skysight-inc/HackerNews huggingface dataset:
More likely Amazon not willing to pay for the redelivery attempt for the parcel. (Carrier contracts and line-item fees are quite negotiable, even way below Amazon’s scale.)
That article seems worthy of discussion on its own. I submitted it (expecting to find an existing discussion) but it turns out it hadn't been submitted yet.

https://news.ycombinator.com/item?id=20128029
Ask HN: How to deal with impostor syndrome when you don't have tech degree?
I’m a software engineer at a well-known, respected company who has zero formal education in the field (my degree is in print journalism).

Before I got my current job, I had always been pretty tech-savvy, and had even done a little experimental programming and web design, but never took any classes or boot camps. A few years ago, during a 6-week stint on disability, I brushed up on my minimal skills and soon after managed to score a job writing code through a connection I had at the same company.

I had major impostor syndrome for a long time, though it somewhat helped that the projects I worked on had little close oversight or code review that might have revealed my lack of training. But after years of good performance reviews, successful projects, and promotions, I started to finally allow myself to believe that I knew what I was doing.

Now, though, the impostor syndrome is back. My management is pushing me towards leadership, and I’m having a hard time trusting that my ideas about software design are as valid as those of a student who’s taking the formal, higher-education classes that I never did.

Anyone else been in this situation anymore? Any thoughts or tips on how to deal with it?
The ‘cliff effect’: Getting poorer while working harder
I tried to do a SQL injection on the invite code form and they blocked my IP for 15 min. I guess some technique's aren't allowed.

EDIT: Switched my target to the front-end and was able to get in pretty easily.
I'm thrilled about implementing this on our app so we can make registration and login even more smooth without having to be in bed with Google and Facebook. Can't wait to implement it.

I'm even more thrilled to see, that according to the Okta article linked in another thread by simonw [1], Apple uses OAuth and OpenID Connect for this, and not some home-grown protocol.

Great news all-round.

[1] https://developer.okta.com/blog/2019/06/04/what-the-heck-is-...
HTTPS: //twitter.com/isgoodrum/status/1136693839526223872?s=19
A study from 1983 about Quality of Life comparisons between Socialist and Capitalist nations
I use pyenv, (mostly because its the first one I found).

though ironically in a very unpythonic way there are a bunch of these python environment creators. (conda, virulenv , pipenv....)

pycharm lets you select you favorite, which is pretty nice.
Corporations and open source: why and how
I mean you're kinda supposed to hack your way into getting an invite code...
Can you do oauth? I'm not gonna add a random script hosted by apple to my page.
"Who is committing the evil?"

Whoever enforces such stupid laws.
How many tailors have been sued so far for repairing a top brand suit using normal cotton spools?
So maybe Tidelift is the answer.
Yeah, but did you sell them all?
A potentially explosive case in which protests/boycotts by college students/administrators based on claims of alleged racial profiling by a local business appear to have backfired in a big way - at least in the first big legal phase.
It drives me nuts when you find a forum post and they never reported back. Or it's a terse "I figured it out."

I try really hard not to do that for internal or public forums. The odds are better than you think that you'll stumble on the same topic a few years from now.
My team has been wondering: We allow third-party login via one OAuth provider (Esri) in addition to "local" accounts. Users who log in with Esri do so to access content in their Esri account, not as a matter of convenience.

Apple's guidelines stipulate that it will be "required as an option for users in apps that support third-party sign-in".

In contrast with social logins, you cannot create an account with our app via the Esri login, and your Esri account must be set up first in the back-end to even use it at all.

We can't think of a way to feasibly support this per their requirements, unless Esri allows it via their OAuth flow as well (they do support Facebook/Google today).
I really hope this is the first step to them adding scopes for accessing iCloud data (mail, calendar, notes, reminders, photos, others). Being able to write better apps for them on Android & web would be amazing.
See

https://www.youtube.com/watch?v=S3hA9cjBBwM
Door to door electricity sales people are almost always criminals (fraudsters) trying to trick you into signing up for something they are intentionally misleading about.
The idea that ad targeting sucks because ad networks have no incentive to improve it is extremely dubious.

