skysight-inc/HackerNews huggingface dataset:
I think the best thing you can do to gain some startup experience (since you have some good engineering experience) is to go for a Principal/Founding Engineer role at a company. This will give you a respectable amount of cash and equity such that you will not need to make drastic changes to your lifestyle. This is better than joining an angel-investment stage startup.

However, if you are hell-bent on becoming a technical co-founder, make sure that you bring some other skills to the table. You will need to make sure that you have the resources to pay your AWS bills, be able to hire people and then fire them when necessary. Furthermore, you will need some measure of product skills (because at this stage, you will need to determine the featureset of the products).

So this is why you should go for a PE role, and then if you find the right idea, go for a co-founder role.
With WebAssembly and WebGpu, it might be possible.
It's not the AI that I worry about, it's the people that control it.
Humor is a tool to diffuse emotional tension.

Woke progressives aren't interested in diffusing it, because emotional tension breeds change. They don't want people laughing; they want them angry and out in the streets.

They do have some funny jokes though. Did you hear the one about the guy who voted for Trump because Clinton was going to bring universal healthcare? I hear his GoFundMe for his cancer treatment is coming in a bit short.

Hilarious.
I feel like this is an unfair representation of that comment.

If the actual backend doesn't support that option, it's indeed a problem that the UI offers it, especially if it's causing a bug. The question if it should be supported is unrelated to that, and not really a topic for that unrelated issue. I've certainly had my own bad experiences with Firefox issues, but that's not a good example.
I'm genuinely surprised. What are the odds! Khusi laagyo :)
Parent isn't wrong... technically.

Certificate Transparency exists, solely because any CA can issue an SSL cert for any domain, and use it to MITM via a proxy.

You are trusting every CA out there, not just Verisign. That is the ultimate weakness. Any CA can issue a cert for any domain.

Expect-CT header is the only thing protecting you from a MITM, and it's not even a protection, really, and it's trivial to strip that header as the MITM before proxying to the client.

How do you think mitmproxy[0] works?

[0] https://mitmproxy.org/
This is quite clever. I have avoided wildcards because I have not wanted to deal with the increased spam sent by bots to random (jane@ eve@) or not so random addresses (webmaster@).
I am sure that it is. You're going to have to re-think what a browser is though. I think in the future, most if not all UI is going to be done using JS and HTML, and the native clients will have to make that work.
Thanks, just found it here in Chrome:
chrome://settings/content/cookies

I've mostly switched back to Safari ...so I look forward to getting this option in a decade or so.

In all seriousness, this would naturally fit into the new Safari "Websites" permissions in Settings. Right now cookies, databases, HSTS policy, and local storage are still in the old "Manage Website Data..." window, which would seem redundant now.
On the other hand, being forced to Gab/Quillette means these people get far less mainstream exposure. Furthermore, those on the path to radicalization often see the true spirit of the ideology when the leaders move to more extremist-accepting platform and are able to reject the beliefs.

When reddit banned /r/fatpeoplehate the problem moved around for a little bit, but it promptly died. Or when the white nationalists were forced to move to Voat, their numbers dwindled.
Quillette being a white nationalist publication is either a joke, or the definition has been stretched so far out of shape that it is unrecognizable.

They will publish anything well-argued.
I find it odd to the point of unsettling how fresh and unique XP’s design feels today.
Don't forget his enjoyable and meaningful TED talk on starting a movement https://www.ted.com/talks/derek_sivers_how_to_start_a_moveme...
> It's obvious half the country has questionable morals (or at least values or sense).

