skysight-inc/HackerNews huggingface dataset:
Monzo will post a technical write-up soon. But, in the meantime:

Before:

.method public abstract pan(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lio/reactivex/Single;
.param p1 # Ljava/lang/String;
.annotation runtime Lretrofit2/http/Query;
value = "account_id"
.end annotation
.end param
.param p2 # Ljava/lang/String;
.annotation runtime Lretrofit2/http/Query;
value = "card_id"
.end annotation
.end param
.param p3 # Ljava/lang/String;
.annotation runtime Lretrofit2/http/Query;
value = "challenge_type"
.end annotation
.end param
.param p4 # Ljava/lang/String;
.annotation runtime Lretrofit2/http/Query;
value = "challenge"
.end annotation
.end param
.param p5 # Ljava/lang/String;
.annotation runtime Lretrofit2/http/Query;
value = "idempotency_key"
.end annotation
.end param
.annotation system Ldalvik/annotation/Signature;
value = {
"(",
"Ljava/lang/String;",
"Ljava/lang/String;",
"Ljava/lang/String;",
"Ljava/lang/String;",
"Ljava/lang/String;",
")",
"Lio/reactivex/Single<",
"Lcom/monzo/card/data/api/PanResponse;",
">;"
}
.end annotation

.annotation runtime Lretrofit2/http/GET;
value = "card/pan"
.end annotation
.end method

After (v2.59.1 has the fix):

.method public abstract pan(Lcom/monzo/card/data/api/RetrievePanRequest;)Lio/reactivex/Single;
.param p1 # Lcom/monzo/card/data/api/RetrievePanRequest;
.annotation runtime Lretrofit2/http/Body;
.end annotation
.end param
.annotation system Ldalvik/annotation/Signature;
value = {
"(",
"Lcom/monzo/card/data/api/RetrievePanRequest;",
")",
"Lio/reactivex/Single<",
"Lcom/monzo/card/data/api/PanResponse;",
">;"
}
.end annotation

.annotation runtime Lretrofit2/http/PUT;
value = "card/retrieve-pan"
.end annotation
.end method
Only 28% of Americans plan to max out their vacation days this year
I don't drink much, but a $5 wrench would probably work on me.
MAC addresses are trivially configurable in software.

Even if they weren't, its easy enough to buy random $5 wifi enabled dev boards from Aliexpress or somewhere similar, where detailed records tracing individual boards from manufacturer -> distributor -> reseller -> user are highly unlikely to exist.
Just put it on a plate
>does removing parking minimums actually lower rents by the 17% of rent that's estimated to go toward parking?

No, because removing parking minimums is not the same as removing parking.

>parking podiums eat up the most pedestrian-friendly ground floor square footage, but i can sympathize with people wanting parking in their building.

In-building parking is a widely available amenity amply provided by the market. Regulatory parking requirements don't change that, they just make it illegal to not want parking.
The Lepton Collider: Future Circular Collider Conceptual Design Report Volume 2
Cost saving, plus the "suck it up, it runs so it's good enough" user peer pressure to accept the lowest common denominator.
This is kind of a stupid question, is it based on the billing address or something? Does your price go up or down if you move?
I immediately thought the same thing when I read the study. Most of the glyphosate applications I see are not followed by tilling, discing or other forms of “hoeing.” The R plot is conspicuously absent and it doesn't explain why that choice was made (it explains many other decisions/choices) for the study.

A lack of difference in a W and R plot would have bolstered the findings and seems an obvious thing to test?
Amend that to stay away from plastics for food storage.

Food microwaved in borosilicate glass food containers is unlikely to pick up plasticizers.

The challenge increases when you realize that a lot of canned foods have a plastic coating inside, to protect the can metal from corrosion by the canning liquid, particularly when that liquid is acidic, as with tomatoes or carbonated beverages.
name one way in which they're similar (beyond "I don't like either of them")
I'm not saying that lawyers shouldn't learn to code, but I don't think it would be wise of them to heavily rely on it in practice.

