skysight-inc/HackerNews huggingface dataset:
Your complaint is about phishing. I agree that phishing is too easy. But that concern is orthogonal to (and significantly harder than, both technically and from a policy perspective) reliably encrypting the TLS transport.

This is one of the older controversies on m.d.s.policy, for whatever it's worth to you.

I don't really care where you or anyone else comes down on this, as long as we all agree that you can't just jettison certificates and let HTTPS "just provide encryption", which is a common HN refrain and is clearly unsound reasoning.
Keep in mind that Colombia can reapply the fine with arbitrary periodicity for continued non-compliance.

As a one time fine it isn't much, but it isn't chump change either, and it will make the company increasingly unattractive to investors/contractors/employees.

This is where economies of scale can start to bite you in the arse. Yeah, the world is your oyster. But when you have the entire world treating you as a target, things can pile up real fast.
Let’s talk about journalism ethics – mine and HuffPost’s
Slack is also a large scale user of Hack:

https://slack.engineering/streamlining-your-workflow-debuggi...
Source code is available on GitHub. Package is on NPM too. https://github.com/stephenlb/spoken
> towing capacity

what? Electric vehicles are vastly superior in towing capacity. The Model X from tesla can TOW a boeing jet -- 230,000 pounds. Now that has some tradeoffs for range, i believe. but in terms of actual towing capacity, it's leaps and bounds ahead of any other vehicle capable of towing. if you'd said 'towing range', i might be willing to accept that.

range itself is also just not really a concern any more. 300+ miles of range on a single charge is more than enough for the vast majority of drivers.

winter performance is possibly somethign to worry about, but when you can charge overnight at your home, you can still leave every morning with a 'full tank', so it's also just not really a concern any more.
Thank you for underscoring the religiousness of this completely bogus alarmism. Are the basic needs of humanity: food, water, shelter, in any sort of decline at all? No. Crop yields are up, water is a constant, and we're not going to run out of concrete and wood to build shelter.
from my previous interactions with the rust years ago and related rust design discussions on their issue tracker,the main barrier seemed to be rooted in the unfortunate "self" trick for how "the type im instantiating a trait with" syntax making higher kinded trait support expressible as a simple extension,

This is of course ignoring the related need to also write code parametrized over lifetime variable structure ..
Hm. I guess there's no bright commercial future for diesel-electric (biofuel) hybrids.
Much of this is so overstated as to be wrong.

> runbooks, etc actually provide little value in preventing incidents.

There's a great deal of evidence that checklists have value in preventing accidents of omission. In some systems we can build around needing checklists by adding automation, but in others we can't (or it's not worth it). Runbooks are good, but you shouldn't have too many of them.

> Unfortunately it turns out catastrophic failures in particular tend to be a unique confluence of contributing factors and circumstances, so protecting yourself from prior outages, while it shouldn’t hurt, also doesn’t help very much.

Things have causes. In complex systems there can be many causes, and the causes themselves can be systemic and complex. That doesn't mean that it "doesn't help" to defend against some of those causes. You shouldn't try to paper over every single little gap, but at the same time it's worth fixing some things. Adding mechanisms like runbooks, for example. Or backpressure. Or timeouts. Or unit tests. Or whatever.

There not being a single root cause shouldn't be taken to mean that you can't fix anything.

> The end result is that the additional bureaucracy inhibits the adaptive capacity of the organization and ultimately makes the system less safe.

Again, overstated. Of course too many procedures and too much bureaucracy is bad. But no procedures isn't the solution - depending on people's good intentions to do things is extremely failure prone, even if people have the best intentions in mind. Procedures are mechanisms that can help us avoid those failures.

> They prevent people from interacting with the risks in a system in a way that teaches them where the safety boundary actually is.

Just letting people break stuff is a great way to help them learn, but can also be an extremely expensive one.

> So rather than trying to simplify or remove complexity, learn to live with it.

I don't even know what to say about this. Sure, complex systems are complex. But accidental complexity is bad and adds risk.

