skysight-inc/HackerNews huggingface dataset:
Thanks for the feedback.

We've been doing a lot of user testing recently, so I'll run this by the team that do those tests.

Really appreciate you taking the time to provide feedback here. You didn't have to but did anyway and it's appreciated.

Thanks!

Kyle

1Password Security Team
Most of my textbooks were international editions or a few editions back, for me that listing is an issue as the international is cheaper elsewhere. On Abebooks (which is great for searching by ISBN) It's $17.41 - not a big difference, but if I thought I was buying the standard edition I would go for the Amazon.
> Nobody in the history of humanity ever got wealthy from having a job

I think thousands of people in the valley who made their money from stock options / RSUs will disagree with this
> So basically, the Google employee added arbitrary javascript

This is a little disingenuous. She's a software engineer who works on this extension. "Injecting arbitrary JavaScript" is her job.

If she bypassed code review, introduced a vulnerability, abused a known weakness to violate policy (e.g. logged into an account with signing keys to deploy manually when it's usually automated), etc. then you'd have a case. If she did her job and followed all policies about review and the only question is the content of the notification, then the way she sent it is an unfair criticism. It reeks of CFAA-style stretching of the truth about authorized access, and we as hackers shouldn't stand for it.

I wrote a command-line tool at work to automatically add a bunch of party parrots to a Slack message. This tool runs with your personal credentials, and web-scrapes your Slack access token in order to run. As a normal UNIX tool it also has access to your homedir etc. The credentials it uses can also read your private Slack DMs, access data that you can get to but I am legally forbidden from seeing, etc. - but it does none of those things. I installed it to a bin directory in everyone's path, without code review, because we have a system that explicitly allows this and it is often useful. Our security team raised a general ticket to the effect of, hm, maybe code review should be required before you stick code in everyone's PATH. Nobody is thinking of firing me for "injecting arbitrary Python" or "stealing credentials" or anything because nothing I did was against either policy or convention, even though you can make it sound horrid if you choose.
Mine's running perfectly on MBP15 2019 model, with no extra software.
It's also a lot bigger than the EU.
If the amount is so large that you are actually concerned with someone finding out, and they gave these out to the whole company, perhaps it would be wise to quietly point out the mistake to HR. IANAAccountant, but I would guess they're supposed to report it on your 1099. Normally it would be reported as taxable income on your W2.
Azure support is literally amazing. Super easy to engage, perfect follow through every time, and thier techs are competent as hell.
Frankly, Amazon has such a poor name now that I would be embarrassed to buy any Amazon Basics items. I definitely skip them, even for non-visible items such as batteries.
Rocket.chat is also a very nice alternative and supports more use cases. We use it internally and also as part of our product.
It's ridiculous to call this a vulnerability in Slack. It's a long way of saying "if you send sensitive data to someone, they can share it with other people without you knowing it".
Using the Newsvendor method to calculate the optimal quantity of inventory
I just wish that MX Master 3 had a couple of extra buttons by the thumb.

My 3 thumb buttons on my Logitech G500 are mapped to: Page Up, Page Down, and Back. Clicking and holding the Page Up button can rapidly take me back to the top of a page without moving my right hand to hit the home key on my keyboard. It's pretty useful, in my opinion, to be able to roughly and quickly scroll with Page Up/Down, then fine tune with the scroll wheel.

Looks like with the MX 3, I'd lose the back button though, because I really don't like the "gesture button" they've added.

Is the thumb-wheel on the MX 3 "clickable"?
In my world 50 isn't that old in this day and age. Most people I know at an age around 50 are healthy, active and enjoy life often even more then people in their 30s with young kids and everything else around that.
Are designers like you the reason password reset mails frequently take 30 seconds plus to arrive?

I expect things on the web to be damn near instant - I want to click that password reset button and hear a synchronous "ding" of an arriving mail. I don't want to wait for some cron job to run once per minute.

If you want to send mail off the serving path, at least use a push based queue so there is no scheduling or polling involved.
You can front-end IRC with TheLounge [1] to get history and make some folks happy that prefer using a http client.

[1] - https://github.com/thelounge/thelounge
It sounds like you are super critical about any potential security issues (because what else could it be, other than that it just works or it doesn't). If given machine security is super important (oh it's running a web server..), then why not just run certbot elsewhere and sync the files in a manner that satisfies your security needs?
Ha, yeah that also seemed pretty high to me too (as an American) but I would be really curious what the average really is
What a nice blog! I love reading about geeky families.
"Easier to contain" in this case does not mean "more likely to be safe". There is no incentive whatsoever for any large centralized body to not exploit the data.

