skysight-inc/HackerNews huggingface dataset:
Someone described Poshmark as competitor to StitchFix or Rent the Runway, and that completely missed the mark on all the products.

Comparing StitchFix to Rent the Runway doesn't seem right either, as StitchFix doesn't loan you the clothes, you buy them. I have purchased three fixes from them so far. From what we can tell, its their own brands they sell.

Agreed, Poshmark doesn't have a clear statement of what it actually is on the landing page. My wife sells her old clothes on there, so I liken it to eBay as some have mentioned.

TL;DR
- Poshmark: eBay/Craigslist/OfferUp/LetGo for used clothes
- StitchFix: curated clothes (hand picked), subscription based
- Rent the Runway: rent clothes, allows for clothes to not collect dust in a closet
Most people couldn't give two shi*ts about the government monitoring their financial activity, in fact they would like their money to have some sort of regulation from the government. As far as bitcoin goes, it is completely controlled by very few entities, it in no way benefits the common man (just benefits a different oligarchy, one that is shadier).
Budget cutting is almost completely ineffective at fat cutting. If you want to cut fat you have to identify it first.
[0] from the researchers pdf:

• We designed a pipeline for automatically discovering vulnerabilities in the Android permissions system through
a combination of dynamic and static analysis, in effect
creating a scalable honeypot environment.

• We tested our pipeline on more than 88,000 apps and
discovered a number of vulnerabilities, which we responsibly disclosed. These apps were downloaded from the
U.S. Google Play Store and include popular apps from
all categories. We further describe the vulnerabilities in
detail, and measure the degree to which they are in active use, and thus pose a threat to users. We discovered
covert and side channels used in the wild that compromise both users’ location data and persistent identifers.

• We discovered companies getting the MAC addresses of
the connected WiFi base stations from the ARP cache.
This can be used as a surrogate for location data. We
found 5 apps exploiting this vulnerability and 5 with the
pertinent code to do so.

• We discovered Unity obtaining the device MAC address
using ioctl system calls. The MAC address can be
used to uniquely identify the device. We found 42 apps
exploiting this vulnerability and 12,408 apps with the
pertinent code to do so.

• We also discovered that third-party libraries provided
by two Chinese companies—Baidu and Salmonads—
independently make use of the SD card as a covert channel, so that when an app can read the phone’s IMEI, it
stores it for other apps that cannot. We found 159 apps
with the potential to exploit this covert channel and empirically found 13 apps doing so.

• We found one app that used picture metadata as a side
channel to access precise location information despite
not holding location permissions.

[0] https://www.ftc.gov/system/files/documents/public_events/141...
> - Communities use it to communicate with their groups. I'm in business owner groups, collectives, local theater group, and some gaming/social groups that aren't as active.

If only there were another technology one could use to distribute messages by electronic means from one computer user to one or more recipients via a network.
If they only paid my rent in company-owned housing, it would be pretty strange for me to say my employer pays for me house, no strings attached.
Population density has nothing to do with it. At it's founding, the constitution gives the Senate two votes per state, which is it's own legal entity.

There's a perceived culture war by people who live in rural america and your comment projecting it onto the purpose of the Senate is proof of that.
* typo: ClojureScript is a subset

It is also a success, on the other hand. It's a good alternative to Javascript.

We also have a subset of Common Lisp that can be statically compiled to javascript: Parenscript. And a subset of CL that runs on the browser as a lisp implementation: JSCL.
>I can't say which way causality flows

In my personal experience, it flows both ways. It's a positive feedback loop. When I'm productive, I'm happier, even if being productive means meditating or practicing mindfulness (as long as the dread that comes with "wasting time" is not there, all good), and when I'm happier, I can be more productive. The hard part, for me, was getting the loop started, pushing the rock down the mountain, so to say, getting past the first hurdles of procrastination. What helped me was getting professional help and medicine, but I was a pretty bad case.