> The number one myth we hear out in the field is that if a system is unreliable, we can fix that with redundancy.

This one seems right. Redundancy adds complexity (and hence risk), and only fixes unreliability if the cause of the unreliability is uncorrelated across the redundant systems. Is the cause of your unreliability uncorrelated? If it's random system failure, maybe. If it's software, no.
Our other car is a Mitsubishi Outlander PHEV. Not as good of a system as the Volt, but it's decent enough for reducing our CO2.
It really depends on what you mean by "solve this". Can we prevent a horrendous catastrophe of our air, water, food and energy systems? Absolutely not. Is all of humanity going to die? Absolutely not. A lot of people will probably die and they will be (largely) poor. The Earth will recover given time and a much lower and sustainable population.

I think you need to decide your own moral stance. Do you want to say you did your part even if others didn't or do you want to say it was hopeless and we just had to let it play out? Only you can answer what feels sufficient.
Even better, thanks.
> You could take extreme measures of sabotage, e.g. destroying equipment and infrastructure of the non-renewable energy sector.

Let’s try not advocating for eco-terrorism here please.
> I predict that long, slow, possibly "eco" trips will become fashionable as a new way to signal wealth

I try to sell to my spouse, family and friends that this is what we’re doing when I buy the 29” pitch seat flight tickets, but they’re not buying it.
It's also formulated in a way that clearly implicates "this is bad, don't do that!".

The warning makes sense if shown as part of a shortlived debug session to a developer. However, this is caused by a program that a non-technical user has installed permanently on the device.

So I'm confused how legitimate TLS inspection is supposed to work for this user group.
I have access to the police, regardless of whether or not I have access to their weapons or evidence room.

Shutting off the park limits access to a public good. It would be like the city police not responding to one part of town, and in this case (lotteries or patronage) ensures that the rich get served first. That would rub people the wrong way, I think.

Does that clarify?
Your comment does not explain why you think that the package management story is better in npm, it's merely like saying "node-gyp is a pile of debt" and not going into details, but I can surely tell I have no idea why node_modules ends up so fat and why my npm install eats a lot of bandwidth, time and disk space ... is npm trying to workaround incompatibilities by installing different versions of a same package in the same node_modules ? I hope not, because that would be just perfect to accumulate debt in the whole ecosystem. Not to mention that I was just handed a frontend source code where building the source requires node-gyp which requires g++ and python2 :)

Quick question since you seem to know npm very well, is there a better solution than this to automate npm package publishing nowadays ?

sed -i "s/GIT_TAG/${CI_COMMIT_REF_NAME/v/}/" package.json

(I don't have this issue with Python's setupmeta)
when I see the name Tavis Ormundy I hear it the voice of Steve from Security Now
This liveness analysis isn't strictly necessary for async/await, either. You can do it in both cases or in none. In any event, it is not a matter of storing more stack, but of the level of optimization in the stack representation. Interaction with a GC brings its own complications as well as opportunities.
You must be living under a rock. A Long Range Tesla Model 3 can easily do 1000km/day range using a supercharger and can now charge 75 miles in 5 minutes or up to 1,000 miles per hour (https://www.tesla.com/blog/introducing-v3-supercharging).

EVs are being widely adopted in Europe, with Norway (harsh winters) taking the lead. I don't get the whole "EVs are only suitable in California" narrative.

https://cleantechnica.com/files/2019/07/Europe-EV-Sales-Janu...

I live near Boise Idaho (also harsh winters) and I see 2-4 Teslas in my commute and I only drive to the office 3 times a week.

Around June of last year, we bought a used Model S and eventually replaced my wife's SUV with a used Model X. So far, we do not foresee going back to ICE cars. I haven't been into a gas station in forever.
Sure. Hot casting works for this use case too. You could print a pattern and use a lost-wax type process or print the mold with a refractory material.
"The degree should get you to a point where you can actually learn the job."

I think the question there is "how fast"?

