it in with a Voronoi diagram [0], or perhaps shaded with Delaunay Triangulation [1]. This renderer would be nothing more than a toy or proof-of-concept, and not intended for real usage.

The classic FOSS ray tracer, POV-Ray, can actually do this. You can define a light and define an object, and it will shoot rays from the light to the object and trace each ray through refraction and reflection. With this, you can simulate the way ripples in a pool concentrate light on the floor of the pool [2] or bending and refracting [3], without manually calculating it and adding extra light sources.

[0] https://en.wikipedia.org/wiki/Voronoi_diagram

[1] https://en.wikipedia.org/wiki/Delaunay_triangulation

[2] http://www.antoniosiber.org/bruno_pauns_caustic_en.html

[3] http://www.povray.org/documentation/view/3.6.2/424/
Enterprise authentication flows for multi-tenant applications with internal users, tenant users, super users, and de-coupling the identity resolution from the authentication resolution and authorization resolution.
It seems as though it's just a difference in design. Chrome uses the system's default store, which for systems that are constantly updated is not a problem. But for systems that aren't regularly updated and can't get addition & revocations to their store then FF takes the lead here.
People should check out Safecast, which is a citizen-led open data network for monitoring and publishing radiation readings, including an open API:

https://blog.safecast.org/

They're using low-cost open hardware, including Arduino:

https://github.com/Safecast/General/wiki/Safecast-Devices

Here's their latest heatmap (well, radiation map) for Japan, centered on the Fukushima area:

https://safecast.org/tilemap/?y=37.14&x=140.67&z=8&l=0&m=0
You're reading a wire summary of a report on a leaked document that hasn't been made publicly available, that's why it's so vague.

The original piece that reported the leaked presentation is paywalled, but here is the link: https://www.thestar.com/news/gta/2019/02/14/googles-sidewalk...

A non-paywalled but more detailed summary is here: https://www.nationalobserver.com/2019/02/15/news/alphabets-s...
Cryptocurrency is great for merchants doing online transactions. Once you have funds in your wallet, customer can't claw them back except with the explicit action of the merchant.

Is it much easier for merchants to scam? Definitely! But it also allows merchants to trust that funds will never disappear with no recourse.
> This work was motivated by one of the claims formulated in the Manifest V3 proposal of the Chromium project: "the extension then performs arbitrary (and potentially very slow) JavaScript", talking about content-blockers' ability to process all network requests. From the measurements, we do not think this claim holds, as all popular content-blockers are already very efficient and should not incur any noticeable slow-down for users. Moreover, the efficiency of content-blockers is continuously improving, either thanks to more innovative approaches or using technologies like WebAssembly to reach native performance.

I don't think it's valid to debunk this claim without testing the speed of manifest/content blocker list-based blocking.
I wonder how much effect it would have on sales volume if ride prices were adjusted upwards to the break-even point? They must know what they are doing but it almost always seems counterintuitive to me to sell below cost over a long time period.

I like Uber as a service but I don’t really care how they do, except that a friend works at their AI lab.
Sharing an open office with anyone is horrible and yeah having your boss right next to you is even worse. People don't/shouldn't need that much literal supervision.
> Culture is the only long-term competitive advantage an organization can bring to bear,

wut.

these guys are trying to sell office furniture. but let's pretend for a second that this article _isn't_ in bad faith:

I have yet to meet an office layout designed for a cultural principles that delivers anything but a hollow approximation of the desired outcome. "Collaborative spaces" in every company I've seen feel fake as hell. It's usually difficult to be undistracted and private, alone or with your group.

Short of a large, glass-walled, soundproof conference room dedicated to one team, I have found no "manufactured" environment that reliably elicits excellent work.

I'm pretty sure the best office design for culture is "here's a big room. you decide who comes in here. here's some budget for furnishings" and then you figure it out as you go and let the trajectory of the work dictate the trajectory of the space.

