skysight-inc/HackerNews huggingface dataset:
To be fair, Oracle at one time had what was probably the most stable system to handle large RDBMS loads on the market. That was a long time ago, but they did deserve their status as a tech giant that had good products at one time.

Oracle of the last say ~20 years has turned into a coward of a company in that they do not really invent but instead "copy", purchase (to remove from market) and spend large amounts of money trying to discredit other good technology. When they do buy things, they generally move it into the realm of the Oracle sphere which means they over price everything, remove as much as possible from the open market and require you pay for services to try and configure and install it. They try to paywall everything possible to extract every penny possible. You do have to hand it to them in one way, they have created a cash machine, even if many of us think it should crumble. I am not against them making money from things the create or purchase, but I am against the unscrupulous ways in which they do it.

When I was running my consulting firm we had a large Fortune 500 client where we were brought in to modernize their supply chain and backend systems. It took us around a year and a half total and we touched almost every system in their business. That timeframe includes closing the deal, documentation etc. It was a very very large system overall, of which we provided the core components and helped other integration people along as well as some of their own staff (so not easy). Well about 6-7 months before we were hired to do that major project, the company had brought in Oracle Financials to replace their accounting and financial modeling, reporting & compliance tools. When we wrapped up and left, Oracle STILL hadn't deployed a complete and successful, working solution beyond some small components after 2 years of efforts. Yes, the database was installed, yea the software was mostly installed, but the client couldn't use it to run their business and there were talks of legal getting involved every day. All the while Oracle kept charging more and more in consulting fees and increasing license costs.

That is one instance of a pattern I have seen over 20+ years from Oracle. They are just not a good company, they work to trap clients in relatively one sided agreements with lofty promises but then fail to deliver in almost every case.

I do know quite a few engineers that work (or have worked) at Oracle and at least of the ones I know they are highly intelligent and very capable people (that generally are paid handsomely, e.g. golden handcuffs of sort). IMO Oracle's product problems are not because of a lack of talent or capability but one of the business intentionally complicating things (with bureaucracy and poor planning) to the point that no one can deliver on the promises made.
It wasn’t published that long ago. The article came out right before Bloomberg announced his candidacy...
I believe defamation is a civil matter, not a criminal one.
> Is there any possibility that some of this “snooping” actually keeps us safer?

Even if it does, is it worth violating rights in the process?
Having unique passwords for every service, all of which are stored entirely in your brain, is almost certainly more secure than a password manager.

However, I'm inclined to believe this is virtually impossible, for all but a handful of exceptionally talented individuals.

So if realistic options are (A) access all services via one password which is only stored in your password manager, or (B) access all services via one password, which is also given out to every single service, I think it's clear which is safer.
Unmetered connections are only unmetered until you cost them more than you're paying. They they throttle you or boot you. Nothing is free.
Why? We already paid them $400 billion dollars to get you decent Internet access (see: https://www.huffpost.com/entry/the-book-of-broken-promis_b_5...). I think that gives us the right to expect you to have something better than 14Mbps DSL at a decent price.
I used to read about cyc here https://www.cyc.com/cycl-translations. But it says now "coming soon". Since we have folks from Cyc here, any ideas how soon?
Thanks for the link, really enjoyed those questions. I'll watch the rest later.
The point though is that if password changes are required, even with a long expiration time, people are only going to make minor and probably predictable changes to their password.

If if you did a 1-year password expiration, and last year's passwords were compromised, then if the attacker figures out that someone's password last year was "uwethskjv9j29#18", then there's a good chance that the attacker is going to try logging in with the password "uwethskjv9j29#19" this year and "uwethskjv9j29#20" next year, and will probably succeed.

You gain nothing from password expiration, other than annoyed users and and even more annoyed IT team who has to deal with lockouts from people that changed their password to something secure.
Of course we do. My password manager does not work for the Windows login and I need to change it every 3 months. I can remember 1 large complicate pass-sentence, but not a different one every three months.
Why do companies in this IOT space just not require 2FA by default? Yes phone numbers can be stolen, and using a phone number is not -perfect- second factor. However these stories keep coming up and I cant help but think in each case that someone has secured their account with the password password123.
In their defense. It looks like they have over 400 employees and raised over 350 million in funding. On all things that truly matter currently they seem like a very sucessfull company.

I can guarantee you a VPE or CTO who can say they helped do that... but ran into a scaling issue from their success will have no issue with employment and no reason to be ashamed. All the more impressive if it was just a bunch of junior engineers.
We need FIDO2 or some other standardized security key protocol in our devices.

I recently got an Apple Watch and having to just tap on my wrist to authenticate is amazing.