"You hire juniors and give them as much work as they can do with supervision." - Agree to a large extent, the main problem there is that their expectations don't usually match what they are ready for.
Jamaica is a bad example since most of the country is poor and not suitable for tourism. But I do agree that in particularly famous cities, there are entire pockets of it devoted to traditional Western culture for those who are not up to experiencing new cultures.
This broke unexpectedly in July. Hot fix came about a month later. Upgrading to v4 completely broke backwards compatibility.

Wasn't expecting that from an aws created lambda solution
Often (not always!) this is due to lifestyle inflation, retail therapy and poor money management. A lot more people have the means to be saving for $400 emergencies but instead buy some plastic crap that gets used once, eat out too often, get the latest iPhone every year or buy a car or house beyond their means. And I've been guilty of this as well.

Just look at garages. They are often so packed full of junk there is no room to park a car (and then end up filling driveways and the street bumper to bumper). Once you start paying attention to this you notice it a lot.
Internet in a Box
Oh we disagree entirely. I am openly mocking the idea that you should learn the job by not doing it. That data scientists are just oh so special that no one can be a junior at it.

It's ridiculous. If you can't mentor someone at the job, then that speaks to your failures. It's not the job that's the problem.
If your solution to the difficulty of finding an EV charger is "put EV chargers literally everywhere," that would hypothetically solve the problem, but how do you propose to make that happen? That's what the question here is.
Towing capacity isn't same as being able to pull heavy things. Pulling has to be matched with the corresponding braking power, which with regenerative braking means a massively over-spec regenerative system. Or you give up on regenerative braking and just install bigger disks, hammering range. That tesla can move an airbus along a runway (so can any honda civic btw) but try moving that aircraft down a hill at speed ... heading towards a sharp turn ... beside a cliff .. over a river... and maybe there is some ice.
... well it keeps getting sold.
Appreciate you sharing your perspective. I remember a friend of mine in middle/high school would load games onto the schools networked drives. It seems IT played the games too because they never did anything about it.
Both a bare > and a sequence of 3 quotes are invalid in JSON, so it should be really simple to add multi-line strings wither Python or Perl style.
> The article is about Chrome

no it's not?

The title is referencing the author's post on EV certs being dead after the change in Safari and the article quotes Google, Mozilla and Apple's reasoning for the change. Your argument should be with those statements, not a narrative you're forcing on the events.
https://arxiv.org/abs/1811.04454
> But is there a way to force immutable variables in Python? You can easily still end up in the same situation when you typo something (easy to do when plurals are involved), and then end up reassigning something when you meant to create a new variable.

Not always. Mypy has experimental support for `Final[T]` [0], and attrs/dataclasses support final/frozen instances, but that's opt in on a per-argument basis.

[0]: https://mypy.readthedocs.io/en/latest/final_attrs.html
I've seen a few listings where EV charging parking spots are listed as a perk. You might be surprised how willingly your landlord is keen to go with you paying to upgrade their building.
"Junior anything needs a lot of supervision, it's probably the defining trait of a junior." - yes, but I would argue that junior data-scientists requires much more supervision than the same person doing a junior analyst or engineer role.
> First, CreditKarma makes their money by spreading the surveillance profiles on you to other surveillance companies that wouldn't otherwise have that data.

> First, that is not accurate. CreditKarma makes money by showing you ads for credit cards.

Do you truly think that showing advertisements does not spread the surveillance profiles on you? Advertisement companies are exactly how and partly why those surveillance profiles were built in the first place.
Nonlinear Multiobjective Optimization [pdf]
The closest thing I've seen are graphs predicting temperature rise under different scenarios.
That might work for urbanites who drive to work and work in the same city where they live.

But I know quite a few people whose daily commute is 40+ miles each way. They'd be visiting the charger every other day. That's unfortunately very common for people who live in San Francisco and work outside the city, and vice versa.

(I have a different problem: I walk or take transit to work, and have a car mainly for longer trips outside the city. I also have no charging station in my building's garage, so I've stuck with an ICE car for now.)
However symbol frequency is also significant for entropy.

Do you think 1 in 25 four letter passwords contain a backtick?

