skysight-inc/HackerNews huggingface dataset:
It's a way to fix one of the biggest security mistakes of the web (being able to send an _authenticated_ request - i.e. with cookies - to any domain from any other domain, for example from evil.com to youremailprovider.com with the payload "delete all emails"), that was kept on by default for two decades due to backward compatibility.

For a long time it required annoying workarounds (CSRF tokens) to have this security hole mitigated, then just an opt-in flag on the cookies, but as usual, most companies don't know/care about it, so having protection by default is the natural solution (although it _will_ probably break quite a few legacy websites, but for a greater good).
Binance has been hacked for 7k Bitcoin ($40m)
I don't particularly trust them though. instead of just audio, some cheap dongle maker gets full USB access to my phone
How come Uber is profitable in these areas and Lyft isn't? Market share?
Yes, this happens with complicated schemas with complicated queries. ORMs account for this. Almost every major ORM allows you to override those "bad" queries when needed with your own manual SQL calls. It's an old problem with an old solution that works in production.
> purpose of going public is to raise money

Markets are not a charity or piggy bank or donation box. You have to prove your worthiness. If you keep on posting losses then stock is going to get slammed.

Now, coming to reason for going public. The reason that you listed is not the only one. Early investors want an exit. For the same reason, Uber's founder was kicked out and Dara was brought in - so that company can prepare for an IPO.
Deep Learning in Go
Longevity is antithetical to every accepted way of doing business nowadays because it doesn't generate a continuous revenue stream. Good luck getting capital to start a business based on products with longevity.
Uber's administrative expenses are 15% of revenue versus almost 50% for Lyft. Is this a difference in what goes into that bucket between the companies? Or is Lyft emulating the American university experience?
Airlines I've flown publish and abide the door-closing time. (For Delta domestic flights, it's 15 minutes before scheduled departure, 30 for int'l. I think they put 20 minutes on domestic boarding passes as a buffer against watch skew arguments.)

I've seen the gate agents paying scrupulous attention to that, to ensure they don't close the gate early if any pax who have checked in haven't boarded.
Another reminder to never buy a "smart" device. At the end of the day they are pretty dumb.
The Nokia phones are part of the Android One program which means the are guaranteed software updates for two years and monthly security updates for three years which is the same as the Pixel phones.
> so much cleaner and complete than those "algorithmic and templating" ones of C++

That's C++ strings, too: https://docs.microsoft.com/en-us/cpp/atl-mfc-shared/referenc...

Not only they have better API (replace, tokenize, implicit cast to const pointers), these strings are often faster. That particular class is Windows-only, but nothing prevented C++ standard folks to come up with conceptually similar cross-platform stuff. BTW, that CString class predates C++ standard library by many years.

> And C++ can quickly become difficult to read after overloading various operators on classes or after using fancier less-known features.

Yes, and I saw quite a lot of code like that.

But in other cases these features help with readability. I often code math-heavy stuff in C++ processing vectors, matrices, quaternions, complex numbers, etc. The ability to implement custom math operators on these structures IMO helps with readability.

What doesn't help is the ability to abuse them, like C++ iostreams do with `operator <<` everywhere.

Not just operators, it's generally too easy to abuse features of the languages, writing code that's very hard to work with. Unfortunately, not doing that requires lots of experience with the language.

I'm not planning to switch due to the good parts. First-party SIMD intrinsics support. Trivial interop with C and C++ libraries: hard requirements like OS kernel APIs and GPU APIs, industry standards like libpng, or just very nice to have like Eigen. Very small runtime allows to build dynamic libraries, consume them from anywhere, and not worry about binary size or runtime dependencies. Also tools like debuggers and profilers are very good.

But when performance is less critical, I'm more productive using other, higher-level languages.
The barriers to physically get in may not be high, but Switzerland is very strict on those who try to stay. Switzerland recently rejected the citizenship applications of girls who refused to swim in a communal pool with the opposite sex, and suspended the citizenship application of a family whose boys refused to shake a female teacher's hand. Migrants wearing pajamas around town and refusing to greet neighbors had their otherwise satisfactory applications rejected and were quickly deported.

