skysight-inc/HackerNews huggingface dataset:
> Why shouldn't I buy Google's explanation?

Because Google is notorious for coming up with bogus explanations whenever they get caught red-handed. Every month there is a bunch of news articles, where high-ranked Google employee claims to spy on everyone to "protect people from electric pigs", "lower the danger of Confucian Jihad", "enrich e-mail UX with hefty data-harvesting" or something along those lines.

> If an app that uses bluetooth can get my location via beacons or etc., then bluetooth should be wrapped in location privileges.

There is no reason why apps have to be able to "get location from beacons" in order to connect with another phone over Bluetooth. Same for P2P Wi-Fi API — pairing with another device already requires exchanging tokens via graphical dialog with explicit user approval on both devices. Removing ability to read scan results from API would be enough to fix the underlying data leak. Once two devices are paired, they should be able to exchange data without need for any permissions or user actions.

Instead Google forces users to keep Location enabled long after initial connection is made. Even if there is no underlying bad intention, they should be ashamed of forcing such garbage UX upon people.
I wouldn't blindly apply it to this situation, but I can at least see the logic of just stopping doing something that isn't working.

For the specific situation, maybe a program that paid off student loans for anyone with some period of service (lots of teachers outside of AK) would be a better way to spend the money than unconditionally throwing it at a failing program?
This series of videos is pretty crummy, Amazon couldn't hire a decent actor (or was too cheap to do so), and proceeds to have their talking heads contradict themselves by saying they are neutral towards unions, but they will "boldy defend their direct relationship with employees" AKA they will fight unionization.

Another clip has "managers" (animated talking heads) calling unions thieves and crooks, followed by a quiz on which manager most closely reflects Amazon's position on unions.

The current worker <==> Amazon relationship is so imbalanced that workers feel they can't use the bathroom during their shift for fear of being fired.

Even the programmers here in Seattle are treated poorly, only "profitable" divisions get a breakroom stocked with cereal, but even those breakrooms were pretty threadbare compared to most other non-tech companies in Seattle.
coughs Chinese Democracy cough
Everyone arguing this isn't "technically" 512 bytes... come on. That goes against the spirit of this post. I feel it was merely an illustration. I mean, at some point just enjoy life and stop being so "technical".
The Zoom client on Linux used to (?) have a nasty command injection. The URL for joining a meeting got passed to some bash reinvocation (so they could set the library path if my memory serves me). A specially crafted URL could execute commands on the system. I haven't been too interested in using Zoom since seeing that.
Food production is already plenty cheap in the developed world. In the 50s in the US middle class people still worried about the price of milk and butter and the working class did not have the option of eating out for every meal. Even Mexico, a middle income country, has an obesity problem rather than a malnutrition one.

In areas with high demand the constraint on building housing is zoning, not cost of construction. You can build in masonry up to eight stories high as long as you have elevators. With steel frame much higher obviously. Everywhere the cost of housing is substantially above construction plus land costs the reason is zoning.
AvE Electronics is a hilarious, foul-mouthed Canadian who dismantles power tools and appliances and gives a thorough guided tour and quality assessment. His show is great fun.
Californians’ Alert Apps Didn’t Sound for 2 Big Earthquakes
Open-Source Tool Lets Anyone Experiment with Cryptocurrency Blockchains
If you want to test it without using your real webcam, I recommend CamTwist [1]. The author is in the group video call now. I joined for a short minute, and was relieved to see that my real webcam wasn't being used.

Normally I use CamTwist so I can write subtitles on top of my video feed when chatting with my gran. It seems it's also a good layer of extra security!

[1] http://camtwiststudio.com/
> Front-end (web?) is a more narrow domain than what I was speaking to.

It's the domain where proper architecture matters the most, because it's hard to get it right.

> It sounds like you are pointing out specific issues that you encountered when working on a particular project.

If by 'particular project', you mean every single FE project that I've worked on, that made unopinionated use of dependency injection, sure.

> How is SOLID responsible for these issues?

