skysight-inc/HackerNews huggingface dataset:
i like it, for some reason my brain dislikes switching from left/right a lot, so that's why i often avoid the $ operator, so instead I'd write:

return . fromMaybe defaultPort (maybeEnvPort >>= readMaybe)
Depends on where you go. In the Sunset neighborhood there are several spots that do $15 cuts.
It's a bait and switch. Unfortunately that is what a huge amount of software has become. From OS updates to app updates everyone wants a direct line to install whatever they want.

Why does a site like reddit want to push their app so badly? What can be done with an app that can't be done on a webpage now and what is so important to something that just delivers text?
Good will and branding. I tend to trust companies who do that for me because it at least gives the impression that they are kind of trustworthy. I now book a lot of my travel (hotels especially) via Priceline because they took care of me when Marriott overbooked and wouldn't honor my reservation I made via Priceline. Priceline put us up at a 5 star hotel that costs $800 a night while Marriott's suggestion was to send us (and other guests like us) to a Motel 8 instead without refunding us at all.

So never again Marriott and I'm booking my travels via Priceline.
U of T researchers accurately measure blood pressure using phone camera
First: it's not as simple as "broken" or "not broken". GCM in Go is provided through an AEAD abstraction that is in fact pretty close to secretbox, ergonomically. In Python, Fernet provides AES-CBC with HMAC-SHA2 with similar ergonomics. So you can't just look at the constructions in isolation.

Using CBC in a Go program would be bad indeed.

Second, while you can make CBC secure, it isn't secure by default. New designs should generally avoid CBC mode in favor of a mainstream AEAD. So while I'd happily recommend Fernet to people --- it also dates back to a time when AEAD ciphers were a little less mainstream than they've become --- I would see CBC as a design smell in a newer library.
> I'd imagine this is to combat marketplaces like Zerodium

Zerodium already pays double what Apple does. Where's the incentive?
That’s simply not the law. The official guidance (https://gdpr.eu/eu-gdpr-personal-data/) is that even just an IP address or a license plate number are sufficient to count as identifying a person.
Moreover, it's a problem with the current state of "identity" as a whole. Most of the data received in the article - passports, addresses, phone numbers, credit cards - does not change very often. Some documents expire, but even then it could be valid for another 3 - 10 years.

We need to move to a system that allows rapid expiry of PII data. Then it will not matter if someone is able to social engineer this data from all these companies. By the time the data leaves the companies HQ, it is already out of date and therefore impossible to use with new services.
Why on Earth is Alan Kay on Hacker News?
I never realised it was anything other than alcohol. I had a quick look, but didn't see anything about "herbal stimulants"?
I liked google trips and finance, light weight to the point. Not sure what happened to either of them, maybe just less discoverable these days.
8Chan Refugees Blow Their Anonymity
The flip side to this argument explains exactly why I use lodash.

> You-Dont-Need-To-Write-And-Maintain-Everything-From-Scratch

I've tried writing some of the lodash functions myself to save on a dependency and usually end up missing some edge case that was already considered years ago by the lodash maintainers. I could have just required lodash and been done with it.
I've emailed the sender and asked them to stop. If any of you continue to get these, please let us know at hn@ycombinator.com.

In the future, it's best to notify us at hn@ycombinator.com about things like this, too. We only noticed this post by accident.
I bought mine (Oster brand) many years ago on Amazon.

I have to agree that the Wahl's kit you're talking about (Amazon ASIN B000JNQSIQ) looks like an excellent deal.
>Liquidity and debt help societies and people

Interest helps a small portion of people, while harming the majority.

>It’s just important that you pay off the card before the 18% rates kick in.

If enough people did that banks wouldn't bother.