My guess is that ~80% of the US believes that this is true.
This is the right answer. I think the popups come mostly from a) an American interpretation of an European law and b) as a way to spite the users while "trying" to do the bare minimum to comply with the letter of the law (which might not be accepted as compliance)

And none of this farce would be needed if sites wouldn't track individual users. Showing ads don't require tracking individual users (and retargeting is frankly BS)
Unfortunately some of live in regions where getting a new job isn't an option. The parent post raises a very valid point which I have observed in companies whose core business isn't IT but have an IT department. You end up having a fair number of non-technical managers who don't understand the intricacies of software development They don't understand that bugs do not mean you didn't test enough or you are a bad developer. Bugs delay projects or require resources and reporting them is likely to make someone look bad so there tends to be push back from IT. It isn't right but it is what it is. Its valuable to be aware of this prepare accordingly.
I believe that is the point.
Yeah, I think they do, actually.

Two things...

Proxies are a thing, and stripping the Expect-CT header is trivial.

Any CA can generate a valid SSL cert for any domain.
I cannot edit the post above, but it was meant to say that I'm looking for new clients in 2020.
You can easily disable that here, among other handy settings:

https://duckduckgo.com/settings
„Woke“ people are not interested in change, because it takes away their purpose.
Only if there's an Expect-CT header, which is trivial to strip.
That's an interesting point of view that ignores the fact many of us grew up in conservative Republican families.
The making of Jim Simons
>Now you may be saying, "I always install the latest versions, so that would mean Python 3.8.0 was installed last since it's newer than 3.7.5". OK, but what happens when Python 3.7.6 comes out? Your pip command would have gone from using Python 3.8 to Python 3.7.

This seems less like a reason to use `python -m pip` and more a reason to endorse languages with saner versioning and less need to sandbox twenty different versions from one another.
I do. Just told someone today theirs was out.
Here is a great map [1] that shows how much each place is offset vs solar time.

Spain is shifted pretty far, but some places are even further offset. Large parts of Russia and China, but also Alaska and Argentina.

Also, since the OP concerns Canada, worth noting that the map shows Canada being more shifted than the US, which I didn’t expect.

[1] https://io9.gizmodo.com/how-wrong-is-your-time-zone-15285708...
> if everyone disconnects autopilot at a certain turn each car will learn to slow down even if they have never encountered that turn before.

That can't be the bar. Full self-driving technology must be able to handle any situation as well as the bottom ~1% of human drivers the first time any vehicle on the road encounters it.
There is a bit of group think though.
I'm a leftist and all the leftists I hang out with have some grubby-ass humour that wouldn't fly anywhere 'civil'. We just don't make racist/transphobic/etc jokes. It's honestly not that hard and this idea of the oversensitive progressive is overplayed and not grounded in reality.
I have seen in the wild at a previous job, a repo with over 200m commits, but, also in the repo, single commits with over 500m lines changed diffs. and git on modest hardware would get through it. slowly, but eventually.
The purpose is that, and that at which it fails. Why do you think CT logs exists? Exactly for this reason...
I like this idea, but many users would find it equally annoying to have to manage this. A machine-learning software which tracks usage would be more welcomed, backed up by favourite status / use of password managers to make a good heuristic.

Just so long as the ML algorithm is open source and entirely personal – having a company decide which cookie is good would be easily abusable.
A tool like this should be running in a browser.

Otherwise, if the method of intercepting the traffic only manipulates the browser (for example a rogue extension or proxy setting you were not aware of), a standalone tool could not detect it. Right?

Also, I would generally avoid any security tools that do not come as source code. Mentioning that you are an infosec guy with 15 years of experience only makes this point hit even harder.
100% agree, I've argued for this same thing in the past.

https://www.reddit.com/r/worldnews/comments/7h28hi/google_co...
I’m wondering why this takes 20-30 days to run all up? Seems crazy for 1M requests. Could one make this a concurrent task and get much greater efficiency?
https://science.sciencemag.org/content/366/6465/628
Bad example. The Klan was very empowered.
"suicidal for most people". You are flat wrong. Read the research. I would point people to Michael Pollan's new book "How to Change Your Mind" if you're interested in this type of therapy.
Surely it's a computer, and not a person, handling triage of bug reports. At Apple's scale, bug reports are easily ignorable until there's multiple.
Would love to have had the Open Look and Athena scrollbars.

