skysight-inc/HackerNews huggingface dataset:
There's a lot to unpack in your comment, but I'll just work with the most easily verifiable thing for you; what was the response time of the resource you were querying with urllib3, and do you think using requests instead of urllib3 directly would be an order of magnitude (or two) more or less runtime?
Website owners may have knowledge that Cloudflare sits between their users and their site. But the end users generally do not. They think they have an encrypted connection directly to the website. They would be surprised to learn that a third party has eavesdropping capabilities.
This is almost certainly true, but they might make more money if (for example) one carrier's half-assed spam mitigation technology is shown to work better than a competing carrier's quarter-assed spam mitigation technology.

From the perspective of some analysts, collaborating with competitors over a technology that might otherwise be used as a competitive advantage is leaving money on the table, even if the end result is a worse situation for everyone. And from an analyst's perspective, shareholders are the company's customers, not the people who use their services. Which has a certain logic to it, but we'll see if these companies care more about their customers or their shareholders.
Ask HN: Will you buy a 7 inch smartphone?
Question mainly for Americans and Europeans, will you buy it?

Not much a question for Asian countries... It already seems to be the new trend here :\
"x authority" has been a large source of problems all through human history. Insert religious, ethical, scientific, political, etc, etc. Biggest problem with science is that it has enabled excesses for those in power (be it authoritarian, communist, capitalist, whatever), while somehow remaining meek and pretending to be amoral. It is easy to take the benefits of Science without bothering to learn what it has to say about anything else.
Look up github repositories that with desirable implementations. Follow people on twitter posting about their experience.
<God> is on the way to <solve problem>.
> The entire area of nutrition and weight management is a joke. Medicine is problematic and Psychology is questionable.

Note that the issue is that there is a human in that system.

The problem is that we (rightfully!) don't easily allow experiments on humans that might be harmful.

And, as an aside, nutrition and weight management does have people doing real science (things like studies of hunter gatherer societies with deuterated water), it's just that the results aren't very flashy (ie. a human burns roughly the same amount of calories regardless of activity level--so the only way to lose weight is to eat less--moving more is healthy but doesn't contribute substantially to weight loss).
The point of the article is that the phone numbers that robocalls come from are trivially spoofed. So, it's plausible that these are real people's phones being spoofed, and it would be quite rude to them to publish their phone numbers in a way that could be read as indicating the number is a robot.
"I think the connection between scientology and Elizabeth Holmes is the “prison of belief”. Look at what happens to [Theranos board member] George Shultz – the grandfather of [eventual whistleblower] Tyler Shultz; the noted Secretary of State. Even when his grandson comes to him and says, “You know Grandpa, there’s rampant fraud at Theranos”, he can’t undo or retract or unwind the belief that he has. He’s in a prison of belief of Elizabeth Holmes. He’s committed to her, and for him to say, “Oh wow, that’s terrible”, would mean that he has to go back to the beginning and admit that he was duped and fooled."

In the social sciences, they call this 'belief perseverance'. To take this to an extreme, think of how many generations of people were convinced of geocentrism.
That's the privacy argument, and it's a good one.

The business argument for Google: they still have the information, and can use it in their analytics, and potential competitors or customers don't have it.
Alright, say I want to replace my dogmatic belief that scientific methods are the best way of understanding the Universe. What should I replace it with?
If you cut corners in management then you are directly responsible for the cock-up, period.

This is a modern issue with the way laws look at subcontracting work as a tool that allows companies to isolate themselves from liability which needs to change, if your company (Elsevier) sub-contracts it should be your company on the line - with an allowance to pursue legal action against the sub-contractors that will be examined in depth during that proceeding.

