skysight-inc/HackerNews huggingface dataset:
The comment your replying to said they would be willing to pay $1 a month for a social network, so there’s definitely appetite for paid social networks, but $20 a month is understandably a crazy price.
One thing that has helped me a lot with monitoring is custom application-level metrics.

If you have a good idea of the usage patterns of your service, create metrics backed by the patterns. This can help you find things that CPU/Memory will hide.
Tell HN: Ignored after submitting Invision billing info leak to Bugcrowd
As the title says, I submitted a "bug" in Invision to BugCrowd that I thought was pretty important to fix. It "leaked" part of the user's billing info along with a bunch of other data on nearly every page you visited. So, if someone is/was sniffing your traffic, they can get your payment method info in plain english.

Long story short, after submitting, we went back and forth and BugCrowd refused to acknowledge that this was an actual vulnerability and did not pay out, despite me not even submitting the bug in hopes for a payout. I just wanted Invision's users to be safer online while using their service.

How do we - as a technology community, or even furthermore, developer community - deal with situations like this?

Note: I am disclosing this publicly as it has now nearly been one year since my original submission, and the bug remains.
It's like those people selling Firefox on Amazon for $50.

Yeah Firefox is worth $50 if you have to pay for it, but it's still scummy for a third party to sell it like that.
> Dictatorships rely solely on force.

Not necessarily. Some dictatorships do enjoy genuine support. (Obviously they make it easier for themselves it by controlling the media etc.)

> There’s not nearly enough police in the US to quell a rebellion of the people if they lost faith in Democracy.

By the same token it's also possible to topple a dictatorship. At some point even your security forces will say "no". A good example would be the failure of "Plan X" in East Germany, when Stasi agents boycotted the orders, since they realized the cause was lost anyway.
I don't like this at all. Having to rely on futures::join! means that I don't have the flexibility to control the execution of these things unless Rust adds that specific utility, right?

In JS, for example, the `bluebird` library is a third party utility for managing execution of functions. You can do things like

const results = await Promise.map(users, user => saveUserToDBAsync(user), { concurrency: 5});

And I pass in thousands of users, and can specify `concurrency: 5` to know that it will be execute no more than 5 simultaneously.

Implementation of this behavior in user space is trivial in JS, is it possible in Rust?
The question at hand is, are you? You were the one to say he shouldn't hold a patent of he's not personally on three company manufacturing the product ... at least if you weren't saying that, could you break down what you were saying.

It seems like you're happy for corps to hold patents and use third-party manufacturers but not for individuals to do that?
Good article about this:

https://www.newscientist.com/article/dn11652-climate-myths-c...
Whether or not that should happen is completely uncorrelated with that reporter’s question.
> Is it not more honest in a way if a politician or a criminal accepts that he can not do truth justice, and proceeds with the sausage making?

No. It's not better. That way lies Russia.

If you already believe all politicians are liars, how is it at all helpful for a politician to tell you something you already know -- that he or she is lying?

Postmodernism is poison. Don't give up on the truth.

Even if it were true that all politicians play loose with the truth, there is an enormous variety to the spectrum. Some dodge uncomfortable questions. Some make unrealistic promises. Some quote out of context. Some exaggerate their accomplishments. Some make things up out of thin air.

Some politicians take none of those steps. We tend not to reward them for it. But an enormous number of politicians will not take that last step.
> Nobody doubts that the C64 was the greatest selling single computer model of all time

The most sold computer of all time is probably the iPhone 6, with 220 million devices sold.

Edit: wow, people feel very strongly about this! :)

I've been a proud c64 owner (and programmer) myself. It was more than anything else to point out that smartphones are personal computers, just very "evolved".
Keep in mind that the current release only brings an MVP of the async/await feature to the table. The two things I've missed are both no_std support and async trait methods, but there are reasons these haven't been completed yet. That doesn't mean they won't be available in the future, just that the team has prioritized to release a significant part of the feature that many will already find useful.
My recommendation is hit dice / indeed / etc. Look at jobs in the area. See what stacks are popular. Each locale I've worked in has it's own tech eco sphere. So what may be popular here may not be somewhere else.
This is a major milestone for Rust usability and developer productivity.

It was really hard to build asynchronous code until now. You had to clone objects used within futures. You had to chain asynchronous calls together. You had to bend over backwards to support conditional returns. Error messages weren't very explanatory. You had limited access to documentation and tutorials to figure everything out. It was a process of walking over hot coals before becoming productive with asynchronous Rust.

Now, the story is different. Further a few heroes of the community are actively writing more educational materials to make it even easier for newcomers to become productive with async programming much faster than it took others.

