skysight-inc/HackerNews huggingface dataset:
Here are my answers to those questions: (Note: I am a GitLab employee, so they are probably a bit biased)

- What are the privacy implications of this?
Theoretically, any 3rd party in line of traffic (in this case it is Cloudflare) has the ability to monitor and alter traffic. This is especially true when said 3rd party does inspections into TLS traffic. The privacy implications are, that they can see and alter any traffic between the client and the origin. But in the case of Cloudflare and GitLab, that is desired, as we want to take advantage of Cloudflare's Web Application Firewall to further protect us from 0-days and other threats, where mitigation using traditional methods might cause a delay, that cloud lead to exploitation of those, causing bigger harm.
My personal opinion on this (it does not necessarily reflect the view of GitLab) is, that Cloudflare is a vendor I personally trust in terms of adhering to what they say in regards to privacy. While they, as any other vendor, could be breached, I see the benefit of their Security solution bigger, than the breach-risk.

- Will Cloudflare be able to see GitLab traffic?
Yes, partially. SSH is not inspected by CF, despite being proxied by them. HTTP can be inspected by anybody on the net and yes, thus CF, too. HTTPS will be terminated by Cloudflare (and re-encrypted when talking to our origin) for some reasons:
- CDN: They need to know which resource you request in order to serve it from a cache
- WAF: Once enabled (not from the start) it will scan requests for malicious content and either block or challenge the request
- Workers: A highly integrated FaaS platform, we can use to dynamically authenticate requests to cached resources and other logic we may want to execute on the edge of Cloudflare's network.
Despite all that Cloudflare does not log raw requests. On our end, we only see the information about where the request came from, user agents, etc. You can find out more about what Cloudflare logs over here: https://blog.cloudflare.com/what-cloudflare-logs/

- Was/is Fastly able to before?
Fastly is in the same position as Cloudflare will be in the future. Right now https://about.gitlab.com is served via fastly pointing to an origin, which we control. If fastly would be breached, the attacker could control the contents of about.gitlab.com. Static assets are also hosted via fastly and are also subject to be possibly altered by an attacker.

- And is there any reason to trust one over the other?
The decision within GitLab was made purely on technical grounds. Cloudflare was the only solution meeting our criteria to keep serving traffic via SSH on the same host as we do right now.
Speaking for myself again, I trust Cloudflare and have personally been a customer of theirs for a long time 2012-ish). While I do not have that kind of relationship with fastly, I believe both vendors to be trustworthy in doing their best to protect the privacy of their users.

You can find more information about how we are going to deploy Cloudflare here: https://gitlab.com/gitlab-com/gl-infra/readiness/tree/master...
It could be legal too. Imagine an organization whose members voted to ban its management from investing in any fossil fuel (no matter the motives). Or a country whose law forbid any investment in some particular resources (e.g at some point, we could ban coal like we ban some drugs and weapons).
That's our goal too. We pushed out this simple CRUD first for commenting and private support chat/email. We'll add realtime chat functionality later if needed. Currently, we are doing fine without it.
> In fact it's surprising how little Google et. al. are able to do with 'all my data'. Google fails to show me relevant ads 99% of the time, and I miss all the cool stuff I want do find out about.

Perhaps showing you relevant ads is not the primary purpose of collecting your data after all?
Release candidate: Godot 3.2 RC 1
Here's a comparison of CL and Python: https://lisp-journey.gitlab.io/pythonvslisp/

and CL can be super performant btw.

CL allows for live/REPL programming, unmatched elsewhere, and still has features not found elsewhere too. Happy discovery!
The philosophy of this approach is stress and adaptation. The adaptation is what yields the improvements in muscle, tendons, and ligaments. The adaptation does not occur without sufficient stress.

I had the same results as poster above. It’s pretty cool.
"Nobody knew" /s

Identify them in big bold red colors.

