skysight-inc/HackerNews huggingface dataset:
> chlorhexidine

Pretty much guarantee almost nobody is using chlorhexidine mouthwash for kicks. This is not listerine-level stuff. This is what you use when you have a very severe gum problem.
It also works with any of the Windows Hello authenticators (fingerprint, face recognition, or traditional security keys)

https://blog.mozilla.org/security/2019/03/19/passwordless-we...
Thanks, I understand that the feature is enabled at a more granular level in some of these third-party apps. I don't have smartphone-aged kids, so thankfully I've not dug into these details yet...
> Not one graffiti in sight – a byproduct of respect for public spaces.

I, for one, enjoy the occasional graffiti. Especially if it's poetic or clever. I enjoy the rebelliousness.
Can people please stop putting this paywall crap up here on hacker news?
Determinism can be readily added by means of a simple procedure (the name of which I have forgotten—hopefully a fellow commenter can chime in here): Along with their vote, each voter submits a random number between 1 and N, where N is the number of voters. To select which ballot should decide the vote, all numbers are publicly revealed and added together, modulo N: the resulting number selects which ballot should be used. It is not possible for any individual or group to fix the final number in advance, since even a single non-cooperating individual can alter the final number in an arbitrary way.

Obviously this simple form can only be used if N is known in advance, but I think that if you instead select a sufficiently large maximum (several times larger than the probable N) the randomness property should remain.
That's totally fair. I was being a bit flippant in my original comment.

I was reacting to the idea that, a candidate spreading their message will impact what decision people make at the voting booth, and that in and of itself is obvious. If candidates said nothing, no one would vote for them, because no one would know anything about them. Surely that much is obvious.

Yes, it's probably very difficult to prove the cost-benefit analysis of ads. At best, people hope that attack ads will reveal some information to people that will sway their decision (I perused through the papers you linked, but didn't see much about scandals). I also imagine ads are meant to generate buzz in the media, which can push a message to would-be voters, who can then keep spreading the message. The effect is likely over time, and extremely difficult to predict & prove due to many different ways people can interact with each other.

Although that paper you linked on gullibility was..... odd. I don't know why the distinction of "content-based" gullibility vs. "source-based" gullibility is important or interesting. The authors are saying that.... fake news works? That also implies that advertising can work if it's delivered in a medium appearing as an authority, i.e. a media organization or research group.

In other words, bad advertising doesn't work, but good advertising will. Surprise?
Agree, I love to point out a nice approach or a TIL, and I like that Google put it down in writing. If Amazon really considers it noise, it is very descriptive of their culture.
Didn't Spotify complain that there wasn't a public API to store music in the local storage of the Apple watch one year and then not make use of it after the API was made public in the next version of the OS?
The money is dumb because it does not speak. It's mute.
Your lead should really be setting you up for success on your first PR. I always made sure I paired with my new employees before they hit submit on their first few PRs. It is much easier to be empathetic when you are next to a person. It would also give me time to deep time into certain aspects of our codebase that I felt they could handle in future sprints.
FYI, you can just open up the html inspector and delete the readonly = "readonly" on the input box and suddenly you can use a password manager to fill it in.
Well ask the folks at Cloudera and MapR. Doubt that played out well for many.
Slack is just a message board, or chat room, or IRC with modern design.
I'm not sure what happened, but I've never heard of this happening. Are you sure it was Lego and not a clone brand?
Ah ha, that's good to know! Yeah in my case I had a small solar panel (a few quid of eBay, I guess around 1W) which was able to power it through a British winter (it did get direct sunlight though). I had some rechargable AAA batteries and just wired the solar panel in parallel with them.

After a few months it stopped working, I think some moisture got in and the DHT11 failed.
> I've been pushing the idea that if you're getting meaningful feedback on design (and over design) in your PR reviews than you've failed. That stuff should be shaken out long before you have working, complete code.

