skysight-inc/HackerNews huggingface dataset:
Self-selection is certainly a fundamental economic problem of health insurance. Large employers can make their own deals with insurance companies, and small employers can participate in small group health insurance plans (which effectively combine all the small businesses in a region/state into one group).

>> A company signing up lots of their employees doesn't increase the size of the pool -- it just adds an intermediary.

I'm not exactly sure what you mean by that. For large group insurance plans, rates are determined by the risk (calculated by the insurance provider, with certain legal restrictions) of your individual employees. If you have 100 employees and 10 of them get a chronic illness, your rates will go up. Similarly, an employer with older employees will have higher rates than an employer with younger employees. The pricing is per group (employer), not based on the entire pool of the insurance provider's customers.

For very large employers, I believe it's common to self-insure, i.e. make a deal with an insurance provider to provide care to your employees at the rates negotiated between the insurance provider and health care providers, but the employer just pays out the total cost of delivered care rather than premiums. Then you get into stop-loss insurance and other interesting complications.
I think all compilers should follow the many-pass, lowering, based approach.

It greatly reduces the surface area that needs to be tested while also keeping the compiler's code from being spaghetti crap which can often happen in non-toy compilers.
>> I didn’t bother to write a blog post about it because my English is not good enough.

Basically everyone who says this has better English than most American technical developers. We appreciate your modesty, but please, write it up :)
Posts that assume everyone considers certain changes to Firefox "anti-features" aren't going to win everyone over, either.

There are good reasons for the move to Web Extensions, the deprecation of XUL, more careful checking/validation of extensions, and other such changes.
Not to mention, if you get caught, there could be worse consequences than just having your account locked. The site could (and likely would if the scale was significant) sue you for not only all your winnings, but damage to their business. They would likely win (since you're flagrantly breaking their terms of use contract), and bankrupt you.

Edit: In fact, if we're talking worst case, circumventing their anti-bot restrictions would presumably be illegal under the CFAA. So if you're in the US you could even be charged criminally, although I expect in reality that would be less likely.
"simple requests" are exempts of CORS. Images is one way, but any GET request without special headers and with a specific subset of content types will quality and are exempts from CORS. Certain simple POSTs too if my memory's not too bad.

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#Simpl...
Typically Bird hunters [1] will go around with a pickup truck to gather a bunch of scooters to charge them. I've seen one pickup truck that appeared to be company owned rather than a bird hunter, but it seemed to have a decent system to secure the scooters and had many more than I'd ever seen a hunter get.

In any case, yes, drivers are responsible for securing loads, but in a lawsuit you go after the deepest pockets if you think you might be able to get payment. It would be an interesting argument that Bird is liable as the hunter is at least an independent contractor for Bird while picking up & transporting the scooters for charging.

[1]: Apparently this is the term for those who pull the scooters in and charge them and then redeploy them after the fact for a kickback from Bird.
> Voting is a guaranteed right of the US constitution,

There are some guarantees yes. But it's not universal.

For example, voting eligibility is frequently denied on the basis of age and criminal history.
They could at least improve it.

The graphs are tiny and noisy, there's no reason they can't use my whole screen and offer a filtered version.

The segments are made of poor GPS data from a single activity, and the leaderboards are filled with unrealistic times that could easily be filtered out automatically.

The maps are old and lack data that's been in OSM for years.

The heatmap combines MTB and road bikes, so when planning a ride you don't know if you're looking at tarmac or a single track filled with roots and rocks.

There's no support for multi sports like swimrun or triathlon.

No support for interval training.

On multiple occasions the Android app has stopped logging, even when the GPS has worked fine in other apps running concurrently.

The three top voted feature requests on their community discussion board are all 7 years old, number four is 6 years, then there's a couple more from 7 years ago.

https://support.strava.com/hc/en-us/community/topics/2005373...

