skysight-inc/HackerNews huggingface dataset:
This is an example from yesterday:

"azure" devops agent "checkout" "freeze"

I'm obviously searching for something very specific here, and Google helpfully decided to show me results omitting "freeze" and "checkout" so I had to quote them.

I also notice that it looks like Google thinks that check-up is the same thing as checkout, which in context are not synonyms, though this would require Google to infer "git checkout" but I didn't include git because that would introduce another universe of unhelpful results.

https://dzone.com/articles/getting-started-with-jenkins-the-... was included which doesn't include "azure" at all, though this is obviously Google being cheeky.

Of course I could also call this somewhat sinister, as Google is basically saying I should ditch a direct competitor to their services and instead use a self-hosted service. Or maybe I'm projecting since I would like to ditch Azure DevOps and use Jenkins, but in any case there's an example.

Feel free to play with it: https://www.google.com/search?rlz=1C1CHBF_enUS820US820&biw=1...

Of course, in this case it was a networking problem so I do have to admit that usually when Google starts ignoring what I typed it's because the answer to the question is something else entirely. Though sometimes I know exactly what I'm asking for and Google doesn't get it.
Reminder that Facebook also stores(stored?) 3 separate hashes for your password: passwoRd, PASSWOrD, and PasswoRd. They weren't super transparent about this fact.

Source: https://www.zdnet.com/article/facebook-passwords-are-not-cas...
I recently read this article and was surprised that services like Grubhub and Seamless are not only charging the user a service fee, and using tips to pay less of a guaranteed hourly wage to workers, but also charging a 10% -30% fee to the restaurant owners for result placement. This article compares this to mafia tactics. Also considering most restaurants don't have that high a margin traditionally even 10% is often all of the profits.
source: https://newfoodeconomy.org/restaurants-eaters-please-love-go...

Just blaming a living wage seems like a gross oversimplification. Also landlords and exploding rents were not factored into this article.
YC is a non-traditional VC, but still a VC. VCs expect a certain growth rate (2-3x annually for the first five years) that almost always requires follow on funding.

You could do what you are describing, but if you are up-front with your plans to grow slowly, most VCs will pass on you.
The point perhaps is that they’re both terrible security designs and the impact to the user is the same regardless of how the “accident” happened. Nobody in FB’s position gets a pass for being irresponsible and negligent.
Agree. It's a great example of a science fiction writer who brings their SF perspective to historical events / technologies (in this case the invention of science and modern financial systems) that to the characters are massively disruptive.

The beginning and end events (spoiler...) where the same character as a boy witnesses the hanging of a witch and as a (very) old man sees a commercial steam engine are great bookmarks on a massively transformative period of history.
Why don't universities just videotape the lectures as they are happening and make them available for reference to the students. Then the students can just pay full attention to listening the lecture while it is happening, then the students can use the tapes later to make notes later if required.
The paper[0] is less vague than the article. To put this in terms of reinforcement learning:

1. Sample actions from a random policy distribution.

2. Fit an inverse model with supervised learning from this data. Inverse models learn to map current observations and next observations to the action which produced the next observation: f(s_t, s_t+1) -> a_t

3. Use reinforcement learning to fit a policy which varies the next observation towards a goal: p(s_t) -> s_t+1

4. Use new data from attempts with the policy and inverse model working together to continue training the inverse model.

Motor babbling is a quick way of generating data but it isn't particularly efficient. The problem with taking random actions is that most of your data is going to cover parts of the state space that aren't important for the task. The addition of the policy allows biasing future attempts towards more useful areas of the state space to continue training the inverse model.

This paper [1] also includes a forward and inverse model to improve sample efficiency for more examples of these ideas.

[0] https://www.nature.com/articles/s42256-019-0029-0

[1] https://arxiv.org/abs/1606.07419
> academics who have never built a business, hired employees,

You don't seem to know much about what academics do. A large part of their work consists of project planning, obtaining funding, hiring people to do the research work, advertise the results to get other people to contribute and so on. Only junior academics can really focus on the research. From a certain level of seniority, many academics are really research managers. It's very much building a business.
“Asking for anything beyond that [from the developer] is unrealistic.”

It seems realistic that we could (and IMO should) ask for it from the businesses though. Just in line with existing non-internet accessibility requirements we have for businesses, government organizations, public institutions, etc.
"they seem to acknowledge that they just don't know of anything better in that case"

They don't know you can run your own DNS server ?

It's technically trivial (for this audience) and it's basically free (very low traffic and resource instance or droplet or VM ...).
Thanks for your answer! You hit the spot with some things. I am definitely emotionally involved with the company and considered the option of exercising only some of the options - that might be the best option at the moment. One thing to point out is that there is still a month worth of raising time (with all employees still in the company), which is significant in startup terms.
Is sharing this the right thing to do ethically?

