skysight-inc/HackerNews huggingface dataset:
To be fair, this kind of idiocy is in no way limited to scooters. In NYC we don't have Bird yet but we do have tons of delivery people on bikes (electric and traditional) that do stuff even more dangerous than this. One time while I was coming off of a steep downhill a delivery guy wheeled his bike out from between two parked cars without looking either way, and another delivery guy who was about 30 feet in front of me hit the bike, went over the handlebars, and smashed his face on the ground. He was visibly dazed for minutes after and bleeding from his head; it would have happened to me if I was about a second ahead of where I was. I've also had electric bikes whiz by about 2 feet from me on the sidewalk at 20+mph many times. They are nearly silent, so it's easy to imagine abruptly turning around or shifting over (as pedestrians are wont to do) and very getting severely injured. I've seen plenty of other awful and dangerous behavior in addition.

Fortunately, I don't see this as much with non-delivery cyclists. In NYC at least, this is mostly a problem with delivery people; the extreme pressure they are under to deliver on time, combined with the fact that many of them have clearly received no safety training, seems to be a major cause.

NYC's bad cyclists (and, in the future, bad scooterists) are actually scarier to me than NYC drivers because they can come at you from so many more angles thanks to their small size; it's much easier to predict and avoid cars and even pedestrians. (People are also used to cyclists here, so the cars are paradoxically not nearly as scary to me as they are in less dense environments.)

[edited to clarify that I was also on a bike]
> Protactinium-233 decays to pure, weapons-grade U-233
Would you please read https://news.ycombinator.com/newsguidelines.html and follow the rules when posting here? They ask you not to use this site for ideological battle, nor to post in the flamewar style. Downvotes of such comments are correct on HN.

Yes, someone else started it, but users here are asked to follow the guidelines whether someone else is or not.
CBP Can’t Detain Domestic Flight Passengers for Refusing Suspicionless ID Checks
The pavement and roads belong to cars.

It's a joke to say anything else. If a scooter can get hit by a car and mess up the car, we've gotta do something about this nuissance! If a scooter takes up 2 sq ft of space on a curb in between rides, they're ruining our streets! Capitalism run amok! But the entire row of cars parked for free a couple feet away? That's great. Not to mention, tens of thousands of lives lost every year? All good, nothing wrong with that.

It's also got absolutely nothing to do with people vs corporations, using that dichotomy here is absurd. Car makers spend hundreds of millions of dollars a year advertising to people to get them to buy more, bigger, more expensive cars. Not to mention, cars are even often leased or rented. I don't see why the business model of rental vs one-time purchase matters, but even if it does matter to you for some reason, cars and scooters are both rented!
I think the human cost aspects of federation could work like subreddits in terms of the amount of work necessary to keep things running relatively smoothly. The tooling likely needs to get way better though.
Dear Uber
Dear Uber,

In my opinion you have become unfriendly towards riders.

You already have a reputation for being unfriendly towards drivers and some employees.

Your unfriendly practices impact your ability to attract NEW riders.

To make my point I offer you the ability to experience it.

Try this use-case:

Find your phone, try to use your phone to create a new Uber account.

I found the above use-case is not supported.

Once a phone number is tied to an account, you cannot use that number to create a new account.

If you try, the uber-server will direct you to a form which asks for details of an existing account.

A new user has no existing account.

Validation-logic in the form prevents a new user completing the form.

So a new user cannot create a new uber account.

Therefore uber has become unfriendly towards riders, new riders specifically.

The work around is easy; it you are a new user, signup with Lyft.

Lyft supports the use-case of creating a new account with a number used to create an old account.
Also all drugs are equivalent, and we can avoid their negative effects by making them illegal.
> There's no uniform criteria for "local network". I can create a local device at any address I want.

Certain subnets are always private [1], and thus may safely treated as “local”. But, of course, non-private addresses could also be local, but that’s less common in a non-enterprise setting.

