skysight-inc/HackerNews huggingface dataset:
This comment is not overstating matters. I encourage anyone to go and skim the Wikipedia article on "rolling coal" to appreciate the magnitude of the issue. This isn't quiet resentment of environmentalism we're talking about here, this is open and self-aware rebellion.

https://en.wikipedia.org/wiki/Rolling_coal
I mean if the US government spies on us and we don't care, why would we care if China does? Same same?
BrewV – A open source gesture controlled video player
A similar idea is Athena[1], also based on Tufte CSS. It's a static generator like Jekyll with a minimalist look. Pretty easy to set up and get going, and integrates well with hosting on Github Pages.

https://github.com/apas/athena
Just what I want, an unwarranted rent-seeking third-party in between my financial transactions. No thanks. Not after experiencing better. The taps mentioned are instructions for my bank to send money directly to another account now or tonight.

I've heard Zelle is supposed to be some consortium and may be better, but it is still twenty years late and hardly ubiquitous.
>>I wonder of 'trickle down economics' works when the money is injected more closely to where it's supposed to trickle from?

That's specifically not trickle-down economics. That's just a economics. If you give more money to people, you're just giving more money to people.

The whole point of a trickle-down is that if you give large sums of money to already rich and powerful individuals, typically in the form of tax breaks or subsidies, then they will invest that money in sectors that create jobs which allows the wealth to trickle-down to the people you're positing to help.

I'm not here trying to talk about the merits of either, just pointing out that this is an entirely different style of economics.
Yes. Make is a build system. Cmake is also a build system that leverages make. This means that from the perspective of a user of cmake, make is a component/dependency/part of cmake. make can be used independently, and is absolutely developed independently, of cmake.

But when you remove a dependency of a tool you can expect the tool to stop working. That doesn't mean that the tool doesn't do what it says it does.
NSA-style backdoor for LPE? Bullshit.
I explored this space in depth a while back. The problem with approaching the creative side of advertising is that it's an arms race. There's a reason creative agencies don't work with clients that compete with each other: you cannot share what worked for one client with another, otherwise it becomes less effective for both. Once you find a formula that works, everyone copies it, and it's no longer useful (i.e ad blindness). You can treat this as an optimization problem, but then everyone will do the same. Those who stand out will be doing something different, using different methods to draw attention that is not automatable.

Also, there's usually not enough data available for making very good decisions, especially if it's based on longer but better signals of ROI, such as LTV or sale conversions. A long sales cycle means you might not have data for optimization until 60 days later.

Finally, another problem is that AI can lead to deceptive or manipulative design (think dark patterns on steroids). That isn't just an ethics problem, it's a problem that could lead to lawsuits (e.g. false advertising, advertising the wrong things to protected classes of people, etc)

In general, it's hard to optimize problems which involve others optimizing against you.
I seem to remember reading about similar results when people were asked if they are above average drivers.
Predicting the future and future forecasting are different things.

There are many forecasting techniques available. The goal is not see into the future, but to see the likely distribution of outcomes that come from decisions and sequence of future decisions.

Rumsfeld & Co had idea of what they wanted to happen, and then they twisted everything to justify it. That's just being an idiot. Rudimentary expert-opinion forecasting would have helped. Expert opinion was specially avoided or ignored.
What, to optimize emissions?
Not sure if you are aware, but not all crypto is based on proof of work (mining). There are other algorithms that don't waste tons of energy and still provide the benefits of crypto. Also, they can be useful for things other than tax avoidance and illegal utilities.
I don't have access to server logs as this site is hosted on Neocities.
Add GPS Tracking with the Google Maps API to Your Raspberry Pi Project
Tax Act. And as far as "best in class" goes, I find Tax Act to be far less infuriating that that steaming pile of shite Intuit puts out. I would almost go so far as to say it's decent software.

As for the lobbying, I have some vague memory of jumping to Tax Act because of someone pointing out that they don't lobby. A cursory bit of searching didn't raise any red flags at the time.
>Driving with the forks up

I guess that's what passes for realism in the pre-Klaus[1] era of forklift video game design.

