skysight-inc/HackerNews huggingface dataset:
Consumers unload responsibilities onto regulatory bodies. When the regulators function appropriately, the result is better than no regulation. When regulatory agencies are captured by industry and better serve commercial rather than citizen interests, it is unlikely that citizens will recognize that their government is no longer working for them. At this point it may be better for consumers to be forced to pay more attention to the product.

And this creates multiple points of competition, unlike regulation which is somewhat anticompetitive. Transparency, efficacy, cost, reviews in the age of the internet, all combine as a form of emergent regulation which may outperform explicit agencies in some cases.
I used Hipmunk ever since I took Steve Huffman's (founder Reddit and Hipmunk) Udacity course.

Not surprised it didn't make money, I would always use it alongside Kayak and then book directly with the airline/hotel/car company.
Both Momondo and Google Flights are decent alternatives for finding good flights, although Hipmunk’s visualization feature is better than both.

Momondo had to monetize a little in the past year, and now includes a little bit of referral spam, but still produces good results, their sort by “best” feature is usually helpful!
For people who don't know why this is relevant to HN: Hipmunk (YC S10) was co-founded by Steve Huffman as a rebound from reddit (YC S05), and got sold to Concur a few years ago.
Unsurprisingly the progress bar after submitting challenge text is ...fake :) makes whole website look shady AF.

Why use shady SaaS website that starts with deception when you could read open sourced reverse engineered recovery algorithms authored by dogbert here http://dogber1.blogspot.com/2009/05/table-of-reverse-enginee...
Once you get the hang of it, it's great. You can do stuff no other site can do. This really asks for some kind of query language. Or maybe there is one?
Well, afterall, he is an authority, and too much evidential detail likely would detract from his goal to help the general public improve the ability to identify and understand errors of judgement and choice, in others and eventually in ourselves, by providing a richer and more precise language to discuss them.

You might prefer his scholarly writings over those intended for a general audience:

https://scholar.princeton.edu/kahneman/publications-0
Long train noses are because of civil engineering short-sightedness
Google Flights for its price graph. https://imgur.com/a/XKVGbCI

I loved Hipmunk for its personality and “agony sort”, though. Personality is often missing from modern travel brands.
TeX: 1978

https://en.wikipedia.org/wiki/TeX

which is underlying the LaTeX set of macros and stuff that is still in use for academic papers.

[edit] Also TeX is a good example to bring up as an early example of a complex system that was intended to have freely available source code (before the term "open source" and before GNU).

When he created TeX, Knuth said there was a lack of example source code that could be freely examined by students and others in the field, so he released the code and in fact published it in book form along with the source for Metafont and the code for the Computer Modern fonts.
That work which benefits society goes unrewarded while work that is actively destructive towards our planet and our democracy is very lucrative. That most technical people seem to have no ethics, no morals, no empathy, and no scruples. That corporations are psychopathic parasites which do not have our best interest at heart. That nonprofits can be refuges and forces for good.
Oh, bummer!

I love the product and have even used it within the last few days. Thank you Adam and Steve for building something I used for 9 years.
There is nothing wrong in being ignorant if the efforts to get rid of that ignorance outweigh the benefits for most users. My mother spends 15 minutes on internet talking to me and watching youtube. She does not care if advertisers know her age and location.
So people didn't have to carry cash around.

People would set up accounts at their local stores so all their common daily and weekly errands could be done without cash. Then once a month (after payday) they would take cash around to all the local stores paying their accounts. (Or write a check, I guess)

Stores supported this because it was a form of lock-in, and because it reduced friction. Faster than exchanging cash too, or writing a check.

When working correctly (the customer comes in and pays without prompting) it's super low effort. Especially for stores with only one location and checkout counter. Only really costs time and money when a customer requires chasing up.
Domain Modeling with Tagged Unions in GraphQL
The old RoboWar game on the Mac featured a stack oriented language for programming your battle robots. It was a great introduction to RPN and thinking about the stack.