Sometimes a prototype can help shake these things out, though. It's often okay to go an extra stage beyond what's been reviewed/approved (e.g., send out a prototype implementation before design review is complete) if you're willing to throw it away. If you'd be upset by someone saying "try this better design", you need to wait for a design review before writing any code.

Another thing to be careful about with a prototype is keeping it as far away from the normal production serving path as possible to avoid compromising the essentials of reliability, privacy, and security. (Ideas along those lines: separate production role, separate server, flag-enable it only in a test environment, dark-launch it, experiment-gate it, etc.)
I vaguely recall an article from a Chrome plugin developer who was approached by Google with a job offer. His plugin, if I recall correctly, separated the audio from the video in a YT video and allowed the user to continue streaming the audio while the screen was locked. He refused the offer, and his app was abruptly and mysteriously pulled from the Chrome app store. A (conviniently) short time later YT announced YouTube Red. I looked for the article but couldn't find it. Anyone else remember this?
Although non-Asian I was coming in to say pretty much the same thing, what happens to them after the test taking ends - in most cases I would assume a high paying job.
If Jeffrey Epstein had preyed upon the children of the coastal elites instead of the children of the poor, I suspect that the subject would be less “tricky”.
OK, I get that men could get what they want. If they're good looking enough, anyway. But how could women "get the economic aspect they often seek"? Dinner and a movie, sure. But not support for raising children, unless you count court-ordered child support.

I often joke that I'm a single guy who keeps getting married. But in truth, while casual sex (pre-Tinder) was great fun, I can't stand condoms, and I got STDs far too often. And once HIV showed up, casual sex seemed a lot like Russian Roulette.
3 years back WD put out a special variant of their Ultrastar He8 drives that ran a Ceph OSD on the drive itself that supported 2.5 Gbe to each drive over a SATA port with an odd and incompatible pinout.

https://ceph.com/geen-categorie/500-osd-ceph-cluster/

One thing to note, in that test they were using a chassis that limited the drives to two 1 Gbe connections but that's not a limitation of the drives. Now that WDLabs has fizzled out who knows what became of that platform, it was actually quite interesting but it wasn't really directly using the drive to natively support object storage, internally it was still presenting itself as a block device to the Ceph daemon running on it.
Majority will trade distant future for today's comfort. We only have hopes on minority warriors and scientists who see this sign and force us to take action before it's too late.

There are probably a series of decisions that we could have make as a worldwide civilization that does not involves the notion of sacrifice whatsoever.
> Apple could also make those APIs usable by the public and mark them as "Unstable".

No they couldn't. Because those APIs would become frozen and required by nature of large software vendors deploying software that uses them. Functional compatibility of an API which was documented as not finished would have to be maintained across OS releases.

I've seen unintended dependencies have a deprecation plan in macOS that takes years.

For the most radical example, there is still a copy of libssl.0.9.7.dylib. The 0.9.7l version came out in 2006. But it turns out OpenSSL does not provide binary compatibility even amongst patch releases.

This was likely why on Mojave, using "Marzipan" in your own apps required making operating system security changes (from recovery mode, no less).
The HN submission links directly to https://google.github.io/eng-practices/review/reviewer/ but if you start at the top namely https://google.github.io/eng-practices/ then there's a Terminology section right there on the first page. Maybe the GitHub Pages theme used by this site should be changed to one in which where every page links to its parent page (right now there doesn't seem to be any way to navigate upwards except by editing the URL).
Sure thing. This is the github repo with the drop-in replacement [1] (I think this is also likely to make it into dc.js at some point in the future but the project is currently held up entirely by one courageous soul who is obviously limited in how much time he can dedicate to it)

My (mostly abandoned) blog has a bit more info on it, but isn't critical reading [2]

[1] - https://github.com/HamsterHuey/dcjs-canvas-scatterplot

[2] - https://www.intothevoid.io/data-visualization/dc-js-canvas-s...
Wouldn’t that mean there is evolutionary pressure to keep reproducing as long as possible (and so, evolution should lead you to live forever and keep making babies)?
It means it's shouldn't be on this list[1] for example, because it makes brute force guessing from a dictionary of common passwords easy.

