skysight-inc/HackerNews huggingface dataset:
Warning: what follows is completely baseless speculation, and let's concede that right off the bat.

Who's to say that this isn't happening in the US as well? The US has invested billions of dollars in dragnet surveillance that is allegedly useless for anything other than metadata in the context of HTTPS.

Is it out of the question to ask whether our secret courts could issue gag orders and claim that national security mandates CA root keys? Such a gag order would only be served to a small group of engineers at large companies, and those engineers would have no right to report on it. We're talking about only a few hundred FISA gag orders, and thousands are served annually. It would make
their multibillion dollar infrastructure useful again, wouldn't surprise me if some (unnamed, anonymous) judge bought the argument.

To employees at vulnerable companies, what's your PKI like? Is anyone aware of a company that implements strong multi-party checks on accesses to important private keys? If the NSA wanted your keys, how many employees would need to be served gag orders? Is it on the order of dozens or hundreds?
No, as the certificates are user installed. The Bugzilla and other threads are about distrusting that user certificate.
This would be fantastic.

Also, it would be great if there were a "red dot" style warning when you manually click "Proceed anyway" while viewing a https page with an invalid certificate (currently, the browser remembers the "Proceed anyway" decision and accepts the invalid cert after the initial acceptance of the warning)
We need new measures to not allow these certificates to be installed unless they're verified, or at least the OS shows a massive giant warning "DO NOT DO THIS unless you accept this cert gives $identity access to all your data".

Seems a very solvable problem.
The issue is with the terms:

“You grant FaceApp a perpetual, irrevocable, nonexclusive, royalty-free, worldwide, fully-paid, transferable sub-licensable license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, publicly perform and display your User Content and any name, username or likeness provided in connection with your User Content in all media formats and channels now known or later developed, without compensation to you.”

Social media networks like Facebook and Snapchat aren't like this.
Because explicit memory management has a higher cognitive overhead than implicit memory management, a GC-based language is more suitable higher up the stack.
Ah, I can somewhat agree with that. But I have doubts any experience is flawless.

Though, I did mean my yubikey use is for gpg. I have considered otp uses of it. But primarily use it for supporting pass, which is gpg.
Anecdote; I’ve had family and friends cancel Netflix when their old favorites got pulled.

People that are center of the road politically, and very nostalgia/tradition driven. It seems reasonable to me that type of person makes up a pretty large portion of the population (I grew up in the Midwest and feel that basically describes the region pretty well, accepting it’s just my gut sense.)

Our brains like routine. That routine can be chasing novel experience or sitting still clinging to nostalgia. Seems pretty clear from the news the majority fall into the latter group.
Helen: Maliciously Secure Coopetitive Learning for Linear Models
Most browsers have made the lack of a "lock" quite evident to end users.
Portland Considers Antimask Law Aimed at Antifa Violence
So in order to have complete automatic resource management you need to build a custom OS and possibly even custom hardware.
Tangent:

This is related to the idea of JIT and low-inventory in Lean. By reducing inventory, it allows problems in production to be revealed so they can be addressed. Consider a simple 2 stage process. The first stage is down 50% of the time on average:

A -> B

When A is running, perhaps it can produce inventory faster than B can process it. So we run A at full-capacity and build up massive inventories in front of B. A happens to be down for a week straight, we exhaust that buffer and can't produce any more products. Because the inventory is usually allowed to go so high, the problems with A aren't addressed (they aren't pain points for the business). By the time A is down for a week and it becomes a pain point, it may be too late to save this business.

In Lean, you pull inventory into B only when needed (realistically you'd have some lead time, of course). You maintain a modest buffer to accommodate that lead time. If A can't produce in time, instead of growing that buffer permanently, you address the issues with A. Identify the failing components in A and find a more reliable replacement. Maybe there's not enough people trained to operate A so you cross-train people. Maybe you buy a second system (cheaper, lower capacity?) that can do what A does to shift the burden, or you find another machine that can be conscripted and used to make the same things that's only rarely needed for its primary purpose.

People who operate at 100% capacity and are your "heros" are similar to A. Everything seems great as long as they're there, but once they're gone (even for a day) they're noticed. By capping overtime (or eliminating it), by encouraging vacation time, you can find out who is critical to your business processes, and start shifting the burden (because it's an obvious pain point).

Anecdote: We had a guy who wasn't officially IT, but had been doing IT for our build and other dev systems, it wasn't his main job. He was gone for a vacation or business trip for a week, on Monday the systems went down. Nothing was accomplished until he returned and fixed the problems because no one else knew how to do that work. He was a liability for the team and business. This happened on more than one occasion. Management loved him because they didn't recognize the causal relationship between his leaving and things being in a failing state (didn't happen everytime, he wasn't causing the failures, but his absence meant the failures were noticed and not addressed quickly).