[1]https://www.youtube.com/watch?v=oPpwLCvPAME
I thought the vote already happened? How can they change it?
Why would anyone malicious bother hiding a LPE vulnerability in a driver like this? What's the point if you're going to need another backdoor to actually get code exec in order to exploit this backdoor?
> I'd suggest people learn how to do plumbing and electrical work

This might be a solution for some people, but it's not a long term solution for everyone. As people age, their bodies deteriorate. An injury might put someone out of work temporarily, or forever. Manual labor becomes more difficult, or outright impossible, for people entering their 40s, 50s and 60s.
Wac: Minimal WebAssembly interpreter written in C
Unvetted, user-submitted articles and presenting them as if they are valid news is my biggest gripe.
Is there any irony in describing it as an "NSA-style backdoor"? I mean, from a context of fearing Chinese espionage. Not sure what my opinion is, but that stuck out to me.
Not specific to time, place, or ideology.

Example, Qin Dynasty China, Burning of books and burying of scholars (213 BCE):

https://en.wikipedia.org/wiki/Burning_of_books_and_burying_o...

Or the destruction of the Mayan codices by Bishop Diego de Landa in July 1562:

https://en.wikipedia.org/wiki/Maya_codices
hello! thanks for the report! i just pushed a small patch that now has some more helpful messages.. havent ironed out all the states yet and probably need a state machine since i already cant keep everything in my head!

https://github.com/netlify/netlify-dev-plugin/commit/1c6df00...
If that's the case, the distinction was subtle enough for me to miss, and probably a lot of others. It isn't hard to say "the Chinese government" if that's what parent meant. Instead saying "the Chinese" in response to an article about a Chinese company's product is clearly ambiguous. I don't see how it's okay to gratuitously say anything about "the Chinese" as if that was somehow a valid, well defined and understood group that warrants being judged and stereotyped in such a wide manner.
Even just using IAM to grant permissions is going across those services is going to lock you in.
When something bad happens - take a plane crash for example - its never just one thing you can point to and say that was 100% to blame. There's always a series of events that compound together - decisions and shortcuts made years or decades before a catastrophe occurs that all work up to the event.

I could just as easily blame the British for the Balfour declaration... which led to the current Mideast strife - which led to AlQaeda causing 9/11 which lead to the military interventions in Iraq.

My point is - its too facile to blame the Bush administration for everything. Look further back...
Nice article and a very pretty blog :)

I've found https://outline.com/ to be great for reading content on the net regardless of the original layout, as it basically extracts the text and places it in a centered page with really legible line-height, letter-spacing, font-size & family. Evernote used to have a similar extension but it was sunsetted a couple of years ago.
It's worse than that: the German press pretty much runs the show.
Is there any reason to think that the palms of Chinese politicians are not being greased?
How is that possible? Win10 should require manual confirm for that
Attest Raises $16M to Take the Guesswork Out of Growth for Consumer
No worries, I feel it's important to talk about mental health issues. You never know what others are dealing with and sharing might make them see that things can get better.
...Yes, because the Chinese government is not a race? Obviously?
This. A good example is Cisco's predilection to add "undocumented accounts" to it's routers. Those are definitely intentional backdoors.

https://m.slashdot.org/story/343674
I'll note - at no point I mentioned the government as a driver in this - this is a societal question - government might be the mechanism to do it - but government cannot initiate it - we as a society must form a consensus on what to do with the displaced first.

Broadly I'd also agree with you, the regulatory environment makes running any sort of business needlessly complex and difficult, and tends to increases the capital requirements greatly - though I'd argue that state and local regulations are the primary burdens at this point.
there are lots of coins with algorithms designed to resist ASICs. Bitcoin just isn't one of them.
Welcome to 1997! This is how Geocities, Tripod etc worked back then (I think geocities.ws has FTP access too, for the complete experience). Amazing to see the web coming full circle even on this.
so this will run on AWS and Azure too.... what is it going to use to provision the cluster, kops?
Ha ha, "certification" is a cool idea, but it would be hard to get anyone to care about it. "Allow 5 seconds" is a feature I really want now - I might dig into the Firefox code (or No-Script) and see if I can figure it out!