- Of all the password databases breached in 2016, "123456" made up 4% of them [1].

[1] https://en.wikipedia.org/wiki/List_of_the_most_common_passwo...
> I really enjoyed the nomenclature of "synthetic husbands"

Yeah. Synthetic wives seem much more marketable.
That sounds like a stretch

1. YouTube’s subscription offering was in the works for years before it was announced.

2. The reason that YouTube had to pause music if you closed the app had more to do with the RIAA. Remember the RIAA was pissed that they made pennies from streams compared to the dedicated streaming platforms like Spotify.

If anything it sounds like Google was trying to do that guy a favor - his app would have gotten pulled regardless.
it is however a crime to give money to terrorist organizations. So the wording "free to" really means do you think it should be legal to do so.
NBC not listing Andrew Yang as a 2020 Presidential Candidate
This could fill in nicely the void left in the dating scene by Craigslist's rule changes not too long ago.
Can't tell if you're being sarcastic or not...
Not only that, there's money to be made by insiders leaking (or even creating) security holes for the hackers to exploit and then getting a kickback.
Really? I'm more scared of the reverse: Sincerely well-meaning people who fail to fully consider their actions and therefore end up pushing terrible ideas with extreme force because they are so convinced that they're right. "Think of the children!" (destroys privacy, institutionalizes censorship) "Save the environment!" (switches to a product that turns out to have higher total impact) "Stop the pedophiles!" (organizes witch hunt and throws out burden of proof)

“Of all tyrannies, a tyranny sincerely exercised for the good of its victims may be the most oppressive. It would be better to live under robber barons than under omnipotent moral busybodies. The robber baron's cruelty may sometimes sleep, his cupidity may at some point be satiated; but those who torment us for our own good will torment us without end for they do so with the approval of their own conscience.”

― C. S. Lewis

---

EDIT: Realized I should point out - the dig at pedophile witch hunts isn't meant as a commentary on this article, it's just a generic example.
His Cat’s Death Left Him Heartbroken. So He Cloned It
You can easily use expressions to create trees rather than values in a library. Eg a + b need not compute a value, through a bit of operating overloading it can compute the tree plus(tree-a, tree-b).

This “trick” does not extend to statements, however. You can’t override if or semicolon in most languages. You can encode statements as expressions, but then you have to worry about things like variable bindings on your own.
We'd have hacks to support all of our OS level concepts like writable, readable, listable, executable, hidden, system, archive. How would someone implement tail, what about keeping something open for writing? I'm not sure any of this stuff is thought through except by OS writers. If we suddenly put this task to device manufacturers, would tail suddenly never work again? And if that doesn't work, what kind of monstrosity will happen if we simply attempt to start windows or linux on it?
I agree mostly except OSCP is hard,there are easier certs for those that are not pursuing a pentester path.
There are several ways to approach the matter. Negroponte took the worst possible way to approach it after Ito made a long speech.

>“I told Joi to take the money,” he said, “and I would do it again.”

That statement implies he doesn’t care at all. There are other ways to handle it, like he does care, but there’s nothing he can do about it, or have an excuse that Epstein had no control over the use of the funds (if true), but to say something like “Yeah, big deal, I’d do business with the guy again” is tactless.
To put some numbers on that, typical TLC flash is around 50 microseconds to access, optane and specialized SLC flash are under 10, and an infiniband connection between machines is around 1 to 1.5 microseconds.
Message notification is not impacted here. You don't need to open the full app for that to happen.

If the app uses encrypted messages, you just have to write an extension to handle the decryption on device while the app is not running.