---

separate from culturally shaped space, i do find designing for general happiness to be worthwhile and effective. Plants, views, lighting, etc. But that's not cultural IMO.
In addition to this, let's also keep in mind the huge cost of maintaining two different code bases of extensions for different browser versions.
As someone with moderate to severe ADHD, I can empathize with the sense of feeling utterly trapped by mundane responsibilities.

As you say, the human condition is shaped by our ability to make choices that defy instinct, and making the choice to keep going-- when you'd rather not exist-- is a display of immense mental fortitude.

I admire the hell out of you for persevering.
This looks like a great opportunity! I am a graduating high school senior and will be enrolling in an undergraduate Computer Science or Computer Engineering program in the fall. Is it still possible to apply through this application?

Thanks!
I am sure that most people who expound the joys of life when talking someone down from suicide, mean well, but I feel they're mostly trying to convince their own selves that life is always worth living.
Whatever metric you use, since HN as a community is effectively training the metric, you'll simply capture what HN users consider as "high-quality" comments.

HN users do have their biases (in my opinion):

- Anti big company (GOOG, APPL, ... Lees so for APPL thouhg)

- Mostly left leaning

- Value political correctness over accuracy

- Anti defense and government (loathe 3 letter agencies, despite being fully cognizant of their mission statements)

I personally do not consider any comment falling squarely in the above silos to be high-quality, but you'll see them being consistently up-voted by the community.
How to Code Your Own Confidential Token on Ethereum
Sorry to hear that. Since you didn't list it and out of curiosity, have you given religion a try?
I don't want to die not knowing.
If you use keepass, that'll happily autotype into pretty much anything.

Obviously autofill is nicer, but that works even for non-browser apps, so it's nice to have.
Thanks for the replay. Disclaimer, I worked on this study.

> There's a few issues with the conclusion here. First, they article measures and discusses only the time required to block a single request. Modern web pages are issuing many, many more requests than that, like the 35 that this page issues. At median timings, that would put the DuckDuckGo blocker at almost 300ms, well within what humans can notice.

That is true, but on the other hand the DuckDuckGo blocker is the exception here and they could likely improve this performance if it becomes their focus (one way would be to use one of the faster open-source alternatives). If you consider uBlock Origin, Adblock Plus or Ghostery, we see that even blocking 100 requests would not take much time (probably around 1 ms with Ghostery).

> The second is that this API is not used solely by the popular content blocking extensions, but by a variety of other extensions. The Chome team's performance concerns likely stem from the fact that a user won't be able to differentiate the browser slowing down and an errant extension slowing down the network requests, and there are examples of extensions that use this API to issue additional network requests or do slow things down. If you cherry-pick the good citizens of this API to show that performance isn't a problem in general, you're not showing that performance can't or shouldn't be the reason, just that it isn't the reason for the fast good citizens. What this data could be used to argue is that imposing strict deadlines on the execution time of these extensions would allow the content blockers that the community cares about to continue to function as they do today while also placing a performance cap on bad extensions.

There are indeed examples of extensions doing bad things: collecting private data, etc. But we are talking about diminishing the potential privacy protection of all users to prevent some abuse. On the other hand, the manifest v3 will not prevent extensions from being slow, or doing bad things. Extensions will still be able to use content-scripts, inject arbitrary content in pages or send any private data home. WebRequest listeners will also still be accessible (only not in blocking mode) which can allow any data collection.

So yes, I think these changes could in theory prevent some cases of abuse, but I strongly believe that they will overall weaken the privacy protection of users and that this is not an acceptable trade-offs.
Thanks. I agree that those for whom "go to college early" is a solution must be a small minority, although they do exist.