I have no-script on by default, and these days I need be convinced there's a REALLY good reason to temporarily whitelist a site.

Sure, a lot of the web is now either a blank page (or "you need to enable js to run this app") but on the positive side, I'm a lot more productive as I just close those sites and move on!
Amend US law so there is CIVIL LIABILITY for backdoors with substantial statutory damages. The Tort bar in the US will make quick work of this and the problem will diminish, possibly cease.

Also, while I'm at it, it would be nice if Unbox Therapy and other like it would make mention of the Botnet threat in their product reviews.
UpCodes cofounder here, glad to see people care about this! Happy to answer any questions.
No, your point was that you were trying to use my post as a springboard into passing your value judgments about western culture. Which was itself incredibly ironic both in your actually using the word "irony" and in your sort of amazingly insensitive attempt to hijack my small message of encouragement to this poor dude (to try looking at and thinking of his torment in a different way) in order to interject your theories. Which was for me, in the end, the thing which QA folks call an indicator.
Composition over Configuration
This would be incredible as a live background, both because it's aesthetically stunning, and also for the information it can provide at a glance. I don't know enough about iOS to know whether (weather?) that's possible or not.
It's generally hard to come by, leaving lots of room for assumptions. There was evidence of NSA tampering with ordered hardware in transit in the Snowden files, next to indications / speculations around certain cisco routers and even more about Intels Management Engine. But despite the last two being probable candidates I can't recall hard evidence for them.
The thing is that with ad networks you're at their mercy, if they don't want to sell ads on your site, you have no other option. While it would be nice to have a micropayment system built into browsers themselves, cryptomining is kind-of the best option.
China’s Electric Cars Hit Some Potholes
Predictive design, optimized to create the expected.
Moved from Github Pages to Netlify this year and have never been happier. Will definitely give this a shot.
Just a video and no text article? I’ll pass!
You will start with blocking their websites. Then you might want to reverse-engineer it just a little bit (for example to find out which domains they connect to) and block those domains. Usually that's enough to block most of people from using it.
Getting Started with Styletron – Atomic CSS from JavaScript
Don't forget step 4, being make sure to jump on the next 'big thing' when it comes along so you can write a similar post about you leaving that sodden platform a few years later. Step 5 is usually presented as 'Rinse, Repeat'.

The best way to solve these problems is not jumping on those platforms in the first place. No matter what everyone and his dog may say it is always best to think for yourself what benefit - if any - that 'great new service' would have in reality and what price it carries for delivering that potential benefit. What things like Facebook potentially gave was a way to find long lost acquaintances with whom to share... well, what, really? Those people ended up being lost acquaintances in the first place because you did not share that much with them other than a temporary sojourn in a college hall or classroom. A few of them probably stuck around to become friends in real life, the rest faded into the background. Facebook dug them up for you so you could tell each other what food you had today or that you walked the dog again. Then one of them started posting photos of himself on some sunny beach, creating envy in all his contacts who hurried to post similar photos of themselves on even sunnier beaches. Rinse... Repeat...
Things one doesn't read very often: "ferret poop in a tube would stop a proton, too"
IRS to release new, more complex W-4 form this year
Welcome to Your Home on Mars
Using strongly-typed entity IDs to avoid primitive obsession (Part 1)
Philip Tetlock in his masterwork Superforecasting does a great job of showing “expert” forecasting is no better than reasonably informed “amateurs.” A must read.
confirm -- recent first-person account by an American living in Vietnam capital city .. tech dev ads explicitly ask for under-30
Ask HN: Idea for Short-Term Loan App
There are a couple of apps slowly coming onto the market for solving the "payday" loan issue of sub-prime candidates needing quick cash. They all approach the issue in a similar way by evaluating individual backgrounds and credit scores and taking the risk in loaning them cash from an account, then charging interest.

