skysight-inc/HackerNews huggingface dataset:
There is actually no OAuth 2 scope that allow only subdirectory access. App developers can either get full access, per-file access with a file picker or Application data folder access. Using Application data folder would seem to be the right choice but there is one problem: you cannot access Application data folder through Google Drive apps. Only the OAuth 2 application can access that folder. You can delete it in your Google Drive settings but you cannot see the actual files.
I concede that Wire has essentially lifted the core crypto bones from Signal. But metadata collection is a clear distinction between Signal and Wire, so if what 'jcranmer is saying about email metadata is persuasive to you, your choice between Wire and Signal should be clear: use Signal, not Wire.
The Rocketeers: An Autobiographical Journey
Whoa. please don't cross into personal attack.

https://news.ycombinator.com/newsguidelines.html
I think that's a totally unreasonable interpretation of what was posted and a totally unfounded fear. I hope you will reconsider your position.
Or just CTRL+z and then 'fg' to go back.
Researcher Bypasses Instagram 2FA to Hack Any Account
Amazon has the interesting idea of making it as easy as possible to buy a subscription (to Starz, HBO) and then cancel it later when you are no longer interested. I think this is very important in the future, where every content producer wants to have their own Netflix.

The advantage that Amazon offers, is that you only have to learn how to cancel a channel on Amazon, and not on 10 different websites..
Thanks for the reply. Such introspection tool would be useful indeed--it seems already possible to do some inspection by hand with https://fluxml.ai/Zygote.jl/latest/adjoints/#Gradient-Reflec...

Anyway, great work and I look forward to what happens next!
My understanding of Iran’s situation is this.

They depend on Oil exports. The US is aggressively restricting their ability to export oil and demanding that they cut back on nuclear. But they’re aware that without nuclear the threat of forced US regime change is kind of high based on precedent. So they need to play ball, all the while their economy tanks. It seems like the US has put them in a place where their government must sacrifice the livelihood of their people to maintain power.

Trying to write that as neutrally as I can.

But I don’t understand what they hope to gain from becoming a militaristic enemy of the west. That seems like a good way to guarantee they never get their oil economy going again.
I feel that would prove nothing but perhaps you could tell me what you think I'm saying so I can see if maybe I'm misunderstanding you now or if I didn't put across what I meant clearly earlier.

Just to short-circuit some things:

* I think we can change attitudes within a generation where having your nudes online isn't harmful

* I think being harmful is different from being embarrassed. For instance, I'd be embarrassed if I had my fly open all day or I had a sticker on the shirt I was wearing but it wouldn't be dangerous.
Recent Windows seems especially horrible about this. Personally, my workstation seems to forget which output to send video to and fails to properly wake up my USB wifi adapter. A tech I recently spoke to said, "Windows 10? Yeah, it seems to have way more problems. I just suggest disabling sleep."
Many people would probably leave Alaska altogether if that was the case, which would be much worse for the tax base. The subsidy is crucial to keeping Alaska populated at all. They still collect various other taxes despite the subsidy.
Firmware Bugs Plague Server Supply Chain, 7 Vendors Impacted
Because some information is more valuable than the sum of its parts.
Are you referring to posts like this?: http://bradfrost.com/blog/post/my-struggle-to-learn-react/

"There’s a giant, great JavaScript community out there, but I feel like a lot of times there’s an implied (or sometimes explicit) 'OBVIOUSLY' or 'just' that comes with a lot of the territory. For instance, I was confused why there are different ways to create components in React, and several people tersely responded 'it’s common knowledge that you use functions for simple components and use classes for managing state.' I had no idea! I didn’t see an explanation of that stuff in the docs. If that’s what the convention is, that’s totally fine. Just don’t assume everyone has that info downloaded.",

The assessment is pretty harsh on the guy, I think in Brad's case he's one of the more publicly documented instances of someone putting in the right kinds of effort.
You're comment feels like it has a negative ton (shoving down throats) but if the content recommendation is really good and isn't gamed it works really well IMO.