Make their history publicly auditable (when they joined, how their followers/following pattern looks like, what their posting pattern looks like, what topics/hashtags do they use most frequently, what their network of connection looks like).

Restrict the hell out of them as to what/how many actions they can do every month (un/follow, post, rt, like, report) so that they become slow by design.
> RIP Christopher Tolkien. His labors have given the world a great gift.

Well said. Also, he was a rare example of someone who inherited a trove of intellectual property and actually did something with it other than sit back and ride the gravy train. For that alone I have a great deal of respect for him. He will be missed.
This is pretty simple. If you make just enough for gas and can't feed your kids, you need to find another job.

This is exactly the same out cry every restaurant server makes: "without tips I couldn't live! so you are responsible to tip if you eat out". When in reality they have to make enough to keep working, so that is just social pressure from them to bleed out money from rest of us.

In no other job would we tolerate this kind of behavior. Why should we feel bad for these people?
Because google doesn't sell lawnmowers. It sells advertising space. That space doesnt have to be actually effective so long as it sounds convincing enough to you.
So it doesn’t rust
> about half of U.S. adults (49%) say it is acceptable for the government to collect data about all Americans in order to assess potential threats.

https://www.pewresearch.org/fact-tank/2019/11/15/key-takeawa...
That's curious to know, so I thank you for the reference, yet I don't care much as it made and makes a huge difference for me personally. Perhaps that's because it may be really effective for just a portion of people with specific conditions in specific circumstances (e.g. I have ADHD and I also take nootropics which are meant to increase neuroplasiticy, neurogenesis and cerebral blood flow so the result is synergetic, nootropics alone don't give a boost so profound) or maybe what gets improved is not the working memory but something else playing important role in cognition. By the way it seemingly has also improved my emotional intelligence, not just analytical one - I didn't expect that.
1) Work your network. Our first few customers were personal connections or connections of a strategic business angel of ours. Identify the ones that most feel the pain you're solving. I'm talking about specific roles in these companies, not the companies as an entity. For example, imagine you're building a tool that improves collaboration between marketers and devs, find out who needs this more: the CMO? the CTO? VP Eng? a project manager? Find your champion and deeply understand his pains.

2) Even if your technology solves a company wide process, I wouldn't sell it like this at the beginning. Touching many departments it's a pain in the ass for your champion: need to convince a lot of people, etc, so it's unlikely they'll do it. Optimize for your champion pains and find a reduced version of your product that solves his pains.

3) Engage your champions in the product discovery, make them feel like if they're also defining the features (but don't build exactly what they asks for!!). Once they're excited about it start selling them the grand vision so they can sell it internally involving more departments.
America’s aggressive use of sanctions endangers the dollar’s reign
I don't see how that can be true. Gambling is pure luck. I've heard too many stories of impressive moves by VCs that paid off for it to be exactly equivalent to gambling.

I think it may look a lot like luck because they make so many speculative 'bets' and so many don't pan out, but that's more a function of the vast sums the successful ones end up being given to invest combined with poor deal flow. But they still aren't random odds.

Simple example: the VC that invested into WhatsApp and got a massive payout when Facebook bought them. Nobody in the Valley VC community knew about WhatsApp because it had no penetration in the USA. But the firm had hired a developer intern to write a script that downloaded the app store listings for every country in the world individually and calculate fast risers. So this VC was the first to realise that WhatsApp was getting huge everywhere except where they actually lived. But then he visited the WhatsApp website and discovered there was no address or contact information anywhere. He did some research and discovered they were based in Mountain View, but literally couldn't find an actual address anywhere.

So he did the obvious thing - he walked the streets of Mountain View systematically looking at every single office building until he found them, tailgated his way in and then sweet talked the receptionist into giving him a meeting with the CEO.

Well the CEO didn't want to take VC investment. So then the guy started on the final stage: convincing him it was a good idea. Eventually the WhatsApp founders concurred and took the money.