'LI' doesn't do any value add for these problems (You don't use all that much inheritance, or define very many interfaces when working on front-ends), and 'D' is actively harmful, because it paves the road to dependency injection. I find posting events to a bus to be a lot easier to deal with, then dealing with a spaghetti of objects interacting with injected dependencies.
10 years is nothing on the scale of language development, and SV is nothing on the scale of the English-speaking world :) Fear not, I bet there aren't enough words to go around for this to be a big deal long-term.
> Poof! And the solution

...snapped into focus
not having a unix shell? you read the article right? the part about how you can run a unix shell with WSL? you don't have to bash on windows, but now you can bash on windows ;)
One of my pet peeves is when people point out something is not particularly precise and then wave their hands and declare that makes up for three orders of magnitude difference.

Of course there is an ecosystem around regular money. There's no way it costs 1,000 times as much per dollar as printing the money, and, the major, universal complaint about bitcoin has been that it doesn't provide an alternative to all of the additional functions of the conventional banking system, so your point seems doubly void to me.
Microsoft releases Windows 1.11 throwback app as a Stranger Things tie-in
OK, but the blog also points out that the pattern is typical of cyber criminals in this jurisdiction. It strains credulity that a ten year long trail of red herrings would be created, when it would be just as easy (easier!) to leave no evidence at all.
This is the issue. It’s on by default.
What if you have uninstalled Zoom? It seems that it leaves a web server on your machine that will re-install Zoom if it receives a request to join a meeting.
Or we could expand wage subsidies like the earned income tax credit. That has the advantage of not causing labour supply to drop precipitously and would cost much less than UBI so it could be implemented far sooner. And if the math on UBI comes anywhere near working out you passed the point of being able to afford wage subsidies long ago.
I understand you mean that it isn't a for-profit business, but the Alaska constitution literally establishes the state university as a corporation.
As a musician, I can tell you that practicing a song (particularly a well known song) is very frustrating partly due to boredom. A practiced musician will know when they’ve reached their limit for the day of learning a song. Muscle memory is much slower than neural memory, and usually requires “sleeping on it”.

Knowing you’ve reached the limit of your current capability is boring because you know the next few practice rounds will be much of the same, with minor improvements that provide a dopamine rush.

Regardless, nothing has changed in the age-old saying of how to get to Carnegie Hall: Practice, Practice, Practice. The practice is the boredom, but without training your muscles and building up myelin sheaths, you’ll never be good enough to automate most of the music to an extent that you can improvise on top of it (the fun part).

I guess my point is akin to OP’s, in that boredom isn’t inherently a bad thing, but a means to an end. Without the boring practice, we wouldn’t have experts/artists...and even then, the practice doesn’t have to solely be boring.
Python 3.7.4 is now available
Come on gang, help a liberal arts major (and aspiring SaaS founder out) and give more use cases ;-)
If you got fired for cause twice, definitely not a good sign. If you got "laid off" twice because you got up the nose of your boss then that's not so bad, there's lots of jerk bosses, team leads etc. If you got laid off but "black listed" by a powerful company/person in your area, you might consider moving.
Comments like yours make me wonder the same thing. I almost never notice Windows updates. May be once a month when I shutting down my PC, I'll notice that label changed from "power off" to "install updates and power off" and that's the only difference for me. I never experienced forced reboot or something like this. I don't have any slow downs and I never saw two keyboard cursors (apart from Intellij Idea multiple cursors feature).
I remember this being a pain when I switched off of windows 10 years ago, can’t believe they haven’t figured it out yet
The chair and board of the federal reserve are appointed by the president.
> This vulnerability leverages the amazingly simple Zoom feature where you can just send anyone a meeting link (for example https://zoom.us/j/492468757) and when they open that link in their browser their Zoom client is magically opened on their local machine. I was curious about how this amazing bit of functionality was implemented and how it had been implemented securely. Come to find out, it really hadn’t been implemented securely. Nor can I figure out a good way to do this that doesn’t require an additional bit of user interaction to be secure.

