skysight-inc/HackerNews huggingface dataset:
Ok, help me reason though this. Let's say that native americans are poorer on average and therefore less likely to repay a $1k loan. Therefore, if you give out loans based on the probability that someone will be able to pay them back you will be discriminating against native americans (not the individual native americans with good credit scores, but you will be denying more native americans on average). So, you shouldn't try to compute how likely it is for someone to pay their loan back. I keep hearing things like, "you can't use zipcodes as input because zipcodes are correlated with race and it is illegal to discriminate on race." However, some races have better financial situations on average, which means that financial situations correlate with race, and by the same argument you shouldn't take finances into account when you review a loan application.

Obviously that is absurd, but where does it go wrong?
"New Users" register IRL, and can then use either the website on desktop, the website on mobile, or the app. There is no ease of onboarding provided by the app, given that onboarding happens IRL.

Perception varies by cultural context, so it doesn't really matter how people with no connection to Saudi Arabia perceive things.

Removing the app would mean making travel even harder, not easier - you should look at how all of this worked before the online service was introduced.
They're real, and they're effective. My son watches Ethangamer and has already asked me to install 2 games he saw on there.
Probably a some mixture of both. Or at least reckless disregard.
Non-destructive archaeology finds military fort beneath Alcatraz prison
If they took the customer funds and invested them straight into crypto when it was peaking, thinking it was going to continue up, they would have lost a LOT of that money.

On top of that, the Canadian government locked up a portion of their funds right around the time they started to experience withdrawal problems.

Makes sense to me.
Couldn't women use this app in the place of their husbands/guardians by faking their info to escape?
Philosophical Maxims Updated for Freelancers
Just imagine the amount of cash if he went all black :p
Sadly, there is people that can't use yet http/2
A UI is necessary for users to use your product. That doesn't mean the UI is your product.
Simple, but Hard
Pro tip: don't stand up the candidate, as happened to my gf at Youtube on Friday. She showed up, signed in, but the recruiter never showed up.
As soon as you label people based on superficial personal traits that are outside of their control and without their consent, that's discrimination.

If you start giving some people special treatment just because of their ethnicity or gender, you're going to be opening up more cracks in the system for other people to fall through - and it will hurt those people even more because they will rightly feel that the whole system is working against them personally; down to the core specifics of who they are (unfortunate individuals who don't fit under any special label).

Modern anti-discrimination approaches are often racist or sexist. They should not try to classify individuals into superficial groups, instead, they should be decided on an individual case-by-case basis based on the individual's history.

The root of injustice is simply bad luck. Ethnicity and gender are only loosely correlated with bad luck but there is no causal relationship between them (not so much anymore at least).

Anti-discrimination efforts should be aimed at averaging-out the effects of bad luck in people's lives; so that means we need a way to quantify luck on an individual basis. It's a difficult problem to solve, but it can't be solved by making gross generalizations.
I'm very happy for the kid and like the idea that these programs are available but does this incentivise companies to effectively outsource their bug finding?

From a purely fiscal point of view, why hire expensive full time staff to go digging when you can just throw a few sheckles at stuff as it comes up?
The comma is just there to visually separate the key combinations, I did not implement a better solution for visualizing a combination yet.

A normal alphanumeric (36 characters) password with 5 chars has 36^5 possible combinations:
"12345"

A combo password also has this 36^5 combinations since you can enter a normal password (it is just 5 single key combinations):
"1,2,3,4,5"

But there are even more combinations since you can press keys simultaneously:
"12,3,4,5" or "1,23,45," etc.

The checkSequence flag toggles the password checks strictness.
When false you can set the password "12,3,4,5" and entering "21,3,4,5" will still be valid since "21" is the same two keys pressed as "12".
When set to true only "12,3,4,5" would be accepted.
RIP PS Vita: Sony Officially Ends Production
He supposedly died in a region rife with fake death schemes.

https://www.newsbtc.com/2019/02/06/ceo-who-held-150m-in-cryp...
The Siege of Paris – Berwick and Chomsky on the Human Language Faculty
Scripting COM Components in Haskell [pdf]
Because there's a space to say something to the government of Saudi Arabia "Listen, what you're doing is fucking disgusting. Maybe I can't stop you, but I sure as hell don't have to help you."
I'm actually thinking of building an airtable clone, on the back of a graphdb like arrango possibly, where you can actually embed other sheets in a field in a table, or link to other sheets, or just pull data from other sheets or 'bases', so that ALL data across multiple spreadsheets is accessible across all spreadsheets in one way or another.

On top of that more data types including : binaries, images, passwords/crypto-hashed fields, pdfs, markdown -- with popup markdown editor.

