skysight-inc/HackerNews huggingface dataset:
This comment showed as burried for me, which I find odd.
Ah, the ancient and exhausted "if you don't like it then leave" argument has finally made its appearance. How could none of us have realized that the obvious solution to disagreeing with a policy in our organization / community / government is to just silently give up and leave? Obviously a peaceful letter of dissent would be completely outside the bounds of rational behavior!

And besides, if a concerned group REALLY wanted to change things and not just whine they would simply raise billions of dollars to accrue a significant block of voting shares in one of the world's largest corporations to change policy via board action!
>just as all other governments do.

I take issue with this, as the manner in which other state actors enforce their border security do not all involve similar cruelty to the particular manner in which ICE enforces border security.
Yeah that worked very well with Goldman Sachs, Morgan Stanley, AIG, S&L's in the 90's, General Motors, Chrysler, etc. The Eisenhower National System of Interstate and Defense Highways, Hoover Dam, and similar projects were all complete failures. /s
Yep. People fundamentally misunderstand how to use mocks and stubs, and often end up writing tests that test little more than “the function was written the way it was currently written”.

This is the worst of all possible worlds, because a test suite should accomplish two goals: identify bugs and enable refactoring. Tests like these fundamentally can’t identify bugs because they don’t test any behavior. And worse, they prohibit refactoring because any meaningful code change will alter what functions are called and in what order they’re called. So any refactor breaks almost every test, and it’s impossible to quickly tell if something “real” was broken or if it’s just an artifact of poor testing.
Are the politics external when it’s coming from developers discussing things the industry is doing?
Jail time doesn't determine whether or not an act is legal (consider running a red light or underage drinking). In particular, the law you cited above is pretty clear that entering the US to seek asylum is illegal but may be forgiven if asylum is granted. To be clear, these detainees are held under the pretense that they are going to be deported (however they must first be processed). The valid criticism of ICE is that they are apparently detaining US citizens and the detention conditions are unsatisfactory, but it's not a question that it's illegal to enter the US to seek asylum.
The OSHA incident rate is per 200,000 employee-hours, which is roughly 100 people, full-time, for a year.

So for every 100 people that Amazon employs full-time-equivalent in that warehouse, about 26 of them will have a serious OSHA-reported incident each year.
Yeah, the Obama administration was not on the left by any reasonable, world historical political accounting. His hallmark legislation was a Republican think tank healthcare bill from the 90s.
There's a few different threat models, and different mitigations.

We have attackers who:

a) Want to run code on package installation

b) Want to run code on application execution

Restricting packages on installation helps with (a)

I disagree that developers are not attractive targets. If I were to target a typical tech company I would absolutely go for a developer. I'd wait for them to SSH to production, hijack their connection, and start moving around. That's a hell of a lot better than if I attack HR and have to start moving laterally in a corporate environment to escalate.

As for backdooring production services or applications, ala (b), it's a more complex and bespoke problem to solve I think. I think package managers themselves are not suited to solve this problem and it is up to the OS to restrict programs more by default, like mobile OS's/ Browsers do.
You know allowing people to upload libraries with highly conflicting names to existing ones is almost reckless.

There is a bunch of stuff PyPi could do short of full curation that would make this much harder.

A better solution is for languages to provide a kind of "module sandboxing" where modules need to declare the capabilities they need, and the runtime prevents them from accessing anything else.

In this case, the module would have needed to request the ability to make an outgoing TCP/IP connection - and that request should raise red flags for a date parsing utility.
My (and these developers) opinion of GitHub is tarnished by this.

Have you considered the extent to which your opinion is influenced by the long-running political propaganda campaigns designed to villainize ICE as much as possible and discourage hard realistic discussion about solving problems? I'm not saying you have to agree with ICE'd methods or what they are doing, but the border situation is not as simple as political opportunists would have you believe.
Read his papers for interesting ideas out of the mainstream.
Networking, experiencing new things will ABSOLUTELY increase your chances of being successful in life. I've lost count the number of times I've met someone who led me to bigger things at a party/night out that I initially didn't really want to go to. No matter what it is, no matter how comfy that couch, go meet new people. Best way to advance.
Yes, the gadgets are nifty and -- for the time being -- life is relatively swell (for some).