My experience has been spotify is great at recommending songs I like, even unpopular songs - I've quickly fallen into the rabbit hole of making a playlist - checking out the playlist recommendations, seeing their artist's other tracks, etc.
As Temperatures Soar During Heat Wave, So Will CO2
For a long time fortran was the dominant scientific language and early versions of fortran were as static as it gets (no stack!)

Lisp era ai was mostly about inference over databases and not the intense numerics you see today.

Scientific computing is often experimental and ad hoc, it is important to be able to change it up quickly. The inner loops often are highly optimized so if you are using numpy you won't notice that python is slow. C++ is awful to do neural network work in (I have) and the kind of reprogramming supported by python is just what the Dr ordered for that kind of thing.
Science Means Not Knowing
One absolutely diabolical mechanism that was used (at least 5 years ago when this scourge of ransomware started to rear its ugly head) goes something like this:

1. Gain access to change the code on the front-end web servers (usually PHP)

2. Change the database access layer to transparently encrypt data being written to the database, and decrypt data being read from the database. The key would be loaded into memory by curl'ing an attacker-controlled website at startup.

3. Wait 30 days

4. Notify the company that they're compromised, turn off the attacker-controlled key service, and restart the web front end

Now step (3) ensures that most data in the database has been re-written, and if your backups are dumps of the production database, you now have a month of encrypted backups that you can't read... If you're lucky, you may have a month-old backup to restore from; if you're unlucky, you rotate every 30 days.
Can you please edit personal swipes out of your posts here? This comment would be fine without the last sentence. Actually it probably doesn't need the first one either.

https://news.ycombinator.com/newsguidelines.html
> ... they sold a /10 to probably one of the big 5.

Yep, the last /10 went to AWS.
I'm sure the Liberian Navy will be on the scene soon.
My point is SoftBank is dumb money, and I believe in 10 years they will be a business case on one of the worst money management programs in history.
30,000 $ is a low bounty? It seems like a lot of money to me. How much should they reward?
Tried this type a while back. Also quite tasty.
Singletons are one of the ugliest things in Haskell. They require lots of extensions, implemented in a complicated way, and leaks implementation detail. Which makes debugging compile-time errors using them quite hard. I'd rather debug a runtime error with proper HasCallstack constraints.
Ask HN: Machine Learning and Carbon Sequestration?
Hey HN,

I'm a software engineer and have been recently inspired by the https://www.trilliontrees.org/ project.

On a recent consulting project, my friends at https://deepai.org/ were tasked with estimating the number of palm trees in a given region based on satellite imagery. Although the satellite imagery provided was not of the best quality, we were able to come up with a machine learning model that could estimate the quantity of palm trees reasonably well.

We think we could extend this model to track other types of trees and foliage, and perhaps extrapolate the amount of carbon sequestration occurring on a city-by-city/year-over-year basis. It could be a useful tool for academia as well as a nice visualization for the public via a web-based dashboard. Throw in some gamification and a leaderboard to show which cities are planting the most trees would be pretty doable as well.

Viable idea? Already been done?

Would love some suggestions from folks in the knowhow since my knowledge of climate change right now doesn't go much further than the fundamentals.
In China, Mental Health Care Goes Virtual
IIRC it's called "digital twin" because they basically use real-world data to then create similar plausible fake data and then use the "real-ish" data to model things. It's thought to reduce privacy risks since "real-ish" data is not tied to any actual person, so you restrict the exposure of real, sensitive, de-anonymizable data to the model generation.

I have no idea if this actually works out in practice, though, in regards to both how much this actually protects privacy and whether or not "real-ish" data proves to be accurate enough to be useful.
Earthquakes repeatedly striking proposed US nuclear waste site (Yucca Mountain)
The Heat Equation, Explained
Wow, this sounds crazy to an outsider. I highly recommend reading deep into the mailing list conversation from the link. It really does sound like a private organization "squatted" on a public resource, went under the radar for a long time, and then cashed out on their adverse possession.

