skysight-inc/HackerNews huggingface dataset:
NVIDIA drivers on Windows have an option to scale on the GPU instead of on the monitor, though I'm not certain whether they ever default that on. Presumably it's there as a workaround for people with bad/broken monitors. It'd be interesting to try and measure whether that option raises power draw...
Hosted CI/CD with Customizable Build VM Images
Shoes are a Zahavian signal. It doesn't matter how comfortable or convenient the shoes are. Its primary purpose beyond protection of your feet is to prove you are with it. Same applies to iPhones and designer clothes.
Antarctica just hit 65 degrees, its warmest temperature ever recorded
If the free market is the key to a better healthcare system then it should happen in degrees. A more free market should be more affordable than a less free market. Instead we have the most free healthcare market being the most expensive healthcare system. The is the opposite of what should be expected if your hypothesis was true.
While keeping revenues and margin is certainly a priority, I think the bigger issue is a desire to not split the Apple userbase across multiple iOS versions.

"Less than a year after release, iOS 12 has reached 88% of all active iOS devices" [0]

By contrast, Android has an insane amount of fragmentation, though the link is outdated, at the time, Marshmellow 6.0 had the most users, at 16.9% of all Android users, while Android 9 had just 10.4% (this was 10 months after Android 9 had been released) [1]

I know this comparison isn't perfect by any means. Apart from the differing time frames, Android has more use cases than just mobile devices. Nonetheless, the difference is staggering.

[0] https://www.digitaltrends.com/mobile/ios-distribution-news/

[1] https://developer.android.com/about/dashboards/index.html
All companies want to fill their ranks with the Michael Jordans of the world, but there was only one Michael Jordan (that's why we call him by his name), and he wasn't even drafted first overall, he went third. The people who beat him were another Hall of Famer, and then some guy you've never heard of.
Ask HN: Acceptable CSRF Token Lifecycle?
Hi HN! Question for those with experience writing and/or auditing the auth flows of a web application. I recently decided to move my session cookies to HttpOnly, to mitigate the damage of a XSS attack.

To prevent CSRF, I was sending said session cookie as an extra field with every POST request (double submit cookie pattern: https://medium.com/cross-site-request-forgery-csrf/double-submit-cookie-pattern-65bb71d80d9f). Now that the session is not readable from javascript, I need to create a separate CSRF token.

Based on great feedback from the community (see https://news.ycombinator.com/item?id=22209588 and https://github.com/fpereiro/backendlore/issues/12), I'm considering the following approach:

- On every successful login, create a new secret/token (using the same crypto mechanism I use to create the session secret, but a different secret altogether) and store it on the database, tied to the session itself. Set both the session and the CSRF token to expire at the same time.
- Every time I get a request with a valid session, renew the life of both the session AND the associated CSRF token.
- On every successful login, return the CSRF token in the body so that it can be read by client-side javascript.
- Set up an endpoint to retrieve the associated CSRF token for its session. If no session is present (or the session has expired), return a 403 code. This also solves the problem of letting the client-side app know whether the user is logged in or not (I would hit this GET /csrf endpoint when the javascript loads to determine whether there's a valid session available).

My understanding is that, as long as the browser supports Same-Origin Policy (https://en.wikipedia.org/wiki/Same-origin_policy), a CSRF attacker could not submit a GET request to my server and obtain the result. If you see any security issues in the above scheme - or if you use a similar scheme and know it to be secure - please let me know. Thank you very much for your feedback!
The MBP 2015 with discrete GPU is hardwired to output video signal through AMD M370X. It can get quite noisy when just connected to an external display.
IMHO that not true:

They sold a car. That car had certain features enabled.

That normally that feature would cost extra or is not explicitly listed in the contract doesn't matter at all. It was enabled in the car so anyone inspecting the car clearly saw the feature when looking for it.

