skysight-inc/HackerNews huggingface dataset:
I understand why Apple did it and the additional context you provide does change my opinion somewhat in Apple's favor, but I disagree about Zoom being malware because malware is made in bad faith to introduce functionality the user never intended to use.

What Zoom did was negligent and incompetent, but I don't see that there was malicious intent. I do agree, however, that what they tried to do is unacceptable even if implemented competently.
If anyone is wondering why they send Bing the IP address, it's most likely because the Bing API uses the searchers IP address if you want location specific search results like weather, local restaurants, etc.

> Results are customized to the location or market of the user. The location or market can be determined implicitly (via IP address) or configured explicitly.

https://azure.microsoft.com/en-us/services/cognitive-service...
An ASCII character walks into a bar. The bartender says, "What's the problem?" The ASCII character says, "I have a parity error." The bartender nods and says, "Yeah, I thought you looked a bit off."
Just came here to say thanks, didn’t know of The Knowledge Project, and this episode was great. Cheers
At a minimum, NYC is just very different from SF and the South Bay. Leaving aside costs and salaries, which are both probably a bit higher in the Bay Area, the environments overall are just a lot different.

Lots of people who love the access to nature, the climate, etc. in the Bay Area would never move to NYC. And lots of people who consider anyplace that's not Manhattan to be a provincial hick town would never move to the Bay Area.
Reddit goes down a lot though in my experience.
A tax on profit is almost useless in this case because most internet giants would buy “services” or pay “royalties” to countries with zero taxes, to keep profits zero whereever there are nonzero taxes.

A reasonable middle ground would be to tax google on their central profits and take a cut based on the fraction of business done in France. That way no tax would be owed if google makes a loss, regardless of French revenue.
> I would intercept these rewards and put them in my backpack for the bus ride home, in order to avoid creating perverse incentives for the operations team. But did anyone call me 'hero'?

Wait, I don't understand.

Why would anyone call you hero?

Are you suggesting that the team would deliberately crash the app to receive beers and that by stealing them you stopped this from happening?

Free drinks and free food is the standard here to reward teams when they spend extra unpaid time away from their families.

All of the posts asking the same question are being down voted. Am I missing something?

You said you were a contractor at the time. Unless you were on the management team I fail to see how this was your responsibility to choose what happened.
This might just replace the radare2 "?" command for me!
"Minor" seems inappropriate. Can you remember another time when so many high-profile websites/services have had outages in so short a time span?
Most of the function users care about in their phone, if not implemented by third party, are proprietary apps from google.

Without the app store and the google ecosystem, android experience is poor at best.
Each time the ops team brought Twitter back up, they receive good beer. So it would also mean that each time Twitter goes down, they could expect to receive the beer. Without idleword's actions, they would have an incentive (good beer) for having Twitter keep going down and not doing work to improve the stability.
And today, eight days later, Twitter.
Or maybe it's because the internet is tendentially becoming just a few companies' data centers? Afaik Twitter moved to GCP a few months ago. Maybe this is another Google outage?
They are, but they're going down on different days. Whatever effect is left over could be accounted for by looking at the postmortems and not counting "we were down because AWS was down."
> If you consume too much Vitamin A, you don't pee it out, it gets stored in your fat cells. And because it stays in your system it can build up to toxic levels and you get hypervitaminosis.

Not long back I heard about this happening to a small child.

Apparently, he and his mother had immigrated to the United States from - IIRC - a former Eastern European country. She didn't speak english, and wasn't familiar with certain customs and such here, so when one day they went inside a CVS or Walgreens, when her son asked her for some gummy candies, she purchased a bottle of such for him.

Well - you can see where this is going.

The woman had no idea that such candy here in the US wasn't sold in bottles, and that what she had purchased was gummy vitamins. Her son ended up eating the whole bottle. Over a couple of weeks or so, she ended up getting him multiple bottles which he ate, until he became sick and she took him to the hospital.

