skysight-inc/HackerNews huggingface dataset:
The "nose plucking" is a recurring thing with Epsilon Theory, and yes – directed pretty evenhandedly at ridiculousness on both sides of the political spectrum.

You're dead on about breaking out of the "us vs them" dynamic.

Here's their series on that:

The widening gyre of political/ideological polarization:
https://www.epsilontheory.com/things-fall-apart-pt-1/

The opposite effect in markets/asset classes:
https://www.epsilontheory.com/things-fall-apart-part-2/

Market participation in light of these phenomena:
https://www.epsilontheory.com/things-fall-apart-part-3-marke...

Personal conduct and process in these contexts:
https://www.epsilontheory.com/clear-eyes-full-hearts-cant-lo...

1 and 4 are especially relevant to your post. The first explains why your nose felt plucked, the last suggests what we all might do about it.
Wait, you wrote that Python script? I remember playing around with that!
How old is your version of the app?

I've seen this for as long as I can remember: https://imgur.com/a/GsyPKPJ

It clearly displays the resort fee in the hotel information, and before the payment.
Tim Cook changes name to 'Tim Apple' on Twitter after Trump blew his name
Some answers to your points:

1. We do offer a full data export. After you login, go to Bucket Settings > Import / Export to get a full JSON file export of your Bucket.

2. Thanks for the feedback. Anything specific?

3. Early on we wanted to be able to add dynamic content to any website server-side or client-side using NPM / React / Angular. And the domain name was available :)

4. Our target customer is teams, not individuals. And the value resonates even more with larger teams because they experience more of the pain. We've actually been told they would pay more :)
The benefit of a federated protocol is the same as the downside: No dictator.

Nobody can say that this good feature is now present everywhere, for everyone, at all times, and nobody can remove a good feature or add a bad feature in the same fashion. You can't mandate end-to-end encryption and you can't mandate that everyone who is using end-to-end encryption will use an algorithm which is backdoored.
You can buy a Windows code signing certificate from DigiCert for $74/yr (EV certs are $104/yr) by going through this link - https://www.digicert.com/friends/sysdev/ - much easier to swallow than the standard $499!
For anyone looking for a more usable version of C++/Python interop, I can't recommend Cppyy[0] highly enough. You can use any C++ code/libraries from Python without the need to write any bindings. I created an example project here to test it out[1].

0. https://cppyy.readthedocs.io/en/latest/

1. https://github.com/jclay/cppyy-knearestneighbors-example
> if you can download a source and build the program yourself, then it's safe.

I think only a loud (very small) minority think that. The rest of us know that's silly, and bringing it up to prove some point against "FOSS zealots" is also silly. FOSS does allow for independent code reviews (which do happen on some projects), but that's not the only reason FOSS > proprietary crap.
Awersome site, great way to increase returns on crypto investments. Great job
I disagree.

>Triggering important security processes (eg reset password, social engineering attacks) are trivial once you know someone’s email address.

Sure, but that alone isn't an issue unless you have weak passwords for your email accounts.

>If you want to keep your email address private (you should), generate a new, random email address whenever you give yours out (the same way you use a password manager)

If you're already using a password manager how's that going to provide any additional security? No one is going to crack your 128 bit entropy passwords even if they have your email.
> smartphones are basically supercomputers nowadays, at least compared to what we had in the 90's, but I feel incredibly limited in what I can actually do with my iPhone.

sadly, it derives from "permitted to do".
And let us not forget about Lighan Ses Lion, a transcript of a fictitious game in a made-up language that just happens to overlap with English.

https://www.eblong.com/zarf/zplet/lighan.html
You should probably check this project, the EOMA68 (Embedded Open Modular Architecture):
https://www.crowdsupply.com/eoma68/micro-desktop

The computer is actually like a computer card, that you can slide into different devices. A lot of parts like for example the casing for the laptop "case" are 3D printable.

The computer card is 65$ and then you can print your own laptop or you can buy the parts from them. If something breaks, print your own replacement part.

