skysight-inc/HackerNews huggingface dataset:
If I understand it correctly, in simple terms, it is only entrapment if you are doing something to make a person commit a crime he wouldn't have done otherwise.

For example, if you are an undercover cop and pressure a random taxi driver to be your getaway driver for a robbery, it would be entrapment. If you just host a honeypot website, post links to it in a few shady places, and people end up using it to do illegal things out of their own volition, it wouldn't count as entrapment.
Mods, please update the status of link.

The ACM article used a bunch of dependencies that break the text formatting. Russ's original blog post is well formatted.
This is not a false positive, attempts to subvert or sabotage surveillance clearly indicate latent antisocial tendencies and should be punished to the full extent of the law. Please report yourself to the nearest Malcontent Utilization Facility, citizen!
The bigger problem is that it's not a crime to take someone's passport away and prevent them from leaving the country whenever they wish to. None of this would be possible if an employee could quit and go home at any time.
Barneys New York Is Sold for Scrap, Ending an Era
That is far too defeatist for my taste, and not my experience at all. The problem is that people subject themselves to bad managers and toxic corporate culture. Then Agile comes along and throws them a lifeline, and they let the bad managers take it, instead of taking it for themselves.

Real Agile is out there, and is being practices very effectively, but you've got to take it and apply it, and not let poor managers corrupt it. And there are many companies that do not have this toxic culture. Or start your own; software developers are in a better position to start their own business than most other professions.
Please do not label local extensions as inherently unsafe, it's extremely disingenuous to label software that has not been rubber-stamped by Mozilla as unsafe.

You keep bringing up CORS, but that is a security directive that can be disabled in Firefox. Even an essential security measure such as CORS is allowed to be disabled using extensions approved by Mozilla, opening users up to universal XSS by any site they visit.

In any case I don't think CORS is relevant in a discussion about Mozilla taking away user freedoms under the pretext of a threat model that falls apart once subjected to close scrutiny.
Paying for Medicare for All
Not saying I agree with either sentiment, but there's a delicious irony in this comment in that you're reading into votes as if they're pure expressions of support or not for an issue that's not black and white... Even though the expressions are just projections of a spectrum of thoughts through a binary voting system!
Huh? The claim "Pizza Hut doesn't sell tacos because that is what the Taco Bell brand is for" is supported, not undermined, by the fact that Pizza Hut locations use explicit Taco Bell branding when they decide they want to sell tacos in addition to pizza.
Not sure how they can do that in a reasonable way since it is not open source? And just because the data is not in China does not mean the Chinese government does not get access, it is more like the other way round. If the data is in China you can be sure they have full access.
Fair enough. I had the same experience with Van Gogh (the 3D paint scuplting). But I expect that even the zoomed-out version looks like something I'd care about, like a flower, not abstract.
I've seen maybe 3 ads in using TikTok for 6 months every day.
If they build it, can Americans use it? Asking for a friend...
I agree with everything you said :)
I advised my privacy-worried dad to get a Fitbit instead of an android watch (couldn’t afford Apple Watch). Now I feel like an *hole
Sorry, I thought we were having a science based discussion where words have meanings...

We're talking about retrieval difficulty in a worst case scenario. Even if it disintegrates, you've left a cloud of particulate matter that's going to create even more unintended consequences and is more difficult to collect / move / mitigate.
Please don't take HN threads into partisan flamewar. Would you please review the site guidelines and stick to them when posting to HN? You broke several of them here.

https://news.ycombinator.com/newsguidelines.html
"democracy" literally means "rule by people" or "government by people". You are in effect claiming that America isn't a democracy (which may or may not be true, sometimes you look suspiciously like an aristocracy in disguise).

