skysight-inc/HackerNews huggingface dataset:
I strongly disagree. A trivial SQL statement that saves thousands of people lots of hassle is a very impressive IT feat in my eyes.
Cheesytimer: Open source app that gives you insights about how you spent yourday
Um... wouldn't the act of compelling them to produce false declarations for the purpose of obtaining sales under false pretenses fall under conspiracy to commit (wire) fraud which is a federal crime?

Are there any lawyers that could comment on this?
I tend to build on default/full and release in alpine.
Has anyone been held in contempt of court for failing to update a warrant canary. I don't believe so. So it seems to be working?

Another poster pointed out that courts generally do not uphold orders to compel speech when that speech is untruthful. So a court order to untruthfully update a warrant canary will not likely survive a legal challenge.
Possibly something along these lines: https://en.wikipedia.org/wiki/The_Official_Preppy_Handbook
Google actually did this at one point. I was in the Netherlands when I signed up for Google+. I don't speak Dutch and hadn't changed any of my language settings - the only way they knew was via my IP address. The UI was mostly in English, but all my circles (or whatever they were called) were named in Dutch.
It’s worth reading the mailing list posts by BITS (the main proponent of ETS) here: https://mailarchive.ietf.org/arch/msg/tls/KQIyNhPk8K6jOoe2Sc.... The replies are pretty informative. You can see here the message in which BITS starts to consider fixed DH keys, which were implemented in ETS: https://mailarchive.ietf.org/arch/msg/tls/3d7TM0g_EdtMzhgmcP...

> Tue, 27 September 2016 18:21 UTC

> The various suggestions for creating fixed/static Diffie Hellman keys raise interesting possibilities. We would like to understand these ideas better at a technical level and are initiating research into this potential solution.

The core argument made by BITS is that they need a way to log TLS traffic such that it can be decrypted later, in order to provide data retention in line with regulations. While this could be done by logging all ephemeral keys generated by the servers, BITS argues that this isn’t practical due to their use of dedicated packet logging hardware that is key-ignorant. Instead they want to use non-forward-secret TLS so they can decrypt past messages easily. Their beef with TLS 1.3 is that it removes all non-FS key exchange methods, and further that by explicitly obsoleting TLS 1.2 as a standard pushes them to have to adopt 1.3 in an enterprise environment (or risk current/future regulatory scrutiny over their use of an obsoleted standard). Hence why they want to develop a competing, active standard with non-FS key exchange.
Ask HN: How does a tech person work well in a fire-all-developers style company?
Recently Travis CI was acquired by Idera, and it's been followed by widespread firing of developers. (Same thing happened with Sencha, same company.) The model is a large company that takes loans led by private equity, acquires companies, fires all developers, replaces them with outsourced development claiming they are 'investing' in the product. This is not only Idera; other companies do the same. HN discussion here: https://news.ycombinator.com/item?id=18978251

Let's suppose you're one of the few remaining after this has occurred. You're a tech-literate manager, or one of the few developers left. How do you work effectively? If you wanted to change business strategy to persuade the value of developers knowledgeable in the product area, how would you? How do you respond when sales slow after seeing the results of outsourced development? How do you communicate with that kind of corporate leadership? How can you rescue the product that you've spent so much time on and love?
How Email Messages Work
> In anycase, this article seems to disagree with you that the money wasn't paid out to investors: (https://www.theverge.com/2018/9/29/17918252/elon-musk-tesla-...)

Didn't realize they were planning to pay that out to investors, thanks for the correction.

The short-sellers also lost money due to Musk's fraud, though admittedly that's a small fraction of volume.