Would love to just be able to give a website one way to contact me and have it ping my device to authenticate with faceid, touchid, Windows hello, or an smart watch.

Basically, a magic link on steroids.
> In June 2018, news came of a second death from the kill list. Twenty-one-year-old Bryan Njoroge was found dead in Indiana, shot in the head on a baseball field. The police ruled the death a suicide. Weeks earlier, a user with the alias Toonbib had paid around $5,500 to order his murder and provided details of his upcoming travel. Njoroge was a U.S. military serviceman who, before he died, had made a female friend the beneficiary of his life-insurance policy. His father questions whether the death was a suicide, but the local police department has said that it is aware of the dark-web assassination order and stands by its conclusion.

It's possible that the police know something the father does not. I would not put it past a suicidal person to order a hit on himself.
Yeah, like maybe they could put the competing candidate's name in the name of the news service, or in the URL, or something...
It sounds like Noah Smith isn't actually disagreeing with Yang's solution (on the contrary), only his purported reason for it. From the article:

"Instead of sounding the alarm about robots, proponents of a basic income should use arguments that aren’t dependent on the threat of automation -- and there are many good ones."

On the macro level, automation's effects are uneven. At present, the gains from automation are likely incremental. I suspect the losses from automation however might be deeply felt by a segment of the population that most of us rarely interact with. An economist recently put it like this: "the gains are diffuse, the losses are concentrated".
Andreessen on Why You Should Be Optimistic About the Future [video]
The Arctic may have crossed key threshold in a long-dreaded climate feedback
Improve cache performance with optimized API design
The reason we like first world, liberal governments is that we can collectively hold them accountable. It’s not clear that we can do so with the NSA.
FEAT>> Nested virtualization on intel. This is a big deal, for dev and testing. Congrats to the devs, thank you. You can now run a hypervisor hosting real vms at decent speeds inside VB.
No, that's not how it works, you cannot upgrade the routers in real-time without complexity and additional cost. So the cost for transfer is fixed with more latency. But if you subtract bad protocol design and the latency added by the compression/decompression I'm pretty sure you end up with the same deal just more complexity that costs even if you don't see the costs.

Just like wind-power actually competes with nuclear because it take 30 days to wind down a nuclear power plant.

Also data can be compressed with more efficient hardware on the backbone without you having to deal with it.

The biggest cost of the internet is idle things and synchronized CPUs, async. never made it unfortunately.
And then you've got your phone open, displaying your password to shoulder surfers, for as long as it takes to type in your password.
The colors drive me crazy when looking at forest service roads in the mountains. National Forest land is some shade of green, and the tiny roads are light gray and there is virtually no contrast between the two. So if I want to be able to see the roads, I have to zoom in a lot, and then I can only see a radius of half a mile, so I have to scroll the map constantly to see where a road goes. Absolutely maddening. Presumably some designer is really pleased with how elegant and subtle these colors look, but without contrast it's useless.
Yes, by the time the article the OP posted dropped (November 2019) he did know. The article you posted is from March 2019.
The copy is on the website though, it's just behind the docs link. I get that it's a jumping off point, but I'd like even just a sentence explaining what I'm jumping off to.
Nice! This is a great way to preview how "opinionated" these frameworks are and how subtly or drastically they affect the appearance.

Even just viewing the demo was a nice way to quickly pick out favorites that I could use or drop into quick personal projects/websites, or even just internal documentation stuff I use for myself at home and at work.
> this doesn't change the fact that given the standard of income and wealth of the average American household, everyone could live insanely more sustainable and financially secure lives by adopting a different culture.

I wholeheartedly agree, but the reality is that, today, unless you are willing and able to pay a large premium for "luxuries" like walkable neighborhoods and workplaces, the average American gets market segmented into the excessively large housing and excessive long commutes with no transit options.

The best way to address the underlying lifestyle issues is to make healthier lifestyles more affordable, but there are a large set of interests, from advocates of exclusionary zoning in city councils, to the fossil fuel industry lobbying heavily against good public transit, who are arrayed against any of the positive changes you suggest.
This reminds me of one of the business / economics dilemmas of the 90s: computers were "increasing efficiency everywhere but in the statistics" (also phrased as "computers are invisible in the statistics").

The answer was that computers allowed new models that weren't measured by the stats. Just as much labor was done but now you'd have a few people running the numbers on a financial deal when before it was slower and more shoot-from-the-hip.

Consider the robots at Amazon warehouses: they are reducing the labor component, but amazon is growing so much that their hiring is growing as well, though not as rapidly as it would have without the robots...or do the robots mean they can open more sites? Who knows?

Plus the robots are leading to more workplace injuries but nobody is tracking that statistical correlation yet; the reportage is just starting to appear.

