skysight-inc/HackerNews huggingface dataset:
If the financial penalty was high enough they would increase budgets. There is no accountability for losing customers personal information. If you can make a strong business case behind the average risk a company takes on it would help this discussion more. For each example of "company X had a major financial impact" you need to average it out against "company Y lost hundreds of millions of SSNs and had zero penalty".
Here's a blog post from WhatsApp in 2012 on why they don't sell ads:

https://web.archive.org/web/20120619170843/http://blog.whats...
Good. In the future everyone should be a contractor anyway.
Couldn't boredom be a reason for people chasing power?

Blaise Pascal had interesting thoughts on it:
"All of humanity's problems stem from man's inability to sit quietly in a room alone.”
― Blaise Pascal, Pensées (https://amzn.to/2I6kTpv)

We have an inherent desire to engage with the world and other people, to reach out for new stimuli. Often the most interesting path is the one where you influence people and that is by nature a form of power.

Reminds me of the video that was recently posted: https://www.youtube.com/watch?v=bcBzOesw7sc This is truly a man without ambition. For me, that way of living seems like the definition of hell.
Thank you, sounds reasonable!
200m is incredibly short. I'd say the average in Bangalore is around 700metres. It varies from 500m in dense parts of the city to 1.5km in the not so dense parts.
> Most of the time it's the test itself that is flaky

I have always understood that unit tests must inherently be deterministic for the reason you explain.

A small test that is not deterministic is testing something other than "the unit" since there is another independent variable unaccounted for, often the state of the database or the configuration of a test environment.

Not that unit tests are perfect. Unit testing a concurrent data structure without threads (which are inherently nondeterministic) is not especially useful.
I haven't got the precise details yet - I've analysed about 20 bus routes so far and they have an average distance between stops of 128.4m. But till I scale up the analysis to all bus routes, I cannot say for certain that it is the London average.
In the source code, he is attempting to serve images from http://localhost:4000/

It looks like a mistake because the image URLs are unlikely to exist on YOUR localhost at port 4000 when you load the page.
ARM/Keil is saying it's the full version
https://www2.keil.com/stmicroelectronics-stm32
Some of these STM32F0/L0/G0 devices have more flash memory than the code size limit of the free versions of MDK, but not by much.
It’s because there are some employees in the company agitating about it. As other commenters have noted, articles about Google get a lot of play from the public. Disgruntled insiders seem to have a strong conduit to the media and this is the latest controversy de jour that these activists have groused about. The reporters happily lap it up, and another knock at Google makes it to the front page of this site.
You only drop the package, when the narcs show up.
I dunno, I sort of accept that I am depressed, but I also definitely don't see it as a health issue. I've always been like this and for me, it's just part of my personality. It's not very severe, it does not preclude me from functioning in the society. Could I be happier on some drugs? Perhaps, but I don't like experimenting on my body. Btw I know a guy who's like me but a bit more severe, still functioning (no wive/kids, a bit of a shut-in, with a good remote job) and he's not taking meds either. I guess it's about accepting who you really are.
198X (Trailer)
You are targeting dentists here, but patients are the ones buying the insurance. Even patients often don't have a choice - think employee benefits and medicaid/medicare.

Even if dentists do enroll in this, what happens when a patient decides to change dentist?
Transport for London has the open tfl API - I'm gathering data from there
Also, national or regional data might be more complete.

If you can speak enough German to navigate the download, you can e.g. find geodata of all bus stops in Zurich at https://maps.zh.ch/?topic=ZVVZH&amp;showtab=ogddownload (they will only deliver to email addresses, so I cannot link the actual data here).
thanks for the link - very interesting!
My credentials are still in the constructor, but are accessed through environment variables set in the CloudFormation file, like this:

const client = new DocumentClient({
region: process.env.REGION,
accessKeyId: process.env.ACCESS_KEY_ID,
secretAccessKey: process.env.SECRET_ACCESS_KEY
});

Is this still a bad practice?
Yes, that the standard wasn't designed with the people actually implementing browsers and as a result was unusable for content in the real world whatever advantages it had in the theoretical world where it was widely and correctly implemented was a major problem.