To get an estimate of the damage done, the price went up by ~$40 share, with ~30 million shares traded. Let's assume the average buyer bought at the midpoint, so they lost $20/share. That's still $600 million transferred from people who believed Musk to people who doubted him – 15 times larger than the total fine to Musk + Tesla.
What advantage does that have over a warrant canary for the entire site?
How does Ben Thompson know that Microsoft Azure holds the second position in the cloud market? Even though they are growing substantially according to their earnings call, Microsoft doesn't disclose what the numbers are for Azure. They only release it their numbers for Cloud, which includes a lot of products
That was my exact thought - CBC mode is not secure against a vast array of attacks, and I’m not sure if I want to read an entire paper to determine if there’s anything new/novel in attacking a known weak cipher mode
Indeed, but it's not a new idea. This is Bigtable's architecture after all, which is now 15 (?) years old. There are a bunch of advantages: DB developers can focus on the DB, not the storage layer (which is in many ways much harder to get right), you can scale storage and processing independently, you can easily support different tiers of storage (SSD/HDD).

But by far the biggest advantage is operational. Your DB is now stateless! Nodes can die and be replaced in seconds, because they don't store any data; this makes designs like Bigtable's much more practical. You can quickly scale up the processing to deal with spikes without spending hours re-replicating. Operating the storage layer is still inherently challenging, but just has to be figured out once for all your DBs and other processing systems.

While performance can take a hit, this can be mitigated by local caching and good internal networking. It isn't able to meet the lowest levels of latency (sub ms), but in practice it works great for web applications.
> None of the studies I've seen have even considered whether a privileged background does translate to higher than average merit. And why wouldn't it? We already know household income is correlated with IQ, and growing up having access to better schools, better extracurriculars, less influence from crime, etc is likely, or at least possibly going to build a more competent child.

We don't know where brilliance will come from. We do know that high stress levels early in life are detrimental to achieving it, though. By not offering high quality, low stress education to all children, we are probably leaving a lot of creativity and innovation on the table.

A good example of such a phenomenon that succeeded would be https://en.wikipedia.org/wiki/Srinivasa_Ramanujan, however, there are far more examples of brilliance rising from blue collar/impovershed beginnings.

If we instead just leave education to the whims of wealth access, then it should be pretty obvious that while education would be better for people who are wealthy, it wouldn't guarantee that it would be effective for generating the most competent people possible, since the input was limited by wealth.
Here is the APNews article about dropping the pot convictions: https://apnews.com/1aeb5fed9e8746d8b120049e908af06c . They don't use the phrase "algorithmic justice", just technology.
Everything you mentioned is included in CPI (consumer price index): https://www.investopedia.com/terms/c/consumerpriceindex.asp. CPI and PPI are the two components the Fed uses to measure inflation.

Interests rates are lower, so the sticker prices on tuition and housing and -- to some degree -- medical expenses are higher.

But how does CPI measure these things? It takes EVERYONE'S mortgage payments (which don't change anywhere near as much as sticker prices), lumps them together, and then takes the average. This makes sense. Mortgage payments (and rent) make up a huge percentage of most American's monthly payments.

Sticker prices on houses don't.

Inflation isn't meant to measure if things are getting more expensive for new homeowners (or any subset of the population). It's meant to measure if prices are increasing for the country as a whole. Just because houses cost double today what they did 8 years ago, it doesn't mean EVERYONE is paying double for housing.

If you took the sticker prices on houses (which is largely meaningless -- very few people buy houses in cash), this would be a metric that made people struggling to buy a house feel good. But it wouldn't help the Fed in anyway do its job of maintaining a steady rate of inflation so that we have a stable environment to invest in / allocate capital efficiently and effectively.

Yes, something needs to be done about housing market cycles and how much damage they cause to the economy. But putting sticker prices in inflation is not the solution.

I'm not positive how tuition is factored into CPI -- but I'm pretty certain it's a function of your loan payments.

The medical industry is batshit insane in this country, and I have absolutely no idea how this is measured. The only way I can think is that it's a function of how much you and your insurance pay for a bill. The sticker price on medical expenses is basically a made up number.
They're key components of BDUF —

"Figure 7. Step 3: Attempt to do the job twice - the first result provides an early simulation of the final product."

http://www-scf.usc.edu/~csci201/lectures/Lecture11/royce1970...
Because of energy. Productivity going up means one person uses more machines, and as time goes, the machines do an ever increasing part of the job, because the energy feeding the machines is so much cheaper than human labour (in the order of 200 to 400 times cheaper).