Open Look was super cool looking, but awful to use. Athena was (is?) awful looking and lacked any affordances for beginners, but was terrific for expert use.

I am fond of Open Look, and keep a copy of the Open Look GUI Functional Specification (Addison-Wesley, 1989) on my shelf, much as some people venerate the Apple HIG, except that mine is much less useful.

Here's a nice post that came up in a search for the Open Look scrollbar: "Evolution and design of scrollbars" https://pim.famnit.upr.si/blog/index.php?/archives/153-Evolu...
www.hcaptcha.com
www.solvemedia.com

A load of other anti-spam captchas not owned by Google...
My friend, understand the difference between looting and preservation :-)
I think Mohamed Yunus' book on "Building Social Business" would be a delight for most people to read.
JWTs and Cipher Agility Considered Harmful
I think there is something to the idea that car manufactures should bear some of the cost of the risks associated with the vehicles they sell.

When they bear less of the risks to pedestrians, cyclists and the environment, they don't do anything to minimize those risks and even do things to accentuate those risks when doing so will increase their profits.
Why not the brain?
For the purpose of non-aviation people reading a comment thread about drones, it's good enough. I could edit my post and include all the weird side cases about controlled airspace but at the end of the day it's not relevant to the reader.
Life Support Aid- Know the Basics of It and Some Tips
>> All it takes is political will to scale up the same systems that guide robots today and install them onto every highway and main road

> Well, that and a massive amount of infrastructure spend.

And before we put anything close to that kind of money toward autonomous cars, I demand the spending go toward urban micromobility infrastructure first.
Pip is so bad vs rivals, conda is so much better I'm amazed it's not the recommended package manager.
Business and software blueprint for a personal portable medical record
Strict laws can help to fix people who don't want to play by the rules.
Also for postfix: use port 465 for SSL encryption, https://news.ycombinator.com/item?id=21430013

https://tools.ietf.org/html/rfc8314#section-3.3
There is the "Save-Data" HTTP header[0] that your browser can send[1], but the AirPods page doesn't support it (not many websites do actually).

[0]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Sa...

[1]: https://addons.mozilla.org/en-US/firefox/addon/save-data/
Not sure most managers and executives know how much hard work go into actual leadership either.
> If the company you are working for doesn’t value your opinion or insights, why would they be paying you 4x your market average?

I should clarify. My salary is not unique. Everyone who is lucky enough to work there is well paid – unrelated to the stock market. It is privately owned. I have been there for almost a decade and I have some big successes under my belt, but not enough to justify a similar salary at other companies.
i think the discussion on that page shows that « connection quality » shouldn’t be only based on bandwidth to determine which version of the page should be sent.
Progressive downloading of compressed images has been invented for low bandwidth , but no technics exists yet to show a different webpage depending on your data plan.
Multiple Sclerosis. Also, Model S, if you frequent online discussion boards that also like to abbreviate "Model 3" to collide with a very well-known BMW.
It could be better than the current situation. It could give a single popup when you visit a site, and you would click yes/no and it would remember that forever. You would never get a popup for that site again.

With the current situation, there often isn't even a no button! You're required to click yes. And then if you ever clear your cookies, it pops up the box another time.

Additionally people who don't like the popup can simply go into their browser settings and say allow for all sites.
5. useless in the grand scheme of things

"Air tanker drops in wildfires are often just for show" https://www.latimes.com/local/la-me-wildfires29-2008jul29-st...

"To professional firefighters, though, it was a prime example of a “political air show,” the high-profile use of expensive aircraft to appease elected officials."

“CNN drops.”
What I don't get is why pip just happily uninstalls a package that breaks dependencies? It's like, "you had only 1 job..."
Alexa provides a list of the top 1m... but you can also page through the top sites (100 at a time) using their 'top sites' api... and I don't see a limit on that.

Edit: confirmed by aws:
https://forums.aws.amazon.com/thread.jspa?threadID=167457
The problem here is that the popular perception of which ideologies are considered "radical" is swiftly expanding.