In any case, centralization is fragile. Even if there were some altruistic entity willing to run these services and not exploit it, it would still be a systemic risk.
They have changes explained if you click into a map. I was wondering how Paris had such a perfect circle line, but it was changed to be prettier and more symbolic. Still neat!
That is a really good point that I didn't consider.
I don't think that internet connectivity alone is enough.

I live in Chattanooga TN where we've had consumer gigabit fiber for the better part of a decade (and 10GB for a while now) and the tech scene is good but not amazing (particularly where startups are concerned).

> The barrier to entry of a high tech job sector is primarily internet connectivity. You can't run a web server out of your house if your ISP doesn't allow it.. or if the top speed is 3Mbps.

In my experience, after a certain point, most tech businesses don't really need better connectivity; most of the heavy lifting is done in the cloud these days.
Ok, how do you know if something is clean, safe, and resonable if it comes out of a dumpster? A kids toy could have biohazard material on it, that is disgusting.
On the subject of good tricks, I like to put this debugging snippet in all my Makefiles. It supports typing `make print-VAR1 print-VAR2` and it'll dump the values of VAR1 and VAR2 (this could be extended to also show `$(flavor $star)` and `$(origin $star)` and other little details, but usually I just simply want the final value).

define newline # a literal \n

endef
# Makefile debugging trick:
# call print-VARIABLE to see the runtime value of any variable
# (hardened a bit against some special characters appearing in the output)
print-%:
@echo '$*=$(subst ','\'',$(subst $(newline),\n,$($*)))'
.PHONY: print-*
Unionization is the topic of the post, but workers' rights are not ontologically related to statism. There are plenty of libertarian socialists and plenty of authoritarian capitalists. Some of your points are non sequitur as a result. To this point, though:

"I’m arguing that it shouldn’t be a surprise, then, that the US has produced more innovation and economic capital than European countries, partially because the regulatory environment is friendlier and more encouraging of risk."

I tend to agree, but that's not really what's at stake for businesses facing organized labor. After WWII, the (capitalist) USA controlled about half of the world's wealth and was home to a robust labor movement. In many ways the American labor movement between ca. 1850 and 1960 was hugely influential in the Western world, including and especially Western Europe. During that time, American businesses produced an astonishing amount of inventions. For these historical reasons, I think the narrative about America's relationship to organized labor is far more complex than you've asserted, unless we're supposed to pretend that American history only dates back to the Reagan administration.
They are in the same boat in that they face potential financial ruin if they don’t get their next paycheck for whatever reason.

There is already a separate terms to describe people who live paycheck to paycheck to cover essential living expenses, it is called poverty.
> For writing globally appropriate software, UTF-8 is the best option that exists in practice.

OK, I lied. China doesn't use GB2312 anymore. They use its update, GB18030, which carries arbitrary Unicode data just as UTF-8 does... except that, like GB2312, it puts the Asian characters in two bytes and the European characters in three.

It's certainly not obvious to me that UTF-8 is better for globally appropriate software. It looks worse. Software for Europeans, sure.
I do not know any person who cares about a hair cut that would use this...
If they are posted at the metro station and within carriages, I sure as hell would. I don't want to use my phone for _everything_, especially if what I want to see can be mass produced on a piece of paper.
One thing that really squicked me out when I left Google is how other companies, even large and sophisticated ones, are using all kinds of garbage that comes from canonical or red hat or percona, and they have NO IDEA what's in there. Say what you want about google's NIH culture, but in regards to code provenance and verifiable builds they are doing the right thing and many others are not.
I assume you also object to requiring a driver's license to operate a car on public roads?
DolphiniOS: Run GameCube and Wii Games on iOS
Focusing on the customer is the only thing a company should be doing, I'm astonished how often people seem to forget this.
Cars require too much land area per person. Two dedicated parking spaces is only scratching the surface. There's gas stations, repair shops, dealers, and of course the actual roads. By the time you carve out enough space for these, sprawl is necessary, and horrible traffic is unavoidable.

Personal cars are a failed experiment and a total aberration from historically successful modes of human development.
Show HN: I made a comparison table of 585 camera lenses (DSLR/Mirrorless)
I can listen to the spectrum just fine without a license. Why would I want to talk on it?

More to the point, why would I want to have to get the government's permission in order to talk on it?

Also:

> If you like outdoor activities in areas where cell phone coverage is poor (camping, hiking, skiing, dense urban gatherings)

If you mention this as a possible use, mention that it is illegal to encrypt amateur radio communications, so you must broadcast your family's information and plans for the world to hear. That's quite the security risk.
At some point, this is splitting hairs. Single instructions are atomic wrt. interrupts, so surely there must be some sort of check every cycle whether an interrupt has arrived during that cycle.

The magnitude of the time slice or polling interval is immaterial as to whether it is to be considered "polling."
I don't understand how an enterprise as big as google doesn't have the energy to simply eat through time and money until it succeeds.