This is not by chance that wage stagnation appeared in correlation with these events: US oil production peaked in 1970. Dollar convertibility to gold ended in 1971. Oil crisis came in 1974. OECD countries enter a permanent trend of public deficit in 1974. Unemployment soared in OECD countries at the same time.

As the ability to augment energy consumption became more and more capped by the ability to extract energy from the ground, workers gradually lost their capacity to obtain their part of the cake because it's always cheaper to put more capital than people at work, so far. The trend intensifies, nowadays we're talking of ending employment and of the necessity of basic income and similar tools.

Until the (unavoidable) end of cheap energy, that is... Then we'll be back to the ancient order of things, when a country GDP was entirely correlated to the size of its population.
Really appreciate this comment. It's succinct and eloquently states the sentiment I was trying to express.
Hey, interested to be part of Mumbai's HN meet up.

Interested even to help coordinate one.
Three or more days is too extreme. I have very positive experience with 14/10 method where I skip eating between 10pm and 12-noon.
In the US I've mostly heard the three-generation sequence as, "built it, grew it, blew it".
CBC mode in TLS SHOULD NOT be used in any new systems.

Repost Moxie's The Cryptographic Doom Principle, again...

https://moxie.org/blog/the-cryptographic-doom-principle/
To fair English has big pieces of French and Latin vocabulary.
It was justified.
For me it's sheer willpower and the more you do it the easier it gets (hunger can be very dependent on what your body expects).
Where have I seen this before... CGI scripts?
I owned the blurays/dvd for everything I showed. I got the backups from the "usual places" because it was easier than ripping them myself. I had every single disc in the office.
Google’s Flutter toolkit will get web-based dev tooling
Subjective conclusions and actions based on objective data do not make the data any less objective.
Mostly DL today is data based which relates to our one time experiences and henceforth learning via them then taking actions through memory which I believe is close to the sub-conscious state, On the other hand I believe, reinforcemnt learning is relatble to consciousness whose actions are dependent on the environment/surroundings. But to be true, dl is not at all near to these states of mind yet because its nothing but mere mathematical intelligence. Consciousness and sub-consciousness are really complex right now to be achieved via DL alone. Research is still going on to find out other mathematical models to make systems intelligent. But, I feel these states could never be achieved as the human brain is governed by the Law of Attraction of its conscious, sub-conscious and unconscious mind wheras as AI today revolves around mathematical formulations only. As an example, human brain involves interactions among various networks itself to find out an answer to a situation whereas AI today via BP tries to solve a single problem via a single network. Interactions among various types of networks is something that needs to be looked upon in future. To add on even with these implementations in the system what would merely be possible is intelligence and not creativity which is the pearl of the human brain. With intelligence all the mundane jobs of the world could be automated but human creativity will be the supereme power then. There is no need to worry though if that happens because that will surely help human brains to adapt to the surroundings thereby focusing more upon the innate power of creativity. The future is only bright with AI becoming a helping hand for our intelligent parts of the brain. Its just like the inventions of the machines that the supereme power of the past i.e. mechanical strength was eliminated to be replaced by the advent of intelligence and same will be the case when intelligence is automated.
Likely not the research referenced by the GP, but this paper:
http://web.econ.ku.dk/gensowski/research/Terman/Terman.pdf
finds that Conscientiousness, IQ, and Extraversion are correlated with increased income (for men at least) among the Terman survey.

If I'm summarizing correctly, the Terman survey includes a group of 856 boys and 672 girls born around 1910 and selected in 1921-1922 who were followed until 1991.
I doubt it. Based on home internet soultions, going from <1Mbps speed to 10 makes a difference, going to 100 not so much, and gigabit range is useful for bragging rights only. 95% of end users do not have such bandwidth needs.