Does anybody understand (and have a moment to explain) why the author says this is difficult to do securely? macOS has a simple facility for handling custom URL schemes, so my impulse would be to have `https://zoom.us/j/492468757` do a server-side redirect to a URL like, say, `zoomus://492468757`, which would launch Zoom locally using the OS's built-in services. This wouldn't require a third-party daemon of any sort, and would just be a regular application that the user could trivially uninstall.

Is there a security hole there that I'm missing? Or have I misunderstood the author's point?
Hi I'm the author, AMA

Or come hang out in the party chat!

Use the exploit to join:
https://jlleitschuh.org/zoom_vulnerability_poc/zoompwn_ifram...
> Offered and declined a financial bounty for the report due to policy on not being able to publicly disclose even after the vulnerability was patched.

They seem to pay bug bounties if you agree to keep it down.
Robots keep on expanding in the range of areas where they are as fast and efficient as humans, or better. Industrial automation is why the value of US manufacturing keeps growing while employment has dropped or held steady.
Reminds me of Jreg's recent video "Post-Truth" https://www.youtube.com/watch?v=J3irKjpQruI
The downside is that there is no market for watchtowers yet (so you need be online while having channels open).

Another disadvantage is that if you control your key, you must be online. Like, if you run an HTTP server, you must have a machine. With plain Bitcoin you can spend to a pubkey and it doesn't have to be online
Expect zsh to stop being niche in a few months when apparently the next version of MacOS will use it by default
When we constantly consumed with stimulus from social media or non stop feed of news and discussion there is no room for boredom. Boredom is important to the creative process.
Simplicity comes to me when tackling a hard problem after a few days as well as contemplation over multiple showers.

I’m not sure how I could ever incorporate a shower into an interview loop.

Interviews suck at evaluating anything that requires more than 40 minutes.
Really? That’s nuts. Makes you appreciate the iOS app model a bit more.

Everything sandboxed, delete an app and all traces of it are gone.
Space is filled with potential fuel.
Great until you bump up against that 7 transactions per second limit, the entire planet adopts it and and you get to wait multiple decades between transactions.

And before you say “lightning network” do realize that LN doesn’t exist and even if it did your solution is to avoid using bitcoin. Setting aside you still have to make transactions on the bitcoin blockchain before you can even play ball with LN.

Bitcoin/cryptocurrency is a giant scam marketed toward libertarians and certain STEM types. Why Facebook decided to hitch its horse to a giant scam is beyond me.
Ask HN: Why can't we acquire repeat users?
I launched an MVP. Targeted my target market through Facebook groups and published several blog posts. We drove 2k+ users to the site, several hundred completed the intended behavior.

We haven't focused on re-engaging, because we figured some percentage would do that on their own. Was that a mistake? Does our UI suck? What other mistakes might we be making? Any other advice to help grind our way to product / market fit?

You can view our site at iPrompted.com
Isn't this the quantity that has barely risen since 1970 or so (till ~2012), while productivity has multiplied manifold? https://en.m.wikipedia.org/wiki/Middle-class_squeeze#/media/...

Further, the median can easily mask such changes as underemployment if it happens in much less than 50% of households, if the "middle class" previously had a broad base. Basically, the middle of the histogram would continue to look pretty flat (same median income for the "middle class") while the width of the flat region would shrink (shrinking middle class).
thanks, but what is the matrix protocol missing again? groups vs rooms vs profile vs private chat... aren't they all the same if you set proper security?
The "computer language benchmarks game" does not support this. Erlang is more than 2x faster than Ruby in cpu intensive tasks across their benchmarks.
Well yes. And I don't really understand why a common currency between rich and poor countries is a problem. But people are saying that it won't work. I suppose it won't work if you depend on the government to be able to control the money supply to fool people into thinking they have more or less money than they really do. But is that really necessary?
> in my experience is the conversations almost never discuss the health of the company. They only discuss strategies for maximizing pay, benefits or ensuring that layoffs are impossible.