Google and Facebook have an incentive to use up advertisers' budgets. But they also have an incentive to keep advertisers happy by providing good returns so that they will keep spending / increase spending in the long run. Advertisers are not always perfectly rational, but I don't think they're as dumb as the article makes them out to be.

The simpler explanation for poor ad targeting is the bidding component. If it was the case that you were shown whichever ad had the highest predicted CTR, I'm pretty sure you'd be seeing some damn relevant ads. But instead you're seeing whichever ad has the highest (bid per click * ctr). Or worse, advertisers can also bid per impression, in which case there might be no relevancy component at all.

My guess is the car ads on YouTube mentioned in the article are that last case. Both of those components (YouTube and car companies) are notable for skewing towards "brand" advertising rather than "performance" advertising. They're not trying to get you to buy a car right then. They're trying to get you to feel good about their company in the long run so that five years from now you're more likely to buy their car.
Given the depth of discounts for even 1 million parcels per year, it’s a safe bet the Amazon won’t be paying Fedex retail rates for any non-trivial number of customer orders.
The actual question being asked in these cases isn't "Is this currently legal?" but "Should this be legal?".
In that vein the Saleae Logic[1] are really awesome, the prices went up recently but they're the real deal, next step up from them gets into the $X,000/$XX,000 range very quickly.

[1] https://www.saleae.com/
The only way I can get my FedEx packages is if I re-route them to a Walgreens or another drop point and drive there and pick them up myself. They never seem to be able to find my address while UPS or USPS never has an issue.
The Unix system: making computers easier to use (1982)
No evidence of this what so ever. And you have the ability to sue Google if that is the case.

Try doing that in China and see how long before you are 're-educated'.
When could a used Apple Pro Display realistically drop to $3k or less? 12-18 months after first shipments?...
Sure, I get that, because they don't want to be sued.

You asked what the difference was with the social media post vs. TV: The difference is that COPS, etc., don't want to be sued, so they get releases, because they realize that they could potentially be sued (and sometimes for good reason!) I sincerely doubt the person in the post signed a release from Amazon.

If you argue that it's technically legal, the OP wasn't specifically arguing that either.

> Even if one claims the video is fine (and I'd disagree), it's still a very very very bad idea for Amazon, or any large company, to be enforcing the law and conducting mass shaming via advertising.
That's a great anecdote, and I see how learning Python might have been harder for someone if it was not included.

However, the software distribution model right now is fundamentally broken. And I do not think it is worth leaving broken simply because it makes learning easier for some people.

In general, I think the decision to push people to tie their app less to the system configuration and rely on virtualenv, containers etc more is a good move in the long run.
You asked two different questions. I'm not going to answer the one about why Facebook is creating a pegged cryptocurrency (other commenters have done a good job of that).

As for the value of blockchain here, there is absolutely none. Facebook is creating a currency and labeling it a cryptocurrency which denotes the use of a blockchain, when in reality considering they're the central issuing authority of the currency and are the ones who determine it's value/inflation rate (i.e. pegging as you rightly described). Therefore using a blockchain for decentralized settlement and provenance here serves absolutely no real purpose and you are correct in pointing out that they can just keep everything in a database (which is likely what they will actually do).
Its a good sign - means you are learning and getting better.
“Burrito pasta” is a great term! Is that something that you just came up with?

It sounds like spaghetti code but even worse because it’s covered with a messy layer of beans and guacamole and wrapped in layers of tortilla.
You make it sound like we could decide to have Firefox collect your PII without your consent. We won't. The standards for the collection of category 4 data are

"Default off. May be eligible for opt-in data collection by specific users, provided there is (i) advance user notice (ii) consent and (iii) an opt-out."