Refactoring legacy asynchronous code to async-await syntax offers improved readability, maintainability, functionality, and performance. It's totally worth the effort. Do your due diligence in advance, though, and ensure that your work is eligible for refactoring. Niko wasn't kidding about this being a minimum viable product.
Couldn't you just pass in the (other) borrowed field as an argument for the function? If you need it to work without adding the argument when called outside of the class, you could overload it with a version that borrows the field and passes it to the version that takes the field as an argument, right?

I'm newish to Rust, so this is just an intuitive guess. Please let me know if I'm wrong.
'Unsinkable metal' inspired by diving bell spiders and fire ants
If web dev isn't viable, what is?
I think you are splitting hairs a bit, but even so, religions keep getting reinvented all over the planet for millennia so far, which suggests it's an inbuilt tendency.
> futures are tasks run on some other thread.

This is usually false, in Rust and elsewhere. Futures are tasks that run on whatever thread is scheduling them. They are an even lighter-weight version of green threads/fibers/M:N.
Patents as a thing in and of themselves are of dubious value, arguably negative value. Patents documenting inventions might be better, but patents without the inventions seem like a huge part of the problem with the patent system.
I haven't thought about this before - however someone having someone - anyone - they trust and feel comfortable talking to when they feel the need is better than having no one, no?
JavaScript does not automatically start the tasks. It executes the function if you...execute the function. If you just want to pass around something with deferred execution, you can just pass the function around, or wrap it in a closure.
The title is way off: he's talking about contractors, not consultants.

Short version:
Consultants tell the client what to do.
Contractors are brought on to do what they're told.

The advice in the article is a lot about "do you need someone do to ___ task" or "are you hiring an FTE, and could you do with a contractor instead" and that's contracting, not consulting. It's still valuable advice, but you don't find consulting clients this way.
About time. I have been working on a similar problem ever since I found out about the Saudi agent that was uncovering twitter user identities to the royals (https://www.nbcnews.com/tech/security/saudis-recruited-twitt...). The main idea is to have zero knowledge for social graphs (both the connectivity and communication). The product behaves like a newsgroup clone with subscriptions and threads featuring zero knowledge (for host i.e. me and any other parties not subscribed/authorized to the topic).
All it takes is plausibility to make the leap palatable to a large number of people. In the modern day, an equivalent would be economics.
One thing about the wild west of VR is that even if one single game solves the motion sickness aspect there are dozens more of first time developers who through ignorance or lack of care will create games that cause motion sickness.
Close, the sw design decisions involved, "Placate the boss:"

> A 2018 report from Business Insider's Julie Bort suggested a possible reason for these puzzling design decisions: the team was preparing to give a demo ride to Uber's recently hired CEO Dara Khosrowshahi. Engineers were asked to reduce the number of "bad experiences" experienced by riders.

Engineers violated ethical concerns, IMO, seemingly compromising safety systems at the perceived need to appease leadership.

Unethical behavior of sacrificing safety to appease a superior is why industries are regulated by government / citizen-representative agencies.

It is time to regulate Uber, apparently, now.
You can say that about everything (except maybe nuclear) right now. This morning I had a discussion with someone on Twitter about windmills, and he said "yeah but they're still manufactured with carbon based processes, cement and steel are made using fossil sources".

Hydrogen production can be clean though.

https://www.cleanenergywire.org/news/hamburg-and-fukushima-c...
Derren Brown is in a weird space for me. On stage, he mixes his very heavy skepticism with other claims of pseudoscience, and the two can be a bit muddled. He does always say that what he does is a trick and "honestly dishonest", but obscures how he does it. Off stage, he rails against any thought that things like NLP or subliminal suggestion works, but people might not be aware of that.

I don't doubt that at least a small portion of what he does is very similar to what the author of the article describes, with cold-reading and just a good understanding of people, but there's plenty of traditional stage magic with it. I also don't doubt that he would never go on stage with a trick that couldn't be performed correctly 100% percent of the time.
Not at all. I've got an air-cooled 1920X, which works just fine. Noctua makes good fans.

The downside is, a fan capable of cooling a 200W CPU is going to be huge; mine only has a few millimeters of clearance, and that's in an EATX case. AIO water-cooling is easier to fit.
Rubber ducks don't charge $50+/hr though.

They aren't quacks!
Yep! There's a team working on that in the Netherlands that I'm following: http://aerodelft.nl/project-phoenix/
I believe ginormous agglomerates of money and power backed by predatory (and probably with criminal intent) capital investors, with no other ethics than make money in any possible way are the root of all evil, politicians are just elected representatives of the people and live only a few decades.
I wonder if that's a security benefit, too... I would expect that KVM equals more attack surface, and direct to the host kernel at that. Now, weighing likelihood of exploiting KVM through qemu vs qemu through TCG (or whatever)... I'm not qualified to asses, and probably depends on your threat model. But it sure feels good if you can run qemu with no special privileges.
Probably the best way to cut air travel pollution is with a combination of high-speed electric trains between all major cities (make it convenient to get around without flying) along with a ration book for air travel - everyone is allotted one trip per year, second trip has a surcharge, third and subsequent trips have massive surcharges growing to astronomical numbers.

