skysight-inc/HackerNews huggingface dataset:
> This even fosters an environment where top performers are discouraged by their peers for "making everyone else look bad".

You don't need a union for this. Most large companies that do software (not the FAANGs, but the non-tech-first ones) generally don't know what to do with top performers, because consistency and predictability is more valuable to them. Especially a top performer who's bad at politics so they come off as attacking whole other departments or teams.

A union won't fix it, but probably won't make it worse, in those places.
Opportunities in Deep Learning
Because I want to use LE and not other CAs.
Graphic designers work at most tech companies I've worked at, and I've never worked at a game studio. They definitely can be classified quite reasonably as tech employees.

Also, here in Montreal, most people's list of well-known local tech employers would absolutely include at least one or two of the many game studios here.
This very looks cool, thank you for sharing parent.

I apologize for the nitpick, but I hope there will be some guidance on what an "anonymous" email is.

(Ex: Guerilla at a public wifi like a library, an email created at a library, but not your usual email from a place other than your home)

I worry sometimes that we assume people reporting security vulnerabilities will be security experts.

I often meet people who are intelligent and technical, but either do not understand security, or understand it in terms of confidentiality, integrity, and availability (CIA triad) and flounder when thinking about anonymity.
Customers like having choices. Enterprises typically will "certify" one config and would like to stay on that till they absolutely need to move to something else.
1) Startups suck. They will work you to death all for the promise that maybe it will pay off one day (but probably won't.)

2) I don't want to work for a "mission-driven" company. What does that even mean? Most companies lie about their mission anyways. They want to make money, not save the planet.

3) There is not a company out there that is "aligned" with my values. I value free time. I value spending time with my family and friends. I value doing separate things from work.

4) I do not care about having "impact" or about "growth". Been there; done that. It is overrated. Building up a company's value so that the executives get bigger & bigger bonuses does not motivate me at all.

If you are able to change the world, build your own company. Don't work for someone else and let them take the credit. If you can't change the world, then stop pretending you can. Work, get paid, and then go home and spend some quality time with your loved ones. Stop trying to trick me into wasting my limited time left by slaving for other people.
How would you institute that in the clipboard logic and independently of the app?

Because we're no longer operating in a world in which apps or processes are trusted or trustable. Maybe the ones you write, maybe if you're really lucky the ones that come with your fully-vetted Linux distro.

But not npm installs, not proprietary binaries, not website logic, and most especially not the crap that's distributed on mobile app stores.

Your OS, you've got to trust. Which means that the logic's in the clipboard.

And how can the clipboard know that the application is attempting to change contents such that the clipboard won't receive what it is that you see?

That's a key reason I see this as something that 1) has to be in the clipboard logic and 2) has to exclude applications entirely from the copy process. The clipboard should be acting on, say, the graphics render layer directly, outside the application's scope.
> There are people who spend insane amount of time on HN (including me) - sure it is billion times better than FB, but it is still an addiction.

Why is it billion times better? I spend a lot of time on Facebook talking to my family that lives on the other side of the world. Is spending time talking with other geeks more valuable?

One site is owned by a huge corporation and other is owned by a company that tries to get rich by creating more corporations.
Bill Gates (among others) has a pessimistic view in that regard. He thinks it could be devastating if we’re not lucky.
Rural America Doesn’t Have to Starve to Death
"...support and community management roles..." are less scalable? Does this mean companies are finding it more difficult to fill community management roles than developer roles? Also, what do you mean by "no less valuable"? I don't think you can have a company who's product is software without developers. You do not, however need community managers. You make an interesting point: I do wonder if those in "soft skill" roles perceive their roles as equally valuable as software developers. I personally do not.
A developers browser sounds like a really useful idea. The danger is in how deep you integrate into the underlying Electron, and how stable those APIs are.
I'm sure the government would likely kick in to quarantine people.

The problem are all the people who will wait until they're really sick before checking in, or won't go to a doctor at all, and they've already spread it by that point.
They're from different languages...
Removing Comments – 3 Months On
Did you know you can transfer money out of an account with nothing more than the checking account number that’s printed on all your checks along with your name and home address?
Everything is fine if it's done properly.
> although honestly putting it at 3-6AM mitigates a lot of my concerns with that.

As long as the website is only used in a single timezone, I guess it's not too bad.
While I appreciate what black can do (no more discussions about code style!) I am lucky enough that I manage a small team (2-5 programmers) that understand and follow the style convention we set.
The site layout is messed up for me.. Buttons are way right.

So install an app, to vote on where to eat? This seems like more work. I use skype messenger and message people. Its simple and does not require me to use my phone and install another app.
Not so sure everyday people trade algorithmically. Pretty niche group of people who do trade, and mostly lose, like gambling.
There is definitively different phenotypes https://www.medsci.org/v14p0639.htm

What that means for the coronavirus is hard to say.

