skysight-inc/HackerNews huggingface dataset:
How does doing it manually verify that certificate is issued to the legal owner of the web site and not a hacker?
LineageOS is great, but I doubt it supports many $20 phones. Porting is done by volunteers - people who buy cheap phones are unlikely to make the effort.

Also, in theory a rootkit could go into the embedded firmware or use a closed source kernel module. In fairness, that's not a big threat yet - cheap devices tend to get cheap rootkits...
It's not a loss leader. Yes, they pay the bureaus for access, but you're giving them rich data about you (I'd argue credit data is even richer than what FB has on you) to use to target financial products to you.
Beat me to it!

Rolling options orders are the only way. Plus, depending on the spread in-month you can probably hedge your hedge, and buy a call on the other side.
Perf is becoming more important than it had been. Rust is still around and growing. WASM is becoming mainstream. You see some people migrating away from things that require garbage collection. Edge is becoming real, with Cloudflare and Fastly doing edge functions/workers, and AWS having come out with outposts, local zones, and wavelength (deploy AWS VMs to Verizon 5G hubs).

AWS is still eating the world, Azure is doing well and growing faster in enterprise markets but devs still hate it, GCP seems mainly startup and ML loads and they have an ultimatum to become top 2 or bust by 2022.

Open source is a little under fire. AWS made a closed source MongoDB clone. I feel like things have moved a bit away from DIY toward settling on whatever the big three provide.

JS framework overload has settled down and it's pretty much React and Vue. NoSQL has too, there's still mostly the same players as in 2017 but I'm seeing far fewer new entrants. In general I'd say things have slowed down as a whole, and the level of innovation isn't what it was a couple years ago. Shiny new object fatigue has set in a bit and people just want to make things work.

Docker in production is very real (our team uses docker in production only, not dev), and k8s has the mindshare.

ML is still fairly hot, but various experts saying we're starting to hit a wall wrt ML capabilities, and others saying plow forward and see.
Those aren’t hierarchies as I understand them, nor do I understand those to be real problems (I’m sure someone has been bitten by one of those but only by the law of averages).
C++ is getting Modules and Concepts in its newest standard (2020) version, bringing more simplification and making it even more modern and as easy as other languages. The compile-time programming is even more powerful than before
It worked despite of it, not because of it. People can write large programs in assembly, can they not?
‘Pure hubris’: Why Samsung and Motorola are releasing unfinished products
For ES and solr gurus here what is the recommended max size for documents if you want to index lot of office documents?
I generally agree on this working out well. As nits though:

1. This simplifies things like crazy, but could have all sorts of spill-over effects. (most notably reduction in charitable giving)

3. AMT, yes. NIIT is only another tax bracket though?

6. This would help dramatically, but I'm not sure how to execute it. CA nonconformity to all sorts of federal tax rules is a huge pain point (HSA being the worse one for the regular person), but it seems CA could care less about the complexity that hits its citizens.
What I wanted to point out is that just because software X is licensed under MIT or BSD or Apache 2.0, doesn't mean that all of its dependencies are, and therefore, that it's _only_ licensed under those licenses. I have observed several times in the wild people not understanding or appreciating the meaning of this crucial difference. That's a recipe for much regret later on when you think you can keep your trade secrets, and you legally can't.
It might be an option to connect the cameras to some computer (like an older laptop) via a USB extension cable and record the video locally, while using VNC, TeamViewer or some other remote desktop software to connect to that computer to view both the stream and the records when needed. No need for a cloud solution that way.
find it interesting that China has managed to keep things organised in Wuhan

They “prepped” by stocking up on “being a police state” beforehand.
Not sure what you're referring to. I'm thinking of medications like injectables, which may not have a sufficient shelf life to permit getting the full set of supplies all at once. But most of the medications which are life-threatening if withheld (e.g., antiplatelet medications after a stent) can be obtained in bulk with a normal prescription.
Respectfully disagree.

I don't particularly like the news, but it pays the follow certain types of news that could have an outsize impact on you.

Furthermore, the "prescribed" ultra long equities/diversified index fund allocation strategy you alluded to above is relatively new by historical standards. It's possible that this strategy doesn't pan out well in certain types of prolonged global economic states (such as persistent global stagflation, as one example).

I'd agree with the above if your investment strategy had been around for longer (more "Lindy"). One example folks like to cite is the Talmud Asset Allocation:

“Let every man divide his money into three parts, and invest a third in land, a third in business and a third let him keep by him in reserve.” -Talmud

https://seekingalpha.com/article/293665-the-timeless-talmud-...