The average person does not fly in a given year. Those that do fly tend to take no more than one trip. A very small percentage of frequent flyers account for the bulk of air travel. An explicit rationing system would allow "regular" people to still fly occasionally and would have huge benefits for cutting air travel overall while impacting only the frequent flyers. People would be forced to ask if they REALLY need to fly out to NY for that meeting.

The boosts to the VR/Skype/virtual presence/hologram/conferencing field would be enormous.
Since a big chunk of the power is expended on takeoff, the ideal would be to drop part of your battery then rather then waiting until after landing. But either way, you're stuck with the significant complexity and expense of having to prepare a parachute and landing gear specifically for the battery on each flight, plus having to collect and charge those batteries.
Not the parent, but I've been keeping my eye on https://github.com/Nemo157/embrio-rs
Alternatively they cost a lot and reduce flexibility (want to change your train fleet / door configuration?)
I am a newly hired backend web dev for a post-IPO tech company. I was hired to use python and java. I have never used either of these languages before I started this job. My total comp is about $275k/yr. Prior to this, I have about 7 years of experience with ruby and some JS.

As long as you know a programming language, you can get a job like mine. Many companies could careless what "tech stack" you know.

edit: fix years of experience
Free code camp is great. You’ll learn all of the foundational skills that you’ll need to get a job and to continue learning anything else that they didn’t teach.
A lot of the impact can be mitigated by building fish pass channels, building new habitat such as compensation channels, and controlling the rate of change of water levels.
> Religious upbringing or being indoctrinated into not thinking for yourself

This is a pretty strange claim to me. I definitely agree there are some religious strands that are anti-intellectual. But then there are Augustine, Ambrose, Thomas Aquinas, John Calvin, Francis Turretin, John Owen, etc., whose works most people are simply incapable of grasping, and fewer still can equal. Many of us are trained with these intellectual giants to show us not what, but how, to think.

Are you aware of these great thinkers and their contributions to your thought life?

To pick a random example among many, our concept of personhood relies heavily on a theologian named Turtullian, before whom person (Latin, "persona") merely meant an actor's mask (i.e, the role one plays). Tertullian explored the enduring "substance" of a person, regardless of what role they play in life -- concepts we now assume as a given, but were hotly contested at the time.
Tracking the Sun [pdf]
I think the rise of lies has little to do with humans being hardwired to resolve questions using emotions over reason. We prefer lies because we want a complex world to be simple, predictable, and manageable. Obviously it's not, so the only way that powerless people can believe their lives aren't spinning out of control is for authority figures to tell them what they want to hear: 1) every problem is simple and 2) a simplistic solution will fix any problem and return their world to the perfect Eden they believe it can and should be.

Happy fantasies are sustained only by lies. That's why we prefer lies.
That's how it is implemented under the covers, it uses the nightly only generators feature which builds a state machine of the entire future.
Absolutely; witness the number of people who don't participate in organized religion but have some kind of ad-hoc personal practice. Or, better, notice how many people (I'm one) continue to entertain small superstitions or borderline-magical habits even while, if asked, they'll say they know they're ridiculous.
Well, there is "traditional" and then there is "traditional".

To start, I think it's a mistake to approach VR application design as "this app, but now VR and immersive", whatever the app may be. It might get better in the future, but for now there are too many compromises for the user to start your design process in that way. VR requires a bottom-up rethink of what you're creating. If all you are creating is "X but in VR", then you're not actually adding any value for the user, while simultaneously asking them to commit to the economic, ergonomic, and context-switching costs of entering into VR.

I am extremely skeptical that the first-person-shooter will ever be successfully ported to VR in such a way that it will continue to be of the same mainstream interest that it currently has. I see it as a similar issue to how the Adventure genre went from being the one of the most popular to an extreme niche with the advent of 3D graphics.

I think FPSes are popular on flat-screens because they specifically aren't realistic. Real combat is the most grueling thing one can do, basically by definition, because if you don't try harder than the other guy, you die, so you have to try your hardest and hope it's enough. The mouse-and-keyboard or gamepad system with a stationary screen completely removes that issue. And while I enjoy FPSes on flat-screens, I've personally found the experience of simulating killing people in real first person view to be psychologically disturbing.

I play FPSes strictly single-player, as I can't stand the other people invariably get paired with in public multiplayer, which I think we all know is a very common problem. If VR could kill off the FPS genre and cut out a huge swath of the most problematic portion of the gaming "community" (this issue is why I always weasel quote the word "community" when referring to gaming), then I think we'd all be the better for it. You don't see a lot of GamerGater's complaining about "SJWs" in the context of strategy game releases.

