skysight-inc/HackerNews huggingface dataset:
So.. I just posted something here and it was immediately (like within 30 seconds) flagged and buried.

https://imgur.com/a/pBRO4nD

What does this say about about Microsoft people on HN?

You may be sorta new employees, but the company you signed up for is not new. Microsoft set back the development of computing quite a bit during the 80s/90s/00s, before it became less relevant.

You guys should study the behavior of Germany after WW2.
Here's an interesting parasitic plant that you can find in the Bay Area:

https://en.m.wikipedia.org/wiki/Cuscuta_californica

It's so bright orange that at first I wondered if it was spray paint left behind from construction. There's loads of it around the Bay Trail behind Google.
is it cosine phi, or reflected energy?
> The thing is, you never really know off-hand if you're logged into the third-party (provider) or not without opening a second tab and going directly to the third-party's site

That's exactly right! But with OAuth, when you authenticate, you go directly to the login-form from the third party (assuming here that by third party you mean the party you have an account with)! Ideally, the client (the app you're using) doesn't even know where you (the user, via the user-agent, otherwise known as "browser") went to log in, it only knows the address of the authorization service (which does not need to be the same domain as the actual login server). That's the great thing about OAuth!

But for this to work, authentication must be performed in a reliable browser, hence the importance of the green URL bar in browsers: so you know you really are in the Google login page, not in some phishing website, when you enter your credentials.
PG&E has consistently not invested in maintaining the land around their power lines. This is an entirely preventable problem and caused by a lack of long term investment in infrastructure maintenance.

They've admitted they don't have the time, money, nor manpower to go out and play catch up with all the maintenance that they have deferred, and now the public (their customers) is suffering.

They deserve to go bankrupt from this.
> For smaller screens, scrollbar-on-scroll (with a slow fade of 0.5 - 2s or so) would be a reasonable compromise, if the scrollbar were also a manipulation interface, and not merely informational.

> The default Android PDF viewer operates in this manner, and provides a grabbable scroll control. Much of the rest of the app is otherwise less than impressive, but this would be a useful motif to pick up.

I wish I had an Android device laying around to test this on because I have a hard time believing any scroll-bar-manipulation-on-mobile would be anything but terribly finicky. That said I also don't find myself in a situation where I ever want to drag the scrollbar on mobile. I'm perfectly happy just using it as a progress bar.

> I am a firm believer in the right to provide feedback on tools and services used.

That was never in question.

> "Go self host" isn't a reasonable or scalable response generally.

Maybe "then host your own blog" wasn't the best way to phrase that, let me try again:

If you really hate the lack of scrollbars then there are a number of platforms (free, paid, hosted, self-hosted, the list goes on) you can move to that will give you the ability to turn on scrollbars.
I think that if vertical space were indeed the reason, then we wouldn't have huge, touch-sized widgets everywhere and 32-pixel titlebars. There are applications where simply reducing the padding on most widgets to sane values wins you 3-4 menubars' worth of space.

I'm sure vertical space is the most often-repeated argument, but I'm skeptical that it's indeed the reason behind this trend.
I pull down the History menu reasonably often. I'm one of the few people who still uses bookmarks too. I found that hitting alt was annoying and I'd forget about the menu and try to find stuff on the Hamburger menu instead and get annoyed.
Not sure if can be considered "serious", but one example could be ЭЛЬ-76 (https://en.wikipedia.org/wiki/Эль-76). Sample code: https://ramlamyammambam.livejournal.com/211315.html, and some lecture notes: https://drive.google.com/file/d/0B2e6QHbfGLLMZ094QTZwVmJxMlE... (Russian)
This is why I really like the DDG system of !bang operators. Because each search engine works differently, if you're knowledgeable about the different engines, you can pick the best one for the job.

Just for fun, I thought I would try to figure out when the next solar eclipse would be: I'll use the simple phrase "Next solar eclipse"

I'd probably try Wolfram Alpha. On DDG I would type "Next solar eclipse !wa". It returns a date "Thursday, December 26, 2019 (2 months from now)" Nice.

