skysight-inc/HackerNews huggingface dataset:
Your just-so story is as good as mine, but FWIW my theory is that "this" is the verbal equivalent of physically pointing at something. So its role in a headline is analogous to those people who stand at a busy intersection shaking a gigantic cardboard pointer to some nearby store.
One of my most important takeaways from patio11’s list of thing you need to know (https://mobile.twitter.com/patio11/status/936615043126370306...) was that for B2B companies sales to engineering ratio is at least 2x and usually much larger because that’s the bottleneck. Atlas Siam is no exception.
With the exception of the Congressional baseball shooting, none of those were called an act of terrorism. The word terrorism can't be found in any of the descriptions. They're just crimes. The Congressional baseball shooter specifically wasn't part of an online community the same way ISIS and alt-right terrorists are. How would censoring online recruitment of terrorist activities stop something like a crazy person showing up to a baseball game and shooting everyone?

> terrorism in general is rising, not any particular ideology.

The study I posted above from UMD says otherwise -- that religious and right wing terrorism is increasing in recent years.
Looking for Feedback on a Product
Hey all, I’m working on a new product and I’m looking to get feedback. It’s the next step on our mission of affordable mental health care. If you’re passionate about that and/or the health and wellness of your employees, I have a huge ask:

If you lead a team (whether it’s as a founder or manager), I would love to buy you a coffee in exchange for 20 minutes of your time. If you’re in the Bay I can come to you, otherwise a phone call would work (and we can both drink coffee while we talk lol).

Thank you so much in advance!

Shaun
It's a schooner.
I don't disagree really, but I thought Amazon had a service where you could add to your Amazon wallet using cash?
I don't see how this is a threat to Google or Facebook. Amazon isn't encroaching in their ad spaces. They're just placing ads in their own site. (And they already do some of this)

Regardless, I think it's a bad move. If there's one thing I'd dislike more than having to scroll though a few pages of miscategorized items, it's having to go through more ads to do it.
I am using Amazon less and less these days, buying elsewhere if given a reasonable choice.

I do not want my buying habits mined , bought and sold, etc. They are my property and not subject to the whimms of amazon or any other company.

just let me make a purchase and let that be it. at least other retailers give you the option of using a 'loyalty' card if you want to be tracked.
I think MMT is an interesting school of thought because the economy has been reacting in a way contrary to what the data suggests. We're in the tenth year of an economic expansion and wages are only just starting to increase -- and at a modest pace at that. The amount of inequality in our economy is not accurately represented in GDP or unemployment. You would think inflation would perk up this long into an expansion but since most of the gains have gone to the wealthy (who don't spend as much as their income as normal folk) the economy is not as dynamic as we thought it would be. Even with the recent tax cut the economy is only growing at 3%.

Combine these factors with the fact that there are at least three huge areas for government investment: health care, renewable energy, infrastructure. If you believe climate change is an existential threat to our society -- does it matter that we have a balanced budget while we try to tackle it? Especially if recent trends suggest that massive deficit spending WILL NOT cause an inflation catastrophe?
What I meant is that you shouldn't enter into an investment scheme and act like a victim because it blew up in your face. Nobody is going to cry over the poor, poor landlords
Don't pay attention to this. It's a political side-show by a Supervisor trying to rally her base.

This is in the same vein as the "ban corporate cafeterias" shenanigans last year. It won't fix anything and the politicians yammering about it don't actually care about this.

It's all a game.

The real solution, of course, isn't saving jobs that don't pay enough money to actually live in the city. It's building housing. But that's politically difficult, so we get this.
The principle they're being banned on is because they're cashless, not because they're automated. The logic is sound - unbanked people exist, including in San Francisco, and without a bank account these stores are inaccessible.
>It's weird how languages like YAML, XML and JSON are very much designed for communication between machines, but are still the default choice for human input. Actual programming languages - designed for use by people - are rarely considered for high level configuration.

What are you talking about? YAML, XML (particularly HTML) and JSON were always intended to be written by and understood by human beings, no less so than any "programming language." All of these were designed to be "used by people" and machines.

>Actual programming languages - designed for use by people - are rarely considered for high level configuration.

And the rest of your comment illustrates why. What you have when you use a programming language for "high level configuration" isn't configuration. Configuration should describe constant state, not operate on or transform mutable state. What you have, then, is just more application layer, on top of your application.

Which you don't have with JSON. Or INI. And you do still kind of have with YAML, and definitely can with XML, but that's why a lot of people don't like YAML or XML when it gets too complex.