From what I recall, the doctors treating him weren't sure what was happening, because they had never seen the symptoms or such - but ultimately they figured out what happened, and treated him for hypervitaminosis. He survived and is supposedly ok condition today.

Sadly I can't find the original article I read, but it was over a year ago, IIRC. My details may be wrong, but the overall gist isn't from what I recall: That a new immigrant mother to the US, who didn't speak or understand English, purchased what she thought was candy for her child and it turned out to be vitamins which caused an overdose where she had to take him to the hospital.
I would assume they send the IP so that Bing will return location specific search results for weather, local businesses and such. I see no reason to assume malicious intent.
In my opinion that is very unfortunate.
Microsoft Teams overtakes Slack with 13M daily users
No, semantic coloring is about the editor having deep knowledge about your code, this is about having very similar looking names or lexemes appear different.
FTA:

It's fine that mov doesn't look like eax, but I'd rather prefer pmulhw and pmulhuw to be shown as differently as possible.
A downvote? It looks like someone is thoroughly enchanted with John Deere's software policies.
One of these newly-hired Product Managers should take a couple minutes out of their no doubt busy day to look at what I can only assume is their main product, the web site:

- the site took 23 seconds (!) to load

- all content is hidden below the fold, with just some kind of animation visible. I assumed for a long time that the page was not loading. Nope - it's just not visible until (if) the reader scrolls down

- after a couple of refreshes, the user is treated to a modal imploring them to sign up for a newsletter: "You love us.
You really love us!" no I don't

- there is also an email form at the bottom begging for subscriptions. There is a JS dismiss button that doesn't work

Actually, considering the above, I am not sure anyone should take Braze's advice about hiring product managers.
As someone who was running tech at an e-commerce/hardware startup with $xxM+ in annual online sales, and ran on top of Magento 2, it is an unmitigated disaster that will sink any business that doesn't have endless money to throw at it.

We had great Magento developers working on it and could barely keep it stable under even moderate load. To scale up, if you're a heavily trafficked store, you need to pay a six figure annual license fee, or you can't shard/load balance your database. Without the Enterprise plan, your site can't easily do zero-downtime deploys, and deploys take about 30 minutes of full outages to get out the door. Editing anything took about 36 clicks, which carried the risk of corrupting a language you weren't editing. Deploying a language pack requires an outage. Deploying new CSS requires an outage. There were ways around this, which we used, but the extensions and ecosystem are so poor that I wouldn't encourage anyone to use them—we ran into one instance where installing an extension would bring the site to it's knees, at random, because the developer had hand-rolled an image-resizer for some reason to build thumbnails.

I'm an infrastructure engineer/developer originally, and I figure, how bad can it be? We'll ignore the snake oil and scale up with good developers and cloud hosting, along with best practices.

I can list how incredibly poorly built Magento 2 is for hours, but I've never seen anything like it. We made it work, but it cost us hundreds of thousands of dollars to get it to "doesn't break" level of stability.

It's outrageous particularly because the entire ecosystem is designed to shunt you toward expensive licensing that requires NDAs to be signed, certified developers to be used, and ever-escalatingly ridiculous hosting fees (at one point, I was quoted a $1500/month virtual machine to properly handle our environment).

Meanwhile, when we wanted to do a flash sale, Magento was so complicated and slow to deal with, we made the call to literally create a second store, using Shopify, to run our limited time sale. Not only did it take maybe 1-2 days to get it set up and working, we ran 1M in sales through it within the first 8 hours of it being online, without any outages, stability issues or anything else, without ever needing to do a payment gateway's time consuming PCI compliance security audit, either. We got paid out within a few days of even first signing up.

I think people underestimate, often, how expensive open source can be, and one red flag, in the case of Magento should be that anyone that isn't a "Magento developer" is terrified of touching it. (I have stories about how hard it is to even develop on your own machine, and how literally all roads lead to their Enterprise plan, with no way out, but that's for another day)
I'm a data engineer and avid Racketeer. Racket is not at all a satisfactory replacement for Julia if you are doing data science. Specifically if you use Flux, you should know deep learning tools are basically non-existent on Racket. Someone once made a paper called DeepRacket and a Github repo, but it hasn't been touched since.