> To receive Swiss citizenship, it’s not enough to show long-term residency, fluency in one of the country’s three official languages and knowledge of its history and geography. Applicant must also show they are integrated with Swiss society and their local community.

https://qz.com/720908/switzerland-denied-citizenship-to-musl...
If you interpreted that statement as me specifically saying that commenter is a shill, you should probably take a rest from social media as well, and take a step back to realize the negative lens you are viewing things through.
https://coincircle.com/l/tofikwhY6J
Turbo buttons weren't only a 386 thing. They existed way before. Even some XT clones had them.
Responsibility itself is a heuristic with a goal. As autonomous systems take on more and more responsibility, tracing back a historical cause will be less and less relevant than actually fixing the fault in the system.

Take Boeing for example. Assigning blame to individuals, while rewarding, may not be as effective as changing the system that allows Boeing to continue to act the way it does. Boeing scapegoats, fires some people (which may include the CEO) but the organization, and the nation and legal system that sustains it continues largely unchanged.

You’re trying to patch by punishing humans individually, while ignoring faults in the system we have collectively created. Our instinct is to assign blame because historically and evolutionarily harm is usually done by individual humans, and punishing humans is a good heuristic. But it does not seem to me that punishment does a good job of creating good large scale organizations or systems.
How to Compare Dates in JavaScript
What's the point of creating an ecosystem if you won't support it? Typical Google. I understand shutting down or refocusing services that don't work. But decisions like this or to shut down Inbox make no sense to me. It feels like complete disregard of the user base.
Would you happen to be talking about TypeScript?
Unless you roll your own. But then we’re in the bad old days of home automation just for tinkerers...
I don't use screen protector and glass looks good so far after 4 months.
"I also think it's weird that everyone has to learn these (and other lesson) themselves in their 20s/30s/40s/whenever "

I have also wondered about this. And recently was surprised that my kid's school has a multi-year program in which things like this are covered. They call it PSHE (Personal, Social and Health Education). It includes age-approriate learnings about relationships, starting in early years with friends and family relationships, what they mean, differences, feelings, etc. It gets repeated each year and expands earlier learnings. Seems very good. I guess it's a UK thing as my kid's school is an international school following the British curriculum.
I generally agree with you but let’s play devils advocate, at what DOES political affiliation matter. If you know a candidate has ties to Al-Queda do you hire them, given that their work so far and resume indicate they would provide a 100X increase to your teams output? This would be an extreme example
Or they all spy on you, so they can sell your data . . .
Back in the day, we called this "networking". Back before Eternal September, so mainly via telephone. I used to spend hours at a time on the phone, seeking information. Basically cycles of cold calling people, getting referrals, and cold calling them.

I found jobs that way. Also preprints. And copies of EPA documents that were under review, or buried for political reasons. I tracked down authors, and got background.
Question: Should I start experimenting universal apps with .NET or Flutter and what if Google abandon the whole project in the next few years?
Uber issued bonds:
https://www.bloomberg.com/news/articles/2018-10-16/uber-is-s...

Rated by Moody's as B3 and by S&P as B-, which is the bottom of "Highly speculative":
https://en.wikipedia.org/wiki/Bond_credit_rating#Credit_rati...

For comparison, Uber bonds are one grade lower than Argentinian bonds: https://tradingeconomics.com/argentina/rating

Such credit ain't cheap, especially now that interest rates are no longer zero.
People who want cross platform tooling like a cross platform editor
I just wanted to say thanks for posting this thread again. I had previously favorited your comment from that thread, forgotten about it, and it was exactly what I needed where I’m at in my life right now.
> 2-7% tax is on the low side of such balance

A 7% tax on revenues is a 50% tax on a business with a 14% margin. It's even more damaging when one considers start-ups, who run negative profits in their early years. (Seven percent is thus eleven months of runway in the Czech Republic for every 12 months a German competitor gets.)

