skysight-inc/HackerNews huggingface dataset:
Good to know they are monitoring the User-Agent header for security.

A Chrome user changes her User-Agent header in Developer Tools, logs in to Gmail and finds that Google has sent her a "Security alert" e-mail message that a "new device" has logged into her account.

Maybe the e-mail should inform her that Google has stored a new device fingerprint (https://en.wikipedia.org/wiki/Device_fingerprint) and the ways in which Google can use it are not limited to "security". It will be used to further Google's business, online advertising services.

Sure, Google can argue these fingerprints will be used for "security purposes" and are not being gathered for online advertising services, but what are the real risks to Google of "less-than-perfect" Gmail security.

With over 60% of webmail users on Gmail how easy would it be for a user to protest Gmail insecurity by moving to a competitor, one who would not also be taking fingerprints.
Up until last year, Wolfenstein - a game depicting nazi germany - wasn't allowed to have swastikas.

Holocaust denial is still a crime, causing legal consequences for publications that dispute the actual number of jews killed in concentration camps.

NetzDG obliges websites with more than 2 million registered users to investigate and delete flagged content. This affects social media posts accessed from anywhere in the world, if the German government decides it violates their local laws.

Let's not pretend things are all rosy.
Plastics takes fossil fuels and sequesters them for a while so we can't/don't release their carbon.

If we made less plastic, would the decrease in gas/oil consumption just be increased in other processes?
Until someone creates a machine that can pulverise anything into a fine powder and progressively sort each granule into their constituent metal, plastic, silica and organic type.
Same. I tried microservices before and while it cleaned up the code base, I didn't quite like the results down the road. Some things go stale, you multiply ops * number of microservices, a change in one can mean a change in multiple others. I'm not against services in general, but not a fan of so called microservices.
We're making a certain set of tradeoffs. For example, we're not adopting the "write code in whatever language you want" form of microservices that some folks adopt, because we don't feel like we're large enough to support that.

Like I said, though, we do want to minimize the library footprint. The vast majority of deploys in this new world will be single service deploys, with the benefits that come with that. We already deploy our monolith several times a day. These services will speed that further.
To answer your original question, I keep notes in an unlined black Moleskine “work journal” about:
- talks, lectures, sermons I’m listening to
- meetings I’m attending
- ideas that I have
- outlines of a talk or an article I am about to give or write
- sketches of product designs
- diagrams for explaining complex concepts visually
- quotes I hear that I enjoy
- product ideas or business model ideas that I have

I have a “personal journal” where I write a prose account of my life and take time to process the events and think through what I’m feeling, thinking, and learning.
Many forms of post consumer recycling are not worth it today with both streams often ending in the same landfills. That’s the only objection I have to recycling.

But, in a thousand or even a million years the atoms will still be around. Basically we may find this stuff useless, but that does not mean it’s permanently devoid of value. If nothing else archeology often involves going through trash heaps from ages past.
Ironically, this page is neigh unreadable on mobile. It's all squished due to the absurd first party "ad" on the right column which, coupled with the related posts right below, makes it hard to distinguish the actual content.
Most stuff is web stuff now. And I’m not talking about front end, we do a lot of back end work in TypeScript because node is lighter than the JVM which makes it a better choice for lambdas. I’d say it also has more sophisticated static typing than Java or C++, while also allowing dynamic typing in the few cases where it is convenient. Having the front and back end written in the same language also reduces impedance between teams. A lot of our tooling is even written in it now, deprecating many Ruby scripts.
I've written browser extension (https://github.com/karlicoss/grasp), that allows me to create bookmarks straight into org-mode. Then I can manage them in emacs alongside other org-mode notes.
Interesting to see the growth of PyTorch https://twitter.com/cHHillee/status/1195568939381776386
Lambda's 16x Tesla V100 Server, Benchmarks and Architecture
You use that machine on better ore.
I used both Java and Go in production and yes Go can be faster or Java it depends but Go usually use between 3 and 10x less memory.

https://www.techempower.com/benchmarks/ ( real world benchmark with networking / serialization ect ... )

Get over it yes Go can be faster than Java it's not a secret.
There’s an easy solution: tax landfill by 1,000+%.

