skysight-inc/HackerNews huggingface dataset:
Sorry, I made a bad joke above.

I'm guessing there are almost certainly side-channel attacks (discovered or not) in most crypto libraries. How easily they're exploited is another topic.

We don't believe we need to build more cryptography engines. We just think we need to make the existing crypto libraries easier to use in conjunction with PKI, vulnerability monitoring, ease of patching, and especially in the context of documentation and testing in the eyes of the FDA.
Care.com Overhauls Vetting of Sitters, Listings
I am happy you all are launching and wish you well. Increasingly seems the companies launching on HN are in search of a problem. Renting a charger because you don't have one at home seems like a backwards way to solve the problem! But, I am only one person and not the market
When did she ever argued for conversion therapy? All I’ve seen is that she was against transitioning prepubescent children as most children that exhibit gender dysphoria grow out of it.
On Ebay you can grab these cards for just $30.
100G is available for less than $200
This is why they don't need to pay for marketing.
Oh, makes sense. Thanks.
You'll have to do better than an ad hominem + "the opposite is true." Author is Chief Algorithms Officer at Stitchfix and former VP Data Science & Engineering at Netflix.
Some of it, yes, but it shouldn't, you're not supposed to disclose above average security clearances, period, which is what the green badge indicates.
Not sure about that minor premise...
Could you please elaborate on what differential syncing means? Does Dropbox break down each file into small chunks before uploading? What are the advantages?
I think it's something to do with extended attributes - though why they need them now, after all these years, I don't know.
I work in an Amazon warehouse. The first two months I was in the worst pain of my life, after that, the worst problems were backaches and tedium and complaints about the bad UI with their stow app. I'm not going to lie, though, VTO is a hell of a drug if you can afford it.

Some people can deal with the stress, some people can't. I don't think it's a strength/weakness thing either. It's just one of those jobs where you're perfectly aware of the degree to which you're a cog in a machine, and everything you do has to meet metrics.

If you want a job where you feel as if you matter as a person, or a job that brings you a sense of meaning, satisfaction or long term security, L1 at an Amazon warehouse isn't for you.

I wouldn't consider the horror stories to be typical, given the size of the network. I also wouldn't dismiss them, given the culture and the incentives Amazon can create. If someone told me there was a warehouse somewhere where the AMs shocked the pickers with cattle prods, I'd believe that Amazon would try it at least once, if they could get away with it, just to see how many seconds they could shave off their time.
B2B SaaS companies are in large part about addressing the enterprise without being Oracle or friends, though!
You could always call before and after an email. I've done that before, when dealing with someone I didn't trust to read her email.
I think that a system that allows people who have produced (Page, Rubin) to be subject to to the tantrums (legal and otherwise) of those who didn't is a broken system.
(Usually not the EFF; more likely Software Freedom Conservancy or someone. EFF is more digital rights and privacy stuff, not copyright.)

A copyright holder can't get anything more from you by using the GPL. Infringement is infringement. The difference is that a company is usually happy to settle in exchange for a properly paid license, and an open source hacker instead is happy to settle in exchange for complying with the license. You're always free to take it to court and pay the damages from infringement, but you're not going to end up with a valid license in either case, so you'll have to stop distributing the software.

The actual difference, probably, is that you're a (moral) competitor of the open source hacker, and if you're not a competitor of the proprietary company, they have no interest in undermining the secrecy of your code or causing you to go out of business, even if the could potentially force that if they went to court. They're likely to consider "pay us a percentage of revenues" as a win condition.

Also, lawyers are not like Pokemon. You cannot beat the opposing team's lawyers by having more stronger lawyers. You can certainly lose by having bad lawyers, but you can only be guaranteed to win by being in the right.
Please don't break the site guidelines by name-calling, posting unsubstantively, or slurring $people.

https://news.ycombinator.com/newsguidelines.html
A sad ending for F+W Media
npm publish already prevents you from publishing a package that has the private flag. They must not have had it set.
That’s not really the issue. With a 16 color pallet and planor graphics you can update one byte to change 8 pixels from one pallet to another. This also means you can really cheaply compress images if you only need say 8 colors.

