skysight-inc/HackerNews huggingface dataset:
Actually more like...

setInterval(function() {
try{
if (!$(".jJFkx") && $('.cVLwd')[0] && $('.cVLwd')[0].textContent === "Continue") {
$('.cVLwd')[0].click();
} } catch (e){ console.dir(e)}
}, 500);
They're plugged into the highly curated social media shares of people they went to grade school with and haven't seen in 15 years, or worse they're plugged into the curated 'life' of complete strangers.

This is leading to anxiety, depression and even suicides

https://www.healthline.com/health-news/social-media-use-incr...

https://www.psycom.net/social-media-depression-teens

https://adaa.org/social-media-obsession

https://blog.pcc.com/social-media-self-esteem-and-teen-suici...

https://www.nbcnews.com/news/us-news/social-media-contributi...

https://www.theguardian.com/media/2019/jan/30/social-media-u...
Yes, the technology itself cannot be ethical or unethical. Ethical determinations require consideration of intent, which machines do not [currently] have. And they often also require analysis of failure modes due to deception or subversion.

It is clear to me that a door-security system that included facial-recognition as an optional security-multiplier, and that did not willingly share its face data with any other person, device, or system, and that allowed the owner of a face to remove it from the system at will, would be an ethical use of the technology. But then again, if the system has to still work without the facial recognition in order to be ethical, you might as well leave it out and save the cost.

Facial recognition is most useful when the intended use is least ethical.
> if your measurements are unbiased

This is a big IF which you can't actually know because its beyond your level of precision, by definition.
Ask HN: What tech stack to learn as hacker?
I do not have cs background. I want to build web apps, turning my ideas into real products. Therefore, I want to learn web dev. What stack should I learn?
Show HN: Cloudflare-Route 53 Kubernetes Controller
I guess you could amend it to 'the type system prevents 100% of reasonably preventable errors of the class'!!
Without that, why would you need the end button on your keyboard?

/s
>(Chartbook: tmsnrt.rs/2Yyra8r)

Is there a reason why the dip in 2016 isn't considered a recession, but this dip is?
iNaturalist – Explore and share your observations from the natural world
This is a good start:

https://www.dogsbite.org/
'I've been contemplating getting out of IT altogether because I'm not fully confident in career growth at this point unless I murder myself with study and ignore my family."

That's a real problem. I had a few years when I worked on pretty cutting edge stuff so most of my learning was on the job and could be applied quickly. In my current job there is a lot of repetition and stagnation so you have to spend a lot of time outside the job learning stuff which you then never apply. This gets really old after a while.
Yeah we re talking about html, not static. Plus, iirc, it is actually most SPAs that are ‘static’, i.e served as plain index.html containing all the Javascript.
Estonia's ASICe containers have solved signing any electronic files/documents. Italy is reinventing the wheel a bit. ASICe as such is actually an official EU standard since 2016 and EU law¹ enforces that such digital signatures have to be accepted in every EU member state. Estonian digital signatures have used another standards before though, first Estonian digital signature was given in 2002.

The ID-card also provides S/MIME should someone want to use it but people usually just use ASICe.

[1] - https://ec.europa.eu/cefdigital/wiki/display/CEFDIGITAL/What...
It's funny how HN is an echo chamber sometimes. Every time I'm reading a thread like this, it's flooded with post from people who have turned vegans or almost reduced meat to zero, and one could think that this is the norm.

Like a few years back when HN was going on about how the whole world would now stop eating regular food, and consume some powder mixed with water, I think it was called Soylent or something. That didn't happen.