One of the interesting aspects of the game was the way the CPU was limited to a very small number of instructions per tick. At most you would get 50. So if you had a complex task that had to be executed in one tick, like filling the screen with bullets before your robot shut down due to lack of power, the way to do it was to preload all of the arguments onto the stack, wait for the tick to turn over, then call all of the functions at once. Basically allowing you to bank processing time for the turn you needed it.
Curious as to the terms of the exit in 2016. Does anyone know? This was a great site.
That's a really interesting idea! I wrote a bit about it in Dercuano last year but I don't have a prototype to show. I look forward to seeing where you take it!
"Countless websites were broken because they used popup windows."

I fixed it for you.
I don't have a use for a "virtual private network" that just connects me to the public internet. My primary use case is to connect to stuff on my home network (or my work network).
Captures a lot of my own thoughts.

I've seen several examples in my own company's libraries where the authors have built frameworks. It almost always ends up in dependency hell.

At this point, I tend to try and shed dependencies whenever possible. I hate pulling in massive frameworks or worse, libraries that depend on massive frameworks. It almost always results in a brittle solution that causes maintenance nightmares in the future.

This doesn't mean I never use a framework, I just try to restrict it to the application level.
I'm curious as to what region you work in. I ask because in Silicon Valley I've seen a ton of female EMs.

In fact, my first three jobs all involved reporting to women for a good chuck of it (and they all reported to women too). Those women were all fantastic managers too. Great mentors and great empathy.

Now that I think about it, they were all promoted to management via internal promotions given to them by female managers.

So maybe one tip for you is look for an IC role that reports to a woman who is interested in mentoring you into management?
So... Wait, they weren't calculating the signature based on ALL the contents of the cert? There was an "unprotected" section in the cert that allowed for curve details? This seems... too obviously bad.
Agree. Also with a physical keyboard (PC) you can filter keypress events in an <input>, but with a virtual keyboard (Android) you cannot (keycode is always 0 due to IME).

A time entry input is a good example: on the PC you can accept valid [0123456789:.APMapm] characters as the user types, and have the HTML page do something sensible and show something sensible. On Android you either have an ugly time picker (they are all ugly!) or use hideous workarounds to try and detect keypresses.

Android and iOS have `inputmode=` but it is very restricted and there are wierd and sometimes incompatible differences between browsers or browser versions or OS versions. Custom data entry (e.g. time, date ranges, etc) is super ugly in HTML.

I have found many browser version and device specific bugs with virtual keyboards or PC keyboard entry that cannot be "feature detected" (browser version must be sniffed).
This is a long time coming: for more context, Hipmunk was acquired by Concur back in 2016 for $58MM [1] as the flights meta-search business was just getting tougher and tougher

As someone who's dabbled in flights bookings (BookWithMatrix) and now am working on a travel startup (Wanderlog, https://wanderlog.com, a Google Docs/Trips for travel planning), flights are just not that profitable. In North America, you'd be lucky to get 1-2% commissions. In the rest of the world, it's a bit better, but Hipmunk was definitely North America-first.

Concur never was a consumer company and Hipmunk never was going to make a ton for them, so it was just a matter of time. RIP -- a lot of their best features (not just showing the cheapest flights, but the "Best" based on agony) have made it into all major meta-search tools, so it's not for nothing!

(Also, I personally use a combination of ITA Matrix, Google Flights, and Skyscanner now. ITA Matrix still has time bars, if you loved that UI; Google Flights is just so fast, and Skyscanner searches low-cost carriers that Google Flights sometimes misses)

[1] https://www.crunchbase.com/organization/hipmunk
They can use redirect flows and POST back to the page you’re logging in to. It will be fine for most Auth flows (but not eg SAML passive logins)
>Why are you assuming that traffic is moving at 30-45 mph through a neighborhood.

Because that's what I see in the suburbs here in DC.

>In my neighborhood the speed limit is universally 25 and the stop signs & one way streets keep traffic speeds down.