I am honestly not sure.
> _Apple is still a for-profit corporation._

Whose profit model is aligned with promoting user privacy, rather than against it.
Funny thing is, the author probably is for a meritocracy. He just debunks the myth that we ever had one or that we have one today.

The prime predictor of financial success in life isn't merit or hard work, but still is what it always was: who your parents are.
> That bit sounds like hell to me

Yeah, us Brits don't like to do anything that sounds like it might be fun when we're under stress. We want to sit there and bitch and complain about the fact nobody is fixing the track and who is going to get fired for it. We definitely don't want to have anyone distract us from that with anything that looks like it might be fun. /satire
No, Ethereum didn't fork the client. The main client was patched to automatically use the bailout-chain, and anyone who upgraded their node was thus switched to the new chain.

But this is merely a red herring: Ethereum was centralized from day 1 due to their distribution method, and the DAO is just a natural consequence of centralization.
I was relating to the parent comment about writing v. typing, so I kinda lost the original point of the article.

Yeah, Math is a much different subject when it comes to notetaking and processing the information you learn. There are a few equations to memorize, but to really excel at the subject, you need to learn more why's than you do what's
Dedication – 3 Minute Motivational Video from a Computer Science PhD Student
It’s from the NYT Magazine, a glossy supplement included with the Sunday paper where they publish longer, more literary pieces.

https://en.wikipedia.org/wiki/The_New_York_Times_Magazine
No one said it was fast or easy. Given a long enough timeline and some daily effort, you can most likely learn another language.

You can't study yourself to un-blindness.
You can make Tcl as non-Turing complete as you wish. Stripped of most or all builtin commands, it becomes a flexible configuration language. You can add back power in small controlled doses as it becomes necessary. You can also make it more palatable to the cool kids by adding infix assignment and expression evaluation with a few simple helper procs.
I guess that's true, yeah. Will be interesting to see if there are fines from the EU.
> This means teenagers will be considered old enough to make decisions that will affect the entire country,

Yes. I also wonder why Voting age and voting identification requirements are different in US, then for purchasing firearms, or military service.

Both require adult-level accountability. Both can have dire consequences (at different magnitudes).

It seems more logical to have minimum age, criminal record, and identification requirements parity for Voting, Firearms ownership, and military service

(there should be special physical disability exceptions, I presume).
Yep. IIRC, this was why several of the Sonic Adventure ports from Dreamcast has issues where the player character could fall through tiny seams in the floor.
Having (read) access to the hash shouldn't give any access to the account.

Edit: You've made this comment twice in these threads. It's wrong.
How do companies keep messing this up. The cardinal rule of web application security is to NEVER store plain text passwords anywhere. The only time your application should have access to plain text passwords is when it is hashing the password or verifying the password against a hash.

If you need to log all request data for some reason, strip the passwords out.

It really isn't difficult.
Yes, I should have been more detailed in my response.

You're right that all of them give a quantative score, not a qualitative score like "native". There are qualitative scales where one of the labels is "native fluency". For example, the Interagency Language Roundtable has level 5 (native/bilingual fluency) which means the speaker has "complete fluency in the language, such that speech on all levels is fully accepted by educated native speakers in all of its features, including breadth of vocabulary and idiom, colloquialisms, and pertinent cultural references".

Other people have devised concordances that map the quantitative scores from things like TOEFL onto the ILR labels.

ILR level 5 is a very high bar, though, as you point out elsewhere. It is unlikely that Facet truly needs someone at that level, they'd most likely be fine with level 4 or level 3 speakers.

But reaaaaaaaallllly, I suspect we're all ironically missing the point of the communication. On the one hand, we can construe it narrowly and it may be technically flawed. On the other hand, it's marketing copy and I suspect most readers treat it informally, especially since their audience is entrepreneurial people who want to do contract work -- a pool who is likely to ignore the strict letter of the requirement and apply anyway.
Roadtrip – A music listening app where you and friends jam out together
So they logged plaintext passwords, what a dumb mistake. To top it all it sounds like 20K employees had access to these infra components. I have had my doubts on FB's internal access control model for a while now. Specially after one particular story where an employee claimed to have internal access to private information and used that to stalk people on Tinder - https://www.wsj.com/articles/facebook-fires-employee-who-bra...
1) The FCC is threatening all kinds of hell for service providers that don't implement shaken/stir. AFAIK all the major US carriers are already committed to implement it.

