skysight-inc/HackerNews huggingface dataset:
> "if we tell good people about risks, then bad people will know about them. If we keep them secret from good people, then bad people won't find out about them". Or, "if we don't make a list of open doors, then bad people can't find which doors are open".

You are not recognizing the nuance which is typically the case with people who supports practically any and all disclosure and thinks it's good plain and simple. With almost no downside at all (not the case).

In particular this: "then bad people won't find out about them"

My point is that disclosure makes it simpler for more bad people to find and learn and inflict damage damage. Unclear to me how you could think that isn't what has and is happening. If someone say publishing how to create a card skimmer at a gas station then more people (who are bad actors) will then have what they need to give it a try. If not there will be people who have figured it out and people who will put the effort into figuring it out but you must realize vastly less will do that, right? The disclosure removes a great deal of friction.

The amount of effort and friction and the amount of 'bad people' that can be actors is many magnitudes larger (I would argue) as a result of disclosure.
Alternatively, it has a public reputation of being extremely offense-focused.
Maybe it would be possible to receive inductive loop on your headphones.
For anyone following along not familiar with all security acronyms, in this context PCI is Payment Card Industry not Peripheral Component Interconnect.

I was confused for a bit since we're talking about the kernel...
Chrome too: https://blog.chromium.org/2020/01/introducing-quieter-permis...
I think everybody thought you were talking about "fancy private" elementary/high schools, which is definitely not a middle class thing. Private college/university is a totally different matter.
Link to a paper on the antibiotics allergy topic:

https://www.pharmaceutical-journal.com/learning/learning-art...?
Yes, I cover that option for Fossil at the end of the pointed-to document. I did it in terms of Makefiles rather than commit hooks, but whichever...
This describes the majority of voters which do not have a clue as to what they are voting for, or the platform that their favorite candidate stand on. The just blindly vote the party ticket because that's their team. Generally, it is the swing voters that are more informed on politics and don't necessarily vote the party ticket.
> If it's operated by the state, it will probably be a disaster.

This is a common trope propagated by big-business interests, but it's not borne out by evidence. Giant corporations have proven remarkably apt at being hacked and leaking private data.
Shouldn't they be suing Apple (airpods)? Who was the first to come up with bluetooth speakers syncing with each other? Also, who are they going to sue with multi-device broadcast becomes a Bluetooth standard (as it's currently being proposed).

Can America et. al. please just ban software patents already like New Zealand did?
>Nissan has been pumping them out at volume for nearly a decade now.

Nissan is a automobile company 80 years of history. That is hardly "anyone".
>The point the person is trying to make is describing masculine behaviours as toxic, by simply prefixing toxic, is an example of what you are describing.

No, that's not what toxic masculinity describes. But I've been down this rabbithole before on HN, and I'm not going to waste time trying to convince you otherwise.

>You are even trying to describe women that "adopt" these behaviours as being bad for being more male. Thus, guilty and worthless. As if they are not A True Woman.

That's not even a remotely charitable or accurate interpretation of my comment. Good day sir.
also if you care about your product actually working. There are so.many Chinese clones that are badly made or outright dangerous..
Tractors from the 80s Becoming Popular with Farmers Sick of HighTech Bull-Shit
The hottest product at CES 2020 is privacy
So you go to a bar, don't talk to people, and listen to a specific game solo. Why not just stay at home? The other examples named above make sense, this one seems like a stretch.

The whole purpose of going to the bar is to be around other people, the whole point of watching sports at a bar is to enjoy it together.
I somehow doubt the NSA would be the ones building it. It would probably be farmed out by the govt like the ACA website.

I agree it would be terrible if the govt ran it, but would make sense is for the govt to actually plan it and put regulations around it. Provide a framework for private companies to work off of.
What do you mean they're no longer made by them? They still have them for sale here:

https://us.dynabook.com/computers/laptops/portege/X30/
I agree with smt88 regarding market research on HN is likely not a good place to do so.