Seven percent is generally prohibitive to low-gross margin business, e.g. any tech company producing physical devices or doing anything next to retail. It thus compresses an economy's accessible tech sector to enterprise businesses.

If these taxes remain confined to ad-driven businesses, that's a fair tradeoff. But given Europe's penchant for over-encroachment, it could very easily be over-applied.

TL; DR Top-line taxes transfer wealth to high-margin businesses over low-margin businesses and from start-ups to incumbents.
Because systemd is not x86-64-only. The actual worst case is where there is no RDRAND, because then the systemd people have the chicken-and-egg situation of not being able to seed urandom without running a system service unit, and not being able to run a systemd service unit without being able to assign a random GUID to it as its instance ID.

The design problem is that every service unit has an instance ID, whether meaningful and useful to it or not, the journal and other things have a machine ID, and journal files have header IDs. This requires that re-seeding urandom be pushed right to the start of the entire user-mode boot process (which begins with systemd in the initramfs on some operating systems), that something else (such as RDRAND) be used until urandom is re-seeded, or that the boot process simply stop and block running the very first service unit until urandom is re-seeded by the kernel.
> Should I use this in real life? Dear god yes.
I still can't see any reason why Microsoft doesn't "do an Apple" and lay the Windows GUI over a Linux kernel, just like Apple laid their own Apple GUI over a BSD kernel.

By offloading half their work (at least) on to an outsourced kernel under the hood, more time and effort could be allocated to improve the customer experience with the Windows interface, leading to more consistency with the way people interact with Windows itself and its related Apps.
I really like Philips LED lights, but finding the right combination of a well designed power supply, thermal management, and high CRI is the elusive trifecta. It’s not surprising to give up one.
IFTTT sent out an email about an hour ago warning of the pending shutdown of their integration.
headline should be "that $300 doorbell is now a paperweight".

in the future it will be "that $8000 trunk car driving computer is now a paperweight".
Not mentioned here is that Apple iOS is a far, far more secure system. Google has built its business model on basically violating your security -- it even keeps track of where you've been.

Apple has a business model based on having you pay for your equipment initially but although not perfect, makes efforts to protect your security.

I can see a future where professionals who have to value their client's security may be sued for not choosing Apple.

Since most people keep their phones for 2 years or more, divide the cost by 24 to determine a monthly cost which typically is less than the cell phone service costs.
From Bombay with Love [Episode]
They care for their user base.

Their user base just isn't us people using their services.
Shameless plug:

If you're interested in the art market and factors which affect price/value, I work for Arthena (YC W17) and we're hiring for a variety of roles. If you're interested check out https://angel.co/arthena or reach out to me directly: adrian@arthena.com
I have Wemo smart plugs that I have plugged in all sorts of stuff like Heater, Lamps, and TV, etc connected to my Google Home and Home Mini. And I'd advise anyone to think twice before buying smart plugs or smart devices. There are so many bugs creating so many complications that I feel they are not worth using. You'd need to reconnect them with WEMO app time and again, restart these frequently if they just stop working and even you would not know what to do with them when a failed firmware upgrade will make your smart plug useless!
So if I wanted to play basketball professionally in the US then the NBA should be obligated to hire me because no other basketball platform has the reach they do?
Just out of curiosity when did we start policing words?
This is the price point I've been missing and I've go one ordered already. Sure Nokia has been pretty good in this range, even with updates I think, but Verizon is the better carrier option in my area, so they're a no go. I like the Motorola stuff in theory, but they've got that same 3rd party manufacturer updates problem. I've got a Moto G5 Plus, which is a fine phone, but it's likely stuck at Android 8.1 for the rest of its life, and even that update from 7 took a very long time(after 9 launched).
The way this is implemented in VS Code on the desktop may change your mind. See for example https://devblogs.microsoft.com/python/remote-python-developm...
Almost the exact same experience here... Though was a N5X not a N5 and the 9 lite was £120 but it's been a great phone for the money and gets updates with Pie coming in june/July. Bootloader is locked though so once updates stop it's recycle fodder and by then there might be a goog phone I like again.
The purpose of a U2F key is to break phishing. You want users to use them as much as possible (on computers), but you do not depend on them being the only second factor.

