skysight-inc/HackerNews huggingface dataset:
> How many drones do you think DJI would sell if it became known that flight logs and aerial photos were being uploaded to the Chinese government

Roughly about as many as today. A recreational or content production drone is sitting dead without a battery >>95% of the time. This is a much weaker threat model (both objectively and in the perception of consumers) than all those connected, always-on microphones and cameras installed in homes, offices and pockets.

I mention this as a precedent: to many people out there, "the Chinese government" isn't a lot more foreign than "some American tech empire" and data-derived unpleasantries are far more likely to have practical implications for them with US immigration than with the Chinese communist party (because the US is still more open). And yet those people still buy westcoast-designed (and connected) devices like hotcakes.
Yes, but there are different likelihoods involved.

The SDK mentioned upthread isn't a random animation framework, it's a library for sending user data. Today it sends just crash reports, but it's a small step for them to send more.

> when it comes to clients, they don't pay me to spend time reinventing the wheel, nor to setup some infrastructure that will also later have to be maintained. Heck, it's often hard enough to convince them to let me add tests

Do they pay you for including random unchecked dependencies and potentially turning them into malware vendors or exposing them to legal liability? Think of event-stream fiasco in the JS land.

As a user, if you ask me if you could send crash reports, I might say yes. If you don't ask or at least inform me up-front, and I learn that you send the data, I'll uninstall your app, period. Might even throw in a bad review just to make a point.
I mean, laws that regulate data privacy for companies like this could probably help too. I dont think its reasonable to allow storing data from scanned legal ids without explicit, written consent from the ID holder to start.
Is there a reason why you decided to go back?

I am on a similar path (dropped out and landed SWE @ big bank) and still relatively early in my career (just turned 21).
I'm not a fan of Angular, but how many times are we going to have this conversation. At this point, this is a completely off-topic comment that has no place in this thread. I'm getting javascript fatigue fatigue.

> With some exceptions, there is really no benefit

This is just a contradictory sentence of hyperbole. Who cares if there are plenty of use-cases to not write a SPA. There are also plenty of use-cases for it, and many benefits.

Angular is a popular library and therefore this is newsworthy and we should respect it as such instead of devolving into a played-out asymptotic argument.
Hosting it for $5/month on a Linode VPS using mailinabox.email
Yes you're quite correct. I was in this case talking to more of a detective style person, not a regular in uniform police officer. They were taking notes while I was talking which was okay. However if anything went to court, or for it to go to court I would have had to had a video statement.

Me being in the police officers messy office just having a conversation about an incident is much different from giving them a video statement. I am referring to a case where the only evidence against myself would be what I say. As such there is not much to go on if it's just some notes the officer took while informally talking with me in their office. They have no one else with them to back up what was said or anything to prove what I said is accurate/true.

Since nothing was recorded not much could be done.
Morality is a form of social technology
This has really been the great thing about Angular. Our team has grown from 2 to 10 and our projects have greatly expanded. We have them all in a frontend/node layer monorepo where all our front end projects feel the same. Their organized in very similar ways, the 3rd party libraries are all on the same version and are used across the apps.

I routinely have to hop between all the apps and I don't have to think about which libraries someone has used for each part, if Angular has a version of something we need we just that. One of our bigger apps hasn't made the switch to ngrx, but that's about the only difference between the feel of them all.
It's because Lenovo don't dominate their market as much as DJI dominate the drone market or Huawei the telecom.
Drug Makers' Opioid Liability Tied to Untested Legal Nuisance Theory
As a parent of 16 year old kids, I really don't want them to start out with debt...at the same time, am I willing to bet their future on not going to College? It's kind of a leap of faith.
I have almost completely moved my email from Google to ProtonMail. Now this. It makes me sad. I'm using ProtonVPN as well.

