skysight-inc/HackerNews huggingface dataset:
> people seem to be cool when it's the USA doing it.

People like who?! As far as I'm aware most sentient people in the world are utterly depressed by the USA's arrogance and hypocrisy.
been working with AWS Cloud Development Kit for a few months and published a blog post documenting the experience. tldr: CDK is like having cake and eating it too and i'm afraid i can never go back.

if you used the cdk, curious to hear about your experience in the comments :)
Complying with payment card industry (PCI DSS) requirements is an absolutely insane process, even if you're vaguely technically literate.

Obviously not saying payment processing isn't an incredibly important area to enforce good security practice. But it's a lonely place to be when you're attesting to hundreds of ridiculous requirements relating to your overpriced, off-the-shelf POS system and anything/anyone that touches it.

"Yes. Yes. Yes. Yes. Absolutely, yes." Cross fingers. Repeat annually.
Thanks a bunch for the detail, I'm pretty familiar with Gopher as a thing, just didn't realize it still had a sort of vintage hobbyist following and that brings me great joy to hear :)
Will Self-Driving Cars Turn People into Even Bigger Assholes?
All of the problems in the article are caused by corporations trying to maximise profit. This has turned you off developing for a decentralised platform and instead to one under complete control of one corporation.

This company also uses that control granted to it to:

- Force a cut of all payments through them

- Promote their own services and software above all else

- Ban protocols they don't approve of (The decentralised web never would have been made if Apple had their current dominance with their current strategies)

- Censor political views they don't agree with https://en.wikipedia.org/wiki/Censorship_by_Apple

For this corporate dominance the user cannot remove or modify anything they don't like about the app they're using (remove annoyances, make highly calculated addicting software less so, improve accessibility).
What do those acronyms stand for, PG, SA, etc?
Yes, you are correct. In other words, the relationship between temperature and quality is not linear, so directly using the temperature in a linear model gives wrong results. (To be pedantic, the probability will approach 1 as the temperature goes to infinity)
Actually, that made me think of a good idea. If the provider employees aren't aware of what's actually happening in this situation or just don't care, just write, "I didn't read this form" on the signature line and hand it back.

Have a good laugh when that document is presented to a judge.
Done before in a lab, sure. For a service aircraft the full-VR helmet and the lift fan are new, and while the B-2 is reportedly "compatible" with the F-35 data link functionality I can't find anything claiming clearly that that means it's been validated in the field.
I don't have time to watch that right now but I wonder if this has anything to do with Crostini on Chromebooks running Debian?
Use Dissenter, a version of Brave, with all the BAT support removed.

https://dissenter.com/
Nonsense. People do it all the time. No judge is going to think you’re an idiot for signing some meaningless waiver that millions of other people do.
Part of the opportunity cost being that you could have chosen a more effective treatment if the bar had been set higher. Difficult for patients to be able to correctly determine whether a treatment would actually be good for them. They're not in a good place to decide, for the same reason why lawyers should never represent themselves if possible.
Assange is riding the edge of what is considered permissible in society, where this line effectively divides the state and consolidated power, and the public.

These are matters of life and death for Assange, victims of the war crimes of which he's published, and future potential victims if journalistic freedom is further restricted and thus even less accountability for war criminals.

The Guardian has elected not to bring their clout and lawyers to bear on these matters. Instead, they sent Assange a basket of soap and socks for his extended stay in a foreign embassy.
Not saying this is right or proper... but if you are in the U.S. then this was almost certainly about corporate tax reporting. Your salary may or may not be deductible from the company's business tax, depending on whether your work is classified as an "operational" or "capital" expense.