[1] https://en.wikipedia.org/wiki/Private_network
Real fun times is the fact that -on Linux machines- something like this will cause Steam to freeze and even crash certain games just by visiting the page: https://wybiral.github.io/steam-block/

Doesn't seem to affect Windows version though.
Is Dropshare's CORS policy allowing all origins?
UK solar farms generally don’t own the land they’re on, but pay a lease or license fee to the landowners.

A UK comparison would be the proposed Cleve Hill Solar Park in Kent, which will also have on-site battery storage. At 350MW it is almost as large as this LA project.
My father is homeless. No matter how much money you throw at him, he will always be homeless. He's an incompetent 54 year old. He needs to be constantly monitored so he doesn't drink or do drugs.

The only real solution to this level of homelessness is you need to round them up and essentially put them all in a glorified daycare or rehabilitation centers. Kind of like a lesser prison.
Plex is another example.

You log into app.plex.com, which will connect to yourserver.account.plex.local or something like that, which resolves to an IP on your LAN. Your server will then feed the web page app with data, without going via your WAN link.
Yes, but in some markets (via regulatory capture) retail power is SO expensive that rooftop solar is a great deal.

PG&E in California has tiered electricity costs of $0.28-$0.42/kwh

Meanwhile in other parts of the country, retail power could cost $0.06/kwh

bottom line: you are correct about utility scale power if there were a free market
(As a followup for anyone reading along, the YouTube team resolved the issue.)
Pretty sure you are missing something. We are talking about Costa Rica, not France. There have been protests in Costa Rica about a new tax. Truckers have been clogging up the roads.

Costa Rica has high taxes specifically on cars. It’s a car import tax and every new car has to be imported. Someone there told me 20%, but a quick search looks like it’s 45-85%. Whatever it is, the result is most people are driving around in old cars that have higher emissions than newer cars. A lot of the stuff on the road is over 20 years old.
If you have insurance and a pre-existing condition, it's probably going to be a net-neutral to the insurer (for every one coming on to their system, there's one leaving to another).

The preponderance of a given condition is not a function of having insurance (though complications thereof can certainly be increased by NOT having insurance). And has already been factored in by actuaries into policy pricing.

The biggest issue is that we see health insurance AS insurance, not amortized healthcare costing.

> There has to be some way that the insurance company can make money on the odds.

That's the thing, they see an opportunity to increase profit.

A few comments on that, as someone who has worked in the industry of developing software for health insurance claims management and benefit processing:

1) insurers are incentivized to deny claims, often talking about how "unfair" it might be for "them" to have to pay for a treatment. The irony is that "they" are not paying for anything - the risk pool is. Those premiums were calculated based on actuarial assessment, plus insurer overhead calculated in. What they mean by "them" having to pay out is that we cut into their profits, as they don't refund money to risk pools if the entirety of the pool is not used - they keep it, in addition to the admin overhead.

2) insurers have been known to be outright unethical, if not illegal in denying claims. Some prurient examples: denying Heli EMS for car accident victims from the scene to a trauma center because of "lack of pre-approval" (sorry, as a paramedic I am not "hold[ing] for a nurse consult" as I call an insurer to decide whether they are going to deign to pay for this patient's transport, and retroactively canceling coverage for "failure to disclose a pre-existing condition" that was actually unknown at the time of disclosure, i.e. "You were seeing a physician for maladies X, Y and Z. You had not been diagnosed with anything at that point, but later were, and maladies X, Y and Z were symptomatic of that. Ergo, you had that condition at that time, though you did not have a formal diagnosis, and failed to disclose that you had it. Accordingly we are voiding your coverage for breach of contract".
Please don't cross into personal attack in comments here. I'm sure you can make your substantive points without that.

https://news.ycombinator.com/newsguidelines.html
To actually fix this, you have to call memcpy_s instead of memcpy, and then not create the wrapper, which seems like almost the same amount of work, but slightly less. So why create the wrapper? Their library didn't have a memcpy_s function?
Lot of noise for what amounts to a squabble over whether to call the $100 million a loss because of horrible business decisions or depreciation... because of horrible business decisions.