Those sorts of actions aren't the actions of gamblers. The guy had a thesis, he worked to put it into action, he even did a lot of physical work and ended up getting a distinctly non-random reward.
This reminds me of the JG Ballard story Venus Smiles, which I found whimsical and scientifically ridiculous at the time of reading, where an artist creates a living sculpture which basically makes a hell of a racket and grows itself out of control. Panicking, the owner has it cut up and sold for scrap, only to start hearing the same noises start when he is in new buildings - the tainted metal has been used in construction projects from the melted down scrap and is proliferating - "The whole world will be singing."!

Reading this news story it seems that one could retrofit a bacteria based scientific explanation - perhaps not so outlandish after all. What an amazing futurist he was!

https://en.wikipedia.org/wiki/Venus_Smiles
I think the problem isn’t code generation, it is having to edit the generated code.

So, you write source S from which you generate T, which you edit into U.

When you have to change S to S’, which generates T’, you have to do a merge to get U’.

For example, the C preprocessor is fine, as long as you don’t start editing its output.

Similarly, Java annotations that generate code are fine in this respect.
From Chaos to Order – Chaos Engineering Tools to Test a NewSQL Database
See it’s the “service good” category that I don’t think will exist. Why would people tip when tipping is no longer socially mandated?

Where people seem to disagree here is with the idea that service workers are better off with low wages + tipping than higher wages + no tipping.
But you see, it's because of the environment that that it's not as economical viable.

Green sources are becoming more and more cost effective because of lots of tax money went into them because people care about the environment.

Eventually there shall be plenty of more green alternatives that are more economically interesting than coal, but they only reached that place in refinement because environmental focused measures took place.
What is "public space"? Is a trainstation public, since the operaters are all private companys?
I was more referring to the phonetic alphabet and standardized spelling part of your post, and not to the Japanese part. That's why I proposed Korean as the language to satisfy your requirements, as English does not, as exemplified by the name John, which is pronounced [jon].
You could probably build an academic career on "fractional interpolation of parameterized system calls".
> Why? Why can't we ask whether "privacy" is so precious that we should preserve it at any cost?

I would suggest opening up one of the many books that deal with the history of various police states of central, eastern and southern Europe of the last 100 years or so. This continent is scarred to the bone by authoritarianism, millions of nameless graves and all that, if that's not a good enough reason I don't know what to say more. Ignorance of the past is deadly.
Minor quibble, US has chip/signature, not chip/pin. This is because the US banking system is stupid (technical term).
"Even if the grid was completely overhauled into some kind of futuristic design"

Has technology just blown your mind?

I've not heard a single reputable scientist or engineer claim this is such an impossible task as you. Yes it will take policy change [1], but honestly you sound like a defeatist and a denialist and really what is the alternative except for moving forwards? Australia just keep exporting thermal coal to Asia and not change our ways and die from famine, drought and heatwaves ?

Edit: I just want to say this whole argument you're making about "the grid not working without coal", just sounds like such a con. Just like the way the Government of Australia scares everyone with talk of a loss of jobs and growth whenever someone discussing stopping the Adani coal mine. It's just an unsubstantiated claim.

[1] https://www.theguardian.com/australia-news/2019/nov/06/ross-...
USF Students Vie for a $1M Space Race Prize
Fair point, but may I ask if you feel there is an improvement intuitively, or if you also measure it in some way (other than the game score itself).
Inside a live facial recognition deployment in UK
That's just a matter of methodology and/or discipline.

Depends on the team: if the team is democratic, then they should reach an agreement beforehand and respect it. If it's a dictatorship, then just punish them for not respecting the rules.

If the devs just agree to break the rules and disable them, they should be punished somehow. "Punished" is a big word maybe, but that's the idea :)
That really does depend where you get your news from. If you religious stick to the Daily Mail don't be shocked when its 90% Royals and Celebrities.

