skysight-inc/HackerNews huggingface dataset:
The US non-farm payrolls report does include average hourly earnings and average hours worked per week but for some reason it's not as widely reported. IMO the multiple of those 2 values and participation rate are much more meaningful than the total number of jobs added or removed.

The average hourly earnings has been hovering around a 3% YoY increase for years now: https://tradingeconomics.com/united-states/average-hourly-ea...
Aren't they all case sensitive since FORTRAN and BASIC?
Sure, but you have take into account that Android devs are limited to Java 6, most enterprise devs (based on my experience) are still on Java 8 and some are still on Java 5 or below.
Job posts can't be regular submissions. This is in the FAQ: https://news.ycombinator.com/newsfaq.html
Sure, one could avoid getting pickpocketed or mugged if lucky or took care.
The one thing I never understood about this is, aren't you just free to not hookup your TV to the WiFi? I've bought SmartTVs and have just used them as "dumb" TVs and they work perfectly fine. Aren't you there capturing the benefit of this supposedly lower price without having to give up any personal data back?
Is it as ancient as LibreOffice (35+ years old)?
I imagine the criminal org. could perform a transaction with one of their own shell corporations every so often to see if the FBI are on to them.
"The trade-offs for cheap TVs is that customers are themselves becoming the product for TV makers [...] For something to be as cheap as a great TV, people have to give something up — whether they know it or not."

Just never give the TV its own direct connection to the internet. Use another device that you do trust, to feed the big screen its content.
Freedom of speech, not freedom of consequence
Actual title of the linked article is "The UK Election Explained, In One Number".
Thanks for the advice/perspective; it definitely helped me decide how to proceed.

I'll definitely make all changes at once, then. I'll experiment with both Dvorak and Colemak for the letter keys.

Shorcuts are not much of a problem for me, extensive MMO raid gaming in my teen-20's made sure of that.

I miss AutoHotKey (AHK, windows program) very much, haven't found anything to remap keyboard inputs so extensively and granularly on Linux. KDE helps a lot, but nowhere near enough for my taste. I'm very excited for the EZ Oryx firmware tool in that regard, as it may replace AHK (and whatever it can't do yet, I can probably program, which is sweet).
Corridors: Passages of Modernity
Very odd they feature earthquakes so prominently on their map of supposed climate change effects. There is very little evidence to suggest climate change has any affect on the frequency of earthquakes humans can feel.

“We’re simply not in a position at this point to say that climate processes could trigger a large quake.”

https://climate.nasa.gov/news/2926/can-climate-affect-earthq...
All credit and debit cards that I have seen and used in South Africa do that.
Indeed! Another publication on this topic from that time:

https://www.usenix.org/conference/usenixsecurity12/technical...

and commentary on the paper from a few years later

https://blog.acolyer.org/2015/09/16/mining-your-ps-and-qs-de...

ah, and a blog post from Nadia Heninger (one of the authors) prior to publication

https://freedom-to-tinker.com/2012/02/15/new-research-theres...
> The consumer has come to expect guaranteed overnight or 2 day shipping.

Amazon doesn't even offer overnight shipping anymore. This is a big step backward from the days when you were allowed to get one-day shipping as long as you were willing to pay for it. I am totally baffled.
that's exactly why I don't want to teach myself computer security

it's way too dangerous, and it's going to be worse and worse
I’m speaking from a hypothetical. Is there a scenario where using other companies one can run the entire chain of R&D on a product? For example, there are companies like Emerald Cloud Labs that one could leverage for certain experimental procedures.
The gas stations in my area just switched over to chip readers (at least the ones where I go). However, looking at it, you still have to insert your card all the way into the pump. This means that it would still be possible to add a magstripe skimmer in front of the chip reader. In this case, the gas station would be protected, but you'd still have the possibility of getting your CC # skimmed.
> Amazon is going to vertically integrate shipping, no question. The market demands it, and Amazon will probably eventually ship more packages than any of its competitors.