Even if the share has to be divided forever between 3 major cloud providers, it would eventually pay off.
If there was a betting marketplace for this, I would bet all my money against Google. Three years is nowhere near enough time for Google to catch up when the current situation is that they're falling more behind every day.

They also have no way to fix the customer service issues plaguing every product of theirs, including their cloud stuff. So, so many stories about how bad they are.
Over a decade-plus consulting career I always tried to either discourage spurious new projects or work myself out of current engagements. While this was locally sub-optimal it led to long-term relationships that meant meaningful work, strategic initiatives and more money.

You could also try hoarding knowledge in an effort to maintain your value but this strategy also has a limited shelf-life.

I'd politely suggest you don't focus on solely optimizing the status quo until you're near the end of your career and ready to ride it out. Otherwise you will be in trouble down the road.
A self made millionaires workshop
The big distinguishing difference is that OCaml doesn't have ad-hoc polymorphism and function overloading. You cannot have a function that operates on many different types; which is why you have two sets of arithmetic operators for integers and floats ("+" vs "+.", for example). In theory you can use modules for this, but it's awkward, and I don't think they're generally used this way. (OCaml is getting implicit modules, and this may help the situation.)

In Haskell, typeclasses make this super easy. It allows you define a family of functions/operators that together become what a Go or Java developer might call an interface. Code written to use a particular typeclass will work for any implementation of that typeclass.

On the other hand, OCaml's module system is very powerful and has no counterpart in Haskell. It allows you to package a whole type implementation into a single module that has a public signature, and can be instantiated with generic type parameters.
I'd love to read this. Is it just an interest piece or is there some statistical data that goes with it? I know there are a lot of people who are not in a great place in cities. I also know, there are a lot of people not in great places in rural areas.

For my situation personally, it's never been an issue, and it's not for the people in our social circles. We were never going to be a single income household, it's not something either of us have ever wanted. The thing with cities, is you can't move to a city and do things the same as you do when you didn't live in a city. You've got to find a way to drop commuting, live in smaller spaces, be closer to thing things that you love. I know a lot of people who have moved to the city but can't live in a small space, so they buy a house out on the edge then spend hundreds of dollars and countless hours commuting into the city and it just breaks them. I can understand how they'd want to live else where but even then, when I talk to them, they are turning down job offers in non-coastal cities.
We still sell licenses, it's not super easy to find but it's there. Open the app on a new machine, on the welcome screen of options there's a "Create A New Local Vault" option, which takes you down the path of purchasing a license if one doesn't already exist.

Those on subscriptions can also still create local vaults as well. You'd have a subscription plus the option of local vaults.

So options haven't disappeared, they're all there.

That said, providing an option without support is kind of bad form. We pride ourselves on providing the best technical support we can for our users. Selling a license and then not supporting it would just not be within what we consider good business or, well, being a good developer.

So whatever we sell, we have to support.

Kyle

1Password Security Team
I, for one, appreciate having several years' notice...
I like to use a simple makefile that runs `docker build` and `docker push` commands, automatically tagging images based on the current solution version and git head. That means I can simply do `make build|rebuild|release`, and get images all properly tagged.

But yeah, all the actual work is in the Dockerfile.
Aren't refunds required for returns in US online sales?
A customer of mine had LogMeIn Pro just to access a single pc from a couple of phones every now and then. One day it suddenly stopped working. As it turned out, in the three years they had been using it, the price had hiked from about 100 EUR to over 350 EUR. Having no idea who charged them that much and what for, they reversed the credit card transaction. Since then, they've moved on to RealVNC. It's 1/10th of the price and works just as well if not better. Don't let the name discourage you; the product has very little to do with the old and inefficient VNC protocol anymore. I was hesitant to try it, but it's been a very positive experience.
Resources you need to learn the ins and outs of joining a startup
That's not the modern cloud at all.

There are literally hundreds of services offered by AWS and Azure outside of what you are thinking of "rented servers". These things cannot be replaced by "managed hosting". Not that they would be slower and less reliable, these services don't even exist outside the cloud providers.
>They don't give a shit because the news they read, the entertainment they watch all tell them not to

No, they don't give a shit because they don't need to. It doesn't affect their daily lives.
I love the mystery in radio, even thumbing through AM stations on a long road-trip is enjoyable, but as a complete non-technical person, I've always been overwhelmed by amateur radio.