These trick becomes far less useful if you have cycles to spare.
https://www.dropbox.com/help/syncing-uploads/upload-entire-f...

This should save some bandwidth at the expense of CPU time.
Amazon figured this out and surrounded their high-margin computing resources with a dizzying array of free-as-in-beer tools.

But they also figured out that making their free-as-in-beer tools also free-as-in-freedom open source, they'd lift all clouds and not just their own.

As the dominant player, Amazon loses from anything that reduces vendor lock-in. That's why precious little of Amazon's cloud tooling is released on Github.

With Kubernetes, Google made the the opposite calculation. As a challenger, it's to Google's benefit to open-source cloud tooling like Kubernetes. Even though their competitors benefit, Google benefits more from standardized tools that reduce switching costs.
If you haven't read it already, you should totally read "How to Change Your Mind" by Michael Pollan. The book more or less agrees with your point (though I don't think the science has necessarily come to a solid conclusion on which mental disorders psychedelics are going to help relieve. I think alcoholism had a fairly high response rate, though). I believe the book "Capture" by David Kessler also covers the phenomena of how minds can end up "stuck" in some mode, so to speak, though I have yet to read that one.
> Who's to guarantee that your paper ballot was recorded correctly?

Each reporting station must accept observers and counters authorised by each of the interested parties with local representation. It's a big deal when this process is compromised and always makes the news. And these counters and observes are generally your neighbours from the local community so there is some amount of trust already. Further the section count is acknowledged back from the central counter.

HTTPS doesn't have the proper guarantees for this application.

Changing votes doesn't have the proper guarantees that people won't be buying or extorting votes. Not that it matters, because that's not really the biggest concern with evoting.

Penalties also don't matter against a malicious state actor for any abuse. As an example, Chinese spies go after the relatives in China of US tech employees to force cooperation. A state actor can stack the deck without anybody to prosecute even if caught.
Technically it'd be the "Oakland Coliseum," although I've never actually heard anyone else refer to it as that as I don't know too many folks who enjoy sports in Oakland, or I'd just call it "the Oakland Ballpark" to differentiate heh. Once the "the ballpark" in Mission Bay starts hosting games then I think we'll have to resort to alternative naming schemes but I'm sure something better than "Chase Center" will be figured out.
Depends on many factors.

So for example you have these Chinese restaurants menus with terrible translations and nobody cares if the translation is good.

What about legal texts or maybe medical brochures?
Are there any operating systems that let you explicitly run CPUs in parallel?

I'm thinking n threads where the process requests the operating system scheduler to start and stop them all at the same time. Of course the OS would be permitted to refuse if it wasn't capable (or just not allowed).

A synchronised cpu master-slave relationship could be beneficial to parallelize some of the middle ground between instruction level parallelism and multi-threading
ah, that's because you don't know about the back way through Whiskey Hill Road to Cañada that you should take from 5-6:30 PM if you are going north. It's not bad if you are headed south. A-H is so far up the hill that it doesn't make much of an impact for them though
That’s a fair point, but even if workplace norms are sane, the technical solution additionally protects against (say) a rogue IT admin gathering info in secret, or against future policy changes.
Work up to it, and strip out stuff you don't need to do. For most people jumping into a lifestyle change is likely to fail.

My approach is more triage based: when I find something new I want to do but don't really have time for, I look at the other stuff I'm doing and work out what is less important than the new thing. That explicitly includes "me time", and an honest assessment of what I actually do vs what I think I should. So, a certain amount of randomly reading crud on the internet and posting rubbish (like this)... just because I enjoy doing it. I used to be active on various stackoverflow sites but I found gaming the metrics too addictive so I stopped (viz, too much time writing answers to get rep, moderating posts to get badges... it wasn't what I wanted to be doing, and I found it hard to just do it a little).

