skysight-inc/HackerNews huggingface dataset:
I think that’s a fair point from a security standpoint, but there are clear technical solutions for sending telemetry data to third party scripts without allowing page access that are well established (e.g safeframes) yet the conversation isn’t about that. The conversation (more like coordinated uni-directional screeching) is instead an irrational moral panic which is not justified by the facts at hand.

I don’t see the fact that you have or don’t have a relationship with the company as relevant. The mechanism of passing of the data is just an implementation detail. You don’t have control over what relationships the company has on the backend (e.g. what if they store your telemetry data in BigQuery or Snowflake, or keep your log data in Loggly) so I don’t see how this expectation suddenly applies if the data is being sent from the frontend instead.
Wouldn't it be easier to just make a yearly repeating calendar entry with a reminder?
Which policy changes?
How did Google get away with scummy practice like this?
A photo has more elements than just framing. It would be disorienting and customer-hostile to have your photos randomly change overnight.

About 60-75% of the time I take photos, I share them soon after or within a few hours. Having to wait to let them be processed overnight would be obnoxious.

And it's not particularly helpful to compare people taking photos on their phone to the DSLR world. (Coming from someone with a nikon d200, d300 sitting on his shelf). Totally different use cases, totally different usage expectations.
> It’s GitLab’s sandbox, their rules (including not being crass if desired).

They can ban people who clicked on the "Reversed Hand With Middle Finger Extended" emojis. If it's against their rules, they should (otherwise there's no point in having rules in the first place). That said, if the emoji is in their system (and it's not there by accident), it probably serves a purpose. In this case, it accurately represents the sentiment of people who gave that feedback.

> How is this different than what would be expected with a Code of Conduct?

No different at all; Codes of Conduct exist primarily to signal allegiance or submission to the social justice crowd. They introduce nothing new on top of regular rulesets that existed in on-line communities since on-line was a thing.
Sure, but if the journal publishes too many articles it'll lose prestige. Nature publishes what, 8% of submissions? And that's apparently what they consider financially optimal -- they're a for-profit corporation, they could publish more if they wanted to. I guess the question is just whether this applies equally to open-access and traditional subscription journals.
Net worth $75k but tons of assets and debt. Early 40s.

I would rather be a poor student again than burdened with debt.
FireO – Google Firestore ORM Package in Python
I think there can be just as many issues with that style too.

There are so many critiques possible, it's difficult to know what to focus on. Some people care about algorithm efficiency, and others don't. Some interviewers require test coverage and expect you to work under tdd. Or maybe you arrive and some guy frowns when you reveal you didn't prepare DB query plans for your 3 hour assignment.

I suppose what I mean is: it feels to me like just trading one kind of arbitrariness for another.

Coding in general is highly opinionated (who hasn't had a disagreement during code review).

I have had a particularly bad take-away experience and so I am shy of them now.
The current administration is corrupt to the core, so if it looks bad it probably is bad.
What happened in between? Don’t leave out the story!
Didn't actually realize it was a .new domain (and didn't think .new was actually a new domain) since some people recommended it to me a while back (as far as December 2018 even... I think).

Obviously since it's Google, they are going to show off all the features first-hand.
Sometimes I might stage only part of the changes in a single file. Sometimes I want to stage a file or two, see what’s remaining, and decide what else should be in this particular commit. I can and do diff only staged changes, then diff only unstaged changes, to decide how to proceed. Sometimes I unstage certain changes if I decide that no, they in fact should not be in this next commit.