An analogy I have used to describe this to family before was an internal combustion engine. Normally, once you get an engine started and keep supplying it with fuel, it'll keep generating everything else it needs to keep running. But it still needs a battery and a starter motor to get it running in the first place. Sometimes just getting it running is good enough, and most engines start with one crank, but other times, something is not quite right and it takes a couple of cranks and maybe some starter fluid to get it started. Even once you get it started, maybe the alternator is faulty, so until you get that fixed, you have to keep supplying electricity some other way to keep it running.
I agree, but my point wasn't about the erlang module specifically. Maybe :ets would have been a better example.

At one point I suggested in the forums that, inspired by how Elixir understands [foo: bar] as equivalent to [{:foo, bar}], maybe it could allow foo:bar() as equivalent to :foo.bar(). That would make the syntax exactly like Erlang's, which would be pretty nice to signal "I'm calling an Erlang function here".

I still think it's a good idea, but it wasn't met with a lot of enthusiasm :)
Younger and on the coast. West of I95 and East of I5 you'll find plenty of young people who may find certain social policy points dated but generally agree with republican ideas.

Actually, there was an article on the front page earlier today talking about this phenomenon (social filter bubbles) but it's long gone because everyone was complaining it was a dupe. Go figure.
I'm reading Middlemarch, a well-regarded novel about life in 1820s-30s England. What has stood out is how things are basically no different than they are now.

This is not a technology or advancement issue, it is about our society's values. One of the characters, the rich banker, is described over and over as being able to justify in himself that he disagrees with. That is being a human, that is the source of these types of challenges. "I want it because... I want it, and if I have the means then why wouldn't I take it?"
If you have a facebook login active then facebook is still tracking you and able to advertise to you, so you are using facebook for the only things they care about. You are still generating content (your web traffic via like buttons) and revenue (via ads).
The Windows 10 misinformation machine fires up again
I urge you to listen to Aggaloch Falling Snow and Limbs. Listen with an open mind. It's very atmospheric. In another genre is Field Divisions Modest Mountains.
> Many of them are illegal.

No they aren't. Point me to a law stating that any of those are illegal besides the "revenge porn" example that I outlined.

> If it's illegal, then it's no longer protected by the principle of Free Speech

So are you saying that anything the government deems illegal doesn't fall under the "principle of Free Speech"?

> No. Ethically, that would be wrong

Sorry, I'm not understand what you mean here. Are you saying it would be ethically wrong to delete comments from your personal blog? I'm not being snarky, just not sure if you're referring to something else when you say "ethically wrong".
Yeah, recent versions of TLS don't specify a "null" cipher any more.

One of the reasons I think we should allow encryption over ham links is that you can't run normal internet protocols - you have to do significant code changes/hacking to make things work. The internet community has decided (for reasons of national security, even!) that it's just not worth having the option.
Yup, I'm sure of it too. I don't get these guys who keep claiming this Tether fakenews.
The contention between these two schools of thought seems to elude to a bigger problem that right now both options kinda suck.

The old old school mode of serving static HTML pages is totally fine. I have basically no issue with it. You can't do very much but if your site is a series of interlinked but self-contained documents then it's the gold standard. Once you start having a lot of dynamic content there's a lot of waste since each page is it's own little application.

The 'classic' model of multi-page web design which boils down to templating HTML pages is awful. Truly ungodly awful. I don't care how many layers of DSL you pile on top of it to make it feel less like you're building an application with C preprocessor macros it doesn't make it any better or less brittle.

The SPA model is "more correct" way to do dynamic content since we're back to serving static pages but still ends up terrible since now every single page has emulate browser semantics poorly and deal with the nightmare that is using the browser as a rendering target.

