skysight-inc/HackerNews huggingface dataset:
It seems like the defenders of censorship always imagine the censors will block only the things they don't like, but it rarely works out that way. Anyone who advocates censorship needs to realize that some things they don't want censored will be, through imperfection, abuse of power, or simple difference of opinion.
Retail stores don't stock most of the things I buy online. Sometimes I try to find something local and give up. I need a 5mm glass fuse for a shredder. All the auto parts stores only carry 6mm. Box stores don't have small fuses. Amazon got the sale.
Program or be programmed -- Douglas Rushkoff
https://arc.io/product#how-does-arc's-cdn-work-technically?1
optical isolation, look for highspeed optocouplers for isolation, and something like digital potentiometers are good too for clamping an abitrary analog voltage using a digital mechanism.
Even better, this may eliminate passwords. This is only available on iOS and requires FaceID / T2 chip.
The trouble is there are some strong arguments against that idea, so quantum physicists tend to assume that such "somethings" just don't exist. Yes, that is very counter-intuitive, but that is one reason quantum physics is so weird.
Come on, I'd say it gives the currency an aura of bullshit.

Real currencies (USD, EUR, ..) are stored by visa / mastercard in regular databases, so why not facebook's currency ?
What's an API?
I agree with you.

Does the opening sentence count? "I've read a lot recently about the recency bias of movie ratings, IMDB ratings in particular."
Indeed, technically it's any OAuth provider, but in reality how many

a. actual users have a non-FB/Google OAuth identity

b. apps have something other than google or facebook login?

I've literally never encountered an app that had anything other than google or facebook for their oauth login. The only site I ever encountered that used something different was stack overflow a decade ago, and I recall them killing it off or at least complaining about it.

I suspect that the reality is that in a regular user's experience Google and Facebook login are the only ones they've ever encountered.
> 6) If someone doesn't understand my idea, it's probably because they aren't smart enough to get it. (reverse)

One of my high school teachers said something like: if someone doesn't understand your explanation, then you don't know it as well as you think you do.
This guy must feel horrible. "What if I had just left the wasp nest and went to lunch instead?" "What if I had called 911 earlier?" "What if I had used bug spray instead?"
I don't like that it's required for developers to include if they include any other third-party sign-in.

US competition laws are outdated with undue reliance on the concept of a monopoly.

I don't care if you're a monopoly or a third of the market or even a small company. If you run a marketplace or app store or similar platform, you should NOT be able to:

- Force usage of a separate product of yours over/with competitors (in this case, Apple sign-in, but also Apple Pay instead of Google Pay, etc.)

- Prevent competing products from appearing (whether Apple not allowing other browser rendering engines, Amazon not allowing Google Home or Chromecast to be sold, etc.)

- Rank your own items higher in search results etc. if competitors can't bid to do the same e.g. sponsored results for everyone including yourself (so Amazon Basics or Google Shopping needs to be listed as a sponsored result, not as a separate feature)

This is the kind of thing 21st-century legislation for fair competition should address.
I suspect that GP originally wrote "so you cant actually communicate with your customer", to which I answered in the next minute, and later added "if they don't want you to." (If not, my mistake for misreading.)
Location: SF
Remote: ok
Willing to relocate: no
Technologies: Any kind of data stack
Email: <username>@gmail

Experienced backend dev, former founder, looking for a variety of roles
Yubikeys are great, but perhaps out of scope of this discussion.
In-Group Favoritism Difficult to Change, Even When Social Groups Are Meaningless
Wow, downvoted for pointing out the shitty tenor of conversation on this site. I don't know why I participate any more
There is a ton of background at that link, but can you help me understand what portion of the protests and/or severing of business contracts was damaging and/or considered tortuous interference? With no opinion on either of the plaintiffs (I hadn't heard of the case), it's not immediately clear to me what happened that wasn't organized protest in a public space (which, presumably, would have been legally fine).
All they have to record is alias->real in a giant table.