My idea is to have a platform where you can connect people who need a short term loan with folks willing to help crowdfund that loan. Users would post their story of why they need the loan and the total amount they need (similar to GoFundMe) and would crowd-source the funds with other users who empathize with their situation.
Each new user would have a limit, probably around $250, that they can ask for. We can incentivize lending money to other users and paying the funds back by increasing this total limit, thereby creating social credit on the platform. For example if a user pays back their original $250 loan the total amount they can ask for increases to $300. If a user lends another user $20, the total loan amount they can ask for in the future would go up to $270.

The transactions could possibly be done through Venmo and could charge a %5 transaction fee before lending total amount to the user. There will most likely be a lot of "bad actors" initially, so every account would require maybe a phone number upon sign-up. Overtime anyone who hasn't paid back their loan will be banned, and users will be able to rate other users to have better transparency on who is using the platform appropriately.

Other similar ideas I've seen trying to approach this issue are LendUp, Kiva, LendingClub, Earnin, GoFundMe etc.

I'm definitely interested in seeing how Earnin' plays out.
That source is from 2009. In 2009, there absolutely were more students interested in 4-year schools. In 2009 people were unemployed in nearly record numbers, and institutions of higher education were bursting at the seams.

This is now 2019.

Working on the cutting edge of higher education AND career/tech programs, the data isn't updated yet just because of the lag for completion rates, but students are HEAVILY moving toward skilled trades.

At my institution we have seen a 14% decrease in 'traditional' programs (think transfer to bachelors programs) and a 9% increase in skilled trades programs.

And a fun fact that those two numbers aren't the same. Fewer skilled trades require formal schooling than 'traditional' fields. Many students are not enrolling at all and are just finishing apprenticeships.

We're in a traditionally strong institution, and our enrollment is flat to 1% up at best. Many institutions in our local system are down in enrollment in the double digits in the last 3-5 years.
> it would be nice if Unbox Therapy and other like it would make mention of the Botnet threat in their product reviews

Do you expect Youtubers to have a top-class security team to reverse engineer firmware? This was discovered weeks/months later after the product was released.
I've run directly into this with regards to the National Electrical Code. As an engineer doing your own home wiring is dead simple, but does require reading the specific practices if you want your work to be "to code", which is a generally good idea for liability reasons and your own safety. Public.resource.org used to have the NEC up, but took it down I think out of prudence/capitulation rather than a hard legal judgment. It's of course still easily available through torrents.

The only sensible model is that in order for a state (or other AHJ) to incorporate a code into law, then it must license it for the purpose of doing so. States would then directly pay code bodies for writing the codes, and could weigh for themselves whether it really makes sense to pay for revisions every 3 years.

Of course the code bodies don't actually want to just do this. What they want to do is the classic rent seeking model of installing their hook into government "for free", and then extracting a toll on each individual user in the form of official code books, prep manuals, etc. But this is directly incompatible with the rule of law, as the case law has been casually demonstrating.

(PS if you want an example of how much sway trade guilds still hold over local governments, check out Ernst Meyer vs Town of Nantucket. It's not about code per se, but about the general right to work on one's own home)
Cloud Native Computing Foundation Adopts Kubernetes-Friendly Container Runtime
Ripcord – A desktop chat client for Discord and Slack
The Permian Basin Is Now the World's Top Oil Producer
Definitely not apocryphal:

"Ferrets: The World's Cutest Working Cable Guys | Superpets" - https://www.youtube.com/watch?v=KL4zI6rXjI4

https://www.cablexpress.com/blog/ferrets-the-best-kept-secre...

https://www.orlandosentinel.com/news/os-xpm-1999-10-03-99100... (warning: 90% ads)

https://www.telegraph.co.uk/news/newstopics/howaboutthat/754...

http://www.cypresskeep.com/Ferretfiles/Working.htm

http://news.bbc.co.uk/2/hi/uk_news/582123.stm
"If the inside is ugly, no one cares."