There's got to be some middle ground. I want the browser to be my application router. Give be a site-global place to stick my JS send me an event with what page I need to render.
Surely a next-gen labor union based in the tech industry could find a new way to fight ageism without mandating a seniority system. Why does tech have to act the same way as before? I thought we were supposed to be innovators?
Ask HN: Best Options to Start Internal Security Team(s)?
Here's the situation; I work for a company and within the last month we got informed that the product I work on will no longer get exemptions for deviations from the security policy. So now my manager and their manager are canvasing for ideas on how to address this, with the end result of putting together a team to start ensuring strict adherence to the security policy. Management wants to start doing pen testing, code analysis, threat modeling, etc.

I advocated to hire an outside firm because obviously that'd be their specialty but that fell on deaf ears, because money. It'd be "cheaper" to do it in-house instead of out-sourcing it. I responded that sure in the short-term that's true, but a thrown together internal team will have nowhere near the skills an outside firm does and it'll only be cheaper until a security flaw is exploited. But alas, I don't sign the checks so an internal team it is then.

I'm under no illusion that I have these skills and I'm aware that other engineers get degrees in this field, so there isn't going to be a "here you go, this is everything you need!" answer. I'm mostly looking for enough information for it to be "good enough" (I know not the best philosophy when it comes to security, but you can only do so much right?).

#1 - Are there any tools that we can use to help automate some of this? I've used WireShark in my work to do packet traces for debugging and I've played around with Kali Linux awhile a go in my free time.

#2 - What resources would you suggest we investigate to help this internal team learn the concepts and methodologies?

I'm trying to get as much of a head start on this as possible, even it it amounts to hey we should check out these technologies. I want our platform to be as secure as possible for our end users.
That's not the germane point. There are applications dating back over 30 years written for X11. Thousands upon thousands of them. Compatibility matters.

Wayland may turn out to be a flash in the pan. Those applications aren't going away. I have many open source and proprietary applications which I fully intend to carry on using. They don't, and won't, support Wayland.

Unless you're using a modern toolkit which will be modified to support Wayland, you're not going to be using Wayland in a hurry. Because you'll be tied into the X11 world.
For me personally, I think it's the fact that Bitcoin and especially other cryptos, are far far less secure than people think from attacks. The amount of money you need to move the market or execute at 51% attack (https://www.crypto51.app/) especially if you are working with other large investors is trivial. For a group that loves independence from "big banks" and "Fiat" and the democratization of money, they seem to miss out that they are constantly being manipulated by rich coin holders.
Hyperledger can be useful, more in the non-tech sense, but then the cryptokiddies get all irate, lol, part of the fun.

HN tends to shun Blockchain because it has a non trivial amount of fraud and amature hour to it... IMHO. Too much focus on the marginally useful tech, and not enough on the outcomes (i.e. CO2 from mining) and solving real problems. Too much neolib. Forgetting no one really wants their finances made public to the world.
Precariat
Facebook has some utility if you're running a business or if you've found a really nice group of people on it, but I personally found it to be total trash and it's been at least 6 months since my profile was deleted. (yes, I know, Zuck still has backups and ML models trained on it)

I am so much more happier not being exposed to everyone thinking they're e-celebs, the back-patting, virtue signalling, constant outrage, pseudoscience, and all of that. I thought I'd be missing out on a lot by not being on Facebook, but people haven't forgotten me and now there's so much more to talk about when I actually meet people in person.

A private life is one of healthy solitude.
Countdown to Quantum Computing Winter
Absolutely. I investigated some new condos last year but either they have pitiful area, or low quality materials. Much worse than the older ones (but the older ones have higher condo fees)
One of these "You probably don't need [popular technology x]" articles comes out pretty often now. I understand what the message is (don't use tech just because it's popular, but pick the right tool for the job). But I always wondered why these types of articles are titled to be dismissive ("you probably don't need x") rather than representative of their actual content ("here's when to use x").
Maybe nobody is stepping up because they have no reason to do so and nobody even asked for anyone to do so? If the message was "hey, we want to stop working on Xorg and move to Wayland, is anyone interested in taking over?" instead of "Xorg is dead, we wont work on it, nobody will work on it, ever" then perhaps some people would show up?