One example of a portfolio that might be more robust is one of 1/3 land, 1/3 personal business/equities, 1/3 emergency fund cash/gold/bonds. With that portfolio, in just about every time period in human history, you'd probably be okay and wouldn't have to worry about the news at all.
I wonder if the single most effective thing that can be done to lessen symptom severity/risk of death is to work on improve cardiovascular fitness (since the clear majority of deaths seem to be amongst people who have cardiovascular illness/weakness)? I haven't seen any advice to that affect though.
There must be, but my friend chose an almost out of the box solution using an app from the Play Store, and the app only supported alerts per charge level.
All AGI efforts so far are fundamentally unsafe. OpenCog included
I would think that we just have come in full world full circle again after the last reset - WW2 - which saw an aftermath of power structures being rebuilt and people generally being in positions because of skill and how they distinguishes themselves.

Now we are at a place again where power structures are mostly crony/inherited (just look at Trump) based on affiliation, loyalty and destiny and rarely due to skill or achievement.

We all know how this eventually ends again too
when stocking up on meds, I would certainly include antibiotics (need prescription in my country). just as water and food do not fight coronavirus, antibiotics is simply a BFG one needs to have around against simpler infections when hospitals are overloaded and supply systems halt.
Agreed. Whether something is manually or automatically tested is really an implementation detail, but it’s economically insane to not have computers do the testing to the largest extent possible.

It’s also possible to extend the argument to the relation between “compiler verification” and “test verification”. That is: don’t spend time writing tests for things a compiler could catch.
As someone who has written more C# and Java than Go... I can read Go much easier than most other languages. I can step into a huge codebase and usually quickly reason what/where I need to make my changes without too much effort. This can be the case with C# and Java, but it seems to almost always be the case with Go.
A tangent, my biggest gripe with GitHub code search (within a repo) off the top of my head is the inability to blacklist directories or only search whitelisted directories. Often times I want to look up the implementation of a function, and bam, three pages of results from tests.
How many months out options are you using, and when do you roll over? I'm mostly in 2022 expirations, this way I don't have to obsess over daily changes in Mr Market moods (unless some good opportunity is coming along, like that rally in TSLA).
Minor correction: your full retirement age depends on your year of birth. It's above 65 for almost everyone retiring today.

It is only 65 for people born in 1937 or earlier. For people born in [1938, 1943] it goes up by 2 months every year. It is 66 for people born in [1943, 1954]. It then goes up 2 months per year until reaching 67 for people born in 1960 and later.
Nuclear war could kill hundreds of millions in a few hours. Why are you less concerned?
R vs. Python, a comprehensive guide for data professionals
There’s other reasons too! I’ve written the following:

if v, err = func(); err != nil {
nil, err
}

… and then went on to use `v`. Thanks to `v`s zero value being legitimate (and not nil like a pointer would be), the program continues on as if everything is okay. In case you didn’t catch it, I forgot the `return`.

Rust takes a much better approach with Result, where the return value is either `Ok(v)` or `Err(e)`, and there’s no way to access a meaningless value for the other possibility.
They cannot afford to not work is the answer for a sizeable portion of the population. Another well for profit healthcare feature
I don't know why you're being downvoted. I love eccentric people but he wasn't likely to make any contributions to science; rather, he was a prop on a 'science TV' channel that that has very little science and lots of 'mysterious mysteries of strange mystery' - their top show right now is about the curse of the Bermuda triangle.

The glorification of guys like this is part of why we have disease outbreaks due to people's unwillingness to vaccinate and why every attempt to have a serious public discussion about climate change is overrun by denialists and trolls.
hah. you beat me to it, Jason.

@danfox, i'm always down to talk code search as well - rand@github.com
Giving yet another solid reason to not work there. Job interviews are not (supposed to be) mind games.
My company still uses Ruby/Rails. It’s just so easy.
Bernie just won 70%+ of the Hispanic vote in Nevada, and came in second to Biden with African Americans, so please adjust your caucus extrapolations accordingly:

https://twitter.com/UCLAlatino/status/1231622727808610304
Humans are actually detrimental to preventing abuse.
But new pathogens always look much worse than they are because we haven't got testing sorted out yet. We test the very serious cases, we don't test the mild cases.
So you don’t have to clone it and grep it locally
There are always the 3x leveraged ETFs, kinda work like LEAPS lite
Mike Hughes dies in homemade rocket disaster on mission to prove Earth is flat
2) is one of the major disadvantges of Go for my team.

It requires our source control system to be Go-mod-compatible.

It requires commits/tags in source control to publish internal builds.

Its complete reliance on semver completely breaks when you want temporary branches for internal versions.

It makes it very difficult to have multiple Go modules in the same repository.

Overall, it's a horrible system.
> Well, yes, given that economies aren't organic individuals, their
"feelings" will be something different.

Yeah, that's kind of what I'm trying to say. The analogy between a human
organism and human society is imperfect, so I think the closest you could
come to saying a society is joyous would be if the humans in the society
are joyous.

As for what would constitute the subjective experience of a society, you
could call that the extrinsic Hard Problem of Consciousness, eh?