They don't need to record what app or service got the alias address, and they explicitly state that they do not record any details about interaction with your service, or any emails that go through the alias. It's an explicit statement in the linked talk.
The Problem with Amazon and Open Source Isn’t Amazon
You don't need to leave your icloud behind even if you're leaving Apple devices.
This hasn't been my experience. UPS and USPS always place the packages on my porch where it isn't really visible to people passing by, but the lame AMZN contractors always place it on the front door of the house, in plain view of the street.
Correct, all your data on apple's services are encrypted such that apple can't access them. The final fallback for account recovery is the "iCloud key vault" which is covered in documentation they published. Those are essentially HSMs gated by your account password and passcode, and a counter that triggers recovery key erasure.

I think the primary security white paper describes exactly how it works, but essentially there's a set of shared symmetric keys that are encrypted to public keys for each of your devices. Outside of the key vault path, the way a new device gets access to those keys is one of your other 2fa devices encrypt a decryption key to the new device when you approve it.
The basic result is that there is no point in which the key material is transmitted unencrypted off a device.
Coming up with yet another format in that space makes that kind of bridge service more annoying to create though, especially if the format grows more complicated. E.g. just trying to bridge a few of the existing choices like Atom, AS2 and microformats has an annoying amount of edge cases.
You can have and use an Apple ID/email without owning an Apple device.
The real problem is American apps like YouTube, Instagram or Snapchat. Any platform without those is stillborn.
This "they're stealing my privacy!" outrage is tiresome. Someone built an app; it authenticates a certain way; if you don't like it, uninstall it. Both Google and Apple offer near immediate refunds. But really there's some due diligence required here - installing an app is not like visiting a web page, you should take a little care what you spend money on.

You're complaining that someone else is building apps in a way you don't like. That's their right; they aren't building them for you.
I have a separate programming account but I find most of the programming subs are just so much so-so blog post upvoted with what is really kinda a crappy tutorial / blogspam / resume fodder / and folks are all "gee thanks!". I'm fairly sure you could post something with broken code and it would get a bunch of "great link" posts and votes if it promised to do something neat. No way anyone actually read about them and thought about them, but they get spammed and upvoted endlessly. The thoughtful stuff beyond that is often just veiled insecurity / gate-keeping.

I wish the programming related subs were a bit more curated / moderated, particularly web development related, but that's not the reddit way in general.

I like college football so r/cfb is nice.

I'm on a bit of a down cycle on reddit as may of my long time subs are now large enough that I don't want to read them and they're dominated by hot takes and garbage.
I had this problem two or three times and that - and the fact that some of those got removed after a couple of years like mozillas persona and OpenID - made me go back and always use email, which has the added value that I don't expose the usage of that website to a 3rd party.
This is surprisingly common. They keep the content on the page in order to make it available for crawlers, and then use JS to hide the content until it's determined you don't have an ad-blocker, or you've accepted some draconian terms, or whatnot.

Better to leave JS off if the site works without it. :)
But those method names are still hard to relate to the business cases your customer requested. So you implemented something for some reason; your code and methods tell you what you implemented but not why... Why did you use a tree? I read your top level code and think ; dude, that would have been so much simpler and faster using a Wobble instead of a Tree! Then I try that and it turns out it has to be a Tree; you went through the same process, did not tell me why and I lost a day retrying. For instance.

(assuming, which you should always assume imho, that you left the company many years ago when this event occurs)
One can very much be humble and confident.

Especially in an interview or promotion situation, I'm proud of and speak to my accomplishments and the skills and knowledge I've been able to obtain, but I can also speak with real honesty about the mistakes I've made, tend to make, and my own shortcomings. I talk about both without hesitation.

Though I know it's entirely anecdotal, I've found most of the time those traits were taken quite well in an interview context, and certainly I've appreciated people that display those traits when I'm interviewing them.

