skysight-inc/HackerNews huggingface dataset:
Count me as skeptical when it comes to all these robo-advisors.

The primary issue is the principal-agent problem [1]. You need to align the incentives of the financial advisor with the incentives of the client. There are a few ways to do that. One example is the fiduciary duty mentioned in the article that makes it a legal responsibility to act in the best interests of the client. Another option is to allow the customer to share in the profits of the advisor through some type of customer ownership like you see with companies like Vanguard or with credit unions.

VC funded robo-advisors like Wealthfront have no solution to this problem. In order for them to be trusted with full control of your money, they would have to be satisfied with growing their profit simply by increased customer base and not want to increase profit per customer. Publicly owned or privately owned VC backed companies simply don't work like that. There is a constant need to continually increase profits. It is just a matter of time until someone at robo-advisors says "we can make more money if we add this fee". And since they control all your finances already and you are apparently the type of person who doesn't want to think about or look at your finances, odds are you probably won't even notice the new fee. That is a recipe for obvious abuse.

https://en.wikipedia.org/wiki/Principal%E2%80%93agent_proble...
Yes. The submitted title was "Humans have a natural lifespan of only 38 years", which broke the site guidelines. They ask: "Please use the original title, unless it is misleading or linkbait; don't editorialize." We've reverted the title now.

https://news.ycombinator.com/newsguidelines.html
I find that support for free products is impossible, but support for paid products is actually pretty good. For example, I was able to chat with a google checkout person to cancel an order pretty quickly, and when I had a domain issue, I was able to chat with a google domain person very easily as well.

I guess you get what you pay for.
I can appreciate your suspicion of a dynamically typed language, but type script isn't really a "hack" its a superset of the language. I am not a huge fan of it, to me its kind of the worst of both worlds- if you need type safety, use something else.

However, if you haven't taken a look at Joi- https://hapi.dev/family/joi/?v=16.1.8 you probably should. To me this was a very happy medium- you can enforce your "types" at the point of ingress and egress at your api, and even do validations there, while still being able to enjoy the flexibility of type safety within your code.
Plus, the match happened right after OG had roster changes, probably the weakest point of the team's history, well below the later achieved TI champion status, which is long after this match was held.

Well, anyway, I am OK with some degree of PR additions...
Your second sentence directly contradicts your first.
It sounds like you're discussing a hypothetical case very different than what you're replying to.

fpgaminer was talking about something where facial recognition is done locally, giving the camera owner the option to contact the police. The cops would not even know you had a camera unless you told them (or unless they saw it).

You seem to be imagining all sorts of other things, including a warrant. Which, yes, if you ignore it is obstruction. But I don't think that was part of what fpgaminer was describing.
Very few people think their company is perfect, and being able to be honest about a company's shortcomings without resorting to "it sucks here" and similarly unhelpful non-constructive criticism is a sign of emotional maturity. People leave all the time, for various reasons, and most places I've worked that actually conduct exit interviews are genuinely curious as to why high performing employees leave.

I hesitate to say they "care" because I think that gives the wrong impression. Everybody wants to make a little more money, get a little more freedom in deciding their priorities, get a little more flexibility in their hours, etc. So if you say your only reason you're leaving is that you want more money, they're probably not going to give everyone a 10% raise next quarter. But if you have well thought out grievances that can be addressed without spending millions of dollars or completely changing the structure of the company, I think you'd be surprised how willing executives would be to try and make things better.
Hyperauthorship: Global projects spark surge in thousand-author papers
Ugh it makes me so sad to see glassy-eyed toddlers glued to their tablets. This has to have some kind of long term cognitive impact on their attention spans. We're basically doing an experiment on an entire generation by turning them into dopamine addicts with the attention span of a goldfish. I know my attention span and ability to focus has absolutely tanked in the last decade because of the modern internet.
Just in case, not exactly a password manager, but good enough for using as one, and completely free (windows):

Readme.txt:

http://www.dcmembers.com/f0dder/wp-content/uploads/sites/18/...

