skysight-inc/HackerNews huggingface dataset:
Just in case anyone is wondering why so many banks and wallets around the world continue to rely on SMS OTPs for 2FA. Lets take a look from their perspective:

- Any type of hardware device screams cost. Not just the device cost. The distribution cost, support cost, replacement cost, costs related to the education of users that can barely find their way around a computer/phone.

- Requesting the user to install additional 3rd party applications is also out the window. Compliance, Confusion. Requesting them to go through a process to set up some key with google also due to the same reasons. At least until it manages to become part of the sign-up process on android and the number of older android versions is <5%. And it works on all the flavours of android (think cheap chinese handsets). And central banks are ok with it.

- Just using a mobile banking application? Shake the phone to verify? Works when you are using it to verify an internet banking session. Doesn't when someone has downloaded a mobile banking app and knows your PIN. This is the reason why SMS OTPs were introduced on banking apps in the first place. The second factor wasn't the device itself, it was possession of the SIM.

>> The problem with sending people codes over SMS is that SMS is trivial to spoof and intercept.

Its not that trivial to spoof an SMS at least through the carriers Ive worked with. Alphanumeric codes are locked down and banks use these. Ditto with interception. Not fort knox by any means (any telco engineer can read SMS, as can prob numerous people in the middle if they really tried), but its expensive and not very scalable. And yes, there have been examples of fraud. But note literally hundreds of billions of dollars is secured by 6 digit pins and SMS OTPs worldwide and the banking system hasn't imploded.

>> It's trivial to port/sim swap/steal someone's phone number

Sort of. It may be trivial to do these things, but it's not that scalable. And thats the reason it banking systems using SMS 2FA dont all fall over due to fraud. Also in many countries SIM cards are now linked to national IDs, leading these particular vectors to be less scalable.

>> begin phasing it out immediately.

Finally, id never rely on SMS OTP. I agree completely they need to go. And so do banks! They spend millions on them each year. They arrive late. They rarely work when users are abroad. Everyone would be glad to see the back of them. But its not something possible to just switch off. At best we can push to support better forms of authentication to enable advanced users to migrate. While layering in further controls on top of SMS OTPs to minimise the impact of its insecurity until better forms of authentication are widespread.

PS Im not sure what happened to Dorsey, but if twitter are resetting passwords via SMS then its probably deserved!
Yep, this is exactly the way it looked to me too. He was good buddies with the Boeing CEO and supporting them up until he reversed course and threw them under the bus.

I guess that's one good thing about having a narcissistic President who only cares about his own ego: he'll happily change course if it suits him and makes him look good, instead of digging his heels in.
Thanks, will need to check it out as well.

I seem to spend a fair amount of time organising my Terminal windows just so on my second screen; would like to make this more efficient.
> Changing the nomenclature to ‘statistically discriminable’ would go a long way to improving popular understanding.

I think you overestimate the intelligence of people prone to misunderstanding. I don't think they're likely to understand big words like "statistically" or "discriminable" when they already don't understand big words like "statistical" or "significance".
Whatever Etsy is, they spawned the wonder Regretsy.com (sadly dead now), so there will always be that silver lining.

https://www.goodhousekeeping.com/home/craft-ideas/how-to/g21...

https://www.wired.co.uk/article/regretsy-closure
Looks like it is happening [0][1]

[0] https://www.secondwavemedia.com/metromode/features/dearborn-...

[1] https://www.youtube.com/watch?v=kNTb-ikPKvo
This pattern of inhibitor/activator is one that can be used in social sciences as well.

This also fits well with how codebases are managed: linting, style, patterns, etc.
I regret the time and money I spent thinking about learning Docker. I'm sure containers solve somebody's problems, but it's not any problems that I have.
But the fundamental problem is here is that people misunderstand the significance (sic) of p-values.
I came here naively expecting too refute what I assumed was a trolling. However, your willingness to link to the foundation's site gave me pause, so I did a little looking:

The site itself states:

"Contributions go to the Mozilla Foundation, a 501(c)(3) organization based in Mountain View, California, to be used in its discretion for its charitable purposes."