These sorts of situations have too often resolved in "Well, we can't tell if it was the parent or sub-contractor that was responsible, I guess we need to let them both off." instead hit the parent with the full force of the law as a negligent reseller and if they were unaware of these situations they can recoup their costs by pursuing the subcontractor on their own dime.
When my super hip designer friend suddenly pitched Figma instead of Sketch, I knew that things are getting serious. He has been a strong proponent for Sketch for years, but not any longer.
I didn't downvote you, but from the article:

> The group said this could be used to "infer sensitive facts about [users'] health condition and life situation" and be resold to target ads. "These citizens have no clear way to prevent this leakage, understand where their data is sent, or to correct or delete the data," it said.

The second quoted sentence in particular, if true, would seem to be in violation of GDPR, more specifically several sections/articles within Chapter 3.
That’s an interesting idea. Make it so anyone who knowingly goes into a public place with a contagious illness is held legally responsible for it.
I uninstalled all of them and ended up pissing away most of the day on HackerNews, so I think they're mostly blameless in my case.

All of us HN commenters are also engagement designers. If not in our day jobs, then at least in an amateur capacity in text.
Because spammers populate the caller ID with other people's phone numbers. For example, a spammer might make the caller ID show your (or my) phone number. The caller ID that shows up when a spammer calls you is usually useless.
OK, but can't China or India take x% of GDP and built their military with it? Go ahead and fight someone spending 2x as much as you
> How do you know that what you are doing is a “mistake” if it works?

Because it hurts.
have you considered going phoneless?

The perspective it will give you on modern life will likely make you want to stay phoneless.

Remember when everyone smoked? I mean everyone. The experience of being phoneless today reminds me of what it was like to be a non smoker 25 years ago. Nauseating.
I'm honestly at a loss about what innovation Stripe really needs to do or what would make working there rewarding. They are a credit card payment processor, hasn't all the kinks been worked out of that by now? I guess the fraud prevention aspect would be mildly entertaining, but I can see how the company would need these "shipped" emails and the middle management masturbation/social ladder performance review/Strategy Memo(TM) games to keep people from being horribly bored.
But if current dominant country A has GDP of 100 units and rival country B is poised to get to 150 units, then won't country B be able to wield more economic power than country A even though country B's GDP/person is lower?

It's sort of like a company that has 100 units of revenue and 20 units of costs versus a company with 150 units of revenue and 90 units of cost, the one with greater revenue may still have more economic power (e.g. ability to leverage suppliers, etc) despite having lower profit margin.
PPP is and always will be a garbage metric. Don't compare my Pepperidge Farm 15-Grain bread, sold for $3 a loaf at the supermarket with steamed buns sold for ￥1 each on the street.
Hong Kong MTR trains collide near Central during system test
Being around Koreans as a non Korean, especially in another country, is vastly different than being in Korea. As someone below asked, if your friends are not living in urban Korea working white collar jobs this is likely less relevant. OC's friend was most likely half joking, half not.

>Well, "socially unacceptable" if you're superficial and want to be popular and trendy.

The hardship of trying to break into an exclusive group ("popular") and working towards that goal ("trendy") is not too far off from that which looms over much of Korean culture. The fear that a social slight might cast you as an outlier, hurting your possibility of getting into such a group and undoing all your work, is unfortunately well founded. In the Korean language, if one is an outlier in a group, the word used to compare them to the rest is not "different" but "wrong."

You also imply that one's own sense of identity should be the main view considered, over the "superficial" views of others. While I agree on moral grounds, this is simply not the case in Korea.

Tablo incident:
https://en.wikipedia.org/wiki/Tablo#2010%E2%80%9311:_Musical...
It doesn't matter if Stanford verified his attendance--if it seemed fishy it was as good as true.

Korean Air stewards being required to do makeup training:
https://www.theatlantic.com/health/archive/2013/05/the-k-pop...
"This February, cabin crew for Korean Airlines participated in makeup training, a mandatory requirement for all new stewardesses. This year, there were more than the usual numbers in the room. Korean Air now requires male cabin crew to attend -- and to learn how to blush and bronze themselves."

https://www.businessinsider.com/plastic-surgery-in-south-kor...
"In fact, a 2016 survey by Saramin, a Korean online job portal, found that more than 60% of human resources personnel feel an applicant's appearance affects his or her candidacy."