1. They have a specialized skill set, and they can offload a lot of this to other people in the firm. Billing someone several hundred dollars an hour so that you can spend time fiddling with SQL is kinda unethical. This could be considered gray, but it's akin to charging someone the full billing rate to use a copier. Maybe this will ultimately end up billing less and saving the client money, but then maybe not. It all depends on the person.

2. The more important reason in my opinion is that programming is a specialized skill. You have to learn and really understand how it all works. It's easy to say "Well, just learn some Bash, and SQL" and you'll totally be able to get information faster. The question of whether or not it runs is an easy one to answer. Did it return information, yes or no? The real question and where it is tricky, is was it actually correct? Did you search all the files, etc.? Hiring a professional developer to aggregate information and have the knowledge to understand edge cases is why developers make the money they do.

Think about the flip side. Should all programmers become lawyers, because after you are one it's easier to understand the legal system. No, that's silly. Should programmers learn something about law? Of course, everyone should, but that doesn't mean that everyone should practice it. Now you could be saying, "Well, but going to law school takes years. That's a ridiculous statement to begin with." How long do you think it takes to be a really competent programmer?
The Emoji House War: A Neighborhood Feud Erupts in El Porto
Use something like glass lock and reheat without the lid?
Buy Negative Google Reviews – Buy Bad 1 Star Google Reviews: GoogleMaps
it's not just repetition, it's use in context. I learned both spanish and english that way, and I did it extremely quickly. Whenever you encounter a new word, work it in a sentence, then use it with someone else in a real situation. I guarantee your gains are going to be measurable day by day.
We've updated the link from https://arstechnica.com/information-technology/2019/08/skype..., which points to this.
How to Switch Careers Even If You Don't Have a Lot of Experience
I'm still trying to figure it out too:

> I thought that the MacOS builds did do this, but maybe the ASAR bundles aren't included in the hash?

Yeah, I think that's the problem they're describing. It sounds like the Mac setup will require binaries -- like the Electron runtime itself -- to be codesigned, but if the first thing your codesigned binary does is to read an unprotected JS file off disk and execute it, there's no codesigning benefit.

> Either way, I assume the a solution would store the signing pubkey on initial install and then check updates against that

Not just updates that you initiate yourself, though -- I think the idea is that any other app on the system could backdoor the JS in the ASAR at any time. That's pretty hard to defend against.
You can't run electron apps in a browser nor is there a runtime needing installation. :) since we're doing that sort of thing.
This is actually good advice. Anything you want to keep secret should stay in your mind. Anything else gets progressively risky.
I said "IF" there's no salting. In any case, I'd be less concerned about SSID's not being unique as I am about the fact that the SSID of a specific target is trivial to obtain and almost never changed.
It doesn't have a convenient but proprietary IDE for creating it.
For sure! Infrastructure as Code is great. However, there are plenty of instances where services you depend on cannot be configured with Terraform. Additionally, we have found that there are lots of companies who have a wide variety of setups across all of their teams (internal dashboards, engineering teams that are not focused on infrastructure, etc.). Some teams may be fully automated, while others are not. For some, it just isn't a priority. We hope that Gold Fig will work for them. We think that being able to represent the changes in the way that they are already used to making them will provide a stepping stone towards automating more of their setup.
He was involved in Netflix early on. I'd say that will keep you rolling a long time.
Neither of which are regulation/moderated- just expensive or needing domain expertise and manpower.

It may be 'moderated' in the sense of an optical cable vs a copper one- by its nature there is impedance in the copper one limiting its potential carrying capacity. In that sense the internet vs traditional publishing have a different ability to scale. But Hitler's rise didn't need the internet- Mein Kampf found fertile soil due to economic depression and already extant racist attitudes latent in the populace.

China finds ideas contained in books by Locke/Milton/Paine or the Magna Carta to be extremely dangerous- and that they are and I'm sure they're be ingested wholesale in Hong Kong right now, where the Great Firewall isn't in full effect.