If anything, I will only be eating more meat, better quality, but not less and this is probably also the case for millions of other people.
It is also a security loophole. Imagine if 5 hijackers each brought a trained “emotional support” Rottweiler. A trained Rottweiler would be much more dangerous than the pocket knives that are currently banned.
We see what China is doing to its Muslim minorities. Having a government like that gain insight into the habits of people of other countries is probably not the best idea.
There were fears of recession in 2016 too
Charisma is certainly something I have never been told I lack. Maybe we are lucky and have the right people as well.
That sounds somewhat inelastic. Like gas or basic needs, people will often still use/need healthcare regardless of price, at least as long as it is high quality care. If, say, knocked unconscious in an accident, you'll wake up in the ER regardless of price.
Cat dander can and will affect certain people pretty badly.
The new thing might be that some people who would otherwise prefer the company of people over animals can't get it and settle for a pet instead. Articles on the "loneliness epidemic" get posted quite frequently on HN:

https://hn.algolia.com/?query=loneliness
It's fine to dislike Adorno, but to say he largely deserves to be forgotten is preposterous. He's arguably the first thinker to attempt to recast and reformulate philosophy in such a way that it could remain critically potent in the modern world.

To take such a hand-waving, dismissive attitude toward all of his contributions, which are dense, difficult, and backed by a deep study of the history of western thought, based on the flaws of one study (by the way, Adorno himself even admitted to not being the best equipped to conduct sociological studies like this, he was first and foremost a critic and philosopher) is ridiculous and in fact the very imprint of the sort of limited uncritical/psuedo-critical forms of modern thinking he constantly rallied against.
This sounds rather short sighted to me. Changing our diet towards lower meat consumption (like we had 50 years ago - max. 1 portion of meat per week), has been shown to come with substantial health benefits. It is a no brainer that we should go there. Because the alternative is so much more detrimental for the human race. Being struck by climate change means we would have around 500 million people who need to migrate, besides other catastrophic effects.
What you can accomplish in 5 lines of “ready for production, maintainable, easily understandable by coworkers” python is vastly less than what you can accomplish in 5 lines of similarly constrained Haskell.
I only read the abstract because, well, I don't find the subject all that interesting, but isn't the paper stating the opposite? It states that interesting theories deny the assumptions of their audience.
They were all varying levels of evil at various times. People thought Microsoft was a predatory monopolist. Embrace, extend, extinguish. Oracle a sue-happy company run by a megalomaniac. “What’s the difference between god and Larry Ellison? God doesn’t think he is Larry Ellison.” IBM was a stuffy has-been with strong military-industrial ties. I have no good joke for IBM, which is part of IBM’s problem.

Google’s “Don’t be evil” really was in stark contrast to all that. (Whether lived or not is a separate thing. )
Good advice? I don't know. And that's going to be the problem.

When I was a lead engineer at $oldCompany, I was responsible for an ad server, backed by GBs of blocking rules, that needed to run on a few variants of our owned and operated hardware. Some of the production machines had only 16GB of RAM, so we needed to be prudent about how we used memory.

The server was written in Java and loves to eat memory. But only 50% of the memory was given to Java. I recall having one spirited debate with a devops engineer about how much memory to assign Java. "We can cache more data in we had a bigger heap!" I said. "The OS needs memory on its own!" said the devops engineer. Looking back, I think you can looked at our debate in one of two ways:

1. Lead app developer genuinely asking for numbers and experiments to show why 50% is not just some arbitrary number
2. Lead app developer throwing his weight around and pushing for more memory against the advice of his colleague

We ended running an experiment to running a single production machine with 75% of memory allocated to Java. This system looked great at first, then about a week later, under very high traffic, started to have problems. We reverted the configuration and went back to the policy of leaving aside 50% of RAM "for the OS" and thing appeared to get better. I still don't know why that setting "seemed" optimal.

I was wrong. But I couldn't have learned that lesson easily. I wished I just listened to my coworker and didn't waste all that time. But there was no easy way to show I would've been wrong. I can have a debate with the old me and the new me won't be able to demonstrate why setting aside memory, seemingly unused, is better.

