skysight-inc/HackerNews huggingface dataset:
Agreed, however the idea that because [expensive boutique firm] was consulted on X means that now the organization has no choice but to defer to their [insert maniacal conspiracy purpose here] recommendation doesn't pass the sniff test.

I agree that there is pressure because rates are high and there is a social penalty for being wrong at high expense in public organizations, but that does not mean that by being in the door suddenly the only responsible party is the consultancy because "who could ever say no to a Harvard MBA!"

I also agree with the article's thrust about transparency and accounting for such a global org to provide a good check on what is happening. I also agree that to manage successfully you have to have enough people on staff to adequately advise these efforts and help sort the good ideas from the bad. That said, the article didn't dive into WHO operations, just the fact that they hired consultants.
They really seem to be banking on the idea that no one will be able to stop them from chucking all of the CD's by the end of December, and then telling them "There's nothing we can do now" if they're hauled to court in 2020.
youngest is within a 500 year window around the date of the composition of the Psalms (it's psalm 90)

https://en.wikipedia.org/wiki/Psalms#Origins
We actually aren't using the accessibility data from the Places API, we are collecting and displaying custom data that is provided by users (detailed ratings, reviews and pictures from regular users, and highly detailed building assessments from trained users).

We only need the places API for having a comprehensive list of nearby places. Other services had too few places in general, but didn't necessarily lack information about the places that were available.
Not OP, but wrt to enterprise apps, SameSite protects from CSRF even on IE since June 2018 update. https://caniuse.com/#feat=same-site-cookie-attribute
This staggered price jump into luxuary goods land that Apple has been leading seems really weird to me. And not very sustainable.

I wonder how a Steve Jobs-led Apple might have managed this issue (of Apple being asked to increase their revenue by some relative large factor each year).
I only first heard about this company earlier this year, and was pretty excited because they were the only way to buy DRM-free lossless, CD-quality music at a reasonable price (without having to ship and rip an actual CD). But I was concerned that their business model was unsustainable - keeping an inventory of millions of physical discs is a big ask.

It's surprising to me that there is still no iTunes-like service that just sells CD-quality audio. Sure there is HDTracks, but their price is way too high to be reasonable (usually double the iTunes price, or more) and their selection is pretty limited. Even Amazon's music store, with it's "Auto-Rip" feature when you buy a real CD, only gives you 256k MP3s. So for now, the most reasonable way for me to download FLACs is to torrent.
Can you please not use allcaps for emphasis, even when commenting on caffeine and amphetamines?

This is in the site guidelines: https://news.ycombinator.com/newsguidelines.html
Is there any such thing? I don't know of any cloud service provider that offers unlimited bandwidth. There are very few providers who could handle five billion connections per day in the first place, regardless of bandwidth.
This is why software engineers should also study some humanities.
>If I were going to say, fire 20% of my staff, i'd want a neutral third party to come in and evaluate that decision before I just went off and did it too.

I think you have a queer idea of "neutral".

Do you call the consultancy firm telling them:

1) I don't know what to do, please tell me what I should do?

2) I know that I have 20% people that I should lay off, what do you think of this?

3) My personnel costs are too high, how can I solve this issue?

Expect as a result:

1) Some bogus advice about marketing and growth AND some apparently good, reasonable, data and very good looking graphics leading to a suggestion to reduce personnel by 10-30%.

2) Some apparently good, reasonable, data and very good looking graphics justifying a reduction of personnel by 20%.

3) Some apparently good, reasonable data and very good loking graphics suggesting to cut personnel by 30%.
For scenarios like this, where the hardware is untrusted, Yubikey type devices are really the only solution (where the device can present as a user input device, and provide the necessary string secret). Everyone else can use a password manager.

EDIT: If you're on an untrusted device, should you really be putting secrets into it? Maybe not!
If you have malware on your machine you already lose everything.
I'm surprised that Palantir isn't even mentioned in this article.
Mixed Interactive Debugging of Dynamic Languages and Native Code
Understanding How Customers Interact with Your Business Can Drive More Sales
Twitter wants to decentralize, but social network creators don’t trust it
Every Django/Rails app with any significant business complexity I've worked on has been quick to start but becomes more and more difficult to change over time. The reason Rich Hickey's "Simple Made Easy" talk hit so hard for me was precisely the pain from working with Django apps (and Rails to a lesser extent).

It's nice to get started on a project quickly, but often that quick start is purchased at the cost of a system that is tied together in such a way that it's very difficult to change. Human beings naturally prioritize short term benefits over long term benefits. But developers have a responsibility to their employers / clients not to pick something that makes the dev's life easier in the short term by significantly raising the cost of adapting to changing requirements in the long run.

