skysight-inc/HackerNews huggingface dataset:
Well, it does makes sense to me that if JWT allows for both symmetric and asymmetric tokens that's a complexity detail that can be gotten wrong when implementing.

Thankfully, JWT being quite standard and having momentum behind it I think there's a lower risk in recommending someone to pick a popular JWT library than telling them to roll his own simple scheme on top of HMAC (which is the article's recommendation and what JWT will end up doing regardless), specially when scale is considered.

I know, I know I'm arguing for "worse is better", but I honestly can't imagine a clean solution to this that would be so good it justifies dropping a seemingly decent standard, leaving mountains of legacy and requiring the entire developer world to learn about yet another crypto scheme. But then again I'm no expert in that area, and I would love to read a post about it from someone who is.
There Is Just One Sculpture on the Moon
Is etymology so relevant? The lexicon of the word is scientific jargon; its language is English.
Congratulations on being in the very long tail of car users.

For what little it is worth presuming you are exploring more than just excuses: Tesla Model 3 can do 325 miles on a single charge. Even assuming there is not a single way to charge on that day trip, it is do-able with current technology, and maybe even two of them if they are both closer to the 150 side of your range possibility. Tesla superchargers add more possibilities, but so can even just any old outdoor outlet at a destination or interesting stop along the way.
Thanks. Looks promising
4158675309
> For all intents and purposes, encryption is a unbreakable lock that can serve to perfectly hide valuable criminal evidence. Such a thing wasn't possible when our laws were written and has never before been possible in the physical world. Its existence has potential to be a huge shift in how we enforce the law.

This is untrue. The equivalent thing that anybody has been able to do for a thousand years is keep their written down secrets in an undisclosed location. If the police don't know where you keep them and you don't tell them, they have never been able to read them. Finding an anonymous storage unit among millions is no easier than guessing the user's password.

But you could put them under covert surveillance ahead of time to find the location, you say? You can do the same thing to get their password then.
Your apology seems sincere but from the outside it looks like the CEO forced you to do so.
What's the model where you don't trust that system not to exfiltrate data but you do trust that system not to flip the boolean that says the signature is valid at all?
This approach makes no sense to me. It seems the "base" prices are fiction, just like the airline fares have become recently. They do not correspond to reality and do not allow for a sustainable business.

Choosing where you will buy based on those fictional "base" prices and then tipping just supports that world which is detached from reality.

If people stopped tipping, eventually things would right themselves: workers would stop working for establishments that do not pay enough, businesses would need to raise prices, people would need to start accepting the realistic pricing.
I know someone who works there for 3.5 years and going strong. I was curious about this, so I just went to look on LinkedIn, and they did not have the word "Empower" on their profile a single time. FWIW
The same logic applies to human drivers - various bike sizes and types are harder to see and adapt to. If everyone rode a Jump bike, bright red and upright with blinking lights, it'd be easier to see them all quickly. But I'm constantly seeing tiny mopeds, recumbents, kids' bikes -- it's all harder to spot than a Jump bike, even for a human driver.

So, why fall back on the status quo of a human to spot them? If SDCs are proven to do it better, then I will definitely cycle more once there are more SDCs. It's all about evidence, show me the evidence SDC's are better, then I'll be 95% on board.
I once almost worked at a beer company where they would literally ask you on your interview which was your favorite beer. This was a mass-produced, cheap lager like Budweiser, so clearly it could not be anyone's favorite beer... but apparently if you didn't say their product was the best you couldn't get a job there.

I straight up lied in my interview and accepted the eventual job offer, only to renege on it after getting an offer from another company literally halfway through my first day on the job...
I think it has less to do with statistics than the feeling/perception of agency. No matter the risks associating with manual driving that are completely out of your control, driving a car can feel relatively safe because it's your own hands on the wheel. Contrast with fears regarding air travel, where one is a mere passenger with no influence over the flight, despite orders of magnitude of greater safety statistically.
> What do you do if you're lying in bed watching a movie when you remember that you need to schedule a meeting with X for tomorrow at 11am?