What it looks like your example shows is dumping unnecessary complexity into configuration in order to maintain "simplicity" in the application. You would have the exact same problem using a high level programming language, it would just be potentially infinitely worse with the explosion of complexity and feature creep that comes with it.
Yes, it's real. The terrorist said on camera "Subscribe to Pewdiepie" before murdering people.

Pewdiepie followed a lot of white supremacists and alt-right on Twitter, including encouraging his fans to follow one of them.

After the terrorist attack, he went into damage control and unfollowed everyone on Twitter, probably to hide the fact he had followed those kinds of people.
I'd think it still counts as being a train. Obviously it's short-distance light rail, but it's still got all the main feature's of a train.

I mainly mentioned it since the parent comment was about a group of girls getting on the train purely for the experience of being on the train, and my experience seemed pretty similar.

Don't know that it terribly matters one way or the other though I guess.
very cool, I find it's a bit easier to see these with a bit of alcohol
Opposing data to your anecdote. The rise of porn's accessibility has supposedly reduced the occurrence of rape

https://slate.com/culture/2006/10/proof-that-internet-porn-p...

https://www.psychologytoday.com/us/blog/all-about-sex/201601...
Is the assertion that they don't actually support or watch PewDiePie? Or that they do so ironically? How can we even begin to make these distinctions without a god's-eye-view of all these people and all this fans and all their intentions?
Or the wireless and traditional wireline players will make a case to the FCC that the bad actors are the VoIP-over-public-Internet providers and such providers alone require special oversight and regulation.
Google knows what I search for... Amazon knows what I spend my money on. I'd say that might be a competitive advantage. Of course judging by the suggestions I get after getting a gift for someone else, maybe not.
Privacy is always about trust. I trust Apple (more than others) because they never gave me the impression they are doing anything shady with my personal data behind my back. Unlike Google.
Never heard of Startpage before. How trustworthy is it compared to DDG?
Well the ease of use sure wasn't their selling point. The only decent Atlassian product is Bitbucket...and they bought it and made it worse.

Trendy design, too much configurability, and an "Enterprise" user base.

If I could, I wouldn't use any Atlassian software.
>As he pulled the trigger, Monroe said, he flashed on an image of his alcoholic father beating his mother.

Well, I think I found a possible explanation. Domestic violence has always been shameful, but it only became unacceptable with the rise of second-wave feminism. The first generation of kids raised under the new rules hit adolescence in... you guessed it, the late '90s. Unlike other trends, this one was transnational.
From the article it comes down to an equity issue; some people do not have cashless service and that means they cannot shop at an Amazon store. If it's true that 50% of black and latino families go without a bank account, banning cashless stores feels like the equity equivalent of banning plastic straws.
For those that don't know, the Empire Builder from Seattle stops in Spokane to hook up with a train that is coming from Portland. The combined train then goes all the way to Chicago. If either are delayed it can result in waiting for the other and long delays are apparently the norm and not the exception.

My wife and her grandfather took the train from Portland to Minnesota in the fall of last year. There were a number of issues with the service on the train that make it bad enough, but the speed of the train is a major problem of why these trains are somewhat worthless for travel. Freight trains get priority on the rail lines so many times the train was stopped for possibly hours waiting for freight trains to pass.

On my wife's trip the refrigeration went out at some point so cold food was no longer available, nor was food that required refrigeration before it was cooked. Fortunately they disembarked soon after that happened. The rest of the train was still a day or so from Chicago and those passengers were stuck with god knows what to eat.
> Or, if you're on this site, it's a great excuse to sit in a small room with a view and not talk to anyone for several days, just read, write and program.

With spotty cellphone reception, so if you want to disconnect from constant connectivity that's also an interesting way.

It's a great experience, but if you're thinking of just sitting in there and programming in a room with a view, keep in mind that the scenery changes and is pretty amazing, which might distract you from programming.
This is a biased exaggeration.
I don't think many non lispers realize that you can pass the same structure to different parts of your program for different manipulations or executions. Truly, the code as data mantra is just too removed from most languages. It is too easy to think eval is something that can just take in a string, at best. Completely missing that you can literally change how your code is evaluated.
The Internet Archive is doing some ridiculously important preservation work that we all just take for granted.
So the problem isn't a lack of cashiers but a lack of cash. It seems like the problem could be solved by having a few smartphone-like devices that you can shop on and take to an automated cash machine at the end. Then you'd just need a supervisor to make sure people weren't walking off with the merch, which they probably have anyway.
This is just not acceptable. I deleted my Facebook account over a year ago and I am doing just fine. I don't miss a bit of it.

