skysight-inc/HackerNews huggingface dataset:
Reminds me of how nonplussed has been redefined to mean the opposite of its original meaning. Fine for the language to evolve but we need to stop that sort of thing. It's super confusing now whenever someone uses nonplussed. Which meaning are they using?
Do you really believe that Facebook's stock went up because they "only" got a $5B fine?

Facebook's stock went up because they had a pending fine, and the value of the fine was announced, reducing uncertainty. Put another way, would you buy a car that has an unknown repair bill for the same price as a car you know how much it's going to cost to fix?
This explains a lot about the current administration.
One of the other reasons nuclear power plants in particular have tended to be large is NIMBY. The amount of opposition and regulatory burden you get to a 5GW plant is about the same as you get to a 0.5GW plant, but then you get ten times as much power from it.

There is now a new theory to handle this, which is to build smaller reactors and put them on barges or railcars. Then you can mass produce them in one place with one regulatory approval and the time it takes to go from there to supplying power to a new city is the 24 hours it takes to tow in the barge. Which deprives NIMBYs of one of their most annoying obstruction methods -- raising construction costs through intentional red tape and changing requirements after construction has already begun. That can't happen if you can go from local approval of operations to selling power in the course of an afternoon. And then you can't lose your investment due to an unfavorable or changing regulatory environment because in the worst case you tow the barge to some other place with lower hostility.

Hopefully that will work better.
Let's assume a piece of data is used to empty someone's bank accounts via social engineering. Now it's possible to calculate how much that'll cost the banks. Multiply that by the average worth of an Equifax "customer" and you'll arrive at a nice round number which should put them out of business.
How this any different than any other open source product has always been? Android killed Windows Mobile - do you have an Android phone? Do you use any software that is “free as in beer” subsidized by other businesses instead of paying for the equivalent software? What about Stack Overflow - it completely killed ExpertsExchange.

All of these products “killed business models”.
Coveo Acquires Tooso
> I seem to recall US dollar bills have the serial number on the bottom left

Our money (US Currency) has two (of the same) serial numbers on each bill; one on the lower left and one on the upper right for dollar bills. Other denominations also have two; one on each side of the front of the bill, however they are in opposite places i.e. upper left, and lower right--at least the current bills in my wallet are that way.
If you are going to use JWT besides its failings, you should use it safely. But not all advice in this piece is equally strong.

1. RS256 vs ES256 - you shouldn't use either. RS256 not just an old standard on the way out. With safe keys sizes tokens are often going to be too large and signing too slow for you. ES256 on the other hand, suffers from many theoretical flaws and at least one practical flaw that (complete breakdown if nonce is reused) that helped jailbreak the PS3.

The only reasonable asymmetric signature algorithms implemented for JWT are Ed25519 and Ed448, but they are still not supported by most libraries.

2. Key IDs - always include them, even if you're just using 1 key for now. Otherwise you cannot rotate keys securely without having to reject all existing tokens.

3. Have relatively short lifetimes for JWTs if you're not using a blacklist. A token that lasts for 180 days with no possible way to revoke it is a dangerous little thing.

4. Always verify that you only accept JWTs signed by the algorithm you're expecting. Otherwise you might be fooled by a JWT signed with HMAC-SHA256 by your RSA public key (which is known to the attacker:
https://auth0.com/blog/critical-vulnerabilities-in-json-web-...

5. Under no circumstances accept tokens signed with "none". The standard is just bonkers.

6. Rotate keys every month if you can, not every 2 years. This is keeping your joints well-oiled.

7. Damage control is still possible when using JSON Web Signature (JWS). JSON Web Encryption (JWE), on the other hand, is just a train wreck that is very hard t ouse properly. Avoid it all costs. PASETO provides a viable alternative for most cases it makes sense to use an encrypted token.

8. If you can avoid JWT, just avoid it. It's just too hard to implement securely. In the past there weren't any widespread alternatives, but PASETO is supported in most common platforms now and is clearly a better option.

https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-ba...
Ask HN: How do you manage event tracking at your workplace
I was wondering how different workplaces track user actions/events from a backend perspective. Popular options include segment, mparticle but they seem to be quite expensive for small/medium level enterprises
I am not worried about microsoft stopping developing it, i am worried about microsoft putting companies out of business using free products, which they then use to cross sell their closed source ides and as a marketing tool.

So would you be opposed to participating in a free forum that is used as a marketing tool by a venture capitalist?
> Netflix was worth it because it made accessing so much content easier than piracy

Amazon can solve that problem. They makes it easy to bring all those disparate channels into a single UI. For example, we have HBO, Boomerang, CBS all in the one Amazon Prime browsing experience. IE You don't need any other apps other than Amazon Prime.