Having said that, I definitely would not pay the fee. $100 is negligible of a hold and most rentals don't last for more than a week or two in my case (depending on where I am traveling). It wouldn't make sense to pay a fee when the hold is fully refundable and doesn't make a dent in my card usage.
From a more recent OpenBSD man page:

> The original version of this random number generator used the RC4 (also known as ARC4) algorithm. In OpenBSD 5.5 it was replaced with the ChaCha20 cipher, and it may be replaced again in the future as cryptographic techniques advance. A good mnemonic is “A Replacement Call for Random”.
I can only speak about my local post office, but I can't imagine wanting to deal with their customer service if anything were to happen to my money.
Once you can do that the killer app will be intrusive ads.

And those people who drive down the street blasting loud music (err, I mean "sharing their stereos")? They'll be able to share directly to the people on the sidewalk!

(I loved your comment -- I think we both know this won't be supported).
Sonos claims that Amazon has also violated its patents with the Echo device family, but the Times writes that its executives decided against “battling two tech giants in court at once.”

This seems unusual, considering how much is at stake.

Or are there other reasons that Sonos wants to avoid suing Amazon at the same time (cases being combined, hoping for a successful outcome in the Google case to get Amazon to settle, etc.)
My guess is because it seems to share people and terminology with some 60s and 70s counterculture and new-agey stuff.

I say that with total respect for said movements, but I see why cynical analysis would say cult-like. And there are a few people and groups in similar categories that are cult-like.
> We live at the absolute _extreme_ of capital power over labor power.

No we don't, that is called slavery.
Herd immunity is also regularly verified with other species, and easy to simulate even with high-school level programming skills. The relevant Wikipedia page even links to a simulation at https://www.software3d.com/Home/Vax/Immunity.php .

The text cites "The Mawson Homeschoolers Study" in the Journal of Translational Science. Snopes has an entry on the article, at https://www.snopes.com/news/2017/05/17/vaccine-study-autism/ . Some quotes:

"The paper is a identical version of a paper briefly published in Frontiers in Public Health in 2016 before being disowned by the publisher."

"the lead author of the study, Anthony Mawson, is far from an impartial player in this debate: he is a vocal supporter of Andrew Wakefield, a controversial doctor who is arguably the the father of the anti-vaccine movement."

"Mawson’s vaccine study was funded by two anti-vaccine groups"

"The journals that published the study are just as a problematic as the donors, though for different reasons: both journals have been accused of predatory practices."

"But even if the funding sources and authors’ histories show bias, they still could have designed a careful study with high-quality research, right? In theory, yes. But in practice, the study design was riddled with flaws."

"Right off the bat, the pool of participants in the study differs demographically from the U.S. population as a whole."

"The study’s authors also made no effort to track who received the survey or what percentage of people from different demographic or ideological groups ignored calls to participate"

"In short, the study’s design was flawed from the start."
the direness of a 5% consumption loss over 5 years really depends on margins.
The facts on the ground is most people don't deal with that in their job. We don't have a culture of overwork, we get vacation, parental leave and sick leave. There are exceptions, but those are entry level no skill required jobs.

Sexual harassment is treated firmly in every company I've been in - even entry level jobs. There is no fear of retaliation for reporting it. (generally it is impossible to prove so the reporting doesn't go anywhere)
This is fairly short talk, but it might interesting to some people.

https://youtu.be/PS_9pyIASvQ [Serious Programming with jq?! A practical and Purely Functional Programming Language!]
SHA-1 is a Shambles
First Chosen-Prefix Collision on SHA-1 and Application to the PGP Web of Trust
Gaëtan Leurent and Thomas Peyrin

https://eprint.iacr.org/2020/014.pdf

>identical-prefix collisions can now be computed with a complexity of 2^61.2 rather than 2^64.7, and chosen-prefix collisions with a complexity of 2^63.4 rather than 2^67.1. When renting cheap GPUs, this translates to a cost of 11k US$ for a collision, and 45k US$ for a chosen-prefix collision
only tangentially related, I made a VS Code extension to help out with jq development[0].

