skysight-inc/HackerNews huggingface dataset:
Completely honest, open question:

I've seen advice coming out of companies like Microsoft that password expiration dates are not useful, in part because they encourage insecure practices, and in part because the scenario where someone gets access to your password and doesn't get around to hacking you for 3 months is just not that likely.

Why doesn't that advice apply to certificates?

A company that's setting up renewals might do so in a way that exposes their certificates to more of the workforce than necessary. Setting up automated renewal adds complication over the much simpler model of, "put this special file in a vault and on the production server, and then nobody in the company gets to touch it."

It also doesn't seem likely that a compromised certificate wouldn't be exploited for an entire year.

But the general advice I've seen from security professionals is that LetsEncrypt's renewal policy is helping, and forced password changes are hurting. So it seems like there's some dimension to this that I'm missing, either around how companies are typically implementing auto-renew, or how certificates get leaked and abused.
If you enjoy this, please checkout Scott's podcast Pivot [0]. He shares all kinds of analysis like this.

[0] https://pod.link/1073226719
https://www.vice.com/en_us/article/a3np4a/new-municipal-broa...
I teach college as well, on First Amendment speech, press and assembly issues, and this case made it onto my syllabus this past semester as it touches on a number of these. The story and resulting legal case led to several discussions about the tone and temperament of debate on our campus. The overall response from my students was highly critical of the Oberlin students and faculty.
What about fiscal responsibility? If you have your house in order there are lots of options.
So that would be a similar case for WeWork where you’d expect a bar for quality of offering
The only positive thing it did for me was kill my faith in humanity. The fact that this type of thing had enough credibility to get public money indicates an absurd level of failure in critical thinking.
I've heard for years that going "all-digital" can be bad for productivity, I saw it myself when I first started out as a freelance developer. For the first year or so after I went full time, only working from a desk in the garage I had problems keeping up on my to-do list.

But this is where I'll disagree with the premise of the topic. After about the year I had come up with a pretty good system of a to-do list and high-level notes in a Word doc. Maybe it's because I'm an engineer at heart and have a (sometimes) curse of always looking at a system and seeing the ways it can be improved. I will concede that I am not normal in that way, I have spoken to many freelancers that had to keep a paper to-do list to keep from losing tasks and notes. My real problem with using paper for to-dos and notes is that I've always been on the move, and I have severe CRS.

Returning to the tips from the article, these tips are new to me and I wish I had heard these back then. 10 years ago when I started out as a freelancer I didn't have any issues focusing when it was time to work. Now though is a different story! Lol. I'll be putting a couple of these into my workflow and habits. Thanks for posting this, @jonbaer!
If you have Prime, here you go: https://www.amazon.com/gp/product/B07CJZLF3S?camp=1789&creat...

It's also on Hulu
People of color were reportedly followed and treated suspiciously in the store, an incredibly common experience in this country. No one I know thought the incident that set this off was an example of profiling, the students were pretty obviously shoplifting. My point isn't that the the university or the students were in the right here, no one I know to thinks that. Was just trying to provide context that this was a tipping point in a relationship that was strained to begin with, not a massive confrontation that came out of nowhere.
For non-experts it is helpful to know there are around 50000 kanji characters so 777 is ~1.6%

https://japanese.stackexchange.com/questions/11735/how-many-...
Thereby illustrating what a stupid idea it is. That's the whole problem, everyone want to just push financial problems into the future.
Another way to reason about it is "earnings before bad stuff." Your explanation makes it sound like it is a superior measure by painting the other GAAP measures as "financial engineering." EBITDA is vastly inferior, although it has some uses in comparisons and also glossing over bad news.

Examples: I take a loan with 1 million a month in interest payments and I "invest it" and "earn" 1 million a month. EBITDA: 1 million a month. Amazing! Real world, net zero.

I buy a 20 million dollar piece of equipment that lasts 20 years. From it, I "earn" a million a year. EBITDA: great! Real world, net zero.
BeCCS at scale is relatively straightforward:

- ferrous ocean seeding... not much is needed

- Caribbean and Atlantic are already saturated with fertilizer and organics runoff

- kelp harvesting.. Mexico's prime tourist beaches are covered in many hundreds of tons of kelp per day from just passive growth

- Partial closed-cycle incineration

- liquify and pump carbon oxides very deep underground
Of course they have the right. That doesn’t make it a good idea! A company should be smart, insightful and take the long view with compensation decisions.