Anyway, over here in continental Europe democracy mostly works. And when people complained about privacy issues for years and Facebook laughed in our faces we eventually got the GDPR. That's exactly the kind of "either get your shit together or we will legislate it" this thread is about.
The ordinary view would be that you aren't worried about supplying your own human capital, but you want the brand value of the business you purchased.
> For most of society, webcrapps are currently the de facto town square

They're not public squares though, they're privately owned webservers, they don't become nationalized just because they're popular. That's like saying the dive-bar in your local town is the de-facto town-square because everyone meets there after work. Those individuals made the free choice to interact in a privately owned establishment thus they are subject to the rules of that establishment, if they don't like the rules they are free to go to another establishment with more favorable rules.

> A clique of companies is now in the position of censoring the vast majority of interpersonal speech, period.

100% false. They are within their rights to refuse to rebroadcast content you upload to the servers they own, but they cannot prevent you from rebroadcasting your content anywhere else.

> We could regain society's Freedom of Speech

Freedom of speech existed before Facebook and Twitter, so your suggestion that their business practices have caused free speech to go away is incorrect.

> So perhaps you're focused on the technicality because you want to work towards that - and please do! But state it constructively rather than dismissively. It helps nobody to perpetuate a stubborn idea that there is some kind of strict distinction between USG and the S&P 500

This is pretty hilarious. You're suggesting I self-censor the "technical" truth in favor of your editorialized version of the truth because "it helps nobody to perpetuate a stubborn idea that there is some kind of strict distinction between USG and the S&P 500"... even though there is a very obvious "strict distinction" between the government using the threat of force to censor speech vs a private company operating a platform they own and pay for.

> Whether the political bureaucracy controls corporations or corporations control bureaucracy, it's all government.

So are you saying you want to ban corporate lobbying or that we should nationalize large influential corporations so that we can ensure they function in service of the people instead of share holders?
Aptible (YC S14) | Remote (North America) | Remote-OK | https://www.aptible.com

We're working to make information security a core competency of every startup. We envision a world in which startups have access to great information security, are empowered to focus on their business instead of on compliance, can scale faster and more efficiently, and are confident that they're creating quality products.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/aptible.

Here are our open roles:

- Software Engineer (Aptible Comply): https://jobs.lever.co/aptible/91b1f3d8-082d-4d63-b42b-45bb05...

- Product Designer: https://jobs.lever.co/aptible/80f4556a-73ee-428d-b2af-2c67ee...

Tech Stack: For Aptible Comply: JS, React, Ruby, Flow, Postgres.
Sigh. Why doesn’t EPA hold auctions like FCC on dangerous pesticide use? Market will apply them where they are most needed, govt gets revenue, environment is saved.
On the bright side (well, less dark side really) at least it teaches the kids a very important lesson about putting things in writing while they are young and stakes are low.
Tried that ... looks like they were using a security gateway that did packet inspection and disallowed anything but "well known" VPNs.
but i was just writing a paper on the social impact of Beck's mid-90s hit, "Loser"
Sure, and the established process will fix it. This is not an MCAS level newsworthy event.

Cracked pickle forks are absolutely noteworthy. Qantas flies its 737s in relatively mild weather, has a reputation for technically skilled pilots and excellent maintenance staff. If there were any fleet where you'd expect to find no cracks it would be Qantas. Instead Qantas has found a third NG with cracked pickle forks (out of a total of 33 NGs that required inspection).
> Gaggle touts itself as a tantalizingly simple solution to a diverse set of horrors. It claims to have saved hundreds of lives from suicide during the 2018–19 school year.

I just read a great newyorker piece on a security company that sold FUD[0]. This seems like another example of FUD for sale very similar to some security companies out there.

[0] https://www.newyorker.com/magazine/2019/11/04/a-cybersecurit...
Blues of Many Skies
That’s one of the many reasons I don’t implement a bunch of my side projects, because it inevitably leads to me trying to figure out how to police and remove gross content from whatever website I build, and I don’t want to have to deal with that.
This is a good subject to discuss, but the article doesn't suggest much in the way of specifics.

What kinds of libraries (or library refinement) are most wanting? I agree that there's a general green-ness to the current offerings, but it isn't clear where a motivated individual might best spend their energy.