Also, jq supports modules. which is awesome!

[0]https://marketplace.visualstudio.com/items?itemName=ldd-vs-c...
Fully agreeing. Mozilla are just dumb-down focused SJW browser Nazis who remove features to make all the screaming and bitching snowflakes and Millenial-leftists happy, which actually TRULY believe that having customization and choice in general is excluding and infuriating simple minded users.

On the other hand.... After Microsoft and that Santa-Hat issue at the end of 2019 - where a guy complained that it "pushed religion" - what else to expect from leftists and leftist-addicted developers than THAT?

Also... Nazis and fascists will always be and always stay Nazis and fascists - and just it is delivered by the left, it is not making it equally correct and socially acceptable.
Turning Back the Clock on Aging Skin
What's with the downvoting?

It's astonishing how bicycle riders seem to think everybody except for them is responsible for their safety.

Riding on the sidewalk is outright dangerous, I have seen multiple accidents when:

* pedestrians got hurt by bicyclists travelling at high speed riding on the sidewalk

* bicyclists go around corners and hit pedestrians

* bicyclists get hit by cars who couldn't see them at the intersection because they were riding on the sidewalk
A bigger question would be: why did whatever selective process that resulted in our capacity for thought stop improving on it 100,000 years ago?
This is objectively, very definitively false.

> You don't explicitly copy code

Google didn't copy code. Even if you believe that APIs are copyrightable, Google's clean-room implementation hasn't been part of the case for years. It's just about the API now.

If you want to make an argument that APIs are copyrightable, fine, make that argument. Make the argument that Google is infringing on Oracles API. But if you're trying to accuse Google of copying code, you're wrong. You're conflating two ideas that are not related.

> It's black and white but people's blind hate for Oracle leads them down an argument or view point the courts have already denied and are now ignoring.

If this was actually as black and white as you say, the Supreme court wouldn't have agreed to hear it, they would have just allowed the lower court decision to stand. Unless you believe that Ruth Bader Ginsburg blindly hates Oracle for some reason?
+100 -- keep in mind, modern meat production (industrial feedlots, chicken houses, etc.), are modifying those foods in a way they don't exist naturally. Beef/pork fat is not as healthy when it's fed grain [1]. And, massive plant farming erodes soil nutrients in a way that reduces plant's historically high mineral/vitamin content [2][3] (these are old articles, by the way). Tilling more soil for pea protein doesn't help the situation.

The most environmentally friendly (for soil and animal welfare) food are free-range ruminants on grassland killed humanely in old age [4][5], and plants in their natural forms and seasons. Like humans have thrived on forever.

[1]: https://fireinabottle.net/polyunsaturated-fat-pufa-in-pork-a...
[2]: https://www.theguardian.com/lifeandstyle/2005/may/15/foodand...
[3]: https://www.scientificamerican.com/article/soil-depletion-aN...
[4]: https://www.youtube.com/watch?v=DqXjsBwOjOI
[5]: https://youtu.be/7ZVUoQd-P6o?t=567
Spray can works better -- and as a bonus the person doesn't return to gazing at the screen.
This is wrong on merit, and I am not sure why it is presented this way.

The difference between a car company and a software company is economy of scale. I.e. economy of scale dominate the physical world but does not exist in the software world since I can replicate software at zero cost.

In addition, new tools and new processes for software has increased the productivity times fold, which means that you need fewer developers for new software.

I predict two shifts in the tech world:

1) Move to the edge. Specially for AI, there is really no need for a central public cloud due to latency, privacy, and dedicated hardware chips. I.e. most of AI traffic is inference traffic which should be done on the edge.

2) Kubernetes operators for replacing cloud services. The value add of the public cloud is managing complexity.
Samsung Announces “Artificial Human” Called “Neon”
The other major difference is that Sony and Samsung are major industrial conglomerates. Apple mostly makes computers, smartphones, and tablets, all of which share components.
You can read the full paper here:

https://scholar.princeton.edu/sites/default/files/zidar/file...