In a country where photos are usually required with applications for jobs that are expected to last you your lifetime, would it be superficial to use makeup/photoshop in your photo? At least nobody in Korea thinks so.

Not mentioned: Korea espouses a ton of misogynistic attitudes towards women
Very neat! Given that an average user doesn't receive many calls a day, it would be cheaper to operate if this could be implemented completely serverless using Cloud Firestore & Cloud Functions.
Warriorplus affiliate program is a scam see why I said so here
Your counter is that now, a hundred years after they ceased to be widely used for personal transport, the free market has a solution? After centuries of their use where it did not solve the problem? That is pretty weak reasoning. I'm honestly not sure if you're just trolling me now. It amounts to saying something like "evolution can solve all problems". Even if true, the timeline leaves a bit to be desired, and a bit of manual intervention can do better. Not only that, but insurance happens to be a regulated industry, so your argument is flawed on that account as well.

My argument doesn't say the free market can't solve problems. It's not terribly difficult to think of theoretical free-market solutions to many problems. My argument is that the free market doesn't solve all problems. Or if I grant your reasoning on the horse problem, they don't appear anything like as quickly as we'd want.
TL;DR: yes.

Are there candidate examples of ideas in philosophy, natural sciences or maths that are so original that only a single mind could think of them?
> How do you know that what you are doing is a “mistake” if it works?

It's a good question, one that's a good nod towards the principle that you will inevitably learn more slowly if your own mind is the only one you have to work with (and lately I've been thinking about how I can get in a professional position where I'm near the bottom end of the intelligence and/or domain knowledge range in the room for this very reason).

But one answer might be: you'll know. "Works" is shorthand for satisfying a certain set of expected conditions. There's a core of reliable behavior in the software that's the minimal working definition of "works" ... but there's also the question of relative ease when it comes to reading, understanding, and changing/augmenting the code you have, or how the code "works" as an expression of the system for the purpose of presenting an interface to the developer.

Chances are pretty good you know the feeling of writing something that you either (a) are uncertain is really adequate as far as the developer experience goes or (b) you know is probably not adequate but seems to get you to the minimal definition of "works" fastest.

Listen to that feeling. Interrogate it. Try something different. Observe the tradeoffs.
Seems to be incredibly popular in UK and just like MDMA they are taking pretty high doses in general so you have teens needing their bladder removed due to abuse.
The Average US Computer Science Grad Outperforms China and India's Elites
There are many (tens of percent of engineering, etc); we are taking steps to materially increase the number.
the main problem with piwik (tried it a year or two ago) was that they had crippled the installer so that automating updates to cloud platforms was quite difficult (to encourage you into their paid hosted solution). maybe that's changed now, but that put me off on piwik/matomo.
I've been doing this using an Apple Watch, and have been for the past 3 months or so. I documented it in this tweet: https://twitter.com/john_lam/status/1074527089569615872

Note that I'm paying more to have this experience, but it's been totally worth it. So far I've been quite happy with it. It's amazing how, in the odd times where I've needed to carry my phone with me, how I instantly reverted to my former (bad) habits.

It's a form of commitment device and it's been very effective for me.
> The font of the logo as we know it today, along with the yellow line, was adopted in 1998. The yellow line started out curving down and now it curves up.

Is that yellow? It looks more orange to me.
Where is my flying car‽
Speeding Up Your Website (Best Practices by Yahoo)
My point is that even if a disease is not dangerous to everyone it is worth to vaccinate everyone so that the rest benefits from herd immunity. In the cases where a disease is not dangerous to most children but dangerous to most adults things are even more complicated because once you have vaccinated sufficiently many people the disease becomes rare so it is more likely that someone unvaccinated contracts it as an adult.
Are you aware of any robocallers that have answered your "simple arithmetic question" correctly?
this may be a silly question, but should these kind of problems be solvable with linting?
How is Cloudflare any different from a cloud service provider like AWS, Azure, Google Cloud, Linode, Digital Ocean, etc?