>The problem with debt is when you use it purely for consumption instead of investment or increased efficiency of your consumption

No, it merely mitigates the risks, if your business venture goes sour you will not be in a good place. There's also the question of 'what counts as an investment' although this is a minute issue compared to the aforementioned.
CLI Tool for Jira
To clarify, I was speaking about the business. I have no problems confronting people about it.
Yes, the market is perfect and infallible.
Remembering David Berman Through His Lyrics and Poems
It's easy for an ML model to do great in the average case but horribly in the worst case, so you're correct if "fault tolerance" is a simple loss function to be minimized, but wrong if "fault tolerance" actually means what we care about. That's much harder and not something we uniformly know how to do with ML. Like the costco example in the article.

To do that with ML, they'd need a loss function that captures what we care about and data it sounds like they don't have.

We do know how to build systems with high fault tolerance the old fashioned non "AI" way.
Say I watch UFC 241 on my TV. It's live, it's on TV. I paid through it using the UFC app.

https://www.tvlicensing.co.uk/faqs/FAQ95 is pretty clear that I have to pay.

Why, ethically, should I be obliged to pay TVLA (and therefor the BBC) for something they didn't create or facilitate?
If most tickets for that airline come from Google then that airline has little incentive to burn Google with its pricing practices.
Which moral principle did they violate that would call for the "unethical" label?

<strawman alert> If there is a moral principle that client software developers should respect the scarcity of their users' computing resources, then that's news to me. My experience as a user is that developers have always treated my hardware's memory, storage, bandwidth, and compute cycles as externalities that are free for the taking.
This is very cool. Is there a deployed instance on the web somewhere?
Arrggh, I don't think it's published anymore. And used ones are over $100 on amazon.
So the original Star Wars, which has spawned so many copycat movies, is itself a copycat movie? Let's see. The formula seems to be: take two successful old movies, such as Battle of Midway and Hidden Fortress, and create a mashup set in a different genre to make it seem new. Has someone created a machine learning application that applies this mashup/genre switch on old movie scripts to make new ones?
Something about the way both lodash and underscore functions are written/interfaced has always seemed incredibly obtuse and difficult to reason about for me. FP zealotry and ideals seem to have been top if mind in designing these libraries. I prefer the modern native functions hands down.
> You'd just need to offer them a compelling work situation, with problems that interest them.

If you want to attract those kind of people and have them do their best work, then part of the “compelling work situation is to let them pursue their own problems.

Alan Kay:

” I don’t run CDG, I visit it. [Xerox PARC founder Robert] Taylor didn’t want to hire anyone who needed to be managed. That’s not the way it works. I have people on my list who are already moving in great directions, according to their own inner visions. I didn’t have to explain to these people what they would be working on, because they already are. Bret Victor has already hired four people that I didn’t know about. I wanted people to fund, not manage.”

https://www.fastcompany.com/3046437/5-steps-to-recreate-xero...
I review proposals all the time and this is still standard language.
Not paying for this
> <redacted>, 31, a social media specialist at Etsy, works from 10 a.m. to 6 p.m.

For my education, what does such a figure do eight hours a day?
But don't we all use a small fraction of library/package and language functionality.

- In C's stdio, I've used a fraction of calls

- In Ruby/Rails + gems, I use a fraction of calls

- In Node/Express, I use a fraction of calls

- In frontend javascript, I use a fraction of the native calls

In frontend dev, I get that this means forcing users to download a library, but for many use cases 4 kb gzipped isn't a big deal (esp if CDNs are involved).

I think it'd be interesting to poll developers on what part of Lodash/Underscore causes them concern:

1. The extra download time/bandwidth

2. The extra costs of packaging (failed builds, extra packaging process)

3. The speed of computation (assuming that some native functions are faster)

4. The concern that libraries should only be used when they are highly utilized (e.g., at least 20% of a library's code should be used before it is appropriate to include it)
Being a Law Firm Partner Was Once a Job for Life. That Culture Is All but Dead
To me this is rather simple, if you believe both of these things to be true:

1. The business world is competitive.

2. Some people are working on their ideas full-time.

Then how is it not a huge disadvantage to not be working full-time on your idea? I'm very curious how people who advocate for side projects think about this differently? With ones they hope will become successful businesses at least, other side projects, such as open source projects, make perfect sense.
I think he's a fan of collective intelligence. Maybe he feels quora is a good implementation of this concept.
Don’t Cheat on Interviews. It’s Obvious When You Do
I played around with tailwind on a small project and found it more difficult than I expected. I think part of the problem is that when using tailwind or other similar frameworks, the conceptual model and workflow is different and requires some cognitive overhead to use effectively and efficiently.

