skysight-inc/HackerNews huggingface dataset:
Tableau | Seattle, WA | Sr. Product Manager

Looking for a great PM to take the reins of the Tableau Extension Gallery and grow it. Lots to figure out like what new product types should we add and if we should facilitate commerce. Gallery delivers a lot of customer value already and this is and opportunity to amp that up as well as help grow and enable our partner ecosystem.

More details and apply at https://tableau.wd1.myworkdayjobs.com/External/job/Seattle-W...
Your example illustrates to me why moral hazard isn't the best title for this. We should provide free housing to people in need so they don't do things like commit a crime to go to jail.
I can't remember if it was full speed but it was perfectly playable to emulate SM64 with UltraHLE on my Pentium 200MMX OC to 225MHz with a Voodoo 2 8MB and 96MB of RAM.

I had to run it in Windows NT5 beta though, it stuttered in Windows 95.
+1 yeah, I don't get that argument either. does the fact that someone bought a car mean the car rental business model is a failure? does the fact that someone bought a house mean AirBnB's business model is a failure?
I wonder if the Peter Norvig comment mentioned in that article about the different pathways is what led to my idea of stepping past literate-programming and into a concept I call pieceful-programming; I had just had back surgery when I read the John Cook article and perhaps it filtered deep in the subconscious.

While I am still working on my pieceful implementation, the hope is to very much elevate the role of the pieces and ideally generate graphs relating to all the pieces that might have code, tests, various documentations related to the pieces, all being woven into their separate compilation targets.
How is the browser supposed to reason about "local"?
Unless EV door handles and airbags are that much more complicated, I must be missing something. The problems with EVs are support infrastructure and profitability, NOT reliability and complexity.
DNS rebinding attacks leverage this very behaviour. And they exist since years. Nothing new. And I think fixing the approach is complex and error prone. I can still make the browser connect to myhost.mydomain.com and have it resolve to 127.0.0.1 - what then?

Of course if your local webservers have a really open CORS header, that could be a problem. But it's a matter for local webserver, mostly. And DNS rebinding still applies.
IBM+y+Red+Hat+redefinen+la+nube+corporativa+en+2019
Banning Nazis but allowing communists, conservatives, "SJW"s, etc. is such an arbitrarily defined policy that I can't take these people seriously.

If you want to have an echo chamber, that's perfectly fine and understandable, but don't go around pretending your decision is based on some virtuous moral principle.
I’ve worked for 20+ years and I’ve learned that the boss “never cares about me”. Anyone who thinks that your company “cares about you” is in for a rude awaking.
The classic goodput vs throughput debate. E.g. Gigabit Ethernet is most commonly actually physically transmitted at 1.25 gigabit/s because of 8b10b coding. Ethernet requires interpacket gaps, and the packetization itself changes overhead. Then of course you have other protocol overheads underneath you could consider, and how much overhead the data you were transmitting has due to encoding of it itself.

In the end there is really "bandwidth" which is how much symbol "space" is available and various levels of "goodput" which is the rate of whatever you're calling useful data.
I think you'd be surprised how cheap land can get outside of cities.
I was too wondering about how this could work in IPv6.

There is no equivalent of RFC1918 for IPv6 and filtering link-local addresses won't do much as every host on the LAN is still adressable by its publicly routable address. These are probably too hard to predict, though.
I think I see your point but the slippery slope goes both ways.

Right now a certain class of criminals operate with impunity in Seattle. Our laws are not perfect and I even acknowledge the bias in drug prosecution but the solution to those problems is changing the laws, not ignoring them.

Contrary to popular belief we do in fact have a functional judiciary and legislature in this country.
Yes but do browsers do their own DNS resolution? Would a browser know if a domain resolved to a local ip?

I could pretty easily set up 1234.mymaliciousdomain.com to resolve to your local network.
Make fun of the fundies if you must, but don't ignore that longstanding books are written in response to longstanding problems.