If the user wants to interact further after reading the message notification, they open the full app.
So he proved "if x then y", then later proved "!x"
I disagree. I’m a westerner but I have lived in South East Asia (Indonesia and Thailand), and my wife is Thai, I regularly visit her parents and relatives and we are pretty close to her family.

Obviously every individual is different and I can think of people I met there that don’t conform to that stereotype, but in general, yes I think that on average South East Asians have a tendency to avoid criticising anyone in a position of authority, or at least they do that less often than westerners. I don’t know if this is a good thing or a bad thing but it’s definitely there. When I speak of westerners I should point out that I was born in Italy and I now live in Australia and these two countries, rather than the USA, make up much of my idea of “western” (even though Australia is geographically located in the Asia-Pacific region!).
Why is Turing lucky?
I would hope it wouldn't require implementing the entire Win32 API! :)
It's not that tricky a subject. Yes, the Media Lab, and everyone else who participated in the idea that Epstein wasn't a complete fucking pariah after 2006 or so - or at the very least, in 2008 - did help Epstein rape more children.

In 2008, Epstein should have been put in a cage and poked with sticks. The fact that so many of the great and the good were willing to continue to cooperate with him was disgusting.

Also: I agree with you about the Saudis, but whataboutery doesn't excuse the fact that taking Epstein's money was morally imbecilic.
lego by the kilo is effectively only had second hand, so any places where second hand stuff is sold.

local flea-markets for example, thrift stores, craigs list, other auctioning sites...

on craigs list and newspaper classifieds you could even ask. some people keep their old lego, waiting for an opportunity to give/sell it to someone who deserves/needs it instead of selling it to someone looking to make a profit.

it takes some searching, patience and good luck.
What you said sounds good but I have never heard of anyone that got into infosec this way.
It's the same article. I think there is a misconception that mesh will replace gateways but as mentioned in earlier comments...it's really two different types of traffic patterns with north/south and east/west so we'll need both.
No Windows no cry :) Seriously, how can one compromised machine (inevitable) infect all others? Isn't there host firewalls on every machine?
> I only had one CS project in my senior year that involved building something with another person and even in that case it was only one other person.

I had many group projects in school, but they didn't set it up so that we'd review each other's code. We'd just break it up into modules, split the work accordingly, and each worked on a different part.

A more fundamental limitation of school projects is that they have by definition a limited lifespan, so that the notion of code debt, the importance of ensuring that code be readable by current and future colleagues, etc. are irrelevant - in all the projects I've done in school, even group ones, I was the only one reading my own code and it would never be run after class finished. In such a situation, "improve overall code health" makes no sense. You write only what you need to pass the class, which is usually some kind of demo feature.

Maybe making contributions to well-established open source projects should be encouraged as part of the curriculum, at least to experience the receiving end of it...
Envoy is the data plane and lots of the newer API gateways and service meshes are built on it but it still needs a control plane (aka gateway)
> 4.) They lost $300m Q4 '19 due to 'stock based compensation' (which from my perspective should have been accrued Q4 '15 onwards)

I haven't looked at this, but if this is a large part of their loss, then you can possible find the answer to why it was declared in one chunk by looking at the timing of option grants. The schedule should be available. Normally when I see "Our company is losing money" and the money it is losing is a one time loss that would normally be spread out over a long period of time, it's because they timed the announcement to coincide with the granting of options. It causes the price to drop precipitously, they grant the options -- "No funny business here! We scheduled the option grant 6 months ago!". Then the price rebounds. It has happened in every large company I've ever worked for. I always wonder how they get away with it...
Unemployment for men is under 4% so I'm not sure how that separates the issue of the pay gap from the men in this study. Put another way, >96% of men have income from employment. And according to the study, desired income vs real income was the biggest difference according to the women. Clearly, >96% of men are making far less than desired according to the women surveyed.
The difference is the mugger gets your wallet one way or the other. The only difference is if you survive to tell the story. The ransomware attacker is only rewarded if the victim capitulates.

