skysight-inc/HackerNews huggingface dataset:
Your first point is well taken. I hadn't considered that aspect in writing my response, but I totally agree. I run a small business myself and certainly would not relish an audit, both due to direct but also productivity costs.

I'm less sure about the second point, specifically that there's no low hanging fruit there. ISTM if that were true, then investment in enforcement would not show such a large immediate profit. Doesn't that by definition demonstrate that there is low-hanging fruit? If we were close to the 1:1 point then I could see the argument, especially in conjunction with your first point, but we're not.

I do generally agree with the point that the tax system (and especially filing) should be simplified though, as long as the simplification isn't in fact a regressive tax cut in disguise.
Especially the paying of balances.

I've had my Apple Card for a little over a week, and it's great how well the app works.

Paying my bill is two taps and a FaceID authentication. That's it. There is simply no comparison to the process using my other credit card apps.

Apple let's me make multiple payments each day. My Chase card used to allow that, but hasn't for about a year.

Apple lets me pay any day I want. Chase doesn't process payments in weekends. It sometimes credits me for the payment, but it doesn't fully process until Monday. And if I make a payment in a Saturday, I can't make another one on Sunday.

The Apple Card is the most frictionless credit card experience I've had in the 28 years I've had credit cards.
That's big old pile of carbs. There's no fat and little proteins, only in the milk, which will have even more sugar.
Don't hold your breath waiting for it.
except catching any CdTe runoff in gutter traps
> print your recovery code and store it in a safe location, and that you set up at least two security keys or authenticator devices. Should you lose access to all two-step verification devic

but this can be configured to not forward the text/voicemail.
How the brain remembers pleasure (2013)
Completely agree. Furthermore, I'm able to keep C and Common Lisp and most of Javascript and a bunch of other languages and Mercurial in my head (brain cache) so I rarely have to ask somebody how to use them.

But try as I might, I cannot do so with C++ and git. They just make no logical sense to me.
Remote for 15 years, twice as a CTO/co-founder and there is no amount you could pay me to go back.
this is our network as well (6k + desktops/laptops)
Errata: Should revise

"there is a cute counting result from A. Gleason, long a math prof at Harvard, that shows that for sorting by comparing numbers two at a time

O(n log(n) )

is the fastest possible."

by adding at the end "for worst case performance".

Should revise

"Then look at the remaining n - 1 numbers and again find the smallest."

by adding at the end "etc.".

Generally computer science computational complexity ignores long lists of ways to write code that runs faster, e.g., for a result needed more than once, compute it just once and store the result and don't repeat the calculation.

Instead, the emphasis is on some larger aspects, e.g., just counting comparisons. Broadly that emphasis is usually appropriate since as n grows quite soon some crude code of a O( n log(n) ) algorithm will run many times faster than careful code of an O( n^2 ) algorithm.
FastAPI (built on Starlette) essentially generates your OpenAPI docs for free via intuitive use of decorators and type hints/Pydantic models.
I had double cash until someone skimmed my card and citi didn’t notice. I had to catch it, make a complaint, then sign bullshit forms asking if the following name was mine. It just stumped me how they didn’t catch it - there were purchases being made in different geographies on the same day as I was making purchases elsewhere. I lost total confidence in citi as a trustworthy company after that.

Capital one is way more proactive on catching fraud, so I use their 1.5% quicksilver. Several times they have asked me about potentially fraud purchases. Totally worth it for peace of mind.

I realize that I’m not liable for fraud credit card purchases but it’s still a stressful hassle to catch fraud yourself, challenge purchases, go through the motions and eventually get them dropped months later.

Barclays I use for dining out and travel, have yet to see how they are.
This is a glorified wrapper written around existing package managers. I wouldn't call that useful.
Hopefully you don't transmit the password and are doing challenge/response so that you don't even have it when the user logs in.

But even with 12 round bcrypt hashing, you should be able to fairly cheaply attack a list of 2,000 bcrypted passwords with a million-entry database of leaked e-mail/password combos in a GPU-month.