So you can buy and enroll 2 keys, or just do what Google forces you to do: enroll an additional second factor, like a code generator.

I do not understand your revocation argument at all. When you let a staffer go, you lock their account. You do not care about their keys.
Python Antigravity Module
The City of Chicago doing anything is not generally a good indication of that thing being a good idea.
There are plenty of articles and literature (including here on HN) to support the hypothesis that "gig economy" jobs subvert worker protections.
> Not everyone is lucky enough to have a reliable, fast, low latency link to his IMAP server.

This is a protocol from the 80's, I'm sure it doesn't require anything we'd consider a fast connection today, latency may have changed though, mail servers used to be geographically closer.

> Adding support for higher level operations to the protocol can be worth the complexity if it removes network roundtrips.

It also benefits SaaS providers by having the complexity on their end and potentially limits apps. In my example of "collapseThreads" why does this need to be an option at all instead of something like "parentId" and leaving it up to the client?

More features also means more ways to abuse them, imagine google saying "yes we support JMAP in gmail" then ignoring certain features.
They don't care about their user base, they care about branding and profits. If this sells more units then they will go with that.
Dart for the web may not be popular, but it's actively maintained [1] and being used by AdWords.

There was some Dart web framework churn before they settled on AngularDart.

[1] https://github.com/dart-lang/angular/commits/master
that is an absurd valuation ... you're telling me a pre-revenue company is worth comparable amount to Lyft or United Airlines.
That's hard to say. Many companies where this happens won't admit it (certainly their HR departments won't). So hard numbers are hard to come by.

As best as I can tell, however, the general consensus among women seems to be: A lot more than most men think.
It even renders equations and graphs not as pixelated bitmaps! I should do this more often to avoid squinting while WolframAlpha-ing.
>By step 4 we have taken 26 microseconds and we have the kind of entropy I would be comfortable generating an RSA private key with.

And yet Truecrypt made me wiggle the mouse around for like 30 seconds?
That would be a very large piece of paper!
The sad thing is it's not rocket science.

It's just terrible, barely working, shoehorned in buggy drivers, "shipped as soon as it can appear functional" code.

You could take a microcontroller, write something simple, and have something that worked to a few 9s.

Instead, IoT vendors spend their time optimizing their data collection and monetization platforms.

"You had one job..." would be a good epitaph for the entire industry.
No, you just purport "lady" to be old-fashioned because it furthers a political point.

Keep your paws off my shared language. I want to be able to refer to people without googling for the polite terminology du jour, since even "woman" is offensive in some circles.
The new Windows subsystem for Linux architecture: a deep dive [video]
Y Combinator Partner, Paul Buchheit: Surprising Lesson from 200 Startups (2017)
Depends on what you mean by "very low consumption". For one project I used a SparkFun SAMD21 Mini Breakout[0], and with the RTCZero[1] library was pretty easily able to get it down to 0.3mA when sleeping and averaging 1.3mA overall. (OK, I had to desolder the power LED which was eating 3mA.) I've since switched over to using Adafruit Feather M0 boards for most stuff, which is basically the same thing.

[0] https://www.sparkfun.com/products/13664
[1] https://www.arduino.cc/en/Reference/RTC

edit: Oh sorry I missed the "with wifi" in your post. One nice thing about the ESP8266 is that lots of people use it -- hopefully that means you can find details on how to run it in low power modes.
Centralized content served through an API in a generic format, like JSON
I hated that there was no real replacement. I'm on a honor 9 lite as a transition phone and it's been a worthy if flawed stand-in while I wait for the true N5X successor. (I'm not convinced the P3a is it though)
At some point there has to be a value in marketing for keeping people happy, right? At least mothball upgrades and leave this running "slowly" or _anything_ other than just shut everything down for reasons...