In addition to speed and lifetime visualization, another big thing I'd like to see from rustc/RLS is better-localized error messaging. I have a frequent experience where an error in one place will suppress (or cause!) a completely unrelated error somewhere else, even when those bits of code don't interact at all. For example, one function that returns the wrong type may suppress the fact that a different function, in a totally different file, has a similar problem. This makes it very hard to squash errors in a methodical way. It starts to feel like whack-a-mole; traditional boundaries like function signatures don't seem to apply to compiler errors.
No. Not in the minds of people who grok the point of scrum.

Just start pointing this out to people every time this comes up. It's not an exact time estimate, it's an abstract complexity estimate. Insist that the idiots get some actual training in Agile before they start corrupting it beyond recognition. If they want Agile, then they should invest in training people for it, and in spreading the culture that goes along with it. Because Agile is perhaps more about culture than about process.
Yes, but it's very long cycle failures at low frequency, and people suspect it's because of additional stress caused by winglets. Winglets reduce drag and save fuel, it's an important change. It may have been very difficult to predict and test this failure. And most importantly, the FAA and Boeing are handling it properly.

Cracks have been found in NGs both with and without winglets, so that is almost certainly not the issue at hand.
Plus it really sucks to wait for the lag on wrist-raise (or the false alarms) to be able to tell the time. With the Garmin, glance at it to get the time; no wrist movement foppery. Edit: BTW, some of the WearOS watches now have effectively 2 displays: a always-on lcd with great battery life for the basics and the fancy backlit lcd underneath for everything else: one example is Mobvoi, which has funding from Google and thus hopefully isn't fly-by-night. Edit2: https://wearos.google.com/#find-your-watch .
This is good to keep out moderate bad guys from your data. But the not so much for the NSA. The NSA already captures traffic end to end including the key negotiation and can break the rest https://arstechnica.com/information-technology/2015/10/how-t...
Management can tell employees to do whatever they want, but employees can also tell management to shove it and quit. What's wrong with that?
not bad but also not quite as good as Hiroshi Yoshimura
Green is just amazing for this kind of ambient sounds
https://youtu.be/D7aYjRl_6Zw
HN has threads for that too:

https://news.ycombinator.com/item?id=21419534

https://news.ycombinator.com/item?id=21419535
And its for the writers to quit, torching the owners' investment. And that's what they did.
Nice. One step towards the right direction.
I don't govern the mega corp.
Register.com/Web.com Compromised
Only $120 billion in fed overnight loans to prop up liquidity to keep blowing money on short term treasury auctions. Totally not a 5 alarm economic fire raging.
Snowden was a factor, but not the only one:

- CPUs didn't have hardware acceleration for encryption (AES-NI) like they have today, so activating SSL on your webserver actually decreased your throughput a lot

- It was expensive and complicated to get a certificate for your website, now LetsEncrypt provides them freely and easily
GCP Down
> policing their marketplace against counterfeit products.

Used products are not counterfeits.
That's not true of the Facebook people I know. They include some of the best engineers I've ever met. (No other connection to Facebook, just a personal judgment based on their externally visible work.)

More generally I find that different people work effectively at different timescales. Some of the big movers in the industry have achieved phenomenal things by focusing on one problem for decades. Definitely true for databases, which is what I work on.
Elation Health | Software Engineer | San Francisco, CA & Carlsbad, CA | Full Time & REMOTE

At Elation we make tools for physicians and their patients that improve the efficiency and fidelity of their relationship, and help to make the delivery of excellent, proactive healthcare possible. We have various openings across the rest of the organization which you can see here: https://www.elationhealth.com/careers/ -- and we're in the process of opening a couple of roles in engineering (not on the website yet).

In engineering our biggest hiring focuses at the moment is for software engineers on our backend team, ideally based in the San Diego area (particularly North County Coastal) - though remote is also an option.

Tech stack is AWS/Python/Django/MySQL/ReactJS. We have a great team full of people that really value working closely with product, customer-experience, and users. Lots of interesting problems to solve!