Different companies are more or less zealous in how they collect documentation for these tax deductions. I've worked for companies where management just "handles it", and it's invisible to employees. I've worked for companies that not only make salaried employees log hours, but also do separate them by project code (with some codes being "operational" and other "capital").
I found the talk:
https://www.wallofsheep.com/blogs/news/list-of-packet-hackin...
https://twitter.com/ebrinkster/status/1028085975887429639

It doesn't look like it's on YouTube unfortunately.
Forget the bean counters, the technical people shouldn't approve of this without some sort of SLA or business agreement. How would you feel comfortable depending on a 3rd party service you have no actual business relationship or SLA guarantees with?

They're seriously leaving money on the table, businesses would have no problem dropping 50k/yr on a service like this.
You’re not wrong but...it’s exactly what they show in the video.
Edward Snowden released incredible evidence of fourth amendment violations, making him an absolute hero in my book.

Assange, in all his years, never actually released anything on the U.S. government that I found to be damning or evidence of illegality. I don't think he did any good by leaking that Iraq war video, the embassy cables, or CIA tools.

I went from being ambivalent about Assange to thinking he was a terrible person based on his incredible dishonesty regarding the Clinton emails. I had no problem with the leaking of her emails itself.

He, like some kind of weasel lawyer, claimed that he did not receive the emails "from a state actor" and directly implied that they came from Seth Rich. He intentionally mislead a lot of very naive people.

The fact is that they almost certainly came through an intermediary of a Russian state actor and almost certainly did not come from Seth Rich.

So me disliking him has nothing to do with politics. I would have found him just as much of a dishonest weasel had Trump been the target instead of Clinton.

And yet I still think the First Amendment should protect him because I believe American freedoms should remain extremely broad.
did that same thing once, and discovered that they had swapped the numbers for the interest rate and the term, so it was specified as a 4 year mortgage at 30% interest. Ouch!

The closing agent told me to just sign it and they'd fix it in an amendment later. Which I flatly refused to do - no f'ing way I'm signing on for $20k/month payments and hoping they fix it real soon now, especially when the fix is printing off one corrected page.
> like hitting newborn baby brother

We ran into this problem. Our oldest would just hit him again 5 minutes after the timeout. It got to the point where she would hit him, say "timeout!" and go to her timeout spot. She hated the timeout (she cried during it), but she decided it was worth it.

She basically took every chance she could to hurt him. If she was walking by him, she would purposefully step on his fingers. Or hip check him. Or smack him on top of his head.

We tried pretty much everything, and nothing worked. Ultimately she grew out of the behavior after about 8 months.
I can imagine it would be easier to be compatible with existing systems that businesses are using.
With mobile maturity comes the long tail of apps
looks cool. heavily github-inspired design.

i'd remove the "beta" tag from the navbar logo on log in/sign up.
The difference being apps are actually pointing to the packages in realtime. If the CDN falls the app stops working.
I think generally in society we've accepted a structure in which the people with more power (e.g. higher in the org chart) are ostensibly responsible and accountable for the actions of those under them. This is largely the same concept. I do not understand how you expect to have a functional, just, and free society based solely on individual accountability if you can just externalize human suffering and stash it elsewhere
I've often found JS-based presentations even cooler than Prezi. There're many examples, one which I like is: https://impress.js.org

Although, the creation UX is more tailored to programmers than people who don't code.
For an equality operation, all bits are meaningful, as there are input configurations in which any bit can lead to a change in output.

However, I do see your point in that whether a bit flip in input leads to a change in output depends on the particular input. My counter to that is that it is not the specific input, but the potential inputs that matter.
All those crap papers that people write just to get PHD should vanish.

On the other hand how much science went into SpaceX and reusable rockets? How much science is in chemistry to get new drugs because there are tons of people who would pay for that. Somehow LHC got funded and it was not cheap.

In past inventors were guys that had too much free time and too much money.
Yeah, 26 minute turnaround for coffee is pretty damn shit, even by starbucks standards, but I expect the novelty of getting coffee delivered is sufficient to keep something this ridiculous on the market.
I actual quite enjoy the music but the "pyramidtracks.com" voice kept me from listening and browsing the site.
It makes the mistake of assuming, as the letter writer does, that the purpose of the foia system is to reply to requests in an accurate and timely manner, rather than to bury them in red tape.
>I would like open source to be a viable model for projects run without maintainers needing to be independently wealthy or full time employed elsewhere. This article is pouting out that we’re a long ways off.