It's like selling a car and then telling the buyer a month later "oh btw. the second row of seats in your car was not listed in the contract (even through you saw it when buying) so we went to your car used our master key to unlock it and removed the seats, you can always get them back by paying another 8,000".

Companies who accidental sell more then they want normally live with that loss and accept it as their error (which it IMHO obviously was).
My mind also went to the PR cost. Why try to go after their customers for their own mistake? The customer didn’t choose the pricing structure, they did. Put it on the P&L, move on and do better.
I had a recent experience that forced me to better understand the development process of Chromium.

My OpenLayers mapping application suddenly got VERY slow. tl;dr: Chromium team had made an optimization change to canvas `getImageData` which slowed it to ~1/40th performance in some cases. It was frustrating to have to convince them this is a problem at all.

But what frustrated me more was how they came to decide to sacrifice performance in one way to benefit it in another. I'm sure they came to the conclusion somehow, but it ended up just utterly breaking apps that are already out there. One teacher struggled with a school-board-wide course that just didn't function because the main software was broken by this.

https://bugs.chromium.org/p/chromium/issues/detail?id=100184...
A sorted map would be tree-based and require its keys to be orderable but not hashable. For instance Rust's HashMap has its key bound on Hash + Eq, while BTreeMap's is bound on Ord.

They're different data structures, with different use cases and different requirements.

> There's no ordering over _most_ hashable values since they span multiple types, so insertion ordering is the only sane way to do it.

Python 2 actually had total ordering of all values. The result was usually stupid but it was there.
Nothing wrong with being transparent. And maybe they really can do the thing you're assuming they can't.
There isn’t, because most users actually don’t know how to do things like regulate speed vs performance, and the whole point is that the throttling is dynamic to prevent shutdowns. What do you think the control should look like? An always present display of voltage levels, temperature, and throttling status?

And what do you mean - ‘make things as bad as possible to prove our point’? Where is that coming from?
I think I'm fine with it, as long as they continue to sell best-in-class vehicles and provide quality service. Third-party repair and open documentation are nice, but not must-haves for me.
Thanks, I'm still confused but it seems in essence before counting they make an educated guess of the two likely winners and first count with that in mind and only do a more complicated tally if it ends-up mathematically possible for one of the others to still come-out on top.
Have you tried taking classes or otherwise getting 1:1 coaching?
For some definition of "now". Python 3.7 was released in June 27, 2018. So "now" is "for the past year and a half". Python 3.6, which implemented the change originally, was released in December 23, 2016. By that measure "now" actually means "for the past 3 years".
The alternative would be to have phones turn off when they requested more power than was available. What do you think would cause people to want to replace their phones faster?
Firefox fits both of your requirements perfectly, I use both all of the time. Not only are tabs with the Firefox extension vertically aligned, but trees (I don't know whether this is the case, I avoid using Chromium-based browsers)!
Exactly. All Tesla is doing here is destroying the resale value of their cars.

If Ford sells me a car that has ADAS installed, it's listed on the sticker, and the features work, then the price is completely immaterial and if they later try to disable it remotely I can't imagine the courts would look favorably on that.

This just killed any remaining desire I might have had to buy anything from Tesla.
The game's distribution is a normal distribution - and I think the problem may be with perception. What is the definition of "good"? Personally, I wouldn't claim to be very good at the game despite my past ranking - there are a number of players who would wipe the floor with me where it feels like I'm giving my all and they are barely even trying. At the same time I could probably do the same thing if I dropped down on the ranking. If you watch streams, you commonly hear top players complaining about having to play with "braindead masters players" who are the top 5%. All of this shapes the perception of what good means.
No, this change is backward compatible but not forward compatible. Old code (written for old interpreter) works in new interpreter; but new code (written for new interpreter) is broken in old interpreter.
IIRC (though I'm not a chemist) a challenge with synthetic fuel generation is the continuous high power needed to drive those processes. Most renewables don't provide that yet (with the exception of hydro), at a sufficient level to make aviation fuel. There was a company mentioned here a while back that is trying to do that with small scale nuclear sited at airports, but that has other issues.
Singapore has reported several cases of local transmission, no ties to China.

https://www.moh.gov.sg/2019-ncov-wuhan
> Instead, it sounds like Tesla goofed and enabled some features that should never have been enabled, and then clawed them back after the car changed hands several times (original owner -> auction, auction -> dealer, dealer -> customer).