Those aren't typical American suburbs if there's 1-way streets. That sounds much more urban in fact. The suburbs I typically see have wide streets, and 35mph speed limits, and people driving around quite a bit faster than that in their huge luxury SUVs. I also don't see kids in the streets at all, and for good reason: it's too dangerous. I don't feel safe at all on my bike, even though I ride very fast and as far right as I can (I only ride in the subdivision near me so I can get to the multi-use trail on the other side).
Just wanted to second this. As a manager, even for people I know fairly well, I'm routinely surprised by little bits I learn as to what they want, what they dislike, or what gets them upset. Do not assume your manager can read your mind or that things are self evident and universal. With people, most things arent. Not much different than any relationship.
We have a couple tests that fail for 24 hours after a daylight savings change as they don't accommodate 25 hour days.
I also found fares/options that I didn't find on other sites.

My favorite part was how the results were listed by "agony", defined as a trade-off between price and length of the trip.
“Free speech” is a constitutional concept that defines how the government is allowed to interact with citizens.

Freedom of speech does not exist for private institutions and companies.

I would direct anyone who has a problem with this to the Mailchimp terms of use and acceptable use policy, which state:

> Mailchimp may refuse service, close accounts of any Members, and change eligibility requirements at any time.

Additionally, here’s a link to the acceptable use policy, which excludes a number of generally legal but undesired uses: https://mailchimp.com/legal/acceptable_use/

In my mind, extremist views don’t need to be defended by businesses and companies. In fact, refusing service to those extremists is a great way to moderate our society. A great way for Stefan to not get kicked off of platforms would be to stop spreading white supremacy.

To give you an identical analogy, if a couple of people told the bartender that I was harassing and hitting on them, the bartender could kick me out of the bar. I don’t have a right to a trial or due process. I don’t have the right to explain myself or present evidence. I have to accept that. But generally, that won’t happen to me if I just act like a well-adjusted human being.
Sure you can. Checks were harder to get rid of 50 years ago.

On the street we have a legit smalltime money-laundering industry in terms of retail gift card availability. A real common racket these days is targeting immigrant business people pretending to be the utility company/IRS/etc and demand gift cards to settle some matter, for example. There is a huge underground economy out there.

Off the street, the complete lack of security controls around ACH is an even more extreme risk. Just rob a mailbox and steal account info from checks.
Show HN: Hold your project hostage for beta signups (simple idea tester)
This is sad - Hipmunk greatly facilitated my digital nomad lifestyle at some point as I could chain multiple flights in multiple months together to make "a travel around the world" schedule, i.e. 1 month intervals Boston->Miami->Zurich->Kyoto->Sydney->Auckland->Honolulu->Vancouver->San Francisco, all without any return flights and spaced as I liked.

Is there any other service allowing the same?
You can do the right thing for the wrong reasons.
A Very Important Patch Tuesday
Somehow I am not surprised by him liking precision
Warm feelings of the fun UI is the first thing that came to mind. I miss the products that Show the fun and quirkiness that went into building it.
Lots of weirdness in travel these days. The last time I booked a flight on Delta (October) I found out that it can no longer handle cash payments at the airport. Not for anything. Not tickets, not baggage fees, not upgrades. Nothing.

They direct you to a place in the airport where you can guy a Visa gift card with cash and then pay for what you need from Delta.

I don't know if that's true of other carriers these days, or not.
i know that when i had a windows machine on my companies network they could just install stuff willy nilly. maybe the attacker could dupe and pretend they are you admin and just do what they wish?
>Cloud gaming means you will be able to take your game “everywhere” and avoid dreaded 20-minute updates before you can start playing.

Doubt. In the same way that movies on PSP had this idea in mind but fell flat on it's face, games are strongly tied to the format and environment in which you consume them.

FPS gaming with a keyboard and mouse isn't coming with you on your phone for the morning commute, and no amount of technology is going to change that because the main barrier is you won't want to play that game on your morning commute with a bunch of people around you, noise, and being unable to immerse yourself (even for reasons as simple as needing to remember to get off at your stop).