Further, the site says basically nothing about FireFox or any real product. It does however talk about "initiatives" that it supports/leads. I now suppose that is where your contributions must go. https://foundation.mozilla.org/en/initiatives/
It's not a Russian trait, it's a common bureaucratic trait, and Soviet Union was bureaucratized over any sane limits.
Tutor de mecanografía online gratis
People who's businesses have been disrupted by Amazon's "not a monopoly" and "totally legal" business practices. People who've had their person information disseminated across social media platforms. People who've had their financial data taken from companies with sub-standard protections in place. People who had their children's data vacuumed up by Youtube and then sold to advertisers.
Print media itself who has seen platform after platform erode their ability to stay in business. People who feel that providing platforms to groups they feel are fundamentally damaging to society should not be allowed. People who fear that these companies collect and maintain advanced and comprehensive databases of the general population's interests and behaviors "for advertising purposes" but that those databases could be used by bad actors to perform damage to society.

Would you like me to go on?
Maybe we need something like the DMCA Takedown Tools in Youtube for GPL License violations on GitHub? /s
In Python

>>> (-80538738812075974)**3 + 80435758145817515**3 + 12602123297335631**3
42
Thanks, but why tho
Terminology:

There is some Google-internal terminology used in some of these documents, which we clarify here for external readers:

CL:
Stands for “changelist,” which means one self-contained change that has been submitted to version control or which is undergoing code review. Other organizations often call this a “change” or a “patch.”

LGTM:
Means “Looks Good to Me.” It is what a code reviewer says when approving a CL.

quote from: https://google.github.io/eng-practices/#terminology
Just some minor clarifications:

- DevOps is a peer with Agile and Lean. Scrum and XP are Agile implementations. Scrum doesn't prescribe ways to code, XP does.

- 90% of what people develop or run today should be in containers, and not because containers are great, but because of the DevOps patterns of IaC, immutability, reproducibility, homogeneous environments. Whether you run them on your laptop, a VPC, AWS Fargate, a K8s cluster, etc is dependent on your business needs.

- Continuous Integration and Continuous Delivery aren't so much tools as a practice, and they're more complicated to implement at scale than just using a tool. There are some great books on the subject.
Transaction: 4410c8d14ff9f87ceeed1d65cb58e7c7b2422b2d7529afc675208ce2ce09ed7d
1B bitcoin transaction
Tuteur et leçons de dactylographie en ligne
You mean you suppose it to be imaginary.

The example isn't the same as religious claims. Firstly because all religious people claim that the 'invisible' friend will talk back if you make the effort to make contact (with few exceptions, but some are: the arrogant, the idly curious, those who wouldn't change their lives even if they knew).

And unlike fairies at the bottom of the garden, a supreme being has by definition the power to prove its own existence to the individual. Nothing else does. Think about it, you can't even prove your own sanity to yourself, or that anything around you exists. Even science can't deal with that one.

So sure, I can't prove a god's existence to you but I could witness to my own contact with one. Depending on your evaluation of me as a person of integrity and sensibleness, you may be encouraged to make contact. But to dismiss a person as not sensible because of such a claim is clearly fallacy. First you would need to prove it can't be true.
Richard Feynman said anything you can't prove yourself must be taken on pure faith and most of the public must take everything on pure faith as somehow they've left school without the faintest idea how basic stats work.
Sure, but that doesn't mean the two are incompatible! It just means that you also now have to comply with the terms of the GPL if you use GPL-licensed code in that project: something that the MIT license is flexible enough to allow.
Yeah but now, what? What was learned from this? Why did we look for a solution in the first place? How is it important that a number can be a sum of three cubes?
Ah - I used to use it fairly frequently in the good old OS X 10.2-10.6 days - for various apps. Seemed to work fairly well.
I feel that way with a lot of tech, the best way to upgrade is to make it larger and reduce costs. But we still gotta try other approaches on the off chance they work, don't we? Without that don't we lose on innovation?