Next I look at plain DDG: I knew it probably wouldn't be useful, but first result is a website that calculates the next solar eclipse. It requires another click, but it gets "Dec 26, 2019" right at the top of the page. Not bad.

Now for Google, who I knew wouldn't be sure (since their interpretation of the very exact phrase would be fuzzy): In big, prominant and confident letters it reads: "July 2, 2019".... thanks Google. Wrong.

The skill in searching is no longer in using the search engine to the best of it's ability, it's in picking the right place to look. This has sort of always the case, but has become more of a skill as Google has strayed away from improving for the knowledgeable searcher.
Could not the customers credit card information be stolen from the internet/sketchy store/night out and then be used by the hacker to order food? Hard to say who is at blame here.
Reminds me of the creepypasta about the guy who left a quake server running for years and his bots learned not to shoot each other [0].

That was only in 2011. At the time it was solidly in "this feels like it could happen, but definitely didn't" territory. Now we're in "Let's see if I can induce this in this guy's browser game" land. Feels strange.

0: https://i.imgur.com/dx7sVXj.jpg
Woah, woah, woah. You ever heard of the perfect being the enemy of the good? Maybe some people need to function in modern society in order to evangelize their deeply-held beliefs about sustainability.
I miss good old fashioned menus. It's one reason I liked the PalmOS UX so much better than iOS and Android.

Menus are so wonderfully discoverable. The first thing I did when opening a new app (on PDA or desktop) was drop each one down to find out what tools I have available. Like a pilot looking over his cockpit or a craftsman laying out his toolbox.

It seems a lot of the last 10 years of UI "progress" has been about burying things in order to "simplify" (aka dumb down) interfaces for audiences developers think of as kindergartners.

Zen of Palm showed us streamlined, clutter-free minimalism is possible to achieve without making your app stupid.
We've got bigger higher resolution screens for every device, screen real estate is only getting less precious and we're still losing affordances like scroll bars and being able to see the top level of the menu hierarchy.
Ooh, I don't know Outline. Does it have a browser extension? I can't find one.

I've been using Mercury Reader, and the old Readability extension before that, but I like the idea of being able to share readable urls, like you just did.

Edit: Oh, though I guess you actually weren't supposed to do that: https://www.outline.com/dmca.html
Pointing to a specific claim that was not made as if it was. Anyone can find something to point to that is false. It's an effective way to avoid specific things that were brought up.
The solution is Scott Forstall
Mine's at 1280 and it's full menu, almost entirely whitespace. Makes it kinda fun though, feels like finding an easter egg.
Migrating Russian eagles run up data roaming charges
Best of luck to you! I hope that there is more success in the future for taking control of NH.
I read an article in a woodworking magazine showing how an amish shop runs its traditionally electric machines on diesel power.

A long trench runs part the length of the shop with a shaft supported by bearing blocks. It terminates in an adjacent room housing a diesel engine. A belt system couples the engine to the shaft and air compressor.

Along the trench are all the standard machines you'd find in a shop: drill press, planer, sanders, table saw, joiner, etc. Each one had its electric motor removed and retrofitted with an elaborate system of shafts, belts and sheaves which connected to the main shaft in the trench.

They turned them on and off using a simple yet clever lever operated belt tensioner. By default the belt had enough slack to allow it to slip on the drive sheave preventing the machine from running. When the lever was pulled, it forced the belt between two tensioning sheaves tightening it which then started the machine. Very simple and clever and all made from wood.

Power tools were all air operated and one clever hack they made was a pneumatic wood glue dispenser. It was a 1-2 foot length of 3 or 4 inch PVC pipe, capped at both ends, one end being a threaded port. Plumbed to the top of the tube was an air pressure regulator to lower the pressure to just a few PSI. At the bottom, a hose which ran to a blow gun. You shut the air, opened the cap, filled it with glue, closed it and turned the air on. press the blow gun and now you have a glue gun! Really neat and my father built one for his wood shop.