Carry your work phone to bed and use the calendar app.
It's what cults do. I know this as being raised in scientology. You control their actions and thoughts.
Plus the SDC has cameras and sensors to capture other drivers being reckless and that data can be used as evidence to prosecute those drivers.
I am not a lawyer, but from what I understand from a forensics class I took, personal devices can be in scope in the US if:

* A warning banner is displayed when you connect to the VPN / network / asset that states that use of the resource voids your expectation of privacy, you consent to monitoring, and you acknowledge they can inspect personal devices etc

* You signed a policy document acknowledging that they can monitor you and that connecting to a company resource brings your personal device in scope of monitoring and seizure

* You committed a crime, the police become involved, and a search warrant is issued.

If you do not sign such a policy document, they do not have evidence of a criminal (ie not civil) infraction, and they do not display a warning banner, then you can claim reasonable expectation of privacy (meaning you were ignorant of their policy), refuse a search, and there isn't much they can do to my knowledge. In this specific case you would have to talk to a lawyer, but I would just be safe and use only work assets for work.
Was recently looking into VRs again...and still concluded let's park it for another year or so.

The "affordable" ones still have poor resolution, which kills the experience for me.
I tried to address this in the article but I guess people skipped over this?

>Note, however, that algebraic effects are much more flexible than try / catch, and recoverable errors are just one of many possible use cases. I started with it only because I found it easiest to wrap my mind around it.
Is it common to use jQuery with React? I'm relatively new to React.
I like the concept of predictions for the same reason. Per Philip Tetlock's relentless crusading on the topic, it at least implies some sense of rigor, measurability, and accountability.

This is one of the distinctions I make between predictions and forecasts in a business context (and one I've been trying to impress upon stakeholders in my company.) A prediction implies accountability.

I mean you could attach consequences to a forecast (Tetlock himself likes the term "Superforecasting) and likewise ignore them with predictions. It's all just words in an end and everything is a human construct. But still I haven't given up completely.
Apple MDM is changing quite a bit come iOS 13 and macOS Catalina 10.15. A new enrollment methodology called User Enrollment is aimed at protecting the privacy of employees using their own personal devices. User Enrollment greatly limits what the company can see about the device. As an example, the MDM can only see the apps that it has installed on its own, it can't get any PII (Personally Identifiable Information) such as a phone number or serial number from the device, etc. The MDM data and visibility into the device is essentially sandboxed.

This article provides a summary of MDM User Enrollment, including details about how Apple separates personal and business data on separate APFS volumes.

https://simplemdm.com/apple-user-enrollment/

Before User Enrollment there wasn't a great Apple MDM enrollment option that struck this privacy balance for employee-owned devices. App data couldn't be viewed per-se, though a list of apps is certainly available (as mentioned by cannonedhamster). Some companies would skip MDM and essentially "wrap" individual apps in order to have the ability to encrypt the app data and have some control over the binary, but that's about it.

I'm not sure of the story with Android, though I'm under the impression that there is a similar "sandbox" option for MDM, albeit the implementation and user experience is rather messy and obtuse.

Full disclosure: I work for an MDM software producer.
DoorDash (YC s2013) [0].

[0] https://www.ycombinator.com/companies/ (search for DoorDash)
Downvoted comments are less readable due to decreased contrast (though I assume that's intentional so people well skip over them instead of responding).
On this side of the pond, the University of Washington has a large and growing ASL STEM dictionary: https://aslstem.cs.washington.edu/

I don't know how widely accepted these signs are and it has a serious problem with spambots, but it was useful when I was tutoring a Deaf friend in programming.
Does that mean claims already raised by then or claims pertaining to actions earlier than then? The former seems like a bad idea and the latter seems like it shouldn't even be possible.
I generally don't tip, except for:

- the establishment that I frequent (they remember)

- uber (they affect your rating)

- I knew for sure that it will give me extra service.

In most situation I didn't experience negative affect.
Encryption is nothing like a lock. We should stop using that analogy.

