skysight-inc/HackerNews huggingface dataset:
> Imagine manhatten house prices doubled tomorrow. How much extra housing do you think this would lead to?

A lot. Rising prices would encourage the development of non-NYC cities. As those cities developed, some portion of Manhattanites and those thinking of moving to Manhattan would choose to move to the new cities. As the new city develops further, Manhattan becomes that much less attractive as a place to work until such time as Manhattan RE prices again drop / fail to rise, and vacancy rates increase. Vacant units = extra housing.
Andy Hunt and Dave Thomas wrote the seminal software development book, The Pragmatic Programmer. Together they founded The Pragmatic Programmers and are well known as founders of the agile movement and authors of the Agile Manifesto. They founded the Pragmatic Bookshelf publishing business in 2003.

The Pragmatic Bookshelf published it's most important book, in my opinion, in 2017 with the first pytest book available from any publisher.

Topics:

The Pragmatic Programmer, the book
The Manifesto for Agile Software Development
Agile methodologies and lightweight methods
Some issues with "Agile" as it is now.
The GROWS Method
Pragmatic Bookshelf, the publishing company
How Pragmatic Bookshelf is different, and what it's like to be an author with them.
Reading and writing sci-fi novels, including Conglommora, Andy's novels.
Playing music.
I agree. Phones are now the opiate of the masses.

I remember how I used to get anxious or annoyed or bored waiting for the train or waiting for the ATM or in line at the grocery store.

Now I just pull out my phone and drone out on Instagram.
Came here looking for this comment. There was a time where their product was a selling point.

Bugzilla -> Redmine -> Jira -> Trello/Asana -> Gitlab -> ...

I'd say things are slowly getting better.
I have a newsletter: https://weeklyrobotics.com/

and a personal blog that I should update more often: https://msadowski.github.io/
It's not the case. But organizations as big as Microsoft are often paralyzed by lawyers.
OK, is it just me or does the stereogram render backwards: The more distant stuff (the skyline) looks closer, while the floor and walls looks more distant? I cross my eyes to see these because I can’t do the “focus on the horizon” trick.

Perhaps have a mode where the close/far stuff is swapped so it looks right to those of us who cross our eyes to see these.
Ford is investing $850M to build EVs in Michigan
Out of curiosity, where is that listed on your site? I promise I looked and I'd like to know what I overlooked. Thanks!
True. I'm sure some safeguards could have been put in-place using existing data. Similar to simultaneous location and mapping. But as I said, the design of aviation systems is surprisingly stupid.

They have TCAS warning and know the height of the ground at any point on earth. Yet they'll let you dial up a path on the autopilot that flies straight through a mountain. It's only relatively recently that light aircraft autopilots gained envelop protection, until then they'd happily fly an aircraft into a stall trying to maintain the set parameters.
I've had prime for years, and I think I'm going to let it lapse this year and try to stop using amazon altogether
And even with a startup of two or three engineers, it's pretty much unforgivable.
Meanwhile the stock of facebook has risen with 0.5%. How does this even work? This is enormous lack of oversight and proper processes.

In addition the original post of facebook is rich in media speak:

First they speak of _some_ users and _readable format_ and next paragraph they speak of _hundreds of millions_

We estimate that we will notify hundreds of millions of Facebook Lite users, tens of millions of other Facebook users, and tens of thousands of Instagram users.

As part of a routine security review in January, we found that some user passwords were being stored in a readable format within our internal data storage systems.

With this technique, we can validate that a person is logging in with the correct password without actually having to store the password in plain text.
Hackernews readers put a huge amount of stock in building websites without JS, that work in lots of browsers, that deliver tiny bundles or no bundle at all, with old tech rather than new, and that "just work", because those are the things that impact the readers themselves.

As soon as someone suggests building a site that works as well for other people the comments fill up with reasons not to.

This strikes me as selfish.
> When secrets come in, immediately store them (ideally at the web framework level) ...