Homepage/Download:

http://www.dcmembers.com/f0dder/download/fsekrit/
As the founder of a tech-driven charity and with some volunteering experience, I want to suggest another approach.

The skills that let you deploy your technical abilities are often sorely needed in this sector, particularly when an organization depends on volunteer labour.

As an example, my father is an experienced civil engineer who leads the development and refurbishment of major hydro generation facilities in his day work.

One of his primary volunteer activities, however, is hustling casseroles for a significant homeless shelter and kitchen in a large city. He is frighteningly effective because of all the skills that also make him good at his job — organization, process, people, etc. There’s often a deficit of this in volunteer efforts.

On the flip side, if you do want to use your technical chops, consider how you can do so in a sustainable way so you don’t create dependencies that put important processes at risk. I found it better to fundraise and pay professionals for important functions.
I find it really annoying how JavaScript is treated on developer forums like this one. Why is it that when the same exact things are done in a typical language it's called “tooling” but in JavaScript it's “duct tape hacks on top of hacks”?

Don't get me wrong, my favorite language is Rust, but pretending the JavaScript ecosystem is unusable doesn't make you cool. I can be extremely productive in TypeScript.
> as you may end up being sanctioned or worse extradited for things that are not illegal in your country

You're of course conflating problems that are very common in Russia (hyper corruption, few human rights, zero business law protection, no functioning independent judicial system) with problems (the need for huge insurance, extradition, getting sanctioned) that are rare in the monster size $22 trillion US economy filled with millions of businesses.

List of countries currently meaningfully sanctioned by the US: Russia, Cuba, Iran, Venezuela, North Korea, Syria

I certainly hope you don't live in North Korea while commenting freely on Hacker News (which is, naturally, located in the US).
I think you'll find that if you just quit worrying about "what's happening now," you'll find that you aren't actually missing anything.
Fisher-Price Smart Cycle Trainer In-Depth Review
Are you sure you're protected from CSRF from older browsers? There's still plenty of IE going around on old desktops in libraries and such.
> Engineering is all about making compromises, in aircraft, you compromise with weight, otherwise, we would be giving every passenger an ejection seat/parachute.

You forgot cost. The 737-MAX is fairly well documented to have been pushed by management for the purpose of increasing profits while compromising safety.
Infant mortality, curable disease, violence, famine, bad hygiene, death from things that are maybe not 'curable' in the strict sense, but with the right hygiene, conditions, general treatment - we can cure.
Show HN: Embed PDF Viewing into Webpage
Web developers can now embed PDF documents into their apps and web pages using Adobe Document Cloud View SDK. With a few lines of code, you can control how the PDF appears using pre-configured embed modes such as in-line, full window, or sized container. You can customize viewing experiences with commenting, print, download, and save functions for your PDFs. Document Cloud View SDK also provides out-of-the-box integration with Adobe Analytics, so you can quickly gather insights and analytics on how your audience is engaging with the PDFs with little or no coding required. Visit https://www.adobe.io/apis/documentcloud/dcsdk/viewsdk.html
Pony 0.33.1
One of the secrity experts here at HN always recommends against it for auth. Go to the search box on HN and type "author:tptacek jwt". Make sure you are searching within comments. You will see his multiple responses over the years.

I have mostly stuck to plain old server side sessions that are easy to revoke. If anyone is using Go, I highly recommend this library :

https://github.com/alexedwards/scs
Mortality rate actually reaches its minimum around age 10 or 11, so you would see even longer lifespans if you only look at people who survive at least to their teens.
401k need not be maximized - if it should depends on your age, existing savings and if you actually want to retire early, same for IRA.