But there are downsides, too -- and the long-term prognosis of what this system holds in store for us... just doesn't look good. And may potentially end quite disastrously, in fact.
https://sci-hub.tw/10.1038/s41566-019-0549-5
If you love YouTube and hate advertising, then Premium is a very easy decision to make. I'm more than happy to pay Google $12 a month so I can have an ad-free experience on my TV, iPad, phone, and computer.

I have both Netflix and HBO-Now as well, but I'm thinking about canceling them, as 90% of my viewing time is spent on YouTube.
Is ArXiv-sanity.com down currently?
It seems http://www.arxiv-sanity.com/ has been down for the last ten+ minutes.
Is anyone else seeing this too?

I tried confirming with one of those "is it down" sites but wasn't sure how reliable it is.

Hope this is just temporary!
Bezos also had parents that gave him a several 100 thousand dollar loan that they never expected to be paid back. He's a product of Montessori and Ivy League education. Definitely not a rags to riches story
Java interface methods do have globally unique* names when fully qualified, but nobody types the full thing out because namespacing is good. It is neither expected nor even desirable for readers or authors to keep resolutions of interface implementations in their heads - that would defeat the purpose of interfaces.

* jar-hell (and dll-hell) aside
I feel like most posters here aren't reading the full article, specifically this paragraph:

> When asked what could be done, Schindler suggests Apple implement a bypass that would allow certified recyclers and refurbishers to unlock donated devices if they’re not reported lost or stolen. And Shindler says 99% of the locked devices his facility receives aren’t lost or stolen. “People don’t steal a phone to then go run and drop it off at their local recycling center,” he quips.

Allowing certified (by Apple) refurbishers and recyclers to unlock the phones - iff it's not reported lost or stolen - doesn't seem like an open invitation to theft to me.
Because the competition in the ARM mobile/SoC vendor area is thin. There are Samsung, Qualcomm and Mediatek plus a few underdogs no one cares about (Nvidia, Intel). Apple is no competition as they don't sell to outsiders which means there is no competitive pressure to improve. Look at the utter shit that Mediatek dares to sell (ever looked at one of their BSPs? I'm surprised there are not daily CVEs!) and yet they're highly profitable.

Plus, AWS/Google are also actively gobbling up silicon design talent to fight Intel and AMD on the server area, which is a problem as designing powerful server cores is way easier than designing SoCs for mobile devices.
It's standard 1/2" drip irrigation feeder line.

I haven't ever removed the dip because otherwise, it would run through an area I don't want to see the hose.
But this isn't really how it works. The chips were getting faster, so you just do it along with the planned uplift changes. Most people didn't buy Athlon64s because they were 64-bit (except for us computer geeks) they bought them because they were the next evolution of a better processor than the competition at the time.
> There's nothing fallacious about spatial reasoning being stronger in males on average

If you read my comment again, you'll see that's not what I pointed out as fallacious. What I said was fallacious is arguing from just that factor to explain women being lower represented in tech. You can't argue something this complex from any single factor.

> Of course one doesn't have to be in the top 1% of spatial reasoning to be a capable software developer, but no one is making such a claim.

The very specific claim by the OP was that women have more difficulty understanding pointers, classes, closures, etc, and therefore are lower represented in tech.

Also, arguing what is needed for the top 1% is irrelevant because we are talking about gender participation rates across the industry.

> And so the gender disparities in spatial reasoning is a relevant data point in this discussion.