If you were brute forcing an ASCII password (no whitespace), would you naively cycle from ! up to ~ for each character?
This article had me cringing.

Peter Theil was right to criticize Google cozying up to China. But rather than respond to that point, this guy calls him a hypocrite for backing a seasteading company and gaining dual citizenship in another country. Why argue with his original point when you can just throw ad hominem attacks around?

Plus all of the dog whistles in this article are below the NY Times. Implying that Zuckerberg speaks Mandarin and therefore can't be trusted on China is beyond ridiculous. Or that Google is "rallying around the flag" just because they met with Trump once (I mean, he's the president... ignoring him isn't exactly an option.)
If he stumbles on to the next Minecraft, he'll have enough cash to keep those lawyers busy for years while he still makes a nice living. Odds are he won't and nobody cares.
What is written here is sometimes wrong, sometimes over-simplifies what is needed to build robust systems.

If look at the list:

7/ You absolutely must remove people who demonstrate they are not skilled for the role assigned to them in the system. Role / skill match is one of the first thing an assessor will look at.

6/ Documenting best practice is the only way we have to ensure a system will survive the demise of its creators. This is captured in a quality management system and again, will be scrutinized by an assessor. Check EN 50126 in railway (my field)

5/ This is ridiculous. Failure is the greatest teacher. It shows us where we failed and by analyzing failures we progress. Dismissing this is hubris. Many safety techniques have been introduced due to prior incidents (e.g. collision avoidance systems in planes, etc)

4/ Procedures are not meant to make anyone feel clever, but ensure robust / safe operation. While you can wish procedures to be made as smooth as possible by automation, you can’t just ignore them. Some procedures are simple and save lives routinely (e.g. stop at red when driving your car)

3/ Risks must be analyzed, quantified and mitigated. But when a risk can be eliminated entirely at acceptable cost, it should. EN 50126 is again a good read here.

2/ Simplicity is said to be achieved when you cannot remove anything. But it is not necessarily exempt of complexity. Saying something complex is inherently more robust does not make sense. The simpler a system, the better it can be understood by others and thus made more robust by peer review and contributions.

1/ This is not black and white. Sometimes redundancy is needed, sometimes it’s a rotten idea. Reliability (MTBF, MTTR, MTBSF) calculations are needed to determine the right balance.
#8 Know when your number is up. Take the deal, and get out.
Did uber tell its employees not to comply unless they had a warrant, or just not to comply? The latter sounds like them.
Financial website entirely generated by AI (photos and texts)
I remember an FB contact bragging about staying in "the greatest hostel in Rome", at first I was jealous, but then I thought, what's the excitement, he's not going to meet authentic Romans, he was just going to meet cookie-cutter "Hey bro, I'm travelling, am I not awesome?" people.
> I eventually switched back to Arch Linux due to lack of software support and subpar performance.

> Going back was really painful, Linux, to put it bluntly, is a hot mess.

You basically answered yourself. This is the trade-off: quality vs quantity.

This is not a flame-starter, its an observation of mere facts.
Yes, search engines do serve a similar purpose. It's not a very rigorous solution though, and there are plenty of ways to get to a website that don't involve going through a search engine.

Leaving aside the UX, I think there's also some value in providing legal authorities with a smoking gun in situations where phishing or other illegal activity does occur using a domain with a EV certificate. The extent to which current EV certs serve that purpose is debatable, but the idea is has merit.
Why it has to be useful? We try to understand countless things without have a use case in mind at the time of study.
All sorts of places intercept HTTPS if they deem it reasonable. There are a wide variety of security products out there for such things.
That potentially shows the same phenomenon - kids given a Black History Month assignment to write a paper on a black inventor - and it's fairly clear there's some sort of automated threshold at work.