Makes it super easy, but yeah, all the $10/month start to add up.
You can't do racial slurs here. We ban accounts that post like this. Please don't do it again, and please don't post political or nationalistic rants.

https://news.ycombinator.com/newsguidelines.html
OPPO unveils OPPO K3 on Amazon at a special price of INR 15,990
16/15 is still a "fraction" ¯\_(ツ)_/¯
> All I wanted via my original comment in this thread is the workaround

In that case you could simply have asked for it.
Interview with Bill Joy (1984) [pdf]
Show HN: Extract (fuzzy) url, uri, email patterns from texts
Similarly why gopher is not encrypted:

https://gopher.floodgap.com/gopher/gw.lite?gopher://tilde.te...
How is an additional chrome user profile that removes all history/cookies/ local storage on close different tracing-wise from an incognito session?
My guess is that a lot more is involved. IMO the dollar bill thing is just one of the pieces, cartels will not hand $100 Million to strangers based on just one piece of info. This is probably to rule out someone denying drugs got delivered. But enforcement is still the best tool
Is there any legitimate reason to allow arbitrary web apps to use gigabytes of space on my precious SSD, especially on mobile devices?

I'm becoming increasingly wary of web apps having all sorts of access to things outside of the browser, sometimes without explicit permission. Browsers should limit every app to the same amount, perhaps 100MB, or maybe even 10MB. Apps that need more should ask for permission.
http://archive.is/JsTT5
> What's wrong with running Solr/ES?

With this small quantity of data, usually the app's running on a small VM. I'm wary of running anything Java, having had it require large amounts of RAM before.

That said, I haven't touched JVM stuff for 5+ years.
The Amazon Prime model works decent i think. Bunch of included content and stuff that’s too expensive to throw in for free gets a rental charge.

Was trying to find John Wick 3 this weekend and no joy. I would have paid a premium for that.
I don't understand why you would post a comment that ignores so much information in the article, starting with the very first paragraph. There are in fact laws about reporting unusual volumes of drug sales and people employed by drugstores specifically to perform that task.

It seems like you just wanted to express your opinion and did so by suggesting that the article was somehow misleading or not grounded in reality.
Electric Scooter 350W Motor and Mi Band 4 $9.99
FCC fines Swarm $900k for unauthorized smallsat launch (2018)
Hm. Maybe we're talking about different things. The detectors I mean are fairly simple: inductive loops in rectangles cut into the road, that detect the metal body of a car (or metal frame of a bike). They don't seem technologically advanced or expensive (but I don't know the cost). This article claims they're common: https://auto.howstuffworks.com/car-driving-safety/safety-reg...
There's only one thing I need to improve my VIM experience: a way to set style options (and search paths) for each git workspace. I've yet to find a non-hairy way to do this. Help!
Show HN: WordPress care and social media content for professional services
All JMAP servers must support that format, but that doesn’t preclude supporting other formats via extensions. We use custom compression, for example; and a WebSocket transfer layer for the API parts, instead of HTTPS, is being standardised. In such cases, the server declares its support for such capabilities in the session object (which will be in the baseline format, JSON), and clients that know about them can opt into their behaviours, knowing that the server supports it.
There is a Japanese TV show called "How do you like Wednesdays", where 3 or 4 guys go travelling around the world doing crazy things -- not crazy like Youtube crazy. Just things like trying to visit every European country by car in 2 weeks. They do stupid eating challenges, etc, etc.

One of the things I like about the show (apart from the improvised humour) is that the director tells them what they are going to do and it usually involves something that at least one of them hates. Then they all laugh about it and go do it. The suffering is part of the humour.

One of the things I think modern life has been bad for is that it promises to alleviate suffering. But I've found that suffering is something that brings as much good as it does bad. When we avoid suffering, we avoid all those good things. We become like an animal in a zoo -- everything is provided, but there is no point.

I wouldn't go crazy about this, but you could consider trying to add some suffering intentionally to your life. Just something silly like purposely eating food that you don't like. Then revel in the audacity of it. Brag about how you conquered the evils of liver or whatever. When people ask you why you ate it, then say something stupid like "I ate it because it was there".

Slowly, slowly introduce more things that you can do. Make fun of them, like the boggart in the Harry Potter series. Laugh at the stupidity of intentionally doing these things.

One thing I will say almost for certain if you try it: You say you have a hard time accepting yourself the way you are. You probably don't actually know what way you are (and I'm not trying to be accusative here). You've been trapped in your cage of comfort. You will surprise yourself, I guarantee it.