That said, perhaps the converse doesn't hold true, and when you flop down in front of your screen in the evening you can get into a 6h marathon of bejeweled just the same as you were playing on the train into work that morning. Streaming isn't an enabler for this though, just cross-platform builds of your chosen game and cross-format suitability for input/output methods.

>Microsoft claims Game Pass subscribers increase their overall playtime by 40%

I'd really like to see retention stats alongside this to drawn an inference, because (anecdotally), I subscribed, played the shit out of the one game I subscribed for, then cancelled my sub before the next month. I definitely look like a player with increased playtime, because I deliberately did that to play a game that would have cost $$ for just $.
Yes, this is the best I've seen too. Unfortunately, "quickly" is a matter of perspective.

Usually you train a neural net that's as large as possible with a runtime that's within your latency and GPU budget. Running the net even twice will blow up your budget.

Also, I haven't seen a great evaluation on how well this method works in practice. For example, how well does predicted uncertainty capture mistakes on a real-world dataset?
This is a double edged sword. It can be a great way to gain recognition and clout in your org. However, sometimes there's a good reason nobody wanted to do that thing, and you can get stuck just doing something that you don't really like doing.
Click "Open Diary". Click back button. Nope.
I think assumption 4 is in error.

>There exists a message in the encoding that can extend one's life.

If quantum immortality holds then there is no message which will extend your life because you're already immortal.
if you want to let friends know what is going on you just simply send email/IM/SMS
> The ideal of free speech overcomes the ideal of private corporate autonomy for me, and I believe it does for most.

Then don't use services that behave in a way you disagree with. I know that you tried to write off that answer in your first sentence, but in my opinion it's the best solution in terms of balancing competing rights.
Maybe a free trial would have the same effect ? It would be really nice to have free trials of every game released;
> Generally: minimize dependencies.

This. It doesn't mean go overboard with NIH, but you have to evaluate and select your dependencies judiciously. It's not about developer productivity with these types of products.

Also, make as much of your program configurable as possible so you can tweak things out in the field. For example, if you have a correlation timeout. Make that configurable. But don't go overboard with that either. :)
>This can work, but it increases complexity of C, and the logic gets messy as well, as the code gets riddled with if blocks like "if called from A then do this block of logic".

Instead of doing this, the author should consider decomposing C even more. The former is logical cohesion, the latter is functional cohesion.
Really sad. Hipmunk was something I loved and something that took a lot of pain out of my life.
One of my first technical interviews after teaching myself to code was with Hipmunk. They were incredibly nice and patient with me despite me being a clueless bundle of nerves, and I learned a lot from their very practical take home challenge, although by the time I had finished it they already hired someone. Thanks to them though I came to love working with Redis and Tornado (Python async framework). It's a fond memory and I'm disappointed to hear about this.

I hope that the team are able to quickly find other roles and don't find their lives too disrupted by this.
Curmudgeon, here. Why do books, paintings, photos, and film exist at all anymore?

Maybe because we don't all want everything "interactive" all the time.
Depends how you read it. Could just be that any SSL connection to download a binary could be MITM'd and replaced with malware, and that would be "remote code execution" by some definitions.
I've used VSCode with SonarLint for a very long time: https://github.com/SonarSource/sonarlint-vscode . It also works with Java and maybe other languages.
With the RPi 4, the architecture changed and you shouldn't be throttled. With earlier ones you'll be limited, even with a USB gigabit adapter. https://www.jeffgeerling.com/blogs/jeff-geerling/getting-gig...
Show HN: Everchat – Join a network of like-minded communities
This makes me miss my HP 28S calculator from the 80s. What a beautiful machine that was.
The Threat of Quantum Computers: Will Bitcoin Get Hacked?
Five Technical Skills Software Engineers Need in 2020
That's interesting. Personally I match roughly half of your first description and roughly half of your second!
kiwi.com?
I wonder how much of the original Common Lisp code is still running in the QPX[1][2] part of ITA.