Probably easier to force a password reset on everyone and then do the checking on password change, although you need to be careful there not to be sending the password.

EDIT: uhm, wait, so if you've got the e-mail address in the dump then there's only one user for that, so just grab their salt and hash the password and check it. So that million entry database should be checkable in a bit over half an hour...
contextual background on the publication itself?

https://www.newyorker.com/news/news-desk/a-new-trumpist-maga...
American society is centered around spending money, and the ability to do so - look at the hoop-la around identity theft, credit ratings and the Equifax data breach.

No other developed country has that hoop-la.

The Apple Card is just a new "device" that allows people to spend money, and Americans love that ability, and will continue to worship it.
I agree that bicyclists should outfit their bikes to be visible in the conditions they will encounter. But it it's also our responsibility as drivers to maintain a sense of the unseen hazards of our environment so as to avoid killing people who aren't as savvy as us. I wouldn't personally cycle without lights or reflectors but the fact that tons of people do means that if I'm not sure then I must assume there's someone out there.
Read the Q&A:

> Q: Why did you make this?

> A: Because educating others and fighting ignorance is one of the noblest activities that anyone can ever engage in. Also, jokes.

Part of the fun the is genre bashing. But don't take the genres too seriously.

> Suggested usage: Ignore scenes and genres. Instead, pick a single year and move through the guide vertically, listening to different music released in that year.
Yes, your assumption is correct, but I'm not particularly interested in how much you agree or disagree because I don't have much hope that this will change, and your mere disagreement alone isn't going to make me pull an about face on the frustrations I feel about topics people of my social-persuasion and the others I elucidated on and pretend that those frustrations don't have merit--not in the face of my six years of participation in this community.

And further, frankly:

If you're going to accuse us of something so awful, you should supply links to cases where you think we did this.

No, I don't think I will because believe it or not (which you probably wont, but again: don't much care), you and I have interacted on this very topic before via a different account, you and other individuals have interacted on this topic before. I've watched those interactions happen.

This isn't the first time HN has been called out on this Dan, and it's not the first time you've responded to people levying them, so I'm not entirely convinced you need help finding such examples.

If you want "cases", I'm pretty sure you know the correct hashtag on twitter to go looking for because I and many others catalogue these events quite actively and quite publicly.

But I'm not holding your hand finding them.

Be well.

Edit:

I'd be remiss not mentioning this: Just because I'm calling out the HN moderation tactics does not mean I'm laying down accusations on the HN moderators as individuals or what your individual beliefs on this topic are. I-like the two commenters above me have done-am pointing out what I feel to be a glaring blind spot in the moderation styles as experienced by a member of a specific social group. A group I would also feel remiss not mentioning is not represented in the moderation ranks. Take this however you will, feel about it however you want, consider my peace on the matter spoken.
You are aware that a variety of consumer credit card companies, including Amex and Chase, currently offer metal credit cards… right?
Hundreds of people died over a millennium at “Skeleton Lake” in the Himalayas
Zope is probably the granddaddy of them all. Tried and failed miserably to use it 20 years ago.
China Invests in VoiceID (Asia AI News)
Maybe you have a different Citi card than I do, but there's a cap on the 2% with mine. Also, there's a bunch of fees that the Apple Card doesn't have.

I don't know any big bank card that doesn't have late payment or over limit fees, for example.
Amex Platinum and Centurion cards are currently metal, a bit more dense than the Chase Sapphire Preferred and Reserve cards.
The way the Citi Double Cash Card works is you get 1% for every dollar spent and 1% for every dollar paid.

- It is actually 1.98% because when you apply it to a statement credit you are not really paying off the full total. You get a straight 2% back, daily, with Apple Card.

- There is also a redemption minimum with Citi, in this case there needs to be at least $25 dollars in cash back before you can claim it. Apple doesn't have that.

- Citi card has foreign transaction fees. Apple Card does not.

- The rewards "expire" with Citi. Apple's doesn't.