I'd also like to have some cool integrations ready to go like - being able to convert a spreadsheet of product listings into a complete shopify-like store. Add a product to spreadsheet, it shows up in store. (Similar concept but for Blogs). I'd also like to build in a very versatile 'event' system and api that basically makes everything zapier-ified, when data changes other things can happen.

On top of that I'd like to add some app builder that can take data 'bases' and turn them into ios/android apps, similar to Bubble.us.
Cryptocurrency’s most realistic use case: rapidly educating libertarians on why financial regulation exists.
Yes. I do think there's a benefit in having a reference language--just don't be pedantic. For example, certain design patterns might be needed for C++ that are built into a language like Python. Knowing which libraries the candidate (or the company) leans on is a good topic to discuss. Pure pseudocode might be too generic to suss this out. It depends what you're evaluating them for. There's little to no value in testing them on things like mismatching parens or typos in variable names (I've heard stories about people getting called out on those things using a whiteboard).
For a tech touted to be a complete and indisputable record of financial transactions it sure seems like a lot of cash has disappeared within it.

I don't claim to know anything about blockchain tech but I have been exposed to the hype around it and the mystery for me is why anyone wouldn't have cashed out long ago.
So much diagrams with made up data. It's like ... it's OK to make up things just because it not falsifiable. Who could have thought?

"Onsite interview (high effort): The candidate goes onsite for a day of interviews at the company."

You don't have to interview for a day, silly.

"Often, resumes are screened in a few minutes (or seconds!)"

Jesus, throw a dice instead.

How about this process.

* Post ad.

* Pick 4 candidates and bring to your office. (Throw a dice to filter resumes out if they are too many).

* Interview them for 1h and give a offer to the best candidate. If he declines, give offer to 2nd best and so on.
Can I join the bug hunt too?

Just leaving this here:
https://coincircle.com/l/50VVxbObg3
> What has really annoyed me as of late is the confusing branding. Standard vs Core vs what the hell is Framework 4.7 called?

I agree that it's confusing at first, but when you step back and look at why Microsoft went down this path, it starts to make a lot of sense.

When .NET was launched in 2002, it was a closed-source, Windows only development framework.

Microsoft was a very different company back then, and Windows was its gravy train. If you were a developer inside the Windows ecosystem, you were showered with (closed-source) love. If you were outside? Well, fuck you, Microsoft will crush you. Everything was oriented towards getting retail/enterprise consumers to buy Windows (and Office etc).

The 180 degree flip to embrace open source is a very recent development. Microsoft realized that desktop OS's were less and less relevant commercially, and that the future was in cloud services.

I haven't looked at the figures, but I assume it's a lot more lucrative to lock in tens of thousands of dollars per month in cloud subscription/support fees than selling Windows direct to consumers.

So with this reorientation, Microsoft needs a strategy to capture the cloud services market (and keep in mind that this is 5-10 years after AWS has been running the shop).

The solution? Open source .NET to accelerate its adoption and entice developers towards Azure.

First, Microsoft won't care if you use their implementation of .NET or Mono - as long as you're using it on Azure, you're fine. Hence .NET Standard - literally, an open-source standard that anyone can code against, and know that their stuff will just run, no matter which implementation is used under the hood.

Second, Microsoft then release their own implementation of this standard - .NET Core.

Third, we come to .NET Framework. For most entrants to the ecosystem, you can consider this to be legacy. This is the evolution of the original (2002) closed-source approach to .NET, and is only sticking around due to Microsoft's long-term commitment to its software releases.

Again, I agree that none of this is clear when you're new to .NET. It makes a lot more sense when you realize the naming evolved from Microsoft shoehorning a legacy platform into a fundamentally new, open-source/SaaS subscription strategy.
The terminal could have opacity at 75% and then have some bioinformatics stuff in the background in another application (browser, whatever).

I want to believe.
Wow, some serious quality astroturfing there. Who knew that every single Saudi man suddenly wanted to write exactly five lines of effusive praise about their government's app on the same day!
Anybody have a legal way to read the full text without paying?
> The entire financial sector runs on Java

No, it doesn't. Sure, you'll find a good amount of Java, but it will likely be C++ anywhere that's really latency sensitive. C# is also heavily used for front end GUIs now. F# is growing as well, and the quants (and others) love Python.

In my experience in finance, Java is now legacy. It was a fun experiment and had a good go, but it's now withering away.

Source: 15 years in financial development, mostly hedge funds, across 4 firms, and having interviewed with dozens of others.

Only place I've worked at doing active Java development was a startup CRM SaaS targeting the financial space. Coincidentally, the only Oracle shop ive worked at.
I am not a big fan of Islamic regimes and the Islamic law but then I think American citizens should realize that not all other countries share their values and American corporations are not beholden to any values American society might pretend to have.