We need to counter evil thought with the only available agent that will actually work- better argued thought that seizes on vigorous ideas that instill a deep abiding respect for their fellow men/women and the potential of civil society to overcome the divisions we've placed among ourselves.
I don't know why people complain about performance. VSCode is my primary experience with Electron and it runs extremely well. It handles large files just as well as Notepad++.

edit: Just to be clear I don't suggest notepad++ is best at large files. EditPad is clearly the winner in that category. But I do mean to say VSCode and N++ are on par with each other.

Besides, VSCode provides an incredible amount of functionality. So what if it uses as much RAM as my browser. I routinely run multiple browsers, each with multiple windows.
Both - I spent 6 years not making any salary, plus another 4 making less than a software engineer, and on top of that I took on a lot of debt.
I don't see why this is a big deal -- a native app can also be distributed with malicious patches or dlls, and those are common methods for e.g. game modding and cracking. If you're worried about the integrity of a program, check the hash.
I switched away from plastic containers to glassware. They're reasonably cheap and I don't worry about microwaving plastic with my food anymore.

Note that I still have a plastic top on the container but:

A: You don't have to microwave with that top, you could use some other cover.

B: I am less concerned (possibly incorrectly) with microwaving plastics if they're not in contact with my food.

Can anyone comment on B? Is it safe to microwave plastics if they're not touching food?
It’s all kind of bogus of course. No one would believe it if Microsoft could somehow claim you need their license to create a driver for Windows and no one would consider it a breach of copyright if the driver uses undocumented API. But somehow for Linux it’s different.
Does it matter if something is in your carpet?
Can you name some prominent elected officials on the left who fear monger about vaccines? I assure you that I can provide quite a long list of elected republicans who've said some bananas things about climate change for instance.
The biggest thing you can do if you have developers that work on one of your teams is actually care about security, listen to them when they say there is a risk, understand it, challenge it and then address it. And if you or the business choose not to address a specific concern now, which can happen, go back to the team and explain the why of the decision to keep them in the loop -- this is not optional if you want the teams trust. Personally, with my teams I make sure they get feedback on decisions as quickly and clearly as I can when the business makes a call on product etc. I always seemed to have frustration with the lack of feedback as a developer and work hard to prevent that on my teams. A lot of times as a developer on a team (especially larger teams) it can feel like feedback is being given to the business but very little is coming back on decisions that are made. If the devs understand the concerns or limitations as to the why, many times they can come up with ways to make mitigation still happen but within some constraints that benefits the business still and doesn't let technical debt rack up. Taking the team out of that loop means you will get frustrated developers that see/feel that the company doesn't care, so in the end, why should they, bad cycle to get into.

And I don't think it can be said enough, do more than pay lip service to security. Care about security and work with the team to identify and address areas where there are problems. Especially in my experience startups always have this as a failure point. I've yet to see a single startup get security right early on, not saying some don't but almost always speed, getting investor dollars and "well come back to it" outweigh the security items raised. In the end this will always bite them, either in terms of cost to fix it later, or in embarrassment when it leaks or is hacked by a bored 14 yr old. Think of how many major startups/companies you can list that still had plain text passwords someplace, it is insane? Good logging is not an excuse to abandon good security practices.

I could ramble for a long time on this, but hopefully that gives some ideas.
For those unfamiliar, DEHP = phthalates.
When I’ve been hired to do red teams we always use giant antennas and find a nice parking lot a few blocks away to capture the necessary handshakes. This works great even in downtown SF where the RF interference is absurd.
nah, the man is right. I learned english that way, it works surprisingly well, but only if paired to "use in context". Every time you learn something, you gotta use it, otherwise it won't stick. You gotta use that new word to get something done you actually need, because your brain is very reward oriented and it will fix the memory if it leads to a positive outcome.
go away anti-semite.
Yeah, I am aware of that :-/ OTOH it could be refreshing to focus on something completely different than hunting the latest Deep Learning papers and figuring out if they work on the problems I am trying to solve... I still hope there will be some accredited online JD program by the time I get to do that to save time and money.
If you watch MIT's CS 101 class on their OpenCourseWare (the one filmed in the 80s) you'll see Sussman and Abelson teaching scheme to a class full of electrical engineers from HP.