Hence the “ivory tower” comment upthread.
It doesn't seem to be a strong argument to have non-deterministic tests.

There was the logic that generates the SSL key pair, and there is the faulty logic that consumes it. Based on the description, it seems it's an indication of missing test coverage around the faulty code. If, when the faulty code was written, more time were spent on understanding the assumptions the code has made, then maybe the test wouldn't appear in the first place.

This anecdote, however, does bring up a good point: Don't shrug off intermittently failed tests - Dig in and understand the root cause of it.
I gave it a try, I didn't see any difference.
Well I didn't last year - but SV maybe more ageist and I am lucky to look younger than my real age.
What good is a standard you can't use in practice? There also were other issues: XHTML was chasing the dream of the semantic, well-formed, machine-readable web, but it didn't do enough to help with pragmatic problems web designers trying to deliver a product actually faced. As much as I like the idea myself from a theoretical perspective, the market had other priorities.
I would also add that having third-parties propose specifications to standardization bodies is a widely established practice. In fact, standards are supposes to reflect industry practices and are a way to establish common ground.
It's obviously density related, even in London.
Twelve months and 50M euros of GDPR fines
If you run an intelligence operation, why would you

a) not do it in the fedex hub in Japan and
b) publish the parcel diversion in the customer's tracking interface

So, this doesn't seem like a plausible explanation.
> "The Google team explored three experimental set-ups that have been proposed to generate cold fusion — two involving palladium and hydrogen, and one involving metallic powders and hydrogen. None found evidence of fusion. The results have been published across 12 papers over the past 2 years: 9 in peer-reviewed journals and 3 on the arXiv preprint server."

It seems obvious to me that you can't achieve fusion using a catalyst. Catalysts are great if you're doing chemistry, but nuclear fusion is a lot different. You've got to force two positively charged nuclei to merge and I just don't see how a catalyst could accomplish that. That it didn't work for them seems to vindicate my casual dismissal, but I'm left wondering why they thought it worth trying in the first place. What were they thinking of that I haven't?

> "Trevithick recruited 30 researchers who had no strong opinions on cold fusion."

Surely 'having an open mind' about cold fusion is itself a "strong opinion" about cold fusion.
I would rather pay than see ads and fall prey to all the targeting and data mining. Take my money Facebook, please.
Products exist in human reality not some science paper. There are no absolute truths, everything dead-ends eventually. It’s like trying to prove that one set of genes is better than another for future survival - an impossible task.
Coming from a much more graphical background, Links always seemed easier for me than Lynx.

Not sure if Links is the same as ELinks.
Taxes aren't aggression
I can understand from a business perspective why FB would not want to bother sending their top 2 folks, and the doors it would open up and how they can just get away with it to deal with more "important" things. This is discussed in many comments.

From a personal perspective, and as a Canadian, I know the shit FB is pulling and the damages it is creating and can create and I feel powerless to stop it or make a difference. The best I could really hope to achieve as just some person is to petition my government to do something about it, and it would probably at best lead to something like a meeting with the most accountable people. I'm lucky in that they are already trying to do this, in conjunction with 9 other countries, so hooray!

Do I know that this may be useless or go nowhere, yes, could I really hope to get much more than this on my own, no. So it feels to me like this is our first step to making a difference or at least trying, and they still have the audacity to say "nah dawg, talk to these nobodies instead, but we are totally committed". As a person I'm really pissed and insulted. It says my best efforts real or imagined, are pointless and useless. It says I don't give a fuck about you or anyone in your Country/ies. It says you can work as hard as you want to rally people, 450M angry I's who just want answers and to see someone held accountable and at least show up to defend their actions, and you still don't care and will just deny them. It says nobody matters but us, get used to it you pleebs. It says that even when your COUNTRY is trying to stand up for you, even with all their power and clout can't get you to show up for a fucking meeting next door with 10 other countries, it says WOW, who do these people think they are, how dare you defy my highest body's request? How do you think I am going to feel about you after that?