The only collection of this data that I'm personally aware of is the Firefox Pioneer program.

https://support.mozilla.org/en-US/kb/about-firefox-pioneer

(Disclosure: I work for Mozilla)
If you have more than one app server load the customer funds into Redis and use atomic operations to decrement it. Serving out of RAM is going to be orders of magnitude faster than updating disk regardless of how much you spend on network overhead. If you have so many customers that they blow the RAM limit on a Redis box....well, you won't, because that's billions of customers.

You can get surprisingly far on one app server (or sometimes one app server with 2 mirrors for failover). See eg. the latest TechEmpower benchmarks [1], where common Java and C++ web frameworks can serve 300k+ reqs/sec off of bare-metal hardware. The OP indicated that these API requests are basically straight queries anyway, and only need to write to update the billing information. Reads can run incredibly fast (both because they can usually be served out of cache and because they can be mirrored), so if your only bottleneck is the write, take the write out of the critical path.

In general global state is hard. Don't solve general problems, solve specific ones. Atomic counters have a well-understood and highly performant solution.

[1] https://www.techempower.com/benchmarks/#section=data-r17&hw=...
I dont get it. Why not put a pc on your lan and try to hack that? What is the benefit to me here? How do i know that the 'labs' i am participating in are safe? Are they honeypots? or perhaps i am just being used in a covert plan to crowdsource an attack on a vic?
We are, of course, talking about research to develop intellectual property. Probably most people on HN are employed in producing protected intellectual property in some way.
I wasn't aware that that kind of offline web app was possible. I'm surprised there aren't more of them.

My impression was that with an offline capable web app you need CDNs et al to be reachable to load the web app, and then if connection was lost the app could handle it, but if you were to close and reopen the app, it would again need an internet connection to load.
IU to acquire fastest university-owned AI supercomputer
If I was FedEx, I too would dump Amazon and let some other sucker deal with their race to the bottom demands. Having no pricing power as a vendor is a fool’s errand, and Amazon will steamroll you.
Surely more rational: club together and pay the cost you all pay less, you can repeat and get access to even more opportunities, you can all get the benefits.
Exactly. Fedex sees the writing on the wall and figures it might as well wring the last cent of profit out of the relationship (and who knows what profit was on it with the contract). In other words if they feel that Amazon will cut them out then what is the motivation to serve them at discount rates?

In a way this is similar to a commercial landlord with a tenant that wants to go on month to month. You take advantage of the opportunity and charge more rent for the accommodation. Zero reason for Fedex to not do what is in their strategic interest here it's business.
I mentioned that in my second sentence.
That’s a tight hat, I think I own the same one.
Yes you can - here's some example code that uses an OAuth redirect rather than Apple's JavaScript: https://github.com/aaronpk/sign-in-with-apple-example
I don't think the world needs vaguely cute titles to be immensely creative.
The Surfers of 10th Century China
> Where I come from it's a known scheme where one guy gets you distracted at the front door with some semi-plausible sales pitch like re-sealing your driveway while his accomplice goes behind the house and robs you blind.

This sounds like precisely the sort of pearl-clutching urban legend the parent comment is describing. The wealthy neighborhood I grew up in had all sorts of stories along these lines - "be on the lookout for gypsies" etc., despite a vanishingly small crime rate.
> Users who log in with Esri do so to access content in their Esri account, not as a matter of convenience.

So this is not a third-party sign in. This is access to third party data which requires signing in with them.
Not doing retries is a cost thing -- last mile is expensive (human drivers, fewer packages) and retrying delivery multiplies that cost 2x, 3x or more. Bufferbox (YC Summer 2012) was trying to reduce this cost before Google Shopping acquired and shut them down.
I don't know about how much community support they have, but seeed sells some alternatives:

https://www.seeedstudio.com/oscilloscopes-c-880/DSCope-p-242...
https://www.seeedstudio.com/oscilloscopes-c-880/Xminilab-Por...
But requiring an email hardly solves that problem.