> I also do no think it's useful to separate "economies" to study as if
they were entire beings, they are a part of "societies" - this reads a
lot like asking if our arms feel joy.

I agree with that too. FWIW I would maybe identify money with oxygen and
the economic system with the circulatory system, and maybe (parts of)
some others (I'm an expert neither on economics nor physiology.)
You mentioned that you've been writing shipping software for over thirty years. To what extent do you think ageism is the issue here?
A lot of good answers here, but none seem to mention that asp.net core is improving a lot and getting traction.

Microsoft bought GitHub and LinkedIn.

Oracle is disliked like before.
If I could only use one browser extension, it would be uBlock Origin without a doubt.

I also really like Cookiebro.

https://chrome.google.com/webstore/detail/cookiebro/lpmockib...
The Colorado feeds a couple of hydroelectric dams you've probably heard of, so if you can either invest/divest in the power companies or in e.g. houseboats or yachts on the reservoirs, that would kind of give you an instrument to place your bet.
> literally the last words of a fool.

Which fool? When? How did he/she die?
Could this be used on human voices to detect tones like anger, openness, etc? If so, it might be monetizable as a sales value add.
ResearchGate wasn't linking me back to the original point of publication, and the DOI doesn't seem to be valid (yet?). It turns out this was uploaded to the Chinese arXiv equivalent on the 19th.

http://www.chinaxiv.org/abs/202002.00033
AI is still thrown, investors seem to like it.

React is performant now, so if I was you I'd take a good hard look at Clojurescript / Reagent / Porting those to React-Native.

And welcome back, good to hear your health problems are sorted!
Not only is Go's GC non-tunable there's also no way to set a heap limit, so you have to rely on the oom-killer for memory limits.
Has it, though? I've heard it said that k8s codebase is not very go-like.
Free Mobile Games and Apps
This is really quite different, and is actually in practice more similar to selling options because of the bad effects of increased volatility. They massively underperform under heightened volatility, simulations are right there in prospectuses (in fact I'd go as far as to say that their expected value is 0 over the long run, but like very long, maybe 10-30 years). And yes you should always read the specs/prospectuses/10-Ks of the contracts/funds/companies that you buy.
> This is a terrible example...

...and then you go on to describe the reason it's a great example.

I'm contending with the belief that somethings "worth" is determined by the effects it has, specifically the effects on the profits of a corporation. As you've pointed out regarding my "move $1000 example," the effects something has can vary in scale from the actions that brought them about. The cost of moving an object of a certain weight a certain distance with certain security measures is pretty stable. The secondary effects, on the other hand, could be massive.

Employment is the same way. One is paid to do a task in proportion to how much others who are capable of it would do it for. That amount is almost totally disconnected from the profits (or losses) the employer reaps from having that task completed for them.
https://news.ycombinator.com/item?id=22395528
Lions led by donkeys is a phenomenon that's been around at least since WWI.
Looks like Cameron used Wix for his site. `parastorage` only shows up in the context of Wix as far as I can see.

ed: https://www.wix.com/corvid/forum/search/parastorage

"That is a part of Wix CDN network to deliver images and stuff like that faster." by word of a "Wix Code Evangelist"
I think you may not be very familiar with Let’s Encrypt’s challenges. Allow me to briefly explain the gist of them:

The two most common challenges are an http challenge, and a DNS challenge. The http challenge gives you a response code to host as a file on the domain during the validation period. This challenge is, for all practical purposes, random, and cannot be guessed. Then, after your script tells Let’s Encrypt that the response to its challenge is available and up-to-date, Let’s Encrypt performs an http GET request to retrieve that response, and checks to ensure it is exactly what the script provided. Only then does it proceed with signing your CSR and giving you a valid certificate.

This requires (at least temporarily) a web server running on port 80 at the domain in question, and in order to break it you would need to be able to effectively either hijack the A record for the domain as read by Let’s Encrypt, or to break into the web server to properly issue a certificate that one then steals. Impossible? Probably not. Impractical? Very.

DNS challenge is even more secure, in my opinion, as it works the same but the response code is stored in a TXT record for Let’s Encrypt to validate. In order to break this you would need control of the DNS servers.

So, to put it rather simply,
>Are the challenges used by Let’s Encrypt secure?
Yes, so long as you trust your DNS and web servers not to be compromised. And if they are, it’s frankly game over anyway.

Now let’s contrast this with, for instance, getting a multi-year certificate from the likes of Verisign or similar: this (as far as I am aware) requires manual interaction, which can at least theoretically allow for human error, of which there are many chances.

Additionally, many more traditional CAs will let an inexperienced user have the CA generate the private key and then transmit it to the user. This opens up a LOT of dangerous possibilities, as now this private key is being saved and moved around, and could easily be missed and left on the workstation used to perform the work. Or a MitM attack could even snatch it in transit.