Amazon already delivers half of its own packages. Currently they're about 85% of the size of FedEx.

https://www.theverge.com/2019/12/13/21020938/amazon-logistic...
I'm hoping for 737 Pro Max
You don’t need to solve all of homelessness, just providing something competitive with a bus could be a start one would think.
I'm not sure it's just about vertical integration.

Amazon is trying to to become better, of course.

But it seems they are focusing on things that customers notice, things that are habit forming, while neglecting other areas where, maybe, most customers(maybe not here at HN), don't notice problems.

So fast, effortless delivery(at a price Amazon can afford) is one. And private brands are also another. And TV. And Alexa.

And i think that's where the main focus of their future investments will go, and not as news portrays - towards making themselves more efficient.
What I'm most curious about is what mechanisms control that, given the most obvious one to me---shining light through the developing lens and determining if the retina is getting good image resolution---is obviously impossible inside a body.
That doesn't really help me understand how challenging it is.

You say that a ring collider would be useless as a fusion energy source. I've never heard of a proposal to use a ring collider to create fusion energy, they're for investigating particle physics.

So I'm left none the wiser - what am I missing?
Our species spent a million years forming complex social bonds and we're doing our damnedest to engineer them away
Deere already disclaims all liability for the use of their equipment.

Farmers already know they are left standing alone if they have any sort of issue like the one you described. Without this crucial right to repair, the farmer would have to take the insane step of relying on John Deere to implicate John Deere in the case of a lawsuit.

John Deere Repairman: "Oh, no, Mr. Farmer, our equipment functioned flawlessly."

Farmer: "But it suddenly started spraying poison at the school, automatically."

John Deere Repairman: "My computer terminal shows that it received a direct command from Mr. Farmer. I rest my case."
Pro tip: Pick 'values' that don't require unlocking experience points, hitting milestones, or achieving things in this transitory world. Values that you can just do, now.

E.g., love well.
PSL could/should also stop sub.has-a.name trusting signed certs such as wildcard.has-a.name, depending on the configuration of the PSL. I'm just not really sure any actual browsers implement it like this though, as reading the PSL "how this is used page" doesn't turn up any such thing.

CAA does rely on DNS working, which your registrar can probably hijack. Fair point.

CT would help protect against the registrar but not against a malicious CA who simply wouldn't log if they were going to sign a cert maliciously.

You're generally right though.
I remember my dad saying about ten years ago that we should flatout stop selling helium to the average consumer until we've really cracked fusion. His reasoning was that helium is used in medicine and quantum computing, which has a whole slew of uses, vs a balloon that some kid is going to lose in five minutes anyway.

It would be pretty neat if we made helium a renewable resource, even if it is slow.
2022: https://news.ycombinator.com/item?id=32644851
Then you should really name your article "My Arbitrary Choice of Java versions That I Believe People Use vs. Kotlin".
This is exactly it. There's no reason we need to be held hostage to China's lack of environmental concern.

When a device is imported from China or manufactured domestically, a fee is tacked on that includes the price of recycling processing. Congress just has to pass a law, period.

Then recycling companies demonstrate responsible recycling and recover the fees. Fees are set per-product in order to ensure they are ultimately profitable.

Resulting pure compounds, proven to not require further recycling processing bad for the environment, can then be re-exported to China for use in manufacturing at market rates.

But as you say, it depends on Congress and on actual regulation and inspections/audits with teeth and meaningful penalties. To actually work, auditable photographic/video evidence of the entire workflow accounting for every single shipment would be a first step. But Congress depends on voters, so it's really up to us to force politicians to campaign on it.
I actually like it. I also create my own exceptions for rare (exceptional) cases, just not to forget to handle them.

But some Java SDK exceptions drive me crazy. For example `URL.parse("http://example.com")` over hard-coded strings that I know 100% won't throw exceptions, but I still to catch 3 of them.
I hear you. Somewhere I wonder how long this kind of sensitive questions can stay unasked.