If there was an oil spill or something like that, you'd see the CEO talking about it in front of the government on every news station, it's the job of the most accountable person to own up or at least show up and lie through their teeth or avoid questions like the plague, but they aren't even willing. I hope they get in deep shit and we take much harsher measures faster because of their non-cooperation.

Maybe that seems like a bit of a rant and it's more about feelings, but they are still valid and probably represent how a lot of people also feel. A lot of us have businesses, and we can see from both lenses, but we still have no power compared to them and we still have to live with them, and while we don't want to say things that could turn around and fuck us over if we ever get in that situation, but I guess shame on you if you do, so it doesn't really matter anyway.

* apologies to the "nobodies", you aren't nobody, but you aren't who we want.
The example was an entry level recruiter no offence but HR is not exactly technical.
Not a fan of DSL's? I err on the other side of that coin and tend to produce them even when it may be overkill.
https://en.wikipedia.org/wiki/General_Transit_Feed_Specifica... is the most used file format. Public transport companies used to submit their information to Google Maps and similar (the 'G' used to stand for 'Google'). You can find those searching for 'GTFS <name of city>' in various open data portals.

Alternatively OpenStreetMap is a huge global dataset. Buses are a small part of https://wiki.openstreetmap.org/wiki/Public_transport It's easy to extract bus stops https://wiki.openstreetmap.org/wiki/Overpass_API (https://overpass-turbo.eu/) but you're probably interested in routes as well. It's a rabbit hole of complexity, e.g. a bus terminal is multiple bus stops, some buses skip stops based on time of day, weekday, season (school buses), some stops are just for drivers to take a break or refuel, direction of route matters.

The transport view on https://www.openstreetmap.org/#map=16/21.3308/-157.8868&laye... is a pretty nice visualization. For specific questions on OSM tools there is https://help.openstreetmap.org/ and a mailing list https://lists.openstreetmap.org/listinfo/talk-transit
You're looking at it from a zero-sum perspective when in actuality the ever steady march of science and technology means our situation is anything but zero-sum.

It never hurts to be cautious, but total pessimism isn't warranted either.
If I complain to Mozilla that they deviate from the W3C spec in some respect, will they treat that as a bug, or will they more likely say "no-one implements this, so no website uses this, so we have no reason to be the first to implement this because we don't think this is part of the spec is really important"?
Signs You Need Professional Cleaning Service for Your Home
Here is an interesting article about this subject, suggesting a 400m-rule for walking distance to the next stop: https://humantransit.org/2010/11/san-francisco-a-rational-st...

The city of Zurich, Switzerland recommends a tram stop every 300m-600m: https://www.stadt-zuerich.ch/content/dam/stzh/vbz/Deutsch/Ue... (page 19)
>I have no idea about cancer, but can't imagine it increases the odds

Ironically, anything that makes you live longer increases your cancer risk.
Made the mistake of doing hardware. Support issues convinced me to fold early on. Stick to software, all it costs is time to fix.
>(Note that I'm not saying natural cycles ARE responsible for the bulk of observed warming - just that this research doesn't seem to prove they're NOT.)

Well it can't, can it? All it can do is provide evidence one way or another. Now if you think that there is a problem in the model they are using, could you point to it and explain the specific issue? I assume that it is somewhat updated since 9/11 and I also suspect that aerosol effects of airliner exhausts will have been known about to the subject of atmospheric physics, 9/11 will have just given some solid numbers. Which are now presumably in the models.
Up and Running with Gatsby #1: What Is Gatsby? [video]
Best UI Design tools worth switching to in 2019
Just because we're in a position to say no doesn't mean that we shouldn't feel compassion for the others that are not in an opportunity to do so. A tech office without a janitor will be dysfunctional, same as the one without a senior engineer. But unlike a senior engineering position, a janitor will not be a full-time position.