As engineers, we expect to operate on evidence and data. But for some engineering decisions, getting comprehensive data is simply not practical. Some decisions ultimately comes down to who wins a debate. You can run experiments like I did, but even that was expensive (and likely not reproducible). I've learned to accept that we are going to make bad decisions. The key is to make the best of it.

I hope if ever work with someone like Rachel, I can disagree with her in a respectful way. I hope I can acknowledge that while my decision could be wrong, her voice was genuinely considered.
I would say not necessarily bad, but definitely risky. Because if it goes south then it could easily be a bad situation for everyone.
>distrust of medicine (doctors, generally) was the result of aggressive law enforcement.

Perhaps I am reading it wrong, but the quote is:

>[...] people didn’t distrust medical authorities like they do now [...], and didn’t fear [...]coming into contact with government agencies [...].

Which says "AND didn't fear" not "because of fear".

I can't definitively say what the parent meant to post, but the way I read it (which could be wrong, too) is that they are saying there are two reasons we are not as equipped to deal with an outbreak like we did with polio/smallpox:

One reason is because of erosion of trust in healthcare. The other (separate) reason is because of the fear of police/immigration officials.
> You know that lifestyle where everyone was poor, sickly and died at a younger age, that's a totally better lifestyle!

That’s not because of lack of meat.

> In that lifestyle you may eat the clean meats on special occasions, but you eat the less desirable parts on a regular basis. Mostly in soups and stews because it stretches the food for longer. You save the bones and make soups out of them. Oh and you ate a lot of fat. Like smearing pig fat on bread. Technically pork was the cheapest meat. Only one purpose animal. Hens give eggs and fertilizer. Cows give milk, fertilizer and pull carts/plows. Kill them only when they're useless. Plus you may get meat from a butcher on special occasions.

This sounds like eating less meat?
> I don't see this OS succeeding beyond China though.

I wouldn't be so sure. Obviously it would be an uphill battle for the OS to compete in the US or Europe, but anywhere that doesn't have clear smartphone dominance yet (ie most of India or Africa) is fair game. Huawei already has a strong foothold in both of those places, and the Chinese government is not opposed to strong-arming them into sticking with Huawei infrastructure.
Yesterday you asked about books on "python, django, and web dev". That's a good start. Many languages can be used for web apps, it's more important to start and pull through with the learning resources.
I don't understand this, since wasn't the theory that people act so horrible online partially due to anonymity? Yet some of the worst online behavior I see is on Facebook, where not only is the user's real name and picture attached to the post but family members and friends can see it.
At what point (if even possible) does the manufacturing and physical goods based indicators lose their signaling status due to a more service based economy? This question mainly revolves around advanced economies like the U.S, last quarter business investment was negative but consumer spending was robust. Services and healthcare are huge parts of the economy, are our indicators still as valuable?

Granted, the global economy certainly seems like its close to recession territory, with no help from international tensions — just wondering if our measurements are losing their viability. Even Jay Powell cast doubt on the Phillips curve recently.
You’re absolutely correct that this depends on having the concrete semantics of the compiled program line up with the abstract semantics of the source language. What you may not notice is that the source language can indeed have a platform-independent abstract semantics, and it is that which 100% correctness is proved of.

Once you leave the abstract semantics, you have the problem of proving your compiler to be a full and faithful transformer of program semantics. But this is a different problem space with different tools of analysis. It’s beneficial to start off already knowing that your source space is correct.
So, a possible hint of a downturn, and we're calling it? Can we wait and see what Christmas does?
The security risks are primarily in port, plus insider threats. Do you really think that most nations would ever allow nuclear powered merchant vessels crewed by random foreigners to enter their ports? Regardless of the potential benefits it's just completely unrealistic in the post 9/11 world.
We call them "carts". They have four wheels, let you haul around a lot on foot and have been in use for centuries.
Even if done correctly, they are just verifying that you bothered to get a photoshopped passport with the targets name in it.
No, I meant that it is an approximation or the thing in the real world that it represents. For example, consider a restraunt. Should the point be at the entrance to the building, in the middle of the building, or maybe at the door round the back where mail is delivered, or at the centroid of the parcel. In order to actually use this excessive precision you would need to know that. In the examle cases the data is not formal enough for this to matter. It is an approximation of some real world thing and never meant to be used for highly precise work.
This is good stuff.