My life has been a lot simpler since I've moved away from Django to Clojure. It's less evident in weekend projects or in the first few months of a project. But I never find myself saying to a client request "unfortunately, the way Django works, it's hard to [retroactively produce reports/get the state of the application at previous point in time/fix application logic then correct a corrupted table/upgrade just by bumping version numbers/use multiple databases/not systematically overwrite data/etc]."
If Google can show that the lifted lyrics come from LyricFind, does that get them off the hook?
Teach prisoners how to code https://thelastmile.org/
I’ve noticed this actually. Sometimes I look up lyrics only to see them incorrectly transliterated on Google’s search box drop down. So I click through to genius and see the same error.

But other sites have a different transliteration.

I thought it was just them exposing the content from genius, the same way it works for weather.
Thank you, I was about to comment it's not a service it's a product. And frankly this has always been the case they were just more subtle about it in the past.
Sigh. @Sideburns edited their comment -- changing "error" to "error that you describe" -- after I replied to it.
I have been the foreigner using an unfamiliar terminal. Since it was a cruise to Vancouver, my cruise travel agent recommended I use a cruise message board for that city. I thereby got info on the whole range of options. Plus of course we could have used the cruise line's transfer (i.e. big ole bus) from cruise ship to airport. We hired a car and got a description from the driver of the places we passed through. Thus I learned to use such message boards as a starting point. Plus I learned to have contacts.
I'm very happy that medical data can be transferred digitally some places though. It's taken 6+ months to transfer records when moving.
Fascinating that nowhere in the article is it disclosed that the publication is owned by a competitor of Yang.
Nothing "1%" about this, it's basic business PR.
There's exceptionally few things I wouldn't do for enough money to retire and take care of my family comfortably for the rest of our lives.

I assume a lot of people think like that.
i am curious what percentage of the materials could be considered rare. it seems like most people with rare material wouldn’t send it to a service like this.

another thought...how many of those CDs came from columbia house ;)
People said the same thing when Google Apps (now G Suite) dropped the free trier. I didn't notice anything happening.
The difference between physical goods and service is the cloud has a copy. One does not lose own copy of the data when service goes bust, and one can use multiple cloud providers for redundancy.

But in this case, I think ToS are insufficient, unless backed by physics - specific guarantees and allocated (escrow) funds, or insurance, for example, to purchase the replacement.
It might be easier to get someone to build you a bookmarklet that uses JS and puts an input on the page.

Do the tools you're using (webflow) not let you put any custom JavaScript on the page?
While I haven't taken the leap to using a JWT in any of these cases yet and am a little bearish on them, I do also feel like the baby goes out with the bath-water, here.

Nothing about adopting JWT says you can't still use a full auth check for state-changing endpoints, and use a stateless session to shave some evaluation time off of frequent read-only requests for data that isn't terribly sensitive.

You probably shouldn't do it lightly or prematurely since it makes it harder to reason about authentication, but I think it's worth considering whenever you're optimizing.
Yeah, I should figure out how to test the entropy of this and add that to the site.
Palantir does not build surveillance technology. They build data visualization technology. They build tools to let organizations better view and correlate between the data they collect. This could be considered to be adjacent to surveillance technology, but the company does not in fact built surveillance tools.
The skill of making music well enough that I can trust a machine to emulate my style is unfortunately absent in me. Your response is not only patronizing but also loaded with false premise.

It's also apparently wrong: https://magenta.tensorflow.org/datasets

Thanks for your contribution.
It's time to retire lena from computer science
I also got a broader message from this: there is a whole industry of services aimed at only the wealthiest 1%, and you don't hear about it. We're starting to live in a new class society, and for now the new nobility wants to stay out of view.
If I worked at Bloomberg, I'd be pretty upset about Mike Bloomberg's campaign. It really undercuts their reporting, even if everything in this article is 100% correct.
I live in the Bay and even here physical protests aren’t taken very seriously, just kids trying to skip school and lonely elderly folks who are bored. The money’s too good, the tools will still be built and used protest or no.
The problem with this is that pip will install dependencies of the package you're installing, not knowing (or caring) that those dependencies are already available in the conda repositories.

Later, conda may install a different version of the same dependency as a dependency of something else. Depending on how exactly they are installed (egg, zipped egg, whether the folder has the version number in it), you either get two versions of the same package installed, with which one gets imported being arbitrary, or you get two sets of metadata, with one of them not matching what is actually installed, such that pip may think version requirements are satisfied when they are not. It's messy as anything, and the breakage can be subtle. I distribute packages to users who use conda, and my packages have dependencies that are available in conda, so this has been messing with a lot of my users' installs. I'm now just making conda packages for these projects to solve the issue.

I made this package [1] to try and automate the process of making conda packages out of my existing setuptools packages, I'm quite happy with it but since it is designed to serve the needs of my projects, I can't guarantee it will suit everybody's needs.