Those topics may dominate the discussions, but unions can be a way to leverage worker power for the good of the organization as well. How many times has a company turned out to have leadership that refuses to heed the concern of engineering, mandating development by sales bullet point and failing to allocate the necessary time to maintain product quality? How often does management order prioritize the wrong choices, leading to fiscal straits where the workforce suffers? How often are the concerns of the rank and file ignored, either dismissed at all-hands or filed away by powerless HR orgs? And how often do we hear stories of tech companies with toxic dysfunctional cultures?

There is at least some precedent for unions forcing leadership to be aware of market realities:

https://news.ycombinator.com/item?id=13986889
My biggest question right now is how many people will want to use Libra enough to pass stringent KYC checks for a wallet like Facebook’s Calibra? You’ll need to give Facebook much more information than they have on a user today, such as photo ID, address, SSN, etc (depending on country).

My cynical view is that Calibra is actually the real value to Facebook here, and they are betting that it will be the biggest wallet by far. It will allow Facebook to reconcile millions if not billions of identities in ways they have not been able to to this date.
I did not try to crack LTSB, but I think that it's similar to other Windowses. You're downloading MSDN iso from torrents (which you can verify by checksumming and googling), you're installing fake license server somewhere and you're activating your copy with that fake license server. No need to crack or run anything and fake license server is open source, so you can even compile it yourself and run from VM or VPS or whatever.

I wouldn't even call that stealing, as many folks legitimately want stable Windows and MS does not want to sell LTSB to them.
below down the post, zoom team said that this feat exists because Safari doesn’t have custom url scheme.
Making On-Call Not Suck
Maybe we shouldn't take security advice from folks with no need for security that is obvious to them.
My point also was that it implies collusion.
Multi-Lingual Intent Detection and Slot Filling in a Joint Bert-Based Model
I’m sorry, I am really confused.

The box says “Turn off my video...”. So, I think having it on by default is a good thing.
There are leetcode and such but AFAIK they are all focused towards interview practice.
This isn't libel, but Robin Hanson recently put together some interesting arguments on why blackmail should be legal. I don't agree with him, but it points to the fact that there is not universal agreement on even these widely-accepted notions of what is "too harmful" to allow.
You don't actually need a plugin -- Blender comes with this feature built-in. It's called "Freestyle" rendering.

https://docs.blender.org/manual/en/latest/render/freestyle/i...
Game Devs Fight for Attention: Over 9000 Games Released on Steam Last Year
WARNING, this will open a video chat with random strangers, and will turn your webcam on. Consider yourself warned!

Amusingly enough, this actually exists as a product:

https://en.wikipedia.org/wiki/Omegle

(Edit: just noticed it's already been around for over 10 years. That's rather amazing.)
NHS benefits aren’t even very good. If you’re a nurse in the US, you likely get employer covered health insurance. In the US, that’s additional compensation. In the UK, that’s coming out of your income through your National Insurance contribution. NHS pension is 1/54 of average salary per year of service. If you average $50,000, you’re looking at $32,000 per year. Ona nurse’s salary you’d get at least $20,000 per year from Social Security. To make up the difference the nurse has to put just $200/month into their 401k.
It requires some additional investment on the user's part.

Think of it like opening a secured credit card with cash. Faster and more convenient to use, since you can now use the credit card networks instead of the cash, but requires tying up the funds you want to use to pay with.

Also, the merchant/recipient has to be able to accept the payments, and the software is new / in beta still.
"Practical Common Lisp"--Copyright 2012--gets it right and deserves to be called out for that. Hashes and Vectors appear BEFORE lists in the book. They don't get the emphasis they deserve, but they are on par with the list coverage.

"COMMON LISP: A Gentle Introduction to Symbolic Computation, from 1990"--Um, wow, a whopping 17 PAGES out of 500+ (5 for hash tables) on nominally the two most useful data structures in all computer programming. (Side note: I had an actual dead tree edition of Touretzky from CMU in 1986?--I don't remember hashes in it--I think that was an add-on later). And, even 1990 is after Lisp starts getting displaced (Tcl, Perl, Python, etc. are all coming online).