Anyway, you’re using the word “owed” but the twitter thread doesn’t, so I’m not sure we’re talking about the same thing.
Discredits a whole field -- doesn't post any papers that he attempted to replicate.
Things don't have to be legal requirements to effectively be requirements. I'd hate to be considered not fit for tech by my coworkers, my boss, a potential employer, ... because of how I like to spend my free time, and if that sentiment is common it is a problem for people not fitting that expectation. Which I think is be bad, even if I personally would benefit from it. And you see people push others out with arguments like this, it's not a theoretical thing. (I'm not saying the original commenter is doing so, but explaining why I read the comment as negatively as I did)
Completion fast enough to be faster than a human's reaction time has been feasible for many years now. Furthermore there are completion systems that let you type discontiguous parts of your target word, essentially giving you the best of both worlds.
MSPs should consider a self-hosted RMM solution over a SaaS
Active DDoS Botnet C2 Detected
Probably a doctor and not an airline should make the call? It seems like a useful principle that airlines should not be in charge of medical decisions, which would imply that airlines should never question traveling with a horse (besides checking the doctor's authorization) - if we think that someone is being overprescribed a horse, we-as-society should follow up with the prescribing doctor and perhaps medical licensing boards, but we-as-society shouldn't put indirect pressure on the doctor via the patient themselves via a flight attendant.
> If you control both the producer and consumer of the serialized data, you can of course do whatever you like.

Don't forget all the unintended intermediate producers and consumers due to microservices or even otherwise well-written tools that convert to float64 internally.
>Sure, they might not work out, but lots of stupid-sounding ideas ('a horseless carriage?

It's a monumentally stupid idea. I'm surprised it isn't outright labelled as a scam. They basically cheated money out of governments and gullible people with a project that was never a good idea in the first place.

Solar is the perpetuum mobile of our time.
> It’s a shame that this tool is so incredibly useful but simultaneously so unergonomic to use that it requires a 12 page manual.

It doesn’t require reading the whole manual, nor does the length of the manual have anything to do with parallel’s ergonomics.

Do you use bash or ssh? Have you looked at the length of those manuals? Most of parallel’s manual is advanced workflows the casual user doesn’t need, stuff like parallel commands run over a network of machines and collecting the results on the originating host.

Maybe you could show some examples of what you mean, because I think parallel is pretty easy to use. Personally I feel like it’s usually easier than Xargs, especially when dealing with tricky quoting. It does have some of it’s own syntax, like the triple-colon :::, and it’s really easy to use. Several pages of manual are about variable substitutions you can use if you want, they’re very similar to bash variable substitutions, and they’re all optional and super convenient. A bunch of parallel’s manual pages are devoted to simple examples, which is nice, and the kind of thing that’s missing from so many man pages.

> it’s begging to have a modern replacement

I’m not sure what “modern” means. You could certainly propose some changes though, or show some examples of the kind of syntax that isn’t working for you. Httpie and curl are built to do different things.
I don't know what HN's policy is for posting referral URLs, but I feel like they should at least be disclosed. I'm flagging this link for that reason.
The comparison is that Groupon was exciting and hot at the time of the IPO, allowing investors and insiders to hype it and make a very profitable exit. But it turned out not to be great long term for a variety of reasons, so the stock price quickly fell (it's trading at something like 90% off peak).

Groupon is still a functioning business, of course, with something like $2bn/year in revenue. And WeWork might end up a functioning business as well, just like its competitors. But I think its best case is to end up like those competitors, which all have thin margins and look like regular old businesses, not profit fountains like Google, etc.
I wonder if there's any advantage to picking 30 stocks versus just investing in some big index fund like VT or whatever.
Interesting - this sounds similar to Japan's "Rascal the Raccoon" problem[1]. I wonder just how many species have experienced similar surges in popularity at the hands of media.

[1]: http://nautil.us/blog/-how-a-kids-cartoon-created-a-real_lif...
> It tried this with plastic bins. Customers just kept the bins.

I'm kind of shocked that you would think of this as a bad thing. If a person is given an item and they find a use for it that isn't harmful, why should that item be forcably repossessed?

I would absolutely appreciate a shipping service that takes back cardboard boxes, plastic, etc. used in the delivery of the item, and actually this used to be the case. The milkman wouldn't just deliver the bottles, he would take empty bottles and the company would reuse them. Soda companies as well, used to give out money to recoup the bottles used. It's really only when we moved to the supermarket system, and the plastic bottle, that we stopped doing this. But if you kept the bottles, they didn't outright charge you for it.

Actually, according to capitalism charging for the packaging would be a positive move but ineffective and probably negative over the long run.