But I do wonder for how many more "do something meaningful" might be a solution. Guys perfectly qualified to be the bricklayer's apprentice... who we've decided must sit still in school until they're 18, even if it's a sad pretence of schooling.
I think uber’s rewards program will be successful and boost sales. I’ve switched all of my business meals and longer rides to Uber for this alone. Other food delivery services don’t offer a clear kickback. Lyft has a nice but poorly thought out program that gives you $5 in personal credit for every 5 business trips no matter how short.
Speaking as a user (and early developer) of Safari's content blockers; I have almost never run into an issue with them. What kind of development do you fear will be stifled by Apple and Google not having incentives to improve the blocking (which I find somewhat strange in the former case, anyways)?
> congrats on being faster than uBlock Origin

I'd like to see a comparison against the WebAssembly build of uBlock Origin though. uBlock Origin uses WebAssembly in Firefox to speed up some functions. I'm not sure if Chrome allows add-ons to use WebAssembly yet.
I'd expect it to be positively correlated with nice weather in tourist destinations, because more people would be in town at all. I'd expect it to be inversely correlated in major urban centers, because the number of people needing to get around will have less seasonal variability, and walking, waiting for a bus and riding a bike are all relatively more attractive options when it's not gross outside.
People go more places, but they're more likely to walk.

This is if my two options are walking or staying dry/warm in a car.
Censorship seems to be coming from the left. I think it makes sense for everybody to maintain as much privacy from .gov as possible.
I think this story is completely missing the point. Most companies would be risk adverse and would want the city to shoulder the risk with a bond and increased taxes to pay for it. It sounds like Google is proposing a form of equity compensation where they are paid based on performance. The metric for that performance just happens to be tax revenue generated by the project. It could just as easily be some non-monetary metric correlated to city revenue.
It's crazy to see how fast storage prices have fallen. Just a couple days ago I saw that you could get a WD White (Shucked easystore, pretty much a relabeled WD Red) 10TB for just $169. 1.69 cents/GB. And you can get 8TBs for $129 (1.61c/GB)
As a web designer, your goal wrt security should be to make your site only work with password managers, and never work with manually entered passwords.

Password managers aren't "Another thing to support" but "The only secure way to do passwords"

If your user can remember their password, they also likely: reused it elsewhere, have some pattern to it or minor changes that could be figured out from a email search in any password database, made it simple enough to be not secure.
You're making the assertion that it's impossible to say anything about time that's empirical, that isn't upon deeper examination a statement about human consciousness.

Yes that's a valid point and well-taken.

But there is a big difference between "impossible" and "just really really hard". And that's where modern physics is right now.

And if we were able to get a better handle on the hard problem of consciousness, the riddle of "what is time" might also yield.

So it's back to the metaphysical debate about whether the strict materialists are the ones who are "right" in all of this.

Matter goes through "events" that have cause and effect relationships, but can effect ever precede cause?

I don't see how you can empirically claim to have sufficient knowledge to answer that question.

But that's just me, I'm sure you see it differently.
> On the other hand, the manifest v3 will not prevent extensions from being slow, or doing bad things. Extensions will still be able to use content-scripts, inject arbitrary content in pages or send any private data home. WebRequest listeners will also still be accessible (only not in blocking mode) which can allow any data collection.

I can choose to not install extensions that do these things, while using ones that only have a manifest list…
They also got volunteers to take radiation readings in and around the Santa Susanna Mountains near Los Angeles, to verify that radioactive waste from an old reactor meltdown there was not kicked up during the recent wildfires. (It was not, luckily.)

https://safecast.org/tilemap/?y=34.16&x=-118.735&z=11&l=0&m=...
The biggest days are going to be holidays...NYE and Halloween are probably #1/#2.
I don't think comment karma is publicly available through the site or API, but average comment karma could be calculated based on total karma of user minus sum of post karma divided by number of comments.
Is this really a solved problem? If so, then wouldn't the solution be applicable to the emissions control scandals recently?
Are there lessons we can take away from further studies on the ancient reactor at Oklo? (see https://www.scientificamerican.com/article/ancient-nuclear-r... for ex)
> don’t split login across multiple pages

This is often necessary for enterprise applications; what they're often doing is making an intermediate request once they have your email address to determine how you log in. Do you use a password? Do you use SSO? If you use SSO, is it SAML? Do you have multiple accounts?