Feel free to reach out to me directly if you have any questions or are curious! My information is in my profile. I'm doing the hiring in SD and after years of remote and SF based recruiting really interested in meeting exciting people down here (I live in Encinitas/Carlsbad area). I'm always happy to chat about specific positions, the company, or healthcare in general.
Location: Amsterdam (where I live), I am willing to relocate to anywhere

Remote: remote or onsite is fine

Willing to relocate: yes

Technologies: Javascript, nodeJS, React, Python, C# (want to learn, Java is inferior), Objective-C (I am a bit rusty now, I used to know it well)

Technolgies I use as a hobby: R, AppleScript, Bash, Ruby (as a better Bash), Django (for a personal meditation app), Sketch (I doodle), LaTeX, Lisp, Wordpress (child theming is fun), Machine learning (I know PCA, linear regression and neuralnetworksanddeeplearning.com).

Resume: fresh graduate with a couple of freelance jobs that took about a year of work. Technologies were: Objective-c, JavaScript/React, Java/Spring Boot. I was also a bootcamp instructor for a year.

I studied 1 bachelor and 2 masters in IT and one bachelor in psychology.

Email: mettamage@protonmail.com — full resume on request.

I am looking for one of the following roles for the next 3 years at least:

- data engineer

- full stack web developer

- product manager (my psych degree helps here)

- serious game designer/developer (I did a game design master)

- growth hacker or supporting growth hackers (the technical kind, research in users/psychology meets IT)

- digital consultant (digital implementation and transformation)

- in some cases: hardware security or reverse engineering (rowhammer, meltdown, this is a big part of my other master)

I am this wide because of my academic background. I am looking for seniors to guide me and to learn as fast as possible.

In my view this would be my first ‘real job’. In my previous work I had huge responsibilities but I studied then as well.
Larry McVoy was know for threatening employees of companies using BK and developers of competing VCSs [1], so I understand why so many people wanted to keep away from it.

[1] https://lwn.net/Articles/153990/
As I said, disingenuous and dismissive. One can use your framework to justify anything USG or state governments do, under a theory that citizens have assented to a contract by being physically present. Clearly, overall constructive behavior matters.
Sure, I'm not saying they're more difficult, but people here are saying that git adds too much complexity in simple projects. It doesn't, but it lets you expand into the complexity if you ever need it in the future.
> It helps nobody to push a stubborn idea that there is some strict distinction between USG and the S&P 500.

There is a huge distinction. Facebook doesn't have a military to enforce their policies. They might be the defacto town square but it's only convenience and network effects which make that true. If there was enough dissatisfaction with the way they are running things then they could be gone tomorrow. That's not comparable to kind of censorship that, for example, the CCP imposes.
ex-Microsoft, this is not necessarily true.
Managers I knew see changing <2yrs in as not great. Then again, switching orgs is essentially changing companies without a different Company name. Companies that hire >10k engineers cannot be a monoculture imo. In MS, different orgs might as well have been different companies - none of the orgs trusted the other org's hiring standards and made internal candidates go through full interview loops.
'I was a victim of the WhatsApp hack'
Exactly. To make accurate estimates of how long it's going to take, you need to know how the team estimates the complexity of the work that still needs to be done, how they estimated the past, and how much they actually did in the past. In this particular team, with this way of working.

Only then do you have the information to make a halfway reliable estimate. Without that, it's just going to be guess work.
Wasn’t the server load for ssl something like 3-5%? That doesn’t strike me as much of a factor as the complexity involved, especially with the confusion added by eg Thawte hawking their enhanced validation product.
I'm still looking for a sufficiently brief way to make that distinction clear, because it gets misunderstood unfortunately.
The US government has been continuously running a deficit for a long while. I'm not sure what is the significance of $23T (over 22T, or any other number). It's not even necessarily bad that we run a deficit, although perhaps it should be limited to be in proportion of nominal GDP growth.
Does it make sense to look at these figures in isolation? Like its psychologically significant but GDP is also growing and so is inflation. It seems like we would need to look at at least all of those together to get a better understanding of whats happening.