So there are very significant technical and ethical reasons why I don't think we should even try to be porting FPSes to VR, and instead focus on revisiting old genres and discovering new ones.
"Our mobile app is coming to iOS and Android devices with all new amazing features."

If your entire business centers around "one click"... then what features would that app even have?
Font so big that you have to zoom out to read anything.
I imagine I'd err on the safe side. If the screen has touch functionality (includes laptops with touchscreen), then don't do actions on hover. Is there a way to reliably detect the existence of touch functionality through the browser?
Makes sense. It looks too bulky, and not slender enough.
A good therapist. We also have therapists that exist to maximize billable hours, and build whole theories of practice around it, like 40hr/week ABA therapy.
Everyone's emissions are down due to manufacturing slowdowns globally. If you're willing to select a narrow set of data points as this article does, then you can draw any conclusion you want.
Not sure what to make of this statement. Believe what you want (good for you if it seems to work), but it sounds a bit like you're overstating the impact of the placebo effect.

a) It works best, when doctors take their time to prescribe it, even if you know it's a placebo. There are studies about two groups where one receives a placebo and the other a placebo and a 10 minute talk. The latter had better outcomes.

b) The placebo effect works best, if used with symptoms of pain. This is the most-studied use-case for placebos. With a virus infection like a cold, not so much. See c)

c) Supplements like vitamin C generally speaking don't seem to really help when a cold is coming. As long as you have a healthy diet, supplements aren't required and don't really have a positive effect on your health. Maybe some stuff makes you feel slightly better, but it doesn't make the infection go away.

d) Not every cold breaks out. Sleeping helps a lot.
I'm in two minds about this.

1: Yeah, and fixing that is what science is for!

2: Oh, I'm quite aware that as a human I'm a big "bias machine", and I wrote that a bit tongue-in-cheek.
VR for Google on Android is still a tech problem. With Cardboard, the tracking fidelity and update rates never met the lowest bar required to have a good experience.
"Genetic bottleneck"? Really?

Certain people do tend to have an easier time with skills that make it easier to be a developer, but there is a VAST untapped potential of people that think of our work as "coding" and assume they're unable to learn. We really need an influx of people with systems thinking and other "high-level" abilities—development skills are required, but not the deep technical abilities our field has traditionally prized.

I've worked with plenty of "genius" types who can write advanced algorithms with lightning speed, but aren't able to see their work in a larger context—nor able to explain to others what they're doing. And I've worked with "normal" people (usually with an oversized dose of Imposter Syndrome) who are so much more effective because they understand the why as well as the how, while also being better communicators.

And let's cut out the IQ bullshit until there's a proven link between IQ and ability to deliver business value.
> Why does Github automatically redirect back the 2nd time without asking the user to authorize again?

Other comments here seem to disagree with this, but I think you are correct. In all of my applications with OAuth, I always ask the user to confirm, even if they already authorized. I figure that user should be very aware that they are authorizing a 3rd party.

Now I've never actaully seen another system that worked this way (as was pointed out), but I think they are just doing that for user convenience without realizing the security implications.
The Milgram experiment is problematic, yes. It's the most narrative-friendly, but there's an enormous body of work on this question, and it seems largely to point in that direction. (Google Scholar claims 819,000 results for "confirmation bias".)
For a big job market, Javascript(browser/node.js), and a database (postgres).

But more important than the "tech stack" is the fundamentals, what is your background?
It's business insider, what did you expect?
Okay, fine. I will try for Elixir, Phoenix Live View and as little JS as possible and see how we go.
Importantly, those cities aren't significant emitters.

It is easy to promise little to no change.
Just in case you aren't aware of it, "ccache" helps with this, and you might find it trustworthy enough for your typical weekly rebuild.
where do you live that you make 275k/yr with 5yrs experience??
> I'd say that's absolutely the scientific, empirical approach!

Not at all.

The scientific approach would involve a sample size greater than one, double-blind studies, and at least one control group. All of which you obviously can't do for studying an individual. However, not being able to do those things does not suddenly make this approach scientific nor empirical.

More importantly, it's very difficult to tell whether it's actually helping. It may be helping her in the short-term, but could be severely hurting her in the long-term [0].

As OP stated, they are not empowering the friend with tools to fix their own problem. Instead, they are clearly trying to promote this learned helplessness and dependence [1]. Sadly enough, it sounds like external dependence is the very problem the friend is trying to solve.

Basically, they are substituting the friend's problem with a different problem in the short-term, which will likely compound with the original problem in the long-term.

Yes, religions can help, but that's not guaranteed like a lot of religions would have you believe [2]. This scenario is a perfect example.

[0]: Give a man a fish, etc.
[1]: I realize psychologists are incentivized to do this as well, but a) I'm talking about in this particular case, and b) that's at least the intent behind the laws and regulations for having a medical license.
[2]: Including atheism.
Putting Rust in the Kernel with EBPF