And so on. It's fine not changing what works, but there are lots of room for improvement but nothing happens. If they had a single engineer working on new features or fixing broken existing ones they would have released improvements several times per year. When was the last time they did that?
Commonly on windows, build pipeline tools don't work when they don't have a desktop environment even though there's no requirement for human interface (indeed, requirement for no human). The advent of Server Nano motivates a first class headless windows reality but even so, we been out here running xvnc because whatever tool required an X server.
FB stock up ~2% today.
Is it choking innovation though? Its wasting money sure, but I don't see why this precludes truly innovative firms from achieving success
That paper is still the future, it looks like to me.
One thing that stands out from both types of stacks that I've worked with, is that most of the time, doing things simply the first time without putting in a lot of work to guess what other complications will arise later tends to produce a stack with a higher uptime even if the code gets messy later.

There are certainly some things to plan ahead for, but if you start with something complex it will never get simple again. If you start with something simple, it will get more complex as time goes by but there is a chance that the scaling problems you anticipated present in a little different way and there's a simple fix.

I like to say, 'Simple Scales' in design reviews and aim to only add complexity when absolutely necessary.
I convert cell equations to visual basic so that I don't screw up the cells and so I can share my results without giving away all my code.

There are also methods to animate simple graphics for the purpose of providing high level presentations.

I 'learnt to code' by recording macros and then reworking the syntax to suit my needs. After a while it becomes much less difficult than it appears at first. And I will admit my code isn't a model of perfection, but it gets the job done.
I used to use the XUL version and now use a replacement, and it fully fulfils the function the XUL version did for me.
The Issue with No-Code Machine Learning
Hey, I used to work there in the 90s, it’s always been like that. We had off duty cops staffing the place along with a frequently used banned list. And this was when it was two stories, I think it must be easier these days given that they smartly got rid of the second floor dining area.
Only about 15% of homeless in Seattle are "visible". Roughly 50% are sheltered, and of the unsheltered many live in vehicle [0] (though the numbers in this article don't quite add up).

I fully agree with you though, a lot of people's frustration with the homeless comes from a vocal minority of problematic unsheltered people with serious mental health issues and/or addiction problems. If these people were committed to mental health facilities I think everybody would be better off.

[0] https://mynorthwest.com/1402025/homeless-seattle-king-county...?
Please write something. Even something short. This way I could share it into our #security channel and warn others, if they use this.
Primitive Technology: Crossdraft Kiln [video]
Yeah it was ok for 2016 or so. It's basically the same price and range as the 2016 Leaf. But it's no competition for the EVs that are available in 2019.
How Sai Baba Was Made to Spy on Your Phone for Credit Ratings
AWS Cloud Development Kit (CDK) – Now Generally Available
I had edits with valid sources be reverted and then added by the "owner" of the page. Wikipedia honestly is a mess in my opinion for contribution. I'd prefer if edits could be voted upon by the community to be approved or not instead of someone being able to straight up edit it and straight up revert edits.
Once you get to the point where you mined all of the fissile material in the solar system you probably have fusion figured out or how to use solar power at large scales.
You're lucky it was only $100.

Every hospital system does this, and it's a complete fucking racket.

I've gotten these "three months after you thought you were done with this shit" bills for anywhere between $300 and $1000. All were minor, single specialist visits or tests that lasted < 30 minutes.
Bingo. Though they try to convince us otherwise, that the homeless are all from Seattle, and when asked where they lived previously, they mostly say Pioneer Square....
History has made this conclusion so abundantly clear that anyone who forgets it or pretends it's not real is a fool.
This is pretty awesome. I just came back from a trip to Costa Rica and although I found the country a tad boring and overpriced, I was thoroughly impressed with the knowledge and respect locals have for nature.
Yes, and if the article is to be believed, they all lived in pioneer square before becoming homeless.

A myth myth, I guess.
> He said they don't share the information about what or how many crimes they prevent because it would cause panic.