But, in practice, a lot of this stuff is being logged by things like proxies that could be several layers in front of the "web framework level".
Maybe used as a player entering dream like equivalent after eating magic mushrooms. Other than that you’d be hard pressed to see this in any game in memory
From the article:
"If the design has been verified and if a thorough test program has been completed it should not be necessary to make any changes. Of course, this idealized situation does not exist in any program like Apollo where design, test, and flight often overlap and must be carried out at the same time." Wow, these remind me of the Joint Strike Fighter program, where design/test/production all overlapped (concurrency) and cost overruns where a huge issue. No doubt, we spared very little expense in the Apollo program, cutting only the last two missions!
You've reduced the scope of my original question, to that of compromised accounts. My question is a magnitude larger than that.

For example, someone checks in code and left a config file semi-populated which included a live login credential. Obviously the answer is "Dont do that!" but we all are human. People accidentally post apikeys, credentials and other secure things. It happens.

But how do you automatically find issues like this? If PII is radioactive, credentials are gamma-emitters.

We solved this at a job long ago with a list of plaintext passwords on a machine you couldn't log into except local (butt-in-seat), and it took your SVN commit, scanned it, and gave a pass/fail. That methodology at least stopped our internal shared service accounts from being accidentally compromised.
I like that train because it's perfect for getting work done.
Yes, it is a chore to shop on Amazon.
Physicists reveal why matter dominates universe
Well I'll give your point that some of my comments may be short and lack substance. I'll add into more going forward
There's a PDF (https://prosperitynow.org/sites/default/files/resources/Bank...) that says that an analysis with those figures was done by Matt Fellowes at the Brookings Institute, which is interesting because it doesn't mention any polling or details, so who knows how those numbers were generated.
If you read the article carefully, no one is suggesting banning what you propose (though a machine that makes exact change at checkout seems better).

The article is clickbait.
If banks in your country do not have the ability to make margin calls while simultaneously making 0% down loans, you should probably think twice about putting your money there, because the moment they go belly up, your savings will be gone. Or, if your gov't guarantees savings, then expect massive inflation.
Microsoft has for years shown very little regard for keeping links valid. Bookmarks to anything they host are almost worthless, they rot so quickly.
Ask HN: Make money whilst travelling easily
Hi there!

I am a computer science student, and after university I would love to go travelling and see the world before I plant my feet. I would love to know of a particular service that I can provide from anywhere using a laptop. I would like it to be specific (so I can get good at it quickly as I don't have much experience), and I would like there to be enough demand (so I can make enough money to sustain my travelling). I would prefer to do small tasks so it doesn't take too long to wrap up a new delivery.

Any information to help my cause would be much appreciated. Or let me know if I'm barking up the wrong tree.
This is the opposite of my experience with a VPN and uBlock (both work, no issues).
Agreed on the UI.
You can't open a bank account without a social security number. Pew estimates ~250,000 illegal immigrants in the Bay Area, so that's a big chunk of people right there blocked out of banking by policy.

https://www.pewhispanic.org/interactives/unauthorized-immigr...
The trend is global and not limited to the US. For example, violent crime has dropped dramatically in Sweden since the mid 90s. Of course you would never believe that by only reading the headlines!

One of the causes pointed out by criminologists is the decrease in alcohol consumption. Among the general population it has decreased slightly, but enormously among youths. For example, the average alcohol consumption in liters per year for 16 year old boys has decreased from 7.4 l in 2004 to 3.0 l in 2018.

When young males aren't drinking there are much fewer incidents of unnecessary violence. Less of these "misunderstandings" in nightclubs and pubs that always caused fights in the decades prior. RE: Clearly, people high on cannabis doesn't get nearly as violent as some people get when they are drunk. However, the Swedish statistics doesn't indicate that young people are switching from alcohol to cannabis. Cannabis use remains fairly low as it has always been. The kids are just partying less it seems.
6 years ago hardly anybody had heard of Fentanyl. % growth is a misleading statistic when you're starting out on the bottom of the S curve. I'm not saying it's not a problem, just that the summary is sensationalized.
Okay, this is awesome!
If you really want to get technical, the key defining characteristic of a train is that it consists of multiple connected railway vehicles that move together. A railway vehicle is of course a vehicle that runs on tracks.