The icing on the cake:
The "Respects Your Freedom hardware product certification" ("currently in progress with no known blockers") from the FSF for the version with Parabola preinstalled.

https://www.fsf.org/blogs/licensing/support-the-libre-tea-co...

They commit to being fully Libre and want to go beyond this by:

" [...] providing full CAD files, schematics, and datasheets for all the parts (without NDAs) as well as having the 3D CAD files for the casework as a completely open GPLv3+ licensed project right from its inception. In addition, all firmware and kernel sources are GPL-licensed and will always remain so, and have been vetted in advance and do not contain any copyright violations or proprietary license-violating blobs (an extremely common practice nowadays)."

Another of their focuses is the environment.

The EOMA68 Standard:
https://elinux.org/Embedded_Open_Modular_Architecture/EOMA68
I am a host. I pay $80 for cleaning the unit. I have to pay regardless of whether the guest stayed 1 night or 2 weeks. 1-night stays end up being very expensive.

And I agree with Airbnb being like Ticketmaster in the fees department. It's insane. What's more annoying is that guests often attribute faults (like the fees, or the myriad of bugs in the app that makes hosting hard) to the hosts, not to Airbnb itself. The hosting experience is really painful.
Just skimmed it, but using a good parser combinator library sounds like a lot of what the author wants.
Very nice work. I really like it.

The scroll controls are very difficult to use on OSX with a track pad. It scrolls 3 or 4 levels at once. And I wish it had undo.
It doesn't make sense. Plot twist: Silicon Valley is an interesting place.
In many cases there's nothing frameworks need to do, it's just a matter of swapping out the HTTP server (e.x. https://github.com/expressjs/express/issues/2364#issuecommen...) or maybe even just sticking an HTTP/2-compatible reverse proxy close to the app servers.

Now, if you want to take advantage of HTTP/2 features like server push that's another story.
At the end of the day, Notepad++ can't get a "Notepad++" cert because "Notepad++" is not a Legal Entity (i.e. a corporation or living person). At least from a policy perspective, Microsoft will only consider Legal Entities to be valid code signatories.

Yes, this is stupid and outdated, I agree - I personally think that Keybase issuing code signing certificates and being able to verify that the person who signed this also owns this GitHub and that Twitter account would still be super valuable.
Yes, it is- however it could stop an automated attack where the bad agent isn’t targeting you specifically or is not a particularly knowledgeable agent. It also might help you find out where a leak or spam is coming from (eg if you get a reset password email from John+facebooksecretlogin@gmail.com, you know your Facebook email address is known to an attacker). So it’s better than nothing.
For fun:

- I see 67,569 mongodb results on shodan

- I searched for shodan API keys on a shady website known as "Github", found one that works, queried for all the mongodb databases

- Tried connecting on the first one, it works...

- What next?

edit: I guess it's a choose your own adventure game:

1) Delete all the data

2) Look up domains from IPs, find owner's emails and email them

3) Make nice stats about all the data

4) Sell the data on the black market

5) Find user's emails, and tell them they are using a service that just doesn't care

6) Just make every ~third integer off by 1

7) Mine bitcoins on them

... So many ideas, so little time
> We've achieved equality

Many would debate this. At my company our new grads hired last year were 39% women while ~20% of graduates in computing related fields were women. The percentage of applicants were even lower than that.

Some disagree that continuing to apply affirmative action in spite of a proportional overrepresentation of nearly 2x is equality. Granted others view things in terms of relationship with the total population, so it's not like there's one right answer here.
AMD Confirms New Threadripper Coming in 2019
> in the default configuration

MongoDB shares some of the blame here. Software needs be secure by default.
Keeping emails private defeats their purpose as communication address and can lead to a false sense of security instead of properly controlling passwords and multi-factor authentication.
I honestly don't see how this could have went in a positive direction, even if it was stated somewhere deep in the TOS that they might use the data.

An interesting situation nonetheless.
HotelTonight doesn't collect money for this fee, only reservation + taxes.