There usually are repercussions, with concrete effects on work relationships and productivity (if there aren’t, why even bother ?). In your example, I’d guess people would delay talking to him and this would slow down communication. Keeping these kind of stuff silent usually don’t last long anyway, and it’s so much better to have early enough factual conversations, “we want you to fix X because otherwise it causes Y”, soon enough for the employee to have time left to digest the info and react on it.
FedEx ground is the worst; they aren't the same company as FedEx Express, they are locally operated instead (according to drivers I've talked with), and quality varies by region. I've had drivers fake signatures and dump packages at the door.

My last 3 shipments bounced around Chicago for 6 days, traveling 19 miles total, and were finally delivered late
I'm optimistic about the next 5 years of SmartTV market evolution. It's a relatively new platform and as the devices reach certain market saturation points (and play nicer with phones) I think we'll start to see a lot of really interesting applications. They're also very cheap compared to other devices.
Most, but not all. Agglutinative languages don't seem to use irregular verbs much. When I studied Turkish, I recall learning only one irregular verb. From some googling, Mongolian also has very few. Japanese has a lot, relatively, at around 10 (depending who you ask and how you count).

I'm not sure why irregularity would emerge from lossy transmission. I would think regularity would be a greater benefit here. I assume it's just a historical accident that arises when verbs stand on their own and you don't have to do anything with them. When you're just starting to have language, it must take some real insight to realize that there is a special relationship between "go" and "went", and it's the same as the relationship between "be" and "was". But if you regularly (ha) need to agglutinate a pile of endings on your verbs, then using unique words for each tense would quickly become a pain in the butt.

I find agglutinative languages are simpler than other types of languages in many ways, and I haven't studied linguistics enough to know if that's inherent to all of them or just coincidence from the small number of such languages I've studied. Turkish plurals are perfectly regular (there are 2 possible endings, depending on the word's final vowel), and Japanese doesn't really have plurals at all. Neither language has gendered words, or definite articles. Turkish has no diphthongs, and Japanese doesn't really (depending on your POV), either.

Esperanto actually looks somewhat complex to me! It reminds me of my own (failed) attempt to learn French. It seems to have a lot of baggage from the Romance languages, presumably to make it seem more familiar to those speakers. I'm a little surprised it wasn't simplified further.
Scala is way more complicated. I don't know if that's an advantage or not -- I never got far enough into learning it to do a valid comparison.

Kotlin code is something any Java programmer can read with just a few days learning, however.
The reason why I used bootstrapped in quotations was probably not made clear. There is an abundance of SaaS companies that one can duck tape together to create a “full-stack” solution for others. Does that exist? Is there a scenario someone could map out in biotech? An example of a company I think about is Emerald Cloud Labs for certain experiments. How would that work in pharma?
Being free makes it a hell of a lot more attractive to a lot of people.
And in IntelliJ you just write "psvm" and hit Tab.
Interesting that this is Intel's second acquisition of an AI chipmaker. They had acquired Nervana for $400M in 2016 - but now seem to be abandoning it in favor of Habana's chips. They would need to redo the Nervana software stack to work with Habana. As per the article, one of the reasons is:

"Nervana’s Neural Network Processor (NNP-T) uses a proprietary interconnect for scaling, while Habana’s Gaudi can scale to thousands of nodes over standard 100Gb Ethernet."
The problem is that Amazon Logistics is systemically far less reliable than FedEx or UPS.
Please don't take HN on generic ideological tangents. They're repetitive and routinely become flamewars.

https://news.ycombinator.com/newsguidelines.html
Again, you describe things that might be awkward, and even then it's only awkward if the people make them so. It's not at all fraught with "you're fired" potential if everyone remains calm and professional about such differences. Not only that, but you're think it ng entirely too narrow if "being yourself" only means expressing political and cultural beliefs.

Otherwise, I work in an environment in an industry that is much further "to the left" than SV Tech: academe. You may not believe it, but despite the cliche ostracism of "OMG that's a ::hushed tones:: conservative", it is quite easy to be one without self censoring. You simply refrain from injecting situations with those views when they're not called for, and if they are or you decide to do so during non-work times (breaks or side conversations) you be respectful of the other opinion. In short, don't be an asshole.

