skysight-inc/HackerNews huggingface dataset:
These laws vary state-by-state.

I'm kind of surprised that Massachusetts's very strong laws about wiretapping permit storage of training data from Amazon Echo/Google Assistant/Apple Siri/Microsoft Cortana/Xbox, given that by their nature they naturally sometimes record incidental conversations of people who didn't intentionally trigger them.

It's a fairly mainstream view that MA wiretapping law requires written consent from every participant in a conversation for the recording of their conversation in a non-public place and does not permit implicit agreement (there isn't any kind of common-sense carveout for "you should have known you were being recorded in the background by the Echo at your neighbor's house"). See MGL chapter 272 section 99 (https://malegislature.gov/laws/generallaws/partiv/titlei/cha... , sample writeup https://www.masslive.com/news/2014/06/massachusetts_wiretap_... )

Now, MA has a bunch of laws on the books that no one actually enforces. There is a law against jaywalking which provides a $1 fine and tickets are never issued. Or for a bigger example, there is a law that requires you get a temporary permit from the Alcoholic Beverages Control Commission before importing any quantity of alcohol into the state, including for example buying beer at a NH liquor store or flying home from Europe with a bottle of wine. Last time I looked I think that law provides for a $2500 fine or 6 month jail time if violated, although it was hard to tell. ABCC will absolutely insist that this is a real requirement if you ask, and will even provide a copy of all such permits they have issued for the year under freedom-of-information rules -- I once asked and was given a copy of 46 permits issued in 2015, many to a single person who reviews wine and stubbornly files a permit for every shipment he orders from out of state apparently to protest the requirement, causing so much administrative overhead that the ABCC tried to issue him a special blanket approval to get him to go away, which he refused to accept.

To the extent that wiretapping laws are similarly not really enforced against the technology companies who make, retain, and distribute the recordings, this seems like an unknowably large regulatory risk a lot of companies are taking. Sure, the state loves its big local employers (IIRC Alexa development is in Cambridge?), and wouldn't want to lose their tax revenue, but what if the political winds change?
Most people had few clothes and what they did have was hand-made. Poor women all knew how to sew, and many were quite good at it. Tailored clothes look really good on people.
So, under GDPR and as EU citizen, can I get Google to erase all my data if I steer clear of their services? I would really love it if I could, though I'm afraid they would rather pay fines than remove my data.
Identity theft, regular theft, harassment, stalking, sexual assault, discrimination, reputational harm, etc.

Example scenario:

I tell a friend that I voted for Trump, my Google home hears it, a Google employee eavesdrops, leaks on twitter that I voted for Trump along with my home address, the likely times I'll be in my home, and even the pin to disable my alarm, etc. Then a group of left-wing extremists uses that information to harass/rob/murder me.

Alternate scenario:

Google employee uses their access to find an attractive woman with a Google home, steal nudes, spy on conversations, etc. That escalates into stalking, and eventually sexual assault and/or murder.

Both of those scenarios are possible today, and we're just supposed to "trust" Google is being responsible because they say so.
In general yes - Outside my co2 sensor shows an accurate enough current planetary co2 level. Watching it is frightening.
Hyperlink with Graphical Cue
Parking-space racks come out in the summer in the more bike-friendly cities near Boston, for several years now. So, yeah, it's definitely a thing here.
Hi, if you'd like to donate at this point please check out https://projectvesta.org/donate where we currently have our "Grain of Hope" necklace available. It is a single grain of olivine, suspended in a sand timer vial, to symbolize that although time is ticking, it is not too late to stop (and reverse) the damage.

Since we do not have a beach yet where we can place olivine, we were originally not planning to offer the additional jewelry yet. That said, we are seeing demand for additional pieces at this point, so as long as people are clear that we don't have our $25 spent -> 1 ton of olivine on the beach process going yet, and that the donation is going to fund operations and to get our pilot project onto the beach, we will be happy to put them up. For now, I have removed the Cart from the menu, which I am guessing allowed you to work your way to the empty shop :)

And also you are right on target about the beaches and influencers. While we will be working on a top-down policy level with government and other groups to deploy the beaches, the plan is to simultaneously work from the bottom up to create a global movement of people who want to take action on climate change through influencers and ambassadors visiting the beach and also wearing the jewelry to spread the message.
Corporations and other organizations can work with Chinese ISPs to have government approved VPN connections.