Perhaps one day I will try again but personally I want to minimize extra stuff to learn, especially related to css and styling.
In your first version, I think I would use =<< to keep "flow" of information right-to-left. I also use parentheses instead of . and $ when there isn't a lot of nesting, I got that habit from this post about writing legible Haskell http://www.haskellforall.com/2015/09/how-to-make-your-haskel...

getSocketAPIPort :: Int -> IO Int
getSocketAPIPort defaultPort = do
maybeEnvPort <- lookupEnv "socketPort"
return (fromMaybe defaultPort (readMaybe =<< maybeEnvPort))

Keeping the pattern match instead of using "fromMaybe" wouldn't be a bad idea, either:

getSocketAPIPort :: Int -> IO Int
getSocketAPIPort defaultPort = do
maybeEnvPort <- lookupEnv "socketPort"
return (case readMaybe =<< maybeEnvPort of
Nothing -> defaultPort
Just port -> port)

It makes the default value stand out a bit more.
From the article: "Taubes and Attia advocate a low-carb diet much like Teicholz; however, they have hired researchers who disagree with them to conduct groundbreaking nutrition studies."

They sound like right hacks. I'm not sure if you think the sugar industry paying for studies is great either, which a lot were.
Guest pass link: https://www.wsj.com/articles/welcome-to-black-hat-where-the-...

Mods, please update original.
I had to verify my identity for an online service a while back. They used a third party company that has a mobile phone app essentially for video conferencing; you then call this company via the app and talk to them. They ask you to show your face and move around and to show your ID, including moving it around so they can check that the security hologram (this was an EU passport) is indeed one. So for this kind of check MS Paint skills would not be enough by far.

I guess they had no way of verifying that the ID info is real, but apparently this process was trustworthy enough for their client.
I'm really worried this is the one that we don't get out of.

We've basically built our entire global economy on the idea that externalities don't matter. Recently, I came across this (https://www.sciencedaily.com/releases/2019/08/190808115117.h...) - between 1970 and 2012 there has been an 88% decline in large vertebrates (ie fish). We already know that plastic is poisonous, our entire economy is run on fossil fuels, etc. We've got less than ten years to completely change how the entire planet operates socially or we'll just cook to death. How likely is that?

It's gotten to the point where I'm walking down the street and the cognitive dissonance is just unshakeable. What are people working so hard for, accumulating so much "wealth" for, when the idea that anyone is ever going to retire is laughable? How are people doing anything that involves a time horizon of more than 5 years?

The recent shooters are evil sad people, but I understand. The world is terrifying and it's driving everyone crazy. I just don't know how people are coping.
It's some time since I last worked in Haskell (and I never worked on anything useful), but I would write the function this way:

getSocketAPIPort :: Int -> IO Int
getSocketAPIPort defaultPort = do
maybeEnvPort <- lookupEnv "socketPort"
return $ case maybeEnvPort of
Nothing -> defaultPort
Just port -> fromMaybe defaultPort (readMaybe port)
CBC is vulnerable to error oracles if you don't encrypt-then-MAC it properly (without the MAC it's also malleable, which is a game-over flaw). GCM is vulnerable to a bunch of its own misuse issues; it doesn't "use" random nonces, it is conceivably (through not really realistically) unsafe to use random nonces, and if you screw up nonce handling it blows up worse than CBC does.

My point is just, these things all have rough edges.
“Gedunk”
Super anecdotal obviously, but very very difficult. Bought some flights on Scandinavian Air through Google Flights that included multiple checked bags for my wife and I about a year ago. Upon arrival at the airport in Gothenburg, they were very insistent we hadn't paid for bags and had to pay the exorbitant fees for checking bags on the spot.