You always hear people say this, but they don't seem to worry about the panic that line might cause.
> In general, there's no reason why a page on the internet should be allowed to access devices on your local area network. Of course, if the user enters a LAN IP into the browser location bar, this should be allowed, but that's not a cross-origin request.

What's a local area network? 10.x.x.x? That's going to break VPNs and enterprise integrations in a variety of ways. With IPv6 it's even less predictable.

The solution to this problem is CORS — accessing LAN servers, or any cross-origin destination, requires affirmative consent from the LAN server in the form of the Access-Control-Allow-Origin header.
Would you consider freelancers outside US?
>> For all of Facebook's fault, it's very easy to opt out of using it.

Not really. Facebook has shadow profiles of non-users.
> Before I worked for a contractor and we cost THEM a million bucks

Was this a large group insurance plan (usually 50+ or 100+ employees depending on the state)? If it were a small group insurance plan I don't believe your utilization would increase the rates, since AFAIK all the small groups in one state/region and insurance provider are combined.

If the employer was large enough to have a large group insurance plan, but still fairly small, I suppose one person's utilization could noticeably increase rates at the next plan negotiation. I believe this is why some companies that are too big for small group insurance plans utilize "professional employer organizations" to participate in a larger risk pool.
Ha, I think about that song easily once every couple of months.

It's a very challenging balancing act especially in today's America which expects parents to spend tons of time with their kids.
Does your first paragraph apply to smaller cities like Boston?
Building web applications, I'd imagine. Why is that surprising?
I think you misread the article. The author is saying that HR is female-dominated and gives the example of a team she was on which was entirely women.
If I take a photo and upload it to Flickr, is it theirs?
I think the lack of spreadsheet-based software is more problematic than just Word, because it's hard to replace it with any good alternative.

Also, I do use LaTeX (and derivatives) in almost in any case when I need to compose some document - it really helps to automatize many trivial things that were tiresome to do in MSO Word. However I know at least few people who tried LaTeX and just told me "Yuck!". I tried to recognize what is unique selling point, and all of those people told me it lacked the WYSIWYG mode and that they do not want to learn some language, so also ignore the LaTeX meta-code [0]. I feel I can't objectively say how steep learning curve is, because I just got used to declarative paradigm. LaTeX is not perfect, but I guess my requirements were different than my friends had, but I can't find an answer what really makes Word better than let's say LaTeX, LibreOffice/OpenOffice or other software in the same category? What leads us to decision to use Word not other software to let's say write thesis in it?

[0] As copperx mentioned, there is already LyX but it is far from being popular application.
But its a multivariate problem space. Exposure is just one of the variables. Others (mutation rate, types of host, cross-infection rate etc) are also important and highly non-linear.

It's a big-data problem - what are the regression stats for each independent variable? And is 'exposure' the important one?
I'm sure if you had a shred of empathy in your whole body, you could think for about five seconds and realize that maybe not everyone else had the same system of values as you.
Sounds reasonable, but when I look around...
There are four thousand homeless people and two thousand shelter places. Evening out those numbers would go a long way.
What are you even talking about?
VAT has existed in France for decades. The 20% tax has nothing to do with cars, its just the regular VAT you pay on any transformed good. People driving old cars also paid VAT when they bought it (it might have been closer to 17% back in the time).
And finally the yellow vest movement has nothing to do with VAT.
How can you still think Nuclear is a good idea after reading that article? If a solar/battery farm is that cheap now, how cheap do you think it will be once you've spent 15 years building a nuclear power station that will either get flooded (rising sea for cooling) or have to be left turned off (fresh water no longer available)?
> The people who believe this vote at a much higher rate than the people who don't

I noticed as I read that statement my first instinct was to blindly agree with you, because it feels like it might be true (from inside my bubble). But on second thought, do we actually have voting stats to back up this idea, or is it more of the phenomenon that the minority opinions making the most noise seem to be more numerous than the population who generally keep to themselves?
Did they completely zone out when all this "Real ID" nonsense was rolled out? It's a defacto national ID that's going to be required for travel in the country (flying) but manages to skip out on providing any of the actual benefits a unified national Id would provide.
I would rather see the police spend 3 months ticketing everyone for littering. They are leaving shit on the sidewalks with no licences to do so.