The key I've always found was the tone in which both your humility and confidence are displayed. After all, confidence is a totally different animal than cockiness.
Of course; why would they want to maintain this crud and its dependency hell. If the slightest thing is wrong, this or that application breaks. An application should include the correct version of everything it needs to do its job, period.

Only problem is security: with multiple applications including their own dependencies, some of those dependencies will lag behind in their security updates. You can't just get a single fix for your Python run-time and fix it in all applications at once.
But they can since they control the chain.
Which part of the legal system isn't expressed accurately there? I'm asking out of my own ignorance, not as an accusation, I've only been a juror once.
New Brute-Force Botnet Targeting over 1.5M RDP Servers Worldwide
>Authy (arguably more secure)

What's the argument ?

>Would be cool if this somehow cleaned up the whole process.

Everyone, just leave 2FA alone. No sms. No custom garbage that sends a push from a cloud and uses a blob on the device. Use TOTP. It's simple and easy. If you want fancier phishing protection, optionally add the newer fido2 or whatever the newer standards end up being. Just no custom garbage.
The SL beginner experience is so aggressively capitalist that it can be a real turnoff. You log in, do the tutorial island thing, and then get kicked into a land of overpriced cash shops from sea to shining sea.

Plus the client feels like a something that grew organically out of a research project from the early 2000s and is about as new user friendly as Blender.
Lately if I see a package is Lasership and marked as "delayed in transit" I know I'm never getting it.
Hey - not OP but I wrote the article. There was a lot of discussion about recency bias in that thread, including the graph you shared and I decided to expand on the analysis. Note there are a few other graphs in my post. I did just draw this up quickly yesterday. But you're right, sorry - I should have cited your comment in my post. Adding it now.
There's a pretty wide gap between what you think is Constitutional and what U.S. courts think.

Virginia law notwithstanding, elsewhere in the U.S., driving is not a right and never has been. Per U.S. Supreme Court law, freedom to travel includes the freedom to cross state lines, but that right does not extend to any particular mode of travel. You're free to walk, but not necessarily to drive or fly (notwithstanding 49 U.S.C. 40103, because Congress subsequently restricted that right in 49 U.S.C. 44901-44902). Otherwise, you'd just be able to walk into an airport and board any flight you'd like without presenting identification.

Similarly, if driving were a right, states would be forced to allow anyone behind a wheel (ok, at the helm of a 2-ton killdozer) without being properly trained or insured first.
Uh, email addresses aren't already public - there isn't some magic email directory in the cloud (I mean aside from those aggressively hoarded by trackers, advertisers, and marketers because you had no choice but to use your real address once).

But this is also specific to "social" logins - eg ones where you aren't intentionally providing your email address.
Steam does this:

> Notice:

> You are leaving Steam.

> Never enter your Steam password on an untrusted website. Any login form on an official Steam site will display "Valve Corp." in green with a padlock icon in your browser’s address bar, as shown below:

https://steamcommunity.com/linkfilter/?url=https://anyURL

For anything that looks malicious ("https://anyURL<h1>"):

> Link Blocked!

> This link has been flagged as potentially malicious.

> https://anyURL%3Ch1%3E has been flagged as being potentially malicious. For your safety, Steam will not open this URL in your web browser. The site could contain malicious content or be known for stealing user credentials.

> Never enter your Steam password on an untrusted website. Any login form on an official Steam site will display "Valve Corp." in green with a padlock icon in your browser’s address bar, as shown below:

https://steamcommunity.com/linkfilter/?url=https://anyURL%3C...
Is it possible there were people in those labs that knew more than these geniuses, but you never noticed because they presented themselves modestly?
I spent years as a infosec consultant specialized in major healthcare companies, and my experience is completely the opposite. It is absurdly easy to be 'compliant' with the HIPAA security rule yet still have abysmal security.