If someone out there knows more than I do please let me know because I'd love to be wrong. There is some decent linear algebra stuff, at least:
https://docs.racket-lang.org/math/matrices.html

Racket is both helped and harmed by it's popularity in certain academic circles. Harmed, in that a lot of graduate students make a thesis of creating some badass library in Racket only to completely abandon it. But I'm still really rooting for Racket, it deserves more hype.
Just a quick note not directed at OP but for any other engineers that may be unaware, these days AWS makes provisioning a read replica painless, and you can point the CEO to up-to-the-minute data while essentially firewalling the queries from customer operations.
Saying that it's an illusory pattern without checking the statistics is no more scientific than saying it's a conspiracy without checking the statistics.
Yet another reason I haven't seen listed in the dog pile of reasons on this comment: lo-jack stickers; I have one on every laptop I own and one I'm borrowing.
They would hopefully have realized that Rust is a much better language than C++ and not taken that attitude.
Racket is great for web development, but it really shines for creating other programming languages.
If it was a sure thing that the ops engineers were doing that, then sure, it'd be kinda funny. Otherwise it just seems like a dick move.
interesting. but I found it odd to have no sort of evaluation regarding to decision-making based on metrics / data. this is something I would strongly recommend
Any decentralised social media alternative that is not Twitter, like Mastodon.

Anything else is centralised and inherently evil. Even the orange website.
Blog post: https://ai.facebook.com/blog/pluribus-first-ai-to-beat-pros-...

Science article: https://science.sciencemag.org/content/early/2019/07/10/scie...
No. And a year from now I won't remember this time either.
Life expectancy grew in time, and also the age when having kids. The grandfather from 2000 years ago probably had kids around 20 and lived to 60.
>tax-evasion and tax-reduction are two different things, equating them is an argument in bad faith

I beg to differ, the only difference is that one is by definition illegal and the other is by definition legal. Tax reduction can mean chasing tax incentives responsibly, which is fine, but can also mean deliberately engaging in weird financial engineering that violates the spirit of the law but not the letter.

Like if I max my 401k and HSA, get a $600k mortgage to max out the mortgage interest deduction, and count all my professional electronics as business expenses I am reducing my taxes but I am following the spirit of the law because I am reducing my tax burden by making decisions that tax policy is meant to encourage. If I incorporate in the Cayman islands and declare all my income through a Virgin Islands subsidiary operating through Panamanian bank accounts so that I can sell off shares of my business to a trust which I also own, all so I can turn personal income into capital gains earned in a different country even though I do my actual business and live in the US, I would definitely be violating the spirit of the law.
Arc is an a lisp dialect that's been implemented in racket.
>>> buy shares in US companies

That is not quite correct actually.

You have to pay US taxes on US shares, doesn't matter where you are. They can be quite high, something like 30% of yearly profit. Then you have to pay local taxes too, that can be significant as well.

This makes US shares non viable for most Europeans. The double taxation makes them worthless.
Tax cross-country licensing fees at some absurd rate.
A great craft recognizes how important good tools are.
boy, do i have a podcast episode for you: https://casefilepodcast.com/case-98-the-pillow-pyro/
That explains why he walked over to the DB guy and asked him to run an expensive query on the life system ;)
What's missing is the luxury for individuals to also choose their countries based on the same parameters.
Can't wait to see how much money they made!
This is a very good (and interesting!) question.

Regulation A+ is technically an exemption from registration requirements. Although in practice it works closer to a fully registered offering. Just pointing it out because the Stacks tokens are not "registered".

Transfers can take place between users/peers and do not need to be registered. Trading in the US needs to be on a regulated securities exchange while the token is treated as a security. See our FAQ question on exchanges: https://stackstoken.com/faq/

Trading in international jurisdictions depend on appropriate local law.