Not that you're arguing for Tesla, as far as I can tell, but this sort of thing doubtless also happens with non-IoT devices, and yet manufacturers of those don't feel that they can come and repossess the parts that they didn't want you to have. (The grocery store, for example, frequently has notices that ads were misprinted, and they won't honour the advertised price; but they can't track me down afterwards and take back 30% of the produce if I got it at the reduced price.) This is not a new problem; it's a new, and bad, solution to a problem that should be the manufacturer's alone.
On the plus side, could this be used to root phones?
I agree, and I think it's troublesome that dict now means something more specialized than it did before and the language doesn't communicate this. The dict is dead, long live the dict.

I suspect it's the result of my Java goggles, because the distaste comes from a sense that this is analagous to if the Map interface suddenly always meant LinkedHashMap.
China is the leading bogeyman used to suggest allowing monopolies in the US is a good idea. In short, since China allows their companies to behave badly, we should let ours behave badly too so that we don't fall behind in the market.
> Now, there could certainly be some shift that changes that, but I'm not sure what it would be.

As I said: remote work.

You are right we need "sufficient population density". I wouldn't want to live in the country side for long term. I want to access things that only cities can provide, but I only moved to London because of job opportunities. I would happy to live in a small city if I have access to the same jobs.

If remote work would be more widespread the countries would be more decentralized.
The history of ctrl + alt + delete
I don’t see how one could conclude Eich has any hate for anyone based on one political donation 12 years ago.

Gay men and women who had worked alongside and under Eich for years at Mozilla were appalled at the controversy and said he had always treated them kindly and was a great friend.

I see how this thread maybe isn’t helpful — except that it demonstrates that people still have hard feeling towards him (though I doubt anyone who knew him personally would, gay or not). But it’s bringing up the old controversy yet again. Sorry.
Prediction of today's tech from a 1967 film
It's technically consistent, Windows just chooses to rasterize non-DPI-aware applications at the lowest common denominator DPI and scale them up on high-DPI monitors. AFAIK MacOS does the opposite, and rasterizes everything at the highest DPI and then scales down as necessary. The latter looks much better so I'm not totally sure why Windows doesn't do it - perhaps a compatibility hack for apps that expect classic 96dpi.

Newer versions of Win10 actually have an odd variant of this that works more like MacOS where it will sometimes rasterize at a higher DPI and scale down - it looks pretty nice but it's not compatible with all old applications, I only have it enabled for a couple.
There's a distinct difference between the coverage of the New York Times and the Seattle Times. Both a very critical of Boeing, but the NYT seems to have a weekly quota of Boeing articles whereas the Seattle Times only publishes when something new has shown up.

I have also noticed quite a few articles from the NYT that only recap what has happened so far and don't actually have anything new in them. Boeing and the MAX seems to be a hot story right now, so I guess I don't blame them, but its tiring to see a new article and think "oh, good, some new info" and then waste time reading it to find out its just more of the same stuff as last week.
I get way better battery life with Safari than either Chrome or Firefox. I like how pinned tabs are there in all windows (otherwise.. what's the point?) But the extension ecosystem and lack of customizability makes me sad.
Technology company co-founder reports car stolen to avoid mechanic's bill
Same thing as in JavaScript : https://www.stefanjudis.com/today-i-learned/property-order-i...
Is there any reference at all for this?

My iPhone X is 3 years old, and feels just as fast as when it was new.
Two words: Play Store.

Android is profitable.
The people who understand money and finance will end up ahead of those who don’t.