We essentially could not figure out how to contact anyone at Google Flights to clear up the situation or achieve any form of redress.
> Because the value, as presented, is wrong.

That's not true nor is it the problem at all. The thesis was that the values, albeit correct, have too many significant digits, which in turn reflect differences which lie somewhere between having no practical use or being absurd.

> Imagine, for a moment, that someone uses these values to put up a fence.

That example is very poor. Any engineer can tell you that a measurement is meaningless without tolerances/margin of error, and the tolerance in effect when putting up a fence is not expressed in a microscopic scale.
Why would you need a real name? You shouldn't collect it.
5/7 use AMD now ( not facebook and Alibaba).

Seems AMD is back
I don't want to buy Intel CPUs, nor Nvidia GPUs. Exception being an Nvidia Shield.

You'll be going for 3900X + X570 Taichi? Or another board? Ideally I'd also want ECC RAM.
I agree with this. I think using lodash is a 'use boring stuff' decision in javascript. It feels kind of clunky and outdated in some ways, when new native APIs are covering more and more of what it can do year by year, but at the same time it 'just works' in the most obvious way possible.

With native APIs, you're essentially just doing the same things with a slightly different syntax and sure, it feels cleaner. It is cleaner - where those native APIs actually exist. But if you have to support anything but the latest versions of evergreen browsers, now you're worrying about polyfills, build targets, etc etc.

It's not that hard, but it's just one more thing to worry about and one more thing to be surprised by when it fails on a corner case in production. Meanwhile, if you'd just used boring old lodash, it would be working and you could be paying attention to something more important.
Some people refer to hypothetical people in stories as the same sex as the person describing the story. I'm not positive, but I imagine the parent is also a "he". I don't consider this important at all, and I think you're being pedantic.
No - I'm the only one that can remove posts at this point, and it puts a brightly-colored bold "This comment has been removed and is not visible to other users".
Not complaining about downmods but -2 for a pretty boring statement like the above is a bit...interesting?

- Do people not think the US is a democracy? Why? Russiagate?

- Do people think the US generally murders you for protesting?

- Do people think that Tiananmen Square didn't happen?
It's "NMR" in the sense that the nonce is long enough to safely use random nonces, you mean? In practice, Kubernetes can use random GCM nonces safely too. Real NMR ciphers don't just have misuse-resistant ergonomics, but also better failure modes when the ergonomics fail: if you reuse a Chapoly nonce, it blows up. That doesn't happen with AEZ or SIV.
I think you have misunderstood the implementation. If you want all buttons to have a bit more padding then you either change the padding class on each button from .p-1 to .p-2 or, more likely with something like buttons, you abstract the styles into a .button class and then you can make a singular change to the padding and it will affect all your buttons.
As I understand it, this repo is also a library, but it's smaller. So, would using something like tree shaking (i.e rollup.js) make everything unused go away anyway (and people could continue using lodash/underscore)?
Help cleaning up to stay sober. This is number one for most homeless. Drugs took them down their path of fall. Fyi Seattle made safe places for junkies to shoot up instead of putting the money in to clean them up. Their wide spread drug use is the city's own doing.

A steady job.

And a home.

Maybe someone to talk to for help on mental health.

That cures around 90% of the total homeless issue. But yea, they still need a fucking house.
and surely extremely battle tested
I'm not sure it should be this hard. If all you know about a customer is his e-mail address and site password, then you can only verify the user's identity by e-mail address and password. A "strong" ID only helps if you have prior information about that ID stored on your end.

Likewise, it stands to reason that you shouldn't provide information about a user at e-mail request only, without proof that said user also knows the password to your site. You could even create a policy that a user cannot do GDPR requests for up to seven days following a e-mail password reset action, to mitigate the account hijack situation.