I could be biased because I do not want to live in a world where we're mainly making incremental updates, but it seems like that's what it is.
That may indeed be the design intent, but it's completely at odds with my experience across hundreds of devices and cables over the years.

Micro has rendered numerous devices irreparable, or not-economical-to-repair, because the device-side connector fails. Thermal cameras, audio adapters, countless cellphones. Thankfully my daily-driver phones tend to be Samsungs which keep their USB connector on an easy-to-replace sub-board, but I can't say so much for FLIR's finest. I've thrown out my share of flaky micro cables, too, but those are cheap to replace. It's the device-side failures that have rained on my parade for years.

Mini, on the other hand, has been bulletproof. Countless Beaglebone Black boards, FTDI adapters, logic analyzers strewn about my bench, my TomTom, my GoPro, even my old Blackberry was mini. And not a single one of them ever died because of a USB connector problem. (The magic smoke has escaped from more than a few, but that's another story entirely!) I've thrown out plenty of mini cables, sure, but the device-side connectors simply don't fail like their supposed design would suggest.

Regardless of their intent, I consider inclusion of a micro port to simply be a design flaw at this point. Mini or C is the way to go.
Because of the deep existential meaning of 42, which transcends any known religion or ideology. Its significant is only comparable, though not eclipsed, by the utility of a good towel. Never leave home with one.
Arieh Ben-Naim is a well-respected thermodynamicist who believes that application of the laws of thermodynamics to the whole universe and to black holes is not valid. He's written books about it:

https://en.wikipedia.org/wiki/Arieh_Ben-Naim

https://www.amazon.com/Arieh-Ben-Naim/e/B001HD1O86/ref=dp_by...

I enjoyed Ben-Naim's "Briefest History of Time, The: The History of Histories of Time and the Misconstrued Association Between Entropy and Time "

https://www.amazon.com/s?k=briefest+history+of+time

Ben-Naim takes credit for Hawking later cutting most of his "Brief History of Tme" in later editions.
I contracted for 8 years in the energy industry. How, when, where, and what were standard requirements defined by the company I worked at. The main difference day to day was I didn’t attend some company town halls or have access to the wellness facilities.

Are you proposing a massive overhaul to the legal framework around contractors or just wanting to target Amazon?
Show HN: Lists – Make lists for attendance, gratitude and more (Blockstack app)
Difference is they are under no obligation to participate in this system.
It seems to me that any fundamental change in a product line will result in job loss at this point in time, this is on top of a fewer-parts-in-the-car issue. Cleansheet chances to redesign the supply chain and assembly system gives you the opportunity to modernize (ie. simplify and automate) while you're at it.

It's also an excellent opportunity to out-source or in-source depending on the facts of the matter. 52 card pick up.
Okay, so we have A licensed as MIT and B licensed as GPL, your example. Let's specify that B is licensed under GPL3 so it's clear:

Under MIT, Microsoft can take code from A and put it into the source code of Visual Studio, provided that they keep the copyright and license with the code they've copied. Visual Studio can then be licensed however they want.

Let's say that project A takes code from project B. Now because they have GPLed code, A has to be distributed with terms at least as open as the GPL3's terms, due to copyleft.[1]

This might not matter to the maintainers of project A, but it certainly matters to Microsoft, because now if they use code from project A, they also have to distribute it with terms at least as open as the GPL3's terms. So if they use code from project A in Visual Studio, they've effectively licensed Visual Studio under the GPL3.

The GPL3 is "infectious" in this way--once you use GPL3 code in your project, your project is effectively licensed under the GPL3.

[1] https://en.wikipedia.org/wiki/GNU_General_Public_License#Cop...
Cool experiment.

I don't agree with how you say that 10% is the Quoted Interest Rate, because Stripe isn't doing that. They are saying they have a fixed fee. "Interest rate" means it compounds.
The picture of the model vs real shark denticles isn't very compelling to me. Maybe they just chose a poor example?
Interesting, I didn't even think of changing to "Forty-two".
Interesting! Thanks for the recommendation
Just wanted to add that I work with a large ecommerce company and they have exactly the same arrangement. They do charge customers a token (small) amount for shipping but depending on the size/weight of the order some customers are paying over the odds and some under.