Basically, it’s a scratchpad that’s gives me space to think and plan.
While Svelte is being developed by a great programmer, it's too new, doesn't have all of it's Typescript stuff figured out, and last I checked the unit testing story was still a bit shaky. I'm guessing that in a year or less it'll get those three things figured out.
I know someone who works at a clinic that serves diabetics without health insurance who cannot afford routine glucose monitoring. A majority of the patients show up with A1C of 10 or higher, often much higher. If uncorrected, this is tragic. A finding that most people will not find a way to comply effectively with a plan to scientifically manage T2D is not, to me, a convincing reason to make scientific management less available to all.
It's either extremely clueless or nasty, but regardless, it also expresses a suggestion that's hostile to the users.
WhatsApp would still be plenty incentivized to make their software secure. They understand that this wouldn't get rid of the exploit market, or state actors. I'm sure WhatsApp has been focusing a lot on security lately because of the brand damage.

Even if it wasn't effective in practice, entering this lawsuit can be seen as a message to users that WhatsApp is serious about protecting people's privacy.

Setting a precedent here might force remaining actors to stay shady instead of acting in the open, which would make it harder for them to operate (so they'd be less effective).

However, I have no idea what other consequences a precedent here might have. Definitely interesting.
How are they a publisher in this instance? They are not creating/publishing their own content. The NY Times publishes their own content and just like TV, other Internet services/sites and radio broadcasts paid ads. None of them have or ever will verify the veracity of each ad's content.

Im just curious how Facebook is different then TV, radio, print and all other Internet services? No one has answered this question.
This. I like many of the things that Nim is doing, but I refuse to take it seriously if it's going to make basic things like tag search and grepping difficult.

inb4 a Nim linter is written to force a consistent naming style throughout a codebase.
Yes, Deep Fusion doesn't affect the composition, but it could bring out detail the photographer didn't intend to reveal.
Dev finance group and comment at a precious all hands, I was guessing person called out previous CEO in public.
I have no strong preference for either, so long as both of them convey the structured information I need.

Although tbh I'm preferring the XML in your example due to the lack of random quotes - why does (record need a quote, but (log doesn't?

The XML seems a lot more consistent.
How would you know a difference, how could you trust the difference (given the adtech industry being what it is), and how can you know things won't change over time? All that without being in a contractual relationship with that third party.
I don't really care what everybody else is doing, I'm just glad I can still buy a NAS and fill it with 10TB drives if I wanted to. I don't even have to search to hard to find them. It probably even pretty easy to make those drives public.
I've seen a lot of negativity towards Vue from React users pretty much since it started gaining actual usage by big companies. Never by the core React team, just the users of it. To a lesser degree, I've seen some Vue users express haughtiness because they see Vue as much less complicated.
The last thing I want to see is mobs of people, angry over the deaths of their loved ones, tracking down executives and dealing with the problem themselves, but I'll admit I'm very surprised it doesn't happen more often. I imagine most people are just struggling to keep their lives together through their grief and satisfying a vendetta takes a lot of time and effort. Also many people aren't as comfortable with hurting others as the executives of Juul are. Still, I am surprised.
Any vendor Gitlab works with already has potential access. Just because you have a known front-end attack vector doesn’t mean you’ve gone from 1 to 4. You’ve been at N the whole time, it just hasn’t been as visible.

FWIW I agree that on-page JS on pages with source code is a terrible idea, but that’s easily fixable and doesn’t seem to be at the root of the issue.
You can install GalliumOS for a full Ubuntu installation if you get an x86 one, and the ARM ones can still run Linux chroots behind ChromeOS. Most of my Chromebooks don't have Chrome installed, and I say 'most' because you can buy like 3 or 4 of them for the price of a more fully-featured machine.

ChromeOS isn't great, but the hardware offers a great mix of performance with low size and cost. The push to get them into educational environments also means that they often prioritize things like spill-proof keyboards and shock-proof chasses. And they also usually have fairly good physical security; most of them have a screw on the motherboard that you have to open the device and remove to reflash the boot firmware.

Like I said, the main difficulty with iPads is that you don't get many options for what you run on them.

And as for performance, I use mine for development and EDA, and speed has never been a huge concern over the years. I even get a reasonable 40fps when I'm working on my toy 3D game engine. Just because they ship with bloatware doesn't mean they aren't real computers...

https://wiki.galliumos.org/
Hate to admit it, but I'm a massive proponent of remote work (and other work/life balance-friendly initiatives), but my productivity on average is a lot lower than if I'm in an office.