I get along with plenty of people all along the political spectrum at work, because we have an environment of respect and professionalism.
They're relying on most people being uneducated about how their TV is spying on them.
Ugh, I forgot about that.

That said - from "What app types are not applicable for verification?" there are the following exceptions:

> Personal Use: The app is not shared with anyone else or will be used by fewer than 100 users. Hence, you can continue using the app by bypassing the unverified app warning during sign-in.

> Internal Use: An app is internal when the people in your domains only use it internally. Learn more about public and internal applications.

> Domain-Wide Install: If your app is intended for only G Suite enterprise users, access will depend on permission being granted by the domain administrator. G Suite domain administrators are the only ones that can whitelist the app for use within their domains.

Also, in general, you don't want an OAuth client secret to be checked into a public repository anyway.

So I think there's a straightforward approach: OSS developers/contributors using the app with their personal account use the "personal use" exception to create client secrets for just themselves, and companies deploying the apps (including companies employing people to work on the app) create a client secret for use only within that company and use the "internal use" or "domain-wide install" exceptions.

If I were doing this for my own company, I would make a client secret for an app called "$company Internal OSS Apps," use config management to put a file in /etc with our client secret, make it world-readable to anyone who can log in, and tell employees that it's a violation of infosec policy to copy that secret onto non-corporate computers but they should feel free to use whatever OSS they like (that's otherwise compliant with whatever policies we might have) and configure it to read that file.

So then there's just the question of actually making OAuth support exist in whatever apps employees want to use.

EDIT: Also there's this exception which I think applies to the vast majority of OSS apps (things like mutt and Thunderbird and notmuch):

> Local Data Storage: If you don’t want to go through a security assessment, you need to change your server storage to local storage only. If your app has server-side OAuth flow implemented, your app also needs to change to client-side OAuth flow. Local client applications don't need to undergo a security assessment because data is run, stored, and processed only on the user's device (such as a computer, mobile phone, or tablet).
A good skillset and a good idea is the "main thing" if you want to make a software product.

What you need with fusion is fundamentally new science, not just an idea to pound into shape. That's rather a taller order than a disruptive crowd-scale gig play in the power industry.
adblock can fix that anyway. Also see umatrix. it can block media/scripts/cookies/frames etc; from any source, on a per-page or domain basis.
A lot of people thought this couldn’t happen.

Difficult to overstate the enormity of this to the industry.
How do you prevent your system from a ransomware attack?

If the user is using Windows 10 Professional and doesn't have admin access, can they still be a victim of a ransomware attack?
Any company based in Russia, China (or any other regime perceived as authoritarian and lacking in the rule of law department) is going to struggle to get on the short-list of "organizations to trust with the master keys to your whole online life".
The tracking of which doctors are with the patient is HUGE. Especially for insurance billing.
most*

25% of people are going to hit 0 again. 1-2 is huge for most people
But people want to watch Netflix, Amazon Prime or other stream services. Modern smart TVs have those integrated.
The big question is why they haven't done it already? Boeing's disconnect from reality is painful to watch.
Thanks! I did take the time to give it a good mobile experience. Actually, I designed it mobile-first, just not an app. Might be worth giving it a try.

I must say it will take some time to create mobile apps for it. I want to create the right product on the web, and then make mobile apps
IIRC the modus operandi for at least a few of these large ransomware attacks was that the initial attackers who succeed in phishing or whatever would install a remote backdoor there and sell the access for something like $2-10k to professional teams who have the infrastructure and capacity to handle it "properly" - use that foothold to spread across all the workstations, gain user credentials to access servers and destroy backups, and then trigger ransomware everywhere at once perhaps a week after the initial infection, transforming it from a driveby nuisance to a targeted attack that's hard to recover from and that can justify a big payout. Some of the victims had reasonable backups, but they were intended for disaster recovery, not malicious action; so they were accessible from the compromised machines and thus could be disabled or destroyed.