I’m sure Bird will have equally good spin as to why, despite claiming this is such an egregious abuse of journalistic ethics, they won’t sue. “Priorities” or some such lazy excuse I’m sure.
It’s interesting you say this. I work as a web developer, I consider myself to be more or less well versed in security, and it would have never occurred to me that websites can make requests to devices inside the standard private blocks of addresses. I think it stands to reason that these requests should be blocked in the same way requests to the file:// protocol are blocked.
Cisco never requires a passsword to be set. iOS prompted for a password during the easy configuration but if you dropped in, via console or Tftp, a config over you can configure it without a pw.

Later versions did not allow passwordless ssh but still allowed it via telnet. Cisco’s ACI platform enforces password on the initial account, then with some smarts you could disable it in OpenLDAP
One of the reasons I'm so thrilled with Figma and that it completely covers (and more) what I had to use Sketch for...I'm now seriously entertaining the thought of migrating from Hackintosh (on a laptop) to Linux for my web dev / UXD stuff, and potentially just using KVM / Xen for any rare cases when I'd need OSX...For now, I think I'd just sorely miss Postbox (can anyone recommend a Linux alternative?), that's actually all I can think of...
Yes there is - RFC1918.
> I truly don't understand why people think this is a good idea.

They're usually trying to create smooth scrolling. The problem is, it never works in every browser.

> I also don't understand why there isn't a browser extension to prevent scroll-jacking effectively?

It should really just be an option in the browser, even if it's in a fancy hidden advanced settings page.
I think you guys are considering this from the wrong angle...

Rollbacks should always be safe. They should always be automatically tested. So a software release should do a gradual rollout (ie. 1, 10, 100, 1000 servers), but it should also restart a few servers with the old software version just to check a rollback still works.

The rollout should fail if health checks (including checking business metrics like conversion rates) on the new release or old release fails.

If only the new release fails, a rollback should be initiated automatically.

If only the old release fails, the system is in a fragile but still working state for a human to decide what to do.
I would also add hospitals and ER departments.
> is a truck load of cash

it is relative, for normal people it is indeed a ton of cash, but you have to compare that to the size of FB.
In that respect, $5B is not that much.
Is there a legitimate reason why 'other developers' might want to access services on my LAN?
> I'm sorry but WtF who is this guy

Can you please make your substantive points without making things personal?

https://news.ycombinator.com/newsguidelines.html
Pretty sure I found this here:

https://hackernoon.com/how-it-feels-to-learn-javascript-in-2...
I think you're missing that most of the homeless presence is in specific areas, like downtown, where there are not many free restrooms.

Private businesses see a lot of abuse of their restrooms — from people using them and not paying for anything, but also because they make good places to do drugs, and it's common for homeless to overstay their welcome and/or damage the facilities. As a result, many businesses put locks on them and require that paying customers ask for a code.

There are a few publicly provided restrooms, but they tend to be few, far between, and in pretty sorry disrepair. In SF for example, you can find restrooms in parks and libraries, but they're often a mess. There are some single use restrooms on the street that were designed to provide autonomous self-cleaning public facilities, but because of abuse, nowadays they're mostly either out-of-order or have a full-time worker to babysit them (also, there's not many of them, and there throughput is very low).
Renting property sucks and comes with a lot of risk.
Wait, which is easier/more feasible - adding security to browsers which restricts a fringe usage, or corralling all the router manufacturers to update their software to rewrite DNS responses? Wouldn't it result in the same outcome anyway?

Based on history I know which group I would expect to implement first.
Are Cashews Nuts, Legumes or Drupes?
Perpetuation of the homeless-industrial complex, if I had to guess.
Yes, I agree that delivery folks can be particularly dangerous. I also watch out for ridershare drivers as they are frequently distracted by their phone and in a rush.

The small size was a major problem here. I probably would have seen the scooter rider earlier if they were a driver running the red light. I now always check for red light runners at that intersection.