When I have been busy all the time it's been like that, but more so. Get up, eat the same thing for breakfast every day, wear the same clothes, etc... routine tasks take little mental effort and can be streamlined. That works for me, it may not work for you. Do a day's work, minimal lunchtime and maximum productivity so I can leave early and still get bonus marks for getting things done. Be conscious of the metrics my workplace uses and balance playing to those metrics against the time it takes (ie, if lunch with the boss is worth the same as an extra 5 hours work a week... have lunch with the boss).

Look for ways to save time and combine tasks. For me that means bicycle transport. I get time outside, exercise, and save time/money over driving. Since I rent, I try to rent somewhere in the area bounded by my other activities and such that I get enough exercise just doing those things. Likewise, vegetarian food can more easily be cooked once a week and stored/transported every day. I make soup or pasta or stew, cool it, put it in meal-sized plastic jars (they held stewed fruit once, which I like eating), then they go in the fridge. Again, efficient to cook, saves money, and no effort spent during the week making sure I eat well. I buy easy-to-eat fruit and vegetables as snacks, and drink water or herbal tea. Bike riding means I need more salt than most people, and more energy. Fortunately I also like eating corn chips :) Those synergies are important, look for them!
And yet, 99.9% of the advertisements I see there and that follow me around the internet are completely off the mark in terms of what I actually spend on.
https://docs.microsoft.com/en-us/windows/desktop/apiindex/wi...
There has been several things:

• Dropbox has failed to improve their offering and even for a paying customer you do not get anything more for your money today than you were getting several years ago. That is not objectively a bad thing, I mean a spoon has hardly evolved in hundred of years and is still worth every penny. But this is HN and that's a bit of a sin around here.

• In search of profitability Dropbox has used several dark marketting patterns. Its website also pushes way too much business/team option that are per user/per month. A lof of people on HN are private user and they basically have access to a single option.

• The new features that Dropbox did introduce work only for corporate/team user. There is now a Professional user but it costs a standard business plan for 2 users with less feature.

• There was some complain about the Mac OS client uses of apis.

Despite the negativity, HN users seems major paying users. So I think rather than negativity it is more disappointment. The feeling that Dropbox could have been so much more and they would have paid for it gladly, but it is instead becoming a network feature for large companies and startup.
Most exploitation is not "generic" in that way.
"sluggish" "shrink" "damages immunity". lol.
"How much is it?"

"How much you got?"
>it gives at the very least a security clearance level.

At the very least. I could reproduce a close-enough badge that would likely fool everyone except the person who designed the original. I've done this twice successfully (failed once and almost got arrested) to fuck with my friend who runs opsec at mid-sized financial services companies.

One company he worked for had these stupid gates that you needed to scan your badge for (it gives you a green light), but there's no physical barrier. All you needed to do was pretend to scan a badge a couple times and say something like 'ugh stupid things' and the security guard just lets you on through.
I disagree with your reasoning, the scene hasn't slowed because new technologies don't offer anything it's slowed because optimizing every bit of the transfer like you had to on old internet is no longer relevant and so "use the technology that it makes the most sense to use" has become "use h.264 or h.265 because dedicated players and hardware offload support it". If anyone really cares about extreme quality at this point they'll just download a rip of the original media rather than a transcoded copy

There is no longer a driving force behind pushing the limit of encoding in the scene and so the scene HAS slowed.
VGA CRTC could only address 64KB of ram at a time, so while you could program chunky 320x240, it would run out of ram and most likely repeat top of the picture somewhere at 85% of the screen. Planar hacks it into drawing pixels from different pages, something impossible to accomplish in chunky.
I think it could in fact be the only issue.

Now I have not gone through all the news on this, I don't have the time. My point is that the presumption of innocence is baked into our legal framework (morally, legally and philosophically) and Andy (last I recall) has not admitted to, been charged with nor convicted of any crime. So in theory, the "issues" that I suspect you are referring could arguably be moot.