Besides, even though i am not interested in taking over Xorg, if something breaks on it i'm more likely to look into fixing it than switching my environment to Wayland.
>People 'pay' by waiting.

Can you elaborate here?
GFI outlets are $15+, and normal outlets are $2. This adds up when you're building a house: a typical house has something on the order of 30-50 outlets, so you're looking at $400-$700 vs $60-$100. It might not seem like much in the grand scheme of things, especially to software engineers making lots of money, but if we had this approach not only for outlets, but also for everything else, building literally anything would cost 5 times as much (and in fact it does these days, to a large degree because we can afford spending 5 times as much on building).
Does iOS do anything to prevent this?
> Meanwhile I'm able to write about game ideas, code them, create some characters and story and background, even though it doesn't lead to anything since it's more of a hobby, but I fail to make it into a job.

I am feeling sort of stuck in a loop with this, and constantly feel like a failure about it. Part of me thinks I should give up on the idea altogether and I would just be a happier person. But I don't know if I could do that if I were being completely honest with myself. Not that this helps you, just putting it out there :)
Seattle has a thriving network of neighborhood farmer's markets, so in principle I think it could work. On the other hand, those markets are one-day-a-week, not permanent installations. Also, far fewer people actually live downtown than used to be the case, so the "local grocery shopping" crowd might be lacking.

So on reflection, no, I doubt it could stay open!
Coinbase was a YC S12 company for what its worth.
CoWork, a virtual coworking space for modern distributed teams
Started a company doing development. Did that for 3 years until someone wanted to pay me more to do the same stuff.
^that + usually when you pair program, you try to explain your thought process and reasons behind the decisions you make to another person, and in doing so, you actually end up delivering. And learning the material through explaining it to others is a very effective and very known technique, so that makes sense.
I did not miss out and yet I still have left the BC space to work on more interesting things.
Yeah, perhaps I should have phrased it as "in other words"
What’s New in PHP 7.4 (Features, Deprecations, Speed)
On the other hand, it remains to be seen how much gamers would then like those games.
Not sure why but your domain is being blocked by one of the default pihole lists.
The whole thing is in C++, but more in C-with-classes style. Very little of meta programming outside of STL, flat class hierarchy, etc.

In terms of dependencies - just the Windows API and a bit of Native API, if available. No WMI, very little of COM (for shell and shadow copying). It does however use quite a few exotics from the Windows API, e.g. SetFileIoOverlappedRange, SetFileCompletionNotificationModes, etc.
I believe many people are against using crypto currencies as an investment opportunity instead of a technology solution.

The primary property of a good currency is stability. The crypto currencies are exactly the opposite.

I like smart contracts but I don't think public/permission-less blockchains are feasible/very useful in the real world. Engaging in a tech and electricity spending race doesn't look like a good way to verify transactions and protect the blockchain against attacks.
Because the standard "everything is bad nowadays" headlines always get clicks and upvotes
Debian: Optional Hardening of Apt
I personally like Hyperledger Fabric (https://www.hyperledger.org/projects/fabric) for a private blockchain technology.

That being said I still have not found the problem that it is the solution for other than addressing our CTO's case of FOMO.
That would be the illegal stuff, I think. We're dealing with that on a societal basis. I suppose the extent depends on the trust we place into the ability of citizens to not collectively fall for something just by being exposed. If we all had very frail immune systems, doing our very best to extinguish the common cold would make sense. Since we don't, let's keep those reasonably safe that are in danger and let the rest deal with it.

For anything else, it may quickly become problematic if those that get scared or upset the most over news stories are in charge of declaring when to quarantine people, neighborhoods or states.
One thing that’s interesting about textures is that humans have an incredible sensitivity to it by touch. You can detect the difference between a flat surface and a surface with angstrom-magnitude features.
Because bitcoin is solving a problem that isn't a real problem by introducing a dozen more problems the existing system has solved.