One bonus of using air tools is they are lighter and more rugged than equivalent electric power tools. I've heard claims of 3-4x lifetime so long as they are fed clean, lubricated air. Nowhere near as efficient though as a lot of power is lost as heat in air compression.
The first project I ever put together involving (extremely trivial) ML used BERT, and something about seeing it just work opened my eyes to the ML world and got me excited to work in the space.

If anyone is interested in hacking around with BERT, I work on an open-source project called Cortex that handles model deployment, and we have full tutorial for deploying a sentiment classifier using BERT quickly and easily: https://github.com/cortexlabs/cortex/tree/master/examples/se...
> Obviously, it is better if you could improve their situation to the point where their labor stops being cheap.... but how can you do that?

The big thing missing from this conversation is how the US/multi-national corporations use international organizations like the IMF and World Bank to force "structural adjustment" policies that end up degrading labor protections, forcing countries to privatize all gov't functions, etc. We have played a big role in the destruction of their "situation". Both historically through colonialism and still actively today with IOs and structural adjustment policies

Not to mention all the fucking coups the US enacted and supported:
https://en.wikipedia.org/wiki/United_States_involvement_in_r...
Recommendations from the first meeting of China’s urban policy unit in 38 years
Speaking of discoverability, as I was playing around with this I just discovered that there's another way to paste besides these two: if you just tap with three fingers, it brings up an undo menu that also has a paste option (different from the select menu).
I assume it was mostly due to ideal gas law reasons. Pumping up a highish pressure truck tire (~65 psi IIRC) did take quite a long time and I was pretty exhausted by the end.
It could be worse, you could be involved with Oracle and receive phone calls warning you that they could sue you.
Vulnerable from Above: Rising Drone Attacks Drive New Technology Tactics
Seems there's still confusion so I'll copy/paste my old comment:

OAuth 1.0/2.0 are a set of protocols and standards allowing applications to identify users and get access to their data using existing profiles. OAuth is mostly focused around authorization with claims (which are just key-value pairs) and authentication was an afterthought.

OpenID is another standard designed to let people authenticate across the web, launched with a lot of hype in the early web 2.0 days but never took off. OpenID Connect (OIDC) is a new standard based on OAuth 2 + OpenID to provide both authentication and authorization in a single flow.

OIDC/OAuth is all based on tokens, which are JWTs containing a bunch of claims that can be validated against the server that issued them. There are ID tokens (for the user info) and Access tokens (for accessing an API on behalf of that user), but some services like social logins don't provide any access tokens. Other providers might have rate limits, or dont have fine-grained permissions, or you maybe you have completely internal APIs that you need tokens for.

Also this video is a great in-depth walkthrough: https://www.youtube.com/watch?v=996OiexHze0
Embrace, extend, extinguish? Gee, where did i hear that before?
The One Who Created Elixir
Why hasn't anyone pointed out that, except for function and variable names, almost all of computer code is symbols which were pilfered from . . . arabic???
The third word of that sentence is three letters too long.
I'd like this if I could sort after I search... also browsing categories.
They are currently involved in legal proceedings. That's why they declared bankruptcy earlier this year, it was preparation for massive fines.
The establishment of both major US policies have been pretty staunchly neoliberal and pro free trade up until recently. I don't think it's fair to say "no one fell for it"
My S7 was fantastic at resisting water until the glass earned some cracks.
The technological free market 'solutions' will make reasonable and sustainable policy decisions far more palatable.