Those are also 3rd party companies who terminate TLS sessions on your behalf and thus have access to your private keys. Seems like they could secretly decrypt and copy your traffic at least as easily as Cloudflare could. Even leased managed hardware requires you to trust the company running the hardware for you.

You have to go all the way to installing and running your own hardware in a locked cage at a data center to even theoretically exclude all 3rd party access to your private TLS keys.
Here is a typical sockpuppet: https://news.ycombinator.com/item?id=19081596 (which matches the @senora_acero:tedomum.net puppet which was being used on Matrix around the same time)

We do not use sockpuppets to promote Matrix, and I don't see the link between pointing out someone who does as somehow meaning "we may as well be using sockpuppet accounts too"; it's a false equivalence if ever there was one. :|

And I'm not sure that calling out the unpleasant behaviour here is 'attacking someone who has spent a significant amount of time on the project' - but thankfully enough other people have independently pointed out the reality of the situation on this thread (e.g. https://news.ycombinator.com/item?id=19422064).
I can’t be the only one that had the Jurassic Park soundtrack start playing in my head when I read that line.
Google Analytics does not have a self-hosted version, even the paid version (GA360). With the paid version it's possible to download the data after it goes through Google via BigQuery, but the data still lives in Google in the meantime.
The media quoting random science study pushing X claim and then Y claim is a fundamental problem of media (society), not science.

The problem of science is that it doesn't have the outlet of, say, high school students learning real science and knowing how it works, that the products of science and technology is wind-up cut-off from the broad processes of experimentation that gave rise to them.
There is technically a way to link/unlink Google Analytics from Google Ads:

https://support.google.com/google-ads/answer/1704341?co=ADWO...

There are also ways to configure Google Analytics to fuzz IP addresses, essentially de-anonymizing them, as well as setting up explicit data retention periods.

EDIT (responding to grandparent comment): Even so, I'm not sure it's disingenuous to call products adtech which are provided by a company whose main business is advertising, and which are often configured to contribute to the advertising business, even if it's possible to use them for purposes other than advertising. At that point, maybe it's just adtech that's being repurposed.
Interesting. The important development is the porting tool which automatically infers the size of objects. Many people, including me [1], have proposed safer variants of C. The problem is converting legacy code. They've made some progress, but not enough to use yet.

The important result is in Table 1 of the actual paper.[2] The converter looks at pointers, and classifies them as "pointer", "array of known size", or "unknown". "Unknown" ranges from 49% to 76%. You can't convert an existing code base automatically with that low a success rate.

The big design mistake in C was "pointer" and "array" being the same thing syntactically. Trying to undo that has taken decades.

Their converter is on Github.[3] This is a Microsoft project.

The syntax they use is rather clunky:

void copy(char ∗dst : bytecount(n),
const char ∗src : bytecount(n),
size_t n);

That's halfway between C and Pascal/Ada/Rust.

I proposed more C-like syntax like this:

void copy(size_t n, char (&a)[n], const char (&b)[n])

It's annoying that you need the parentheses, but that's C/C++ syntax.

I wanted to put C++ style references into C so you could pass arrays as arrays, rather than degrading them to pointers. I also wanted to add slices of arrays, so you could pass a slice of an array as an array. Those are standard features of most later languages, and handle most of the cases for which pointer arithmetic is used. C doesn't have the expressive power to even talk about those things unambiguously. So they can't be checked either at compile time or run time.

The hard job is converting legacy code by automatically inferring the information that C source code lacks. It's good that they're trying. But a 50% success rate indicates they're just getting the easy hits. If anybody ever gets a good array size inference system, it would be a huge win. Then existing C could be converted to something better. Not necessarily "Checked C". Rust or Go would be options.