Early Christians had a lot of experience with oppressive bureaucracies -- The Holy Roman Empire, among others -- and willfully subjecting yourself to a system for faraway emperors to scrutinize and inject themselves into your personal dealings is generally not a precursor to good times and personal prosperity.
I worked for a electric meter data analysis company that worked with local government owned utility companies. This is a complicated issue with a lot of potential reasons. My professional opinion is that yes, it often is cheaper to for municipalities to install solar in the long run, but there is a lot of uncertainty about the technology and the fragility of the proposed systems.

Depending on the energy generation, utility companies have long term fuel contracts which often work against long term investment in renewable energy generation. Local tax payers will have to pay for the deficit or potential contract penalties if the city reduces their energy generation requirements while still having a fuel purchase contract. That coupled with the investment cost of installing solar/wind generation infrastructure is a hard sell for elected officials who depend on short term impact to maintain their constituents happy.

There is also the question of legality, as some states have strict laws on who can generate electricity and who can store it/sell it. Typically the smaller and less progressive the region, the more likely they are to go towards the path of least resistance and just let the homeowner brunt the cost.

So some consumers install it for the long term gains without placing any bets on how local utilities will react, while others might do it as an investment on the property itself. These are just a few scenarios (without talking about commercial energy consumption) out of the hundreds being discussed.

It is becoming more common now for utilities to have energy surplus buy back programs that reduce the energy cost to the end user while they wait for the industry to progress past their latest infrastructure investment (a lot of local municipalities had huge infrastructure investments in the 90s / early 2000s that they are still paying for)
Reminds me of super-compilation.

https://en.wikipedia.org/wiki/Supercompilation
Maybe I don't understand what API bloat is in this context -- can you give some more detail regarding your thoughts on pandas?
doesn't work on safari 12.0.1
works on chrome!
https://en.wikipedia.org/wiki/Free_On-line_Dictionary_of_Com...
also allowed suggestions from users for changes
127.0.0.1/localhost are kind of obvious no?
Or maybe it's a popular/hip company? Every Netlify announcement makes the front page..

Was down for about 25 minutes.
https://en.wikipedia.org/wiki/Private_network
Can Sci-Fi Writers Prepare Us for an Uncertain Future?
https://www.wundercapital.com

The problem with commercial solar is the cost of the financing. Home solar is on par with a car loan, banks know how to do that with personal credit scores. Utility scale solar is the realm of private equity.

Something like a strip mall is a weird in-between that requires enough manual review that the cost to do all of the risk analysis that financing requires kinda outweighs the potential returns. Will that KMart or Costco keep that store open for the duration of the project? What happens when the tenancy changes?

I don't have any relation with Wunder, but from my understanding of them, they built some stuff to streamline all the financing and permitting required of commercial-scale to make those projects pencil out.
There's no uniform criteria for "local network". I can create a local device at any address I want. These days most are within 192.168 and 172.17 and 10., but not all.

As an example of legitimate use, Ubiquiti routers have a web app at ubiquiti.com that opens connections to manage your local routers. It's all authenticated with cookies. It seems like a good design.
It’s overpaying if anything. Why should the utility be forced to pay retail RTM rates for power that they could have bought wholesale a month before if they actually needed it? Utility ratecase logic often has many ratepayer-unfriendly motivations but this line of reasoning is legitimate, imo.
Of all the maths I use pushing code, statistics are likely the skills I keep using the most. Not required, but helpful.
baud vs. bps
On one hand I would feel slightly better if I could easily export my 1password data and stick it in an S3 bucket or something. I would even pay a premium for that.

But on the other hand I’ve had a great experience with 1password and I’m about as comfortable with them having my data as I am with Google having my data. Maybe even more so since I know they don’t read my data whereas Google does.

An interesting discussion would be how 1password handles backups, backup verification, and recovery.