Experiences with the GFW is perhaps the starkest example of YMMV I've seen yet in the world of computing.
Location: Boston

Remote: Yes

Willing to relocate: Yes. Especially interested in Denver/Boulder area. Would also consider NYC, Charlotte, or Chicago. No west coast cities please.

Technologies: Python(Pandas, Numpy, Scikit, Tensorflow, PyTorch, Flask, etc), Kubernetes (Kubeflow), Docker, Seldon, Kafka, Spark, SQL (Postgres, Oracle), NoSQL (Redis, Hive, Neo4j), AWS and GCP.

Resume/CV: isaacmg.github.io

Email: igodfried@isaac26.com

My focus is machine learning. This includes conducting exploratory data analysis (Bokeh, Pandas), collecting/storing data (SQL, NoSQL, S3), preprocessing data (Pandas, Spark), refactoring/training models (Tensorflow, PyTorch, scikit, XGBoost), deploying models (Docker, Flask, Seldon, Kubeflow), and monitoring model's performance once in production (Prometheus, Kubeflow A/B tests, etc).
You don't need to show the cookie notice for stuff like login or shopping carts. It is not about cookies, it is about recording, storing and selling tracking information beyond what is necessary for the functionality of the website.
Soulver 3 doesn't do that anymore, mainly because everything is synced to icloud, rather than being saved locally.
Zoom does not need CORS-headers to fix the vulnerability, rather make the web server running on localhost drop requests with wrong origin header.
I have no doubt that any project that gets scaled will be closely monitored for CO2 and effects locally - governments will want to know they getting something for their money. First to prove it works well enough, that they're not being defrauded by convincing snake oil, and also any unintended consequences no one mentioned.

It took years of the gigatons from burning oil, and the gigatons coming from burning forest and other plant material not being replaced by new growth that got us into this mess. We might be remediating for decades or centuries. Any and all are going to take years to ramp up to required scale - of mining, building, logistics, finance. We should get ample warning.

So long as contracts are written such they can stop when no longer needed... (I believe they'll probably always be needed until the oil is literally finished, but that's entirely different conversation!)
It's a bit hard to see what's going on with the Black Holes though. A better show would be to crash two near-collapse stars together to trigger a supernova. As an added bonus you get a fresh supply of heavy elements, which your civilization might be running low on since your have the capability to fly stars around.
I mean, the claim that he worked at a secret lab on alien tech should be the suspicious part...

The burden on proof is on him to prove the story is real, not on others to disprove the stuff he makes up.
Quality of life is not the as quantity of life. Not everyone sees their bodies machines that need to be optimized, they'd rather eat tasty food.
The Messy Reality of Personalized Learning in Underfunded Public Schools
Yes! "It is better to have 100 functions operate on one data structure than 10 functions on 10 data structures."

I don't care if it's literally Emacs, but I want all my data in one place. Half my programming career was spent taking one dumb format and converting it into another dumb format because the systems were incompatible, and for no good reason.

People complain about needing "dongles" (i.e., adapters) with Apple's new laptops, but there's a simple and obvious fix (buy one), and we can see the endgame (everything USB-C) where even that won't be required.

Programmers spend all day building custom software "dongles", with no end in sight. Why aren't they angry about that?
So, javascript requests made from one site to another would be allowed/prevented from returning the information to the browser session.