I would rather ask American people pressurize their government from not selling weapons to Saudis and not to protect their Royal family. That does 1000x damage to Saudi women and American values more that Google making things simple for Saudi Arabian women to move around.

Would you rather have a scenario where a woman needs to wait for the husband to drive to the airport and permit her to travel ?
You still neee security engineers to operate the program.
When your company is as massive as something like google and you have nation states, groups, and individuals literally trying to hack you every few minutes, it’s definitely more financially viable to have a full time security team

Outsourcing bug finding is only a retroactive solution, not a proactive one
> understanding data structures and algorithms doesn't necessarily correlate to one's ability to identify security vulnerabilities.

No, but it does suggest that you're likely capable of learning security work. Just like your data structure and algorithm knowledge didn't come for free, nobody is born knowing how to find security problems. You need to work for it.
Lambda calculus inspired experiments with artificial chemistry
@media (prefers-color-scheme: light|dark|no-preference) { ... }

https://drafts.csswg.org/mediaqueries-5/#descdef-media-prefe...
I just “cashed out” the joke £50 i “invested” in Btc a couple of years ago. They are now worth £18.

I expect the real sharks have cashed out a long time ago.
Dyslexia (A poem by a 10 year old student)
>Once you start deleting apps/speech, the requests and outrage become never-ending.

Apps are not speech, and apps have been deleted in the past, because Google has terms of service which can be violated. And yet, requests and outrage have not already become never-ending, therefore it is already demonstrably false that any attempt to delete an app must lead to never ending requests and outrage, because neither human beings nor society work that way.

"slippery slope" seen for the empty concern trolling that it is.
> I don't know there's any great solution here.

Stop marketing Tesla's Level-2 ADAS as 'AutoPilot', maybe? It would be a pretty radical change, but it would get rid of what is by far the most common misconception about it - namely, that it allows for even momentary distraction by the driver (as the "autopilot" on an aircraft would) - in fact, it does not. On the flip side of it, they could fairly reintroduce the AutoPilot name when they reach at least Level 3 on the ADAS scale (allowing for momentary distraction in highly selective conditions, such as-- for a start-- when the car is basically restricted to moving at pedestrian-safe speeds anyway, due to intense congestion or other reasons).
Right, only you don't know what it's called, where to download it, or how to write the code.
Your personal financial history is a lot more specific than your zip code. They may be on different ends of the same scale, but it seems far more defensible to make choices based on financial situation than it does zip code.
Because a bug bounty does not guarantee that people actually look into your code. Of course some white hats while invest time upfront, but there is no guarantee and absence of payed bounties is not evidence of absence of bugs.

Also, a bug bounty usually limits the scope a lot more than a typical pentest does, i.e. no testing of infrastructure security, internal networks etc..

Lastly, if your bug bounty is high enough to make highly skilled people spent time to find your bugs its probably cheaper to just higher some security folks yourself and prevent excessive payouts (by preventing bugs).

Of course all of this does not stop some C-levels from using a bug bounty as replacement, but the issue is not as clear cut and especially the last point should even make sense to non-technical people.
Why not both? The bounties are great for finding things your security team might not think about or might consider low-pri, but having a dedicated team is important to make sure you've got the core use cases covered.
Believe me- these programs don’t even scratch the surface of the amount of security vulns companies have hiding in their code base. Having a good bug bounty program, internal product security team and a continuous third party audit process are all parts of having a good security posture.
They seriously need to figure out how to fold WiFi in as an option in the ticketing process. It's annoying to have to fumble around with a credit card on the plane, typing in my address and billing information (which they obviously already have).

Make it easy to purchase WiFi access and just about everyone will click that box. Once on the plane, just have the customer scan their boarding pass or something to enable the service. Laptop users could be accommodated by entering the usual 6-character confirmation code that they already use for everything else.
I was most definitely not the target. But having such a miserable experience just accomplishing the basics did not make me at all inclined to consider Oracle for future projects.
What does the second part of that sentence have to do with the first?
There usually isn't unbiased data (think: law enforcement databases), though you could maybe remove the variables more likely to be discriminated against and train on that

There are statistical analysis that can answer your second question, and it's not only based on disparate results (though that's probably part of it). And the solution is not "changing the signal" of the bias
> there must have been a catalyst

There is - having visionary, charismatic founder(s). This pattern has been successful at Apple, Microsoft, Amazon, Facebook, Netflix, Tesla\SpaceX, Google.
> crazy inline styling and absurd choice of elements pretty often these days

i'd be interested to hear what objectively measurable properties this way of doing things might suffer from. e.g.

1. does it result in more data being sent over the wire?
2. does it result in slower page load speed?
3. is it less widely supported by browsers?
4. is it harder to maintain?

It's a bit hard to assess if this is easy to maintain without knowing how the page is generated. Maybe it's built by some pipeline that is very easy for the developers to maintain & easy for people to tweak the styles...

