skysight-inc/HackerNews huggingface dataset:
I like how this thread is at least partly confirming that Facebook has been taken over by parents sharing minion memes and shit, and this explains why.

I mean no judgement here. If you can get your social jollies co-existing with dumb kids (the only ones that haven't migrated from Mom & Dad's new Minion meme deposit that facebook has become) and dumber parents pushing each other anti-vax propaganda- well all the more power to you I suppose.

Really though I think people are too cowardly to just ask each other to hang out in real life. I'm that way myself and miss social cues when people are asking me to hang out constantly. I guess I can see it working for that kind of mindset. Really though, easier to delete all that social media and shit. I'd recommend it. Not that I used facebook, but did use twitter and a few others for a while.

I'm on a continual mission to try to delete my HN account. But I don't think the Hacker News admins have the technical knowledge to understand what I mean by "add a delete button". It is a high level UX concept I know.

P.S. I assume this is the part where the offended parents will be all like "WELL IT MUST BE NICE TO HAVE ALL THAT TIME TO HANG OUT" and then I laugh at their facebook-idling asses.
People should not be downvoting this.

There's a weird impulse out there to try to pretend the limitations of static type-checking don't exist... namely, that it's static. That is, it's build-time checking and doesn't provide guarantees at runtime.

For tightly coupled systems were you control all tiers, you can stretch the value of static type checking by ensuring that changes to back, middle, and front all roll out together. But obviously, you're seriously limiting the scalability of your product and agility of your releases when you do this (you need a command-and-control dev communication structure). If you want static type checking to make guarantees beyond the local component, this is a major architectural commitment. To maximize the "guarantees" of static type-checking, it will affect the topology of your entire product, including the release process. (How much downtime is acceptable per release? What limitations are you willing to accept in terms of distributed scalability? Is it acceptable that user sessions become invalid for a release and how will you handle the UX for this?)

Not saying you shouldn't do it, but go in with your eyes open.

Now, static tools certainly have their uses. But:

(1) type-checking is just one limited case. e.g., go get eslint, turn on almost all the rules, and work with that for a few weeks. After you get over the initial shock, you'll get a lot of benefit from from it and it will last for years.

(2) it doesn't help you with anything external to the source file that's not tightly coupled through some additional control mechanism. (Note that you pay a price for control mechanisms.) So, it's a small solution to small problems. Quite nice. But limited without paying an additional price, which may be quite expensive depending on the other goals of your system.

I don't agree with the previous poster's assertion that it's a useless hack. But I understand why one might feel that way. The utility of static type-checking seems to be greatly oversold.
It's in a locked box.

And I'm not too concerned about someone breaking my phone security, and then the TOTP app security to get at my second factor. If I'm being targeted that hard they're probably just planning to kidnap me and hit me over the head till I login to my accounts anyway.
What I’m saying is untrue is the notion that weight loss is as simple as a calorie deficit and tracking calories. It’s not that simple because some calories make staying in a deficit much harder.

The point is that saying that fat loss is as simple as calories in, calories out is unhelpful and not really true.

Also the whole point of losing weight is to be healthy. If you lost weight eating twinkies you might be skinnier but you are going to have a whole host of other health problems like high blood pressure, cancer, and heart disease.
I think they did that because of how well it worked for GMail. And Facebook was restricted too in the beginning. Obviously, Google+ didn't benefit from following the precedents set by other successful launches.
All those examples in your last paragraph should be accounted for in data modeling and in the domain logic. Saying a type checking tool somehow prevents this from happening is asinine.
This article was a bit infuriating-- not because of what the techniques are, but why they were presented. Here's an analysis at https://algodaily.com/lessons/how-to-consume-books-in-whatev...
I see what you're saying. In any healthy economy though, there are going to be some people who make investments that lose money. That money gets redistributed to the workers they employ and circulates out through the rest of the economy. We need people to risk money in order to have the economy function. Necessarily some of those risks won't work out, but this should not be an existential threat to the economy as a whole.