You need to figure out how much savings is right for your long term plans. The 6 months expenses is the only one that I think applies to nearly everybody - even then if your doctor just gave you 2 weeks to live 6 months expenses isn't useful. Some people want to retire early - other people have discovered that a job gives them social benefits and they don't want to retire ever. Some people are willing to work longer in life so they can afford more toys now, others are willing to forego toys so they can enjoy the free time later. This is your personal choice.
I think one difference is that in the US many companies still consider you a "new college grad" up to 6 months to a year after graduation. So if you fail to get a new grad job before graduating, you may still be able to pick up a new grad job in the next recruiting season. For example, I failed to get a job as a new grad at Google while applying as a senior, but was told that I could re-apply for a new grad role the next fall. And many entry level jobs in the US are not even specifically targeted at "new grads", although being a recent grad certainly helps.
I've read (elsewhere, I guess) that some 95% of the Milky Way's mass is estimated to be dark matter. If there are only 700g of it nearby, it can't be distributed the same way normal matter is. How can that be, since it interacts with normal matter gravitationally? Does the solar wind blow it away, or something like that?

I've also seen an article not long ago showing 'visualizations' of dark matter around a spiral galaxy, and it was mostly in teardrop-shaped lobes above and below the galaxy's center and aligned on the axis, rather than distributed through the disk. I didn't think of it at the time but now that I do, it seems like that distribution also indicates that light from the stars is pushing the dark matter away.
Being in groups of the opposite gender has the benefit that you can opt out of inter-sex competition. Men compete with men. Women with women. A woman working in a otherwise all men team have no other woman to compete with which can be a great freedom. If a person explicitly talked about "jealous and backstabbing" I would interpret it as terminology of inter-sex competition.
Only if they ask for it in a way where you're legally compelled to give to them. Otherwise, no. Cops want things all the time, like searching without a warrant. But not doing what they want isn't obstruction.
This might come in handy, I've found it perspective-changing:
https://80000hours.org/
> error that you describe.

I think the misunderstanding comes from here. chrisweekly doesn't seem to describe any error in the original post, only their own approach, hence assuming you were calling that an error.
> I was taught to save a percentage of my paycheck no matter what it was

This is part of the lottery. You were very fortunate to have been raised such that you are familiar with the ways in which money can work for you. Being born into a situation where this isn't the case is already a huge detriment, not to speak of actual hardships once you're on your way. It's not a stretch to think that even half of those people in paycheck-to-paycheck lifestyles are this way.

> but there's just no way three quarters of Americans are in that situation

There is. Medical emergencies, as a contained example, are not isolated incidents -- when they affect caregivers, the whole next generation (or two! or more!) can be affected so heavily that the family essentially loses all their wealth in the span of a few years. More broadly, the community steps up to help out those in need, but often those in need are already in communities of need. One chink in the armor can drag down a whole network of people, and the strength of that can be unexpectedly high. If government welfare was more comprehensive and less difficult for poverty-stricken people to access (see: means testing and the time sink of waiting in lines), this would not be nearly as much of an issue. The "free market" sucks people dry if and when it gets the chance.
The Antonov 225, the heaviest and most powerful plane ever built
I pay a ridiculously small $100/month for AWS support and they get the job done however I want it (chat, voice, email) at any hour of the day. I basically signed up for it so I'd have someone to blame if something went wrong, but they resolve every single issue to my satisfaction.
There is a lot of difference between “wrongthink” in the 1984 sense and only prohibiting particularly evil ideologies that advocate for violence. These are not subjective view points, violence is universally bad for everyone.
> explore Go or Elixir

I have never seen a good argument for using golang for business logic. If you are writing the actual server then sure, use golang. If you are writing some high-speed network interconnect, use golang. Some crazy caching system, sure use golang. The public WS endpoint, use golang.

But if you need to access a DB with golang for anything more than, like, a session token, then you made the wrong choice and you need to go back and re-assess.

Elixir is in the "germination phase" and I predict massive adoption in the next 5 years. It is a truly excellent platform, every fintech company I know at least has their toe in the water. Everyone I show this video to [1] just says "well, shit."