They matter.
Bullets are sealed. They don't use the atmosphere as an oxidizer. Doesn't mean they fire well in a vacuum, because there are other factors involved. But you could certainly design a firing system to work perfectly fine in a vacuum.
How to Not Get Screwed by App Developers [pdf]
You shouldn't be using email to send PHI at all.
16:9 is a ratio whereas the amount of vertical space is an absolute amount. I don't think the two are related, unless screens got wider at the expense of height, which surely is not the case.
Once it gets that high, why not just pay for their housing outright? How are they spending more than it would actually cost to house them?
Lessons from Research into Buttons
The left used to oppose immigration into the 1990's. It's only the very recent "woke" racial left that supports globalization, capitalism and immigration.
> Is this similar to how each Electron app uses a bundled version of Chromium (which takes up disk space),

At the moment, yes. In Android 10, Chrome and WebView are sharing common code (a feature Google calls "Trichrome"), even though they are separate downloads, so perhaps there is a way for GeckoView apps to share one GeckoView in the future.

https://www.xda-developers.com/google-chrome-no-longer-webvi...

> Firefox Focus on Android is quite a large app (132MB installed on my phone), even though on my phone, it uses either Chrome or WebView (bundled Gecko is disabled).

Some Firefox Focus users were still getting WebView as part of an A/B test comparing GeckoView to WebView. As of the latest release (Focus 8.0.23), everyone should be getting GeckoView.

The Firefox Focus APK (with GeckoView) download size is about 38MB, but the uncompressed footprint is larger.
Well certainly anything to which you are allergic is dangerous, but I don't know that I would classify shellfish as dangerous otherwise.
I entered and left MS during the Ballmer era. I liked my co-workers and my immediate manager was awesome, but I didn't see the company making the right moves to get web right, and they seemed to afraid to even mention the name "Google". I never would have predicted the Nadella turn-around.
You are mistaken. It was and I think still is a consensus among economists. For example: https://people.uwec.edu/jamelsem/fte/fte/efl/teacher_stuff/a...
Supercritical CO2 is heavy like a liquid, with weird and useful properties
>At some levels of regulation, there is no meaningful difference between private and nationalized.

The one regulation missing for this in PG&E's case is mandating profit reinvested in infrastructure ahead of shareholder dividends, buybacks, and|or executive compensation.
Related:

https://twitter.com/Pinboard/status/1187523223673458690
What codec do they use:

https://support.google.com/youtubemusic/thread/338369?msgid=...

Stats for nerds:
https://support.google.com/youtubemusic/thread/340313?msgid=...
Like most articles referring to economists as a group, now admitting whatever you, dear wise reader, have always known, this one does not contain any kind of survey, but simply quotes a few economists, as if they spoke for the entire economics profession.
I agree that it works very well for "more like this" document recommendations! But not great for user queries.
I live in a city right now, and sure, the grocery store is right there, but it’s also very expensive and has a tiny selection. I can get all of the same foods for much less in the suburbs and much more conveniently than carrying several heavy bags for multiple blocks.

Anyhow, I’m not saying there aren’t reasons to want to live in a city. I’m saying there are also good reasons not to want to, and I’m reacting to the suggestion that the means to do so be abolished.
Yes, OAuth and OpenID Connect are both standardized protocols, so they are effectively abstractions for performing delegated authorization and authentication, respectively. They exist basically to promote best practices and to help promote interoperability between products - mores with OpenID Connect, as OAuth does not really have any profiles of usage attached to it.

You sound like you may be looking for a CIAM solution. Searching for CIAM (a customer identity and access management product) should show you tons of alternatives.

Full disclosure is that my employer sells one of these, PingOne for Customers. To clarify the parent's post, Firebase Auth also has the related Google Cloud Identity Platform - I will say even as someone in this space I don't fully understand the reasoning behind Google selling both of those products, however.
The results for half of my searches are already all spam. It would be better to just accept that and have google let me engineer my queries so that I avoid spam. More token based searches, less word vector/machine learning based search. Let me query their index like its an SQL database
James Carson gave a talk at this year's Elm Conf on using Elm to talk to Futhark:

https://www.youtube.com/watch?v=FVP8zxpZKV8
Compress a gas, it warms up. I imagine that's the large part of it. Go grab the cooling fins on a large electrically-driven compressor after it's been running a while. No, wait, don't do that if you like your fingerprints. The cooling fins aren't to cool the motor, they're to cool the compressor housing where the piston goes up and down to compress air.
Let's see... I had a tail no one could see but I could feel it. I also the life memories from the other person I was. It's like I've lived two lives.