I’ve seen Google mess up Gmail but everything always comes back, and I think it’s because their backup solution is exactly the insanely wicked setup you would expect from Google. Compare that to Hotmail or Yahoo Mail, both of which butchered my mailboxes multiple times back when I used those, or the infamous Microsoft Sidekick incident. I wonder where 1password falls between the two extremes.
Wholesale prices for electricity certainly vary, but consumer prices are a flat rate, 24/7. Nowhere I've lived has this not been the case, and there is no incentive whatsoever for consumers to time-shift their electricity consumption.

A huge part of what caused the Enron California electricity crisis is the utilities were unable, by law, to adjust consumer prices as wholesale prices changed. The utilities were required, by law, to provide whatever consumers demanded whenever they demanded it, at a fixed price, regardless of what it cost the utilities to provide it.

If this has changed in California, that's for the better. In Seattle, the price of electricity is the same, 24/7.

Consider gas prices at the pump. They vary every day, based on demand and supply of gas. Gas prices go up over Memorial Day. They go up when a refinery burns down. They go down in winter when people drive less. It works very well at matching up supply with demand.

It broke down completely in the late 1970's when the government imposed price controls and allocation controls at the pump. When Reagan repealed all that, things worked fine again.
That comment was breaking the site guidelines, quite badly in fact. We moderate comments like that the same way regardless of who or what they're about.

> there are literally 10-50 of these per day in arbitrary threads

If you can find cases of this where moderators didn't respond, I'd like to see links. The likeliest explanation is simply that we didn't see it. We don't come close to seeing everything that gets posted here, so we depend on users, via flagging (https://news.ycombinator.com/newsfaq.html) or by emailing hn@ycombinator.com.

> What is HN running on again?

I suppose I have to answer this or someone will concoct a sinister reason why I didn't. HN doesn't run on Cloudflare.
Good real-time traffic data is an emergent property of being an invasive platform. Maybe there’s a possibility of opting into position information uploading that goes to some open mothership(?) or decentralized mesh, but this is not going to ever be as good as google passively leveraging and aggregating its millions of phones in cars on the road.

OsmAnd definitely has some rough edges but it has rudimentary turn by turn navigation.
What prevents the plot compilation from being pre-compiled at install?
There are 3 well defined private network ranges, 1 loopback range and a few other random things. It's not silly to ask whether an address outside of them should be able to initiate connections to them. (In the context of a browser running on that network that is)
I've preordered and have no doubts in my mind that it'll be pushed back to Q4 or Q1/Q2 2020. I'm not really concerned about it releasing I think if they don't release it will be detrimental to the Purism image. Also I'm fine with the money I put down if it helps develop adaptive UI for Gnome and some better Linux driver support and nothing else. Hopefully we get a small Linux computer with a touch screen at the very least!
1: not everyone is a software developer here and 2: not everyone is a web developer. I've barely done front end stuff and do almost exclusively backend stuff so I didn't know that.

So does that mean any tab I have open on my computer can try and talk to my local development mysql server and my local development web server? That's crazy. Wasn't there also an article in the past year about how a bunch of IOT devices run unsecure on LAN because they assume they are secure?
It's plenty cheap in Renton. I think it's unreasonable to put a homeless shelter in the middle of downtown Seattle knowing that they're working with a limited budget and that paying a premium on the lot will result in less beds.
Instrumentation and Go, Golang Hash-Sets, Go Modules at Scale (Go Gazette #63)
I've done a bit of research on batteries and I haven't seen too many people mention vanadium redox flow batteries (VRFB) for grid storage. While lithium ion batteries have great energy density (necessary when you need to carry your energy) they deteriorate over time leading to continual capital expenditures. From what I've read, it seems like the VRFBs can basically run forever with minimal maintenance. If I were betting on large scale grid battery storage technologies I think this is where I would be interested in putting my money. While they are less energy dense, it doesn't really matter since most houses are stationary.
My brother and sister-in-law (Westerners) lived in Cairo for a few years and tell a similar humorous story. They too would just set their trash and unwanted items out in the hall where it would quickly disappear.