Ideally we would know the composition of the cruise ship in japan of ethnicity (illness in each group, and outcome) and location on the ship so one can control for likelihood of being infected (I would guess having a room with a terrace might mean less chance of infection as you would not be only relying on AC air, but its a complete guess).
Was going to say this too, specifically rationals with arbitrary precision should cover all general currency related issues assuming irrational values are forbidden.
I’ve been wondering recently to what extent the political structures of the most successful corporations may influence those of politics at large...

It’s funny that we value democracy in name, but still enforce a rigid, top-down, and winner-takes-all hierarchy in most of our businesses.
Will the entire 2020 olympics be cancelled in that case? Or would it be moved or postponed?
Ignore the last episode and the show is much saner.
For business decisions, no. You'd be surprised at how many employees at Google don't really understand the process of how Google makes money. They offer little internal seminars so they can learn how.

The last thing you want is a bunch of smart engineers voting on business decisions they don't have the background to fully grok.
> One can only wonder what happens when it reaches places with much weaker health infrastructure, such as Africa

https://www.theguardian.com/world/live/2020/feb/14/coronavir...
See https://aws.amazon.com/about-aws/whats-new/2019/04/amazon-ec...
It's not what Signal is built for. If you want to join public chat rooms, you can use Telegram equally securely. E2EE never hurts in the case of public groups, but since you're not able to verify none of the group members are malicious, and logging and leaking your (and everyone else's) comments to every bad actor, it doesn't matter.

Your only protection is anonymity, but that's something not even Telegram offers by default: This has lead to speculations about attacks where the Chinese cyber army has performed massive reverse look-ups of Hong Kong citizens' phone numbers, by storing what TelCo has in it's database / what IMSI catchers / hacked towers see, and adding them as contacts. This by default reveals Telegram user's username to the attacker. You can disable this by opting in, but very few do.
We have a wealth of information on Beethoven's life from his conversation books - I wonder if future generations will be deprived of such things from the important people of today because of these privacy laws.
I'm not the only one who, ever since I opened this article, has been hearing the lines:

The rising tide

Of the left-behinds

Of the Great Society

(too too too too too tee!)
Thank you for doing it!

VLC is great piece of software. However, I struggle with its UI almost every time I use it. Simple things are hard to find:

* switch subtitle track

* add external subtitles

* switch soundtrack

* add external soundtrack

It's also annoying that rewind buttons in full-screen mode and in windowed mode behave very differently.
The more you look for these patterns the more you'll notice. It's how our brains work. I myself notice a lot of what you mention as well, and I do my best to file it away in a "mistakes to avoid when I get to be the one making decisions" folder in my brain. Not much more I can do beyond that, because so much of this is a byproduct of poor incentive structures, bureaucracy, or plain negligence. Attacking it all at once will feel like trying to boil the ocean.

And specifically, on the doors issue. Vox has a great video on this.

"It's not you. Bad doors are everywhere."

https://www.vox.com/2016/2/26/11120236/bad-doors-human-cente...
Wouldn't gpt-2 be much harder to detect. This could just be markov chains which were trained with all their comments from the past. Still pretty cool
1) I agree, me and everyone else. This problem will be solved not through a union, but nobody except the bottom of the barrel wanting to work for Kickstarter. Then they will either bump their pay to get good workers back, or fail. Simple economics.

2) I also agree, but that doesn't mean these workers should unionize.
You can't have your cake and eat it, too. They do indeed lie, and most of their lies have involved calling serious unexplained incidents weather balloons or shooting stars. The most interesting documents are not the public statements prepared, but the private testimony between military groups behind closed doors.
A couple more points

* Why wrote your own format when JWT already has predefined keys. If you write your own encoding format instead of crappy JWT interoperability you have none and have to write everything from scratch

* If you're following API first using cookies for machine to machine API interactions is ridiculous (cookies are for browsers and humans)

* JWT being fairly standard plays nice with load balancer a/auth proxies/API gateways which can off load auth or even route it before hitting the application (database calls are expensive compared to in memory cached auth and you probably have an LB anyway)
You can still see an attorney while committed, and you will be periodically re-evaluated and that goes before a judge. As for cracks, I'm aware of cases where a person has been put on a 72 hour hold inappropriately, but one bigger issue is declaring people mentally fit for trial who really aren't. I know institutions in Florida have been criticized for basically doing the bare minimum to make people appear to be just barely mentally fit.