You can somewhat get there by purchasing the source code to closed-source products and then open-sourcing it.
The most interesting part (IMHO) of the post addressed Github, a multi-billion dollar acquisition on the backs of the open source contributors whose primary beneficiaries never seemed to give even a small portion of the profits back to the community.

If there are other people figuring out how to exploit the tendencies of open source developers, certainly it's fair to discuss how said developers can see a bit of those resources. Especially when the big winners aren't even considering giving back in a serious manner.
>> Do you try to rebuild/force roll out a proprietary, non-interoperable telecommunications system?

Honestly can see that happening. It's happened in the past for economic reasons, no reason why a government wouldn't force it for political reasons. It would be a natural progression from filtering.
I agree, nobody in their right mind would audit every such expense.

But he isn't being asked to sign that expenses are "essential or too trivial to audit" he has to sign that all expenses are essential.
Well, there is a difference. First, that certain argument (malformed certificate) was not randomly encountered, it was specifically constructed to trigger the vulnerability (Was reverse-engineering involved? I don't know). Second, this bug report not only discloses the fact that the vulnerability exists, but also provides a working example for any script-kiddie to use as an exploit. Third, the bug was not privately disclosed to software vendor, but was released to the public.
From https://security.stackexchange.com/questions/22973/if-i-find... it seems that would be criminal in UK or Germany, no idea what could've happen in US. On one hand, you have First Amendment, on other hand, there is an EULA.
I don't think $100 can really be considered a major roadblock to any technology professional capable of doing a standardized implementation...
Yeah, I used the Github design system called Primer for most of my views, I like the simplicity of it and it feels natural since I spend so much time in Github. And that's probably a good idea, thanks!
Prosecutors Are Shaping Privacy Law
I agree it doesn't need to be, and the Internet has really helped people get some of the benefits of these clusters without the disruption of uprooting their lives.

At the same time, we are physical beings, and there's nothing quite like the experience of sharing a space with people into what you're into.
I just started doing this last week, it has saved us from so many breakdowns.
This is the start of the standards process. Intent to implement does not mean intent to ship, only that an engineer want to start writing some code. It's the public signal that the team is interested enough in this idea to prototype into the Chromium codebase, but it will be behind a flag.

The standardization process will undoubtedly change the shape of the thing altogether, or it could not even make it into the HTML spec.
A good argument against government funded R&D is that several of our modern medical challenges have been deeply embroiled in political debates.

AIDS/HIV(originaly called GRID) was originally considered a punishment for gay men who were seen in the 80's as being immoral and sinful by the establishment. Government-funded R&D for AIDS drugs would have been unlikely for decades.

Another example is hormonal birth control. Birth control in general is a huge political football with portions of the establishment wanting no access to birth control at all. If R&D were government funded it's possible for these people to prevent access simply by making funding of certain lines of research illegal.

I think you have to look beyond the price of treatment to really see the benefit of a healthy private enterprise here. There are still a ton of ways that government contributes to new treatments, like grant funding for basic research and development. But I can see your proposed future becoming a dystopia, where whoever is in power in government makes it illegal to sell certain patented drugs to their particular underclass of the week.
You are not being downvoted for questioning vaccines generally. You are being downvoted for specifically suggesting something that has already been done and is continuing to be done already.
Also has lovely requirements like having antivirus installed on your Linux servers.
“Politicians need religion even more than a hermit in retreat. If a hermit acts out of bad motivation, he harms no one but himself. But if someone who can directly influence the whole of society acts with bad motivation, then a great number of people will be adversely affected.”