At a company at the scale of Facebook mistakes like this are not acceptable. It looks like engineers there don't have too much experience in the field, but they are probably very good at flipping binary trees on a white board.
This is not an isolated political stunt. A lot of cities and states are now enacting similar measures.
That's actually not a best practice; on the contrary it's extremely uncommon. Not because it's bad, but because it just doesn't actually add a meaningful security improvement. On the other hand, it does add non-negligible complexity to your authentication system. In particular, it would have done absolutely nothing to prevent this specific vulnerability.

If you hash your users' passwords using a key-derivation algorithm on the client-side, each user's password simply becomes the original password's digest. From the server's perspective nothing has changed. Moreover the server will need to re-hash the password digest sent over the wire, because if the server is compromised the password digests can be directly replayed to the server to compromise corresponding accounts.

Additionally, since the shared secret between the client and server is the user's password digest, the password needs to be hashed using the same salt every time the user authenticates. So each user's password digest is still a de facto unique password which will be sent over the wire anyway. This scheme basically retrofits the server's job onto the client with added complexity. It's like the (slightly) faster horses version of password authentication, when we could really be experimenting with developing cars (like two/multi-factor authentication, more robust server-side controls and provable correctness).

That's not to say the scheme has no benefits whatsoever. It does mean that user passwords will be more complex, because the actual token stored by the server (the de facto password) is a digest. But there are two drawbacks - with enough users you'll still see many duplicated digests in your password database, even if you randomly generate salts on the client side. More importantly, you're offloading hashing to the client side in JavaScript. JavaScript can be very fast in 2019, but companies like Facebook and Google still maintain very low latency, substantially stripped-down versions of their websites[1] because client-side hashing isn't going to be nearly as fast as server-side hashing for a huge number of people. There's also a sizable population of people who don't even have JavaScript enabled, or who might have incompatible browsers.

tl;dr - Client-side hashing is not a best practice (and not widely deployed) because it comes with a nontrivial complexity increase, lower client compatibility and negligible security benefits. It also would not have prevented this vulnerability.

_______________________

1. For example, mbasic.facebook.com.
Maybe, but you sought it out on your own. The porn was a convenient pit stop on the way to living things out, but that doesn't mean you wouldn't have ever gone down that road. All you would've needed was to screw up the courage to make a pass at a receptive lady you saw smoking.
Wasn’t aware of tech league. My daughter tried FIRST a few years back and it was way more hardware/build oriented which kind of killed her interest.
Not OP, but I'm just not willing to sell out my privacy just to deal with robocalls.

The eye-plucking, though, that I'm totally okay with.
Style transfer is most likely not running on the GPU in this case. It's probably running on Google TPUs, given that the GPUs are likely already under high load in order to play AAA games at 4K HDR 60fps.
Presumably ticketed restaurants like Lazy Bear are inaccessible to the unbanked also. Should we ban those next?
Yeah I was wrong, it is only true if the dev has access to the prod database
Why is it normal to not hash passwords in the browser before sending them over the wire? Seems like it's opening the door to issues such as this one, or even more serious ones like when cloudflare leaked web server memory into other sites.

I understand that you'd still need another hashing layer before inserting it into the db, but wouldn't some hashing client-side be useful?
> Do games really rely on the rounding behaviors of floats to not break? Seems like there should always be plenty of margin around that. But maybe something does a loop with these instructions over and over and the error compounds?

I remember that in PearPC the sin function of cocoa (IIRC) would crash if the FMA instructions did not provide enough accuracy. It would access a table of precomputed values out of bounds or so.
Theft is illegally depriving someone of something. Burglary includes an unlawful entry component.
I particularly like that they have a role called "Loyalty Advocate" that requires experience "working in a channel sales model." If that's not a sales gig I don't know what is.

edit: To be fair to the author that wrote the article, he nearly immediately called out that Atlassian simply had a lower-than-normal amount of money spent on sales and marketing, and made no claim that they didn't have a sales team. I suspect he didn't write the hyperbolic headline -- blame his editor.
You should see how people configure their emacs setups. :D
How are you going to add cash to your amazon wallet (let alone use it), if you don't have a smartphone?
I think the case for taking VC money is because some startups have hard and expensive products that require huge upfront capital to realize. This could mean hiring a team of engineers with significant expertise in the area as well as purchasing hardware that aren't entirely off-the-shelf. If you want to build flying motorcycles [1] or rockets, chances are you need some financial aid unless you're Elon Musk.

Aside from that, bootstrapping and not raising money could work for you.