[1] https://www.youtube.com/watch?v=JvBT4XBdoUE
I wonder what the cost is compared to terminating SSL at Clodfront? For my web tier architectures, I use Cloudfront to reverse proxy both dynamic content (from the api) and static content (from s3). SSL is terminated only at CloudFront.
Ask HN: Is there a bubble in software work? What's the 5/10 year forecast?
I'm reading The Click Moment, where the author writes, "Ten years ago, if you wanted to guarantee yourself a life of financial security, one of the surest paths was to become a lawyer." So law programs and students blew up, and the result was companies like LegalZoom offering routine legal work for $25, and it's no longer deemed a "hot" field. I'm wondering what you guys think about this. With AWS releasing CodeGuru, (which aims to reduce hours spent debugging and testing) I suspect a similar thing could happen. I'm in ${BIG_TECH_CITY} where there are bootcamp ads plastered on buses and in my YouTube ads. I just doubt there will be work for new bootcamp grads, say, 5 or 10 years from now.
A lockfile for consistent builds, that alone rules out Conda for a lot of serious things.
This is a really awesome idea. I love how it leverages a public space that is already culturally oriented towards making knowledge accessible to everyone.
> If you keep using plain sessions you got a SPOF

What single point of failure is inherent with plain server side sessions and a session cookie?
InnoDB was owned by Oracle since 2005. I don't recall seeing any complaints about that at the time. In 2010, when Oracle bought Sun, then there were complaints from the MySQL team. But not complaints when Sun bought MySQL. Honestly, most people had been using InnoDB as their main MySQL engine for the previous 5 years already but there was no whinging from the MySQL team about that (that I recall).

It's all pretty arbitrary in my opinion -- if Monty and company hadn't whined so much when Oracle bought Sun, I doubt there would have been a fork.

Anyway... it never bothered me one way or the other.
> Early humans have been reported to have a maximum life expectancy of 40 years, less than half by modern standards. Similarly, in chimpanzees the lifespan was estimated at 39.7 years. The maximum longevity of a chimpanzee in the wild is thought to be of a 55 years old female, however it is reported that many live to approximately 40 years of age.

It seems like what we’re really seeing here is the similarity in lifespan between our earliest human ancestors and other primate species.

The earliest humans would not yet have had access to consistent shelter, fire or tools/weapons and these developments carried with them enormous benefits with respect to health and comfort.
When Scientists Infect Themselves with Viruses
Andrew Yang’s math on the robot takeover doesn’t check out
>It’s that they push out new products, encourage communities to use them to make “amazing” things, and then don’t support them well over the long term. They let cool projects atrophy and die.

This is the absolute root of the problem, and one that is unique to Google among the big cloud providers. Yes, AWS may roll out new features, but generally the core stuff stays put.

I'm not losing sleep over route 53 getting "sunset" with a 1 month notice. Can't say the same about Google. While it won't sink them, I can see this becoming a bigger and bigger obstacle as the number of IT pros who get caught in the fallout of Google's internal ADHD grows.

If Google, or a vendor using a product on top of Google services contacts me, I'm not touching it unless they're willing to enter into an SLA where they pay for the trouble of migrating my stuff when they axe the service.

In other words, I'm not using it, because no one would ever offer such a thing.
Actually creating a JWT token is not stateless, but at least your architecture is not centralized. If your auth server goes down, that’s a problem no matter what.

A common validity period is around 1 hour, which is good enough that most users won’t need to refresh very many times per day.

Also: you don’t necessarily need to track tokens that aren’t refreshable. A typical architecture might have a timestamp stored per user that specifies the earliest token creation date that’s valid for refresh. That way you can invalidate all tokens without needing to ever store them; something you might need to do for password reset, for example.
> The burden of figuring this all out lies with the visitor and is a annoying hassle.