Customers also have the option to upgrade to faster shipping if they so wish.
Show HN: An Open Source Alternative to CoinMarketCap in Node.js
Attributing the success of US economy during the 19th century to the Imperial system is obviously absurd. Standardization needed as a bedrock for progress to be made -- the US simply inherited the British system while European scientists finally converged on a more logical system.

The truth is that you likely have to deal with metric units in your machine shop every now and then, just as we deal with imperial units in some places (in my country, pipes and fittings are often in inches even in new residences.)

Furthermore, the lathe has been around since at least Egyptian times, and the modern industrial lathe is thought to have been invented in France or the UK.
> I can lead him to be a better developer

You can lead a horse to water but you cant make it drink, people are more stubborn than horses and will just act out if you try to lead them.

You should act as an example of how the junior should behave. If you want the junior to ask for advice when they need it and value that advice then you will have to demonstrate this.

Don't limit yourself to asking the lead or asking about things you don't know about. Valuing other peoples advice even when you don't need it is a sign of seniority not a sign of being incapable, it shows that you understand that improving your skills never stops and you can find improvement in anything.

When the junior asks you for your advice your job is to act as a sign post point them down the right path. Tell them warn them of gotchas and encourage them but don't carry them for the journey or spoil whats at the end, thats for them to figure out.
> It wasn't just a "psychological overreaction" but real fear and panic as those same investors were trying to squeeze through the same exit door as everyone else.

Panic is quite literally a psychological overreaction.
This. I was going to say essentially the same thing.

Every adult who becomes a parent seems to realize very quickly that their parents also had no clue WTF was going on.

So yeah, no different with what we do, since we're literally always building new things that haven't been done before.
These are pretty serious accusations, and unless you have data to back this up, it’s hard to take you seriously.

“Only Amazon has them” is an interesting way to shed yourself of any responsibility to actually defend your claims.
> Stripe

> Decent fraud model

Yeah, I would think so.
The only thing that happens in car factories is the engine is bolted into the car. Engines aren't made in those factories, they're made in separate factories. Changing to BEV cars just means you ship in an electric motor and battery and bolt those into the body instead of an ICE. The only significant difference is having to deal with safety concerning the higher voltage of a battery pack, but that's not very hard (and the battery probably isn't charged before assembly anyway).
Yet I spelled out that much of Christianity (at least; if not other religions) have no issue with the fundamental scientific claims that are said to disprove religious claims.

That the Big Bang, 14 billion years, and evolution are all the product of famous scientist Christians was just the icing on the cake.

The fact is that science does not in any way disprove the existence of a god.
TypeScript: What and Why?
p-values are two way decision procedures. For historical reasons we report the critical value of the type I error, because that was the piece people figured out before we got decision theory and the Neyman-Pearson lemma. All the null hypothesis vs other hypothesis stuff is distractions from the basic fact of choosing between two decisions based on data.

I wrote an explanation for clinicians a while back that I people have had good luck with: http://madhadron.com/posts/2016-01-25-p_values_for_clinician...

> Likewise, we're supposed to assume that there is something magical about our prior assumptions?

No, we construct trials that a reasonable practitioner thinks satisfies the assumptions of the analysis used. And sometimes we learn that we had overlooked something and all those trials we did before we accounted for it were flawed.
NYT and other legacy newspapers depend on traffic from Facebook and Google to continue existing and are threatened by things like AMP and new media in general. If newspapers demonstrate that they can change public opinion about the tech companies, they have more bargaining power against them.
How was this computed? Just brute force ?
Looks from the github repos like this is MacOS only right now, is that right?

I'm guessing mostly based on https://github.com/gitduckhq/aperture-node. If you're running in VS Code though I think you might be able to use web APIs to do this easily, e.g. https://developer.mozilla.org/en-US/docs/Web/API/Screen_Capt....