[1] - https://techcrunch.com/2019/03/07/ycs-latest-moonshot-bet-is...
I don't see this as a problem. Stores that take cash will get more business.
Toll roads as well.
I hesitated to upvote this because few things frustrate me as
much as autostereograms (hello childhood memories) ...but it’s a cool project, so have an upvote :)
The vast majority of shootings in Chicago do not happen in the inner city (aka the Loop). Most of these are on the South side and West side of the city
I took the Coast Starlight (connects SF and LA) a couple of times in the past 10 years, and I have had a pleasant experience each time. Food was good and while the train wasn't sparkling clean, at least in the areas I cared about (my seat and car) it was fine. Just the bathrooms weren't great. Admittedly this is a shorter trip than yours; this one is only an 8~10 hours ride.
Gunicorn probably got this idea from Django, which probably got the idea from Lisp (see also, emacs). :-)
I hope your family member is recovering, but if the police officer had not reached you from the officer’s phone,
would they have tried calling you from your family member’s
phone? Was your number in your family member’s phone
tagged with an “ICE” (“In Case of Emergency”) or some
local equivalent, so emergency service-folk know who to
call, and could you green-list calls from their number?

More generally, what chances of a call being an
emergency contact versus a spamming robo-call
are people willing to accept? If I had a hemophiliac
child, or an at-risk geriatric parent, I would be
far more willing to accept all calls. Since I do not,
I use a robo-call blocking service (Nomorobo, but any
of several would do, if/until Stir/Shaken works.)
That's an incredible difference. Obviously NTSC was going to lose a lot of color detail, but it also lost quite a bit of vibrancy. In particular the warm highlight lighting from offscreen to the right is barely visible in the DVD version, but on the film version it really pops; look at his sleeve, the shadow cast by his hand, and the contrast of the bottle with the background. The value contrast is similar but the color contrast is greatly muted.

[edit]

On second thought, considering the shirts that Jake wore on the show, it's probably better for the world that we don't have the higher vibrancy film version.,,
I did, for many years. It's one of those things that's hard to explain, and hard to do until you've done it, at which point you understand yourself then how to do it. My father did magic eyes in the newspaper every week when I was a child, and I could never do it. I did start to wonder if he made it all up, but there was an answer key and he was able to figure it out, so there had to be something to it.

Go to the paper: https://www.cs.waikato.ac.nz/~ihw/papers/94-HWT-SI-IHW-SIRDS...

Go to figure 7, "Figure 7. Stereogram showing a hemisphere", on page 24. There are two black dots near the bottom. Cross your eyes: you should now see 4 black dots (2 per eye). Adjust how "crossed" your eyes are such that the "inner" two dots line up, s.t. there are only "three" dots, like `(dot) (two overlapping dots) (dot)`. Now, the hard part: your vision likely blurred when you crossed your eyes; without uncrossing your eyes, and maintaining the position/overlapping of the dots, bring your vision into focus. (This is, IMO, the hard bit.)

Once I've got it into focus, I find my vision "stabilizes": I'm able to look around w/o having to concentrate on keeping my eyes crossed to a particular amount. At this point, I can look up above the dots, and there is a hemisphere in the image, as the figure caption says.

This doesn't have to be done w/ magic eye images, either. Two normal 3d renderings of a landscape side-by-side, where the camera in one rendering slightly horizontally offset from the other, will also work. The idea is the same: overlay the images in your visual field, then bring it into focus.

At least, that's what works for me. According to the sibling comment from chubasco, there's more to it, I guess, but the above is all I know.
I use preact in some of my projects and its router ("preact-router") actually does what it should:

- has an easy <Router onChange={...}> callback

- instead of <Link to> you can just use <a href> and it works for internal and external links

- routes are per default "exact", so "/profile" doesn't match "/profile/settings"

So much better, highly recommended. You probably need to alias "preact" to "react" in your webpack settings though.
Store kiosk?
Some of the CGI/composite shots in Babylon 5 are particularly horrible.

If I remember correctly, the show was originally shot at an aspect ratio of 16:9. Because it was only going to air in 4:3, the special effects were done in 4:3. For the DVDs (which I think are the same version that Amazon streams), the 4:3 shots were enlarged to fill a 16:9 screen, making the picture look fuzzy. It would be interesting to see how well this technique would work on those types of shots.
I will make the exact opposite argument: who would trust Cloudflare as a registrar, after they dropped Daily Stormer in a fit of pique?
Am I the only one stunned by this news? I can imagine that when FB was started in the interest of getting things built this was done. But why wasn't this bit of technical debt remedied way before they got to 600 million users?

Why didn't someone see this needed to be fixed much earlier? Or were they simply overruled by higher ups?
That's one hell of a memento, good luck with the filling of those shoes. At least you have something to aim for!