The Perl4 Camel Book cookbook section was practically an existence proof for "Show people how to do useful things in your language and they will flock to you."

In addition, "Hash all the things!" was practically Perl's motto, and it wiped the floor with everything else for a VERY long time (something like 1994-2005--for 10+ years Perl was dominant).
The Definitive, Non-Technical Introduction to LaTeX
> What is the check for 3P company maintains the quality level

It'll be quality of hire. Eventually, hiring company does culture/personality fit but can also do some quick filtering (and hopefully not full-fledged interview) to ascertain the quality. Same would apply for trust too. Eventually, it's in 3P's benefit to have good process as there would be multiple players.
> They are managed by central banks which are designed to be independent of the government of the day.

Heh, I think you fundamentally misunderstand how central banks work.

1. The US Mint creates the supply of currency in the US, which is literally governed by the government.[0]

2. It's literally governed by presidentially appointed officials.

3. The Fed manages the banking system, which is a trusted system that utilizes fiat currency as a medium of exchange. Their focus is much more aligned to economic prosperity and policy formulation then it is about how the "currency is managed" (the two are obviously interrelated).

> And corporates basically own and run the internet and it seems to be doing pretty well.

There's a big difference between "it basically does" and "it is".

EDIT: [0] - My bad, the BEP creates currency which is overseen by the Treasury, which is in fact a government entity.
How is scroll direction, in any way, restricted to a MacOS experience when Windows has had the option for years? I also have the scroll direction set that way because it makes more sense for me when I use the touch screen. It's one of many ways that the UI on Apple devices makes a lot of sense but I don't see why that's somehow a "MacOS experience". Nonsense.
Also it has a government enforced monopoly.
It's a different platform. If you want it to be a mac, use a mac.
This is an important and highly plausible scenario. Everyone in this thread who feels comfortable that they can get another job at the drop of a hat owes that feeling to the existing labor market, which is fueled nearly entirely by venture capital funding. If the economy goes through another Great Recession style downturn, funding will constrain, companies that aren't immediately profitable will reduce their workforces considerably, and hiring will drop.

If, today, you work for an organization with a few dozen or couple hundred employees, but it is really run by ten or twenty "Directors", "VPs" and "Executives", they likely have full control over the majority of the capital owned by the company. They are also likely to be highly paid, and own the majority of stock or RSUs. If a moonshot expansion plan fails, they will be fine. Executing on high-risk and high-reward business ideas is 100% in their best interests.

However, if employees organize, those who instead rely on the organization to feed and shelter their families will begin to have a say in whether it's worth dumping the organization's $30M Series C into some blockchain moonshot that may never pay off.

Frankly, I don't believe they'll be as inclined to say yes. The union may instead re-negotiate to redistribute that funding to workers salaries, or to invest it in training programs. This is a good thing if you're in this industry because you're an experienced and skilled worker who wants long-term stable employment, but perhaps a bad one if you're in it to hope you hit the startup lotto and get rich after selling our your stock at 26. If you run an organization, which would you rather have working for you?
Counterpoint: considering everyone to be stupid/uninformed is often an equally perilous pitfall, despite how tempting it seems.
You can become a degree registered nurse in the U.K. in four years via an apprenticeship without paying anything for it out of pocket[1]. Obviously the sensible thing to do is move to the US immediately after qualifying but good luck getting paid and trained at the same time in the US.

[1]https://www.gov.uk/government/publications/nursing-degree-ap...
>The article does not clearly state this, ceding a plain English word to a corporation, enabling a takeover of human language.

The English language can handle it:

proper noun

- A noun belonging to the class of words used as names for unique individuals, events, or places.

- A noun denoting a particular person, place, organization, ship, animal, event, or other individual entity.

- A noun that denotes a particular thing; usually capitalized