I think these are guys are the guys who designed RPL
I'm particularly puzzled by why so many electric kettles are made of plastic.

Unfortunately, the non-plastic one I bought two years ago has already died, so maybe there's something to the casing.
I do not know exactly how much but this is something that can be approximately quantified.
It seems unlikely that Google will drop Flutter. It is picking up a ton of momentum, and I think they are smart enough to know they have a winner on their hands.

They are putting serious resources into the developer experience; Flutter for the web has progressed from a POC to a product they intended to promote / support. Flutter is the preferred UI for Fuchsia. While not officially supported, Flutter for the desktop looks super interesting.
How? Honestly, I don't see the comparison.
In Composing Contracts[0], Peyton Jones, Eber and Seward describe a framework for "programming" financial contracts, even allowing for external events[1] to influence the result (for example, actual stock prices) of the contract.

As a though exercise, could actual law (or, more specifically, Penal Law, Contract Laws, etc) be formalized in an analogous manner? I know contracts are not law per se, but the comparisons are easy to spot.

[0] https://www.cs.tufts.edu/~nr/cs257/archive/simon-peyton-jone...

[1] In the case of laws, external events could be the judge's opinion, for example
No. You're supposed to change his mind.
You could say the same about (for example) a Python-based QT app. Or any scripting-language based application or framework.

It's also true to say something like "Rails can be back-doored by modifying the code and redistributing it to unsuspecting developers!"

Actually, you could say the same or similar things about many applications, including binary distributes. With some analysis you can figure out what conditions a jump instruction is using, and modify it to always jump where you want. Cheat Engine lets you analyse game memory at runtime and substantially modify behavior.
> It makes cross-platform desktop development much easier.

For the developer, while the user has to deal with horrid battery and memory consumption.

Devs are paid well enough that "easy" shouldn't be a top priority.
FEMA is about to run a national test of the Emergency Alert System
I had to search for the video, but I guess you are talking about this?

https://youtu.be/TZnajQqqKV8?t=2894
> It shows that the intent continues to be racist.

It shows the impact, not the intent, continues to be racist. It doesn't really say anything about intent, at least without a lot more data. If white and black usage differ in kind somehow - say, pot brownies vs smoking on the street (I have no idea if there is a racial disparity here) - it could lead to a difference in police involvement without any racial discrimination.
This is why we have rainbow tables.
Which is something people do. For example, you wouldn't hire someone who takes their politics to just-under-violent extremist levels, as it would be bad PR.
No thank you. The TC article is both entertaining and factual.
That would require Valve's developers have a clue about basic security...
I assure you that what comes out of Trumps mouth represents the average Republican voter far better than some policy statement on a webpage.
Yes, this is true, although ripgrep is more of a hybrid than ag is. ag has numerous problems with being treated as a normal `grep` tool, where as ripgrep does not. (Although, to be clear, ripgrep is not POSIX compatible.)
Ask HN: Suggest me books on leadership and negotiations?
I agree. I have been a very regular user of Webflow for the past eight months and it has given me a 10x productivity boost despite being capable of coding it all by hand.

It does have serious limitations though. Many times I have needed to tell clients: "you can't do that because it's not (yet?) supported in Webflow". For example, you can't have "lists of lists" (i.e. nested maps or loops in JavaScript), which makes a huge number of designs virtually impossible. There are also random CSS properties, like vertical text alignment, missing from the Webflow interface, requiring custom coding, and they have arbitrary maximum file sizes for a number of assets. With Webflow, you either stay within their limitations, or you have to do a lot of things in custom code embeds.