2) Robocalling is probably not net profitable for the carriers. Much of it originates from abroad and much of it is associated with other kinds of fraud. Never mind the secondary impacts due to users deciding not to get phone lines if they are just going to receive spam.
Thanks. I will follow up with you on the ticket itself.
Reminds me of the advices given in the book: The Richest Man in Babylon.
Twitter found they did the same thing last year https://news.ycombinator.com/item?id=16989534
I might be getting one of these.
The beauty of generic header-names
It crashed at peak 6K Signup / Min. I am hoping this won't turn into bad press for Ruby Rails.

Or in marketing terms they could have use Request / Min.
I come from a neuroscience background hence my bias. It's the fundamental way in which we focus on objects in the real world. It is not functioning normally at all with a headset on.

No one Ive met can stay in VR for hours regardless of game. Most of my friends who have tried or have VR devices get sick after 45 minutes. Admittedly they are not VR enthusiasts or hard core gamers however.
Are you Carl?
yes, because nobody is trying to drive 4k per eye at 144hz with lower latencies than we can currently get to.
> the barrier of entry to a website is lower than a physical business

Are you talking about as a proprietor or as a user/customer?

As a customer the access is quite different, to the point of comparing apples to oranges. To access a place of business you simply need to physically get there. The business, if open to the public, needs to make a few reasonable accommodations for special physical needs (e.g. ramps for wheelchairs, etc.)

To access an app or website, you need to have a phone or computer, internet connection, and be able to operate those things. Pretty much everything else can be accommodated by the user.

To me they are not comparable.
I was thinking more of the latter. I'd be interested in hearing more details on the company...
Data anonymization and de-identification is nothing new. Especially when it comes to logging. I don't get why a lot of you are downplaying it in this thread. This is just as bad as plain text passwords.
Yeah, the idea is to take inspiration from Go and similar languages, using the new async (coroutine) features in Python that give it better concurrency handling, and the benefits of types. Without having to deal with a lower-level language.
It’s not intellectually dishonest. Speeding is against the law. Do you speed?

Have you ever downloaded a movie off of bit torrent?

Do you think that Black people should have moved to the back of the bus in the 60s because it was the law?

There were laws on the books in many southern states until recently making homosexual sex a sin. Should that law have been followed?

There were laws against interracial marriage until the 60s and Utah is just now debating whether a law against premarital sex should be taken off the books.
<quote>Tipping is an anachronism from slavery and should be banned.</quote>

Oh gawd! Says someone who's likely never worked in nor almost certainly never owned a restaurant.
Top Front End Development Megatrends
With salt at least, that .sls file can just as easily be python. Just return the structure you need.
Exactly. Totally agree.
> number of users (proxied as active addresses)

New wallets cost nothing to create and manipulation in this sector is rife.

The assumptions are flawed from the start.
Relay Computing
I would use it since my company is pushing to shift there but currently I have open:

- Personal Skype, for casual conversations with colleagues or personal(I don't want the company to snoop all my convos).

- Skype for business, because for some reason people still use it. It's awful.

- Email, for more official communication.

- Teams, the new addition to the family.... it doesn't seem bad it's just I don't really know if I am going to use it....

And my situation it's not even that bad, I've seen worse.
These apps can freely choose to only use the cellular modem for communication and thus communication may not show up in your firewall / proxy. In addition to this, your carrier can't distinguish legitimate traffic generated by you from malicious traffic generated by these applications.
Yeah, looks like they're pivoting their non-Steam/game related dev strategies more towards linux gaming and better streaming support than anything else
I don't think other companies are going to buy into the new companies's products if those are not good. It's one thing to be able to reach to YC companies/founders, another to convince them to use your product.
No! Bitcoin is a currency not a commodity. There is plenty of value in using it on those merits and that value increases the currency proliferates.
Maybe the HN crowd needs to re-think login security. About 25 years ago challenge-response was a HUGE thing in login security. As https gained momentum and traction that went away. But the nice thing about challenge-response (at least for Javascript enabled clients) is that the password is one-way hashed before sending to the server.

I wonder if it's time to up our game again and go back to that model.
> which creates an incentive to maintain currency under the mattress.

Continuing the thought experiment, consider what goods and services people would continue to spend money on, in spite of the expected increase in the value of money.

> Today, in most open economies, nobody controls the supply of money, ...

With all due respect, this is demonstrably false. The Federal Reserve and its member banks control the supply of money.
Depends. A video can be a little intimidating to someone not used to interviews.
To me it’s no surprise these things happen considering these companys only care about hiring leetcode experts.

Who knew data structure and algorithms doesn’t qualify you to build a secure real world web application?

Knowledge of practical things like security has zero value to these companies when hiring engineers.
Discover Quickly: an app for music discovery sessions on Spotify
> Even if you decide your unit of measurement of volume is the volume of entire observable universe then the planck volume

Sure, but if your unit of measurement is (for whatever reason) 10^billion times the observable universe that statement holds.