So there are some tram/streetcar/light rail systems out there (like the one in New Orleans) that consist of individual railway vehicles, and are thus not trains.
> seeded by money [...] from Intellectual Ventures

Hm, what's IV's play here?
"PewDiePie fans keep making junk ransomware" is a different headline than "Virus encrypts hard drive until PewDiePie reaches 100M followers"

The former, for people who only read headlines, implies PewDiePie is at fault, or at least condones ransomware in his name. It's the same (purposefully?) ignorant reading of "chan culture" as the implication that every Pepe meme is Nazi propaganda.
In practice, ads are there because sponsors are ready to pay for something good that consumers have no desire to pay for.

Thank you, advertisers, for paying for Gmail and all those good products.
> prosecuted as attempted-murder-(by-cop), this behaviour by any employer to any former employee, let alone a whistleblower, is completely unacceptable.

So the only evidence that we have as to whether this anonymous call did or did not occur is the statements by Tesla alleging that it did, and you choose to believe that it didn't. Why? I can understand holding Telsa to a higher burden of proof, - concluding that we don't have enough evidence - but why jump to claiming it was all made up? Without some evidence indicating it was fabricated, that sounds like a rather slanderous accusation to make.
> A city of renters is a soulless city

A city of renters is a city of dynamic ideas, young people, and social movement.
They came close. The public banking movement is growing pretty quickly and there is a statewide bill in CA to allow for cities to establish one.
>Belleview, Wash.

Do they mean Bellevue, WA or Belleview, FL?
For example, ever since I was a young child, I found smoking women to be sexy. I fantasized about it in my adolescent years. Then I discovered smoking fetish pornography and that really got me going and I started to think maybe I should actually date smokers. Then I did and I started to think it might not be to badd to try smoking myself.

I think the chain stops at the point where you started dating smokers, and you should think of this as a success! (Depending on whether the relationships themselves are ruinous or successful on the whole.)
NFL Paid Under $10M to Settle Colin Kaepernick Grievance
Time crystals generally require active driving of some sort. They have a periodic behavior the opposite of parametric oscillation. A key feature of most time crystals is their long ‘prethermalizing’ behavior which is to say that it behaves like it isn’t thermalized for some very long but finite time. Whether these scars decay similarly especially within this constrained SU(2) space Lukin has cooked up is still out.
That's a pretty blunt metaphor for fossil fuels.
Nice. Here's a thread-reader-app mirror: https://threadreaderapp.com/thread/936615043126370306.html
Modern Taxation Theory in the Faroe Islands
Citizens have guns in Canada and police officers there don't shoot innocent citizens every day.

Go figure.
> This is programming masquerading as configuration

On a slight side-note this is something that's been bothering me with markdown and other markup languages.

They're very good for short comments but when you're writing a blog post, or god forbid an article series or a book, sometimes having access to a programming language is fantastic.

It's why I like a markup like Pollen use. Also X-expressions fits very well to model a document.
A duck duck go search of something like

<what I'm looking up> javascript mdn

give me developer.mozilla.org at the top every time. It's somehow better than site:developer.mozilla.org for some weird reason.
It's not macOS, it's Firefox on macOS.
What Mary Oliver Knows About Death and Beauty
Big tech has nothing to fear at all. Europe is waging an all out war on companies/entrepreneurship of every size. Big tech will probably face massive losses. On the other hand, a bootstrapped company/MicroISV or whatever you want to call it these days will not face any loss, because it would have been legislated out of even being born. So big tech will probably be secretly cheering on the greater chance of establishing monopoly.
I don't mean to engage in whataboutism here, but unless you're under the impression that no tech company is privacy conscious, what you're saying isn't true (though that'd be a reasonable impression, to be fair).