Despite this, I've found that, even with Webflow's brutal price structures, working around those limitations in order to stay on Webflow's infrastructure has generally been worth the pain compared to spending a whole lot more time/money on doing things by hand, especially because my clients have a tendency to completely change their mind several times during the process. I'm not yet aware of anything with a shorter iteration time — there's CodePen, but its hosting features are even more limited than Webflow's...
This comment reminds me of the initial response to Dropbox [1]. Sure, you or I, a very technical group, could set this up manually. But I was suggesting you manufacture, or part together a very simple box. The idea is this would be easy for non-technical people to get their wifi. Basically, plug in this box and in 30 days, you will have your neighbor's wifi password.

[1]: https://news.ycombinator.com/item?id=8863
What makes this unique to electron as opposed to any other application that doesn't run as a completely closed binary (not that binaries can't be backdoored, of course)?
It's funny, in London new housing has been built with the explicit planning condition that residents aren't entitled to on street parking and no parking is included in the development.
Let me annotate this as somebody accused of climate denial.

We who are not trolling do not deny the data. The data are clear, there is a general warming trend so far. And it's most likely primarily caused by human action. But there's a problem.

You see, when we noticed Uranus had perturbations in its orbit, we looked at the theoretical model, did the math the theory demanded, predicted that a planet should be in a location, looked there, and saw Neptune. In that order. That's how rigorous scientific theory works.

Climate theory is very far from that rigor. Each University has a different model. Most of them have many models. They're software, written by programmers that embed their assumptions into their code. They all disagree. And we never know which model is correct except in hindsight. Even more problematic, the model that best predicted climate change in 2015 is not the model that best predicted climate change in 2019. Of the thousand models, we see every year in the news "this one was right!". But we didnt know it was right before we looked in hindsight, and we don't know in the least which one will be right tomorrow. Climate theory is still in flux.

Moreover, the supposed solutions do not address the fact that the biggest problem is not the West, which has been declining in emissions simce the 70s [0]. It's the exponentially growing developing world. None of the solutions I've heard except "global nuclear fission or war, now" have a chance at stopping climate change as generally predicted by the entertainment media like CNN et al. Solar and wind is a mere fairy tale unless we're talking about comoletely carpetting AZ, NV, and half of TX in solar paneling. And then braindead things like the Green New Deal pop up, that even my Democrat friends make fun of. I'm left with a sense that the evangelists of climate change either don't take what they believe seriously, or they're ignorant of the gravity of their predictions.

So yeah. I'm withholding judgement because for the foreseeable future, the absolute worst case is my grandparents can outwallk climate change coastal changes and we get more net arable land in Canada and Siberia.

[0] https://ourworldindata.org/co2-and-other-greenhouse-gas-emis...
> Not sure how we ended up here.

Then you don't understand why people use them.
That's a pretty good deal for them too. It doesn't cost very much for a butt to be in a seat for 2 hours, but just getting them in the door more often increases the chances of high margin concession purchases. Plus there are always the people that subscribe-and-forget
> Stay away from microwaved food. Keep dogs away from plastic toys

Unless you're not a sperm producer, then you can eat all the plastic you want.
> Should coders learn law?

I think there should be a basic legal literacy, such that if someone comes along and asks for a feature or someone in the hiring pipeline asks a question that is likely trouble you know enough to consult legal.

Years ago I was working on an ATS system, specifically related to pre-hire applicant testing. Boss wants to be hip and with it, tells me we only need social login, e.g. Facebook, Twitter, LinkedIn. Almost immediately thought "adverse impact on a protected class," that class being "over 40." Few months ago an HN article about this very problem came up.

Had another one, team lead is assessing candidates with Hacker Rank. He starts giving random time extensions to various candidates, which opens us up to allegations of discrimination. Why did "Candidate X" get an hour longer than "Candidate Y."
> The entire thing is probably a giant money laundering or tax evasion scheme.

Donating money to movie theaters is not how money laundering or tax evasion occurs.
And I can dry the apple wood and use it for smoking :)
It's not enough to be more aggressive. You have to be more aggressive in larger, more coordinated groups. The greatest warrior in history couldn't fight off an army on his own.
Yeah. that was what I was told by a manager. UPS looks about double the size now: https://www.diffen.com/difference/FedEx_vs_UPS