Good luck!
The biggest hurdle for fusion power is, ultimately, how to deal with the neutrons. These particles are electrically neutral and their trajectories are unaffected by electromagnetic fields. The approach so far is to put a «blanket» around the fusion core to slow them down, but this fails to mention that the blanket will be slowly (or not so slowly) damaged by neutron induced transmutation. Since a lot of the energy released in fusion power comes in the form of kinetic energy of neutrons, it’s also essential to convert that energy into eg steam, for power generation.
Maybe it’s the skin? Cripps Pink have quite a thick skin, with a slight bitterness
Pandora has almost no variety at all. Even a playlist like "90s Alternative" which should have thousands of potential top songs plays the same songs every time I listen

If a streaming service didn't order automatically generated genre playlists by popularity (with a little randomness) people would stop listening to them and start saying the playlists are full of rubbish songs they've never heard of.
Radio probably prevents exclusives to some extent. If you can't get your song onto general radio you're going nowhere. Can't have exclusive online when radio isn't.

(generally, obviously there will be exceptions.)
Since software is involved, it is basically impossible for any court to ever judge a company guilty of negligence. There are no standards for software. No licensed engineers they could fail to hire, no industry mandated practices they could fail to follow, nothing. Even when Toyota's outrageous negligence killed dozens of people in their 'unintended acceleration' scandal, the actual negligence claims failed. That's very bad, because it is exactly those negligence claims that provide the best motivators to corporate executives when building critical infrastructure. A guilty verdict for negligence when building a bridge or road or similar can easily result in executives in real prison cells. But if a computer is involved, they know they don't need to worry. Their main worry then becomes the potential punitive damages awarded by juries, but that's just a monetary penalty and even those usually aren't larger than what it would cost for them to do things like hire experienced software engineers, give those engineers control over product scheduling, provide them with the tools they need, etc.
They’re good, but maybe too sweet and sour, if you see what i mean? They’ll overpower anything you eat with it (my breakfast is usually bread, apples, cheese, leftover meat). I ended up settling with Fuji - really good taste, but not as strong
[Off Topic]

I'm still using Windows 7 on this machine and there are Windows Updates permanently waiting for my shutdown.
One of these ended up causing me to spend 2 hours getting my machine back using safe mode and prayers.

I was recently locked out of my iPad Pro despite not entering an incorrect password. It told me to use iTunes to restore, despite the fact this iPad had never touched iTunes.

I was abroad, no laptop, and had to go to a (mini) Mac store and wait one hour while they figured out how to restore it.
i don't allow any unsupervised screen time at all.

we play games on the computer (currently minetest) together, or side by side (kid plays while i do something else)

kids are not allowed to activate electronic devices on their own. (son got his game-play session revoked for today because he didn't listen. we played a table-top game that my son suggested instead.)

i am not watching the hours. we are not playing that much that it would come up to the health limits for screen time, so that is a non-issue. the question is more about whether the activity is meaningful.
Patrick Winston was one of the last of the old-guard of MIT -- the type of professor who genuinely cared about students, acted with integrity, scientific progress, and was the soul of the old Institute.

A few remain, but not many.

I'm deeply saddened by each loss. The soul of the Institute dies a little bit more each time.
> quite tasty

Understatement of the year. I struggle to think what could be improved in Sweetango. It's what apples want to be when they grow up.
the fact that you have paternity leave suggest that you are regularly employed.

in which country are you, and what are your employment terms? are you paid while on leave?

if the leave is unpaid, can you opt out and get back to your paid work?

if the leave is paid, are you even allowed to earn extra money on the side? check your contracts carefully. while it is conceivable that you are allowed to have two jobs, one which is giving you leave and another which is not. it is more likely that you are not allowed to work, or that doing so would make your current employer very unhappy.

i would certainly be unhappy if my employees use paid time off to moonlight and instead of getting a rest, work to make more money because that will affect their productivity when they come back.
Not exactly encouraging given the failure rate of banks before deposit insurance.
I tip my hat to them. We need some boldness to move forward.
1 in 6 Americans are in chronic pain?
They are there, but they're largely marginalized by the newcomers. I think the deeper problems -- than ML taking over AI -- is the commitment to students, to scientific integrity, and to substance over hype and self-promotion.
What you are talking about is called punitive damages. Punitive damages exist exactly for the purpose of causing financial pain to companies in order to give them actual incentive to change their behavior (since if it is profitable to kill people, companies will make killing people a standard operating practice, we have multiple proofs of this). No other type of damage is levied as punishment. Other types of damages are driven by actual recovery of damages.
Pennsylvania here, same vintage. Agree 100%, red delicious used to be my jam. That stark contrast between the deep red skin and bright, clear flesh, those proud knuckles on the bottom, perfect crunch, sweet fresh taste, they used to be so good.
Just finished reading this book, “Ed Mastery”. I can’t tell if it’s “worth the money” - not sure if learning ed(1) is worth anything- but it’s fun to see the design decisions made way back in the 70s still being present in vim

https://www.amazon.com/Ed-Mastery-Standard-Unix-Editor-ebook...
Winston was always a pleasure to meet. He had asked his students to send him a postcard when they would visit places. I sent him postcards for the first few years after MIT. He was always enthusiastic and warm, and respectful.