I don't think any amount of pedantry will let us distinguish a billionth significant figure though.
It's true that Bitcoin can't be used legally in fractional-reserve banking, but given the behaviour of exchanges to continue trading despite a proportion of their holdings having been hacked or embezzled, there was an element of de-facto fractional reserve going on.
I think the technical security problem here (properly whitelisting parameters in logs) is just a symptom and not the core underlying concern (as the article mentions Twitter and Github just dealt with similar issues)

To me, it seems very likely someone before 2019 laid eyes on these logs and either:

a) Decided not to report it (implies serious security culture issue)

b) Reported it and no action was taken (implies serious security process issue)

c) Didn't even acknowledge it was inappropriate (implies a serious security training failure)

If you've already become complicit towards regularly violating the privacy of your end-users, one can easily understand an employee devaluing the seriousness of clear-text passwords in a log.

Are FB employees so regularly exposed to sensitive data that they have become desensitized to the seriousness of clear-text passwords in an internally accessible log?
Yup, the side effect is that customers of a given startup often get abandon with "it was great journey for us, you have one month to get your toys somewhere else" note.
> It's even more unhealthy if I can't have an informed discussion about the news of the day with you because you got your news from the NYT and I got my news from Times of London and we got two entirely different sides of the story and we can't go and see each other's sources of information

Probably not the best example. With the NYT and the Times of London, you might get different perspectives on a news story (as opposed to an opinion piece), but they will both be mostly correct. You should be able to have informed discussion.

To make your example work, you need something more like an AlterNet reader trying to have an informed discussion with an InfoWars reader.
> I just don't think I would get excited working for someone I know with that short term of a mentality.

This.

I was recently the first full-time hire at a seed funded company that was in the right place and the right time. They grew to 10 people over a few months, and I loved the people I was working with.

Knowing that the founders had a 10-40x equity stake larger than mine made it nearly impossible to feel invested in the company.
Urban climate: What will US cities feel like in 60 years?
How much does such an option cost?

I mean a plane is in the multiple millions so an indicator light that costs several thousands is still just a tiny fraction of the cost.
Here's my breakdown:

> Morality is not always relative (house example)

Building an unsafe house exposes people to active harm. When you invite someone into a house you make the implied warranty that the roof will not collapse and kill them do to your negligence.

> You’re a web professional

If you're making a new product for Google or Microsoft, I completely agree with this article. However, developing web apps is not the same as building bridges. If you are a bridge builder, you're a licensed civil engineer with a sizeable government budget. If you build web apps, you might be a 30-year senior dev, or you might be a student trying to launch a startup with a hundred dollars and no employees. Or, you might just be making a personal web page for yourself or family.

> The web is accessible out-of-the-box. We break it.

As with any term, "the web" can have multiple meanings. This statement is true of the original web implementation, "[an] HTML file with no CSS and no JavaScript." That's not the web anyone knows today. Modern definitions of the web might include PWAs,

> It’s not on people with disabilities to tell you how you screwed up

If you're Google and you "forget" to alt-tag images, again I agree by all means. But this is only true if we're talking about common knowledge stuff (which is relative to size and resources of the developer) or things that are deliberately ignored.

> It should be easier

Why is it the job of a side-project, non-profit, startup, or personal developer to conform to obscure, complex standards--why isn't it the job of the for-profit screen reader companies to make decent standards in the first place?

> you have a moral obligation to make sure it works right for everyone.

Building anything is a game of tradeoffs. If you can afford and have the expertise to do so, you absolutely should invest in a11y. Your moral obligation is to not intentionally harm users, not to spend endless amounts of time complying with every standard and best practice.
Different causes, identical security implications for the user's passwords that were improperly stored.

Both are security fails, regardless of the cause of the fail.

And a company the size of, and with the resources of, facebook, most certainly should not get a pass for the "oops, we logged more than we should have" cause. A corp. of their size, and with their resources, should be doing password handling correctly, every single time, no exceptions, no excuses.
We managed to solve the issue of "everyone needs water & electricity" by making them government services (or in some locales, private services required to service everyone). It's not a perfect system but it's certainly better than what we're doing with housing.
Our company started using it about a year ago across the entire company, we have about 250 employees. It's really actually been a great tool for us
I've been working at startups since the mid-1990s and building-to-flip was as prevalent then as it is now.

I'd say the much bigger change is that randos have a real shot at getting funded today, due to YC and the syndicated convertible debt round. It's hard to overstate how much more open the funding market is now than it was even 15 years ago.
I've taken the empire builder from Seattle to Chicago a couple times in coach, which I was pretty happy with. I can sleep okay in coach on airplanes though, so sleeping in coach on a train is positively luxurious by comparison.