A house, especially a luxury house, should be considered a purchase and not a store of value. The actual physical materials of the house only depreciate over time. Sometimes the underlying land can go up in value if it's in a desirable area, but that's not the case here.
G2 Reviews
I wrote about 10 reviews for them. I was paid for 8. Then they started to criticize the reviews as not good enough and even following their rules to fix them never led to a successful approval. But those were on Microsoft Word, Excel, etc. But I did get paid for the initial $10, and a few $5 ones, then they stopped paying.
What constitutes a defense contractor to you and I are obviously different, but I don't hold that it is a matter of opinion or interpretation. If you've been awarded a defense contract, you are a defense contractor.
> It refers to networking equipment fingerprinting the traffic to detect application/protocol information (basically anything in the OSI model lower than layer3/4)

Right, so then is your claim that there _is_ such information revealed in WireGuard? Because I don't see any.

If you do DPI for - say - TLS you get a strong fingerprint (JA3 is a popular thing for this) that lets you distinguish Google from Twitter, Firefox from Safari, or curl from Python's Requests, again without decrypting the traffic.

But where is the fingerprint in WireGuard? If I give you a tcpdump for 5 minutes of UDP traffic the most you can say is that some of it looks like WireGuard traffic. You might remember when we used to get this sort of useless diagnostic, "Over 4000 of these packets use port 80! This is web traffic". We did not call that "Deep Packet Inspection" because it wasn't deep and didn't in fact inspect the packets, just some metadata.
Anyone know where to find an inter-thread latency benchmark comparison?
Environmental Pollution Agency
How can you separate necessary security upgrades out from the $18m? $100k wouldn't be enough to maintain a single critial app securely for more than a couple of years.

If you're running a bunch of critical services you need to secure them, and that takes millions every year, it's unavoidable. A single hack that exposes this is irrelevant
I still don't get it. You can also add rigorous schema validation to your API endpoints with plain JS so you don't need to worry about strange inputs in your tests either. This is not unique to TS.
Fiction, among other things, is about learning empathy, multiple viewpoints and moral frameworks, and interiority. Some say, by the end of a good fiction work, you will know the protagonist more than you know anyone in your life because you will never have that level of access to another person's consciousness. These points, of course, aren't exclusive to fiction. But, fiction is exceptionally good at them. When I hear someone say they read only non-fiction, more often than not, they reveal an impoverished imagination.
Is there a list of Google services somewhere? I'm always astonished at how I only hear of SOO many of their services only in their obituary.
By that reasoning (which I mostly agree with) making it cheaper to build great experiences is a good thing to do.
If memory serves, the logic to drive the Touch Bar is something that came from the Watch, which also included the Secure Enclave and other features that were more mobile than desktop. If that was true, then you can't trust the USB cable alone (or Bluetooth) to maintain the trust that circuit needs, and a keyboard with a Touch Bar would require a new circuit or at least design change to only do the display part, not the rest. It makes sense they won't put it in standalone keyboards just yet.
I think you can only get 4 down votes... Is it still faded? It has over 20 votes now.

I have bumped into dang a at least once, so I would not be surprised if you were not right.

While I feel like I try to make my points clear on a topic and leave room for discussion, I do find that some topics HN is simply not ready to have open honest conversations about. While I don't want to enforce a echo chamber and often play the delves advocate, I do try to respect the decisions and rules this site has set.
This issue isn’t specific to Docker. Your tags should always be immutable.
This nails the issue. It's why flaming hot Cheetos were successful but Dulce de Leche weren't.

Don't make something meant to be something else explicitly. Make something that has the same meaning (or in this case flavor) as something else but make it its own thing for its own sake.
> They later tell us they believed that datacentre was introducing the corruption

What now? Their datacentre was ... rewriting (presumably) encrypted packets?
I was wondering the same thing.. I understand that there are some additional features, but what is keeping Tesla from providing those features in a future app update? This is a cool product, but I wonder about the ability of it to compete with the official app, especially when they are relying on Tesla's API.
46 million bills were in circulation for 8 months before the first person even noticed the typo, so probably not, no.