The day I discovered this quote was a rather striking moment. I find it continues to be relevant. Especially when one considers the demagoguery and celeb - I don't just mean TV, note how certain politicians/bootlickers are treated right now - worship that we are effectively replacing establishment religion.

Also important to note that they both use religion. Who puts money in the tithe plate? Not the megachurch preacher. I am a former christian and I struggle to see many differences between a preacher and a politician. Especially celebrity evangelists.
Tesla has been working with Puerto Rico quite a bit on this exact thing:

https://electrek.co/2018/06/03/tesla-energy-storage-projects...

https://electrek.co/2018/04/18/tesla-powerwall-powerpack-pue...
Microservices and Big Data Are a Must for Java Developers in 2019
Depends on the goals of the contractor. They might concede to some crazy agreements to be able to list a big name company or a high profile project on their work history to get higher paying work in the future.
Vitamin D is the missing link you forgot.

The tradeoff is vitamin d (+ nitric oxide) versus UV damage
IP over HAM radio is one possibility.

https://en.wikipedia.org/wiki/AMPRNet

This is a kind of thing that decentralized network protocols are good at. I could see a matured Telehash used here, or something like it.

http://telehash.org/
2 awesome tools in one day! Thank you for sharing. 10/10 will use.
> Was C ever really named "C" with the quotes?

No, it wasn't, but it gets called that often enough for me to have made a joke about it.
This is exciting to hear, hope to see it soon :)
AFAIK he's earned his own money by doing talks and receiving donations from supporters, etc not from the Russian government.

And Snowden has never mislead anyone about why he's in Russia. He's said that he would love to come home. And if U.S. whistleblower protections was stronger he could.

Snowden was openly revealing violations of the U.S. constitution.

Assange was covertly acting as an agent of a hostile foreign government with the intention of interfering in U.S. domestic politics.

There is no comparison between these two, at all.
> Apple platforms never were big C fans.

Ah, but were they "C" fans?

Never mind. My joke apparently went over everyone's head.
This has always been my opinion. Plus, I've found them ripe with anti-patterns that contradict what they actual iso standards stand for.
> In cryptography the term "constant time" is sometimes used to mean a different concept, that the operation actually takes constant non-varying time, so that an attacker can't exploit this as a side channel to figure out the input values.

Note that I cited Thomas Pornin for my definition of constant time cryptography, who is a cryptographer in theory and implementation. It is emphatically not necessary for software to run with unvarying execution time in order for it to be "constant time" according to the cryptographic sense of the term. This will be a poor hill for you to die on, but I invite you to provide literature supporting your alternative definition.
Because it reflects a misunderstanding. People say "Boris's bike" not "Boris' bike". They typically omit the possessive s when they mistake the existing s for a possessive. Like in Bayes.
I like leaks and I still like the concept of Wikileaks. I just wish they were less discriminatory about how and what they posted. Honestly, I'd prefer that there wouldn't be a curation staff at all (or at least not one that blocks posts before they're published) and that anything could be published that they could take down if they found it to be spam/meaningless.

Honestly, I don't even have a problem with the stuff against Hillary either. They were doing bad things and got caught.
That's why each level of management, and the individual contributor as well, should have their own levels of certification. I can self-certify, say, $50 as essential. My manager can certify $5000, the director might do $50K, and so on.
Collective bargaining, indeed! A union is merely this formalised.
Do you get the ACL from Zanzibar to your data store using a watch?

I'm just confirming that replication is the best strategy and there's not some magic that I'm not aware of
Ask HN: GDPR for Deceased Persons
I am hosting a website for a funeral parlor. There's a part of the site dedicated to obituaries, where the names of the deceased are fully accessible.

IANAL so I was wondering if it can be a problem regarding GPDR as the deceased clearly didn't give any consent, but won't complain (obviously).

I'm not really concerned as I just host it (and all is encrypted on my side) and, to be honest, it's a small company very local.