If consumers had to pay a significant amount for each load of trash removed from their home, you’d see the market for ultra low waste products skyrocket.

And then the economic value of recycling—from careful sorting by homeowners to the processing of material by recyclers—would immediately make sense.
SIPC replied to an inquiry I emailed, and said they have no guidance on how they would handle fractional shares.
You can start porting your live codebase to python 3 right now - no downtime at all. You can have a 2+3 compatible codebase live in a week or two, it'll get you about 98% the way there [1]

My projects (e.g. https://tmuxp.git-pull.com, https://unihan-etl.git-pull.com) are both python 2/3 compatible.

I learned by reading through other projects like Sphinx, Flask, Werkzeug, and SQLAlchemy:

- Flask: https://github.com/pallets/flask

- Werkzeug: https://github.com/pallets/werkzeug

- Sphinx https://github.com/sphinx-doc/sphinx/tree/v1.8.5 (see compat: https://github.com/sphinx-doc/sphinx/blob/v1.8.5/sphinx/util...)

- https://github.com/sqlalchemy/sqlalchemy

Helpful blog posts: http://lucumr.pocoo.org/2011/1/22/forwards-compatible-python..., http://lucumr.pocoo.org/2013/5/21/porting-to-python-3-redux/

As for automation tools, for 2/3 compatibility, I used futurize and huge codebase to great success: https://python-future.org/futurize.html. I started with this:

futurize --write --stage1 --unicode-literals --nobackups <files>

and https://docs.python.org/2/library/2to3.html

2to3-2.7 -w -n <files>

Really helped.

Also, wire Travis / your CI system to have your tests run on python 2 and 3.

If you want to test your python 3 codebase live on a subdomain / same SQL/NoSQL DB, be careful about jobs/tasks! Pickle version mismatches and stuff. Use a separate redis/whatever DB for the deployments.

After you're finally on python 3, you can use https://github.com/asottile/pyupgrade to modern your code.

[1] For the other 2%, use conditionals in your requirements file:

enum34==1.0.4;python_version<"3"

ushlex==0.99.1;python_version<"3"
I have an enduring fantasy of building an app that would bridge the physical notebook with the digital world in an entirely seamless manner, giving up neither the affordances of analog nor the data-driven features of digital. I’ve taken several runs at it, but none serious. Thus, it remains a fantasy.
Run Your Own Authoritative DNS Servers
If someone introduces a counterexample that they believe is comparable, calling "whataboutism" doesn't refute anything.
It's a move to exclude the information, and ultimately to stop discussion. What, after all, can one say in response? It isn't an argument—it's a label that is intended to stigmatize. This verbal trick is so empty that it's surprising it has currency among smart people. I think it's because the word itself is so catchy.

When someone brings up information isn't in fact comparable or relevant, the reasonable thing to do is to explain why it isn't, and give the other person a chance to respond. It's natural for people to disagree about what's relevant in an argument—that's part of having a disagreement in the first place. Trying to close off discussion so only your side's examples count as admissible isn't good discourse. Being first to raise a topic doesn't confer power to control the conversation.

Perhaps the more helpful broader point, though, is that all these canned arguments are repetitive and therefore low-quality. They're like slapping a sticker on something rather than engaging with it. Because of that, they make threads worse and more predictable. People tend to respond badly and strike back, rather than continuing in good faith—and it's easy to see why, because labels like "whataboutism" express dismissiveness.
Exactly. Hence posing the question (rhetorically, I suppose).
So what? The question would be "Why is insider trading actually bad in this specific instance?" not "Is insider trading actually a crime?"

"Insider trading creates perverse incentives" would not inherently mean that the purported insider trading by equifax executives was a bad thing.
Hi all, author here. I recently took an interest in running more of my own infrastructure, as I think that is the best way to deepen my understanding of how things work.