I would also like to see them ticketing the riders for reckless driving/endangering of the people. I almost had an accident 2 weeks ago because some stupid riders decided to race on the street. I also see some of them riding in the sidewalks zipping through pedestrians and many times hitting their bags.
Thank you so much for making a brand new account just to shill for Bird.

That said, the CEO's story doesn't conflict with the article at all. The only difference is that the CEO whines 'fake news' and hopes that people won't think critically about how he's spinning.
If you can't control the lan server, like in zoom case, cors won't save you. In fact it did not save you a bit in this case.
noscript ABE guards against this in its default configuration. Unfortunately, I think the feature is only in the legacy addon version, not the post-quantum one.

https://noscript.net/abe/
Costa Rica uses a tiny fraction of power, per-capita, of a developed nation. Their solutions may not be applicable.
I'm eager for architects to incorporate shading into their designs. I love the louvres on the south face of the downtown Phoenix library. I imagine future iterations will put solar panels on those louvres.

Here's a pic with the louvres open.

https://www.archdaily.com/255208/burton-barr-central-library...

Rooftop decks being so popular now, I expect someone clever will eventually add solar panels as shades.
What I wouldn't give to be able to bank days for my future self.

"You know, I feel like having a me day. I'll hand this one off to 60-year-old me."

My 60-year-old self magically time travels in and has a blast with the kids he hasn't seen as children in decades. Meanwhile I get to relax. Then, twenty years from now, when the nest is cold and empty, the memories of my kids' childhood is fading, and I long to feel their little arms wrapped around me, I get zipped back in time to live a whole day of it afresh.

They say youth is wasted on the young. Sometimes it feels like parenting is wasted on young parents too.
Fear of deploys is the ultimate technical debt
Ask HN: Trying to find an old story about recovering a Linux system from rm -rf
Discussion over lunch came up about what a bad time rm -rf can be. Reminded me of an old tech story about how a team had to recover their boot volume on a running system where that nefarious command was inadvertently run incorrectly.
Sweet Home 3D can now be installed as a Snap App on Ubuntu
Y Combinator: Wren Carbon Offset Subscription
There is also the fact that the social security card is a flimsy piece of paper, not plastic or other more durable material. Even just getting social security cards on plastic would be an improvement for something you are expected to keep and present for your entire life.
They do? It might be just because of where I live but I can't recall ever seeing a shopping cart outside of the parking lot of a store.
Tell that to the talent that no longer wants to work for Facebook and the executives fleeing the company.

It's an extremely fast way to change a company, no matter how much voting power Zuckerberg has. It'll kick Facebook into old age stagnation and rot mode faster than just about anything else. To say nothing of what happens when an organization no longer trusts and believes in its CEO.

Which is to say, Zuckerberg's voting power doesn't make him or Facebook immune to suffering numerous consequences of poor leadership. That can rather dramatically change Facebook. Depending on the extent and duration of that poor decision making obviously.
There is the people trying to poison the homeless argument as well, which I can believe might possibly be true (more so in LA than Seattle).
> SSN is literally a national ID system.