You are correct that people found mentally unfit to stand trial can remain committed for years, particularly those with drug-resistant schizophrenia. Tragically, for some of the most vulnerable members of society this is the best case scenario. People with severe schizophrenia who can't function often end up on the street, suffering hardships and victimized. There are parents who's child is on the street, getting frostbite and being assaulted, who go to any psychologist they can find to try to find someone to declare their child a threat to themselves or others so they can get into treatment. But they rarely are. Often they just have to hope their child commits some minor infraction like shop lifting and wind up declared unfit to stand trial so they can get the treatment they need.
>When you're carving wood by hand, why go to the extra effort of fancy complex joints for no gain?

Because a bunch of complex joints are likely less labor intensive than using larger material. Remember, these "planks" were made by hand. It's the difference between spending an afternoon shoveling dirt or spending an afternoon fixing a tractor to shovel the same amount of dirt in 5min.
I get the impression a lot of tech companies aren't doing it out of particular absolute need for such a strong a hammer, but because they can and it suits their ideology for legitimately bad stuff they see happening in other industries.

It always made 100x more sense to me on some factory floor in the early 20th century than it does in a tech startup like environment in 2020, plus some labour jobs in between.

I can just imagine the thousands of additional mandatory meetings across the entire company, the needless costs, and hoop jumping that will be added for very little ROI. But because they see gig delivery workers facing shitty conditions under weak contractor and unemployment law designed for a past century, so they think it's justified and want to start it somewhere.

The laws that get passed that make non-union members pay dues even though they volunteer not to be part of the union is the kind of stuff that drives me crazy. Or how they make it impossible to fire egregiously bad workers. Or how in the small town I grew up in these union jobs were coveted and hiring was super nepotism driven, you had to know the right people to get the job - which to me is the opposite of "diversity and inclusion", which is (unsurprisingly) the 2nd bullet point on their political union website, right after "equal pay for equal work" which is a statement riddled with mythology over data.
As if companies determine the price for housing. With Sillicon Valley wages, you could easily afford housing within 5 years somewhere else. It is not companies' fault that housing prices have gone up - it is politics preventing building of available housing. It is also an example that shows that no matter how much you pay the employees, housing prices will simply adapt if more housing is not being built.
You really think google doesn't have the capability to create a system to detect these ads? This is Google's core business and they do far more impressive stuff in the AI field. I'm not talking about a 100% bulletproof all-copyright-in-the-world solution. If it would be able to detect logo's from the top 1000 brands and some OCR would already go a very long way. Sure ads would try to outsmart it, just like spam it would be a cat-and-mouse game.
I mean, so what though? I feel like we complain about technical debt often without acknowledging that the point of taking on debt, traditionally, is to capture potential growth. Sure it'll be a hassle to be the guy who has to handle the eventual revamp, but that's just a reason for that guy to ask for more money. At the point of turning a week into hours you're playing a totally different game than you were before.
We're Building an SDK for Sandbox VR
Your explanation here is described in my original reply as "that adding 3 numbers to make two results is much faster in hardware than adding 2 numbers to make one result."

I initially typed a further explanation of "no carry chain is necessary, so each addition becomes constant time", but decided for most readers here, they either wouldn't be hardware experts and wouldn't see why a carry chain was relevant, or would be hardware experts in which case it's already obvious, since full adders are used in loads of things wired like this.

Thankyou for expanding in a lot more detail though.
People will still most likely be stuck with the price of their care unless we get to the point that the CDC and the government at large are opening quarantine and treatment facilities of their own to deal with a true outbreak. Short of that most people will just wind up in the normal hospital and healthcare system which means they'd be paying for their own care.

It'd be a sad but ultimately useful twist if a big outbreak hitting the US pushed us to finally adopt a reasonable centralized healthcare system. I could see it happening but I could also just see a block of money being set aside to pay for peoples' care too.
It's a cold war thing. Czechia was part of the Eastern Bloc for 40 of the last 70 years. And is also situated in the east of Europe.

I don't really understand the controversy
I didn't mean to imply one way or the other, just wanted to point out that "competition between unions" isn't really a thing in Germany, so "that's why it works that well in Europe" is questionable. I don't know how it works in France or the UK, so Germany might be the total outlier, but it would be an outlier of 80m people.
It's not like we don't embellish and overbuild high priority state of the art facilities today.

A well back then may have been quite a proud and precious thing you point your best builders at, considering it was the life source for the area village/farms.
What’s a JWT?
Good point. I somehow assumed EC citizens would be exempt from such laws but that doesn't necessarily seem to be the case even now [1], and must have been very different before the 1992 Maastricht treaty indeed.

1. https://en.wikipedia.org/wiki/Citizenship_of_the_European_Un...
The United States has already been handling the few cases it has pretty aggressively, and following up with anyone who might have come into contact with each person. This feels like you're just jumping on the opportunity to say "US healthcare is bad, guys", which doesn't really make sense when comparing our handling of an outbreak (in which the CDC will mobilize and largely bypass the issues in our healthcare system to mitigate disaster) to India and Africa not having anywhere near the infrastructure to handle this.