[1] https://github.com/chrisjbillington/setuptools_conda
InnovationMinds – Enterprise innovation management cloud platform
The only person who put "I" in it was you.
Deep Learning Breakthrough Made by Rice University Scientists
Are sites like Genius still in a legal grey area concerning copyright? As in, the lyrics are unauthorised reproductions of copyrighted works.

(I’m aware this lawsuit isn’t about copyright, I’m just curious)
> Do you not think it says something, nobody much talks about google having worker-ants in uniforms?

No, not really. It says that people realize that low skill work isn't valued the same as high skill work. That's exactly what anyone with a basic understanding of economics would expect. It's not a human rights issue that people that are easier to recruit and replace aren't offered the same perks.

> wear a yellow star

This is so hyperbolic as to be offensive. Comparing people in a voluntary employment role to the victims of the holocaust is incredibly tone deaf and hysterical.
Ah, okay that makes sense. I hadn't heard of any corruption in the EU, do you have examples?
Previously worked at a Node company - at one point in an effort to improve code quality we ran statistics on errors we'd seen over the past [period - forget exactly]. Type errors were our most common source of error both by number of total errors and number of distinct errors.

I'd love to see any data or case studies that claim the opposite if you have any.
I'm currently testing out https://beta.cliqz.com/

If you use Brave, you can easily choose your search engine with `:g` for google. You can also set your own shortcuts for any search box on any website.
Is my suspicion of Bloomberg publishing a critical article of Yang misplaced?

Both are polling around 4% and are battling for 5th in polls.

Not that that would invalidate the article. Just feels funky.
I would prefer it if the journalists who wrote about issues like this would stop using cutesy words like "snooping" when they talk about government surveillance programs. It sounds like an effort to whitewash what "those naughty rogues" are doing. Same thing as saying that Politician X is a "fibber". No one out there, as far as I am aware, is clamoring for us to treat this behavior as "naughty", so I don't see why they've chosen to employ this langauge.
> 1-3ms of latency per request.

Is that a big problem in practice? I always wonder about the tangible benefits of this approach.
>They are kids doing school projects. Nothing more, nothing less. And you know what - they're smart kids! But still kids.

This description matches perfectly my own (brief) experience on a project with Deloitte.
People who despise the assholes will still not want to be associated with companies that take their money.
Computer Science is still hard, and the vast majority of those who think they want to write software simply aren't effective at it.

There will always be work for people who are good at writing software.

As to your last comment? Maybe but I doubt it. I think that things will morph a bit to the point where there will be better "bootcamps", maybe not called that exactly, that offer more of the real CS education that's necessary for a good software engineer. But we'll see.
AWS SageMaker’s new machine learning IDE isn’t ready to win over data scientists
Like, Feedback Assistant reports?
> enormous intrinsic pressure to accept their recommendations.

I have a different personal experience. Roughly ten consulting hires for big public orgs. Small stuff and a big one: a dozen of researches working for months to produce the best result.

It was shaped to produce the result they wanted to hear. Or simply ignored.

- Healthwise, should I drink Coke or Pepsi.

- Neither, they have too much sugar to be regularly consumed.

- I am asking which of two options I should stick to?
Just gonna leave this here -- https://markmanson.net/attention
> should break even with inflation over time: not a great investment

This is not historically true and the reason why so many people become rich (and poor) with real estate is because of the amount of leverage it enables.
I wonder if anybody at Harpers ever looks at the numbers to decide if the popups should stay? They should have a minimum success rate that, if signups drop below, they get rid of the popups.
I thought he gagged his reporters from writing about his Democrat opponents?
How do you deal with the fact that human knowledge is probabilistic? I.e. that it's actually mostly "belief" rather than a "fact", and the "correct" answer heavily depends on the context in a somewhat Bayesian way. Best I can tell we don't yet have math to model this in any kind of a comprehensive way.
I used to set many passwords with slight variations.

One day I turned on failed login pass capture on a couple of wordpress web sites. I did see some of what I expected, they tried many of the most common passwords,

what surprised me is that they also attempted all kinds of similar variations that included words that our sites might use, but were not in the most common used pass dictionaries.

So they were not just using dictionary and common pass attacks, they were also attempting ones and slight variations of ones that may or may not have included that common things, plus site specific things, then with slight variations.

That was kind of spooky, and had me change up how I set up some things for other people.
UnrealIRCd 5.0.0 Released
When it comes to an OS, being 90% as good would still mean a 10% drop in productivity.

The margins are a bit different here.
Government surveillance is a good thing. Change my mind. Its stated goal is to catch baddies and protect a country. Business surveillance is a bad thing. Its stated goal is to monetize user data and surveil everyone on the internet.