Denying this reality will lower your risk profile but also lower your potential rewards. If you can’t control your spending and investing then don’t finance a car for 7 years.

But don’t pretend that economics and math are wrong.
> Exactly. All Tesla is doing here is destroying the resale value of their cars.

Not just the resale value, but the value, full stop. If I buy a car, I'm more worried, at least in the short term, about its features ceasing to work for me than I am about their not working for the next buyer.
Most companies smaller than multinationals are still large enough to have conflicts between teams. The most common failure mode I see is people who simply opt out of those conflicts, preferring to keep their heads down and write code rather than talking about what should be done and how. I'm not familiar with how it works in older companies like IBM, but at the FAANGs of the world, participating in those discussions is what distinguishes entry-level engineers from more senior ones.

If your experience is only in companies with a handful engineers, yes, it can unfortunately be pretty hard to get a senior position at larger companies. It's not impossible, but people will have justified worries about whether you can handle the responsibilities.
The definition of a dict hasn't changed. It's still defined as a set of key:value pairs. It just happens to also have a particular guarantee now that iterating over the keys will return them in insertion order.
Can you point me to a country that is "free"?
What part of the loan cost $1000? Usually (on new cars at least) dealers will give you a discount if you finance through them.
What is subversive about their option?
s/fan/customer

I feel like the comments here cover the main issues with this article. I kept flip-flopping between appreciating the article and disagreeing with it. The two main issues I have with it are:

1. $1000/year to provide value is a business, not a "passion" in the true sense.
2. Highlighting the outliers of a given platform discredits the concept as something that many people can achieve.

"These fans expect to derive meaningful value and purpose from the product." - yes, that would be a business transaction.

This article could be rewritten to say that if you want to create a life-style business, make sure to generate enough value for someone (or a business) that they would be willing to pay $1000/year for your product. This will make profitability/success much easier.

Yes, the original author of 1,000 True Fans retracted his original views after hearing from musicians, but the general concept/framework doesn't seem to be broken even if the numbers have to be adjusted. The main idea is that you don't need millions of people paying you $1 to have success.
People have been infected locally in Thailand, and by reports one of the UK persons infected got it in Singapore, so the case may be that it isn't contained in other countries as well.
The upside for you asking your boss: 'what do I need to do to make your job easier' should be obvious. The reason your manager can justify employing you is because you, by working, accomplish some goal that was set for them by their manager.

If your manager has any self-interest, and isn't an idiot, they will reward people who help them look good. If your manager is an idiot and a sociopath who will instead reward people who aren't helping them look good, obviously don't try this advice.
I don’t think there’s compression or encryption. I can search and find the hex representation of text and values that I expect to be there. I guess I need to bite the bullet and spend some time tagging the parameters I know, then figuring out the pattern of padding that is in between.
That's easy for you to say...
Chrome used to rely on fixed synthetic benchmarks like this for guiding their performance optimizations, but quickly realized they aren't a great indicator of real world performance and ditched them in favor of instead evaluating Chrome's performance against a collection of popular, real-world websites. See https://v8.dev/blog/real-world-performance for a discussion of their bench marking methodology.
If you are a tinkerer who is upset by Tesla's control over the software in your vehicle, you can disconnect the data connection in the car. You purchased the car and you can use the car how you see fit. You did not purchase a free, unrestricted, and perpetual license to use Tesla services. It is no different than purchasing an Apple or Android phone and having to abide by Apple's or Google's ToS to get the most out of the device.
Friendly reminder

https://www.nbcnews.com/tech/social-media/tiktok-releases-tr...

Lt. Col. Robin Ochoa, a spokeswoman for the Army, told Military.com in an article published this week that TikTok "is considered a cyber threat."

Why acting surprised now?