- Citi's rewards are given to you after your first statement is paid off and higher than 25 dollars. Apple's is given daily, and you can do what you want with those cash rewards.
Serious question: do you think more could be done to help bring awareness to patients to encourage earlier screening for Lyme disease and other tick borne diseases? I remember being told that if I ever saw a tick on my skin or if I had a target sign rash on my body that I should 1) take the tick with me, and 2) go to the doctor.

At least then you have a record of potential Lyme exposure in your record and it can be brought into the differential diagnosis as a reason for your symptoms in the future.

Like a public health campaign where you had some ads especially in wooded areas that are Lyme endemic areas.

I think back to things like the BE FAST mnemonic (balance, eyes, face, arm, speech, time) for stroke awareness, and feel like many people don't even know that.
It is India's internal matter. Let India deal with it.
Still wondering what happened to Lindberg’s baby
I'm quite adept at driving an excavator. I can pour wine out of the bucket of an excavator. It's quite easy with practice because muscle memory kicks in.

But if excavators were as hard to use as git, I'd never have mastered them.
Joke in Russia in the 90's: "Everything they told us about Communism was lies, but everything they told us about Capitalism was true."
There is a Sci-fi story somewhere in that comment. i.e., Bioengineered kidney solves some globalize freshwater catastrophe; or does it?
And yet in this game, lawyers and accountants make bundles of cash, politicians leave unscathed from their failures and the common citizen pays more taxes for less value each step of the way
I worked as a RA in my university days in a large, globally reputable university in Australia. I can safely say there was a culture of: 1. Dismissing research from other staff who had "less than X" citations as non-sense. And 2: Self-referencing from new academics trying to break into the "exclusive, trusted" club. It was genuine madness that corrupted a lot of good people.
Actually the Navy survival kit still seems to even have similar space efficiency if a 1/3m^2 footprint allowed for 2.4L per day. That would translate to 7.2L per M^2 per day which is right around the 6-8L mentioned in the article.
In terms of corporate Walmart, absolutely. But it's annoying as can be -- and even scary -- to employees at those stores. Customers too.

Walmart's real objective with a very public suit like this is to make sure that customers and employees see Tesla/Solar City as the villain. Not America's biggest retailer.

Even tight-fisted businesses get righteous about this kind of stuff. It's a great way to win the "we care" posturing game, at least for one day.
To be fair, Apple doesn't have as much of a reason to misuse your data as Microsoft, and their main way to benefit off you is by selling you more devices. Microsoft failed in the mobile department, so they mostly have desktops, laptops, and high end tablets, but their money comes largely from software running on those devices, and a lot of those services use personal data.

So, Apple wants to make sure you have a good experience on their devices so you'll buy more, Microsoft wants to know which of their products will fit your usage.

To me, Microsoft's telemetry is more creepy than Apple's, but both pale in comparison to Google's tracking. I choose to avoid all three companies' products as much as possible because I don't like being tracked.
1) Implement a good EDR solution. By far, I can't think of any other change or investment that has had better ROI. So much visibility! And you can quickly implement detections and controls based on attacker TTP which has a greater ROI than playing whack-a-mole with CVEs or rely on updated firewall rules,av rules,selinux rules,etc...

2) Log as much as possible and do something with the logs. Log everything and continue to improve your SIEM or security stack based on new threat intel.

3) Low effort,high ROI low hanging fruits. 2FA everything. Mutual certificate auth where i can. Turn on bitlocker. Make people use password managers,ssh pubkey auth. If you have typical corporate firewall/proxy: block any domain that isn't categorized or newly registered.

4) this is what I think will be good ,haven't done it IRL: segment network well. Remote management can only happen from jump boxes. Be hostile against removable drives.
5) Taking first step of NIST's incident response lifecycle seriously,preparation: Playbooks(Online and Offline),checklists,emergency communication channels. Document important assets and related contact when SHTF. And actually have a routine table top excercises and penetration tests (as the corporate wallet allows)

6) I hate that I put this last,but: good security tooling. Typical stuff like an in-house sandbox,dedicated DFIR platform.