VSNC, Star - Story, Slogan, Salient, Surprise, Symbol
I think you make a great point but the argument depends on the unstated assumption that master shit navigator == master architect, and I'm not sure how often that's true. They are different skills (maybe?) and while I'm sure there are loads of people with both skills I don't think it's universal.

I personally know one engineer that after a decade of being the 10x rockstar shit navigator finally got the opportunity to create a codebase from scratch. They'd been dreaming of doing such a thing for years and had the design all planned out. It was to be the shiny new product for the company.

One day the people upstairs finally gave their blessing. The ninja worked alone, making all the decisions, with full support of upper management. The result was a great big steaming pile of shit that nearly sunk the company. After a short period of mental health problems the ninja was promoted to shogun and the company hired a new shit navigator.

In football (soccer) it's easy to observe that good players can be good in totally different ways and/or situations. And it's also easy to observe players who were once thought of as good or bad can totally change either way when they change teams. It's a shame engineering performance can't be as easily observed.
Bloomberg, Apple, IBM also use Elasticsearch or more Elastic stack!
Thirteen Minutes to the Moon [audio]
I basically have this with Hulu. I pay for the live tv package and cloud dvr. It lets me access a back catalogue of streamable content for each “channel” in my package.

I have hbo/starz/and the big name cable channels for about $140/month with 200gb of cloud dvr.

My only real complaint is that I can’t download content to my phone for flights.

It’s not $12.99/month but when I’m traveling in Asia I can VPN back to my house and watch whatever I want off the cloud DVR.
Mosquitoes have been almost completely wiped out on two Chinese islands
move on! IMO donated tool, Yahoo can't maintain it, give it to community reduce the cost. If only it was a new project which wanted to address search in a different way.
You've never heard of it because the ARDC has been absolutely abysmal stewards of it, now they get a nice multi-megabuck payday for decades of negligence. Don't count on these "grants" ever actually materializing, count on huge paychecks for the board though.
I suspect with today's manufacturing technology and NC mills, one could be built from scratch at a doable price.
a profile that removes all history still writes to disk, and potentially leaves traces behind. (a backup could be running while the session is open, or a data could be left behind on a disk block because the files are deleted but not wiped)

incognite mode is useful for two situations:

A: you want to hide the fact that you visited a site.

B: you want to hide from the site that you have visited before.

the incognito-detection is largely against the second case (B), so your suggested workaround would work. what would also work is firefox tab groups. since each tab-group starts off empty.

the problem is that both ways are cumbersome. you have to open a new browser with that profile or you have to create a new tab-group and remove it after each use.

in firefox the problem could be solved by adding a "wipe, but don't delete tab group" feature. for the profile method you'd need a feature to "open link in new profile" to make that convenient.
Wall Street’s Trading Desks Endure Worst First Half in a Decade
nice. can't see any difference in firefox. however, it is still possible to detect incognite mode in firefox as i have just been to a site that did so. (they didn't detect reader-mode however, so i was able to read the article after all)
> The other way is that companies should feel about equal pain relative to their sizes. Otherwise, big companies are able to gain an unfair advantage by just ignoring laws for which they can afford the fines.

Which doesn't make any sense and just gives them the incentive to play the same games they do in avoiding taxes.

The first reason it doesn't make sense is that the penalty should have some relation to the damages. If you cause $500 damage to someone else without their consent, screw you. But if the fine for that is $5000 per victim, it's a deterrent no matter how big you are, because $5000 is more than $500 (and provides a fair margin for the probability of not getting caught), and if the company is getting more than $500 in value from doing it then it could have just offered to pay the victim $501 to consent to allowing it, which implies that they're not.

Meanwhile if you don't think large corporations can move numbers around on a spreadsheet to minimize what they owe, you haven't been paying attention. And we sure as heck don't need a system where Equifax gets to put its risky business in one entity that has inconsequential revenues and then suffer a $10 total fine when it screws up this bad because whatever penalty percentage of almost nothing rounds to zero.
Oral History of Donald Knuth (2007) [video]
That's like saying society has a whole lot to learn but not individual humans.
That's kind of a tautology - because there's no substantial progress. The real problem is that every time the fusion community has tried something some unexpected effects and behaviours have emerged derailing the technical approaches and sending the community back to the drawing board.
Great, now we're going to discriminate on the web because people don't have a lot of hard drive space free.
Oh, only $140/month? What a deal...


Bring it down to $60-$80 and I'd consider it.