And even more relevant is the significant historical cultural signaling that women don't belong in tech. I'd never claim it's an exclusive factor, but to exclude it from the debate, just like excluding any type of relevant logical reasoning capability, spatial or otherwise, is fallacious.
I’m with you on every single point except Face ID. I just got my first Face ID device and it is so much handier than Touch ID. It has worked instantly every single time, and I love not having to move my fingers to the button to sign in somewhere or unlock the phone.

Although MagSafe 2 was garbage and USB-C is an upgrade. The original MagSafe was indeed something to morn.
This is great. There's some interesting info about progress of ongoing projects in the projects section:

When relying on consent as a legal basis to process personal data, companies need to comply with the stringent requirements contained in the GDPR. In May 2018, noyb filed four complaints; in France against Google, in Austria against Facebook, in Belgium against Instagram and in Germany against Whatsapp. The reason was that these major companies adopted a “take it or leave it” approach, forcing their users to consent to both their privacy policies and terms in full in order to keep using their services.

In January 2019, following our complaint the French supervisory authority (CNIL) imposed a 50 million euro fine on Google over the company’s invalid consent mechanisms. The sanction was appealed and a hearing date before the French Conseil d’Etat is yet to be set. All three other complaints (Facebook, Instagram and WhatsApp) triggered the European cooperation mechanism and are still being investigated today. We are carefully monitoring the cooperation between the Irish DPC and its counterparts and are hoping to hear back from our latest submissions in the near future.
The Deep Sea
> Microsoft has started adding short life VMs. No idea if that's good.

The lightweight sandbox VMs seem to be pretty useful so far. It's still so new that I've not seen it used outside of blog posts yet, but that's the nature of cutting edge features only "just" released. (It was released with 1903 in May, which was delayed several months and a lot of businesses still are hesitant to install it.)

Windows 10 has had Controlled Folder Access (aka Ransomware Protection) available as an option for a while as well, which acts like Apple's system of forcing apps to need additional permissions to user directories. It's not quite as fine-grained as Apple's yet, and it is certainly not on by default.

(I turned it on for interesting paranoia reasons on my gaming desktop, and it's been fascinating to watch what gets blocked. Though my paranoia led me to adding Steam folders to the Controlled Folders list, which has especially made it a permissions whack-a-mole because Game Developers are children and games access random folders all the time, use five EXEs where one probably should have been enough, use random EXEs in TEMP folders to call EXEs in Steam folders, games not installed by Steam sometimes try to access Steam folders, NVidia wants to touch everything, etc.)

> Both MS and Apple offer their App stores with more locked down experiences though I'm sad they conflate app security and app markets.

Windows 10 has had sideloading on by default for years now, and supports Win32 apps inside APPX/MSIX. Win32 apps by default aren't nearly as sandboxed sadly (because it is hard to guarantee Win32 apps work as expected when sandboxed), but some sandboxing is better than none. The biggest issue seems a lot less to do with "app market" (you don't have to publish to the Microsoft Store, and MSIX even supports auto-updating for sideloaded apps vaguely "ClickOnce-style") and a lot more to do with "please rebuild your installer to something more modern", which is a hurdle a lot of developers don't want to overcome. (Because installers are terrible and once one is built who wants to rebuild it. Because MSIX support for Windows 7 is still "Beta" with the April end-of-support for Windows 7 looming over everything, and some Enterprises clutching their Windows 7 purses as the new XP...) Who wants extra app security when it means a lot of development effort to repackage your app? (Even if it can be semi-automated from your existing installer.)
That is not what the article says.
> If you're writing a lot of boilerplate in Go, you're either doing it wrong or chose it for something wildly out of its wheelhouse

Like shoehorning a set use case into a map? Or trying to get the list of keys or values in a map without writing out 5 lines of code?

I find golang code to be much more verbose than Java. You find code littered with one off functions that amount to nothing more than map/filter/etc. operations which are 1 liners in Java.
Trees are strongly aligned with environmentalist causes.
You can't make a security feature with a backdoor, or it's not security feature anymore. I'm with Apple on this. They really have no way of knowing that you're selling/giving away the phone, so they can't have the phone tell you to unlock.