This is because charging for the packaging means you can extract more of a profit from the consumer per delivery. The more packaging you can give them the harder it is to return it and the more you can charge for it (obviously this isn't linear because at some point the packaging costs more than you can easily charge, but in that instance you just do it gradually), and the more incentive for Amazon or whomever to make it difficult to return it. At the same time, it allows them to say that they're doing something, and provides a pretty good political defence for them for them to charge more per packaging.
There is one and only one bright spot I can see in this test: the concept was trialed under ideal conditions according to its proponents, and failed spectacularly.

There's a high probability that true beleivers still won't be convinced -- their faith transcends reason and experience. The rest of us can point to this as a Provably Bad Idea.

My only regret is that there aren't similarly conclusive demonstrations possible in all such cases.
What's Wrong with Hebrew NLP? and How to Make It Right
If you have a 100k ARR business and someone offers 5-6x* rev today, why not check out early and move onto the next one?

* Don't know what trading strats trade at
If you're interested, I've written a tool called `loop` which sacrifices some of the abilities of GNU Parallel for a far more intuitive interface (I think so, anyway.)

You can check it out here:

https://github.com/Miserlou/Loop
The main problem with this hypothesis is western assumptions of the route China would take to arrive wherever its people/govt want to arrive.

The Chinese government has a tremendous obligation to protect its citizens from external manipulative forces (history books list the primary belligerents) while navigating to a more economically prosperous and freer society (possibly).

Not a walk in the park, more like a tight rope... and regardless of whether we want to admit or not, our tax dollars help put sharks in the water under that tight rope.
I'm actually a huge fan on parallel. Use it often for various media processing pipelines. Um, you don't need to be daunted by the 112 page manual. A brief read of the man page has always sufficed. The best part is that every time I think of something new I need to do, it's always there.
Because desktop Windows is nearly irrelevant?
Especially with the new trend of the toolset being a target now. It would be more favorable to keep as much control over the tool-sets as possible. When self-hosting tools one has better control over performance, monitoring, access restriction, and fine tuning.
Upvoted because I appreciate your sentiment, but I’m not sure I’d look to Kelly Anne as a paragon of technical wisdom. Even a blind squirrel knows she’s a nut.
This may sound dickish, but as someone who always has to pay extra for more legroom because the length of my thighs is longer than the standard seat pitch, when is being tall going to be declared a disability?
I’m a Black Feminist. I Think Call-Out Culture Is Toxic
In my experience, while what you say is true, if I were to rank the skills that "might get me promoted", there are far too many that are way higher than this.

Conversely, look around you at those who are at your "level" in the company, or at tech people who are higher than your level. How hard is it to find someone who does not use sed, awk, cut, etc?
By "harming a market", I mean "causing a market to be less efficient". It is typically easier to identify harmful behavior than it is to quantify the amount of harm caused. Sometimes you can easily estimate a rough lower bound on the harm's cost. Easier cases include 1) Spoofing, where you could estimate the harm as being greater than the captured profit, and 2) Self-trading for the purpose of receiving liquidity provider incentives, where you could estimate the harm as being greater than the incentives received. Harder cases include situations where poor strategies caused market instability by underestimating risk or trading in a way that is too similar to others. Extreme examples of these include the Long-Term Capital Management (LTCM) blowout in 1998, the 2010 Flash Crash, or any number of firms that contributed to the financial crisis of 2007-2008. You should be able to find plenty of academic papers attempting to quantify the harm of those.
One shouldn't have to elaborate on why Rust is better than anything. It's simply the best language for all tasks in 2019. It's irresponsible not to rewrite everything in Rust at this point.
Or, instead of a two line patch with codes, you could just type one line: “parallel --will-cite”
>Non-residents with a valid Massachusetts non-resident hunting license do not need a firearm license to possess or carry rifles and shotguns and ammunition during the hunting season.

>Non-residents do not need a firearms license to transport their firearms in or through the Commonwealth, provided the firearms are unloaded and enclosed in a case while traveling.

Disclaimer: I am not a lawyer.

This seems to indicate that a MA firearms license is required if

a. You are staying in MA

b. You don’t have a MA hunting license and/or it is not hunting season.
If you just want to create a market for something that won't produce real value in your lifetime, buy crypto currency.
Japan surpasses China as top foreign holder of US Treasuries
> Using computers is essential to the jobs and social lives of huge swaths of people, and providing safe tools to accomplish those goals is a very valuable social good. In particular, most people who use a computer don't have the time or the interest to really learn the details of computer security or how the internet/their web browser works, nor do they really have a choice as to whether they use these technologies in the first place.