Encryption relies on a secret. It's like burying a treasure in a place only you know, and keeping the location a secret (e.g. in your head). Encryption just gives you a huge digital space where you can bury your treasure instead of a physical space where you can bury it.

Sure, people can just search everywhere for your pirate gold (brute-force attack), use advanced reasoning to narrow the search space, like "you lacked the means to 'bury' it in solid stone" (cryptanalysis), develop technology to speed up the search like ground-penetrating radar (e.g. GPUs, asic, special purpose programs) or try to coerce you to reveal the location (monkeywrench-to-knee passphrase cracking).

What the governments wants is that the maker of the shovel you used to bury your treasure not only has to track where you took that shovel but also has to tell the government that information without you telling the government got the information.
Rutger Hauer, ‘Blade Runner’ Co-Star, Dies at 75
Free SaaS tools for companies on a budget
Sxrdgvsrgv
https://qiita.com/xogifefusa/items/653ad53a9f792b9b2cf1
https://qiita.com/xogifefusa/items/63a2eb6041bb62e5eec8

https://qiita.com/xogifefusa/items/d6eb9cabd90628d05c61

https://qiita.com/xogifefusa/items/ec7bae5ade293bcb8867

https://www.hashtaglunchbag.org/chudenabapo/_direct_live_cfr_cluj_-_maccabi_tel_aviv_champions_league

https://qiita.com/xogifefusa/items/bae4c3be7130b9f2fd91

https://qiita.com/xogifefusa/items/3263bba3749e25f7dd07

https://www.hashtaglunchbag.org/chudenabapo/traieste_liber_cfr_cluj_-_maccabi_tel_aviv_live_streaming

https://www.hashtaglunchbag.org/chudenabapo/cfr_cluj_vs_maccabi_tel_aviv_live_stream

https://qiita.com/xogifefusa/items/4647d86067444ff0dde5

https://qiita.com/xogifefusa/items/37f5bdef71b8cb060fc0

https://qiita.com/xogifefusa/items/d625508607cbe99d5740

https://qiita.com/xogifefusa/items/36a63b21ff9b89bbc5e3
This is why you need to change it across the board, all at once. If joe the asshole can keep charging his customers "less" by hiding the real cost of labor in his tip column, then bill the coolguy looks like he's being an asshole by including that cost in the price of the food.

Don't even get me started on the idea that FOH employees are often making 2 or 3X what the kitchen staff is bringing home. Sure the servers want the tips, but why wouldn't cooks want that money to be in the pool of money that can be allocated to them as well (since most servers aren't required to tip the back of house, and any money that isn't guaranteed can't be counted as part of your pay rate).

Eliminate the tipped employee rate entirely. Give the culture 10 years, and everything will be fine. It will be a long painful 10 years, but fixing omelettes and breaking eggs.
I thought maybe it was the sensation of the tick detaching/jumping off which I felt, to explain the situation.

But I had only been outdoors a few hours by the time I felt something, so the total time of exposure would be <6 hours, I estimate.
>We make that assumption because other people are like us.

Yes, and I think this is a mistake, because it shuts down any hope of isolating what it is about us that makes us conscious. Perhaps this will change as human-lookalike-robot technology gets better, breaking down the "looks like me, must be conscious like me" argument.

People are starting to grant animals the rights of consciousness, but let me ask, what about sperm? I myself was sperm once, and over time I became a full-grown human being. If consciousness is a boolean, then at what exact moment did I become conscious? Was it when I reached the egg? When the first neuron in my brain formed? When my umbilical cord was severed? When I first recognized myself in a mirror [Lacan]?
I recognize this, and I embrace it.

Cryptography is the one thing in the world that isn't easily defeated by the absurd amount of violence States are willing to commit in the interests of controlling society.

That's a feature, not a bug.

I for one am tired of using coercion to define society and we would do well to embrace anything that disempowers violence.
Hey all.

Can someone explain to me WHY in 2019 we still tie the infrastructure to the power to make decisions?