Edit: On the other hand, if the counter-factual was a mugger at an ATM demanding you enter your PIN, that distinction doesn't exist. So maybe you're right.

Maybe the right answer is to outlaw paying the ransom except to save human life, but also create a federal fund to compensate victims of these attacks.
> When sending a changelist for review, always clear all automated warnings or errors before wasting the reviewers' time. Nobody wants to see code that doesn't build, breaks a bunch of tests, doesn't lint, etc.

Generally true, but not when prototyping. As a reviewer, I would like to see the general idea before spending time on cleaning up. If the grand design is wrong, time spent on cleaning up would be a waste.
Well, perhaps, but in physics we like to think of our field as containing many separate, logically independent models of reality. Yes, "x" probably isn't true in our universe, but it is true in an exceptionally good model for our universe, and that's what makes it an important result. It's like how the round Earth is wrong, but way less wrong than the flat Earth.
Stress I'd guess. How does the MIT suicide rate compare to similarly high profile and difficult schools?
I will add my personal anecdote to that.

Generally after not eating for a long time I’ll be pretty hungry, but a lot of times things won’t seem appetizing. And when I do eat I usually fill up quick. And have to wait a bit to eat anymore.
As far as I know, no-one has any real explanation for where Epstein's wealth comes from. Apparently real hedge fund guys were baffled as to where his money comes from and the suggestion that the whole thing was an elaborate blackmail operation isn't beyond credibility.
Democrance | Vue.js hacker, Devops | Dubai, United Arab Emirates | Full-time, Onsite | https://democrance.com

Democrance is an insurance technology company working to make insurance accessible and affordable to consumers via mobile and digital channels.

Our digital platform brings together key industries, including insurance and telecommunications companies as well as organisations which have large and previously untapped customer bases, allowing low-income, uninsured or under-
insured populations to buy, pay for, use and claim for insurance simply using their mobile phone.

We're built on python/django/celery/postgres and rabbit, with a vue.js single page app to go with it and are serving some of the worlds biggest insurance companies while trying to improve access to insurance for the un-banked. Our stack is generally cloud provider independent, and we run across AWS/Azure/Alibaba as well as some on-prem installations, and use ansible and terraform to manage deployments.

We're a small team that's growing - your work will have a big impact on the company and on the under insured.

Job descriptions here:

Vue.js hacker : https://jobs.astrolabs.com/job/democrance-dubai-vue-js-front...
Devops automation : https://jobs.astrolabs.com/job/democrance-dubai-dev-ops-auto...
wget can do this, the --mirror option is probably a good start along with --page-requisite.
If this is representative of the Amazon engineering culture, I'm gonna add this to the (already overflowing) pile of reasons I would never work there.

Feeling valued is linked to job performance. And if I notice any of a) a generally interesting piece of code b) the engineer being a boy scout and fixing something in that particular module to make his changelist better c) a novel/comprehensive way of testing the code automatically d) elbow grease to just go the extra mile in terms of doing a great job (without adding unnecessary complexity) I will call it out in the code review along with the regular 'fix this' feedback. As a principal engineer my word carries some amount of weight and I truly want the person to feel good about their work when they deserve it.

Another thing I often do is add a 'thank you for taking the time to do this' whenever someone slightly decreases the amount of tech debt (by refactoring, or removing code/complexity) when it was obvious it wasn't absolutely necessary to get their work item completed. Basically whenever someone shows they're thinking strategically rather than tactical about their work, I want to make sure that person knows that I noticed and that I value that.

People aren't robots, we're all professionals and we all like to feel good about our work.
Using a scumbag's money to help rehabilitate the scumbag's reputation is a pretty poisoned exchange.
They got fewer returns/defects when they stopped rushing.
A bit off track but here in India I see, all sorts of negligence shown by delivery guys of almost all delivery companies - Swiggy, Zomato, Uber Eats, etc. Even cab drivers of Ola, Uber are reckless. It is high time these companies start taking accountability.