So, what are the alternatives?
You can pay with Bitcoin or cash apparently, though the latter will require contacting the ProtonMail team & arranging terms.
https://protonmail.com/support/knowledge-base/payment/
@ddragon your points are well taken. I will look further into Julia. I still think when I wrote "out of the box" with APL in mind as far as expressing math, or J for that matter if you learn the ASCII symbols. I've seen other examples since your post on Julia that show similar math expressiveness, but they seem to rely on libraries or the syntactic sugar provided by the libraries. I haven't tried your example, but it looks like vanilla Julia. My familiarity with Matlab makes Julia an easy choice for me too.

Here is a simple example in J:

+/ % #

The above is an average function in J. It is a fork, where you fold right over the input (+/), and divde (%) by the tally (#) or count of items, so that

(+/ % #) 4.5 3 2 12

produces 5.375 as the average of the input vector. Notice the array-based language deals with singular quantities or scalars, vectors, and multi-dimensional arrays as fundamentals of the PL.

You could also define it as:

average =: +/ % #

for those who make the readability argument, however, you learn math symbols and read math papers full of them, and not lengthy verbal descriptions of these math formulas (average is equal to the "sum all of the input elements, and divde by the count or tally of input items").

The fact that a highly-functional APL program can fit on one screen negates the argument that you need readability, so that when you pick up or someone else picks up, your 110K lines of JavaScript code they can make a change. You may have to do a refresh read in APL and J, but because it is terse, you can deal it pretty quickly. Well-commented code in the 100k to 1 million lines of code scale will never allow one person to see the whole picture.

The work by Aaron Hsu in APL is amazing. Here is a link to the slides from a talk he gave. It's a bit lengthy but I found it very interesting and appropriate to this topic:

https://sway.office.com/b1pRwmzuGjqB30On

The YouTube link to the talk is here:

https://www.youtube.com/watch?v=9xCJ3BCIudI
ProtonMail Voluntarily Offers Assistance for Real-Time Surveillance
I think the article implies you're a programmer implementing search, not that you're taking an off-the-shelf system and just plugging it in.

Just like "falsehoods programmers believe about websites" wouldn't make sense if you were using Wix...
I was responding to TallShortGuy's snarky assertion that the US conducts espionage on itself. Of course it does, everyone knows it does, and almost every other country does the same.
The fact that the US spies on itself does not mean that there is not a greater threat of espionage from China or that the US should ignore the possibility.

I was also asserting that I personally do not believe that a government should conduct espionage on it's own people and that society needs to push back against such actions. Even in cases where another country is highly adversarial to you, the milder home country might be much worse because of their proximity and involvement in your day to day life.
> "Just because someone doesn't live in one of the five approved liberal cities doesn't mean they're automatically a bigoted jerk."

And just because somebody does live in a liberal city doesn't mean they don't have legitimate reasons to desire privacy.
This. My daughter will be going to college in a year, and it'll cost about $8k annually. She'll live at home, drive a 15 year old hand me down car, and have to miss out on all the social stuff that non-commuters enjoy. But hopefully she'll graduate with 0 debt. My wife wants her to spend the first year on campus, and I always counter with "Is that experience worth $12K in debt?"
Agreed. Yet even if you don’t reach Gitlab scale, languages like Go and Elixir can help you deliver the same service at 10-20% the cost.

By being able to run your service on a single server instead of ten allows your team to focus on features instead of scaling your application using background concurrency, caching, or “micro-services”.

Imagine what you could do when you don’t need to manage a fleet of web-servers.
They’ll just raise the bar to “well, no enforcement personnel went to jail, so we’re in the clear”
Yes, I understand. I just find it odd that nobody has done it yet, particularly as the non-web infrastructure and business logic already exists.
Clicked on the post and read the first "reason":

- Clickbait headings ...