Honestly, I don’t think there is much (if any) point in still using manual verification. The human aspect of it also opens up chances for forgery, and so on.

Let’s Encrypt’s challenges are specifically designed to be difficult or impossible to hijack, and so far as I understand it the private key should never leave the server it will remain on.

So again, to answer your question succinctly and to the best of my knowledge: yes, the challenges used by Let’s Encrypt are most certainly secure.
I disagree. I think SPA's are fantastic. Sure, they can be misused, but so can most things.

I'm an intermediate level web developer. I enjoy working with ReactJS-- I like that it's a framework and way of doing things.

1. manages to accomplish everything that I need to get done

2. has a huge community & huge amount of open source reactjs components available

3. is highly customizable

If one isn't going to use a modern, prolific SPA framework such as Vue/Angular/React, other options seem to be:

1. Vanilla JS (potentially a mishmash of vanilla JS + CDN/local js libraries)

2. jQuery

3. other jQuery-era frontend frameworks

ReactJS in my experience makes development faster, easier, better organized and more enjoyable.
If your goal is to be a game designer then learnings around map design and storytelling should be robust ones. How well it teaches general programming I have no idea.
Don't forget the hailstorms

https://www.reddit.com/r/WTF/comments/f7g85v/hailstones_caus...
Work with Cents, Not Dollars
I'm kind of surprised this article doesn't mention anything about how many nodes you want in your cluster. Since ES performance starts to degrade once you get past 40 or so nodes .
Honestly if a solution is too hard to understand and debug then it is not elegant. Elegance is turning a complicated solution into an easier-understood one. Clever solutions could be elegant but they could also be shortcuts that are confusing and cause more harm than good. There’s definitely a difference.
The interface for this is really clean and nice - did you use a theme or framework?
Kudos for trying, having taken advantage of these recently it can really help people cope with loss. Finding one you trust is huge as they vary widely in care and competency.

On the business side, the supply chain seems like a nightmare. Any specific lessons learned?
It doesn’t. It actually opens up more opportunities for error, intentional or otherwise, that can possibly be exploited by a malicious actor.
>The fact that it's automated results in less human intervention along the way, which on one hand lowers costs, on the other hand makes it detecting scams harder (unless they deploy some really Machine Learning that detects frauds).

You think that other CAs manually issues their DV certificates?

>The fact that it's free means that there's no credit card number or other info that would help identify actual person that requested certificate issuance.

How do you feel about CAs that accept cryptocurrency, or accept prepaid credit cards?
>Perf is becoming more important

Should look at BPF/eBPF. Mainly bcc & bpftrace packages that come with ~70 tools out of the box.
> My guess is that the 2-3% estimate is too high.

I sincerely hope you are right. Those are numbers that when extrapolated to global scale are too horrific to even contemplate.
“Supreme Edition” Oreos Bidding for $92,000 on eBay
Fear isn't a new paradigm. It has long been established that media outlets, religion, terrorism, ads, etc use(s) fear as a means of control.

I suggest watching "Bowling for Columbine"--here's a notable excerpt: https://www.youtube.com/watch?v=NiaxzBlFgmQ

Btw, I'd also recommend reading this https://www.rollingstone.com/culture/culture-news/columbine-...

IMHO, the best way to fight such fear is, among other things, to insist on educating the masses and to open science as much as possible to them as well.
I've worked on JCDecaux smart signage. The camera is used for analytics purposes using computer vision (people counting, attentiveness, demographic data, dwell times, etc.). Nothing is recorded. In some cases, processing even happens at the edge.
Georgia Dems propose cheaper tuition for illegal immigrants
Learning pains? It is more complex, but the efforts will return value.

Email me if you'd like some help debugging and stabilizing
We launched a 1:1 tool for sales managers that used predictive analytics to suggest which deals needed to be discussed (ie Deal X looks like it's stuck). The reason being, when I was a sales manager, I found people would naturally talk about positive stuff rather than easily giving the whole picture.

It failed because quite simply, when we tried to get other sales managers to use it for free (hoping it'd be popular), we found they wouldn't make the time to spend 2 mins planning a 1:1, probably as they're managed on 'selling deals, right now' in many cases, which is a bit sad!

Learning: I should have read the Mom Test.

With hindsight, I wish I'd built it for engineers based on Pull Requests (PR #181 had a ton of back and forth / NLP shows it got heated). It would have been fun if nothing else!
USGS researchers aren't exactly wallowing in cash.

If you want to see meaningful bets, look to the Pentagon and insurance industries. They seem to have made a decision on climate change.

https://www.bloomberg.com/news/articles/2019-01-18/in-dire-r...

https://www.wsj.com/graphics/climate-change-forcing-insuranc...
Why not use TaxHawk? It's $0 for a federal return, $15 for a state return (not required), and an established company with a good UI.