A nit:

Users should not use AES-CBC or GCM for encryption. Secretbox should be the default mode of storing information and users should be encouraged to use KMS.

I see where this is coming and agree in spirit, but GCM is actually idiomatic Go and implemented through the crypto/aead interface, which does about as good a job as any library at being user-proof.

I too would probably prefer code that used Nacl primitives over Seal/Open, but I would probably not flag code that didn't.
Flexing corporate power to make prospective employees submit to invasive things like this seems a good way to only hire those who are desperate or don't know any better.
He's definitely somebody who's done an amazing job and is being recognized more and more, but his output dropped dramatically years ago and frankly it's been a while since he's had anything useful to say.
I'm tired of hiding from the big techs in a pile of privacy gadgets.

How so?

They fight back, with dark patterns. Ruleset works today may not work on the next; you can update the rules; they can make your update break things. I can see that on some major Chinese e-commerce sites, blocking tracking scripts may cause search function to stop working, or you cannot comment because the submit button failed to load.

It's difficult to know, I use uMatrix, and often run into questions like what is this <cryptic.cloudfront.net> domain doing? Sometimes it's almost 'first-party'; sometimes it can be something else.

Domain names are too broad because I don't see why a site owner can not add trackers under the domain, or some related domain names that were 'trusted'.

There's an option to do this as those anti-virus software do, have a database of hashes of the scripts and css, and audit them. But you know rapid things are changing on the web, it is next to impossible to keep track of those. Eventually, we'll run out of passion and energy, just unplug it already.
My view on this is that the specific targets of your anxiety (understanding systemic crises) is just something that your mind ginned up from a more general anxiety. At least, that's how it has worked for me in the past, and I think it's supported by the relevant science (not an expert tho). There have been periods in the past when I had a lot of anxiety about my career or personal life, and keeping my brain busy with random articles fed a perceived need to gather knowledge that really boiled down to not wanting to give my mind a quiet mental backdrop on which the thoughts you're anxious about can bubble up. It was only post hoc that my brain would construct some motivation for why I was reading all those articles, and it sounded similar to what you're describing.

This is pretty much the purpose of mindfulness practice: to force this quiet and make you contend with the thoughts actually causing your anxiety. I know this sounds like woo, but it's worth at least trying out mindfulness meditation and getting a keener sense of what concerns you. (And of course, it's entirely possible that you know your own mind and your model is correct. I just thought I'd share similar experiences I've had in the past)
We use https://github.com/usefathom/fathom (or rather their paid product https://usefathom.com/)
If someone wanted to do that, they could have made a ton of money before Apple started this bounty.
Ask HN: How do you “verify” app security?
We are currently going through the OWASP "Application Security Verification Standard" ( https://github.com/OWASP/ASVS ) to increase security of an existing web app.

Many of the items in that checklist are "verify X". To me, when it says "Verify requests to uploaded files will never be executed as HTML/JavaScript", that means spend hours visiting every place where files may be uploaded, find the corresponding download, and check the code to make sure it won't be interpreted as HTML/JS.

There are 132 items just in the "L1" part of the standard (the minimum recommended protections), which seems like it could be thousands of hours to "verify" all of those.

But the OWASP ASVS says that half the things in L1 are probably automatically testable or testable in the CI/CD pipeline.

Clearly we don't want to manually verify all these things, as that doesn't prevent drift as time goes on. But we also don't have a process that would automate any of this. It seems like having access to request logs would allow us to identify many things (like whether API tokens are exposed in URLs) and access to live production data streams as they go through the load balancer would allow us to detect file uploads and content types sent back. But I'm unaware of tools for doing that.