Acknowledged the hypocrisy and closed the tab.
Well, that comment is actually about BBC, not The Guardian. And they don't mention disproportionate airtime, but that it gives them airtime at all.
I don't comprehend this duplicates thing. If your face and body doesn't match the photo and appearance description on the license, then the bouncer should reject you at that point. Using the machine suggests all they are doing is running the scan, pulling your data, and giving a green or red light to enter. So you can be a 16 yr old boy and come in with the id of his 89 yr old great-grandmother and the machine gives a green light because the id isn't fake. Unless the bouncer is looking at the photo. And now you don't need to scan and store for duplicates because the bouncer will catch that you're not the person on the id. Databases, hand stamping, and other methods are all much more complex and less effective and sensible than the bouncer simply checking the id.
This is absolutely untrue.

There are things that can be done to enhance the defaults that docker currently provides (b/c defaults are hard to change when you have millions of users), but a process running in a default docker container is absolutely more secure than a process running outside of a container.
I'd love to know how many of those 40k rejections revise and get approved.

Even if we say, 80% of those are scammy ad/malware crap, that leaves 16k. (I'm using totally guessed numbers, so I'll say that while Sturgeon's law says 90% will be crap I'm deliberately including the crap that isn't scammy)

If most of those get revised and improved, cool. If not...that's a lot of frustrated potential developers.
https://www.nytimes.com/roomfordebate/2016/01/06/do-non-musl...
Outschooling
You paying the cost for the "jihadi-john" account for a 1x/9x profit sounds like a good way of getting yourself into trouble.
Human rights are not a mathematical or computer science concept, they are in fact a law concept. I know it's tempting for computer people on hackernews to want to solve problems with the tools of their own domain - but law is exactly the place where rights need to be protected, not code.
We can't promise anything yet, sorry, but we are looking into it.
The difference is that science trains people to be skeptical and challenge all claims, whereas religion leaves people ripe for being taken advantage of by training people to believe weird and unverifiable claims from people with the right title.
My SO went to an Ivy League and a lot of his friends from the same school have solid jobs, but then there are a significant number who have jobs that were basically unheard of from my public state school.

Granted now 5 years later, a lot of my peers from college ended up going to top tier schools for grad school and ended up doing comparably well, but that's only after going to more school.
"All models are wrong, but some are useful" (generally attributed to the statistician George Box).

A belief, or a system of beliefs, is but a model. It's virtually guaranteed to be wrong. It also may very well serve the important function of being simple enough to handle in-core, while at the same time being close enough to substitute for the real thing.
This also plays to the traditional way of looking at monopolies, that they raise prices. But Amazon (and looks like, now Apple) are using this "but customers pay nothing" excuse to say that their monopolies benefit consumers. But because of the intangible nature of data, the "data prices" and "privacy prices" we all pay, have gone way up. It's just that we don't have good ways of measuring that.
SuperRecognizers plus facial recognition bans makes me think of Dune-style people as computers. Instead of a computer running the program we just have the guys in Room 901 do it.
"A store that welcomes competition."

I thought they wouldn't dare listing web browsers in that competition... well they did.

It's cool after all, average users have no idea about the difference between a browser and the engine...
Perhaps I am an odd duck (I come from heavy Java backend experience including Spring and struts and now Go) but Rails feels incredibly clunky.

I am working on a mid-size Rails app and it's a total horror show. Setting up debugger alone was very difficult (had to locate just the right patch version of a ruby gem that would work with my app); I can't just follow the calls because things are wired together behind the scenes based on names and sometimes through delayed jobs. I can't just read code and understand what it's doing I have know Rails and a myriad of other tools (react on rails and such).

So far RoR has left a fairly unpleasant taste in my mouth.
A lot of Salesforce sites use react - including:

https://status.salesforce.com/

and ironically:

https://www.lightningdesignsystem.com/

Why do they insist on forcing their framework of the week on their dev community and make it much easier to bring your own framework? NIH syndrome? Lock in?