[1] http://lambda-the-ultimate.org/node/2491#comment-38434

[2] https://news.ycombinator.com/item?id=1479107
https://mailchimp.com/legal/terms/

Seems pretty clear cut to me. SM was in violation of the Mailkimp TOS. I don’t get why this is newsworthy though?
that can be fine, you just need to find an organization that emphasizes the people management side of things and has other avenues for technical leadership. Typically a place like that is self aware about it and quite upfront (as a tech lead will really hate that kind of role, and they need to understand where the technical leadership comes from). I have a friend who is very much primarily a people manager and loves it.
My reasoning behind this was that there can be multiple futures where you could exist and experience, but some of them shorter than others. E.g.

A------B

\ --------C

If you are travelling towards B, once you reach it, you die. But you can't magically jump last second to parallel reality C, you can only branch from the present. Thus you would have needed to branch down to C in advance. Thanks for pointing this out, I will make my reasoning more clear in a future edit.
Critical Auth Bypass Vulnerability in InfiniteWP Client and WP Time Capsule
Free speech is a principle. The first amendment states that the US government shall not violate this principle. The principle and the amendment are separate things.
Really ? Antivirus ? Jeez. Gonna try to find and disable it as well; Sometimes after you turn the tv off it turns on by itself. Probably another bug;
> have made it into all major meta-search tools, so it's not for nothing!

Since I only use Hipmunk, which alternative would you say has the most comparable to the "agony" sort?
Exit Strategy Through the Eyes of an Angel Investor
You don't see how a lack of critical vulnerabilities is software infrastructure is of benefit to citizens?
I think a better way of putting panpsychism is to say: what you are doing with your science is describing how consciousness behaves. So when you describe a simple system with maths, you are describing the consciousness of that simple system. Describe a complex system with mathematics and you are describing the consciousness of a complex system. You don't need to describe the transition from simple consciousness to complex consciousness with anything other than mathematics because mathematics already describes the transition that arises from the composition of simple objects. What it feels like to be a simple object vs a complex object is outside of the scope of science.
Just because Mailchimp can, doesn't mean they should.
Yeah, I was just playing around with it. it looks like despite SonarQube having rules for Go, the plugin doesn't support all of the languages they have support for. That's a shame
I tried buying a ticket same day a few months ago in SJC at the airport ticket counter. The agent would not sell me a ticket. I was told to go online.
idk why but I pick the scooter every time for short takeout runs, despite bikes being available also.

it might come down to my riding style. I never "take the lane" riding in traffic. if I hear a car behind me, I just pull off to the side between some parked cars and let them pass. this move feels a lot more awkward on a bike. or maybe it's just an irrational choice, but in the end I prefer the scooters!

ps: I always take a backpack with me to pick up my order, so the whole hand/ass calculus doesn't really come into play :)
Microsoft is killing support for Windows 7, which is used on 1/3 of PCS globally
The pseudonymous but well-connected 'swiftonsecurity' twitter account reports on background that 'RCE' chatter about this particular vulnerability does indeed relate to compromised software update channels. (Not just AuthentiCode, but also MITM on, say, connections to the npm package server.) See https://twitter.com/SwiftOnSecurity/status/12171594348808478...

That said, this same patch set also has a separate pre-auth RCE on Microsoft's Remote Desktop Gateway, which has been documented as CVE-2020-0609 (not ...-0601). See https://www.kb.cert.org/vuls/id/491944/
Most of the team has already moved back to reddit. :)
How to Stop Freaking Out and Tackle Climate Change
Bloom: Let's Grow a Library
And you're well served with this response, as the actual work he did is basically not reproducible. No matter how many best selling books made into movies; it's still bullshit.

https://replicationindex.com/category/thinking-fast-and-slow...

https://slate.com/technology/2016/12/kahneman-and-tversky-re...

https://jasoncollins.blog/2016/06/29/re-reading-kahnemans-th...

I read it on advice of a good pal, and it sure seemed like bullshit to me.