My outsider perspective on this is ARIN needs to provide a transparency report on the number of complaints it received from legitimate ham operators who attempted to register addresses in this block but were denied by ARDC, and a general oversight review of the characteristics of ARDC as a community steward of this space.
It's a web application framework for R, not a turnkey solution or an analysis platform. It's for R users who want an easy way to build a web app in R without having to know much about web development or other languages.

If you want to productionize your web app, you could put it behind a reverse proxy, add authentication, etc. just like with any other web framework. The turnkey solution would be products that do this, like Shiny Server and ShinyProxy.
How to Make a Mouse Hallucinate
A good argument for a carbon tax.
Should be: https://www.marinetraffic.com/en/ais/details/ships/shipid:75...
IBM claims to be able to predict with 95% accuracy which employees will quit.

This seems super helpful as an employer.

https://www.cnbc.com/2019/04/03/ibm-ai-can-predict-with-95-p...
I bind my CAPSLOCK to ECAPE that way instead of the escape key killing my hand my left pinky finger can just naturally get me out of insert mode by hitting CAPSLOCK.
Refactoring the Coding Interview
What you're describing is a "streaming service aggregator" which would be great but I doubt many streaming services will want to be apart of (Talking netflix, hulu, etc).
Why are there two of these on the front page of HN? There shouldn't even be one.
I've taken this approach halfway and only install plugins/config that I can easily do without. Things like git-gutter [0] and a line at the 80th column [1] are great, but I don't depend on them when I log into a remote machine. If I really want some features, I have them somewhat organized in my .vimrc [2]. It's a great compromise; I find that I haven't thought about major editor configuration in a couple of years.

[0] https://github.com/airblade/vim-gitgutter

[1] set colorcolumn=80 textwidth=79

[2] https://github.com/stefco/dotfiles/blob/master/linkfiles/.vi...

[edit] Just want to add that I 100% agree that erring towards vanilla vim is a great idea; I used to use emacs and switched to vim precisely because the starting point fit my use style far better than vanilla emacs.
They could open the internal company memos, not the stuff with stamps.
Yes. But that’s why you need the model and the car-centric sensors. “Trust but verify.”
But they are not being punished! They are extremely represented (except for politics), much more than their population would indicate. The amount of Asians I've seen in elite schools like Harvard, Berkeley, Stanford is just mind blowing. Pure "merit" based would be a system which would solely rely on test scores/grades, which would give enormous advantage to people raised by "tiger parents." Elite schools are ideally made to find potential talents with the ability to impact society in a big way through original contributions, these people are not always the people with the best examination scores.
Julia doesn't even really have a distinction between user defined and base data structures. Every julia datastructure that's not needed for bootstrap is implemented in julia and all are on an equal footing with a datastructure I define at the repl. Even numbers.

This is why julia is so powerful for so many different use-cases, when I make my own special custom array, number, string or whatever type, it's a first class citizen and with enough optimization will be just as fast, extensible and generic as whatever was provided by base.
There is a lot of what I'd consider "noise" popping up on Netflix that they won't let me filter out. I don't care for most dubbed shows, and I haven't had any luck with any of the foreign imports. No way to filter them out that I'm aware of, so half of the "New shows" don't appeal to me

I wouldn't give up Netflix for cable, it's more likely to be Prime only, or something with quality content that I wouldn't watch as often because they don't have as much variety (HBO, Showtime, AMC, CBS)

Stranger things was released and we watched that but I haven't been on Netflix in weeks since; another price hike and the values no longer likely there for me.
Human nature? Cultural or regional or religious artifact, maybe.

Ever seen some tribal communities (in hotter climates), walking around half or naked naked all day. They are not human?
http://midnightsunak.com/2019/07/08/dunleavys-already-low-ap...