We use react and visualforce to get our products built but the visualforce requirement to do so is sub optimal.
Deploy to Azure Functions from VS Code in your browser
I love Ruby/Rails and owe my career to it, but I don't see the advantage of choosing this stack in 2019 over Elixir/Phoenix for greenfield projects. Elixir tooling and libraries are now up to par and I'd argue have surpassed RoR.

At this point, it's just as productive (perhaps even more as you don't have to glue on a bunch of additional components) and joyful to work with like RoR but massively scalable out of the box thanks to the Erlang VM.
The trouble is that many Buddhists and Scientologists and others would say exactly the same thing.
I think the greatest thing about this is the choice. If you don't like this practice, vote with your wallet. If you do, then the same rules apply. I think the biggest issue a lot of people may have is the possibility that the choice aspect is taken away.
Yep. Take a look at https://swtch.com/~rsc/regexp/regexp1.html
Came here to ask if they're announcing that they're waiving the $99 fee. This makes it sound like they must be... but I haven't seen any other mention of it.

Maybe they jumped the gun a little bit and will announce it on Monday at WWDC?
> Every couple of years, the hope surfaces that a simple graphical interface will replace teams of developers

Wait! Just because the code is graphical instead of textual, doesn't mean its "codeless" or that non-developers can use it effectively, in a way that the results are maintainable. For example, Max/MSP is used by musicians and artists, quite successfully (so.. not doomed to fail!), but much of the code they generate is a complete mess. This isn't the fault of Max/MSP the language as much as its that the users aren't programmers and therefore never learned to reason about problems in the programmer way or learn about software engineering best practices like... abstraction. Similarly bad textual code is also written by non-programmers, so this isn't just an issue with graphical tools.

You might argue that there's a difference between graphical code like in Max/MSP and purely model-based techniques that try to hide the code-ness even more, but I'm not qualified to comment on those tools because I've not used them.

> Why do people keep trying to breathe life into a solution that is so obviously doomed to fail

I've personally had great success with Max/MSP and Synthmaker and plenty of people have had success with visual shader generation tools, Unreal Engine's Blueprints, SCADE Studio and whatnot, so I don't think its "obviously" doomed at all.
I acknowledge that this comment is probably low quality, but if you have ever taken magic mushrooms you realise that fungi are definitely linked to the emergence of consciousness.
Strive for as much non-processed food as you can, use glass or stainless steel for food storage as much as possible.
I tried a few: runbox, protonmail, and fastmail, and ended up staying with fastmail. The web interface isn't pretty but is functional and the service has been great so far. Very easy to set up with my own domain.
I do the latter implicitly. Any place that’s crowded enough to have ID scanners sounds like my own personal hell.
https://paleofuture.gizmodo.com/that-time-republicans-smashe...
I've been putting some design work into a minimalist browser like you describe, but starting from a different angle, namely starting with javascript as a first-class citizen, and a React-style virtual DOM as the rendering model. Javascript (or, I could be convinced, web assembly) is the primary interaction model with the browser, with HTML and CSS supported via polyfills.

The additional HTML5 suite of APIs would theoretically be supported by a plugin model, but given the depth of integration of some of the APIs, this might be a great deal more work than it sounds, and even more difficult to prevent the proliferation of questionable plugins to this backend. It would probably have to resemble something closer to the Linux distribution model; where an installed instance of the browser would come with a set of whitelisted plugins, with no real ability for the non-expert user to add plugins.

More important to me is the idea of making use of client certificates to attest identity more strongly, together with masking the use of those certificates over third-party channels. So if I went to facebook.com I would present a cert "abcd" (a self-signed certificate), and if I went to yelp.com I would present "bcde". If yelp loaded content from facebook.com, I would present "cdef". Similarly for cookie handling, at least initially.