Maybe I will muster up some courage and dive into this.
If by "help" you mean, make a pharmaceutical company potentially millions or even billions of dollars, then sure.
And a lot more receivers are available, all over the world: http://websdr.org/

Also interesting: Live reports of radio amateur transmissions via https://www.pskreporter.info/ and http://www.reversebeacon.net/

Amateur Radio is a great hobby that will give you unlimited possibilities to play and learn. From tube transmitters in Morse code (which is still a thing, and it's fun) to sophisticated weak-signal modes like FT8.
Does Mattermost still have LDAP issues? The company I work for was looking for a Slack alternative but in the end decided to stick with Slack because of this.
xxd target/thumbv7em-none-eabihf/release/from-scratch.bin | head -n 5
00000000: 0000 0120 dd00 0000 0000 0000 0000 0000 ... ............
00000010: 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000020: 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000030: 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000040: 0000 0000 0000 0000 0000 0000 0000 0000 ................

> Reading this, our initial stack pointer is 0x20100000, and our start address pointer is 0x000000dd.

I see the pointers in the top line, but is this a standard feature of objcopy's binary format? Are the pointers the stack and entrypoint always at the beginning?
I couldn't figure it out either.
Does this mean google cloud is closing by that date?

What isn’t google going to close?

Would it be reasonable to now run a headline “Google to close cloud in 2023 following failure to dominate”
Right, and the reason you went looking was because you felt wronged by your employer -- whether it be office politics, backstabby coworkers, a manager you did't like, etc, you would not have gone looking for another job (in the same way) had you felt valued, happy, and safe at your job.

"shields down" is just Rands' way of saying "decided to even consider another job". It doesn't have to be defensive. It just means that that was the point where you realized that _maybe_ this job isn't the best one for you. You might come to that realization on your own (as you did), or after seeing things happen to other people, or even from a recruiter cold-calling you. The "shields down" moment was before when you started looking, or when you set LinkedIn to "I'm looking ...".
The biggest reason is because union laws would force other people to join the union, if it got established.

I believe that you should be able to join whatever professional organization that you want.

But the moment that you try and force me to join that professional organization, with legal provisions that would cause me to lose my job if I refuse, is the moment that I go to war against you.

I will retaliate. I will fight back. Because I no longer have any sympathy for you, if you are going to cause me to lose my job because I refused to join your special club.
How to Choose Between Firebase and CometChat Pro
We finally have a technical definition for what a professional software engineer is: someone who doesn't recommend "cloud-native" workloads.
> Is it worthwhile to 'counterfeit' cat food?

Could be. You could get away with a lot lower product safety and quality for cat food than you could for human food. That means you could make it for a lot cheaper and sell it as a higher quality brand. It's easier to get away with killing or sickening a few cats than it is people.
I think the difference is that Google is a lot less likely to infringe on employees' right to bear arms than they are their right to organize, especially given that this message literally appeared on a website of a firm Google hired specifically to suppress organization
It could have that coming out of the factory. How would you know? Do you personally conduct inspections?

Not every dumpster is filled with expired vegetables or used heroin needles. Some are just full of discarded products.
> and then when I got there the sandcastle was actually a robot that stole my credit card.

What kind of moron shows up to see a sandcastle and doesn't think twice about handing over their credit card?
Hilbertian formalism is only one particular brand of formalism.

The definition in the article is the one put forth by Frege, perhaps the man most responsible for launching the debate about formalism into the wider philosophical community.

It seems okay to me for an informal article to define formalism in the same way (certainly the game aspect of it is the thing that ties the various schools of formalism together).
On American Architectural Style
Chrome’s data disaster: Browser update wipes out Android app data
> to pass Microsoft or Amazon—currently first and second, respectively

Does that imply that Microsoft is first and Amazon is second? That is surprising to me.
> It wasn't her thoughts it was company policy

FTA, your personal assertion is quite wrong. Her line of work was security and at most she was tasked with posting content regarding privacy and security concerns regarding non-Google tools and services.

Her personal political views and opinions don't pass off as InfoSec topics.
So you decide to get a jar, put crap in it , mislabel it and sell it, and it worked. Makes you a fraud. What’s new?
>> simply eat through time and money until it succeeds.

That was Microsoft’s Bing versus Google strategy.

Money can’t necessarily buy market dominance, even vast quantities of money.
IIRC Google killed off a lot of products that were profitable. They just decided it was not profitable enough by their own arbitrary metrics, not that it wasn’t profitable at all
Aww, no Delhi? We got hella urban rail. Although I guess a large proportion has opened after 2014.
Oh yeah? I remember a story about GCP shutting down an entire large enterprise customers GCP account and turning off all their services over some minor billing thing.

No notice. No warning. No email or call. Just bam - your infrastructure is offline.

[1] https://medium.com/@serverpunch/why-you-should-not-use-googl...

Now maybe they've gotten better. But this was only a year ago. You have to at least acknowledge that they are quite frequently not at all on par with organizations known for customer service in this time such as Microsoft.