That's really on the buyer. They need to know about getting the seller to reset.

Right now Sprint is running a deal where they give you a new phone if you turn in the old one. In very big bold letters, they explain that if the phone arrives locked, they will send it back and then charge you the full price of your new phone and shipping your old one back.

That's the right way for a reseller to handle this.
How is Qualcomm not terminally embarrassed to announce brand new chips that are two years behind what Apple is currently shipping?

If we assume Qualcomm is trying as hard as they can, what's their alternative? Ship nothing? Commit corporate suicide in shame?
Country Keeps 213,519 BTC ($1.6B) in the Treasury
Thanks for the correction, I was too lazy to search for a source to verify my recollection of the numbers.
I don't think your "with that in mind" follows. Corporations are emergent features of groups of humans, and there are things that they just don't do because none of the humans involved even consider them okay for long enough to think of how to do them.

If corporations actually mostly pursued profits, there'd be nothing left but fire.

Rather, corporations should (according to an extension of your argument, which I don't necessarily agree with) pursue the goals of the people who make up the corporation. Except that doesn't really happen; corporations are rather a power-multiplier for those in charge of them, subject to the constraints of the corporate structure that forces those people to prioritise profit over their own goals.

Thus, it makes sense for people to lobby large companies en-masse; they can't use the corporations as force-multipliers, but they can use their ability to threaten the companies' profit sources (and so direct the companies' motivations) to their shared interest.
2019 in review: What just happened in the world of Artificial Intelligence?
Whoops, yes I did. Updated! Thanks.
I’m interested in the fact that “normal” is a 1 in 25 chance.
hire a hacker cheap : https://www.hackerslist.co/how-it-works/
Those who need null-checking can use @Nullable @NonNull annotations with static checkers. I've found Idea pretty good and it'll work very similar to Kotlin. Some popular libraries already annotated their interfaces.
Well, I'm getting a little sick of Apple locking the actual owner of the device out and then telling us to go talk to the phone company who has no clue what Apple is talking about then fax in some documents that might or might not get Apple to unlock the device. The thought of this psychosis being brought to the Mac side of the house is just painful. I can only imagine how a non-technical person feels when their phone rebels on them and they aren't anywhere near an Apple Store. The last phone we had problems with had to be taken to a store some 400 miles away from the place where the person lived because a couple of weeks of BS phone calls didn't do it.
They don't care, but they do care if you lie. I don't care about someone's degree either, but I care about ethics. Imagine someone that can't be trusted working at any of the FAANG, what sort of damage can they do?

Do you want someone reading your Facebook message because they can, or your gmail, or accessing your AWS resources? Granted these should all be locked and have strong audit trails from a system perspective, but there's always someone with "access" and you need to trust them.
And you get that code by giving developers hardware to run it on. Outside of some hardcore early bring-up guys just about no one develops software on models and emulators.
Ask HN: Storing and processing less than 1TB of unstructured data?
Many HN folks deal with data problems, so I thought I'd ask: if you had to store and index less than 1TB of unstructured (plain text) data, what would you use?

I have a bunch of text files and HTML pages that I'd like to dump into something and then be able to search over it, maybe even be able to find relationships (common terms, phrases, etc) between the various docs. I've heard of things like hadoop, but that seems to be overkill for the amount of data I have. I'd also like to keep things as low-cost as possible as this is just for personal use. I've looked at a few of the cloud providers but am honestly not sure what I'm looking for, so I find myself walking away more confused than when I started.

This seems like an easy problem, but for whatever reason I'm getting wrapped around the axle on it.
Yes you are right, it is an excerpt from one of our patents. I completely agree that it is very confusing as a caption, and I've taken it out. Doing it in a hurry didn't help. Thanks for the heads up.
"Avast! did much better"

You mean the company discussed in the article?
This "fact" seems to be derived from your observation that your daughter doesn't have an appreciation for counting. From that observation, you've concluded that "she mustn't like it because she's a girl". Please tell me you know how lazy this reasoning is. I'm a woman, and I never liked counting or arithmetic. Now I study electronic engineering.
Most places care about results. If you get in and do the work correctly I don't care so much about your background.