An automated attack that manages to hit a random workstation can extract a ransom of a couple hundred dollars; but if they invest a couple day's hacker labor to move deeper, then there are many public cases of $50 000 - $500 000 ransoms paid, and multiple cases such as Baltimore city and Atlanta city which suffered losses in excess of $10m as a result of not paying the ransoms.
Pythons' Flask + Vue

https://testdriven.io/blog/developing-a-single-page-app-with...
Yeah but my database costs are a tiny sliver of my overall expenses and the instances will be located in whatever cloud provider hosts the rest of my infrastructure.

How many people are running a cloud account with ONLY a cockroachdb in it?

Your point seems pretty obtuse tbh.
Yeah this is nonsense and isn't an argument against the language. Embedded devs aren't allowed to use Rust, does that mean we shouldn't compare C++ 20 to Rust? Does that mean Rust is a bad language? If these said devs are limited to Java 6/7/8 does their company have the inertia to use a brand new programming language (Kotlin) that their devs don't know? Does this mean Kotlin is bad because they're not using it?

This is a bad argument.
SHA2 is by far not the best option for ptrauth. The best option is HW and API dependant. There are dozens of better options. I recently included most secure hashes with tons of variants into https://github.com/rurban/smhasher/blob/master/README.md#smh...
SHA3 would be atrocious. Something like fletcher2 or wyhash seem to be best.
Why don't the nullability examples use Java's Optional?

This code:

if (nullableVariable != null) {
boolean success = nullableVariable.someMethodCall()
if (success) {
return success
} else {
return fallbackIfNullMethodCall()
}
} else {
return fallbackIfNullMethodCall()
}

Could also be written something like this:

result = Optional.ofNullable(nullableVariable)
.map(NullableType::someMethodCall)
.orElse(fallbackIfNullMethodCall());

Sure, it's no Elvis operator, but it's a lot more readable than the "standard" if/else structure of traditional Java. If we're comparing Java and Kotlin, we should at least give Java a fair chance. I dislike the verbosity of the Optional wrapper, but it's a lot better than if/else checking.
Or, you could use the tax money that you could use for free rides (that only makes bad service marginally more useful) and put it towards more useful service? It's not as if this money came out of a box labeled "only for free fares." Right now this is a $9M opportunity cost, annually. To get both the free fares and $9M of better transit would double the cost of this, but then you'd have to ask why not use all $18M on better transit, etc.

Making a service that isn't usable most of the day free still makes it unusable for most of the day.
I would imagine that the TV manufacturers get paid per unit sold with the ad-serving software installed, in addition to ad views.
It's hard to conceive of an issue which is less important in modern programming. In 20 years of commercial programming on a variety of platforms my experience is that case sensitivity causes no problems at all and case insensitivity causes only minor and occasional problems.
LavaPS: Top, Implemented as a Lava Lamp (1995)
Apparently the irony is over my head. Could you explain?
FedEx ground does not have a guaranteed delivery time.
1% of commuters is not the same thing 1% of trips.

For a less dense city like KC you can't really expect many commuters to use buses unless the city is carpet bombed with bus lines since the low density makes car ownership not suck (there's probably free parking at your job) and buses suck more (the bus is less likely to go where you need it). Bus lines do however generally do a good job going to places like schools, grocery stores, senior centers, etc, etc, and all sorts of places demographics other than "commuters" want to go.
One of the major issues users experiences, when they get an Alexa device, is, what to do. Also, when a user finds a skill, they don't know what to say to get the skill to start.

Something that has been staring us in the face is why don't we use voice to activate skills. The Alexa Deck is a randomised curated list of skills with a voice CTA.
In the past I've started with buying before learning instruments (and sporting equipment) with often goes unused after a season. This time I knew I didn't know so I can learn if I like it and have a sense of what to buy for the long term. The bonus is that even a small monthly amount is a reminder to use or cancel (like Netflix).