People are still dying of swine flu in India, a decade later. There's really no comparison, no matter how much you may dislike the US healthcare situation
1) So adding no value to the company is the culture we want to encourage. Then salaries can go down as well.

3) The expectation finishes when you leave at 5pm every day. Don't worry, you won't get fired.

4) Which is none of employees business.

...
So, first of all, most people aren't "top performers", so it would make sense for 75% of developers to want a Union under your reasoning.

Secondly, in my experience it isn't the "top performers" who end up with the highest pay, it's the people best at spouting bullshit and sounding convincing.
>If I don't like my job, I get another one.

Looks like someone doesn't own a home or have a family.

Or if you do, perhaps you have adequate savings where that's maybe not a big deal. Or maybe your spouse makes good money also to support for a while. But most people are not lucky enough to be in that situation.
You don't need to be hourly to unionize. Salaried employees can do that. The exclusion is based on meeting the definition of supervisor, not by the payroll category.
Secure PyPI downloads with signed repository metadata
I believe at least doubly so (in addition to postscript you can embed JavaScript)
>As someone who works in finance/banking, I can assure you that this is not uncommon. Almost everyone is engaging in not-so-best practices with

Are there any standards that doing this violates, and if so do banks have a person in the org (or external to the org) that violations of said standard can report to?

> We are talking about password security in a system domain where there are arguably far more valuable assets to secure.

My worry is that because this is such a simple thing, if we allow ourselves to not do the best practice, where does it end? Especially since large organizations have many parts that don't communicate.

I agree we should think critically about risk, but I've also met lots of people who seem to backdate their logic - first they decide it's too onerous/costly to do a thing, then game out a reasonable enough reason why.

The problem with the latter is eventually your focus on compliance and handwaving will bite you hard, and you may not get a chance to be reactive because the breach will be so bad.
That is part of the reason but another part are the system's incentives, people are incentivized to keep their code private because it is a source of funding for them.
There have been a number of players in this area throughout the years (Galileo [RIP], Runscope [semi-RIP], Newrelic just to mention a few) for the analytical part ... and countless more for the proxying part (Kong, Envoy, Tyk, etc)

Can you elaborate a little bit more where you place yourself in the market? Why should someone trust you over any of the bigger, older and more stable competitors?
Thanks
What's wrong with them being in the database? Analysts and project managers can then re-arrange things with fewer coding changes, using CRUD editing screens. One may have to re-project some URL's for the end-user's sake, but that's doable. "Pretty" URL's are not that useful for CRUD anyhow, but since customers expect them (because everyone else has them), they can be managed as an aesthetic wrapper.

I should note I'm a fan of the CASE idea of the 90's. It was just that the products were proprietary and too expensive. 90% of most CRUD apps can be attribute-driven. Menus, navigation, page titles, field attributes, etc. can largely be stored as meta-data in RDBMS where they are readily change-able and query-able. Buried in code makes them harder to work with. Over-focus on OOP killed the CASE dream, but I suspect it will come back. RDBMS are good at storing and managing masses of related attributes, code just isn't. (Dynamic Relational would help with attributes that are different or custom per UI widget etc. I wish it would take off.)
Up Close and Personal with Bert – Google’s Epoch-Making Language Model
Really? I’ve never experienced my credit or debit card not working (except in America where my Canadian debut card often will just not work)
A huge amount of not-really-spam goes to my Gmail spam folder. It's mostly email I at least implicitly agreed to receive by dint of attending a webinar, downloading a report, getting scanned at a conference, or even explicitly signing for a newsletter at some point.

I know some people would rather none of this email existed, but it does and it's how, in the real world, it's part of how customers are acquired and kept. The legit mail of this type all has obvious unsubscribe links but I'm sure a lot of people just flag it as spam instead and, over some threshold, it starts to go to others' spam folders too.
Is there anything Bezos could do at this point that would NOT make you angry?
You haven't explained why.
MVC: Model View Controller

https://en.wikipedia.org/wiki/Model–view–controller
I like ECS when designing certain kinds of systems but I'm not sure how relevant it is here. I'm also not sure it would be particularly useful for your average webapp.
No you didn't. But I impled UI design doesn't matter when the important stuff like security isn't there.

But hey, if feeling slick with your polished app and having nothing to hide is your thing, good for you.
> There is a very simple solution to Facebook - demand that they offer compatibility through an API so that other products can offer News Feed products that are seamlessly integrated with the FB Friends.

Allowing tons of third parties to access all your data. That’s for sure going to solve all the problems (and Facebook had same idea few years ago, that brought you Cambridge Analytica scandal)