The numbers will be visible once it's obvious to everyone that a phase change has occurred.
> but thanks to google's kindness was forgiven.

Sounds like fuel for the case against Google...Google would normally ban sites for x but didn't ban Genius for doing x, but why? Because Google was knowingly and willfully scraping/commercializing their content.
Yes, just like how every Washington Post article critical of Elizabeth Warren is because "Bezo is trying to protect the billionaire class" /s.

I saw a blue checkmark people saying just that in response to WaPo covering Warren's own staff releasing her law work with corporations. This Bloomberg stuff comes up constantly too.

idk how otherwise smart people buy into this stuff. It's a very naive view of how the world works and conspiracy theory tier stuff. Much like gov conspiracies hiding massive world changing information, newsrooms unquestioningly follow the orders of the chairman and the editors and staff all keep it super-secret (despite it being the biggest story of the year if it leaked, among people in the business of leaks), just to help one guy polling at 2% beat the other guy polling at 3%. Bias in newspapers is very different than direct interference.
Absolutely! Even ignoring all the stimulus money and tax breaks probably given, municipalities all over the US are building out their own fiber that is blowing the others away in performance and even price usually.
Do they actually promote non-game win32 executables these days? I thought current fashion is mostly services with mobile and web apps, and sometimes Electron ones?
"Snooping", to me, brings to mind images of disapproving mother-in-law looking through your medicine cabinet or little kids trying to find where you hid the Christmas presents. Whereas "surveilling" implies gathering the information necessary to blackmail, imprison, or kill someone.
There is plenty of fundamental research on it, probably a paper about it is published every week or so. The problem is that there is no general solution to the question, and everybody disagrees about how "human intelligence" should be defined in that context. The answers people give depend too much on untestable "philosophical stances."

Personally, I believe that AI is possible (hard AI thesis) and that computationalism with multiple realizability is right, since none of the philosophical arguments against hard AI and computationalism have convinced me so far. But there are as many opinions on that as there are people working on it.
This is very strange to me. Have you asked the women in the team? I feel like no one would say that they prefer to work in segregated environments. Which is why it easy for me to say it as an outsider without any consequence. I say it because I have heard both genders have reservations about working as a team with the other gendered colleagues and peers.

There is no coming back from a politically incorrect comment after it’s out in the open. Gender segregation at high school/college was my original position..not at work necessarily. Altho that would be suitable for some group dynamics. This is just one such position.

I feel like somewhere along this thread it morphed from gender segregated educational environment(the original post was about STEM and gender) to work. I probably am partly responsible for that with my subsequent comments. Altho..I will read your comment again in leisure, consider my response and get back to you as soon as possible. Regards.
Genius actually licenses the lyrics from the music publishers.

The first line of your comment is accusing them of something that they don't do.
I find typing in a password (or letting my password manager fill it in) to be much more convenient than clicking a link in my email.
IAM AMA: OAuth, OpenID Connect, SAML, JWTs, etc.
Music licensing (at least in the US) often involves blanket licenses that cover all music, without requiring consent or knowledge of the rightsholder(s). There's usually a designated administrative company, such as ASCAP, that royalties are paid to in absence of more specific agreements, and they divy them up. In this arrangement, for covered uses, generally rightsholders have no claim against the company, if it followed the forms, they would need to take it up with the administrative agency.
I am familiar with prolog and know what it takes (ish) to make an old school expert system. I have heard about this project. Are there any demos of this system? Like a video sales pitch. I have always wanted to see it in action.
This is not true. If malware runs on your machine and there is no password manager storing 1400 passwords, the malware cannot pivot to 1400 destinations. However, if there is a password manager on the device that the malware gains access to and it would indeed store 1400 passwords in one place, then all 1400 assets are compromised at once.

I think that's what the previous commenter wanted to highlight.

In the end it's about managing risks, I would use different locations for storing passwords depending on value. Like really important ones go elsewhere and are not on the device I use everyday for browsing the Internet or reading email.
I've also read it and liked it a lot. I can also recommend Blue Ocean Strategy.
I've read another article related to this about a year ago:

"The unbelievable tale of a fake hitman, a kill list, a darknet vigilante... and a murder": https://www.wired.co.uk/article/kill-list-dark-web-hitmen

HN discussion: https://news.ycombinator.com/item?id=18767657
I think it's also worth noting that yes a lot of people want huge homes and conspicuous consumption, but that group is pushing up costs on everyone else who doesn't. Housing costs are growing massively as a fraction of income so with incomes stagnant, every year people have a little less to pay towards what they need and want beyond just having a home, regardless of size.
> I have mostly stuck to plain old server side sessions that are easy to revoke.