This blog post outlines why and how I run my own authoritative DNS servers.
No, it's the wrong URL. Sorry! I can't edit it, but the correct link is https://andrewdustan.com/pdf/dustan_prepasi.pdf
Amazon would appear to be a strong counter example. Investors are happy to tolerate low short-term profits as long as management has a credible plan to increase long-term profits.
Paywalled for me. Anyone have a solution?
I don't have recent numbers in front of me, but I believe our web servers are more like 40% of our hosting costs today.

Over the past year, we've started leveraging our CDN (Fastly, who have been great) a lot more. That said, for us a lot of logged out traffic still carries the weight of logged in traffic. A logged out user can start doing math exercises and we'll keep track of what they've done. If they then create an account or log in, that activity is associated with their account.

Khan Academy may look like a content site, but in many ways it's more like a "learning app".
Operating system idle loop?
If I'm reading it correctly, it's introducing a possibility that Crick hadn't considered: that materialism might be correct (as he thought), but the generation of consciousness isn't specifically located anywhere.
Exploiting Null Byte Buffer Overflow for a $40k Bounty
That's extremely pedantic and doesn't really add to the discussion.

My point was that these private companies police their content based on the impact it has on their bottom line and any laws they have to respect, and that's it.

They don't do it to protect any kind of speech, groups or individuals, and no one has any rights (related to speech - yes AODA and other such legal rights apply), in the civic sense, when using Facebook or other social media platforms.
>The cost of a target is immaterial to the cost of weapon.

With thinking like this, this is how one looses in the game of attrition warfare (setting aside the technical difficulties shooting down satellites that are trying to active evade such, rather than some boisterous demo on one that isn't). If the Chinese can't maintain "social cohesion" at a cheap of enough cost, it would be only be ruinous in the long run.

"There is no instance of a nation benefitting from prolonged warfare" - Sun Tzu

>Alternatively, they could insist that all ground control stations be based in China, with Chinese "partner" firms before the service gets off the ground

Well this certainly sounds like a cheaper alternative that seems way more sustainable and wont be as burdensome on the resources of a population. However, any ground station that has LOS into china from outside its borders) and powered high enough would evade such, then we're talking about the cat and mouse game of trying to impede beam paths. Maybe they'd have to purse something on the device level via the manufactures to block such things.
Love the look.. it's gorgeous. Not quite into React, but definitely bookmarked this for future reference.
I would say memcpy or similar (strcpy)
I'm not sure why, either... but since we're here: REAPER is very programmable which might appeal to readers of this site. Specifically:

ReaScript: can program high level UIs/project manipulation/etc in Lua or EEL2

JSFX: can write realtime signal processors in EEL2

Video: can write/edit video FX in EEL2 (a ton of included presets are there which can be tweaked on the fly)
If you assume that "Anyone could have been using that camera!" is a defense, you're absolutely correct.

It's perhaps worth considering that an authoritarian government might not trouble itself with such legal niceties. All they have to do is mandate that journalists with cameras register their keys, make possession of a camera with an unregistered key criminal, and track sales / border entries. China springs to mind as a country that might do such a thing.

Again, you're absolutely correct in asserting that anonymity of camera-user is important! It's just perhaps worth considering how linking hardware to images might undermine that in dangerous ways.
I love Ludum Dare (I've done about 12 of them - they are great fun) - ANNNND, I love reading people's post-mortems... but I gotta ask - how did this post mortem from from LD38 in 2017 make it to the front page? Seems like some black magic!

Anyhoo, the write up is great - and weird timing - I just went to see when the next Ludum Dare was this morning, and was surprised to see it's in 117 days... they've reduced it to twice a year now.
Insatiable consumerism and discontentedness
Who cares what their process is?

Apple is sitting on 56 Billion in cash, if they want the talent open the checkbook.

There is no good reason they need to “import” talent and limit that talent to 100K.

They could also improve their talent development processes and start looking for talent in other areas, Money-ball style.