Once my sister-in-law put out some clothes that included an old T-Shirt that had been printed for a family get-together celebrating her parents 50th anniversary. It had a large photo of her parents on it along with wording like "John and Mary's 50th anniversary" etc. etc. She thought nothing of it. But several days later while walking near their apartment, she was taken aback to see an Egyptian man coming toward them proudly wearing the T-shirt with her parents smiling photo on it.

And it seemed this was his favorite or only shirt. For months afterword, she'd see her parent's photo as the man went about his business in the neighborhood. She took it all in stride!
My experience suggests that Bird won't tell the victim the identity of the guilty party even if they know it. Here's a video of a Bird scooter rider running a red light and almost causing a collision with me, a cyclist:

https://drive.google.com/open?id=19Bl1ZhMvxbLliIyNkNe_Aj3QWD...

I contacted Bird and while they did look at the video and seemed sympathetic, I got the impression that nothing was done in response. That's because they refused to tell me even simple things like "The rider was reprimanded". I didn't ask for the rider's identity, just for what was done in response. And I contacted them within an hour of the incident, providing precise time, location, and the video above, so I'm very confident they knew who the rider was.

(Sorry for the strong language in the video. Note that I included some time before the incident because I know from experience that some people always seem to suggest that if a cyclist had a bad time on the road it was because they antagonized who gave them a bad time. I hope it's clear that I had no contact with this guy before the video.)
Oh dear this ancient repeated never ending debate. Nuclear lost - in cost, in failure modes, in lack of private funding, in plant build time, in risk of enrichment systems... dead horse is dead.
Edit. Add the fact the reactors take decades to develop, cool story we have about ten of those decades before really shit has hit irreversible climate destabilization fan.
What I'd like to know is what has caused (what feels like) the massive increase in our cities of the "visible homeless"? Has there been a policy change, or some other nationwide change that has caused more people to become homeless? What is really going on?

I mean, there's always been both visible and "hidden" homeless people in cities - but over about the past 5 years (and it honestly feels like it increased dramatically after Trump became POTUS - but that has to be my imagination) it has gotten to the point where there are mass groups of such people, living in camps, roaming the streets, and some of them have committed crimes - either to pay for more drugs, food, maybe shelter, or just (maybe) in the hopes of being arrested and given a roof over their head.

Prior to that, I recall there being a few homeless here and there around my neighborhood and city (Phoenix, in my case), but like I said, this has seemed to change drastically.

I have heard rumors (and that's all I know them to be at best) of certain communities in California (typical culprits to the rumors seem to be wealthier areas of the State) paying for buses to transport their homeless to other cities outside California. It seems outlandish, and just another "blame California" excuse the conservatives here would use - but I honestly don't know what the truth is. It might be outlandish, but completely implausible?
> How do you differentiate between a valid and invalid request to localhost / the LAN?

With the same origin policy? I think the post advocates for something like allowing localhost and private IP addresses only from those very same addresses or from the URL bar. Any other page shouldn't be able to access them.

This will probably break something but what's the case for a web app to legitimately access local host? Maybe access to some local service installed by the user and managed "from the cloud".
> As Costa Rica is a small country, it's much easier for it achieve these lofty goals, than say, countries like China and the USA, which are larger in size.

Does this affirmation actually hold?
Is it really easier just because it's smaller? In this particular case Costa Rica has a lot of natural resources that enable this. But in general I think that these changes depend more on willingness than country size.
That’s an awfully strong accusation for what amounts to them not originally listing the $100mil as depreciation. That is hardly the crossing of ethnically lines, and neither your accusation nor the CEOs clever spin changes the fact that they’re still hemorrhaging money due to fundamentally poor business decisions.

What is your affiliation here, considering that you created this account an hour ago solely to post this inflammatory and misleading accusation?
Taking the safeties off to go faster... yes, you will go faster, but it might be right off a cliff.