Control your "WIP" (work-in-progress or work-in-process) better, and you'll see work piling up in specific places. Just track it on a board or create a helpdesk ticket system that people have to interface with. It'll make all these pain points obvious so they can be addressed.
because I never see any ads :P

20-30 percent of people use ad-blockers, and I think I already know the demographics compared to the exposed population.

But for a serious argument, I refer to the studies on delayed gratification and the association with education and upbringing.
I gave this a quick spin since I love survey forms :-)

Overall, the UI is good and easy to use. There are some bugs like:

* I cannot edit the input field title

* Drag and drop breaks too easily

* The submit button looks "disabled". https://form.mightyforms.com/preview/f3874162-4890-452f-8ef1...

* I couldn't figure how to get a public link to the form. Or is only sharing possible?

See https://imgur.com/gnEr6e8 for UI issues

Overall, I think once you have the bugs ironed out, it's ready to launch as a MVP. Good stuff!
>is really people pushing back against the notion that weird or bad behavior is a signal of greatness, or that productivity means you can treat people like shit.

Exactly. No one sensible disputes that, given the right circumstances, some engineers (or business leaders, etc.) can bring more value to an organization or culture broadly than ten or more people who are just OK.

But pretty much everyone I know who I consider exceptionally valuable is also good at working with others and enabling teams to be successful.
The trademark "Grindr" does not exactly resonate that goal.
Sexual Lexis defines "Grinder" as #4. A man in the act of copulation.

http://www.sex-lexis.com/Sex-Dictionary/grinder
A 10x programmer would learn from this bug, think through why their current architecture could produce such bugs, write a test suite to ensure that they wont happen again and alter their testing procedures for finding reported bugs in the future.
> I grew up getting a lot of "evil commies" messages in US American media and I'm not even in USA (I'm from UK).

And even then, the propaganda can turn on a dime. Rambo III, where Stallone more or less single-handedly beats the Russians in Afghanistan, has this message in their closing credits:

> "This film is dedicated to the gallant mujahedeen of Afghanistan"

Blatant ignorance of the divisions within the militant groups fighting Russian presence, not to mention rivalries between clan leaders who actually lived in Afghanistan and Saudi-funded foreign fighters looking to establish a foothold in the country.

After 9/11, that message was removed from VHS and DVDs of the film. I remember seeing the TV syndicated version many years back that had the message intact.
Twitter isn't going to make money with a bunch of power-user features for non-paying users. They're going to make onboarding painless and the overall experience as unintimidating as possible. That means minimizing features that don't keep people on the site and viewing ads.
Nice, the configurability is pretty unique. I like the the flexible adjustment of the split keyboard and programmability of the keys, but I wonder if I could get used to the key layout on the two splits.
It must be a little soul-crushing to be one of the old-time users and seeing the same questions over-and-over. I think instead of booting those elite users, SO should have a quarantine (or nursery) where badly-asked/homework/do-my-job questions can be shunted off to the side instead of closed immediately. Probably with do-not-crawl robots.txt.

I use SO multiple times a day and sometimes feel the urge to contribute back. I don't have enough expertise to help with deep problems, but am patient enough to work a newbie through their bash/awk/sql questions and it's enough for me to hopefully make one struggling person's day a little better.
Really? It strikes me as a great way of not validating the interruption to me.
First round of UI navigation improvements! Yay!
I see what you're saying and it's hard when something you care about gets changed in a way that doesn't align with your original intentions, but this is something professional Software Developers have to deal with on a daily basis when working on teams, and granted, is a very hard mentality to embrace.

WHY questions are not good use cases for what Stack Overflow is trying to accomplish. WHY questions to a community that isn't the original developer of a tool have subjective answers and Stack Overflow is trying to be a place of objective problem solving. Possibly your question was better suited for an app like Quora.
>Going to McDonalds is much more expensive, something like 20$ per day!

If you're ordering off of the value menu it's nowhere near that expensive in most of the country.

>rolled oats (70c per lb), Onions, potatoes, flax seeds, green peppers, bananas, whole wheat flour etc

Most of those particularly the wheat flour requires significant preparation--knowledge, time, a stocked and functioning kitchen.

A lot of those people in the bottom 10% of income in the UK aren't going to have an oven.

>With the proper education,

Yes, proper education, plus time, plus a working kitchen. 3 things that the very poor aren't likely to have. And keep in mind this was when you were a single college student, not a working single mother with 2 small kids.
This is actually a huge misconception and false. The majority of fences were built by immigrant Irish stonemasons, although it is obvious that slave labor probably played some role in this. The style of stone fence was directly imported from Ulster & Northern Ireland, with Irish immigrants. If you'd like to know more about the history of the fences, and more specifically, the masons that built them, the authoritative source is "Rock Fences of Kentucky" [0].