I don’t understand people’s unwillingness to appreciate that these are cost cutting moves and reducing employee freedom of movement (H1-B’s are essentially handcuffed)

Let Apple participate in the market for labor, why do we need to bend over backwards for Apple? Let a competitor compete with them, we don’t need to lobby the government to change the rules for an organization sitting on billions of dollars.

The median salary of an H1-B is $80,000. To be having this discussion without acknowledging that labor costs is a factor is laughable.
> there are no countries that export pure trash to be landfilled in a third world country.

Of course they do.

Even Toronto was exporting 100 truckloads of trash to Michigan for years until recently.

https://www.freep.com/story/news/local/michigan/2018/02/19/c...
Yes, it’s much faster than these java and jvm based codebases (including all jvm based languages like kotlin, scala etc). Go as a language is just so much simpler.

Although compiling overhead of large JavaScript codebases, that make up most of modern websites, kills any kind of benefit in improving build performance of some backend service.
Plasma Mobile as Daily Driver on PinePhone
We essentially run in a serverless environment (App Engine), so fast startup does matter to avoid some unlucky users hitting the cold start.
I've been doing Twitter threads of Google's political giving for a while; they donate to a large number of terrible people. I try to single out politicians with records that are antithetical to basic values Google employees share, or that the company advertises (like its ostentatious committment to #pride), not just things I politically disagree with.

To head off some comments that always come up:

1. Like most corporate PACs, Google gives fairly evenly to politicians in both parties. I don't think donations to Democrats "cancel out" donations to indefensible figures like Scalise, or Nunes, any more than giving money to the NAACP cancels out a donation to the KKK.

2. Google's giving is not indiscriminate, but tactical and highly targeted. In particular, they don't just give to everyone across the board like the sugar lobby.

3. The dollar figures are small because they are capped by statute. At most, Google can give one politician $10,000 in an election cycle. This is absolutely dwarfed in size by Google's D.C. lobbying operation, which can't contribute directly to campaigns but finds many ways to be influential.

4. This money is donated by employees who opt in, but is allocated by the company. Googlers have no input into the targeting and timing of these donations; it's decided by the office of public policy.

5. An American corporation can do fine without a PAC. Apple and IBM don't have one. Microsoft won a giant Pentagon cloud computing contract while its political giving was suspended.

With that said, some further threads:

November 2019:
https://twitter.com/Pinboard/status/1197253535735267328

August 2019: https://twitter.com/Pinboard/status/1164031478897901573

June 2019:
https://twitter.com/Pinboard/status/1152245502361997314

April 2019:
https://twitter.com/Pinboard/status/1119751992597835776
Christopher Hitchens on the Oklahoma bombing and the Republican big tent (1995)
$2,500 hardly seems a large donation from a behemoth like Google. It’s fairly common practice in the Fortune 50s to donate to any politician who might even have a glance at any potential legislation that could affect them.

This would be more impactful if Google was one of the only large companies that donated.
>Listening comprehension, IMHO is the last skill to develop in learning a foreign language.
The reason is that it's "all or nothing". You either know and recognize all of the words in a sentence, or you can't cope with the sentence at all

So not true. Maybe depends on the way you study but I focus on listening skills hardcore early on. It's what helps build the natural accent. It's definitely not all or nothing. There are islands of understanding. They tend to grow and grow. It starts out with single words, then grows to two words together then grows to partial sentences and then to full sentences among a paragraph. So on and so forth.
American Civil War: Full 360 Experience
Do you do any wrist/grip work? It took me several months just to do small increases in grip strength. I could only do 5lb wrist curls and 20 seconds pinching a 10lb plate. Dead hangs didn't come until later and that was also very slow to progress.
> If your email/request/etc. doesn't end up in my notebook, I will probably not do it.

Haha, I like that!
This is what insurance is for, I guess?

I dunno, this all feels like edge cases and not the kind of thing the average person would do. Or if a Turo member did this, they would get away with it once, and then be banned from the platform.

These all sound like ridiculous scenarios out of a bad cop show. Do you have any evidence that this has happened to any Turo hosts?