The resort fee is charged directly by the hotel.
Ah, to be clear: Subconscious biases still exist to some degree. In recent years, in government and large corporations, diversity hiring goals have completely dominated the hiring process compared to subconscious biases.

I don't think you agree with that statement; if you did, would you think that it is a good result? I don't. I don't think the solution to past unfairness is to tilt the see-saw in the other direction, creating more unfairness.

You replied to another poster:

>Good. Then we're in agreement that hiring for diversity is of no detriment. Incompetent white people are hired because of subconscious bias and incompetent people of color are hired because of diversity goals. We've achieved equality.

I disagree strongly, and I somewhat agree with that poster's response to you. To me, equality means equality of process. To reclaim a phrase: equal opportunity -- not equal results. All bias is bad and should be fought against. Anti-bias training, examining disproportionate results to see if bias was an underlying cause, and race/sex-blind hiring, all are possible steps in the right direction.

To correct for subconscious bias for white males with conscious bias against them hardly seems the path towards equality.
> I'm also not really sure why Airbnb is considered a "tech" co in the same way FB or Netflix is. There's is no real time component to the app, and it isn't dealing with billions of people using the app at the same time like a FB or Google is.

Personally I think the term "tech company" is a little more of a blanket statement these days. Virtually every large organization has some "tech" aspect to them.
> They just split it and created twice as much Bitcoin and Bitcoin cash.

Not really - Bitcoin Cash is an entirely different "currency", that shares the history of Bitcoin up to the point where it forked.

> You think he is planning on having to leave the country?

I seriously doubt it. $10k / week for Jack Dorsey is a reasonable amount to use as a hedge against Bitcoin going exponential again. If it does, he's even richer. If it doesn't? Meh, so what. It's "only" $520k / year, and it's unlikely to lose all of its value anyhow.
Public-Private cryptography is the answer.

Forget about email addresses, the network should scale globally from the user's public key that can be stored on any number of nodes as the user id with the data.
"Displayed at an angle and out of its normal context, it was oddly beautiful"

I disagree, the toilet was not "oddly beautiful" and displaying it at an angle and out of its normal context didn't make it any more "oddly beautiful."

It was a sort-of clever "troll" mocking the pretentiousness of the "art crowd" and it's significant because 100 years later the "art crowd" is still, how to put it? "Butthurt" over Duchamp's mockery of them.

The "troll" stung so bad that 100 years later they are still embarrassed, even humiliated, by it. 100 years of terrible nonsense and thousand-word essays of bullshit and they still haven't gotten over it.

Which I guess means that Duchamp made a piece of very significant art.
Eastern europeans and people from the balkans usually have a very negative image about the people they share the nation with — and while this might be rooted in reality I found it most of the time exaggerated in the negative direction.

I say that as somebody who grew up with a bosnian neighbour and worked on a few projects in Serbia.

You will find the fake-it-till-you-make-it people there, and they are usually easily spotted (because they will spot you first), but I found there are many talented, extremely humble and hard working people their too — you just tend to overlook them because they would never sell themselves.
This is always an issue: you send an HYTP POST request (even on http/0.9) - and connection closes before you saw a response. Did the server receive it? You don’t know.

Pipelining might amplify it, but it is always there, especially with unreliable mobile connections.
So are you saying that all recommendations regarding non disclosure of usernames are useless?

Because an email address is essentially an username.
Are you sure all your passwords are secure? Are you sure your accounts can’t be broken into with social engineering? Is your password manager infallible? It’s defence in depth.

Of course you may also do this for privacy reasons as well, when your reddit account is leaked do you want that linked to your LinkedIn account?
How Smoking Weed Cause Skin Problem and Its Prevention?
I've been following this stuff for years, it's fascinating. I'm particularly interested in the recent practical applications like Minimal English and it's equivalent in other languages. For those that don't know, unlike other minimalist English subsets which usually focus on learnability or clarity, Minimal English focuses on maximum translatability.