My daughter wrote a letter to a clothing manufacturer about how the embroidered lettering was falling apart on a brand name shirt. They sent her a new one, for free.

That is good marketing. What Google is doing? Slowly turning their brand into the "don't trust us with anything long term" brand.
It’s even worse - GM is not the same company that it was 10 years ago (and many people lost money buying the stock because they didn’t know that!) !!

https://www.thestreet.com/story/10544259/1/not-your-fathers-...
Calling Geeks of All Ages: New Interactive Tech of A2 Hands on Museum
For those who are not terribly in 'the know' about onion services, I can think of a few reasons why the CIA would benefit from operating a public onion site:

* Onions are more secure as they do not rely on x509/certificate authorities and DNS

* Visitor privacy

* Ability to research the traffic going to their site. They could probably learn patterns from it.

Also, in recent years onions have become also appropriate for "clearnet" sites. There is a config option for Tor to disable server-side privacy, keeping the visitors anonymous but speeding up the connection by reducing the server's hops.
Air pollution from every power plant in the world, tracked
Calling Bullshit – Data Reasoning in a Digital World
The tax is on revenue, so the thinner your margins, the more extreme the tax. Another reply here says that a 7% revenue tax is a 50% tax on a 14% margin transaction, but it's even worse than that, since the tax is on the whole revenue, including your margins.
The alleged value stems from its IP, right? They’re at 1500 engineers or so.
Yeah, I actually thought it was meant literally...
Japan kicks off Reiwa Era's first energy-saving Cool Biz casual wear campaign
For now, Unreal. Flutter at this stage doesn't have support for 3D via OpenGL ES or similar. Heavily focused on 2D only.
I think it's because that AdSense revenue is so sweet and so easy that nothing else is as interesting to the organization. Pretty difficult benchmark for competing products to show their value. It's like an oil rich nation investing in unrelated industries for which they have no history or pedigree in order to build a sustainable future.
Your logic is circular. You've already admitted that the current state is propped up and temporary and we need to ride this out and yet it's proof that Trump's policy is sound? You can't have it both ways.
I can’t really speak to the difference between ESPs and nRFs - I haven’t played with ESP mesh networking enough to compare them. The nRFs just get used because I already have libraries that I use and enough chips on hand. (I would imagine the ESP at this point is superior in every regard? It just has such an ecosystem around it.)

For powering projects, it depends - most projects I do can be plugged into a laptop or into the wall - I have a programmable light array that is the main project I do with the kids. For other portable projects, I might use 18650s, might use coin cells, might just use AAs. This is a big topic and I’ve been meaning to write this up in detail.

Thanks for the questions! Sorry it took me until now to respond.
Yes, but it’s more or less in line with current single page apps. In fact, quite possibly a bit smaller.
Lyft has 2000 people in their tech org (maybe 1500 engineers)

and the lowest paid engineers at Lyft are probably ~300 total comp.
What's so impressive?

Kotlin compiles to about three times as many different targets already.
Hey, at least they are going to roll "Nest" accounts into "Google" accounts so hopefully the app can stop asking me to set up sms based 2fa everytime I try to change the temp.

All that employee stock from the acquisition must be finished vesting.
Hackers Steal $40.7M in Bitcoin from Crypto Exchange Binance
That they could do it again is clear evidence that they never complied.

Separately a 4x, a 20 billion dollar, fine still wouldn't cripple them.

Also I'm actually strongly for fining Zuckerberg personally 10mm for his personal traffic violations because the point of fines is punishment and deterrence and thus should be scaled to the individual.
They've also relegated it to a sideshow on only one of their models, rather than incorporating it into the core of their business.

I wonder if they're underestimating its importance or if there might be internal fighting within GM.

This is another advantage Tesla has being all in towards the goal.