This should go without saying: you need people to do this and it really does start from the top (leadership).
Is there any python framework that optimizes for developer productivity?
Of these frameworks, Pyramid is the only one I know of that uses the concept of traversal. Traversal is an elegant way to tame big projects. Whenever I look at a web framework, I look for traversal and I'm always a little disappointed to see it's missing.

Traversal means the framework treats each path segment in the URL as a possible branch in a tree of resources provided by the app. After completing traversal, the framework looks up a context-dependent view and checks a contextual access control list before calling the view. It feels right to declare security restrictions and other conditions outside the view.
While I agree, I also kind of like it. Aside from that, the project looks really awesome. Great job!
Family travel. I only stay in places where you get the whole place so it is more or less a house share. Bedrooms, kitchen, a yard to play, etc. is pretty nice with young kids.
I saw that gnu.org was using plone, and I couldnt get it working about 15 years ago. But I didn't know python at all then.
2% back at places that allow NFC payment is a major distinction. All the major credit cards seem to offer some kind of incentive to use Google Pay, Samsung Pay, Apple Pay, NFC, etc.

But I expect these incentives to start to dry up when you can actually use it regularly. I've never been able to use NFC payment to buy a meal at a sit down restaurant or bar, grocery stores and Target are just barely getting it everywhere. Its hard to get excited about 2% on my in store 7-11 purchases.

Samsung already destroyed the worth of their points last year when there was even a slight tick up in retailers. Theres only one fee free card I know of thats even slightly worth getting that offers true unlimited 2%, the Double Cash, and its usually not recommended because people who actually regularly use and research cards because it doesn't offer a bonus.
No, this is a reimplementation of basically every major package server. Now, instead of hosting your Ruby gems on rubygems, NPM packages on the NPM registry, and Python packages on PyPI, you can host them directly alongside your source code. The tools by which you access these package registries are the same, but they can now be backed directly by GitHub.
Iamwil: can you run this backwards for as far back as data exists?
>Its "USDA citation" is to what amounts to a marketing-focused whitepaper.

Can you elaborate on this point?
Dawkins' "Extended Phenotype" applies, eh?

https://en.wikipedia.org/wiki/The_Extended_Phenotype

("Whose free will?")
Rubbish. My parents, aunts, and uncles came to this country with nothing in the 80s. Their old country didnt let them export cash. My dad was literally forced to work for below minimum wage for many yeara illegally. All of them now own houses, multiple parcels of land, and their children have access to all the supposedly 'claimed' resources.

The american dream is alive and well. I work with many many immigrants and their children all of whom put themselves on the path to success. The fact is most 'americans' whose families have been here for many generations are completely lazy and entitled. They want privileges they have not yet earned that they enjoyed while living with mom and dad.
>It always reduced engagement.
Exactly. All these companies optimize for "engagement," regardless of how vapid, destructive or banal it is.
On the extreme end there was John Candy (https://www.imdb.com/name/nm0001006/mediaindex?ref_=nm_phs_m...), he used to be "the funny fat guy" but if he were to cameo (and be alive) today I don't think he'd stand out like he used to.
Right, but if you could do it for Lyme couldn't you do it for every bacteria? Blood testing would be our best bet, and we already do that with Lyme antibody testing and Lyme DNA testing. The main problem is that they are very expensive tests (usually a couple hundred dollars, and not always covered by insurance) and thus you need enough clinical suspicion to make the call to get something like that. How do you further increase your suspicion when you have a disease that mimics a lot of other diseases, without breaking the bank?
Cash on the AmEx is 1/2c per point. I’m willing to go through the hassle of swapping for gift cards at this point to get 1c per point on 200k points there. I grabbed an AmEx EveryDay so I can cancel the Gold and not lose my points.

I’m cashing out the Chase at 1c per point.
I get not wanting to have to "activate" each quarter's deals (though really, it's literally a single button push once every three months...), but I don't get your point on any of the other stuff.