(As for how visible I was, I was wearing a hi-viz jacket at the time. My air horn seems to have been the only thing that caught the scooter guy's attention. Not sure what more I could do.)
So, to me a lot of what he (the sanitation worker) did wasn’t “official”. Also, he scavenged (and maybe it’s lucrative to him, if so it might interest others). It also mentions he does not observe religious orthodoxy. Someone could come along and try and argue he’s not fit for the job or worse.

It’s like when writing s story about people on the periphery of society and most writers use pseudonyms for their subjects. It’s good courtesy and good practice.
It is beyond sad that this was upvoted on HACKERnews. This is an intentional feature of web browsers and a specified feature of web standards. Could it use improvement? Maybe. Should we disable localhost requests from webpages? Abso-fucking-lutely not.

"Is this possibility not surprising to you?"

> no

"It was surprising to me!"

> that is because you don't understand the web

"The problem is actually worse than this."

> I wouldn't call it a problem

"The major browsers I've tested — Safari, Chrome, Firefox — all allow web pages to send requests not only to localhost but also to any IP address on your Local Area Network!"

> Yes, that's called conforming to a standard and it took years of work to get them all to behave the same.

In other news, the sky is blue, trees are green, and shooting yourself in the foot still makes you bleed.
You assume that the target is a web server. I can learn lots of interesting things by firing GET requests at non-web servers.
Involuntary commitment and treatment would go even further.

Downvoters should provide some supporting points. While you may not be impacted by this daily, many of us actually are accosted by aggressive homeless and even attacked in some instances. Many simply refuse to comply for treatment and at some point when a problem gets bad enough you have to step your treatments.
Comparing US society to the USSR. The US wanted to not ever become a "papers please" society, and tried to make it impossible to become one.

Some of this changed after 9/11, but the underlying mentality is still somewhat there.
To mitigate this, I configure my LAN’s DNS server to drop records which specify local or private addresses. Of course, this doesn’t help outside my LAN. In Unbound:

private-address: 192.168.0.0/16
private-address: 172.16.0.0/12
private-address: 10.0.0.0/8
private-address: 169.254.0.0/16
private-address: 127.0.0.1/8
private-address: fd00::/8
private-address: fe80::/10
private-address: ::ffff:0:0/96
private-address: ::1/128
MongoDB is a really scary database to use at scale.

It doesn't shard nicely. Failovers have rather nasty semantics that can cause nasty bugs in client side code. Performance cliffs abound.

If your datastore is anything over 1TB, I'd be using postgres, or if you can manage it something bigtable-like.
Follow up question I googled.

What is the resolution of our Eyes?

Ans: 576 Megapixels [1]..... Holy..... And here we are, trying to rely on couple of cameras for autopilot.

[1]http://www.clarkvision.com/articles/eye-resolution.html
An in-depth explanation of the unsafety at the core of Rust
Just on the HN point: we usually penalize those submissions and ask people not to do it. I'm sure guessmyname can write a fine post in English.
> Your entire post

I said "call me a luddite". You could've just written "You're a luddite." and saved yourself the trouble. I stopped reading your low-effort comment after the 3rd sentence.
What do you need an SSN for? Taxes. (There was a time when bank accounts actually paid enough interest to matter on your taxes...)
No of course not.

I would give one blanket permission for a website.

Then if possible list the devices which it connected to.

Or you alllow it only per device.
> Which totally 'begs the question' that somehow carrying these drugs is uniquely bad.

Not really, those are drugs that are highly addictive and which have caused many people to be unemployable and unable to support themselves.