It's absolutely a security failure and it's not acceptable. But it's not a matter of "allowing" it to happen so much as, "Which vulnerability will we be caught by?" And it actually is a pretty normal vulnerability. For example, Apple[1], GitHub[2] and Twitter[3] have been vulnerable to this exact issue in recent memory.

I also don't mean to be defeatist. This kind of problem is preventable. But it's merely one dumb mistake in a universe of dumb mistakes that leads to serious security failures, all of which are easy to make. The most sophisticated and well-funded information security teams in the world - usually the FAANG teams - still miss things which look pretty silly in isolation.

At this scale being privacy conscious is necessary but insufficient. You can't realistically conclude anything about a company's dedication to privacy based on whether or not it was impacted by this kind of vulnerability. Making a corporate policy to hash passwords in the the database instead of storing them in plaintext is easy to codify, easy to implement and easy to verify. A corporate policy to never log authentication credentials is not nearly as well-defined, even if it's equally as important. That means more mental overhead, disagreement and uncertainty in preventing it. Ultimately, it also means more mistakes can be - and are - made.

________________________

1. https://darthnull.org/security/2014/03/10/cve-2014-1279-touc...

2. https://www.zdnet.com/article/github-says-bug-exposed-accoun...

3. https://arstechnica.com/information-technology/2018/05/twitt...
This kind of thing can often be hard to catch in a code review, because often it's the combination of several systems that cause this to happen. Tracing the user's password from submission form all the way to logger would probably require jumping through several layers, most of which are just handed black box blobs that they hand to the next system.
As opposed to…Google's?
This might be the most rambling, substance-free article I’ve read in my life.
Well, in that case I just got disinformated. My buddy worked in their DC, and that was his first hand account: "OCP stuff came with major deficiencies, haphazardly reverting everything back to off the shelf U1s"
I'm curious -- which hardware devices? I find Vive and (current-gen) Oculus Rift the most comfortable. The biggest issue for me playing a well-designed game is fogging up due to sweating.

EDIT> I have a relatively low tolerance for motion sickness.
Don't know much about stereograms, two general questions:

a) Is it possilbe to render color images this way?
b) Is it possible to have the random dots not change all the time? E.g. When I don't move in this example, I dont see the need to draw new random dots. Also when moving sideways e.g. would it be possible to keep the dots where they are, relative to the world?
If you are using gmail, you are already giving all of that to google. Google tracks all your purchases. Not trying to contradict your point but just saying that it happens irrespective of whether you use Amazon or not
We're splitting hairs here.

The original article used a straw-man to impugn capitalism. That's hardly fair. For every bad faith player there are a thousand farmers (all small businesses IMHO), restaurant owners, inventors, and others who start a business to serve the public with a good or service and are willing to risk their time and money to do it. Lots of those folks don't make it and lose their investment for a multitude of reasons. Sometimes it's because of bad management; sometimes the economy; sometimes illegal action by a competitor. Such is life.

In this discussion, we have to be careful of choosing our examples to suit our argument. The original article seems to be blissfully unaware of survivorship bias when she rails against capitalism.

Economics isn't a morality tale. It doesn't care who is "good" or "bad", just who is able to provide something the market needs at a price it's willing to pay.

I know this outrages a lot of people butI would argue that there is more hazard entrusting that determination to government (as the author seems to suggest as a solution) than letting consumers decide for themselves.

I used to use Uber. Now I use Lyft. That was a choice I made when I learned of their management culture. You might care; you might not: it's YOUR choice.

Capitalism isn't the best solution to our scarcity problems but nobody has come up with a better solution yet. Ideas are great but you can't eat ideas. You can't sleep inside of a conjecture.

Capitalism wins because it works in spite of the imperfections in implementation.
> they would have to scan all those original pieces of film and then edit together each episode again, themselves.

Once they have manually scanned all those pieces, surely they can let machine learning edit together each episode again?
How can it make it affordable?