And very few apps (at least of what I use) that have 3rd party auth have features where user content is displayed to others.
It was bloody obvious to anyone who didn't choose to actively look away.

Witold Pilecki, quite possibly the bravest man I ever read about, went under cover to Auschwitz in 1940.
His Polish resistance network - ZOW - first started forwarding reports into the holocaust at Auschwitz Birchenau to the Polish government in London in March 1941. He was the main source of information on the holocaust in the early war, which was shared with all allies.

His landmark report produced after escaping from several years under cover in Auschwitz as an inmate was produced in 1943[1]. He'd also organised a resistance network within the camp, and regularly smuggled information out to ZOW during his time there.

Earlier? It was well known what Germany was doing well before the war (no apology for copy pasting a few snippets direct from Wikipedia):

Germany passed the sterilisation and euthanasia laws in 1933, with Action T4[2]

California eugenics leader returned to the US from Germany in 1934, talking of the fine program that existed in Germany, when Germany was forcibly sterilising 5,000 a month.[3]

Eugenics researcher Harry H. Laughlin often bragged that his Model Eugenic Sterilization laws had been implemented in the 1935 Nuremberg racial hygiene laws[3]

The forced sterilization program engineered by the Nazis was partly inspired by California's.[4]

The Rockefeller Institute funded Mengele before he went to Auschwitz.

Not forgetting the many refuges that found their way to British, American, Canadian and other shores in the years leading up to 1939. Many of whom would have been able to report exactly what was going on before war broke out.

[1] https://en.wikipedia.org/wiki/Witold's_Report

[2] https://en.wikipedia.org/wiki/Aktion_T4

[3] https://en.wikipedia.org/wiki/Nazi_eugenics

[4] https://books.google.com/books?id=1lvbUy441m0C&pg=PA18
Overcrowd forces you to think about transit design in a different way
In my area it's mostly USPS and UPS
Sorry what exactly does having a cloaking address do that makes this a problem?

You get an email address you can contact them through.
I think it all depends on the context of where you live, personally. I've lived in multiple large cities in the midwest (USA), and can say that UPS was far superior in one of them, while Fedex was way better in another. Even different addresses in the same city had the same result. Doesn't seem like there is any rhyme or reason.
I wonder how much accuracy you could get doing the same thing with the IMU.
Sounds like you're proving Aristotle correct
"Green" FedEx is ground, which was an acquisition a long time ago. It's an all-ground service that uses trains and contract delivery carriers with FedEx livery. Slow and cheap. If you look at the door of the truck it will tell you who owns it.

The "Red" one is Fedex Express -- overnight, 2-day and 3-day service. Most people think of "Express" FedEx.
That's not been the case for me. USPS is by far the worst with UPS and FedEx neck and neck with one another. The only experience I have with DHL is with commercial air freight and they've been quite good as well.

Have you ever had to deal with lost packages? Good luck trying to make any progress with USPS. I've had several packages lost by USPS. Every phone call I've made to them results in conflicting answers and bad information.

However, I live in Seattle and Amazon's own delivery service is arguably even worse than USPS. They might not lose packages (they now take photographs upon delivery), but the workers aren't very well trained. I've had packages left out by my sidewalk garage or left out on an unsheltered table in my front patio area. A number of times the packages have been rained on. It's a general level of cluelessness that you don't see with UPS, FedEx or USPS.
It is a threat to national security if the device is constantly recording surroundings and sending data back to Huawei who in turn hands it over to Chinese intelligence. That's obviously far fetched but it's technically possible.

And other countries have security concerns with Huawei besides US so this isn't just about the trade war.
USPS does the same thing for me. Pretty annoying.

That said, whoever does the last-mile delivery in the Amazon-branded vans seems to do a good enough job for my easy-to-find house. And they tend to deliver in the evening, when I'm home, so the package isn't sitting out all day (though I'm sure this is a quirk of my location and the driver's route, not a feature).
The killer feature here is the anonymous email address forwarding. It shows Apple actively ceding an opportunity for exchanging marketing data in favour of user privacy. It does feel like Apple are taking privacy seriously and positioning it as more than just a marketing campaign.