It can still be abused to exfiltrate data.
I've had much better luck using aMLC and pSLC cards than generic TLC ones. I would expect "industrial" MLC/SLC to be even better. There was an enlightening discussion on HN about them at https://news.ycombinator.com/item?id=16776344

You can also reduce risks with your choice of filesystem, read-only partitions, and FS tuning/alignment. I wrote up my findings after looking into it last year: https://kevinlocke.name/bits/2018/04/28/rpi-sd-card-storage-...
Yeah I agree. Instead of learning a new language subset, I just use what's already there.

For me, the go-to for multi-line calculations is Octave. At that point I can annotate to my hearts desire, plus I've always preferred Octave plotting over spreadsheet functions.

The ability to share your calculations nearly universally, though, is the major advantage of spreadsheets.
In the winter it would be hard to plow around them.
If nobody was working Friday, they'd need to institute a no-meeting Thursday so that everyone can work to make up for it.
Step 1 will be problematic at every single company I encountered that has a fixed number of vacation days, because they all have a cap on how many you can accumulate. Which usually is 2 years worth of vacation time (usually 15-20 days per year, so 30-40 days max), after which you cannot accumulate any more and just start losing them.

EDIT: I profusely apologize for this comment. It's been a rough morning, and the math didn't check out in my head at first. Step 1 from the parent comment should work just fine with the number of vacation days I listed, since 30 days * 8 hours = 240 hours.
This post is a bit short on information. I like the take is instead of "living without GUI" (hence CLI/TUI) it is living without the modern browser. But you'd be surprised how much stuff is flying over HTTP(S). For example consider VLC, and use the download subtitle extension. You could think of Beautiful Soup 4 or similar clients (didn't check if it uses that but as a Python example).

Which leads me to the question: when is a browser considered modern? If it has a GUI? If it supports Web 2.0? If it supports Web 3.0? If it supports JavaScript? If it supports all JavaScript by default?

"There are multiple text-based browsers to choose from. The oldest and maybe the most well known is Lynx. Personally I use Links instead, which provides a similar experience, but also includes a “graphical” mode that is capable of displaying images, and the default background color is black as opposed to gray (only for the non-graphical mode, though the background color can be changed in graphical mode). Here’s a list of text-based browsers from Wikipedia (not all of them are maintained)."

Every once in a while I check this out. They're all either horribly out of date, or they do not work with current technologies, or they have some experimental features but they're out of date ports from Firefox (with security vulnerabilities!). Hence I recommend Browsh instead which is based on Firefox. But I would not say it fits the narrative of "living without the modern browser" as it is Firefox under the hood. It fits better in the living without GUI narrative.
Science often requires if no other resource extensive time and it comes to pass people out there will pay you to invest your time in it only if you are a first class member as attested to by a degree and position. Most of the people who are indeed first class end up as first class members.

Citizen scientist seems to me to denote that one is actually a scientist despite lacking credentials unlike the 5000 other crackpots. To call someone who has no credentials a scientist would be misleading thus the term has utility and meaning.
Breaking Bad spun off Better Call Saul, which I really hope they wrap up in Season 5. The Americans and Justified are two other shows that ended when they should have. Fargo is a fresh story every season, so it can probably go on a bit longer. Fleabag was a perfect two season show.
This will never stop until we force their hand. We can 'urge' them all we want, but the Chinese government knows it means next to nothing.
Yep - they tried to build it twice I think. We were worried about that when we started, because we knew a partnership with them would be helpful. After working with them for a while now, I think it's clear they still believe in the opportunity.

In terms of why it didn't work out, I think there are two factors to consider:

1) it wasn't their flagship product
2) they had a capped market of support. In essence, they could only build a network of locations within their existing ecosystem, and despite that being large, it wouldn't be big enough to win the space.

I think a 3rd party is most likely to succeed here, because we can facilitate integrations with all of the POS providers, and build a really big network that way.
> The webserver listening in on localhost:19421 should implement a REST API

Is this server started by Zoom? In order to implement an endpoint, they’d have to ship a server along with the client. And this server would always be running? Is this not overkill for such a small feature (being able to click a link)
Are you selling your olivine operations as CO2 offsets?