For rents, if 8 people want 5 units, the rent will be high enough that 3 people are priced out.

For owning, if 8 people want 5 units, the mortgage payment will be high enough that 3 people are priced out.

I fail to see any difference.

I do think that discouraging unoccupied properties is a good idea though.
It's a matter of scale. You can only make a copy of the whole internet by committing to that purpose, and there's only one outfit that does it in a public manner. I can't imagine what it would take to duplicate that database right now, and it increases every day.
Called an act of terrorism by who? They were acts of violence with a political motivation. That's terrorism. Even the SPLC called the BLM-related shootings terrorism. ("As details developed about the Dallas, Baton Rouge and St. Louis attacks, it was apparent that a domestic terrorist threat had re-emerged — a threat not seen since the 1970s.")[1]

> The study I posted above from UMD says otherwise

The study that (unlike the SPLC) doesn't acknowledge the existence of "violent black nationalism" (the SPLC's term), classifying those acts instead as merely "anti-police" and thus not counting them as left-wing terrorism? The study that separated environmental extremism from left-wing extremism? The study with a deceptive chart that depicts 210 where 250 should be and 190 where 150 should be? That study has many flaws.

Still, I must admit the study does seem to say that left-wing terrorism has decreased, after being out of control in the 2000s, accounting for about 75% of all attacks.

However, the DHS, under Obama's leadership, concluded that left wing terrorism is increasing:

"Federal authorities have been warning state and local officials since early 2016 that leftist extremists known as “antifa” had become increasingly confrontational and dangerous, so much so that the Department of Homeland Security formally classified their activities as domestic terrorist violence"

Previously unreported documents disclose that by April 2016, authorities believed that “anarchist extremists” were the primary instigators of violence at public rallies against a range of targets. They were blamed by authorities for attacks on the police, government and political institutions, along with symbols of “the capitalist system,” racism, social injustice and fascism, according to a confidential 2016 joint intelligence assessment by DHS and the FBI.[2]

> Congressional baseball shooter specifically wasn't part of an online community

He was part of several online communities where hating Trump and Republicans is the norm ("including the Road to Hell is Paved with Republicans, Donald Trump is Not My President, [and] Terminate the Republican Party"[3]).

1: https://www.splcenter.org/fighting-hate/intelligence-report/...

2: https://www.politico.com/story/2017/09/01/antifa-charlottesv...

3: https://www.latimes.com/nation/la-na-pol-virginia-shooter-pr...
That might be the case for SF, but the effect is being seen globally.
>We do not expect every company to have infra/ops setup to prevent logging on login requests.

What? I absolutely expect every company to not log my password in plain text. In my 15 years as a developer across several companies and industries, I have never seen anybody log passwords, or advocate for logging passwords.

I'm struggling to think why any employee of any company should be able to view a plain text password in any form. Why would there not be an expectation here?
this is just not true, and only describes a very specific subset of advertisement. for a very large portion of ads, the advertisers want people to see it even if it doesn't translate to a direct sale of something the user already wanted.

Disney does not expect someone to see an ad for Disney World and immediately win a click-through conversion for a $2k vacation. They do expect to remain relevant, and the ads have "worked" when Disney pops into mind when I try to plan my next vacation. So they make sure to continue to advertise to families.

I do not want to see those ads.
A better term is "don't snitch" - anything can be a trade secret.
Software that writes the front end so you can focus on the back end
As a backend developer, I do not want to dabble so much in the frontend but have some template/builder I can modify/create and let it talk to my backend api to fetch data and render results. Is anything like this available?
Repl.it Graphics: Build and Run Native Apps and Games in the Browser
I remember this in the early day of blogging -- we were always leveraging community to drive organic reach. I was told by a FB person once that we need to stop chasing organic reach -- it ain't happening. The monetization to the forced FB feed meant everyone had to pay. For bloggers this is how they make money. It's become a staple for the industry.
In the United States, there are probably three or four ISPs that together serve a majority of the population. So there's not much difference there.