Is this inherently “bad” ?
> Not sure how they can do that in a reasonable way since it is not open source?

They could do the shared source thing, where select people are allowed to see the source after signing NDA's and stuff.
> I also switched to Zsh ...

Wait, how hard is it going to be to keep running Bash?
Gonna risk getting my head put on a stake, but why not just use a GUI git client at that point like TortiseGit/GitKraken/SourceTree?
Or Huawei Watch GT 2 https://consumer.huawei.com/en/wearables/watch-gt2/

Or Samsung Galaxy Watch Active 2 https://www.samsung.com/global/galaxy/galaxy-watch-active2/
Location: Niagara, Ontario, Canada

Remote: Yes

Willing to relocate: No (but open to travel)

Technologies: PHP, Laravel, Laravel Spark, Laravel Forge, Javascript, jQuery, Vue.js, Node.js, HTML, CSS, MySQL, AWS, WordPress, Linux, Vagrant, Docker, Redis, SASS, LESS, Web APIs, RESTful APIs.

Résumé/CV: https://linkedin.com/in/braunson

Email: braunson [at]] braunson [[dot] ca
Absolute numbers like these are not very interesting and quite meaningless. Much more interesting is debt to gdp ratio. Which also happens to be quite high at the moment.
The PineTime is a new Linux smart watch - I imagine a future version could do the basics pretty good. I really just need notifications and a step counter, personally

https://www.omgubuntu.co.uk/2019/09/pinetime-linux-smartwatc...
Yes, I'm referring to a few people I've known who switched to marketing and sales jobs at software companies. Technical credentials (such as work experience, not just school) always make candidates more attractive to sales/marketing teams at companies with technical products/services.
What a fascinating story. I specially enjoyed how he decided to start writing the program that would eventually be called Apple Writer. When people like him or Linus Torvalds decide to write a cool program, they literally change history.
You don't have to own or use any of Google's products.
because literally every one of those kuwaiti fuckers is doing it.

fuck them all, we should have let them burn in 1990.
Well, just to inject a little bit of perspective here -- high absolute or (or even) relative debt levels are not necessarily a hugely bad thing.

For example, Japan has 2x or more the per-capita debt that we in the US do. Their debt is 2X their GDP! [1]

But Japan has a pretty high likelihood of repaying it, so it's not a problem. We also are highly likely to repay our US backed debt (and we have the hidden but dangerous capability to devalue our currency). And add to that the notion that we've been getting debt issued at highly favorable interest rates, so we borrowed for cheap.

With that said, however, as with one's household debt (this is one aspect where comparing with a household is not wildly stupid) -- did we spend it on things that were worthwhile? Are we getting a lot for having borrowed this money or stimulus? Did we spend for future potential in our economy?
Just because we got it cheap doesn't mean it was a good expenditure.

I am inclined to say no. Our borrowing in this last year was pissed away on unsustainable tax cuts, frivolous give backs, and a brute force cutting for the symbolic gesture based on mostly fallacious logic. And when the recession comes, our ammo will have been already spent. I mean borrowed.

And the kids will pay of course, for our midlife crisis Camaro.

[1] https://www.marketwatch.com/story/heres-a-lesson-from-japan-...
dont tell them that they're the problem, because they (and their investors) are making loads of money on positioning themselves as the "solution."
I've done that occasionally, over a weekend when I left my phone at home or something. Doesn't happen often, obviously, but it does have some small number of days of local logging.
Nothing whatsoever. I believe the GP is just scratching their head in confusion as to why this is such a story, because, as you both point out, it shouldn't be.

I suspect this story has such legs because it is about the media. There is nothing the media likes to talk about more than itself, particularly when it is about front-liners defying execs.
Tell them to leave you alone. Have your PO keep the stakeholders at bay if they don't know how to behave. Take advice on scrum and agile only from people who actually know what they're talking about. Everybody else is just amateurs.
The paperback version of my book is out – Design Patterns and Videos Games