I still wfh every day, but days where I work out of a coffee shop or anywhere public, I'm a LOT more productive. I think it's just the idea that at any time someone can see my screen, making me less likely to pull up Netflix or a game or something equally distracting.
My company (user generated content, user profile pages) reached $10k/mo in 2010 with AdSense. As soon as we crossed that threshold, we started getting automated threats asking to check "all other pages" (we had about 20m user profile pages back then). Despite our best effort (keywords filters in Hungarian and Thai, heuristics), the account was banned when it was earning $17k/mo. Fortunately, my bootstrapped start-up had a freemium model, so I could keep the payroll and seemingly survived this blow (although as I now understand, the long term impact was very negative). I tried to appeal, only to get automated responses. Tried to approach AdSense team via contacts- a few emails, and they stopped responding. Finally , I found some AdSense employee patrolling webmasterworld.com - miraculously, he reinstated the account! We immediately reduced exposure to 5k/mo and sold the remaining inventory first with Exponential and then transitioned to header bidding with 4 different DSPs.

TL;DR Avoid like a plague!!
> its unstable lead-210 isotope would have largely decayed away over the centuries into stable lead-206

I know very little about radiation or metallurgy. Why are the few centuries the lead was underwater relevant compared to the thousands or millions of years it existed in the ground prior to being mined? Compared to the timescale that the lead exists on, 100 years either way seems like it should be irrelevant.
> There's also YAML

Omg YAML. Here's an example for you.

- external:
metric:
name: kafka_consumer_group_lag
selector:
matchLabels:
topic: rtb_trx_records
consumer_group: trx-record-validator
target:
type: Value
value: 30000
type: External

It seems like the "type: External" should line up with "metric" and "target" but no, it needs to line up with the word "external" - not the dash, but the word after a space after the dash. Using YAML frequently reminds me of the quote "Be open minded, but not so open minded that your brains fall out".
It doesn't seem like a matter of technology - the design as described simply doesn't work, is how I understand it. Think about it - there's a limit to how much steam, and how quickly, you can generate by introducing water to a preheated copper tube.
Maybe he is addicted to nicotine.
Schemas are awesome for so many cases. Even though JSON Schema is a giant evolving clusterfuck, I still use it to be able to enforce some consistency.

And, being honest, JSON schema is better than, say, GPB or Avro schema at enforcing field relationships, e.g., "if typeId is 7, then partnerId cannot be null"
Are you in a contractual relationship with AWS for every service you use that uses AWS on the backend? How about Loggly? How about BigQuery/Snowflake? Intercom if they use that? Salesforce? Facebook and Google if they run ads? They may not do anything weird with your data now but how can you know that things won’t change over time?
The way India handles that is by having a progressive income tax that is collected at the federal level and sales taxes at both the federal and local level (CGST and SGST). Apart from federal funding of states, they also get all the SGST taxes and are free to set their rates for fuel, road taxes etc. Having multiple levels of income tax is always painful.

Also, the government provides free java/excel based tax filing systems with a certain level of sanity checking.

Apart from this there are several fremium sites like cleartax to help file taxes but they don't get to lobby.

(yes, corruption is inherent and tax evasion is rampant, but at least filing taxes aren't as painful as US tax filing seems to be)
Thanks for your reply, as well.

But there’s no indoctrination going on. It’s right there:

> If you know that a field of a data type is going to be unused you can fill it in with an `error`

I don’t want to fill anything in.

I don’t want to have to tell the checker what I know and the world already knows just because it thinks it needs to know it.

There’s no indoctrination. We don’t have to “fill in” anything in Clojure.

I wonder sometimes if this is a thing where you can’t see the air because it’s all around you?