Here's my experience, as an engineer at an enterprise company. We tried to put everything on one page, and that included an SSO button for every type of SSO provider. Users UNIVERSALLY hated it. They didn't create their account; their company did, who purchased our product. They don't know whether they should log in with Email, Password, SSO, hell: Most of them didn't even know what SSO is or what Provider they use. They see a Google button and they click it, then try to log in with their personal Google account; their company doesn't use G-Suite, they use Office 365, we reject the login because they don't have an account, we get a support ticket.

Its absolutely hilarious to me that all of these Suggestions are motivated by the use of password managers. The number of people using password managers is literally a rounding error.
Anyone else suspicious...
HowApp: Learning tips and advice
There is better pictures and explanation at TEPCO site: https://www7.tepco.co.jp/wp-content/uploads/handouts_190213_...
While this is a good movie, one should be aware that it does not reflect the reality in Eastern Germany all that well. It's not a documentary.

In preparation for the film, the director asked Christoph Hein, an Eastern German writer, to describe the typical life of a writer in Eastern Germany (which is what the film is about). At the premiere, Hein's name was included in the opening credits, but he asked to have it removed, because he couldn't see his story in the film. He described the film as being more of a dark fairy tale than a depiction of life in 80s Eastern Germany.
Or the Talos god from Elder Scrolls lore.
Nice work! I'd be interested in how we could improve the UI to cater better to your third point. If I'm interested in how a language looks I tend to find one good solution, then look at the poster's profile and browse other of their solutions in that language. I'd welcome your thoughts :) Would like to open an issue on https://github.com/exercism/exercism and we can discuss this more widely with the Exercism community?
On the Windows OS side of the house, the Windows Internals book is a great dive into the nether regions of the OS.

https://docs.microsoft.com/en-us/sysinternals/learn/windows-...
I'm not sure any one day is super important, but I honestly just don't know.

Is 1 or 2 spikes in a season that lasts months going to carry you, especially when supply is limited?
If you don't have an idea do not take off for a year to "play house" with a startup. If you've read any of the advice on this site the startup it's mostly about your idea. And it's best to be passionate about that idea and have a strong connection and urge to solve it.

I can't imagine anyone being successful with someone else's idea.

If you want to take a year off for fun or any other reason that's fine of course.
Yep! I did an internship at a startup after my senior year of high school - it was awesome.
A gem for a draft/publish model in Rails ActiveRecord
I'm probably in the minority, but I just expect web sessions to persist regardless of what checkboxes I check. If I have to login to anything on a computer that isn't mine, I just open a private session (usually incognito in Chrome).
To elaborate on your point, it doesn't just require lots of data, it requires lots of data with a corresponding high effective sample size. If you want to forecast sales for next Christmas, I don't care if you have 2000 terabytes of granular orders and sales data, because the effective sample size for past observed Christmases is going to be like 3-4 (Christmases further than 4 years back may no longer be representative).

In these cases nice structural time-series models, which are in spirit not so different from what existed 20 years ago, will beat deep learning.
Pretty common on HN.
Outline.com is able to access the star piece for no apparent reason: https://outline.com/BGYJSq
As you suggest, there are many ways to punish the bad citizens (slow or malicious extensions) without harming the good ones, which is what manifest v3 will do. You can solve with UX (e.g. showing that an extension is slowing down a page), or imposing strict guidelines on extensions for webrequest API times. Google is already quite strict on many aspects for extensions (e.g. obfuscated code was forbidden recently), so I don't see why they cannot be strict also with performance.
We'd like for the marketing website, product demo or deck to do the talking. We don't need someone to re-hash something they should have already communicated in another format.