That'd be weird, considering for decades the cards specifically said otherwise.

https://www.ssa.gov/history/hfaq.html

> Beginning with the sixth design version of the card, issued starting in 1946, SSA added a legend to the bottom of the card reading "FOR SOCIAL SECURITY PURPOSES -- NOT FOR IDENTIFICATION." This legend was removed as part of the design changes for the 18th version of the card, issued beginning in 1972.
Shouldn’t Dijkstra’s paper be your 0th reference?
Why target largely unsupported technologies like Metal Compute over say OpenCL with a _much_ larger market share? You mentioned the complaint about Nvidia CUDA limiting GPU support to Nvidia only, but Metal Compute limits you to a subset of AMD cards to a subset of Mac versions in the wild.
”and on average, each scooter gets ridden ten times a day with an average fare of $5”

FTA: ”revenue shrank sharply to only about $15 million”. That’s per quarter, so about $160,000 a day. At your claimed $50 revenue a day, that would be 3,200 scooters. Bird operates in over 100 cities worldwide (https://www.bird.co/cities/), so for that to be true, at least one of those cities would have less than 32 scooters.

⇒ it would surprise me if each scooter gets used even once a day, on average.
I've been using tapiriik.com to sync my activities from Strava to a folder on Dropbox. It's been working fine for years, but about two weeks ago I got an email from Strava saying they've temporarily deactivated the syncing to Tapiriik, and it's still offline.

I still recommend Tapiriik, it can sync between a lot of different services. I don't like the idea of having years worth of personal data on a proprietary platform, so I like the ability to keep them as GPX-files on Dropbox.

https://tapiriik.com/
I think this is a good analog for what Palantir does, actually. The thing to note is that Palantir is not in the data collection industry, or even the data storage industry. They are in the data analysis industry. One way or another California cops are going to build or buy tools that allow them to access their data, it might as well be from a company like Palantir which is security-minded.
Just to be clear: There's no need to "get around" CORS in the Zoom case. Browsers simply allow cross-domain GET and POST requests. Period.

CORS mediates the ability of JavaScript running in one origin to _read_ responses from another origin. If Zoom wanted JavaScript on any site to read data from the local installation, their local web server would need only return appropriate CORS headers. This was not necessary for the use case of joining a meeting.
Yeah, I shouldn't have used such a loaded word.
While history shows in any given population, there are reliably some people who fit this profile, it by no means justifies the conclusion that all people can be monsters.
> In my opinion, web pages should not be allowed to make requests to LAN addresses unless the user has specifically and intentionally configured the browser to allow this.

Is there a way to know definitively if an address is "local" rather than "wide"? Should that be more granular, e.g. host, LAN, WAN? How does that work with bridged networking and such?

If I'm already browsing something on the LAN, it seems reasonable to be able to browse other sites on the LAN. But then that seems like an overly broad definition of LAN would allow privilege escalation.

If I saw a private IP (192.168, 10, etc) or a .local domain, I'd assume that was a LAN address, but that's a convention and depends very much on routing being set up properly.
I don't know about LA, but in the midwest temps usually peak around 4pm, so AC really starts to crank right when solar is letting up.
What does it mean and what are the implications?
> spaghetti crap

That's called optimization, baby!
Also non returnable warrants, you get pinched for something in another province like theft or drug crimes in Alberta or elsewhere, flee to another province like BC to avoid jail and police don't want to pay to send you back. Then you end up a homeless criminal in the downtown eastside of Vancouver.
It's not that complicated. There are countries in Europe that, in addition to metered price per kWh used also have a fixed price for grid usage. If you feel you're completely self-sufficient and can survive without the grid, you can cut it off and pay nothing. If you use your own power but want to keep the grid connection for backup, you pay for grid access but nothing for power (or get a discount or a refund, or money back if you feed your excess power into the grid.)
Pretty much all modern browsers allow access to localhost, even from TLS pages. They treat localhost as though it were TLS so it's not even demoted to "mixed content".

And beyond that they also allow mixed content for asset requests from TLS pages to non-TLS URLs of any IP address (for instance an AT&T modem configuration page at 192.168.1.254).

This site detects all kinds of services running on your local network: https://github.com/wybiral/localtoast

I wrote a more in-depth explanation of this behavior here: https://davywybiral.blogspot.com/2019/05/always-secure-your-...