But you have implicitly made a tradeoff. Your front-end infrastructure now has a very strong dependency on your auth server. Any minor hiccup in the auth system will blow up your downstream clients. Worse, in large sites you will be sending a ton of traffic to your auth server.

You've also introduced a source of latency to your page-load times as each request now needs to call the auth server to validate the token. Whatever the response time of the auth system now gets added to the front-end response time.

Going with tokens that can be validated on the front-end system can dramatically lighten load on your auth system and reduce your front-end response time.

The only major trade-off is you can't kick somebody out instantly. The bad-actor can do whatever until the token expires--a knob you control. And even then, for shit that matters, you can always have the front-end server validate the auth token on each request anyway.
I've heard of banks setting a 8-character limit on password length.

If my bank did that, I'd be searching for a new bank. Just just reeks of passwords being stored in plain text.
Bloomberg doesn't have to beat Warren or Sanders to get the nomination. He's betting that, given a "centrist" alternative, the Dems will prefer it to Warren and Sanders. I.e. it will be a redux of Clintonites' '16 argument "We all love Sanders, but he is too far left and we need to win against mean-old Trump"

Therefore, he only has to beat Yang (since he doesn't really care if he looses to a Biden candidacy; he joined the race when Biden seemed wobbly)
This property you use is known as an ephemeral session key and is a requirement for perfect forward secrecy. (Not being able to crack previous messages by compromising a key in the future)
Southpark has a pretty good episode on this - https://www.youtube.com/watch?v=z696bTiP8Ro
Strong agree. Also having a Masters, and also being a very serious independent learner, there is simply no equivalence. Similarities, but no equivalence.

Different pros, different cons, different approach, different result. Still get to learn interesting things, still wind up wandering through nifty spaces.
Seems all moot since it's not their intellectual property in the first place... as in the artist would own the lyrics?
That low contrast stuff is what bugs me. I often go out into rural areas. Try making out where the (white) minor roads are against the (almost white) background. Now, try that in bright sunlight!

A good mapping app would have different modes for this. Garmin GPS's are much more readable, which is one reason I recently bought one, even though GM in theory is better. GM is better at routing, but it is really hard to see the detail, which is dangerous if you are driving.
Selling surveillance technology is a booming and legal business in most jurisdictions subject to respective export control laws. But they are not as ethically challenged as companies who deliberately sell lemons and backdoors to their customers in return for a payout from the NSA like RSA (part of Dell EMC) did:

https://www.reuters.com/article/us-usa-security-rsa/exclusiv...

https://www.theverge.com/2013/12/20/5231006/nsa-paid-10-mill...
> You're trying to polish a turd here, this isn't "lack of support" it's "it will drop objects in production."

That's a strawman argument. Any reasonable schema management implementation has safeguards against DROPs. If your tooling blindly executes a DROP without extra confirmation, use better tooling.

> Again, polishing a turd: the only way your "automation" works is through manual intervention.

There's absolutely nothing wrong with requiring extra human confirmation for destructive actions. Quite the contrary. I've spent most of the last decade working on database automation and operations at social network scale, and will happily say this is a common practice, and it's a good one at that.

> You can construct a view referencing the old table, and rename the table. Yes, it has to be an updateable view and you need transactional DDL, but within those constraints, it's doable.

So you're assuming that every single table has a view in front; or you're dynamically replacing the table with a view and hoping that has no detrimental impact to other database objects or app performance. Either way, you're talking about something operationally complex enough that it isn't fair to say that production table renames or column renames are a "trivial operation" at the vast majority of companies.

> It's so bad that you have large companies investing heavily in ripping out the schema entirely, which itself is just more snake oil.

This is frequently overstated. For example, although Facebook uses a flexible solution for its largest sharded tables, there are many tens of thousands of other tables at Facebook using traditional schemas.

> In the problem space of trying to keep a schema in sync, we know that diffing leads to unacceptable answers, that is an indicator that it's the wrong conceptual basis for a correct solution.

The only "unacceptable answer" you've cited is rename scenarios, which even if it incorrectly leads to a DROP, the tooling will catch.

If you need crazy view-swapping magic to support an operation (renames), that is an indicator that it's a conceptually problematic operation that should be strongly reconsidered in production.

As I've already stated elsewhere in this thread, declarative schema management has been successfully used company-wide by Facebook by nearly a decade, and is also a common practice in the MS SQL Server world. If you're unconvinced, that's fine, but many companies have found it to be a great workflow!
A guy was pitching me his SEO services as being the best in the business. He offered me his business card but I said, don't worry, when I need an SEO guy I'll search google for one and you should be the first result!