I'm going to get silly now, but I can't help but think the semantic primes - if you can avoid thinking of them as words or even conscious experience - represent some core set of cognitive axioms, like the primitive elements for constructing mental models. As you go to simpler life forms the "word list" would get smaller. If there is any truth to that, I wonder what potential primitives we are missing that would allow us to think more complex thoughts and whether you could measure species intelligence by their "vocabulary" and working out what concepts can't be expressed when one of the primitives is missing. What would happen if you lost the concept of above'ness?

The other thing I find interesting and it might be no more than a coincidence, is how there is only the numbers one and two and then you have to use many or more. This in some way matches up with the ideas of the Parallel individuation system[1] whereby young children can only precisely recognize quantities up to 3, or 1 + 2 and an adult can only precisely recognize quantities up to 4, or 2 + 2. After that, the brain uses the Approximate number system[2]. So it's like there are only 2 slots to place a quantity.

[1] https://en.wikipedia.org/wiki/Parallel_individuation_system
[2] https://en.wikipedia.org/wiki/Approximate_number_system
Or better yet, use gzip and inline all images as base64 encoded. The file size is very similar to raw data, and the number of requests with associated http headers is reduced.
Part of the reason may related to the Dunning-Kruger effect - the people who have less skill and experience in a field literally lack the skills to be aware of their level of competence. "Why can't you just ...?" is probably something the competent have already considered, but to the neophyte it seems like a new inspiration (and they don't have the depth of understanding to see the limitations).
Questions like: Why don't you make it cheaper for people to live by enforcing rent controls? Why don't you motivate people by giving monetary rewards/punishments? are often asked by people who don't understand the flow-on effects ("unintended consequences") that their proposed easy solutions to complex problems might have.
See also: https://en.wikipedia.org/wiki/G._K._Chesterton#Chesterton's_...
Maybe if we sent in a more beautiful urinal?
I guess I never attributed the smell to old books so much as certain sections of certain libraries. But in retrospect it's obvious!
> Those who want to communicate with other Signal users but not with Google servers are shut out.

Note that while this technically isn't the case any more, as you can use Signal without Google services now, Signal still creates a background task which periodically checks for updates and you can't change the frequency. This results in the GMS-free version to be a major battery drain [1]. Ultimately, this was a deal breaker for me and I removed Signal after testing it for a while on my smartphone.

[1]: https://github.com/signalapp/Signal-Android/issues/6732
Obviously this only works if all emails to john@gmail.com and john+unrecognisedidentifier@gmail.com are rejected without notifying the recipient. This was how Yahoo's scheme worked (I never actually used it, not sure if it's still active). If gmail's doesn't, then I agree it's worthless.
You would have to be fairly close to the black hole in question to do this. A distance of r=3 MG/c² according to Stuckey '93 [1], which is referred to in the paper referenced [2] in the article. Skimming the articles, I can't see any reference to how sensitive to error in aiming this would be.

[1] The Schwarzschild black hole as a gravitational mirror
https://sci-hub.se/https://doi.org/10.1119/1.17434
[2] http://coolworlds.astro.columbia.edu/halodrive_preprint.pdf
His point still stands. The ruby parser has 10x the number of lines of code as the clojure parser.

https://github.com/ruby/ruby/blob/trunk/parse.y

https://github.com/clojure/tools.reader/blob/master/src/main...
>Unless you're already wealthy, it's difficult if not impossible to have access to a large investment that provides 5x (or more!) leverage.

That's wrong - the futures market is easily available if you have $10k, and offers rock-bottom costs for embedded leverage due to arbitrageurs. It varies based on the contract in question, but the two-year treasury futures contract offers roughly 400x leverage. Generally they offer you as much leverage as you can handle before overnight price moves will eventually wipe you out, so you definitely want to use less than they're offering.
I'd argue that even if you take the same letters as an existing word, adding completely unrelated definitions makes a new word.
Nortel was Canadian, not American.
The law around this is so important. When your car hurts someone, who's fault is it? What about if its completely self driving like this one? What if there is a bugfix which you didn't apply? What if a software upgrade causes a crash? Lane assist caused you to swerve into something?