It's easy to tell which memories are real because I'm human in the real ones.

I'll send you an email. The full story isn't something I want to go into here.
In short, server data is more normalized than the data client needs. As you get closer to view layer, your data gets denormalized further and further. Client-server interaction sits somewhere in the middle to both minimize the bytes-over-wire as well as the round-trips to the backend to get up-to-date.

Take a look at GraphQL, its central promise is to let client choose what's the optimal data it needs (that often denormalized through nested GraphQL queries), and send it in one batch.

It is not to say there shouldn't be a simple replica. It is just if we want it to be a simple replica, we should have a server-side mirrored some-what-denormalized representation rather than just the raw server-data models.
Show HN: SOCRadar Digital Risk Protection Platform Free Edition
Addresses are changed when the DDoS takes one down. This mean's the attacker's (usually automated) resources are wasted on a domain no one will ever visit again, while users will just visit dark.fail and get a new link 15 seconds after the site goes down.

At the beginning of the DNM large-scale DDoS attacks (Empire in particular), there was panic, confusion, and a whole lot of phishing. As another commenter noted, Empire users have now been trained (or learned the hard way) to visit dark.fail, copy/paste a mirror .onion address they've never seen before, verify it as legitimate through the various captchas/pgp/safeguards on the Empire login page, and then enter their username/password.

Sure, it's frustrating and complex the first time - a heck of a departure from cookies and 'sign in with google' buttons. But after five or ten times, it's just the way you log in to the website, and it takes an extra 60 seconds tops.

Not saying this is the only/best solution to a dedicated onion DDoS - just sharing that it's been working for Empire.
What crap. It's not that they didn't know. They frankly didn't care. None of it affected their bottom line. It just produced externalities (like always) that they'd act concerned about but wouldn't have to deal with.
Good point! This is especially the case in iOS/Android, where almost every app uses their own completely custom UI and design on everything "just because". Remember when most apps used the iOS/Android OS-provided UI's? Customization was there when needed but dialog boxes, drop-downs, etc. were uniform across the OS.

This is why every app and its mother didn't need a UI/UX designer until the past few years.
I think a motivation for neglecting the web was to encourage people to develop desktop apps, with Visual Studio, on Windows.
Roland Doe and the Chilling True Story of the Exorcist
I haven't seen A: on Azure VMs until pretty recently, when I let "az vm create" pick the SKU for me. does it vary based on SKU? do some of the SKUs use it? weird..
Free platform for actionable threat intelligence to combat phishing attacks
If you keep swiping left past the Manage | View | Clear menu, Clear expands to fill the width of the notification. If you release your finger then, it’ll trigger Clear. It’s pretty hard to do reliably, though.

There’s a similar behavior with the swipe gestures throughout iOS. In the Phone app, swipe left on a voicemail to show a Delete option. Keep swiping, and Delete fills the whole cell. Release when it’s expanded to trigger Delete without an extra tap.
Huh. I use bookmarks a lot, too--but I use them via the omnibar. Type the first few letters and I'll find it from there.

Interesting. Thanks for sharing.
Harder to do that with a 4 wheeled cart.
For me and the whole family, sharing via WhatsApp has gone from being the first option to being hidden under a sub-menu. Naturally my mom has stopped sharing photos on WhatsApp since the iOS upgrade. Certainly there is local historical telemetry data so removing one of the most-used options during an upgrade seems careless.
Their security posture is immature, from an enterprise perspective. Many enterprises use slack. Developers love slack. Want to build a slackbot? Build it with ngrok.

https://api.slack.com/tutorials/tunneling-with-ngrok

The free version is easy to install, has no enterprise oversight controls and can be pretty dangerous when you are trying to secure a network.
You are welcome. Send your browsing history for the last 24h please as a reply and we can talk why users (especially tech savvy) don't like telemetry.