What business do those people have "[flipping] every switch the opposite way around to see what happens", then? I think expecting users to have some humility when using technology they don't understand, or to be prepared to take responsibility for the consequences if they don't, is rather different from and much more reasonable than expecting them to "learn the details of computer security or how the internet/their web browser works".
I looked through the account's history. Your statement isn't accurate, and you've violated the site guidelines by posting this. If you're worried about abuse, please email us at hn@ycombinator.com, as they ask. Don't post accusations of astroturfing or shillage in the threads—the poison that adds to the site is much worse than whatever it's trying to combat.

https://news.ycombinator.com/newsguidelines.html
> it’s begging to have a modern replacement (like httpie is to curl).

This seems like a pretty weird example. All common tasks in curl are very straightforward and I've never even heard of httpie.

Let's please not change the interface to basic command line tools every few years because people want something ""modern"".
Stick firm with the fines.

Look to instrumentation options. The USB cable hack making rounds a week or so back was based on a SoC that measures 5mm square and sells for $1 per unit.

Adhesive-applied tracking sensors that can be put on virtually everything at a unit cost of $0.25 - $0.50 are likely possible within another year or so, if not already. These can track for shock and orientation in shipping, as well as location. Theft can be identified --- if not attributed, at least high-risk environments can be identified, and alternatives considered (in-store pickup, say).

Mind: the same tracking can also produce highly negative applications. Given falling costs, we'd better 1) start thinking about these and 2) get used to this. Though part of my #2 includes constructing legal limitations and protections against malicious use of this data.
What are you talking about? Surely you've seen people who keep dogs as pets. They lead entirely normal lives, for the most part. And you must have also seen people who have not just one dog, but two or more, and they still have a normal life. If you understand that, is it that big of a leap to imagine that some of those people may also have $50 to certify their pets as ESAs?
I like some of parallels' functionality but I wish it was more performant and that it was easier to avoid the complexity when you only want a few features.

As a result of parallel's performance and invocation complexity I find myself using xargs -P more frequently than parallel.
It's not a bad thing or a good thing. It's increased costs to Amazon to ship durable, plastic bins and have customers take them / not return them. You mention you get money back if you return the containers, which implies a deposit you have to pay (increased price on first purchase), to which I noted that you have a massive chain of custody problem.

In the glass bottle example, you - the customer - take the bottles to a recycling center or to the grocery store. (I remember doing this with cans and bottles with my father as a young boy, growing up without a ton of money.)

In the Amazon example, you - the customer - take the bins... where? I live in Seattle, so it's easy enough for me to take them to an Amazon pickup location, but probably not for someone in rural Kansas.

Leave the bins out to be shipped back to UPS? Those bins are worth a considerable amount of money on deposit most likely, and are prime targets for theft or misappropriation. How is this resolved? You have created a large chain of custody problem and a large burden on their support team.

This is all doable. The price will just have to be quite a bit higher than it was in the past for what is likely fairly minimal positive impact on the environment. Take a look at industrial pollution / CO2 effects on the planet by country adjusted for GDP. The United States is not close to the prime offender today - and it'll be even worse in 30 years as China/India go through their own Industrial and Informational revolutions.
It looks like you've been using HN primarily for political and national battle, which is not what this site is for. Some political overlap is inevitable (https://hn.algolia.com/?sort=byDate&dateRange=all&type=comme...), and occasionally commenting on political topics is ok, but when you cross the line into doing that primarily (see https://hn.algolia.com/?sort=byDate&dateRange=all&type=comme...), you're violating the intended use of the site, and we ban accounts that do that.

Intellectual curiosity is not a battle emotion. Would you please review https://news.ycombinator.com/newsguidelines.html and use HN as intended?
I think in a way, it's a little sad that over-zealous advertising is seen as a cultural 'feature' to be cherished.
Knowing more than the market could work - that seems like winning through skill. Perhaps a second (perhaps even a more likely) mechanism would be winning through luck?
If someone appropriates property, then have them pay for it.

Mind: if it turns out that there are high-risk environments -- high crime neighbourhoods -- where a financial penalty could prove onerous and avoidance of true theft is difficult, delivery firms would have to come up with some alternative option in which return of the materials is assured. Failure to do so effectively replicates geographic redline or discrimination zones, even if the underlying cost risk models are valid representations of activities.

The point is to manage those risks in a non-discriminatory manner.