So basically everyone on hackernews that worked for a modern data-driven consumer-target company participates in adversarial data gathering. Even if you just gave your data to a FANG company, in exchange for comfortable features, you helped them more effectively spy on people like you. So shame on you!
Nothing I know is first hand, so I may be wrong. I've been influenced by articles like this over the past decade: https://theintercept.com/2017/02/22/how-peter-thiels-palanti...
What makes macaroons great? I read the whole documentation and the macaroon.js docs. It seems to be under-documented, the library last updated 3 years ago. I couldn’t really grasp how the mechanism is safe re. clients adding “self-attenuations” that would amount to a DoS on the receiving service. Is anyone using this in production?
Google is notoriously hard to sue. they don't settle easily or readily

Genius was caught many years doing blackhat SEO that would have gotten smaller sites permanently banned, but thanks to google's kindness was forgiven.
That quote is from https://news.ycombinator.com/item?id=17613243, which was tptacek's.

But yes: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
Lyft launches car rental service
Clementine the music player is my go-to example of this phenomenon. Its got 750 commits in since its last release in 2016, there is regular merging, but the project management is in a place where trying to deploy builds to every platform is acting as a barrier to any new releases.

It recently finally merged its Qt5 support into master (which was in a working state since 2014) about two months ago. That might help the release process.

What doesn't help is that a consumer facing product of that scale is a nightmare to manage - it has over 2k open issues on Github but probably 95% of them are "I don't know how to do X" tech support kinds of things.
Joy of sex for the first time at 37: ‘We celebrated and high-fived afterwards’
100% agreed. Referenced it in another thread. See also Julie Zhao's excellent post on how to be strategic:
https://medium.com/the-year-of-the-looking-glass/how-to-be-s...
Ideally, there’d be a number of other things you could do that would work as well.
Mike Masnick's thoughts about how dumb this lawsuit is: https://www.techdirt.com/articles/20191204/10251043506/it-do...
I paid for the $150/month support option for gcloud and found it very good - they had engineers go over the code I wrote to help debug an issue on three different occasions, for example.
What can Cyc do that other tech can't do? And, more importantly, is that stuff useful?
> Its stated goal is to catch baddies and protect a country.

I don’t think it actually does this as well as the government would like you to believe.
Why wouldn't it be? You save 300k, that's an engineer salary... that's pretty much the meaning of a job, building value that's higher than your salary. This clearly took less than a year of engineer time. Seems like they got their value out of that employee.
There are aspects of quantum that we don't understand, but we have no reason to believe intelligence relies on them, any more than bridges do.
> You don't have a living software project if you don't do this.

What I might have is a working piece of software that is an important part of company infrastructure. For mission critical software reliability is a much more important metric than being current. Unless there is some really compelling reason to update something it should not and will not get updated. There are mission critical services out there running on software that hasn't been changed in decades and that is a good thing.

> Also, your project should not demand a specific version of `libfoo`. If `libfoo` follows semver and a minor release breaks your project, that is a bug in `libfoo`.

Who the fuck cares if it is their bug or not? I need my service working, not play blame games. And if I have a well tested version deployed, why the hell would I want to fuck with that? And if I have tested my service when linked against libfoo 1.6.2.13.whatever2 I had better make sure that this is the version I have everywhere and that any new deployments I do come with this exact version.

But if I start a new project, I might want to use libfoo 3.14.15.whocares4 because it offers features X, Y and Z that I want to use.
Software Engineers do study humanities. But, you know, there is big money involved.
The article cites 5G as some decision making parameter, but I don't believe this to be the case. People with slow networks (likely from urban construction density and high subscribers/cell-tower, or being in remote areas) won't see any meaningful difference, and those with fast access will have no impact either, as 4G is pretty darn fast if pushed to it's limit.

The MAIN takeaway here is simple - phone prices have crept up from $600-ish in 2013 to $1000-ish in 2019 without a commensurate increase in value to the end-user. To the extant that Apple has had to indulge in planned obsolescence [1] speaks volumes to stagnation of actual value delivered to the user.

This is just price gouging from [Apple, Google, Samsung] and the customers are right in sending them the signal of "don't care". I've personally set the max price/budget allocation to my phone at $600/two-years, and have been able to buy fabulous devices with high DXO-mark cameras, and great Antutu-speed benchmarks without breaking the bank. You should too.

[1]: https://www.bbc.com/news/world-europe-42615378
Pretty sure Genius actually licenses their lyrics to be in the clear in that regard.
Users get compromised though and will want to revoke sessions. But this is why you just set a time limit on your JWT, so that they can revoke and within N minutes the old sessions will die. Just keep N low.
ADSL1 from at&t tops out at 6Mbps, and 8Mbps generally, so you're most likely on ADSL2 (probably not VDSL, unless you're just plan limited, and not distance limited)
Here is the full article: https://web.archive.org/web/20191213200007/https://www.econo....