As evidence, I really doubt this difference is editorial-based:

https://www.google.com/search?q=purple+musicians (shows the carousel)

https://www.google.com/search?q=purple+inventors (no carousel)
Introducing Coil: a Kotlin-first image loading library on Android
As an American so patriotic I practically have an A on my forehead, I can tell you that your 95% is way, way off. France, as a country and a culture, has essentially perfected the art of living. Even if (like me) you don’t like Paris, there are towns and villages throughout France that are heaven on Earth. Until I visited them, I could not believe such beautiful, happy and serene places existed.
Given the ubiquity of surveillance in our society I have reached the conclusion that any time there is a high profile case where there's a conspicuous lack of surveillance evidence I operate under the assumption that it was intentional.
Personal contribution to the environment?
You could jettison PKI though. Self-signed certificates would provide as much security after the initial connection. The theory of PKI is that the CAs are providing a source of trust in the identity of the certificate holder, but that is mostly meaningless if domains cannot be meaningfully connected to real businesses and/or people.
Its a matter of principle though. Droogie hasn't done anything wrong, and is receiving fines due to errors made by the DMV.

You're right that when faced with a choice between acting on principle vs acting pragmatically/for one's own benefit/convenience/need, people often don't have the luxury of (or patience for) choosing the former. But it's nice to see when someone does.
TLS only says you're having a private conversation with a server, not how trustworthy it is. Maybe you're having a private conversation with the devil!

TLS protects you from active attacker at your internet cafe wifi or small ISP or not-tier1 country's ministry of propaganda.

If the network between multiple aws/gcp/azure regions where e.g. let's encrypt's acme servers are deployed and the server you're talking to is hijacked, TLS doesn't help because hijacker can get valid certificate.
This is my hangup too, and it crosses over into the craze around building high density housing in California.

I don’t want high density housing. I don’t think anyone does. I want a yard for my dogs to play, for my wife to nurture the garden she has always wanted, for fruit trees, a garage where I can work on my car, etc...

We have so much land all around this country and no one is using it.
Living in a city is nice when you’re young. Here in SFBA you see lots of people living in the city and commuting to the suburbs to work at bigtech campuses. Weird huh?

But it makes sense. Population density increases convenience. I have 2 amazing corner stores on my block. The movie theatre is 2 blocks away, there’s many good bars and restaurants within a 4 block radius. Major grocery store (TJ) is 3 blocks away. And my apartment building has a wonderful very secure garage and a package concierge so nothing ever gets stolen. If I can’t find something within a walkable radius, a cheap bicycle share gets me to almost anything my heart desires within 15 minutes.

And I’m meant to trade all that for what? A yard? A garage? Needing my car every time I want to run an errand? Pfft

I remember living in Menlo Park and it was hell. Everything is so far away that you need a car just to grab something quick from the store.

Guess what I’m saying is that we should find ways to reduce the need for cars, not to make sure everyone has somewhere to park and charge theirs. I think high density housing in mixed residential/business areas is the best solution.
Every feature is a source of bugs. Be careful when constructing end user affordances for systems that have broad applicability and need to run over a very long time span.
Why will public chargers be slow? We should assume that those who provide public charging services (the gas stations of the future) will be trying to optimize throughput + convenience store sales.

DC fast chargers currently get you 40 miles in ten minutes[1] (that sucks!) so your extra 20 miles gets you an extra 5 minute wait. Presumably that wait can be "limited" by getting your shopping done or grabbing a bite to eat while you do it.

[1]https://pluginamerica.org/understanding-electric-vehicle-cha...
Uhh...no: http://gmauthority.com/blog/wp-content/uploads/2015/02/Volte...

Source: http://gmauthority.com/blog/2015/02/secrets-of-the-2016-chev...
The front page of BBC is filled with clickbait headlines every day
I think one of the things holding back 'modern' php is the lack of adopting a proper construct for dealing with threads/async operations. Whether its going to be promises/futures, async await operators or what have you, The inability to easily write async PHP hamstrungs it alot.

Its 2019, and I still can't daemonize a PHP process without it leaking memory all over the place.
The 500e is an underwhelming compliance vehicle but they seem to have already changed their mind considering that next year the Fiat 500 won't even be available as a gas model, it'll be electric only.