However for things like medical doctors, we need more care. Most people reading this could successfully be a medical doctor for a time: most people know enough to fake it and most problems are either obvious (or the right tests are obvious and from the results...) or go away on their own. You might not give the best treatment, but you can come up with something that is "good enough". However eventually (a few days) you will come across something the the average person doesn't know but a real doctor would.
Full disclosure: I am the author of the Wikipedia essay "Wikipedia has cancer". See https://en.wikipedia.org/wiki/User:Guy_Macon/Wikipedia_has_C...

There are a huge number of trolls and vandals who would love to be able to avoid being blocked by using a VPN. Wikipedia has to balance the need to stop them with the need to let legitimate VPN users edit.

In May of 2018 I posted a request for Comment and got a clarification on who should be granted IPBE.

See: https://en.wikipedia.org/wiki/Wikipedia_talk:IP_block_exempt...

The result of that discussion was:

:It's likely safe to say that administrator judgement on a case-by-case basis can decide whether the provided justification constitutes a legitimate need and whether that need is sufficient to grant IPBE.. it's pretty clear that the community at large likely also doesn't want it to be routinely granted, for lack of a better phrase, just because someone wants it and could hat-collect it. Someone should likely, for example, actually be affected by a block to request it and/or someone should probably be able to explain their need for the additional layer of privacy rather than just, 'Hey I want IPBE because I said the word privacy.' "

That was the decision of the Wikipedia community. If you think that decision was "silly" you are free to post an RfC and see if the consensus has changed.
What's interesting is that Carbonite and OpenText were in the same news release [1] just a year ago about consolidation in the cloud space.

[1] https://techcrunch.com/2018/02/14/consolidation-in-the-cloud...
Still doesn't answer why some Apple services have granular control and others don't. The implication in offering the controls is that you could control how the phone uses location data. Excluding some services from the controls negates the value of having controls at all.
Pirate Videos
It's gone now.
It's hard to fight the biggest cheaters, because they have lots of money and can afford lawyers. When big tech companies and billionaires get to avoid taxes with stuff like tax loopholes and offshore nonsense, you have a lot of sympathy for the smaller guy stealing a measly 100K.
I could not find any link to github/download/trials... any ideas of how can I try this language? or is this just vaporware?
Companies do that to muddy the waters while also pushing policy that punishes people for reporting “real” injuries. Also these are lost time accidents. They could not have been previously hidden.
> If you have lots of click-happy family members, 3rd party antivirus is a must.

I HAD lots of click-happy family members, but as soon as I stopped fixing their computers and just formatting them, they stopped being so click happy.
I don't think it is that person in this case.

The gentleman behind the video talks about it here

https://www.bbc.co.uk/news/av/uk-england-bristol-47625284/mo...
It's a chicken and egg problem. No serious gamedev company is going to invest in code that is capable of taking advantage of new stuff when there is not a single one device on the market (and the issues of the first generation known and work-aroundable), and no chipmaker is going to invest into radical modernizations if there is no demand.
You're obviously absolutely correct. Thanks for the correction.
Transcript: https://www.npr.org/transcripts/783303277
Show HN: Shdoc – Javadoc but for Shell Scripts
It sounds like you're describing snap packages. Is that accurate?

That mostly works for whole applications. I'm not sure how to apply it to libraries for developers though. Especially ones that would get installed in userspace, like these python packages.
I don't mean to be argumentative but I think this example is worse than that, as are most clickbait heds.

It intentionally misrepresents the truth to get you to click. It is designed to create a false picture in your mind. That to me puts it right up there alongside the worst of the worst, particularly when coming from one of the biggest journalism organizations in the world.

[J-School survivor -- apologies if I'm a little touchy on the subject.]