Something like BBC news world or The Times will generally cover the more important global events.
I'd rather prefer the demo version be published as an separate app, since you can't remove the advertising SDKs entirely even after you pay. Even if the developer was payed and stopped displaying ads, advertising companies have zero incentive to actually disable their code. It might still be spying on users in the background, and you can't be sure about it unless you go to great lengths to see what servers the app is communicating with. Worse, even if the SDK did actually stop functioning, it might be too late since you can't disable ads before first launch.
Do We Share DNA with ET?
Well if the team doesn't like the linter tool they should be able to change it. That's a political problem and nothing to do with linters.

My experience is that linters (that people like) saves you from having to constantly discuss formatting, minor problems at the PR stage which is otherwise a huge time sink.
It's also been shown empirically that 'nerds', 'geeks' tend to be ad-resistant (not just tech-nerds, the general psych profile regardless of domain).

It's not that ads are that irrelevant to nerds compared to most people (no stat outliers), it's apparently related to something in the brain that just responds less to ads. Whether that be conscious filtering, unconscious pattern recognition training which lets one discard irrelevant stimulus, .. take your pick.

Parent might thus just be a nerd. ¯\_(ツ)_/¯
While not legally the same, the UK comes close with its minimum wage/living wage gap: society acknowledges that minimum wage is not enough to make a living (in some areas) so it expects workers to be paid the living wage instead. I don't think this is mandated by law though, so you could have situations where workers are paid below the socially expected "minimum" wage.

At least they acknowledge the problem.
> Laws should be decided based on principles, not evidence.

Agree 100%. It has become my recent understanding that "evidence-based policy" is a more sanitised, technocratic way of carrying out good old-fashioned eugenics policies.
A Sense Enhanced Game of Life (2015) [pdf]
Hopefully this research will boost deep learning.
Interesting, and I also remember similar results from other studies, where essentially playing the game would make the subjects better at the game with no other provable benefit.

Now, the control for these experiments was amusing:

for one of the sessions:

> which played regular, dumb computer games

What would be a 'dumb' game is fascinating.

You'd have to find something that provokes no brain stimulation at all, no skill evolution while still being a game. Then if the 'game' was really completely void of content but the players kept playing it, would they end up in a kind o meditative state, potentially causing their abilities to increase ?

Another control group were doing crosswords, I guess to get a "well known quantity", but aren't crosswords also pretty demanding games depending on the people doing it? I'd be worse at crossword than building raiding strategies in an RPG for instance.

Somewhere I have the feeling these studies are deeply flawed with a lot of unchecked assumptions. Not by laziness per se, but it just seems that cognitive fields are inherently hard for rigorous studies.
In one of the teams I best worked with, payment was done per closed task. There were no salaries. Just bounties per closed tasks.

If you didn't respect the Quality Gates, your branch wouldn't be merged => you wouldn't be paid.

It was one of the best experiences in my work life so far. Clear rules, no chaos, no meetings, no negotiation. Just tasks and money :)
Because poor education has strong correlation with crime.
Study traces evolution of acoustic communication
> You can get CCEs without explicit casts or compiler bugs though

Using raw types is cheating. It's essentially using a different language and, as you say, the compiler will tell you that you are.

> However, if you obfuscate it a little javac doesn't know about it anymore.

It's a bug (rather, a few bugs): http://wouter.coekaerts.be/2018/java-type-system-broken (I assume that's where you got the example from)

You shouldn't get a CCE without explicit casts, and if you do, that's a (soundness) bug in the Java compiler and/or spec. Those bugs aren't always fixed quickly when they're not very important in practice (if it's determined that it's hard to hit them by mistake, which is why it's taken 15 years to find them).

> Would expect this line to blow up either at compile-time or at runtime with reified generics

Reified generics have no impact at compile time. Everything a language with reified generics knows at compile-time, a language with erased generics also knows. However, a runtime with reified generics and a similar compiler bug would, indeed, throw at this line at runtime.