You get diminishing returns even on exponential scaling.

Ofc some possibilities do open, like cloud backup, or even personal data servers, but they are laregly unexplored as of today.

I cant imagine what would 5G bring practical to the phone, bandwidth doesnt seem a killer. Latency is probably acceptable as well. Maybe im too limited.
The timing of this article is interesting given that John Oliver just did his show about this topic on Sunday. I wonder if that forced them to publish this?

https://www.youtube.com/watch?v=WhMGcp9xIhY
>As far as I am aware CBC has been discouraged for a long time precisely because of the padding oracle attacks

My understanding of these padding oracle attacks was that they were the result of an implementation vulnerability that leaked information through error messages about the padding being the cause. Not that the problem was an inherent flaw in CBC itself.

If the server simply used generic error messages when the padding was invalid, there would be no 'oracle' AIUI.

Edit: https://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf
If I am visiting another country, I can buy a physical game or movie in a brick and mortar store. There isn’t any reason it shouldn’t work for online purchases.
CSS framework for rapid UI development
High Downloads, Low Usage: Comparing Top Social VR Installs to Concurrency Rates
I agree. The 16/8 seems to be beneficial from my own personal experience and much more sustainable.
+1 for Bangalore
Of course they could compel you to keep it, the CIA has overthrown countries, performed psychological experiments on unwilling US citizens, they've sold crack and smuggled arms against Congress's wishes, the list goes on. There is nothing stopping a part of the US government from compelling a company to keep a warrant canary.

But that doesn't mean canaries are useless, they're just not protective if the US government has deemed it important enough to force it.
Indeed. I'd say this is almost always the case. People apply Cunningham's Law without realizing it. That manager you hear confidently stating their project idea? There's a good chance they aren't really sure about it, but assume someone will push back if it's wrong. The same applies to behaviour; speaking back is often what it takes for the other person to back down from unethical behaviour.
Why I Never Work Weekends
>Shocking to think that this is coming from a nearly 50-year old man.

Is it though? Personality types are not something that changes with age. Maybe it gets toned down or more mellow with age, or it could get more extreme as they become more comfortable/confident in doing what ever trait it is. Pre-social, it might have only been notice by those in direct contact with an individual. Now, it's made visible to the entire online world. Musk is still younger than Trump, and he's not slowing down at his age either.
Often, the law does treat action and inaction very differently. Eg: it’s illegal to poison your ailing grandparent, but legal to let them die by removing the feeding tube (because you are just “not feeding them anymore”).
> You mean you're reporting them without buying them and testing them, based on what you think the capacity and price-point should be?

Yes. If someone's offering an impossibly too good to be true deal in an area that's rife with data-destroying counterfeiting [1], they do not deserve the benefit of the doubt. This is a very well known and prevalent type of fraud.

Personally, I think Amazon is negligent for not very tightly controlling the vendors that are allowed to sell SD cards on its site. They're not doing enough to keep fraud out of their store.

[1] https://www.eetimes.com/document.asp?doc_id=1326059# (from 2015, capacities have obviously changed since then):

> Tests by the Counterfeit Report found that the cards will work at first, but generally speaking, buyers are purchasing what they think are cards with capacities of 32GB and up. Instead they are getting are cards with 7GB capacity. Counterfeiters simply overwrite the real memory capacity with a false capacity to match any capacity and model they print on the counterfeit packaging and card, Crosby explained. Users can’t determine the actual memory capacity of a counterfeit memory card by simply plugging it into their computer, phone, or camera. When the user hits the limit, the phony card starts overwriting files, which leads to lost data.

> The Counterfeit Report often comes across cards in capacities that don’t exist in any product line, and the cards it purchases and tests that are 32GB and up are usually always fake. The counterfeiters make a great profit on the fake cards, and there’s no consequence.
Much as it's important to lower barriers of opportunity to people who have not grown up in privilege, I have to say that as someone responsible for hiring / managing people -- it is undeniable that people who come from much worse off backgrounds are much more likely to have a harder time working successfully in a high performing environment.