EDIT: care to reason the downvotes? Or just CCP-patrolling? TikTok gets away with this shit because is yet another front in the CCP cyberwarfare theater. Nothing will happen to them as long as they're a useful tool.
Ayyyyy md !! Yay! Finally!
The uniformity across all devices is great in Safari too. Synced passwords between my work laptop, home laptop, phone, and iPad is such a convenience. Also great if I'm reading an article at home and then want to bring it up on the phone for my commute and then my work laptop when I arrive--totally seamless.
I wonder how liability will be handled in all the cases worldwide where companies did not cancel services or events and then people die due to novel Coronavirus.

For example, the cruise ships that area currently quarantined in Asia with 10-20 cases of novel Coronavirus on each. I know of passengers trying to get other cruises to cancel their trip and refund their money. If they don't do so and then that next cruise ship has an outbreak and people die, would the ship be liable?

Similarly, for this conference in Europe.

I wonder how to evaluate the risk in each case. The cruise ships that area currently in quarantine likely wouldn't be liable since it wasn't clear that this would inherently happen, but now the next cruises to depart from similar places should be liable perhaps?

Any lawyers on here care to comment? Thanks!
I have the Macbook Pro 16 and have been using it for a few months now. Overall, I think its pretty bad laptop for how expensive it is. Yes Apple fixed many things people were complaining about but it is a perfect example of how Apple has stopped innovating and stopped caring about the MacBook line. In fact, I dislike it so much I have started using my 10 year old MacBook Air instead of my brand new Macbook Pro.

Things I dislike about the MBP 16:

- Still has the touch bar

- Screen size is awful. I like to work with windows size by size and the 16 inch screen size is awkward because most website won't re-size properly.

- Its heavy as hell, slightly thinker than the old ones.

- Its slow. Yes, all the RAM and CPU and the thing is
laggy. I don't know why but it just has a bad "feel" to it.

- Touchpad is too big. Its gigantic and I often end up touching it by accident.

- Its crazy expensive

In the end, I will end up selling it and using my 10 year old Macbook Air until it dies. After that I'm not sure.. maybe I will try the newer Macbook Air and see if its tolerable. At least it doesnt have a touchbar.
Some VCs are keeping founder mental health in mind
It's just really tough to compete in the fitness tech market. The total addressable market size isn't huge. And over the last few years Garmin has thrown tremendous resources into it and launched so many new products that smaller competitors were squeezed out. Wahoo, Suunto, Coros, and Polar are still hanging on with small market shares in devices and Strava may survive as an independent app. Nike tried and gave up. Fitbit was slowly dying and got rescued by a Google acquisition. But anyone else is going to have to come up with a real disruptive innovation to have a chance of long term survival.
Yes, that would help with that problem.

If it were up to me I would just abolish copyrights and patents. But, another idea I have seen is that copyright lasts 2 years for free, and then after that you have to pay a fee (of your choice) to the government to retain copyright; copyright expires in 14 years. However, anyone can make it public domain early if they pay the copyright holder 100 times the fee for retaining copyright.
I got a case of walking pneumonia from the regular old flu last year. I don't smoke, exercise regularly, and am in my 40ies, and had a flu shot.

Smoking certainly doesn't help, but these things can hit anyone.
You're welcome :-)

You have to enable it manually nowadays, but it opens up a ton of possibilities - you can theme virtually everything (find out which elements to theme using the browser toolbox).
This also wasn't guaranteed to work since kwargs is a dict under the hood.
they can't leave well enough alone. Chrome 80 idling at 45% cpu on Windows. tired of these twits
The boomerang (against block ciphers) was coined in 1999. It was used against SHA-0 in 2008?

Apparently the NSA warned against SHA-0 in 1995.

So do we now know what they perceived the weakness to be? Or are we still guessing?
I am in the middle of planning my first 1:1 with my first direct report and this is incredibly helpful. My bosses never did this. Thank you!
Usually as much as we have the time to discuss:

- status of current projects and resources that I manage (I am a manager myself)

- priorities and direction changes

- help needed, in any kind: escalations, resources, etc

From time to time, about every 3 months:

- feedback and intermediate performance review

- work plan updates

- strategy updates