Marketplaces are built not on open protocols (like email) but closed platforms.

They amass people from both sides and extract rents. But that’s a side effect of the closed nature of the software.

Why yell at doordash or uber or facebook to add a feature? Why does country X go after them for deleting posts while country Y yells that they didn’t delete similar posts? Closed software is the issue. “Zero to one. Competition is for losers” is who funded Facebook.

If people wanted to add tips in Wordpress or Email or whatever, they could just go ahead an add those. Or a million other features. Their clients would still interoperate.

Main reason: the capitalistic system we have encourages getting very wealthy as a result of building a successful company. It encourages people to work extremely hard and take risks while competing and duplicating 90% of the work others are doing. But in the area of software and information, copying is so easy. Collaboration beats competition nearly every time, relegating the proprietary solutions of yesteryear to obsolescence. The private market is reduced to turning out brief “bleeding edge” innovations which are then subsumed into the open source snowball.

Wikipedia, the Web, Webkit, Wordpress, MySQL and NGinX has beat Britannica, AOL, Blogger.com, IE, Oracle and IIS. So why don’t we have more of it in other areas? Drugs? Marketplaces?

Albert Wenger from USV has a nice online book called “World after Capital” that speaks about this.
That's... not an argument I've heard before, but I suppose it does follow. At that point the issue becomes the question of whether anyone feels it's worth the effort of pursuing the issue in court. If Spotify wins this one, they might! I do know that back in the 80s, Activision was making Atari 2600 games without any sort of license, and Atari lost its suit attempting to prevent that -- Activision was the first third-party game developer. Not sure whether the change since then (all console games being licensed) is legal or just practical.
Rebuttal: Yahoo! Answers is text only.

It's not text or images that make forum content good or bad or memorable. It's good people doing good work. And different people work well in different media. Saying that text is the only legitimate form of media is both ignorant and disrespectful.
what people miss is that the audience is far FAR larger than it used to be, so studios make up it up in volume. Game studios today make more than game studios 10 and 20 years ago.
Similar could be the case, when an office gmail account is used by a number of employees for viewing & replying official emails.

One employee who is logged in using office gmail in his/her android phone. The person (other employee) knowing the password can easily view most of the phone activity by visiting https://activity.google.com (which includes search history with location).
Voicemail? How tedious. A Slack message is far preferable. Nothing stopping you from setting do not disturb in Slack.
"Deeply interesting" is not a prescribed criterion for comments.
Exactly. It's offensive to put legal immigrants (at least to my family and people we know) in the same category as illegal immigrants, and use our success to justify illegal immigration.
Absolutely. Try a remote team.
This is true for any work interaction on your personal device. You aren't going to win arguing technicalities with someone executing a search warrant.

The only safe and sane thing to do is refuse to have any work touch devices you own, and likewise don't let any of your personal affairs touch work systems.
But that means they choose to be there, doesn't it?
Eh? Got additional details on which OIDC providers aren't using a proper userinfo + AT? Not that that shouldn't include TLS...

We don't do token introspection (basically what you're referring to) and instead use JWT/JWE(soon) to reduce round trips for the RP.

Could you expand on the OIDC issue with cryptographic domain separation? Not sure I fully understand what benefits you're looking for there.
But what if someone really does forget the key? They are just jailed forever?
In British Sign Language (BSL) when I learnt to a remedial level things like names (places, people, things) would be spelt out the first time, or when it wasn't clear, and then you'd use shorthand - just the first letter, say.

Kinda how we use initialisms and other abbreviations in speech/writing.

For common topics you'd get local slang that might not even be valid a few towns away -- BSL being somewhat like British-English in that respect!
That's a great example because besides the excellent use of pictures, it features terrible use of text -- the subject is "Going reel low"
Scott Manley recently reviewed Space Engine, which is now on Steam: https://www.youtube.com/watch?v=Htyv6m9jaNY

He uses it frequently for visualizations in his videos.
The problem with this line of argument is that it is a general argument against government and not specific to this issue. You could use the exact same argument for why you shot a police officer who broke down your door after securing a warrant. It would quickly be dismissed in that instance so it should carry little weight in the discussion of encryption. If you want the government to completely give up this line of thinking, you need a way to explain to them why a digital lock/encryption should be treated different legally than a physical lock.
I discount anecdotal stuff based on the source and known agenda.