If this was the norm, these services would not exist.
My least favorite would be putting the name of the pattern in the class name. E.g. "FooService", "BarRepository", "XInterface". Code is most readable when names describe business and not implementation detail.
Disable Javascript for that site. I keep Safari with JS disabled for every site, just for these types of sites.
>Front-loading explicit study of grammar is a total waste of time. Memorizing atomized vocabulary words is also relatively ineffective.

Self studied Japanese to fluency that way. AJATT method but largely concentrated on front loading all the grammar in 4 months then built 10k vocab over the following year. Worked like an absolute charm.
Most stuff is not web now. There is software in everything everywhere not just web sites.

Niche does not mean "stuff I don't personally use at my job", but that is the only definition under which Typecript is not niche and c++ is. C++ in 2019 had the 4th most job listings according to Indeed. Calling that a niche is absurd especially in comparison to Typescript.
Tl;dr

Google will donate to whatever terrible person will further their interest and we only care because they pretended to not be evil a decade a go.
Is this an "MBA attitude?" I get the urge to rant, but I feel like even a good MBA would have seen training as a liability to mitigate in the larger business, not a profit center in its own right.

A competent exec doesn't structure a business so that "everything is a profit center", as that drives specific behaviors, and you have to be careful about the accountability you put in place and how you're measuring those departments. Competent management should understand that.

That said, there's an annoying fetish from human beings to obsess over what's easy to measure, which is not always what's important. Profit being one of those things...
> This is not an endorsement nor does it express my consent or brings me joy to say it, but somebody has to do it, so the others can follow.

Thankfully, not everyone thinks they are holier than thou while also spewing vitriol. Try to think critically perhaps? Only fools follow. Also, Unsworth lost his case and is now on the hook for legal fees.

Even his OWN lawyer admitted he was wrong and agreed with the verdict after some reflecting: https://twitter.com/LLinWood/status/1204206188189114370
Fooling Hitler: The Elaborate Ruse Behind D-Day (2018)
The recommendation should be to use pyenv and virtualenv: pyenv for installing the Python versions you need for different projects and virtualenv for creating an isolated environment for each project. Using this setup, I almost never run into dependency issues.

I don't know much about Go. How does it avoid dependency conflicts?
> Although the term scolae grammaticales was not widely used until the 14th century, the earliest such schools appeared from the sixth century, e.g. the King's School, Canterbury (founded 597) and the King's School, Rochester (604). The schools were attached to cathedrals and monasteries, teaching Latin – the language of the church – to future priests and monks. Other subjects required for religious work were occasionally added, including music and verse (for liturgy), astronomy and mathematics (for the church calendar) and law (for administration).

I am not knowledgeable enough about the topic to say how efficient or helpful medieval Latin schools were at teaching Latin as a second language, but the idea of “grammar” as part of the “trivium” (alongside logic and rhetoric) meant something substantially different than the modern usage of the word.
True, this matches my experience perfectly, but perhaps the/some ways do exist but haven't been found, or will never be found, because it's too risky to try on an individual basis?
So you want the poor to be gouged?
(US based) I'm a human snail mail spam filter... It is possible for me to have physically received the mail, but promptly tossed it because the volume of ads and spam dwarfs actual mail. I've also found unopened mail in my trash by accident because it was tucked inside of supermarket flyers/etc that were tossed.

So, its quite likely that both cases are true, if you consider that there is a difference between physical reception of the mail and actual knowledge of what was sent.

I'm not really sure what the solution is, except maybe to pass more laws that keep the spammers from trying to make their mail look like official business (which is common because it increases the number of people that open the mail).
It's enough of a problem that there's special needles made specifically for puncturing a fish's swim bladder and relieving the pressure:

https://gillz-gear.com/blogs/news/39139841-smart-anglers-und...
Excellent, I signed up for his weekly newsletter.

As much as I nerded out seeing the latest Star Wars movie yesterday, and the half dozen good movies a week my wife and I watch on streaming media, my favorite way to be entertained by people’s writing, with really good conversations coming in a close second.