I'd personally even take it one step further: those who are payed the least need benefits the most. By relegating this work to temporary workers you're doing exactly the opposite: cutting away the privileges that the full-time employees have. Not to just one employee, but anyone who's ever going to fill out that position.

A trip to the doctor would not make a dent in a senior engineer's pocket (regardless of the insurance), but a janitor could not afford a trip to the doctor in the first place. This could work in a country with good social programs to fall back on, but it has catastrophic consequences in the US.
With so much animation on the page, I’ve been unable to focus on the content. And I tried.
One extra underappreciated benefit: you can tell the people saying you have a moral deficiency to shut up.

(Sometimes not directly in this antagonistic way; just telling you have a particular diagnosed condition can make the annoying people in your life suddenly very compassionate.)
Humans can adapt to sleeping soundly next to a literal pile of garbage and feces (homeless drug addicts that I’ve seen in some third-world cities) but that doesn’t mean they “feel comfortable.”
WhatsApp is my primary messaging app, time to switch over to something else. It can go fuck itself sideways if FB starts adding ads.

Some years ago there was the option of paying, which was removed around 2016. I understand that not everybody cares about this, but PLEASE give me the option not to see ads. There's enough bullshit advertising in my life already

[] https://www.theguardian.com/technology/2016/jan/18/whatsapp-...
Building a Zero Trust Network (and Where Osquery Fits) – Gitlab’s Roadmap
Discussed yesterday: https://news.ycombinator.com/item?id=20025060
Show HN: PostgresClientKit, a Postgres driver for Swift (does not require libpq)
So you were on the production of the first avengers movie?

Something like the kinect can be very powerful for facial tracking. But monocular optical techniques tend to give poor body capture results.
For a professional web developer, setting up an Nginx reverse proxy for a few apps should be reasonably efficient. Chances are that most are all of them are written in the same language and configuration can be copy/pasted between them. Or a subdomain pattern can be mapped into a directory pattern, so there is really only one configuration-- Just add a new directory and a matching subdomain starts working, assuming the right wildcard DNS entry is pointed to your localhost.
I'm interested in this because I don't fully understand the consequences here. I'd like to gain a deeper understanding through some concrete examples.

With the PHP CLI, I can run:

php -S localhost:8000

With Python3, I can run:

python -m http.server 8000 --bind localhost

The demo fails for me in both cases, even though a request to localhost:8000 is sent. (EDIT: The server log in the terminal window does show that the request arrived at the local server).

My question is: What is the risk of running one of these servers and then visiting some random web page?
Yet one of the most profitable drug launches ever was a cure for hepatitis C.
When I lived in Japan as a kid my two favorite foods were miso soup and that curry. It came in a box with gold writing and I think it was called S&B Golden Curry. It was amazing.
I was incredibly skeptical about acupuncture until my mother had it for sciatica. It was a last-ditch attempt after various drug-based treatments and it worked. More recently I had acupuncture to treat (weightlifting-related) shoulder pain. The results are pretty miraculous when it's applied properly and I recommend that everyone with any kind of muscular pain at least investigates it as a possible treatment.
I've wondered if they plan to drop support for 4" screens in iOS 13 or 14 on account of the iPhone SE being discontinued now. With a new product launch in this form factor maybe that pushes it out a bit.

A10 is from the iPhone 7, previous iPod Touch was an A8 from the iPhone 6. So the other thing hanging over the iPhone SE is the A9 processor from the iPhone 6s. We'll see how long that part stays supported.
There was one weird bug reported to me in an microcontroller based project I was recently working on which shut off half the LCD screen. I wrote a test which blasted the LCD screen with random characters and commands and did not see the same error for awhile... but it finally happened during a test! I was able to then see that when I was checking the LCD state between commands I only would toggle the chip select for the first half of the LCD (there were 2 driver chips built into the screen and you had to read each chip individually). There would be no way I could have recreated the bug without automated tests.