I've been a cashier, and trust me, we had more important things to do than examine bills with a magnifying glass looking for spelling errors. If a bill seemed suspicious at a quick glance, I swiped it with the counterfeit detector pen, and if it came out fine, I shrugged and put it in the register.
For me the Eureka moment with Common Lisp came when I read 'The Art of the Meta Object Protocol' (Kiczales) [1], which made me rethink OOP, the power of macro's and the power of Lisp.

Lisp is an extremely fundamental and deep language, but although it is conceptually interesting, I find it rather unpractical. A language needs some syntactic structure to help in pattern matching.

We read code more like a map than a book: scanning, skipping between files, functions and expressions. And, like a good map, it should guide our eyes: highways and byways are differently coloured and a quick glance tells us whether we are seeing a forest or a city. Code should be similar and due to the syntax of LISP, we have little to no guidance on what we are scanning, except by manually reading the code.

I don't think Lisp is the only language suffering from this. There are similar problems at the deeper end of the functional programming scene: we have to read map, flatMap, fold, apply, etc. in order to make sense of the code. We cannot 'scan' the code to understand its structure. It does not help that, for a syntax highlighter, these methods all get the same formatting.

The solution? Personally, I think we should seriously consider enhancing our editors to project our code based on the type-classes it participates in to enhance guidance.

[1] https://en.wikipedia.org/wiki/The_Art_of_the_Metaobject_Prot...
> "Over 4000 of these packets use port 80! This is web traffic". We did not call that "Deep Packet Inspection"

The right analogy is "these packets went through these tubes".
How Google is building a browser monopoly [video]
The Analyst Has Built a Model to Determine the Maximums of Bitcoin
The difference is that YouTube makes money on ads on pirated content. Newspapers can't do that. They'd get in trouble.
The "Non-organic growth" section covers Google+'s biggest sin for me. They unilaterally created G+ profiles for everybody with a Gmail account with no prior warning, and with no opt out.

Because of this, my Gmail contacts could see the comments I'd made on Youtube videos because it was front and center of their G+ profile page, which I recall popping up when you logged into Gmail. Prior to this, there would have been no organic way for them to discover my comments other than randomly coming across a video I'd watched and commented on.

Now, I don't post anything objectionable on YT comments (it is attached to my primary Gmail after all), but I wanted to keep my YT experience separate from people on my Gmail list. G+ took that away in one fell swoop.
Are we ignoring the fact that it's called Ass Ride?
The Functor Combinatorpedia
https://www.hackerrank.com/ and https://www.hackerearth.com provides good track guides to begin with.

https://www.codeforces.com, https://www.codechef.com/, https://www.topcoder.com/ (even if in my opinion, this last one is becoming worse and worse) provides good problems and contests to apply and discover new ideas.

And if you're even more motivated, upsolving previous contests problems.
Codechef long contests are really interesting for this: after thinking a lot about these problems during more than 1 week, reading the editorial and trying to apply by yourself the idea seems to me an excellent way to learn.
Show HN: AstronomyEngine – open-source libraries for astronomical calculating
> Man the folks at Intel must feel the heat.

Well, their processors are very effective space heaters, so yeah.
What I learnt as a football (soccer) coach for U12 kids
Sidecar adds a Touch Bar on the iPad to all Macs that support Sidecar.
Companies are always trying to replace email. I’ve read this story over and over. What they all have in common is that none succeeded.
Hah, never thought of it that way. We obviously mean search for business, as in, you search for new business - and you can search for businesses, and that it's meant for business users and usage: b2b. Sales, business development, marketing, market research etc.

We choose to focus on companies to have a manageable dataset to start with. There are over 200.000.000 websites in our database but we try and filter out all the noise, saving the searchers time.