In static-type space you are (by definition) a slave to the type checker. Sometimes static-type enthusiasts will say they lean on the checker, it helps them. But I have a weird sense that this is a kind of Stockholm Syndrome.

Sorry I’m a bit caustic sometimes, but it’s all good natured I promise - the hope is it draws out a point that will prove me wrong.

You clearly know your domain well, and I appreciate the back & forth. But I do stand by my position (until knocked out of it.)
Here's an old but interesting SO post that if true would indicate otherwise https://stackoverflow.com/a/24089393
They self-pwnd themselves. They posted a blog post saying that starting very soon, everyone will be getting third-party telemetry, self-hosted instances included.
> The intended purpose is relevant because it tells us the conditions under which something is likely to work well.

Not really. Plenty of things suck at their original intended purpose and remain in use because they are very good for some other purpose. (Viagra is an example well-known to popular culture, but hardly unique.)

> XML was vastly overused for a long time. That doesn't make those usages correct, as there were alternatives even then.

XML is perhaps not abstractly ideal for many of the purpose it has been used for, but in many cases it was superior to other alternatives for practical reasons, particularly the tooling ecosystem. (JSON is the new XML, and virtually the same thing can be said for JSON in many of its current uses, though it does clean up XMLs two biggest warts, element/attribute distinction and verbosity—though even for human readable formats YAML does the latter even more than JSON while being easier to read, not to mention all the binary options when readability isn't a concern.)
Nokia’s collapse turned a sleepy town in Finland into an internet wonderland
> I don't know exactly when we decided that serial killers in suits are perfectly acceptable to us, but even the companies themselves who allow this sort thing to happen are rarely punished enough to offset the gains they made exploiting their customers.

I mean, that's how America's been since the very beginning. First we had slavery, then we had corporations getting away with killing workers through heinous workplace negligence, e.g. the Triangle Shirtwaist Fire. I'm not saying it's good that this has always been so, or that citizens should be apathetic in the face of repeated sociopathy, merely that realizing that the country's always been like this is a necessary step for understanding why the serial killers in suits seem to have so much power.
Stories please.
All we are is a bunch of pixels without vector support in the wind, dude.
Could the black matter effects be explained by thinking of light as having mass? (my understanding is that light/electromagnetic radiation is considered as not having mass)
I can't find any of the court filings publicly online - I'd probably have to spend money on PACER or something - but it seems possible to me that Buzzfeed had no access to the exact details of what contaminated the pods. Is it necessary to know precisely what it was if Juul employees are on record voicing concerns about product quality and being dismissed? Are some kinds of contaminants not bad enough to matter?

The article has plenty of detail. The person filing is a former employee making easily disproved accusations, what would be the point of suing and then having it immediately tossed out because he can't prove anything was contaminated? He even cites the supplier it came from.
The products they currently sell are not FDA approved. They have till May 2020 to comply.

I’m curious if their MFG line is cGMP compliant. It may be, but bad batches would say procedure Sops etc were either not in effect, not available or ignored.
Which website do you run?
If money is you main motivation for doing what you do, you’re way more likely ending up making these kind of bad decisions.

Money and greed goes hand in hand and it deludes your moral compass.

If you instead are driven by true happiness which can come in many forms such as doing good, impacting people in a positive way or just improving the world in general, money becomes less important.

I do understand this way of thinking is a luxury and I myself had been in situations where I just needed money to buy food, but the people sitting in these positions, making these decisions usually have no issue with money, they just want more.
Speeding where other people aren't present (or you don't know) is ipso facto dangerous. Drugs are not. Driving under influence is not caused by drug use - it's caused by performing another action after using a drug. The most popular illegal drugs do not contribute to aggression in any way - weed makes people less aggressive, if anything. Domestic violence is largely fueled by alcohol, which is legal.
I miss the office and interacting with colleagues too much
Google always do the same once you reach a decent amount they ban the account for some silly reasons.
In the self hosted instances, which is what I was talking about, you do have a control over the backend. At last more than you do with the managed version. It pretty much boils down to this: Can something leak sensitive information to a third party. If so, then it's a no go.