(context: genuine interest, backend dev who has largely dodged having to care about html for the last n years...)
Resembles a date. Dating and interviewing has much in common. Judge a person in the time it takes to drink two beers to see if you want to stick together. It's all hunches and feeling and there is no need to over analyze it.
Especially since Fedora, Centos and Red Hat are roughly versions of the same thing, with Fedora being the front-leader version wise.
I bet DB2/UDB is still around and kicking, if nothing more for legacy support. Theres also Sybase, but they've fairly much stagnated and jacked up their pricing, so the companies I've worked with that used Sybase either have or are working to migrate to MS SQL.

There are other esoteric DBMS's, such as IMS which is still supported by IBM to the best of my knowledge (because that 40 year COBOL app still has to run).
The World's Greatest Art ThiefThe
I can't fathom how Google removing this app would do anything at all to help people in Saudi Arabia. In fact, removing this app would probably hurt people as the law would remain unchanged, but now it would be more difficult to comply with it.

I have to wonder if the people complaining about this actually care about women in Saudi Arabia at all. Seems like they're just seizing on any opportunity to attack Google.
Only the biggest companies can really afford to have the scale and skill available from the vast range of people working for bug bounty money - and as one of the other posters mentioned - you still have to have internal staff to confirm and patch the bugs. It's almost like the best side of outsourcing, where the outsourced talent is driven to do their best work because otherwise they'll never get paid.

Then again, I can imagine some teams would get utterly spammed with inane, wrong or non-bounty-able reports, which could be an issue.
I wonder if he's come up with some automated tooling to find them, seems like this might be the best way to monetize if so.
What's a way to learn security work? Genuinely curious.
He had half the time to learn than many older people that also live off bugs bounties?
Apple doesnt make phones or computers that are much more costly (from a hardware perspective) than any other brand. What they have is higher margins per unit due to branding and brand loyalty.
Floating Windows in TUI and Remote UI Merged
This. This is the song of my people.

Also, I'm going to have to look into this monastic scribe logging system. This could have really helped with that HFS+/SSD, hotswap thing.
Key point is that the autopilot will get better over time, while the humans will not. This is one of those questions that is best answered by looking at the first derivative rather than the quantity in question.
Our product EnvKey[1] can also help to secure and simplify configuration of ephemeral environments—all you do is set a single ENVKEY environment variable, include an envkey library, and then all the secrets/credentials/config you need will be made available and kept in sync on each load. You also get a nice ui for editing variables and managing access. Ah, and all this is done without trusting a central server through the magic of end-to-end encryption. I think it could potentially jive well with a tool like yours given that proper secrets management can be a tricky piece of this puzzle.

1 - https://www.envkey.com
No serious company makes that choice, which misunderstands what companies use bug bounties for.

Google, for example, pays out bug bounties regularly, but their main security expense is wages/etc of security professionals, and that is probably in the neighborhood of a billion dollars a year.
Volt – 300Kb Multi-protocol chat client
Thorn is an amazing group! Thanks for your efforts!
With the offer of rewards I can see a similar scheme becoming popular in Western countries too. I expect it would have a large overlap in users with Facebook.

It is possible to argue that we already have an informal social enforcement scheme, with people having lost jobs and being doxxed because of saying the wrong thing on social media.
Where things go wrong is when race comes into play to begin with. In your example it is clear that credit scores - or whatever equivalent is used in the country in question - are a factor in deciding whether an applicant should be allowed to take out a certain loan. That check should be done on base of that applicant's credit score irrespective of where he lives, what car he drives, what his name is, what colour his skin has or any other unrelated characteristic. While there might be relationships between average credit score and the aforementioned data points they are not in itself indicative of the likelihood of the applicant defaulting on the loan. The credit score is a better one, as is their income for the last X months and other similar data.

It might well be the case that a totally 'colour-blind' scoring algorithm still ends up sorting people by one of those mentioned, unrelated data points. This is not racism, it is just the consequence of the mentioned relationships. Calling it racism is a sign of ignorance and does a disservice to the effort to get rid of true racism.
We know he's working for a company where management doesn't communicate and layoffs are happening.

Polishing off a resume doesn't mean immediately quitting either- it means going out to look at other opportunities. There are very few scenarios where being aware of other options is harmful.
A number of Google employees told management signing a letter stating that they did want Google to develop weapon systems that protect our troops, but they are apparently silent when it comes to this abuse of women.
Wow, am never in post to be hired but I just want to appreciate you for the updates cos I never regret spending my data connection on the post you provided thanks.
This is so abstract that its purpose is incomprehensible.

It would be much clearer if they compared side by side a few simple examples with regular makefiles that do the same thing, and people could see the advantages.