If we're going to keep an eye out for 'propaganda' as another poster said, maybe someone who chose the name DubiousPusher has their own motives that are worth considering in this discussion?
In some sense any technology is adopted or ignored based on its intrinsic merits or lack thereof. If we're about encouraging people to move to less-harmful technologies, making them genuinely better and irresistible seems like the avenue most likely to actually work. Making a quasi-moral issue out of it, unfortunately doesn't seem to work because we're not necessarily moral creatures, and what you get instead is a lot of sanctimony, insincere virtue signaling, hypocrisy, not to mention outright resistance. (Edit: Also see: "religions" LOL) Meanwhile an argument about the urgency of future self-preservation doesn't work either, because of that word "future" - we suck at looking ahead. Making & using tools, that's what we're good at. Evaluating tools based on what benefits they give me right now, that's what we're good at. Although we are good at disseminating, absorbing and believing in ideas too, so that's the bright spot in terms of some kind of widespread voluntary change. But on my more pessimistic days when I don't believe an abstract concept can change consciousness that much, I figure the transition to better technologies is going to have to be based on their own advantages - like your friend's electric powerplant on the boat.
Maybe it runs selenium tests as part of the build process
Perhaps the dead horse is the claim that it’s dead? The only thing it’s held back by is ignorance.
Cool, so make it drivable via policy files like e.g. client cert pinning in Chrome. Industry has solved these problems, making excuses for fixing it is not good at this point.
I saw your comment and decided to look up how C#'s compiler does things.

It does two passes of the program text. And then does three dozen passes after that. Each pass does what you suggest, only one thing.

https://blogs.msdn.microsoft.com/ericlippert/2010/02/04/how-...

I think it's still fast because the passes are all or mostly O(n).
Yep, I have a sub domain under a personal domain pointing to a few a few specific specific 192.* addresses and localhost. It makes it easy to test HTTPS stuff without having to jump through hoops (and with Let's Encrypt it's free).
That's the market. It is savage to the naive and ill-prepared. Charitable property owners will eventually be out-competed by ruthless ones.
It's important to point out that in California, if you are treated "out of network" AND your health insurer is an HMO (such as Kaiser), you WILL NOT receive a surprise bill (see https://caselaw.findlaw.com/ca-supreme-court/1001051.html).

Anecdotally, our family have been Kaiser members for nearly 25 years, and we've NEVER been party to a billing dispute. Perhaps Kaiser fights with SF General or other ER providers, but they thankfully keep their members out of it.

Finally, my yearly cost to remain with Kaiser tends to be about 10% less than our company's other PPO options.
> Wilson, who prosecutors say suffers from mental illness, had already been arrested three times since September 2018 for assaulting total strangers, all of those cases were handled by Seattle Municipal Court.

> The Seattle Municipal Court judge made the decision to dismiss all of the assault charges stemming from these recent arrests.

I have so many questions
> The major browsers I've tested — Safari, Chrome, Firefox — all allow web pages to send requests not only to localhost but also to any IP address on your Local Area Network! Can you believe that? I'm both astonished and horrified.

I guess this should serve as a cue that there is something off in what you are writing. You did not just discover a major security flaw in all web browsers while not being an experimented (at least web) software engineer.
Ask HN: Need a Life/Career Advise
Hello HN,

Desperate and looking for an advice.

TL;DR; Have to move out of USA because of visa implications. Looking for a similar place in terms of lifestyle / career opportunities (senior .net dev) and recommendations on what to start with.

Full story is in the comments (careful - long read with lots of emotions)
I gave IINA a shot. It has a nicer UI, but it's not nearly as fast or responsive as mpv. No sale.
Anything intellectually interesting is welcome on HN. This article is as detailed and well-written as many others that interest people here.

https://news.ycombinator.com/newsguidelines.html
For me (intuitively, conceptually and abstractly), the AC is just a particular case of Hilbert's Entscheidungsproblem.

It doesn't matter what the AC states. All that matters is that you interpret it as a proposition. And then it's sufficient to assume that some algorithm can be constructed, or some Oracle can be consulted to determine the truth-value of the proposition.

Like, for example. I can construct you an Oracle which evaluates the "Law" of Non-Contradiction as true.

https://repl.it/repls/GiftedHumiliatingProcess

This is the fundamental (only?) difference between mathematics and programming. Mathematics assumes pure functions.
Lambda Calculus Interpreter
They allow a limited subset of rules, with strict parameters of what logic is allowed. Unless you do something fancy with workers.

Also, the protection for this was removed in a recent update before the incident, so it wouldn't have had an impact if a customer did this until that protect was removed. So maybe a few weeks earlier they might have started seeing some problems. But again, I am pretty sure the logic in the rule that caused the issue isn't available to customers.