Bitcoin decentralizes currency and leaves no one entity in control. Hurrah, the government can't stop you from moving money as you see fit. Except that most of the time, the government is stopping people from doing things that were made illegal for very good reasons. Money laundering of proceeds of crime, terrorist financing, tax evasion. You can debate all day about whether taxes are inherently evil, but right now the law says they are legal and you've gotta pay them. Saying "No worries man, I've got a NEW currency that the government can't stop" doesn't make it not a crime.

All the while, it's not actually free. We're burning huge amounts of energy to do mining, and the costs have to be passed on to someone. Miners get free BTC for mining, but that's a closed system- someone eventually must pay real currency for that energy being used. And it's getting expensive given the number of miners. (Plus, a lot of them are China which is using coal as it's primary energy source, which is killing people from pollution!)

And finally, there's no inflation/deflation controls. A currency's utility is increased by it's stability. Not knowing if my BTC will double in price or drop by half in the next 2 weeks means every day is a gamble. If this were my only currency, I'd be terrified about buying groceries.

Oh, and let's not forget that the huge spike in BTC prices in the last few years were found likely to have been caused by manipulation.

I love crypto and think bitcoin/blockchains are a really neat technology. But I just wish they weren't here, in the real world, because they seem to be a net-loss for the world, and a Ponzi scheme.

Edit after getting a coffee: ... okay, that was a bit of a rant...
In the hybrid approach, would you implement a full framework like Vue or would you just use jQuery?
Lovely. Do you have any details?
This isn't easy on iOS, and that doesn't sound like a particularly good idea anyways.
Very neat utility!
Could Machine Learning Be the Key to Earthquake Prediction?
I don't think I'll ever feel safe enough again to feel bored. Haven't felt bored since before high school.
HN in general hates hype. The technology behind Bitcoin is interesting; "to the moon!" isn't. Blockchains have a few use cases when they are better than a database, but not billions of dollars in VC worth. That money is the result of FOMO, not innovation.
No idea; it might be that Apple can't detect these because they're encrypted.
>there hasn't been a free/cheap compiler and IDE for a PC for a very long time

One of the first Common Lisp implementations (80s), Kyoto Common Lisp (KCL), was also free.

One of the highest performing Common Lisp implementations, CMU CL (CMU Common Lisp), has been also free for decades. It is still available and SBCL (the most popular implementation today) is partly based on it.

>LISP has always been an university/research thing running on either on specialized machines or later on Unix

This was only true in the 70s, and only true for the most advanced/modern Lisp dialects like ZetaLisp.

The 80s is a different story.

You can check out the TIOBE index for 1989 -- the 3rd most popular programming language was Lisp, after C and C++. It's also very interesting that ANSI Common Lisp was the first objective-oriented language to get an ANSI standard.

Today you don't need a Unix/linux machine, there are many implementations that run just fine on Windows: ECL, ABCL, SBCL, CCL, and CLISP to name a few. SBCL, ECL and CCL produce native code; SBCL is particularly fast and CCL, while relatively slower, is still a fast implementation.
> I just don't understand how people can not feel lost if they don't create something that stems from their own selves

For a majority of people, their greatest and most satisfying achievement will be their children. Nature doesn’t play around :)
Ooo!

For Python dig up the old PySonar project (the author took it down for some reason but there are mirrors/archives where you can find versions. Oh hey, it looks like it has been resurrected: https://github.com/yinwang0/pysonar2) It might have been superseded by something else in the meantime, I dunno.

It was the basis for Google's internal Python annotations thingy, and it fscking rocks.
1) Blockchain is not "new". It's 10 years old. We went through the hype cycle for it. The thousands of software engineers and mathematicians on HN have had time to assess.

2) HN is for more accepting and enthusiastic about new ideas than the general population.
The previous poster never mentioned that they care about any of that, so why bring it up?
Well, I mean a third of the US Nuclear arsenal is on Boomer subs, so that is not exactly true.