[1] http://www.animats.com/papers/languages/safearraysforc43.pdf

[2] http://www.cs.umd.edu/~mwh/papers/checkedc-incr.pdf

[3] https://github.com/Microsoft/checkedc-clang
Definitely not my favorite credit card processor. For starters, I will not earn any money if I refer my customers to stripe. It's already a non-starter at that point.
Actually this it's a good advice. For me 5 years worked.
Then you can also just go into Airplane mode. But that takes discipline.

Much more liberating is, to have a smartphone where you can put out the batterie ... then it is off. And since putting it back together takes time, the temptation to just check something is way less.
I know the flying car is a terrible idea and it's not practical or great, but the little boy inside of me still wants it every day!
"The amounts in the studies don't conform to my culinary preferences" doesn't amount to "MSG doesn't cause headaches".

If the small amounts of MSG that you prefer caused headaches in a significant fraction of the general population, it would not be usable at all, and we wouldn't be here talking about it.

There is a combination of circumstances: most people seem to tolerate larger amounts, whereas a few people don't. And, outside of carefully controlled name-brand processed foods, misuse can happen: the problematic quantities are not that far-fetched. A stray teaspoon here or there can be critical.

It's a recipe, pardon the pun, for a controversial issue.
I recently used a website to sign up for online Health insurance access and noticed they console.log your password back to you in clear text whenever you hit submit. Now maybe 99% of the population won't know what to do with that, but despite the fact that someone's debug log for passwords made it into production which tells me all I need to know about their standards, what if they are using something like rollbar, fullstory, or god knows what else that captures log output? What about malicious browser extensions? I called their technical support helpline, and I got the typical joke of a "oh that's not my department" response. Imagine what they are doing with our healthcare data.
I'd argue it's not a mistake if there are no visible consequences.

If you get a production bug that takes a week to fix because the code is a mess you feel it. If adding simple new features is a pain, you feel it.

Now, of course, you might want to skip that, by learning from others, but OP is suggesting that you make your own mistakes.
So it's preventing the equivalent of dialing random numbers and hoping it's a real person?
Advocate for time, the time you'd spend making those mistakes is going to be a loss on the company compared to convincing your manager (or their manager) to allocate some of that senior dev time to mentorship. This isn't about walking you through tickets step-by-step but make sure that you get smallish tickets in these new areas of tech and ask your co-workers to vet your work (this usually happens in the form of a PR review).

Most (really, honestly, most) developers are interested in the way they do things and aren't opposed to teaching new people the ropes, so I don't think it's unlikely that you'd be able to get this through.
Until I see a detailed cost breakdown, I am going to assume this is just more of the same graft that has infected the rest of the US healthcare system.
I don't think so. Firstly, in your scenario, and with an airplane that is unconditionally stable in roll, there is no tendency for the bank to increase. As the pilot pulls back, the airplane will slow down to the target speed, the pilot will adjust the elevator to maintain that speed, and the airplane will have entered a stable fixed-radius turn, albeit slowly descending because the power is set for straight-and-level flight at that speed. But there has been no aileron input, so the roll stability will bring the wings level. If the airplane was initially trimmed for straight and level flight, and the pilot gets it back to the target speed, it will resume straight and level flight, though not on its original heading.

It doesn't work out this way in practice precisely because the airplane is not unconditionally stable in roll, and exhibits spiral divergence.
You've triggered my PTSD with the phrase "UserManager class". Seriously, OOP can be such a foot-gun sometimes. Dozens of wrapper classes and manager classes might be the sign of a cluttered mind.
Sometime in 2Q you'll be able to upload your own client certificate (issued under your own CA if you like) to be used with Authenticated Origin Pulls.
Myspace apologizes after losing 12 years' worth of music
Back in elementary school, we practiced duck-and-cover not as a defense against nuclear war (although we were only a couple of kilotons from the DoE Pantex plant), but against tornadoes. They're not entirely different, effectwise.