But yet, the question hit me so if someone as an answer, thanks.
- cause all your F-35s to fall out of sky everywhere in the world when the GPS satellites transmit an extra 64-bit coded message that cause fuel actuators to shut off

This is very close to a plot point from Battlestar galactica (2004). I don't know of a way off the top of my head to detect back doors other than manually reviewing code.

A large company which has a database of many back doors might be able to train an AI to find them. I'm going to guess that someone, somewhere is trying to do this, somehow.
That's roughly one journalist killed every 5 days..
What makes this so surprising is the individual risks these people take.

By comparison on average 1,300 truckers die in the US each year out of 3.5 million making it far more dangerous on average. However, that’s spread fairly evenly with only a tiny fraction of journalists entering war zones etc.
That's really interesting, given that GIMP was originally the "G" in GTK. I would have naively expected GIMP to be a GTK 3 early adopter.
Having worked closely with FDA, I've been very impressed by the people there and how thoughtful they are despite the pressure they're under and the almost complete lack of good software tooling due to the sensitivity, regulatory requirements, and complexity and specialization of the data. Most of the medical officers there could easily be a very successful (and much higher paid) private physician or a pharma researcher somewhere but choose to remain at FDA.

On one point people are making specifically -- unlinking safety with efficacy is really tough -- an immunooncology product that causes serious AEs/hospitalizations in a quarter of the population and costs $250k and only extends life by 6 months may be approved because the alternative is almost certain mortality; whereas another drug may not be approved simply because it increases bleeding risk in a small percentage of people because there are good alternatives already.
There is a funny Simpsons scene where Marge and Homer don't fight in front of Lisa and Bart. Instead they go into the car and argue/fight, because they thought that fighting in front of the kids would be bad.

Instead of protecting them from it, the kids started to freak out whenever the parents went to the car.

The moral is: you can't protect your kids from anything, and overthinking it rarely works. There is no such thing as perfect parenting where you protect your kid from all problems. Just do your best and things will work out.
Deca: The first decentralized carbon credits backlog
Exactly. People tend to overstate the importance of spurious, surprising findings that don't make scientific sense. Some of these may lead to breakthroughs, sure. But the overwhelming majority are just noise. And it takes experts to decide which are worth investigating. To wit, anti-vaxers love subgroup analysis without supporting scientific logic (ie more autism in this population of 5 boys from the study).

I'd hate to see old, frail people getting Etanercept (an immunomodulator) to prevent Alzhemier's based on very questionable evidence when all they really get are the costs (increased risk of serious infections leading to death-- an FDA black box warning).
How do maintain the "love" once you scale? I imagine most early adopters love that you're doing things that don't scale. If I'm able to talk to the developers themselves, I'm stunned and adore you. Once that communication goes away, my love is fleeting.
I hope my post ends up being helpful! Here are a few others I've written about parenting that might be interesting:

* https://www.jefftk.com/p/equal-parenting-advice-for-dads

* https://www.jefftk.com/p/parenting-optional-vs-required

* https://www.jefftk.com/p/street-training
Wow! Thanks for the history. I remember Polly The Parrot - I think as part of an early MP3 player.
I've tried this route both with my day job and a side project, and i am consistently blown away by the premium users put on "a real app" -- ostensibly just an icon they can put on their home screen. (Safari's "Add to home screen" feature doesn't count.)

Even my gf told me she would use my webapp way more if it were "an [iOS] app."
TBH I think IEEE is worse than ISO. After a fairly hefty yearly membership fee, they want you to pay for individual specs that other IEEE members created???

I needed to look at a 15+ year old IEEE spec, and thought "hey I'm a member, certainly I have access to it!". Nope. They wanted like $50 from a member. For a 15+ year old spec.

I let my membership lapse after that. Just couldn't figure out a way that it was worth $250+ year.
Fun fact, it costs hundreds of dollars, just to LOOK at some safety standards in medical devices, for example:

https://webstore.iec.ch/publication/2606