I am tired of seeing my email address popping up on leaks and I don't want to rely on spam filters any more. The best spam filter out there is built into gmail, but they are no longer interested in actually preventing spam, instead they want to control it. Now Google shows me ads that look exactly like emails in my inbox, inside the iOS app.

I wasn't happy with this so I built https://idbloc.co, which is basically equivalent to the disposable email element of Sign in with Apple, now that Apple built it into their Sign In, I guess now it exists for users who don't want to or can't use Apple.
I can almost guarantee you that regulators will step in and regulate the living crap out of this system if it's found to be actively used for high rates of cross-border transfers and foreign exchange. Governments are a lot smarter than people give them credit for. Once the regulation kicks in, all of a sudden the value of this diminishes greatly.
"Too Much Money" means that promises have been made that can't be kept.

A strong burst of inflation could (somewhat) reconcile these promises with reality.
Remember the context of the discussion, which was the objection to the vagueness of the term.

Would it be okay to substitute "Five 9s of uptime" in an SLA with "solid uptime" and call it good?
'Brickception' Is a Perfect Afternoon Time-Waster That Redeems the Pop-Up
That's a terrible analogy. A better analogy is I could buy a bucket but somebody might (will!) take it home and use it as a footstool and I will have wasted my money.
GitLab and many others have been doing this for years already. Apple could say that they are coming out with a new computer $3000 tomorrow based on 5 year old hardware that cost $500 in parts, and people would be posting articles on HN claiming that it changes the world because it has an Apple logo on it.
Well, it sounds like delivery sucks for your particular situation, at least.

I have no problems whatsoever with delivery, either to work or to home. Home deliveries even manage to find the front of my door on the sixth floor of my apartment building, somehow.
As I've matured as a developer I generally find it easier to read and understand code, whether it be my own or others. As a junior this is something I definitely struggled with.
But that doesn’t explain why they need your actual email.

The only reason they want a user’s real address is because they want an address the user cant stop them from spamming.

There is literally no other reason.
"Therefore, the speed of your server-side programming language is not important (or less important)."

I view this statement as a prediction, in the scientific sense: "If you re-implement a program in a faster language, but have the same database access, the user will not have any visible performance improvements."

Like almost anything else, the answer is, "it depends". It is often true.

However, I have falsified it in some specific instances. It is definitely possible to take a "scripting language", which ranges in the 20x-50x slower than C (a rough, but adequate, approximation of "optimal"), then layer it in a couple more layers of abstraction that may be really nifty and cool and awesome but also adds another 10x to the slowdown (or more... if you're not careful, this term can be unboundedly large), and get to the point that simply generating an HTML page takes a full second of a 3GHz's processor time. I have replaced things that did non-trivial database work with something in a compiled language and gone from "noticeably sluggish" to "essentially instant" without all that much effort.

In one of those cases, significant effort had been expended trying to figure out why the database was so slow, presumably because of the prevalence of this meme, when even the first glance at the output of a profiling tool said that was not where the problem was.

Performance is rarely the first thing to worry about, but I find it's something you do want to at least keep in mind while developing. If you do at least keep it in mind, I suspect the saying is generally true, and the raw speed of the underlying server language won't bother you much. But you are definitely much closer to the point where performance becomes problematic than you start at with a faster language, so you need to be that much more vigilant. People who are lulled into a false sense of security by the idea that the database is always the bottleneck can get blindsided by performance issues in their app.

I think the meme overall is damaging. It's not true enough to make it a core, unquestioned assumption that you can rely on, and if it can't be that, then you might as well simply use the correct answer, which is to use a real profiler and look at the real data. I pretty much always through at least a basic profile pass at any code that isn't just brute scripting.