A search engine for business :) How would you phrase it?
The main problem I have with TOTP (What you're using when you use Google Authenticator) is that the migration path doesn't exist when you get a new phone. This article complains that users are trying to mitigate this problem, but doesn't seem to give any solutions.

It's entirely plausible you might have 20 accounts set up using TOTP on your phone.

If you now buy a new phone (which users might be doing once every 18-24 months), you need to log into each account and generate a new TOTP key and void the old. That's a couple of hours work.

Now, what if you lose your phone?

You now have to recover 20 accounts, which will take several days, and it's very possible you won't be able to recover at least one.

The common response is "Oh, you should keep one-time keys somewhere". Right, 20 * 10 one-time keys in a single centralised location, and make sure to update them to keep them valid. I thought we were trying to stop people writing their passwords down and storing them next to their computer?

Edit: I'm not sure "treat your TOTP keys like passwords and store them" is setting a very good example. Why are we developing systems that use TOTP if we are encouraging users to treat them like passwords, undoing the vast majority of the security benefit?
How Bridge Rounds Work in Venture Capital: Messy, Full of Drama, Not with O Risk
Except that YouTube doesn't have to pay to produce content so profit is easy at other's expense.
Just use a VM with an old version of Ubuntu is not a solution.
This is a public service, aren't the voters responsible? They could have voted in competent leaders.
It's used exclusively inside the Gateway's infrastructure. They're a mix of Java and Erlang but I'm not sure on the proportion.

FPS uses ISO8583 for its messaging format, and I suspect at the edge the Gateway translates it to a BERT blob for passing around internally.
In a backhanded way, neither do I.

When Google Reader died, it reminded me not to become dependent on other peoples' computers. I had gotten lazy and was attracted to a well done tool, and it dying was a helpful reminder that I'd been suckered, and was lucky it wasn't something more important.

I've been better at not making that mistake since.
Paper towel dispenser with end-user license agreement is a special kind of hell
The software bug at the heart of the problem:

The bug was in a computer program the Gateway uses to translate payment messages between two formats. When the program was operating under load, the system tried to clear memory it believed to be unused (a process known as garbage collection).

But because it was using an unsafe method to access memory, the code ended up reading memory that had already been cleared away, causing it not to know how to translate the date field in payment messages.

So apparently a dangling reference.
The IPC is almost identical. The biggest difference will be the maximum clockspeed. Overclocked Intel CPUs can easily reach 5GHz but AMD CPUs usually are between 4.4 to 4.7.Ghz which still is a 10% difference.
I've never considered #9 (global namespace) until yesterday, but it seems like a show stopper for dynamic web components, whereas a system like React has components simply being JavaScript objects that can be imported and whose name is largely irrelevant except at JSX (or HTM[1]) parsing time.

[1] https://www.pika.dev/packages/htm
Using Floating-Point Scalar Evolution to Simplify Instructions
I see the long discussion about micro-managing, but allow me to suggest that addressing that employee’s problem may not micro-managing at all. Micro-managing would be saying something if you ever saw Facebook on their screen even once, and doing it every time. But seeing a clear pattern, and feeling that their behavior is being noticed by all and affecting team morale, that is a real problem that needs to be addressed, and it’s not micro-managing to try and fix it.

In addition to the GP’s great list, good managers also tackle problems when they see them, immediately. Don’t let something slide because it’s awkward! Do attempt to fix the problem the first time without blaming or shaming the employee. You can save that for the second warning if the person doesn’t respond by fixing their behavior.

Here are a couple of ideas:

- Make sure that you or your company have set clear enough guidelines in the first place. Clearly the employee doesn’t think what he’s doing is wrong, therefore it might be a failure to set expectations for work time. Find out or decide what they are and say them in a way that makes clear that hours on social media while at work isn’t part of the deal for getting paid.