The Westboro Baptist Church has been held up as an example of the "radical" Christian right for over 10 years. They know that they are reviled and play it up to keep getting attention. Meanwhile, if you read the stuff that Katie Herzog and Jesse Singal wrote (both are mentioned in this article) - it's clear that they both thought they were not taking positions that are out of the mainstream liberal view of acceptability. And if you talk to people who would not consider themselves "woke" they would find their writings to be very tame as well. This is why this situation is so interesting - these so-called "radicals" didn't begin to consider themselves different until they were suddenly isolated for expressing things that didn't seem very radical at all.
> understand the difference between looting and preservation

british were infamous for their destruction of indian metal art by melting it down for sundry purposes of their army
> It's obvious half the country has questionable morals

Just because someone disagrees with you or has different priorities or ideals doesn't make them bad people. If anything, this says more about you than it does about them.
Why was this flagged? I found this an incredibly interesting view into this 'cancel culture' that I've heard referenced vaguely, but never described explicitly. With an added bonus of getting an up-to-date view on the "things you can't say" in 2019. I would love to see the smart folks of HN discuss it.
I have the same feeling about Vista. I think there must be a Vista Revival one day, as there are for architectural styles.
can't replicate either with firefox 70 even with devtools off and all my blockers off, don't see any animations
Not necessarily a utopia. It could work; if you want an explanation of how check out the following book:
https://www.dropbox.com/s/yd18waixbva1jae/WhatAnarchyIsnt-FR...
Also interesting:

https://tls.ulfheim.net

https://tls13.ulfheim.net
FYI getting a "This job may be expired or no longer being advertised." from that link.
Oof, “democratic rituals” is an uncomfortably accurate description of voting in the U.S.
Storing data in a cookie is not the dangerous bit, it's the intent, the what you're storing that data for which matters.

A browser popping up a prompt saying "google.com wants to store a cookie, is that okay?" isn't enough.

The design of these cookie and enhanced data protection laws is that websites need to spell out their intent. To tell people what data they're storing any why. Yes, you could code that into headers and have the browser relay that information, but that's the stalemate we're in.
No, I don't use that hour in the evening. I work 9-6 and cannot start working earlier because I have to take my son to school and come back home. Sometimes even 9-7 if I take a break to go running or whatever (which in the winter I must do when the sun is very high). That would be after the sun has set (5pm) even with year-round DST. Then I start cooking dinner.

In fact, working from home means that I do not go out at all after the sun has set.
I’ve gathered that this is basically the primary value of consulting.
> thought to be 2hrs 30mins ahead of "sun" time

Spain is certainly ahead by a lot, but the 2:30 is for Galicia which is the westernmost tip of Spain (which is on the same longitude as Portugal, which is in a different time Zone).

For most of Spain it’s less, tough still a lot.
Pip is a powerful but low-level tool, which probably shouldn't be user-facing. It doesn't have a full resolver, locking mechanism, or environment management. Likewise setuptools.

For installing global command-line scripts, I like pipx instead of pip. https://github.com/pipxproject/pipx

For development, I like Poetry instead of pip. https://poetry.eustace.io
yeah, I understand the practical side of the problem and is certainly not easy as you say.
as for issue templates, reporting guidelines etc., they make it even less likely that people report a problem. as the article mentions, even on a project that encouraged feedback it was still not reported that it doesn't run on the mac. so my takeaway is that there shouldn't be any guidelines for issue reporting if someone wants to catch even a glimpse of the real issues. I'd say there should be a good process in line that deals with the issues and asks for necessary information afterwards, so potential reporters are not driven away by issue requirements. knowing this I'd say projects that have issue guidelines hurt themselves in the end.
> Wow that’s messy.

How so?

It sounds like a very reasonable policy -- the person responsible for making the mistake needs to rectify it.

No one's out of pocket -- the double booking was never going to make double revenue, after all. The time / inconvenience imposition is on the responsible party, who also likely has more service industry & local knowledge than the customer.

This policy makes me feel more positively towards booking.com.