Dunleavy promised a $6700 dividend without significantly cutting the University or major operations of the ferry system. Now we're talking about homeless shelters closing and old folks losing their monthly pittance. Believe me, people's minds have changed on this very rapidly.
Have not read the paper in much depth yet but this looks like great work, super interesting. Thanks for sharing.

Question: in the example of prediction on untrained tasks, what exactly hasn't been trained? The paper talks about video being one of the trained tasks. Did you simply retrain model without video examples and then test performance?
on TV shows, when someone has that many keyboards then their desk is usually also inside a Faraday cage.
> [Escamoles] sell for $40-100 per kg

> what really stuck out to me was the opportunity for feeding farmed fish. Farmed fish need protein to grow (duh) and the protein they are fed is generally fishmeal made up of smaller "worthless" fish caught by commercial fishing vessels.

> Fishmeal fetches a price between $1500 and $2000 per metric ton [2], so there is a market for a viable replacement.

You want to replace $2,000 / ton fishmeal with $100,000 / ton escamoles? How are you planning to convince anyone to do that?
Alaska is not nearly the cold wasteland you think it is. Its largest city, Anchorage, shares the same weather pattern that keeps Seattle, Vancouver, and Portland warm and wet. Though by being 1000 miles further north, it is much colder than any of those cities. However, compared to some continental cities, it actually has milder weather. For example, Anchorage's average January low is higher than Minneapolis's, and its average July high is lower, so you need both less heat and less A/C to live in Anchorage than Minneapolis.
It just bothers me that they try to include a few tropes in every movie or show without it fitting in the story properly. As I said, if they maintain the logical consistency and in the context of a good story I don't mind some political push. But if it is in every show/movie, it just becomes repulsive.
It's a mixed area, there are single family homes, small apartment buildings and a few medium sized buildings (4-5 stories).

We don't have any metro lines but have bus and train.

Prices are reasonable because we are on the north face of a large hill and get little sun in the winter, and are not close to the downtown area.
Sure they could. It’s their phone. As long as they buried in the hiring paperwork that all calls were recorded your consent was part of your employment.
I agree. A minimum wage for everyone, with no underclass, would be ideal. As would a work permit program.
The Desktop Security Nightmare
There's a difference - he's not selling the leaked passwords. He's selling the information that a password has been leaked for a certain account. You can't buy stolen passwords from the site, so it's perfectly legal.
A small earlier thread: https://news.ycombinator.com/item?id=20475855.
> the auto-playing of trailers

There's a case to be made that this is advertising (for shows on netflix)
You can still simulate mouse and keyboard.
Only the good parts. I don't consider the extreme pressure Asian societies place on young children to succeed to be a good thing.
Perhaps the biggest gotcha was that Googlebot was running Chromium that was years old and required polyfills that you wouldn't otherwise include anymore. Since May they run a recent Chromium though: "The new evergreen Googlebot" https://news.ycombinator.com/item?id=20482235
You seem to be taking this oddly personally. Here, bash my flying instead: I'm about to take off from San Diego back to Pittsburgh after being here for 13 hours of a 25-person meeting. We collectively agree it produces better outcomes than trying to discuss online, but perhaps we should decide it's not worth the externalized costs.
What about also crawling data from AdSense? That way you also get the search numbers, not just the relative graph.

You see these numbers as part of planning for a campaign. There is also an API for it.
I think Netflix needs to invest in quality over quantity. I agree, its hard to find something I want to watch. There is definitely choice fatigue.

If they had 1/3 as many shows but those shows were 3 times better. I am sure I would have no problem.
The constant jumping and zooming of preview tiles is similarly stressful, especially with the auto-preview... with all the chaos of things moving around and making noise at you, it's really difficult to think clearly about what you might want to watch.
Show HN: A daily, actionable SaaS growth case study in your inbox
They are doing those too. The budget cuts are quite significant.
I consider this a serious accessibility problem. Rather than complain to customer service, maybe we should be going straight to their corporate counsel. Frame it as a potential ADA violation. It's actively hostile to anyone who suffers from heightened anxiety, ADHD, etc.