Yeah, so now your inexperienced developer just deployed something that takes 10 or 100x more resources than it should, and now you have a massive AWS or GCP bill to pay.

(Which brings up an interesting question, at what point does your cloud computing bill reach a point where it's worth it to pay the slight premium for a more senior engineer to come in and clean up the obvious inefficiencies?)

"The problem is that this is how management thinks all over the world because it is short-term profitable."

Not really, as so many early stage software companies are not interested in being profitable, short-term or otherwise. So cost management and profits are irrelevant, just resume padding for the next opportunity.
>you want proof that the backdoor is deliberate?

Seems like a very reasonable request.

The strictly local nature of this "backdoor" strongly suggests that it is not in fact a backdoor, if you're going to call it a backdoor maybe you should have the least bit of evidence to support that.
The idea that someone could copyright the law is completely antethetical to democracy. Good luck, you're on the right side!
I guess this is "Red Scare 2.0"? Is it? I'm not sure whether to worry about China or not, I feel like all my worry is driven by the political forces in the USA and Europe rather than facts. It seems so one-sided that "China is Evil" that I feel like I'm being duped. I love my Huawei watch, but I've stopped using it because of the fear of spying, even if I don't have facts to support the fear. I don't trust nearly any source to properly vet this information, how can I? Is this all a ploy to take down China as a growing world power to save the America-Europe hegemony? I feel like at this point, I don't see a ton of difference between the two, both torture people (America's war on "terror"), both are committing genocide (America's ICE separating families), both are spying like crazy on the other, etc.
Vugu: A Modern UI Library for Go+WebAssembly
I think one important alternative you missed was allowing people to create businesses easily.

Given the opportunity, many people find problems to solve and build businesses around that solution.

By simplifying the process of starting a business to "just do it" and simplifying the tax implications of hiring and firing people, I don't think we would see a need to "create" or "preserve" jobs.
Because deniability is valuable in international relations? If a government can't prove something they aren't forced to act.

If it was obvious the Chinese government did this, then other world governments would have to respond with sanctions and import bans.
Care to share the source? Thanks in advance.
Why would anyone want a LPE backdoor like this? You would need another backdoor to achieve RCE in an order to make use of your silly LPE backdoor.
Companies keep using the average user's technology ignorance against them.

So, then, do OSS things like vsCode, which are made for developers, go in the "Company plays to the users technological strengths" column"?
I am so glad somebody asked, 5 sec into the page and I had to Google what this Google is all about. It seems we have new meaning being fitted into the word Cloud and Serverless every 5 months and the page was written by marketing team.

This post [1] explains it a lot better. Quoted from the doc. ( Why they didn't include it in the page is beyond me )

"Cloud Run is a managed compute platform that enables you to run stateless containers that are invocable via HTTP requests. Cloud Run is serverless: it abstracts away all infrastructure management, so you can focus on what matters most — building great applications. It is built from Knative, letting you choose to run your containers either fully managed with Cloud Run, or in your Google Kubernetes Engine cluster with Cloud Run on GKE.".
So, like lambda but with containers. Pretty much what I have wanted since I first started learning about Docker.

[1] https://news.ycombinator.com/item?id=19611194
The invention of the atm paradoxically led to there being MORE branches, not less. There's a bunch of articles about it but basically ATMs reduced per branch labor costs, because a lot of the work was automated. Branches are like huge advertisements for the bank, and people want nearby branches. So we wound up with more branches and even more tellers.

Here's one of the articles about this.

https://www.recode.net/2017/5/8/15584268/eric-schmidt-alphab...
Didn't say that, nor implied it is not important.
Hey @stevoski can you recommend one of the very basic issues to look at for someone to ramp up on the codebase ? Thanks
> the US government spies on us and we don't care

I care.