Additionally, here are the slides:

https://scholar.princeton.edu/sites/default/files/zidar/file...

And the non-technical summary:

https://scholar.princeton.edu/sites/default/files/zidar/file...
Nutshell: where before P0 would disclose once a vulnerability was patched, or at 90 days, now it's simply "disclose at 90 days". If you patch on day 1, you still get 89 days of embargo (you can, of course, waive the embargo).

The rationale is to eliminate disincentive for rapid patching: previously, vendors had an incentive to hold their patch until the end of the embargo period, because patch release terminated that embargo. That's no longer the case: vendors can now patch right away, and use the remaining embargo days to evangelize the patch.

In addition, vendors can now patch iteratively, getting a hotfix out without disrupting the embargo and following up with a comprehensive or systemic patch later.
Ask HN: Why isn’t “reading comments” the default HN behavior?
I don’t have stats to confirm this but it seems a common habit for people here to read the comments page of a submission before opening the actual link.

If (IF!) that would be the case, why doesn’t opening comments is the default behavior of submission links instead of having to click the super tiny “Comments” link to the right?
Ask HN: Coolest CS Subfields?
I've worked as a backend or mobile app developer for 10 years. This type of programming is very monotonous and I'm looking to move into a more exciting and challenging subfield. I have a BS in Computer Science and my math skills are so rusty they might as well be nonexistent. What types of programming jobs are actually challenging and interesting? I am OK with having to go back to school. Please only remark on the jobs you have personally worked.

Potential candidates:

* Graphics programming
* Scientific computing
* Data science
* Quantitative finance development
* Machine learning
* Embedded development

Thoughts? I am also considering abandoning engineering altogether and going into general business as that seems like a more transferable skill and you don't have the skill rot that occurs in eng.
As someone casually looking for Elixir opportunities in Paris, France my observation is that there's not a lot of them (expected), and usually come with a RoR requirement (expected as well, I guess).

Also it seems some companies rewrite their Elixir services in Go?
I seriously can't imagine doing my grocery shopping online. The two things that make the idea unappealing to me are:

1) For fresh foods, I really want to see the exact item that I'm considering buying.

2) It seems wasteful. For foods with a shelf life, I prefer to buy a month's worth at a time. It's hard for me to believe that shipping that amount of bulk is less wasteful than just going to the local store. It's also embarrassing -- I once tried Amazon's grocery service out of curiosity, but the large boxes that were delivered really embarrassed me, and I never did it again.
Reminded me the first time in the USA, when the waiter ask how I will pay my meal, I said VISA, and he just waited here. I said I need the card processor, and he explained to me that, no, he will take my credit card in the back and to trust him to not steal from me... It's an insane process.
Note I am not suggesting that this will happen with this particular company. I don't understand this case well enough to comment on it.

In a hypothetical situation of a non EU company significantly breaching GDPR this could be resolved by e.g. seizing all funds belonging to the company in EU banks or in extremes by finding the company's board in contempt of court and then arresting and imprisoning them if they ever travel to a country with a extradition agreement.
I thought it was climate change? Thats what I get for listening to mainstream liberal media
Is that a theory or more of a very weak hypothesis?
Yeah, according to some news articles, I see Airpods Pro have a latency of ~144ms end-to-end. I haven't noticed that latency when I watch videos on my phone... On the other hand, I definitely noticed the latency with a much cheaper pair of true wireless earbuds. They probably had the ~500ms latency you mention.

I wonder how much the real-world latency is. If the codec itself is only adding 20ms, what about the rest of the system?
Game dev is not a low barrier to entry industry. It is WAY easier to get a SDE job at a FAANG straight out of college than it is to get a job as a programmer at a big name studio, even with experience.
Let's use Facebook as an example. The median employee salary is $240,000 [1], but Facebook makes an average of $1,620,000 in revenue per employee [2]. Why is it okay for a company to extract a so much more money from an employee than they pay them, but not okay for employees to band together to get paid what they're worth?