Cloudflare has their "web application firewall", which probably helps some with this on an ongoing basis, I think that starts at $5K/month. AWS has a WAF as well, and you can purchase subscriptions to rules for checking traffic, and some of those mention OWASP.

Right now we are going over OWASP doing some "gut feel" what items are the highest priority and are likely to be vulnerable to. We've also been looking at code and finding some definite security issues.

But longer term we need to present to non-technical board members why we aren't scanning all file uploads with A/V software, for example.

Anyone have any wisdom on how you are "verifying" compliance with security standards?
chip it.
I will show this comment to the treble team for a good laugh.
Maybe not new, but seemingly accelerating in magnitude.

>A 2015 Pew study [...] We as a country have less faith in the medical system than we once did — trust was at 80 percent in 1973, and in 2016 it is 39 percent."[1]

[1]https://fivethirtyeight.com/features/americans-dont-trust-th...
i was amazed at the number of pets i saw on internal US flights. i still remember this one flight with at least 20 dogs/cats. as a european, i simply couldn’t believe it.
saw like 2 pets in total after 100+ flights in europe. saw 0 pets while flying in asia.

not sure if this is a US thing, or if there were 0 pets in general except for the flights i took.
They're considered separate fields because they focus on different problems which are amenable to different techniques, leaving their expert practitioners with very different knowledge bases. You're right that it is a cultural distinction, but that doesn't mean it isn't an important or practical one.
Same here. People should experiment for themselves. Give a 30-Day meat-based diet a try.

http://meatheals.com/
https://justmeat.co/
Android does not distribute a bootloader. SoC vendors have their own.
There is strong cultural pressure (at least in the US) to constantly progress in your career. This is measured primarily by title and compensation.

I've been a senior developer at the same company for 13 years. I feel that most of the time, I am progressing in my knowledge and experience, so, in my mind, I am making progress. It just doesn't seem that way on my Linked In profile.
Perhaps that’s why we don’t find this paper itself interesting — it merely affirms our intuition that we find information interesting when it goes against our previous assumptions.
Sorry, let me clarify. My impression from reading the article was that Exxon's communications to shareholders weren't materially lies in any relevant legal sense. I.e., that trying to prosecute them is at the very least a legal stretch, or at worst a case of malicious prosecution.

If I misunderstood the article or missing something crucial in it, I apologize.
You've probably got the direction of causation backwards.

People who want lots of sexual partners seek ways to get that. Many people are attracted to the powerful. So people who can't stand to keep it in their pants are more likely to seek positions of power.
This topic has gained substantial scientific evidence. More people have come to turns that the facts only point to possible solutions for the climate were we substantially eat less meat.

Having you eat even more meat makes you indirectly responsible for people’s death. It might not be right. But in the near future (2-3 years) you might feel ashamed of what you said right now.
I’m sure the vegetarian bowl without meat substitutes is cheaper.
Yes, you missed the point, this is not a rant.
If you go the javascript route, I like koa/node/mongo and vue.
Maybe the rest of the world can spend more on new drug research while america enjoys low prices on existing ones that hordes of people need right now?
> Governments, please solve this problem!

Fun fact, the EU has made a law that should force countries to implement their PKIs for people to be able to digitally sign documents and that those signatures are equivalent to hand written ones.

https://ec.europa.eu/cefdigital/wiki/display/CEFDIGITAL/What...
Css/javascript/html

Node for the backend will also use javascript.

That could take you a very long way if you want to just hack out a product.
No, it was pretty straightforward “hey I told you guys you could pick plums but I never said you could climb on my truck. Now it’s dented and I’ll have to fix it, so I’m not going to let you pick plums anymore”. I mean it was nearly 20 years ago so that’s paraphrasing, but that’s the tone I used.
Another way of putting it is that every person alive today was dead for 13 billion years before being conceived and born, and will (relatively) soon be dead for however long the universe exists.