Have you tried that? Either way, any ETA on Linux support? :D
> It’s also people thinking an open license is a free-for-all. I put out some simple scripts some time ago to move data across a couple of sites, under MIT - super liberal license, “just keep the credits” and you can do anything you want. Simple, right?

This seems like a reasonable enough place to ask: if you have a project under MIT, and I pull a function out of one file to use in my project, where exactly do I owe credit? In a comment above the specific function? At the top of the file? In the main license file for the project (even if the whole project is under e.g. GPL)? Some combination of the above?
Ask HN: JIT Compiler Landscape of 2019?
Hi Hacker News,

in a little project of mine I wanted to add some JIT. Without going into details, the goal of this project is to create the blocks in a DSP chain at runtime from the signal graph. Right now I'm producing compute shader GLSL code. The next step is to skip the GLSL entirely and directly produce SPIR-V.

In addition to targeting GPUs I also want to be able to fall back to CPU execution. The current kludge is glslc, spirv-cross and the system's C++ compiler glued together.

Long term I'd like to have two backends, one generating SPIR-V to load into Vulkan, and one that through some JIT emits host system ISA code.

I looked at a number of candidate JITs

- GNU libjit: small and just about the right set of features I think I need. Also maintenance status unclear (last commit was about 1 year ago)

- LLVM ORC: huge feature set, but also huge library and comparatively slow. Seems like overkill to me.

- Mozilla NanoJIT: In the same ballpark like libjit, but no longer maintained

Then there's the JIT of LuaJIT and it's companion DynASM. I got the impression that this JIT requires some retargeting for each architecture you want to support in your own code, but I might be wrong (have to re-read the docs). And then there's AsmJI, which is not a compiler, but a JIT assembler for x86_64 archs.

Did I miss something?
This is great! Definitely therapeutic to be able to name-and-shame frustrating password experiences. Is the goal to actually get these sites to change their dumb rules?

If so, I wonder whether it's worth adding a (politely-worded) summary at the top of the page describing why rules like these are dumb? Then the people responsible for these sites, most of whom are themselves probably not dumb but just mis- or uninformed, can learn from their mistakes.
blaming dead people may be a misnomer for a common cover-up technique in communist-countries investigations: the dead people are at fault, because then you don't have to punish anybody living, and the dead people are already dead, what you gonna do to them ?
Probably; the design of a radically different automobile model family takes around 4-5 years, which includes R&D, tooling, new supply chains, etc. This is masked by auto manufacturers constantly throwing out facelifts with a couple gimmicks glued on every year, but the majority of big changes usually come out on a decade basis. The Model 3 came out in 2017; if we assume conventional manufacturers started design of dedicated EV platforms during that time then we should start seeing a large burst of EV models coming out in 2021-2022, spurring demand. That will also probably be the do-or-die point for tesla to get their manufacturing squared away, since that's when the industrial juggernauts of Honda, VW, and the like will be retooled and coming online.
"psychology and medicine "

medicine is so ancient and people havent realised it yet. I cant wait for it to change
The most featureful high-level Vulkan lib by far is written in... Object Pascal?
Agreed. The archive appears to show it was meant to be a private/secret GitHub gist; which isn't really protected, because any user with the URL can view the content.

Wasn't meant for public dissemination most likely.
Tips on Creating and Growing Your Personal Brand
I spent a few seconds wondering if the 'circle-around-a-' was a ring operator of which I was previously unaware ...
You must realize that is not the norm though, right?

It wasn't until Google Fiber came into my area that everyone else starting offering competitive pricing, but the vast majority of land in the US is a high speed broadband wasteland.
I’ve found that while the majority of people are trying to stay one step ahead, there are always those that feel they do know what’s going on completely. However, because they think they’re in the know, it’s very often that their opinions are scripture and it’s impossible to change their mind on anything. If you’re a new developer, this problem is exacerbated by the “I am a principal engineer, you’re an associate so I’m correct.”