So many grey areas.
That's not how security works.

If someone gains unauthorized access to a system you own, you assume it's compromised and take it down, even if logs don't show anything. If you leave a system unsecured on the internet, assume it has been compromised and take appropriate measures.

In this case, it is more likely than not that this guy was not the first to discover the database. In the absence of proof, assume it has been compromised before.
BTW this is how you market a product. Intimately knowing the space. Providing insightful context on the importance of the problem in a public forum. Offering the free solutions, which are usually manual and cumbersome. Then, finally, offering your service as an easier alternative. Well done.
They don't publish their roadmap, but there have been threads on their community forums suggesting this, and an official "Not Right Now" response:

https://community.spotify.com/t5/Live-Ideas/Music-Use-Opus-C...
Why not buy a $1000 server and remote into it instead of trying to run a server workload on a portable device?
The Warren Buffett Empire in One Giant Chart
Emails are designed for communication, but we also use them for authentication and targeted marketing. For those use cases it should be private.
idbloc looks good. Maybe consider a one-time price option too. Or for people on the free plan, consider allowing them to buy a one-time top-up pack of email "credits" if they use up their free 100.

Personally I have a bunch of spare email addresses from google, yahoo, and others that I created many years ago before they demanded a phone number when signing up. I just use those for website logins.
For other confused readers: no emails were leaked, only email addresses.
They ultimately disenfranchise people far less than the real issue, which is high prices and financial disparity in society. What would it even mean to improve access by allowing cash but still having an entire stratum of society inaccessible through high prices? Money is the ultimate accessibility issue, which is why Facebook and friends are racing to subsidize everything with ads.

I'm more worried about the loss of privacy in a new fully accounted world without cash.
This happened around a year ago (the app was up to date at the time), and the UI was the same for several months after. I haven’t opened it recently.
How to Steal DNA with Sound
I think you mean Adrian Tchaikovsky, right? Peter was a great composer of music, but not SF.

Where would you recommend someone start with Adrian Tchaikovsky?
Much more crucial than the Turing completeness of the grammer was certainly the ability to write language down, which conserved knowledge and language for multiple generations as long as the decoding skills were passed along.

What effect this really had can be observed with the introduction of mechanical printing presses which reduced spatial and temporal distances of information flow significantly.

The internet might yet be another of those things..
HN, Hug of Death?
All the GP is saying is that he believes that P(signed if bad) < P(signed).

It's a fair belief because paying for something leaves a paper trail. MS certificates are a farce at $500/year, but Google's $20 once is a very reasonable thing.

Your point that really bad malware has higher odds of being signed is a good one, but really bad malware is much less likely than simply "malware".
Gibson's books clicked for me where I read an interview in which he claimed Idoru was his favorite. (Though this was before his newer stuff)

I finally realized his enjoyment is in Type B writing. It's the detail next to the main plot, rather than the motion itself.

Which parallels what I like about film noir -- it's not about finding the murderer: it's about watching the characters find the murderer.

Which is why I maintain the Lost ending was hilarious. JJ Abrams essentially said "Look, you didn't really care about the answers: you cared about watching these characters look for answers. And in the end, it's the characters who mattered." Which is probably not something you should ever point out to a TV geek if you want to keep your head intact. ;)
counterpoint

https://popula.com/2018/09/25/the-one-culture/
Totally agree that generally speaking no one is breaking high complexity passwords. Why break the password when you can just convince someone to change it for you?
Google (and others) should support hashing/obfuscation the unique part, for example

john@gmail.com -> (some unique symbol to denote hash, say +)(hash)@gmail.com

It wouldn't be complicated for them to implement, and give everyone a few such aliases.
> Take, for example, the evergreen state college

Why take that as an example? That college is hardly mainstream even for liberals, it's at the extreme end of liberal institutions. When weird shit happens there the only ones who care are people who just need a counter-argument to their terrible point.
'When she was 10, she wrote in a school year book that she wanted to become a billionaire. Plot-twist, she became one.'

That is not a plot twist, that is the plot.