From LP's perspective (and I can only speculate what that could be), I can see the challenge in justifying withholding a compensation package from someone who did in fact create tremendous value for you knowing that while there has been ample time to press charges for his alleged crimes no charges have been pressed.

Is an accusation that is not followed through enough to justify reneging on a commitment made? Is sleeping with someone you work with enough to renege on a commitment made? Tough questions that I don't have the answer to. Anecdotally, I live in NYC and have 3 Google couples in my apartment building and none of them are the same age (so presumably, there may or may not be some title / comp/ role differential).

Anyway, not so black and white in my opinion.
> she argued in favor of conversion therapy for trangender kids

Have a source for that? I don’t know much about Dr Soh but as soon as I read this it sounded exactly like the kind of intentional misinterpretation that are leveled against many to win arguments these days. Especially when it comes to trans issues and giving children drugs to prevent puberty.

Here’s an article for example in which she’s against conversion therapy: https://quillette.com/2018/10/23/the-unspoken-homophobia-pro...
“Tollway consultants” charge the public $185 an hour for reading news
In many parts of the world they use WhatsApp for he equivalent workflow in multiple domains.

That little green tick when someone reads your message is a surprisingly critical part of the workflow.
It doesn't help that Amazon's mascot is a robot (Danbo), some of the facilities are full of robots, and the acronym stowers need to remember for their process is ROBOTS. Working there it can feel like you're living in somebody's bad future.
Facebook has the most Facebook users.
For many, it is policy to do so, and yet, I see people in management positions flagrantly disregarding this.

The sad reality is that a lot of these people don't understand, or don't care about the repercussions of openly disclosing this information.

Just today, I overheard someone discussing that they have a significant number of meetings scheduled with a senior member of government over the next few weeks, in a public space.
Start by sharing your link on Show HN.
Clever strategy by Elizabeth Warren.
The ads might be effective in promoting her platform by themselves. And if the media report on the apparent irony, or FB takes them down, that gives her more publicity. FB's actions may cause a Streisland-like effect as well.
Short answer: buy less stuff.

Longer answer: reduce your buying habits. Keep your laptop/phone around for longer before replacing it. Buy second hand or refurbished devices.

Do you need to buy water, or could you drink (filtered) tap water? Do you need to buy milk, or can you replace it with an alternative? Soy and oat "milks" are different, but serviceable replacements. Avoid almond and other nut "milks".

Sometimes you can't really avoid the packaging, but you can make sure the product in that packaging has a smaller environmental impact.

As for motor oil, most cars only one oil change per year, so that bottle of oil isn't the worst item in your example. But you should probably drive less.
Show HN: Lolight – Lightweight Syntax Highlighter
People are not freaking out because Page gave away 150M to huge benefactor and innovator, but because "Page gave away $150000000 to a sexual harassment perpetrator!!!". In this light, doesn't it look bad?

My opinion is that Rubin deserves to be awarded (with a proper company policy to prevent misuse of funds, nepotism etc).
But also deserves to be fired and punished for misconduct (if it is proven to have occurred). These two are not mutually exclusive. The rest is all fluff about how the public perceives a company's culture.
Worth pointing out that the FAA bought Boeing's claim that the 737 MAX 8, 9 did not require a new type certificate, and so did EASA. However, from what I gather, the Brazilian regulator deemed the MAX with MCAS sufficiently different from prior generations.

The Brazilians required that Boeing document MCAS and include it in the required differences training. MCAS was considered a fairly small difference (if memory serves — "B") by the Brazilians and the MAX is still operating on the same type certificate. The big question in my mind is: why did the FAA not do the same?
Anymore these days its been my experience that cert pinning prevents this from working. Adding a new root cert does not force any of the apps to use the root cert if they've enabled pinning.
Hey, contributor to rubygems here, there's no source url for ruby gems specification. You can read more here: https://guides.rubygems.org/specification-reference/

You're likely thinking of bundler's source, but even then that doesn't apply to publishing a gem.
Similarly, pretty much any large multi-function printer (the thing as big as a photocopier) has a scan-to-email function.