As per TFA, AirBNB does that hand-wavey thing where they assert some problems are beyond their competence to solve -- the kinds of problems other sectors and organisations have already got policies and procedures in place to deal with.
That some idiots may misuse their vehicle assistive driving system is different from you having to sign an agreement when you purchase your self-driving car in which you agree to hold the manufacturer harmless and accept full responsibility for [long list of things] that may happen during autonomous operation.
Happens on google.co.uk for me, but not on google.com
Near us, Tyntesfield is great. There is an obstacle course type one down by one of the cafes, then there are three on a trail up in the woods. Some are more structured than others.

We've taken to using NT sites as breaks on long journeys. At a minimum they will have a cafe, and most will have something to give us and the kids a nice break from the car. Its definitely a nicer way to stretch your legs than a motorway sercvice station. The app is pretty useful for this.

They can be pricey as individual visits, but if you go to more than a couple a year, a family membership pays for self pretty quickly.
Fine-tuning GPT-2 for the procedural generation of descriptive text
NYC’s tech boom will turn it into a ghost town
What about installing from source ? conda does not support it at all. For some esoteric python packages which use C++ or Cython backends, it is sometimes impossible to install those packages and installing from source becomes the only viable option. pip is quite awesome for this.
Love that this article is flagged now, too. Maybe it's ironic - an article from NY Times (liberal bastion), "cancelled" for discussing cancellation in a neutral light?
It loads 29MB when loaded on simulated iPhone 6 screen size.
There are whole youtube channels for life drawing. Free. Both with simply models and with instructions.
Thank you. Some people view wildcarding the domain as basically turning it into a honeypot (and using the spam to train the spam filter). I wanted to be able to provide feedback, not blowback, and rejecting at SMTP transfer time is the distinguishing factor. Yes I do eat my own dogfood, and I'm finding that I'm almost using aliases as cookies now.
That seems backwards. Dense cities are where mass transit is a viable alternative to cars. It would make more sense to focus on that in cities and focus on self-driving cars where individual cars are unfortunately a requirement, like the suburbs.

(Ideally we would Upzone All The Things and the vast majority of Americans would live in places dense enough for cars to be unnecessary, but making NIMBYs stop NIMBYing is harder than just making better tech.)
You do not have to be that far north. In Italy, which is pretty much the optimal latitude for DST and also very close to the "right" longitude for its time zone, the sun rises around 8am in the winter, which would be 9am with year-round DST. Schools start between 8am and 8:30am (the latter for elementary school), which would be dark.
A single time zone within a small state, or two or three within a larger state, still has some utility for local events.

But yes, in the age of smart watches, there’s no reason not to skew time by a few minutes every night for a more consistent experience. Using local noon as an anchor isn’t optimal because wake up time will still vary. I argue that wake up consistency with sunrise is the most important feature for humans.
I agree with you in spirit, but, it's Python, so bare metal speed is a lost cause already. You're already supposed to drop down to C for any performance critical code anyway.

In addition, even when people think they know what is going on under the hood, most people are taught how things worked about circa 1992 at best.
We can disagree on flavors of ice cream, and that assertion holds.

If we are disagreeing on whether, say, gay people deserve to be treated as regular people, or whether undocumented immigrants deserve human dignity, that assertion breaks down very fast.
I found out recently that OpenSSL is not just for securing network connection. It has a whole library of ready made encryption code that can be used for other purposes.
The problem I run into most the time is people's egos not believing that something is actually broken.
OT: This title parses strangely. Why are you "in a Waymo" hailing a driverless ride?

Ah, a Waymo is a driverless ride, and you have hailed one. I don't think I've ever seen someone say "Hailing a Ride in a Lyft" or "...in an Uber."
mind you ipsec in AH mode does NOT encrypt packets. ESP (and thus tunneling) is required for packet level encryption.

your encapsulation argument still holds true however.
The problem is that humans evolved to rise with the sun, and anything less is an unnatural stressor.
I wish they would have stuck with Watercolor.