This is a good lesson on Chesterton’s Fence. I’ve been thinking for a while that we really need the (default behavior) ability to annotate commits after the fact, so that we have a durable commentary that can evolve over time. We should be able to go back and add strongly worded things like “yes this looks broken but it exists due to this bug fix” or “please don’t write new code that looks like this. See xyz for a better alternative.”

Hell I think I’d be perfectly ok if the code review lived with the code permanently. Regression in the code? Josh warned you it was a bad idea. Maybe we should listen to Josh more?
RE2 is bullet proof. It is the defacto re engine used by anyone looking to deploy regexes to the wild (used in the now defunct google code search, for example). It has a track record. Russ Cox, its author, was affiliated with Ken Thompson from very early in his career.

Rust also has a good pedigree for not being faulty. BurntSushi, the author of rust's regex crate also has a good pedigree...

We switched to RE2 for a massive project 2 years ago and haven't looked back. It is a massive improvement in peace of mind.

If anything, I'm surprised that JGC has allowed the use of PCRE in production and on live inputs...
I've been doing a lot of route creation with Caltopo [0] these days, as it rivals Strava's own tool (except, sigh: for the Heatmap feature). If you want passion projects, that's it. Good import/export support as well. I can make an entire guidebook sans the narrative with it, basically (and do!) [1][2]

[0] https://caltopo.com/map.html

[1] https://justinsimoni.com/routes/backpacking-sawatch-14ers/

[2] https://justinsimoni.com/2018/11/10/how-to-access-every-14er...
Define "access". The SOP does not stop a page from initiating a request to any other origin, it stops it from interacting with it, so that, e.g. attacker.com cannot steal your session cookies from banking.com

You can do all kinds of things that don't violate the SOP but initiate a request:

- Link to another site

- Redirect someone to another page using Javascript

- Link an image from another site

- Put a form that submits data to another site

- Embed video/audio from another site

- Embed an iframe from another site

Do you propose disallowing all of those things?

There are plenty of legitimate use cases for all of these things.

If you wanted to do this you would have to disallow any type of links to local servers.
Totally agree. I don't think it makes sense for an arbitrary website to send requests against shitty IOT devices in someone's home, for example. Yes, you could argue that mom should be putting her IOT devices on a VLAN, but come on. The obvious, ethical solution is for the browsers to implement this layer of protection and make it obvious to the users when an access is attempted.
Bird most likey is the "employer." They have a gig economy model where people are paid a rate per scooter to pick them up, charge them and drop them off at a specific location.

Its doubtful the truck driver was an employee of bird, but its also likely they were only moving the scooters because of this model. That sounds like enough of a reason to add them to the suit that will also likely hit the driver.
That's fascinating.

Though it's not quite 100% renewable energy unless the energy being imported is also renewable.
They're working on a browser, so yes... I believe PWA will be possible since they're just rebranded HTML+JS apps.
My concern about socialized medicine are the stories I hear about unreasonable rationing (e.g. https://www.dailywire.com/news/45698/thousands-elderly-patie...). Maybe there is more to the story, but I haven't been able to find anything on the progressive side that addresses it. Can anyone point me in the right direction?
The "visible homeless" generate attention and motivation to address homelessness. The "invisible homeless" are, well, invisible and so it's hard to motivate people to give money/time/votes to addressing their problems. The "visible homeless" are a bit of a nuisance so there's a vested interest in addressing homelessness if you think doing so will stop that kind of thing.
Apple reportedly suspends development of AR/VR headsets
> Hell, even Lance Armstrong abandon ship

Well, to be far, I'm not sure if what Lance Armstrong does should be used to gauge what other people should do :)
Nuclear reactors are delicate machines, and owners all over the world treat them badly to maximize profits, those in France being no exception.

In theory there's lots of controls and oversight and everything, in practice the nuclear industry has waste products that are suitable for military purposes, and so they can get away with rather a lot as their watchdog ultimately also owns a military.

These campaigns to "end nuclear" might have less traction if the owners managed their systems properly.