My hope would be that websites would associate multiple client certs with a given "user" on their site, but unless the user explicitly associates a cert with an identity there's no way (outside of fingerprinting, etc.) to make that association; all third-party interactions show as incognito sessions. Eventually the goal would be that (if this technique is widely adopted) that cookies become kind of useless in favor of strongly attested server-side identity (rather than using bearer tokens in the form of cookies) that can be associated with session data.
In the same boat and now actively considering just self-hosting as these threads will so often advocate for. What a pain.
Paris opens a data center to control its digital infrastructure
Focus on measuring search quality and methodology first. Be a scientist. Great search teams obsess about methodology. Treat everything you try as a hypothesis, not guaranteed to work. Create a feedback loop that improves the pace of experimentation.

Other than that, the solution space is just as wide open as regular programming. It's just in many ways more frustrating because nobody knows what they really want from search, they just "know it when they see it" and no two users really can agree on what a good result is! :)
Not sure what that has to do with anything.
I haven't used it, but I'll try to summarize what I know for the folks asking general questions.

"The Lightning Experience" generally is a set of related products and tools from Salesforce. It's based on a live-updating model (as opposed to Salesforce's old-style whole page refresh model) and has a new visual and UX design system targeting mobile.

They're trying to bring everyone along to their new model, but they clearly understand it will take a while: they've built an experience switcher in the main menu and have invested heavily in adoption tooling.

If you want more specific info I'd suggest their training site Trailhead. Here's the Lightning Web Components introduction: https://trailhead.salesforce.com/content/learn/modules/light...
> How long will it be before company behind it are lobbying cities to make it a license requirement for every bar to use their system?

According to the article, it's zero minutes, because it specifically says they are already doing that lobbying.

This won't be just for bars, it'll be for restaurants that serve beer, liquor stores, gas stations, and supermarkets. Any place selling alcohol, cigarettes, spray paint, knives, guns, etc., anything that requires id.
I don't have ProtonMail, but do they not accept prepaid VISA / MASTERCARD debits?
Healthy fat hidden in dirt may fend off anxiety disorders
> I got a completely wasted degree in journalism, but now I work for a FAANG as a software engineer. The degree wasn’t even a consideration.

Are you sure about that? I've always thought that a degree was essential to get past HR at large, established companies, but it's not essential that the degree relates directly to the job you're doing.
I don't quite understand this line of thought.

If you are concerned about privacy, you shouldn't be on Google at all. Move to almost any other provider and you are already a step ahead in terms of privacy.

You aren't going to get absolute privacy in a single step, if ever. You do the best you can, iterate, and do better. Moving away from Google is step 1. Step 2 is to continue research, and potentially move again if it fits your threat model.
That's not growth capitalism. Growth capitalism requires constant growth in both supply and demand. Increasing supply requires increasing the usage of raw materials (not to mention the waste generated through their use). The reality is that we don't have an unlimited supply of any raw materials, so growth cannot be maintained indefinitely.
Their home page says:

> Lightning web components are custom elements built using HTML and modern JavaScript.

> The Lightning Web Components UI framework uses core Web Components standards and provides only what’s necessary to perform well in browsers. Because it’s built on code that runs natively in browsers, the framework is lightweight and delivers exceptional performance. Most of the code you write is standard JavaScript and HTML.

> Build apps anywhere, any way. You can build an app with your favorite tools, like Webpack, TypeScript, and Babel, and run it on Heroku, Google, or anywhere else. You can also package an app to create a desktop experience in Electron.

Which I think is equivalent to just saying this:

> Lightning Web Components is a lightweight, cross platform, and framework-independent web components library that builds on the native Web Components standards to add some convenient functionality.
I'm tempted to do that, but how much effort does it take to have something rock solid with no downtime?
Or in general, what are the `uptime` over `time investment` and `security` over `time investment` curves like?
Microsoft has the resources to fork Chromium if necessary, much like Google forked WebKit (after sending patches upstream for a while) and Apple forked KHTML. This is just how open source works and isn't a problem in itself.

By doing this, Microsoft gets compatibility with the world's websites on day one, and they can take it from there. It's a smart move that many people seem to be misinterpreting.