If so, how cost effective would that be vs those offsets that are based on planting trees?
Show HN: Bamburgh Vuejs
It's an obvious safe bet until you cancel Firefly after one season. :(
I have never been in the position to choose other than voicing my opinion, all video conferencing sucks for some reason or another, and it has never been anywhere near the most important thing.
Also not a web dev, but if I'm remembering it correctly (someone please correct me if I'm wrong), the way I understood it was:

Whenever your browser sends any request to any site, it sends the cookies(/other auth data) associated with that site along with it. In other words, cookies are fundamentally just associated with the receiver, not the sender. So the "solution" is for the receiver to block requests from the wrong sender, since otherwise any site could send authenticated requests to any random site. [Edit in response to comment below: I should've mentioned more here, but I understand what happened was browsers introduced the Same-Origin Policy to prevent this from happening, and introduced CORS as a dynamic bypass mechanism for that, which, unless you implement OPTIONS, can get you these half-baked insecure situations where requests still get sent and executed, but the client JS doesn't get to see the responses.]

To me this whole mess is stupid because the premise shouldn't be true in the first place (why the heck should a cross-origin request send auth data? cookies etc. should be "contained" to whatever domains the original site restricted them to), but that's apparently The Way Things Are, and so here we are: browsers do something completely unexpected and insecure, and we blame devs for getting caught off-guard and not protecting against a security hole browsers introduce.

(Yes, I have Opinions on this. Please tell me exactly where I'm wrong, because I suspect I might be, but I have yet to figure it out.)
Black Swan Theory
Thanks for your view, but I beg to differ. Protestors are very interested in understanding how mainlanders think, and how to better convey the message of the protestors to mainlanders.

In one of the Hong Kong forum related to the protest, posts reflecting how mainlanders think got overwhelming upvotes (in Cantonese [1], [2], [3]).

As a matter of fact, those posts and their views hardly get mentioned in the press (local or foreign).

But if you have more to add, it would be very much appreciated.

[1]: https://lih.kg/1291046 "以一個大陸人的角度看向自由行宣傳"

[2]: https://lih.kg/1290746 "關於7/7遊行, 我有一個喺尖沙咀做服務業嘅朋友, 佢有啲嘢想講..."

[3]: https://lih.kg/1305083 "(開拓視野)看看大陸人真實既看法"
There is no such thing as a free market. The sooner Americans accept this maybe we can move forward towards a society where we don't allow businesses to engage in predatory practices under the guise of "free market ideology". Like Uber/Lyft price dumping for the past decade. We're ruining the taxi industry for what exactly? So a bunch of millionaires can lose money for 20 years because they are selling billionaires on the idea of having a monopoly.
Olivine weathering seems very hopeful! Some links:

Same folks as Vesta, I think: https://climitigation.org/olivine-can-reverse-climate-change...

Some general information: https://arctic-news.blogspot.com/2016/07/olivine-weathering-...

Another research group, I think: https://olivoa.eu/
this looks awesome, thanks!
It's a sick reality that, in this country, we sell wellness to the masses as if "wellness" and "health" are entirely one's own responsibility. One of the main roots of the problem is a work culture that exhausts many of us and pushes most families to the edge.
I don't understand this backlog for airplanes (Boeing and Airbus): Is this kind of backlog normal in industrial scale? Is it not viable to scale up production with the massive tail of suppliers that would all need to scale up?
Thanks for the clue! I thought nobody writes HTML comments any more.
Believe it or not, a lot of people see going to coffee shops as a social experience. My SO works at a Starbucks and the amount of people that come in on a daily basis just to get human contact is very surprising.
There are plenty of Mac apps where dragging the app to the trash doesn’t uninstall them.

Unlike windows which has the add/remove programs control panel there isn’t really a standardized way to uninstall things on Mac. (I think you can make a .pkg uninstaller but it’s rare to see that)

I went through the launch agents and launch daemons on my personal computer a few months ago and found plenty of obsolete stuff that was hanging around even after I no longer had whatever the associated app was installed.
Similar thing here that Londoners can request from their borough. https://www.cyclehoop.com/product/shelters-canopies/bikehang...
> Seattle removed its waterfront viaduct from service for a couple of weeks before changing over to the new $3.3B tunnel and traffic was mostly fine, despite apocalyptic predictions of gridlock.