If you have a contract with that third party, and you deem that third party to be a safe harbour for your data (yes, that includes gitlab.org, AWS, etc), then that's a different case.

If Gitlab was to have instead said:

1. We are going to enable telemetry on all public repositories on Gitlab

2. On self-hosted instances we will provide you with the ability to embed your own analytics, from a company of your choosing

Then the screeching (and I fully agree it is screeching) would have been less. Unfortunately, with self-hosted instances, you simply cannot allow Gitlab to leak information like that to a company you don't have a direct relationship with. I'm not sure how else to phrase this concept or explain it, and it doesn't really matter if you use safeframes or not.
Spoiler: they are. The reason? Blatant corruption from Intuit and H$R Bloc
It's amazing because in all of these examples the general public has not given a crap about these incidents.

Protesting slavery was extremely difficult. Protesting the workplace got you labeled a communist or socialist.

And now when we protest against climate change or ask for more workers rights or BLM people are generally against it.
Unless the person being imprisoned can actually show a net reduction in jobs, this doesn't follow.
I've worked from home on a few gigs and largely agree with this article.

A couple things I would and/or modify are:

- Merge "HAVE A DEDICATED OFFICE" with "CLOSE THE DOORS TO THE ROOMS YOU'RE NOT USING". Once you are done with the workday, "close the door" to your work area just as you would by leaving an on-site office at the end of the day.

- "WEAR WORK CLOTHES" might be better described as "maintain the same morning routine you would have if going into an office." IMHO, "wearing work clothes" is much less important than the benefit of getting into the mindset of "going to work."

+ Take the same lunch break you would if at an office.

+ If you need to do an errand, let your coworkers know just as if you were in an office. Prefer to schedule it if possible.

+ Establish contact protocols as you would if on-site. For example, just because you might leave your laptop running should not imply 24x7 accessibility. If you need to be available (such as for production support), it should be no different than if you went into the office each day.

+ Keep a record of your start time, "leaving" for lunch, PTO (such as for errands), and "when you leave." This can be as simple as written notes or by way of a corporate time accounting system. I recommend keeping your own hand-written logs in addition to the latter.

+ Record work performed outside of the normal office hours as you would if called into the office.
Sorry, do you think that fundamental physics gets more than other fields? Have you ever seen a breakdown of research budgets?
Gatwick trial cuts plane boarding time by 10%
By paying taxes to the US government, you are virtually guaranteed to be financially supporting crimes against humanity somewhere in the world (Saudi Arabia comes to mind right away, but the list is truly long) - and yet here we are.
Surprised no one has mentioned this gem:

> The lawsuit claims that then-CEO Kevin Burns shot down that idea, saying, “Half our customers are drunk and vaping like mo-fos, who the fuck is going to notice the quality of our pods.”
High risk, high reward; low risk, low reward is supposed to be how it goes. So what are the multi million dollar pay packets for if there is no risk?

We can't keep turning a blind eye to the hundreds of outrageous examples of ignoring health impacts and lying in public whilst the real facts are in a filing cabinet at head office.

Frankly the law should have changed dramatically after discovery of Thomas Midgley and tetra-ethyl lead, "the science on smoking and health isn't settled", or Bhopal etc. We have centuries of proof there aren't adequate consequences.

> getting punished for subordinates behaviour

That's what leadership is. Responsibility for those under you on your watch. If you fired or prosecuted them on first discovery, that forms a decent proportion of mitigating circumstance. Perhaps you'll still be found negligent for not having adequate checks and balances to prevent it happening in the first place...
> Arguably a lot of particle phenomenology in the last 20+ years was bad science in that way, because no new phenomena had actually been observed/measured

That is an interesting observation. Would you be willing to guess specifically why there was such a long gap between the LHC and the previous collider? The answer is already in your comment.