Finally, this is decentralized open-source technology and Blockstack PBC cannot control activities on the network.
Apache Tomcat 8.5.43 Available
https://en.wikipedia.org/wiki/Poisson_distribution
Apache Maven Javadoc Plugin 3.1.1 Released
Although decomposition into corresponding files is the norm, it’s so satisfying to say “hey, check out my JS engine” and point people to a single work-of-art uberfile. LOL.
They mention that only 5% of tropical beeches would need to become green.
People say this in every IoT discussion (or rather, every IoT vulnerability invites litigation about the premise of IoT), but here's the thing: these systems are not air-gapped, nor will they be. The argument is pointless. The median HN reader would not f'ing believe what kinds of things you'd think would be air-gapped that are not; in fact, they'd probably be gobsmacked by what wasn't air-gapped in the 1990s, when you'd use X.25 NUAs to reach them instead of URLs.
> Are you suggesting that the team would deliberately crash the app to receive beers

https://en.wikipedia.org/wiki/Perverse_incentive
Testing if I'm already censored by the mods.
I'm willing to pay 3% more.
Which is normal if you want to maintain only a single ssh session to a remote machine.
What's wrong with rsync?
97% of global banks are susceptible to web and mobile attacks
There's two problems with airgapping. First, how does the machine get updates? Do you mail a DVD to the anesthesia techs? Do they know how to install such a thing, or are they going to mess up the machine in the attempt? Or do you roll a service tech in a truck - to all the machines installed worldwide? (Yes, I know, if the alternative to rolling trucks is letting J Random Hacker play with your machine while it's keeping a patient alive, you'd better roll trucks. But updates are one reason why stuff winds up connected to the net rather than airgapped.)

The second reason why stuff is not airgapped is that it almost certainly connects to the hospital's patient records system. They have to keep a record of everything that happened until all potential lawsuits time out. Just in case there are complications from the surgery, they need all the records from the anesthesia machine uploaded after every use. So the anesthesia machine has to be on the same network as the patient records system - and so does every other medical device in the entire hospital. That network should be completely isolated from outside, but to do so, you have to airgap the network, not just one machine. Yes, it should be done, but that's harder to do, and harder to maintain.

For that matter, I've wondered, when you visit someone in the hospital, if you plug your laptop into the ethernet jack in their room and start looking around, what do you see?
Sure, but assume they somehow pass the tax 100% onto the customer. So now French citizens are the ones paying for the "right to the free market" of their own country. Does that seem fair?
Is My Host Fast Yet?
Mask Customer Credit Card Info API?
Hi!

I run a company that buys goods on behalf of customers, up till now we have been charging them 3% extra to cover processing fees.

In a focus group, some customers who make frequent larger orders have chosen to stop using our service as they really don't like paying that 3%.

They want us to be able to use their raw credit cards to place orders! Which, is a little unsafe from a developer POV, as humans on our side would need access to those credit cards, plus mistakes in handling that data could be cause for serious concern. Though, assuming we can store that data correctly... (humor me)

We were thinking of a solution, and noticed that services like Google Pay take your CC number, and generate a new virtual Visa card for each payment. We've found a lot of services that can generate these Visa cards quite cheap, but they all draw funds from a central deposit of funds.

Does anyone know of an API that might be able to generate Visa cards that draw funds directly from the customer's Visa card?

Thanks!
> Am I missing something?

That it is a joke.
A lot of people from India on there posting dumb jobs. Though, dumb jobs can come from anywhere. It takes hours of sifting to find real offers. Most people want you to solve climate change for $1k or build their amazing idea they haven't thought through. It's a dumpster fire but there are real offers on there. With data science, you have to stress that it is research. You can only give probabilities, there's a chance it never works as you suspected or you don't come to a conclusion.
2019+ will Atwood's law compiled to WASM.