I think this is not really capturing the full impact. This could have been caused by people choosing not to travel as much, and we would have to measure the economic impact of the reduced travel. Are people not visiting local businesses because they decide to stay home?

Not saying you aren't correct, just that traffic levels are only one thing we need to look at.
So sad to think of those beautiful locomotives destroyed in a spectacle.
That is very much a thing to consider... it just kind of becomes a cost-benefit analysis thing.

FB has some problems that very few companies in the world have... but they've solved most of those problems at this point and given the size of the company and engineering talent it's hard to imagine assignment of some of those problems being given to someone with little time spent at the company. I.E. you'd probably have to wait till you're pretty deep in at FB to be doing the work that you would want to be doing.

How many cool problems could you dig up and solve in that amount of time though? You run the show in your current situation... there's no reason you can't grow the scope of your business to incorporate the professional growth you are looking for. My $0.02 at least
Good question. Most of the shops we work with use a POS system on a tablet like an iPad, so they just use the Cloosiv Merchant app to field orders. If they don't have a tablet or phone we offer them a tablet they can use while they're accepting Cloosiv. In the future, it's our goal to complete integrations with the major POS providers so any shop can use the app.
I certainly don't understand CORS. I've read about it several times and I don't remember what I read. It's like CORS has a teflon coating that prevents it from sticking in my mind. I know what CORS is for and why you need it, but I have no idea how, where, and when to use it.
> I’m a web developer who has never done significant forms without JavaScript.

Perhaps you should give it a try and learn how to do it. That way you'll know when building non-js fallbacks is feasible and how do it easily.

> is it customary to have to submit the form to get the validation error messages to occur?

You trust the client to perform validation? Client-side validation should only be used to improve UX, not as a substitute for server-side validation.
Semantically, it should be, but, on account of the way C++ does things, at some point it is very likely to be destroyed, and whenever that happens, you want it to be in a state such that the running of its destructor has no consequences for the rest of the program.
I don't want that.

I don't want installing an office suite to permanently take away a percentage of my computer's resources.
While we’re on the subject of insect-killing tricks, dish soap + water in a spray bottle is an excellent at killing flies, and it’s very safe for you.
The rest of Saudi airline's fleet is all Airbus so it makes sense for them.
tl;dr: CORS is access control for cross-website requests. It's what stops HN from making requests to Facebook via your browser, and by extension your cookies and currently logged in account.
Previous discussion: https://news.ycombinator.com/item?id=20375264
Heh. This is exactly my point a few weeks ago here on HN. The same thing has happened in California. This will eventually put all of the legal weed shops out of business and we will be back to the black market.
Automatic browser reload after Ruby-on-Rails deployment
Strong winds are worse than hills. If you don't cycle then you might not appreciate how much headwinds can slow you down. Most of a cyclist's energy goes to overcoming wind resistance, and wind resistance increases with the square of the velocity. And crosswinds can be dangerous by making the bike hard to control.

But hills are always in the same place, so you just leave a little earlier and shift to a lower gear. It's slower, but no more difficult, and you have the downhill return journey to look forward to.
Imagine how fast our computers would be if all developers tuned for performance and did their best to conserve resources. We've gone from people trying to squeeze every last bit of performance out of an extremely low resource system to the current state of "just go for it, most people have enough resources for my one app I'm developing".

It blows my mind that companies think that delivering a full-featured browser with a web page to make it into a native application makes any sense whatsoever. In a lot of cases, the same app, written 30 years ago, would fit on a floppy disk.
I just started watching it this year. The writing is fantastic. I'm mid-way through Season 4. I hear it drops off after that with Sorkin's departure. Should I just pretend seasons 5-7 don't exist?