I have had to deal with non-deterministic tests with my embedded systems and robotic test suites and have found a few solutions to deal with them:

- Do a full power reset between tests if possible, or do it between test suites when you can combine tests together in suites that don't require a complete clean slate

- Reset all settings and parameters between tests. A lot of embedded systems have settings saved in Flash or EEPROM which can affect all sorts of behaviors, so make sure it always starts at the default setting.

- Have test commands for all system inputs and initialize all inputs to known values.

- Have test modes for all system outputs such as motors. If there is a motor which has a speed encoder you can make the test mode for the speed encoder input to match the commanded motor value, or also be able to trigger error inputs such as a stalled motor.

- Use a user input/dialog option to have user feedback as part of the test (for things like the LCD bug).

Robot Framework is a great tool which can do all these things with a custom Python library! I think testing embedded systems is generally much harder so people rarely do it, but I think it is a great tool which can oftentimes uncover these flaky errors.
DefleMask: A music Tracker for Megadrive, NES, Gameboy and Many More
I don't see why every claim about a Chinese company must come with a "but X company is just as bad" comparison. Consumers need to be informed about risks to their privacy. Moralizing about who is the worst offender transforms the discussion away from privacy education.
They talk about one example from 121000 contractors - are you sure they don't include blue collar jobs?
London also has bus route 389 - the entire route is I think 1.5 miles, with something like a dozen stops
Can you please help improve my product
Yeah, well, there's a reason the founders didn't get along with Zuckerberg et al. and bailed out after the takeover...
Real government action harms the greatest consumers of resources most, those people have the resources to buy politicians.

It ain't going to happen easily when the rich-and-powerful's self interests are served by maintaining a foil, a semblance, of environmental concern.

Great, you're recycling the plastic food trays your meat is shipped half-way around the World in. Now, ditch the car and use public transport; change your company marketing processes to prefer economy to profit ... oh that's right, you're too important to have to do those sorts of things.
Schneier is (as usual) right. It is far too easy (in fact, the default) to store every little detail about customers interacting with services you control. Only some of this data can be justified for business or technical reasons. The rest is dead weight and an actual liability.

A simple example relevant to readers here: every web server I know of logs information about each request and retains those logs for a long period of time (because, who cares? Disk space is cheap).

But those logs contain IP addresses and possibly other identifying information. Web servers get broken into all the time - if those logs get leaked people can use those logs to build profiles of your visitors and possibly correlate with other data sets to tease out information about specific visitors. On my website it would be easy to spot the admin IP address for further attacks.

Paranoid? Perhaps. During WWII the slogan was "Loose Lips Sink Ships" - any slip of information could be the final piece of data that gives the enemy a fatal advantage. We are effectively at war with criminals and actual foreign states (not to mention corporate interests) who are continually looking for similar advantages. Even random script kiddies want your data.

One of the things I like about the GDPR is that it force companies (and individuals) to recognize the danger and act accordingly.

A longer essay I wrote along the same lines[0]

[0] https://sheep.horse/2018/6/the_eu_general_data_protection_re...
Baidu has open-sourced their blockchain system: Xuperchain
> For example, we told campaigns it was best to have a password manager, okay to have a written list of random passwords, dangerous to have a password pattern you would modify across sites, and unacceptable to re-use a single password across sites.

As someone who likes the "password pattern" approach (remember one thing and use it to generate passwords for all sites), what's the threat model here? How is it dangerous?
I’d argue that the health of the sailors, who were in a sense the lowest of the low was not a concern for a long time. Ships were disgusting — you could smell a military ship coming.

As early as Vasco de Gama people were aware of the power of citrus to stop scurvy — they may not have known why, but they were aware.

With the British, there was an ROI to consider as the supply of sailors were tight, and they had attrition due to things like malaria as well.