My co-worker Jason wrote a JS engine in Rust, Boa (https://github.com/jasonwilliams/boa) and demoed it via WASM in the browser at the recent JSConf.EU 2019: https://www.youtube.com/watch?v=_uD2pijcSi4
There’s no such thing as a query timeout (2005)
Man, I hate hearing that. Really sorry you’re going through it.
I didn’t think of that. It makes a lot of sense.
The pension explanation doesn't make sense. Chicago would gladly offer tax breaks to any company opening a major HQ here, as it has in the past. It's had a streak of being business friendly.

I also don't get the "violence" explanation. Violence is terrible and everyone in Chicago wants to end it, but the average person is far removed from any shootings.
Which makes local businesses better able to compete. Win-win.
>It has now reached the point where even large companies cannot maintain high reliability.

Waiting for this to be backed up by statistics.
With nest debacle I sent a message to 'my' senator ( this time I will send a postcard I guess ) after nest hidden microphone debacle. I got a non answer after a month. How much money you need to own a senator. I am not even joking. There has to be a way to crowdsource this.
Then they would shift net profit to a more favorable environment, i.e. by paying some contrived royalties to the Irish sister company?
Where do analogies break down?
There are no freedom of speech laws that would apply to a corporation rather than a human, that I know of at least.
> be wary that the subconscious is constantly generating narratives to explain statistical anomalies

This comes up all the time in sports. Let's take pool for example. There are various guesstimates floating around, and I do not have access to detailed tournament statistics, but I have heard that in games where sinking a ball on the break is an advantage, for decent players there's maybe a 75% chance that a ball will go down.

So once in every four breaks, you won't sink a ball. How often do you fail twice in a row? Once in every sixteen breaks. Failing three times in a row? Once in every 64 breaks. Four times in a row? Once in every 256 breaks.

What about five straight breaks without sinking a ball? Once in every 1,024 breaks. That's a lot of breaks. But wait up a moment.

Let's ask, "If you miss a break, what're the odds of it becoming a streak of five misses in a row?" The answer is, "One in every 256 streaks of misses will be a streak of five or more misses." 1/256 is not particularly rare, if you play often enough to sink a ball on the break 75% of the time.

What is the point of knowing that a streak of five misses in a row is rare but not that rare? Well, if you miss five in a row, do you chalk your cue for break number six as usual? Or do you tell yourself that your break isn't working, and start adjusting your stance, aim, spin, &c?

If you start adjusting everything when you get a streak of five misses in a row, you may just make things worse. You have to pay enough attention to your distribution of misses to work out whether a streak of five misses in a row is just the normal 1/256 streaks, or if there really is something amiss.

The brain is a great pattern matcher, but it sucks at understanding statistics.

---

The flip side of this, of course, is that if you upgrade your brain well enough to understand statistics, you can win a lot of money.

If a pro misses five in a row, feel free to wager money that they'll sink a ball on their next break. Your friends may actually give you odds, even though the expectation of winning is 75-25 in your favour.
Collective intercellular communication via ultra-fast hydrodynamic trigger waves
I was really hoping the article would go into more detail on how the AI engaged with the human players.

Was it online? the picture on the article seems to imply IRL.

If IRL, what inputs did it have, simply cards shown or could it read tells? Did those players know they were playing an AI?
All of the data collection functionality in Google Apps is closed source too.
Which, in all likelihood, is the primary reason why Silicon Valley does not want to move out of Silicon Valley.
Something running with your privileges could similarly use your existing sudo ticket, or manipulate the memory of your terminal emulator, or modify your shell to grab your credentials the next time you authenticate (and pass those to sudo), etc.

This isn't tmux's fault; this is fundamentally the sort of thing that's possible under the security model of modern Linux desktops.
Tk from python is pretty damn convenient, being as it's always there. Not the most modern toolkit for sure, but always being there is a pretty compelling feature for some GUI projects.
I follow mostly "main stream media" on Twitter. It should be an aggregator of professional news, not "alternative" facts.