> As for weirdness, I can't think of any other language with generics that preserves runtime type information without a way of preserving that for generics as well.

There are good reasons for doing it the Java way: so that you don't bake a language's particular variance strategy into the VM. There are also good reasons for doing it the C#: it's slightly more convenient for that one language. I can't think of any other language with variance and a runtime type system that reifies generics for reference types. When all you have are two instances, it's hard to say which of them is weird.

> If the CIL separates them then the downcast trick works. If it doesn't the trick doesn't work.

I don't know CIL, but looking at how languages behave on .NET to interop, I wouldn't think that can work. It would totally break the safety of the runtime type system if you could cast without a typecheck.

> I guess the only difference is that you still have storage of the types so you can do runtime reflection.

BTW, you can reflect on generic type arguments in Java, as well (https://docs.oracle.com/en/java/javase/13/docs/api/java.base...). When you reflect on a method that returns a List<String>, it will tell you it returns List<String>, but you can't get such a Type from an instance of that list; you can only get a Class.
Oh, that's simple. Because Apple did it.
Yes, the only downside is when you stand on it.
Yeah, me too. I followed him for almost a year but in the end I felt like he tried to make video too frequently and the information concentration is too low.
Marketfit of a Product
I'm searching for someone in an advisory paid position to advise me how I can bring my product to the market and finding marketfit.

Thank you

Tyrone
A coworker from a previous job said something along the lines of “How much work is getting done by teams debating tabs vs spaces?”

And it was in context of the decision being important but once it’s made just go write code and ship a product.

One of the many reasons I immediately fell in love with Go.
I think a lot of people making comments like this don't realize that the market price of waitstaff's labor is probably similar to fast food or other retail work--$10/hour, maybe a bit more. With tipping, waitstaff can make really good money, to the point that any efforts on the part of a restaurant owner to replace tipping with higher wages tends to result in the entire staff quitting.

My point: If "society" "requires a decent base pay", then waiters are going to get shafted, unless by "decent" you mean $40+/hour. The people getting screwed by tipping culture are not the front-of-house workers, but the other employees and the customers.

I think the most compelling argument is to point out that the people doing the real work in a restaurant--the cooks and the dishwashers--are paid much worse than the waitstaff, who really aren't even necessary.
Agreed. Instead of removing the accounts, they should just freeze the accounts and keep them public so that we can all see what they've been up to. Maybe a red check mark to show they are verified bots?
One of the key reasons we decided to utilize Cloudflare as our vendor for WAF and CDN was, that they uniquely offer to run SSH (or any TCP application, really) and HTTP(s) on the same hostname.
Have you tried Clojure with the GraalVM native-image? I am curious to what extent native-image can delete the overhead of Clojure and make fast natively compiled binaries.
In this paper from 1999 it is claimed that the global temperature between 1961 and 1990 was 14.0°C (14.6°C for the northern hemisphere and 13.4°C for the southern hemisphere).
https://agupubs.onlinelibrary.wiley.com/doi/pdf/10.1029/1999...
Research Development on K-Ion Batteries
I've worked for many companies that had fully automated CI/CD pipelines. If you have a good team which cares about the project, then you don't really need them IMO.

The reality of most big corporations is that nobody actually cares about the company. Executives can't trust their engineers to run the tests manually and deliver something that works.

If you have a good hiring and promotion process and a fair compensation structure (which none of the big corporations have), then you can trust your employees and so you don't need to micromanage them with automated CI/CD pipelines. In addition, if people actually care, you get much higher quality, more succinct code.

No amount of automated checking can lead to improved code quality. It only ensures that the absolute minimum operational requirements are met at any given time.
Also the scroll position indicator is unnecessary noise, as they call it in the article.
In EU/Europe usually a public space is stree common areas and all spaces when someone can enter at their own will legally (read shops, transport systems, cinemas, etc.).

So, anything that is not a restricted space, e.g. a manufacturing plant, is an open space.