As for data processors, who have no direct relationship with end users, the safest policy is to not collect personally-identifying information at all, only use the data controller's surrogate identity. And if you must collect PII, then use that previously stored data to verify the user, not an ID card that you have no way of validating. If you only have the natural address of the user (for example, you're a shipping company), then only offer to send the data to that known address, or make the user prove his residence (e.g. utility bills); if you only know a bank account number, ask for a (sufficiently-redacted) bank statement to that effect, etc.

A government-issued ID is only worth asking for if you can verify it.
The GDPR recitals do not recommend gathering additional data solely to be able to fulfill these requests.

See https://gdpr-info.eu/recitals/no-64/ and https://gdpr-info.eu/recitals/no-57/ - the key part is "A controller should not retain personal data for the sole purpose of being able to react to potential requests."
I’m very skeptical of the idea that, if they didn’t account for this particular attack vector, that must mean nobody thought about GDPR at all. If someone came to me to write a DSR plan, I’d be thinking about how to reliably enumerate all the places we might have personal data, not how to verify that people aren’t impostors. (Does your DSR plan also have to prevent spearphishing your DBAs?)
> I'm more afraid of who can see the data that's peronally about me,

Big Tech knows all about you personally, including your name, address, phone number, locations you've been to, people you've met, things you've bought or considered buying. And guess what: they will sell it to anyone who pays enough.
Seriously, what's the number we'd have to hit in a charity Kickstarter to make Dan do this?
>We should teach people to cook healthy vegan food that they enjoy.

That just isn't realistic; you'll wind up with a lot of really unhealthy people eating food they hate. Not everyone is good at cooking, and one big reason veganism is so unpopular is because it's so hard to make anything that tastes good with it. Meat is easy to cook, even for people who aren't very good at cooking. And veganism is generally unhealthy, because most people aren't dedicated or good enough at it to get the proper nutrition, so they leave out critical nutrients, whereas with meat it's really easy to get everything you need (like iron).

Expecting the whole populace to get good at cooking vegan food is like expecting the whole populace to become very skilled at C++ programming (including template metaprogramming). It isn't going to happen.

If someone makes vegan pre-made meals that can just be microwaved, that would be different.
> If we get scammed by fake ID then we're breaking the law.

The person who committed fraud by providing a fake ID is breaking the law. I'd think that a regulator would take into account when deciding whether it would be in the public interest to prosecute you.
Do more business with Google? Hard pass.
Just don't tell them.

I told my employer and all my work colleages I had a really boring hobby, Chemistry (something I am actually interested in)

Then bang on about it every chance you can get. Go into elaborate detail about the most boring parts. After a few weeks people will learn to leave you alone.

Make sure you always have an answer for "what are you doing tonight", "what are you doing this weekend" be super excited about it, but make sure it's really boring.

Then when it's time to leave tell them you're going travelling around Europe and you have no idea what job you will do next.

Launch your product, and never work the 9-5 again (it's a new type of work now)

That's what I did.

I know people are gonna say "Thats risky", "You could get sued" etc etc etc ... but you know what? Life is risky, and if you dont have the guts, my answer to you is that this is the least of your problems running a startup : maybe you should stay in that 9-5
I don't think it's currently possible to book flights to Google Flights itself. Doesn't it always redirect you to another site to book? You would have to contact that site for help in this siutation.
You could equally have praised the OP for not stereotyping.
Staying hip on the internet isn't easy.
It depends on the circumstances of each scenario, but it would be completely reasonable if large numbers of smallish companies acknowledge that they lack the capacity to handle personal data properly and the recommended strategy for GDPR compliance is that they should simply stop requesting and storing that data.

That's not a reasonable strategy at all. Any company doing more than selling basic goods in person for cash probably needs to process some level of personal data for legitimate reasons. In fact, it will probably be legally required to do so in several respects.

It's all very well arguing that you want to reduce processing of personal data, but I think what you really mean is that you want to reduce processing of personal data in ways you don't like. Some amount of processing of personal data about you is always going to be necessary, and indeed essential to your vital interests and the normal functioning of society.