The biggest issue IMO with the HIPAA SR is that it is first and foremost a legal matter that involves legal teams, and is not very good at being a technology matter that effectively prescribes security to security teams. Most of the HIPAA-motivated companies I worked with spent more effort getting their legal counsel to build a HIPAA litigation shield (via intercepting and carefully massaging the wording of security assessments) than they did getting their security teams to actually improve anything.

I did have some clients that saw HIPAA as only a foundation and guidelines for truly improving their security, but that was more a matter of the company actually caring about security, and not because the HIPAA security rule is actually effective.
They don’t have a “record of your activity.” They only know that you have signed in with Apple on a site. They aren’t tracking your behavior or usage. The Apple JS doesn’t have to be on any page except the sign up/in.
I do this on the js console in the browser
Keras is part of the problem for me. It is rather rigid and it's hard to get around. Works super well for the regular use case. On the other hand, when you want to start doing custom stuff, it's hell.
Check out 1Password for 2FA management. It's extremely well done. When it auto-fills your user/password, it also puts your 2FA code into your clipboard so you can just paste it in on the next page.

Alternatively, and if the form supports it, you can use the share sheet on iOS to get 2FA auto fill from 1Password.
The Merit Myth
That’s how the rest of the world
feels about the stolen treasures in the British Museum
Everything is getting longer because of SEO. Books, Articles, News, blog posts, and Youtube videos.

Even conference talks are getting longer because length is often more important than the quality for most of the users.
Because they didn't seem to know any of the simple and nice ideas from distributed systems to solve pain points of managing space, since adding, removing nodes, sharding/partitioning is something you have to figure out pretty much from the start.
I’m curious where the term “Superior General Knowledge” in the headline came from. It’s not explicitly defined in the article and ironically is not an intellectually humble way to describe the article’s conclusions.
Because the moment they do that they lose the whole reputation they’ve spent years and years building as the ‘privacy focused tech company’. User trust goes out the window.
Conservation of matter and energy states that energy cannot be created nor destroyed. So what makes some annihilationist version of reality palatable to a true scientist?
I _love_ Escape Velocity Nova. I used to play it for maybe 2-4 weeks once per year but then my license key expired and their renewal system went down because the company died.

I've wanted a successor of some kind for so long but nothing quite hits the mark. Maybe this will come close.
> For any critical tech platform, though, has there ever been more than 2 major players?

Here's a partial list of major server operating system vendors over the years: IBM, Sun, HP, Red Hat, Novell, Microsoft ...

Everyone one of those has existed since at least the 1990s and it's rare for the largest individual vendor to have more than 30% share at any given time.

The key to maintaining this is common interfaces. You write against POSIX or Qt or Java and it runs on most systems even though they're all different vendors.

But all of that stuff comes from the little guys. All the Unix vendors got together to create POSIX because then developers get access to more users by targeting POSIX than Win32, even though Windows at the time had more market share than any individual Unix. Sun creating Java allowed developers with mostly Windows customers to write their Windows applications in Java, which then gave them Mac and a dozen other platforms for free, including Sun Solaris, which the developer probably wouldn't have targeted on its own.

The phone hardware vendors could take a page out of that book and create their own modern POSIX for mobile to replace the Google-specific APIs on Android. Heck, they would only need one implementation of it, the same as all the old Unix vendors have largely standardized on Linux today.
Blackphone2 as well: https://www.silentcircle.com/products-and-solutions/blackpho...
Wasn't trying to get fired, frankly. I made up to $40/hr there at 20 yo. My boss was black, too. It was in the South, so it was more of a bad fact of life and treated as such by management. I agree with you, though. Nowadays, I wouldn't hesitate to refuse service.
Part of the reason I make data vizzes is so people can expand on the ideas, so there's no issue there! (as long as proper credit is given to the original work)
How Silicon Valley’s Tech Boom Made Real Estate Billionaires
> Commerce would continue, with state-backed currencies swapped for crypto alternatives that float freely on an open market.