- Ask the employee to define what is a normal amount of social network time while at work, and then ask them to track their own time using a time tracking app. They might not be aware of how much time they’re spending. You could even ask the whole team to do it, but I would recommend not doing that as a way to avoid confronting the individual directly. The other people on your team won’t respect a move that affects them without directly dealing with the problem.

- Rather than accuse the employee, ask them how they feel at work and find out if there’s a motivation problem. Maybe they feel stuck. Sometimes a problem like this is due to the person not feeling like they fit it, not having or understanding their identity or role in the team/company.
AI Ethics Boards Should Be Based on Human Rights
GMail's time was different, there was a lot less competition among web services back then.
Gmail's invite only approach made sense because in 2004 it was absurd for anybody to offer 1GB of free storage. Hotmail offered 200MB I think.

Compared to that, nobody cared about a Facebook ripoff with a different UI and none of the network effects.
"site's that work in older browsers or without JS"

I'm curious about this. A graph of say, what percentage of the top 500 websites can't run without JS, over time, would be interesting.

My assumption is that it's a non-trivial percentage, and growing.
Slack market cap predictions on Twitter
> If I would write an article about American culture

What culture?

> racist

We should go back to the original definition where it was reserved for people thinking themselves superior because of their ethnicity. Attributing racism to the author is a lie, Hans.
"It could be worse."

Yes, it always could be:

https://www.youtube.com/watch?v=9AFf0ysgNiM
> It's disturbing that so few people can see how useless it is. To me, it's extremely obvious.

I think this is probably the wrong kind of hubris.
Stack Overflow: We're testing advertisements across the network
There are services, like Authy, that let you back them up encrypted. Whether that is appropriate, when considering the security ramifications, is up to you. I, in the past, have printed out the QR codes and put them in a safe as backups.
Google engineer Steve Yegge said:

Google+ is a prime example of our complete failure to understand platforms from the very highest levels of executive leadership (hi Larry, Sergey, Eric, Vic, howdy howdy) down to the very lowest leaf workers (hey yo). We all don't get it. The Golden Rule of platforms is that you Eat Your Own Dogfood. The Google+ platform is a pathetic afterthought. We had no API at all at launch, and last I checked, we had one measly API call. One of the team members marched in and told me about it when they launched, and I asked: "So is it the Stalker API?" She got all glum and said "Yeah." I mean, I was joking, but no... the only API call we offer is to get someone's stream. So I guess the joke was on me.

The full Yegge rant is at: https://gist.github.com/chitchcock/1281611
Best Android Tips to Make Your Phone More Useful
We can take an educated guess...

https://status.form3.tech/incidents/wyhyxydxgh30
We still have IRC for those that choose to use it
Overclocked CPUs are not exactly a mass-market thing are they? I mean, outside of a few niches, does anyone bother?
Not really, adopting these apps is usually a modest investment on the users' part.
Which platform gives you unformatted data if a format can't be determined? Or was the code similar to getDate(format) and format happened to be null? Was the race condition in your code or in the platform? (EDIT: I suppose these would be questions more for the developers of the third-party gateway.)
As a sibling suggests, it's very easy to set up OpenVPN _badly_.

I have a config right now on my other PC labelled "Old staging KEEP" which is this type of setup for OpenVPN, it's relying on a crappy out-of-box private CA setup, no passwords, shared private keys, it's likely vulnerable to key compromise attacks and a dozen other problems as configured.

Edited to add: Also, the reason I kept it, this config relies on hijacking public addresses. Some... person... took an OpenVPN config example with 172.16.0.0/16 addresses and it conflicted with the stupid WiFi NAT in their office, so they just changed the IP addresses to a public range nearby, apparently not realising (certainly not caring) that this means it's now randomly breaking other things too.

But for the typical end user this looks like it worked. Random drive-bys can't get in, spinning it up for the new frontend dev is easy, what's not to like? If it takes them five minutes to install & configure OpenVPN wrong, and an hour to install & configure WireGuard right, they will conclude WireGuard is harder, even if it might have taken them a week to get OpenVPN done right.