Both AmEx and Chase have multiple cards that earn points that have no annual fees. Both of their point programs can be redeemed for straight cash back (just like the Apple Card, except Chase's offers better cash back percentage). And both can easily be added to Apple/Google Pay and be used just like you will use an Apple Card.

It's not so much criticism of the card as much as it is criticism of people who are for some reason hyped up about it. Like most Apple stuff, there are always a weird group of people obsessing over it and will go to strange lengths to defend it. This is weird, because, as you said, it's just a credit card. It would be less weird if it was at least a good credit card that people were defending, but it's not even that.
The US presidency
These days zoning also takes into account future plans for infrastructure and services. In 1900s New York it is perfectly legal to hoist up an unsanitary slum with no electric, water, sewer and gas.
Ride Sharing Adds to the Crush of Traffic at Airports
Performance in debug builds is a particular issue, since getting acceptable-for-gamedev machine code from modern C++ often requires optimized builds.

http://aras-p.info/blog/2018/12/28/Modern-C-Lamentations/
I hate this interpretation of everything as status games. It seems like a great way to drive yourself insane and develop mental illness as you overreact to mundane situations or fail to take advice from proper authorities. I consider somebody unqualified throwing out nonsensical advice as simply kind of a moron.

To elaborate: I’m convinced that most people viewing this view status as a good or at worse neutral thing, and although they may not approve of tactics they deem immoral (maybe including this one), basically have some admiration for “winning” the game. I view this as a wrong approach. The guy giving advice all the time is blinded by pride and fails to realize even the bounds of his own competence. He’s not winning anything. My opinion is that he looks like a buffoon.
U.S. Cities Rethink Data Relationship with Residents
I wanted to like this article because I'm been thinking about this a lot in the context of game development, noticed a few things. One thing I'll say from briefly playing with this - the code leaves lots out a looks ostensibly simpler than it really is. Would very much appreciate tips / pointers on this or a more fleshed out and working implementation of the code.

For the bulk data with holes code:

First, there's an initialization step that has to happen the first time you allocate your bulk_data_t. Namely, you need to iterate through every item in the list and set its next_free item to the item following it, looping the last item back around to zero. You also need to do this for all the items between the new size and old size every time you resize your item list.

Second, safe iteration over all of the bulk data doesn't seem possible without adding some sort of flag to indicate whether or not an item is free.

Am I missing something here?
I think GP has some kind of axe to grind with mental health practitioners.
Buried in the lawsuit is some entertaining commentary on Tesla's SolarCity acquisition:

"On information and belief, when Tesla purchased SolarCity to bail out the flailing company (whose executives included two of Tesla CEO Elon Musk's first cousins), Tesla failed to correct SolarCity's chaotic installation processes or to adopt adequate maintenance protocols, which would have been particularly important in light of the improper installation practices."

...

"On information and belief, SolarCity's business model was ultimately a bust."
And which ones do it with no fees or linked accounts?
I cannot tell if this comment is sarcastic or not.
Not yet, Microsoft hasn't made any deep integrations yet.
Pard (n.) 1. Archaic for "leopard". 2. Texan for "partner".
Congratulations on your success!
That's not true. Algebraic numbers are irrational but countable.

Simply bisecting a square creates an irrational number. If you refuse that then you must refuse that the sides of a square are integers.

By your logic, a fraction 0.1 1/10 is infinite because it can be expressed as an infinite series of nontrivial powers of pi or even in base 3.
You can reframe almost any statistics as Bayesian if you try hard enough. That doesn't mean it's actually helping you. If you have a method for generating 'good' priors and it doesn't work, it does far more harm than good when you use that to analyze this kind of anecdote. Anecdotes are such weak evidence that the chance it pushes your priors into the correct result is super low. You'd be better off not trying. Just accept the need to gather proper amounts of evidence.

Or in other words: Some undescribed system of priors could help, but the system you actually described doesn't help. So "use priors" is a bad answer.