The one at my work can scan both sides of a sheaf of papers at about 2 sheets per second, and attach it as a single PDF or set of JPEGs etc.
What about the Canadians and Bombardier? The A220/C series is a much closer competitor to the 737 than anything Embraer has to offer and the Canadians still gave Boeing a pass on MCAS.
I was definitely only talking about that traffic with respect to A-H, since this is a post about A-H, to try and offer some context for people who haven’t experienced that for why A-H might not favor what seems like prime real estate during non-rush-hour hours.
You can't attack another user by insinuating shilling without evidence. This is in the site guidelines, and we ban accounts that do it. Please don't do it again, regardless of how strongly you disagree with someone.

Years of moderating this highly international forum has taught us that when people convince themselves that someone is faking their view, it's usually projection.

https://news.ycombinator.com/newsguidelines.html
Kim Jong-Un Travels
A facility like an airport has a monopoly position, geographically and due to regulation, and the capital cost of competition, and as you say will likely be earning for many decades. ARM also has a long term monopoly, think of the sheer weight of code for ARM devices. It takes huge capital to produce a new from scratch CPU arch, esp due to patent problems (which makes RISC V all the more amazing), and deep pockets to start producing chips at scale, build a developer ecosystem etc. Games titles can produce a lot of cash for low CAPEX, but I don't think we'll be hearing about Fortnite in 5 years, let alone 50.

In contrast, Mellanox produces a niche product. It is critical to HPC and some deep pocketed finance people, but it is never going to be at the volume of e.g. ethernet.

The long term aspect is that, as Moore's law scaling becomes harder and harder, distributed computation becomes more essential. Right now we are in a dip in peak compute rate requirements, because we have invented battery powered computers and 4G, and hence cloud. But the work done in the cloud isn't very taxing, mainly single threaded. But I'm confident we'll soon be seeing a lot heavier parallel computation in the cloud soon, and stuff that won't fit into one or four GPUs. The tradeoffs between PCIe and IB after 4*16x start to favour IB, especially if the IB silicon is on the NVLink switch complex. So from the perspective of integration bringing much greater IB volume, the acquisition multiples the worth of MLNX by an order of magnitude -- if nVidia can execute.
AF447 crashed because the auto pilot handed control of the airplane over to the pilots when it was in the coffin corner with iced over pitot tubes[1]. And then stall warning system gave them very confusing information.

It's not really the same situation. In one the aircraft was absolutely flyable without instruments. The other it was not flyable without instruments.

[1] Absolutely last thing you want in that situation.
You sound like you'd be a great data engineer.
Let's say there's a need to approve 10 things a week, each needing a 5 person approvals.

That's $2 per month of cost.

A developer costs $150k a year, and if it takes a month to develop, you could have the service for some 5000 months.

In-house developers should focus on the business domain, not on custom building business processes.
Caltech in Denial over Cheating Problem
Tim Berners-Lee: 'Stop Web's Downward Plunge'
I've played with both over time, and I was never comfortable with HAProxy's performance.
Yeah, quite the opposite it appears she is against conversion therapy. It looks the parent poster is committing a perfect example of the kinds of things Quillette and the IDW are arguing against.
There are any number of reasons why someone is unable to install a charger at home. Highest on the list is that many people rent, and therefore aren't in a position to install, either because the landlord won't allow it, apartment doesn't have parking, or installing is not affordable/practical.

The other issue that comes up is that anyone with an older home most likely won't have the electrical infrastructure to support a Level 2 EV charger, either because of the existing wiring or because the home is served by a <100A panel.

So that's why many can't make the investment you take for granted.
That's definitely an improvement, but I'm hoping someone from the Panini team will step in and clarify regardless.