As you look to populations who didn't go through the same kind of education, social circles, family environments ("privilege" as they say nowadays), you find people who:

-- Don't hold conversations with the same kind of productive interaction

-- Don't have the same goals of success or motivations (individually or team)

-- Haven't yet been exposed to professionally challenging situations and know how to handle them healthily

-- Have a higher quotient of "fuck it" if they encounter difficulty

-- Display gaps in judgement on how to behave / what to do or not do at work

-- Just have more hard-to-manage stresses outside of work on their life

-- many more personality / work-related traits

Of course I'm not saying that everyone from a less privileged background is like this. But undeniably as you "turn the knob down", you encounter more and more of these issues. If it were not true, everyone pretty much would want to hire from every stratum of society.

It's a sad truth that the indicators of a privileged background aren't just superficial meaningless markers. They actually do pretty well indicate how likely someone is to succeed. They mean that someone has gone through education / upbringing that give you a pretty good sense of how that person will behave, and perform (in general). Hence the vicious circle.

This is why efforts like at Accenture (?) to strip resumes of university background or other "biased" indicators will be unsuccessful. The noise-to-signal that results will be overwhelming.
Maybe it was just an oversized puddle, and not actually a lake.
Postgres has a feature called "enums", but they are not polymorphic--all values for a given Postgres enum must have the same type.
https://roadsandkingdoms.com/2018/history-penang-10-dishes/
Why are you trying to "rescue the product"? It's not your product. And whoever owned "your" product didn't value it nearly as much as you do, since they sold it to Idera.

The ship has sailed, it's time to move on.
The appeal of the Warrant Canary design is that the operator simply has to take no action (i.e. not update the page) to signal that they've been contacted by law enforcement, in theory making it safer. It's still a risk though.
Ah, interesting. I wrongly assumed the SoftLayer bare metal servers might be closer to EC2's bare metal offerings where, from the outside, you're given the same set of management tools as a VM, and from the inside, a fairly limited hardware surface area is exposed to you.
Donald Trump Jr. Claims Instagram Is Censoring Conservative Posts
"The question at hand here is whether the government can compel you to keep the canary in place after a search/siezure."

I personally (which is the only viewpoint that matters here) would consider falsely updating the canary to be acting in bad faith. I would consider it to be morally negative. I consider it to be of the same kind as the other examples I gave of acting in bad faith.

YMMV.
Me in a couple of years. Price will fall to reasonable levels, and then further, as it has for the 200 GB and the 400 GB ones I currently use but certainly did not buy when they just came out.
> Likewise, you can’t just assume that people will always use a.m. and p.m. because some countries use 24-hour clocks.

As in 90-95 % of the countries in the world.....
https://i.stack.imgur.com/43dwH.jpg
> Not that there was an inherent flaw in CBC itself.

But if history shows it's difficult to implement something without creating vulnerabilities, and there are alternatives which are less prone to mistakes, it should be retired and discouraged to be implemented.

Also, CBC itself is not an actual problem, but CBC in TLS is authenticate-then-encrypt, which is how the vast majority of problems are created.
Seems like your fix[1] for this is a bit fast. You are already importing `path` in that file. Also, you can do this with just one `path.relative`. Lastly, the url package method you are using is deprecated[2].

[1] https://github.com/remoteinterview/zero/commit/b4af5325c388e...
[2] https://nodejs.org/api/url.html#url_legacy_url_api
TSLA shareholder here. I'd prefer a loose cannon that is passionate than a by-the-book than an incentivized corporate hired in without the level of passion for what is being built. I've see so many cases of well-speaking but dispassionate CEOs brought in and how poorly those turn out.
Was about to say this. Opened the article to expect some reference to the John Oliver show, but still haven't found any.