I'm assuming this means a stable coin?

Has anyone figured out how to verify the backing on a blockchain? If that was possible Tether's fraud would have been exposed sooner.

Also, why is Facebook's new currency rumored to be backed by multiple currencies? That seems like it would add volatility instead of lessening it.
> Provided they don't have the command of the industry, the power of the very rich disappears as well.

Whoever has control of the industry will be the very rich. If the computers have control of themselves (why would we set them that way?) then we are already toast.

By the way, UBI is a form of avoiding some dangerous concentration of power. In a world with escalating automation everything gets cheaper and cheaper, so any money distributed to the masses is enough to avoid making them irrelevant.
Wow, that's new to me. My understanding has always been that space is just the absence of matter. The ideally of null/void expanding is strange, to say the least.

Do you have recommendations for any books or resources online that break this down, and explain it in an ELI5 way?
It's commonly thought that the so called first world is rich. It's not true.

For example, the US on average is twice as poor as the average person in China in terms of housing cost. On average China spends 8% of their take home wage on housing, thanks 0 property taxes and super low cost of building, compared to 22% US average. Avg condo size is slightly larger in the US about 15%. And yes the vast majority of housing in China has electricity, sewage and wayer

However the US is very food rich. Only 13% of us consumer spending is needed for food, as opposed to 35% in China and even more in 3rd world countries

Sure developed countries can afford much more cell phones and merchandise but the necessities of life are housing health insurance and education
They're a public endpoint designed to intake communications from anybody. Identity is an outcome from people using the same email, and that's a valid reason for using a proxy, but the address itself has always been public.

More in-depth article about it: https://www.troyhunt.com/im-sorry-but-your-email-address-is-...
Wiby – A Search Engine for Classic Websites
A concrete stake is not _made_ of concrete. It is made of steel.
Just came up with it. The complexity of monads and other post-grad level CS stuff mixed with good old spaghetti code.

Next up: some doofus who learned high-order Haskell in middle school, and takes offense of me calling it complicated.

PS: https://blog.plover.com/prog/burritos.html
Does this apply to enterprise apps distributed outside the normal App Store? I bet it doesn’t.

Also I think you’re given the choice of using your real email address instead if the anonymizes one. At least that was my understanding.
Nice to see the project moving along, I'm just getting started with the basics for a way finding application and will probably start off with version 2 then.

Hopefully by the time stable comes around I'll be near production ready as well.

A bit off-topic, but does TF or pyTorch work nicely with AMD GPUs?

I'd rather not have to deal with Nvidia's blob drivers if at all possible.
Because (if you watched the talk or read the transcript) they already explicitly stated that they will not?

They've also explicitly stated that they will not record any information about interaction with a service.

Based on Apple's general approach to data security, I suspect that there is no "company A got alias address Y" table. In principle all that they need is a table of alias->real. On the other hand maybe it would be useful to have such a table in the case a site gets compromised/starts selling information?

But they have stated explicitly in a public video that they will not record interactions or emails you send, so I'm sure it would be lawsuit city if the reneged on that.
As a counter-anecdote, Canada Post and UPS don't even try to deliver my packages to my apartment door but the Amazon guy gets it right every time.
Well the main issue is all of this money is going to the wealthy. And while I don't have hard data to back this up, it feels like 'inflation' is rampant in the things that wealthy people throw money at, e.g. stock market, real estate, art, etc...
> likely scavenged from broken phones

Or stolen phones
The company has been around for over 40 years. Have they done anything to suggest that they’ll just randomly go rogue? Their brand is built on some amount of user trust, if they start violating that, there’d be significant market risk which makes no sense for them to do. They can and are already winning when it comes to privacy, violating that would be incredibly stupid from a business perspective. Privacy is one of their competitive advantages.
I really hope I don't read any articles a few years from now about Barnes and Noble filing for bankruptcy after being crushed by the immense debt of a leveraged buyout...
Working Hours