That's not to say that slavery does not play a role in the history of the area (and the entire country), but much of the heritage of the stone fences has little to do with slavery or slave labor. Post emancipation, the number of freedmen stonemasons slowly grew and displaced Irish stonemasons.

[0] - https://books.google.com/books?id=UDHQjDJ677MC&pg=PA84&sourc...
Yep, totally confused me. Thanks!
This is not the case. Y’all just don’t know how to small talk.
Actually, the StackOverflow systems encourage that, in a gentle way, by encouraging you to slot questions into concrete categories. If you've accumulated enough cred to have access to those tools, you'll see that they present you with possibly similar questions that you can browse. Volunteers with little time and a lot of items in their queue are probably likely to notice similarities in the questions and just choose the 'identical question' option, and then move on. More detailed feedback on the question itself is hard to give, and for every one that can genuinely be improved by feedback, there's dozens that are unsalvageable, or truly are duplicates.
Going back to normal, i.e the browser saying that the presented certificate is invalid, yes. But you will not be able to browse anything over a HTTPS connection. (Or do other stuff over PKI based TLS, i.e downloading software updates etc.)
I find it entertaining to learn about things that distinguish humans from other mammals, other primates, or birds.

Humans can throw good.

Humans can run long.

Humans can pen themselves up in masses without killing each other.
SO says that the question you ask on their site is not yours, so they can do whatever they want with it.

I just stopped asking questions there.
"without an audit"

It would be more accurate to say that they have failed every attempted audit of the protocol.
Some of these interfaces might be really fun to implement, but there are very few of them that I think I'd want to use.

For me, writing code is about the easiest thing I do. Other than identifier completion, I don't need much beyond a basic text editor.

On the other hand, understanding code -- not just exploring it, but understanding it -- is the the hardest thing I have to do, and that's where a good UI could be helpful. I only made a superficial scan, but it didn't really seem like any of these UIs were designed to do that.

I don't really need a map to a code base so much as I need a tool for making my own maps (not just one!) into the codebase as I try to understand it. Or understand at least enough of it to do my current task.
Does such a certificate compromise non-browser traffic as well? Like SSH tunnels, mobile apps, Telegram etc.
What do you mean by it’s poor state in macOs? I use it as my main browser on macOs both at work and at home, and much prefer it over Chrome.
This is why I'm always advocating for political engagement for fighting these kind of issues. It's not exactly hard for a government to ban or forbid circumventing their monitoring. It does take time, but they're about to catch up.
There are many dry stone (lava) structures on the Hawaiian islands.
> As for the tragedy of the commons, if your mining operation negatively impacts mine by messing up a shared resource, I can sue you right away. The lack of a legal framework doesn't mean that everything is legal, at least under US tradition; it means that the civil courts decide.

This is only true though for direct damages that ideally are measurable in a monetary value. Are there cases where it helped keeping goods in the commons. I for one would love to sue everyone who fishes in the ocean because I'd rather watch the fish and sleep well at night knowing the ocean isn't being ruined. Simpler and less controversial example would be pollution of the air we are all breathing.
I wonder why supermarkets themselves aren't making more blue-apron style meal plans aimed at different income categories. It is a relatively inexpensive way to value-add items you already have and differentiate yourself from other supermarkets. And you can help people that either don't know/don't care about nutrition (enough to come up with a nutrition regime) eat healthy; perhaps creating the meal kits could be partially subsidized by the gov.

You can feed someone very well for $50/week. And you can even do it in a way that requires only low-effort cooking: meat that can be baked, microwaveable vegetables, eggs that can be simply boiled or cooked in a pan with butter, pasta and oatmeal. Dairy products, fruits, some vegetables, and nuts can just be eaten without processing. Canned food that can be eaten right out of the can or just heated up.

Assuming a main reason poor people don't eat healthier food is due to lack of time, cognitive overhead, or lack of knowledge (not only re: what food is healthy or not, but also how to optimize nutrition/f(cost, time, effort)) it could help. I don't have time to go into how it's even possible healthy food could take 75% of someone's income (assuming that person has an income of $10k/year, that is over $140/week) but there are surely compromises you can make to get the majority of the benefits of eating healthy food without spending nearly that much.
The backend is rock solid, no question there. Glad to see the UI is getting some love. Keep up the good work!
There totally are good examples ui/ux designs that minimize the emotional impact of negative feedback. Stack Overflow might take a page from dating apps. Imagine if Tinder told you all the hot people that rejected you! That's kindof where SO is now. Instead, Tinder takes a terrible experience (rejection), hides it, and only shows you the great experiences (acceptance).