[1] https://www.businessinsider.com/facebook-median-pay-240000-2...

[2] https://www.businessinsider.com/tech-companies-revenue-emplo...
Other than the fact that the games are played there, the people who live in the area watch the same teams and have conversations about the games (home or away), and it can be a sense of shared experience.
Not really- non-compete agreements are very hard to enforce in many jurisdictions, and even where enforceable are limited in scope- you might be able to go from working on a check clearing system at one company to another company working on a check clearing system, but going from working on a check clearing system to working on software for medical equipment is going to be OK. Also, unions may not necessarily be interested in ending non-compete- they have a vested interest on keeping union employees within union employers.

Your other two examples are completely different- while your statements are true for a single given employer, there are plenty of other employers out there willing to pay a roughly comparable wage. If you want to a side gig and your current employer won't allow it, you can start submitting resumes. If you don't want to transfer, you can start applying to other companies in your current location, or go for remote work. There is no equivalent in sport- US Professional sport leagues have a monopoly exemption approved by congress.
A bicycle is a road vehicle. You shouldn’t be riding on the sidewalk.
Ask HN: What are solutions for developing itch scratch desktop program?
I'm looking for something that is self contained with GUI drawing tools, graph generator, a database, and an easy way to call server API's. I'd like to not have to depend on a web or database server.

The programs developed are not meant to be distributed as professional solutions or run unattended. It's more along the lines of exploring data, scraping/crawling web pages and consuming internet API's then being able to show tabulated and graph results.

Thanks.
I am saying that running your own show or a show with other people you value working with does not need to be under the thumb of union rules or overarching corporate pressure.

There is no scenario in entertainment where unions "keep to themselves". A union started will soak up the entire industry and now my show with people I respect, admire and fair equity shares now has time limits and controls none of us decided or agreed to because a union(s) can excommunicate us from the entire working industry.

The industry should self-regulate under threat. Implementing a union will benefit few but the union leaders. The film industry is a prime example of what happens and films like Star Wars barely exist in the face of union pressure. George Lucas hired Irvine Kershner to direct because he knew all about Hollywood, but was 'not Hollywood'. Gary Oldman turned down a SW role due to union rules. The public has no idea how cliquey and regulated the film industry is, thanks in part to the studio model and union rules.

I'd sooner call for a tech union and see a whole bunch of engineers get a proper cut of the $100 million+ companies that get sold without them seeing a dime.

Game industry artists are very skilled and can get work elsewhere for much easier conditions. They choose to stay and work hard and can choose to negotiate better salaries. I can't comment on mega-corps that there are limits to negotiations, in the independent part there is a lot more leeway. The conditions will always be difficult, timing is the difficulty that we can't control.
Why are we not developing technology right now that will be developed in the next 1000 years?

Progress is incremental. One step after the other.
I honestly think it's because they started with an entirely clean slate.

They didn't go into this saying "We're going to design a new vehicle, but it has to be built using the same factories and tooling and processes we've poured a few hundred billion dollars into."

Also remember the large auto manufacturers have hundreds of millions of R&D sunk into internal combustion engines they still need decades to re-coup.

I got a tour of a massive OEM assembly line in the US this summer, and it was utterly jaw-dropping to see how many people are paid to do the most menial tasks possibly imaginable, that could easily be replaced by a robot. I was told the Union forces those jobs to stay, and they're actually the highest paid in the entire factory.
> My point was that you can't say the government would mess it up when the government (really, many governments as I outlined above) has done a phenomenal job of training many of our best private sector hackers.

That's very different from saying that the government's core competencies include developing and operating secure consumer-facing web services that are also convenient to use.

There's a very big difference between having the raw resources and actually executing.
So you think git will be different from SVN when a new contender comes along?