When the WSJ laments about minimum wage, those anecdotes will be high noise. When the WSJ has an article about bond trading, anecdotes are usually going to be higher signal.
I looked into that a few times, just haven't had the patience to get through the setup process. Maybe I'll get it done this time. There goes my afternoon :)
Show HN: SEO Auto‑Tagger – Machine learning to optimize your product listings
Recently my employer has pushed for Okta Identity management. And somewhere in that plan they somehow thought appropriating employee personal phones was a good idea. Now we can't login to certain internal apps without a mobile device because Okta needs one time password/accepting push notification. And the otp/push notification should necessarily happen on a mobile device. Given that company hasn't provided any mobile devices to employees, everyone is forced to use their personal phones.

Any ideas on what happens in such cases?
Hi all! Richard here from Simmer. Would love your feedback on the app, HN community! I have a specific questions:

* What’s your fav delivery service and why?

* How do you decide what to order when you’re ordering delivery?

* How could our feed make this easier for you?
Well no, here's another inaccessible bit of information: face-to-face conversations where there are no recording devices present. Hence the importance of testimony in a criminal investigation.

Should we now require all buildings to, by law, record audio conversations in case such conversations might one day be "needed" by law enforcement? Or perhaps there are other ways to perform targeted wiretaps?
NerdWallet Dialed Machine Learning Up to 11
Definitely authenticate first!

If there's anything I said that made you think otherwise, let me know: I would like to amend that so no-one else thinks I could possibly mean that. The initially recommended (unless you can do otherwise) approach in the blog post is clearly "tag at the end" and every other approach also validates first. If you're referring to ObjectHash: like I said, it's a very niche application, I don't expect people to use it, and yeah, it enables new use cases.

(I expect you'd still really be authenticating the ObjectHash somehow -- e.g. by sending it over TLS -- but that's out of scope for ObjectHash itself.)
>The reason you tip your waiter is (ostensibly) because it creates a direct incentive for better service, by leaving some of the compensation up to the customer.

Funny how service is as good if not better in the vast majority of the rest of the world, despite a lack of tipping culture.
I have never understood why the "In[5]" and "Out[5]" in jupyter have to be so prominent, even in a output like this.
The thing that bothered me the most when I visited North America was that attitude that you absolutely have to tip or otherwise you are some gigantic asshole. We went to a completely average restaurant, had completely average food that was possibly microwaved, the staff was average or below average at best.....and we all added like 15-20% tip at the end. I was just like......why? "Oh because you are a massive dick if you don't tip". I do occasionally tip in the UK when the service is really extraordinary, but feeling like you have to tip, almost completely detached from the actual quality of what you're getting.....that's bizzaire to me. And don't get me started on the nonsense that is tipping delivery drivers for what is effectively 5 seconds long interaction.
Signing your updates for example.
If the system is breached, theres nothing you can do, but that access does not translate to forging updates for other users.
The OP notes that there are multiple competing (well, probably?) specifications for a canonical JSON and they are annoying to implement. JSON is neither well-designed nor well-specified [1] and it is likely that we will never see the official canonical JSON format anyway.

[1] http://seriot.ch/parsing_json.php
How so?

Seems like an elegant enough solution to ensure you always have the right headers to build modules against the currently running kernel.
What is your revenue model? I'd imagine you take a cut from the delivery service that you send customers to?

Just wondering about the long-term unit economics, given 1) many of these delivery companies aren't profitable and 2) they already charge a large premium for delivery.

Congrats on the launch!
What kind of "outstanding engineers?"

Some startups need applications programmers, others need systems programmers or "data scientists", all of which are different markets.