The main constraint to work around is that, currently, question pages are mostly globally public. SO could change that pretty easily. They already have a lot of the mechanisms.

Like, it could be as simple as only showing downvotes and downvoters if you are logged in and have enough user 'points.' Otherwise, just show the newbies the result ('marked as duplicate' etc), and a [-] instead of -7 on the question tally. So it doesn't feel like a crowd of people yelling at you.

And, what could be really super cool, is if the SO team can auto-recommend learning materials specific to the programming language/framework/whatever. Like if I ask a stupid question about Django models, which becomes marked as duplicate, SO NLP's the question then matches it to the Django docs, which they've also indexed via NLP.

If there's some reason why you really need to see specific reasons the elite users decided the question was a duplicate or unclear, SO could use progressive ui design. Instead of blasting newbies in the face with criticism on the question page, make them click to reveal why H4x0r69 said your stupid XSS question confused CSPs and CORS, so the experience is a dialectic rather than public shaming.
>Who's to say that this isn't happening in the US as well?

No one can say it because you just claimed it's all secret and can't be proven.
Commit time and push time are not the same time.
It's more of a journalist epidemic - they keep reaching for straw-men to justify their existence.

Talking about loneliness is slightly more interesting than what dress celebrity X wore at event Y. It's just bullshit - at least the dress talk doesn't pretend otherwise, for the most part.

We're living in the greatest time ever. I understand that when you make no money and you're writing articles, it may seem like there is a loneliness epidemic. There isn't - we're doing better than ever. More people are having first world problems than ever. It's great to have those, just talk to someone with a little perspective that you respect for it to rub off on you and go on about your day :)
Yeah, the feed is now just slightly awkward and oversized, for what I can't see as any good reason. Reducing the zoom to 90% makes it comfortable again to read a Tweet. I have trouble reading oversized text.
FWIW, you can still use TweetDeck[1] which has better density, customizable media size, and multi-column views. Previously I just used it for following live events but switched when the desktop site got mobile-ified. I also left feedback on the redesign.

I pray they keep around the alternatives like this for a dense display format on desktop.

[1] https://tweetdeck.twitter.com/
Non adware/spyware article

https://www.berkeleyside.com/2019/07/17/natural-gas-pipes-no...
Corporations also do this so they can scan traffic for data exfil.
It's just Buzzfeeds gaysploitation culture
This is an adapter in one of the purer forms of the definition, and not a type of either dongle that I can see unless you consider Apple firmware being present on the device board as a qualifier.
Shoot, I hadn't even considered software updates. If this is installed at the system level, they could MITM any software update mechanism that doesn't use cert pinning, couldn't they? Woof.
Again, I think this is more a problem with upper middle class suburbs. I grew up in the DC suburbs, where nobody knew each other because nobody was from there. They had moved there for careers; often it was a government position and they’d move back to Michigan or wherever after the political appointee they worked for left office. That was distinctly different from my wife’s experience. (Most of her extended family lives within a couple of hours of the homestead her family had when they came over in the wagon trains, and her parents went to the same high school.)
What prevents us from having to trust Verisign (or its employees) or a government warrant, etc. to not do the same?

Can we leverage signed DNS records to add another layer of control needed?
Do we also need encrypted DNS where we can choose who to trust?
Are we stuck with the CA trust model?
If you don't have the special root certificate installed, the browser will refuse to connect because the certificate being presented is invalid (it's the government spying certificate, which you don't trust, not Facebook's certificate, which you do trust).
> It's why card skimmers always get caught, too, eventually.

They don't always get caught.

> This is the problem with stealing "easy money." It's hard to stop, especially if you don't spend the first portion of money wisely.

This is very true. Easy money skews how you think. When I was into credit card fraud money became less meaningful. I could get almost anything I wanted for free using stolen cards.

That said, I also kept my activities below what I considered a safe threshold, volumes that would be less likely to cause a large investigation.
Ask HN: How to program in an environment where functional programming is used
I'm a developer and I didn't do that great in mathematics and the company I work for use ramda and I'm really struggling to get my head around functional programming what would you recommend I learn so I can start to understand some of the concepts?
Stack Overflow is a huge community and they want to keep the quality of both the questions and the answers high. If they wouldn't downvote low quality questions, then the search function would degrade significantly. So newbies will always have a good chance of having a negative experience, even if it's done in the most respectable way with constructive criticism. I'm not sure much can be done against that, except perhaps better preparing first time question askers by having them go through a short tutorial before they can ask a question, or having first-time questions handled differently from regular ones (ie, only visible to moderators, so they don't attract too many negative comments from regular users).