I usually find it to be a much smaller hassle than recreating the functionality myself.
> I know you have decades of experience with compilers, but are you sure 0.1% isn't a bit low?

I've been working professionally on my compiler since 2013. That's about 2500 days.

0.1% of that is 2.5 days.

Yes, that's about how much of my time I've spent working on parsing issues.

Parsing, for compilers, is pretty much a solved problem. We know exactly how to do it. Parsing for editors and things might be more interesting still.
You're forgetting the first and second rule...
Also you don't have the direct feedback loop of success or failure in the market obviously. Funding isn't directly related to performance either.
Riches-to-Rags Stories Are Rare These Days
Url changed from https://futurism.com/the-byte/genius-sues-google-allegedly-s..., which points to this.
In my experience GMaps route optimizations don't account for elevation or road size in my country. When I drive outside city I strictly use OSMand for routing.
> Our days may come to seventy years, or eighty, if our strength endures; yet the best of them are but trouble and sorrow, for they quickly pass, and we fly away.

How old is this proverb?
I spent a year doing an ontology postdoc. I can't speak for Cyc, but from what I saw of the ontology world, there are a lot of charlatans and people who are using it as a buzzword to make grant proposals sexier. Whether or not there's real potential in the technology, that kind of environment surely isn't conducive to achieving said potential. An outsider trying to peek into the field is immediately swamped by vast oceans of garbage, and everyone in the field is an expert at marketing themselves so if there are legitimate researcher gems in the field, I don't know how you'd actually find them from amidst all the noise.
Maybe a better way of putting it is that averages are a garbage statistic when looking at these numbers, because they hide the fact that the normal human lifespan is and always has been roughly the same.
Introduction with Examples of Jobs to Be Done [pdf]
Most people who just want to eat an apple (even an apple a day) don't have bandwidth to pick them. Offer them the option of picking apples at an orchard for free vs. buying a bag of apples at a grocery, and most people will go buy the bag.

The same happens with an OS. Most people don't want a free labor-intensive solution. They want something that just works, runs their software and stays out of the way. People don't want to think about what OS they use.
> Wealthfront tries to sell how advanced they are, but it's mostly a re-packaging of what Vanguard has been doing for decades.

Can you elaborate on this? My understanding is that Vanguard provides a variety of passively managed funds, but does not give automated financial advice based on the specifics of clients' situations and needs. (Maybe you could consider target date funds the equivalent of this, but they're based on at most one dimension of client needs.)

Wealthfront, on the other hand, provides passively managed portfolios with financial advice based upon questions they ask their clients. The portfolios may be equivalent to Vanguard's funds, but the value-add is the financial advice. Maybe you don't value that advice, but it doesn't seem fair to characterize this as simply a repackaging.

(Note that this comparison will change once Vanguard launches its own roboadvisor, which was announced in October.)
Which are the unions without these problems?
Authenticating JWT isn't checking the JWT against an external server.
I am wondering why aren’t protests staged in front of these companies’ offices. If they have any in the US or the EU, doing it in saudi arabia, china, etc. means certain death.
I'm bearish on JWTs in many cases for reasons enumerated here and elsewhere.

But I do use them in one place with a revocation scheme similar to this. On init, instances build an in-memory bitwise blacklist that token IDs are checked against.

This arrangement probably already implies this, but just in case: this is at a very small scale where the complexity of pushing revocations isn't justifiable, power granted to the token-holder is limited and easy to clean up if misused, and revocations are so rare that restarting instances to update the blacklists is tolerable).
You are mostly correct. You can do one off acting but any major production will only hire SAG artists
Real estate is a bad way to become rich fast (unless your full time job is landlord and you understand how to make this business work). It is often (but not always) worth it anyway, but real estate should break even with inflation over time: not a great investment.
Leaving them no option but to continue building surveillance software?

Rather than hope for a chance to make someone else miserable I’d rather people just weren’t building this stuff to begin with.
How Facebook's Political Ad System Is Designed to Polarize