If there's anyone who can push back against the marketing department, it's the legal department.
Other than shiftround, the other three seem rather language dependent (which is why I've cluttered so many files with various vimlines/modelines over the years). Wonder if the editorconfig-vim plugin might be a better compromise "only plugin" approach? Particularly given the growing consensus towards editorconfig across editors.
AMPR was one of the first organizations to register with the DNS in the early 80's. It was an original player on the ARPANET before it was "the Internet." In fact, they tried to register in 1987 using their own TLD (.AMPR) because, according to them, they were a "mobile" network (didn't fall under the ccTLDs) and did not fit into any of the existing gTLD categories. After some deliberation the NIC ultimately registered them under .ORG in 1988.
Username checks out.

While is perfectly fine to investigate the collapse of a building, especially as the findings may help us make buildings less prone to such collapse, in this case, the academic who led the research claims results that contradict the mainstream understanding of the event, but provides no real evidence. The publication date of the actual study has been repeatedly delayed (see the German Wikipedia page on the academic and the references there). That makes me sceptical to start with, but for now, I will put it down to bureaucracy. But extraordinary claims require extraordinary evidence, and claiming a result from a study that they admit is still incomplete is irresponsible.

The project website claims it will be over by September 2019,[1] so it should be available soon enough, unless it is one of the things that are affected by the STEM cuts. Though it should not be, because he said in his live stream talk that it is externally funded by Architects & Engineers for 9/11 Truth (a conspiracy theory organisation).

1. http://ine.uaf.edu/projects/wtc7/
For comparison, how many tools are needed to build desktop Linux, say, Ubuntu?
Excellent article by the creator of the equally-excellent postgREST. Especially the neato historical material - I didn't know that Vi was directly derived from the ex [and by extension, ed] editor.
Or perhaps talk to people and raise kids in such a way that there's not tabu around other people's nudity? That may have more effect. More nudity on the internet will change much less, certainly.
I think your point about continuous integration is very true. I'd maybe even go further, if you could make a version control system understood ASTs and these sort of 'declare me function' operations (and you had enough test coverage) maybe you could have all the operations from everyone go straight on to 'master', in real-time, ready to be deployed - no branches, beyond trunk-based development, more like trunk-only development.
There is something to be said about the Nielsen hypothesis given -- finding something to watch takes effort, and starts taking more time the more one has already seen. My wife and I can spend upwards of 30+ minutes trying to find something we want to see and haven't already watched. Especially for just some casual 'background' watching, just putting on a channel on TV with some acceptable type of programming focus is alot easier than digging for it.

Btw, for Netflix I usually just do a trial when a new Stranger Things season comes out, watch it all and maybe a few of their new movies, then cancel.
I still don't agree. The whole reason this business exists is to remove the cost from all the industries that need to run background checks.

I think the extent and reason for the checks aren't apparent. So I'll give a few examples where we have high volume and I hope that will enlighten you as to the reason why there are so many players in the industry.

The highest volume checks are around the medical and teaching fields. We often run 6-month, to one year recurring checks on teachers and doctors to ensure licenses and certifications are still active. As well as necessary immunizations to work in their environments.

Do you expect a low margin industry like teaching to staff a full time employee to do nothing but run background checks? They want them done and the schools have access to the information, it's just much easier for them to pay us a few dollars an employee and get a nice report than do the legwork themselves.

Additionally, incurring the cost of access for the relevant data is a barrier for companies without a bunch of cash laying around.

We don't solicit companies with incriminating information about their employees, it's a necessary part to a safe environment.
We use it on https://dealbert.net
Is a Boeing Bailout Taking Shape?
The 'diet'-south. Half the racism with all the calories.
By cracking the weak crypto used to generate it
Does that work in all shells?
I wrote about this block earlier last year: https://news.ycombinator.com/item?id=16912496

Note that this is also the block used for the UCSD CAIDA "Internet Telescope": https://www.caida.org/projects/network_telescope/