skysight-inc/HackerNews huggingface dataset:
This goes against the anti-union propaganda, though. I'm sure if we unionize, some mafioso from "corporate" will come down to my home office 8 US states away to plug in my monitor before I'm allowed to work.

/sarcasm

What an absolute joke of a discussion. Rather than discussion how actual professional unions operate in our fields, instead we're talking about punch-clocks and strict schedules (which I had plenty of in non-union shops) and over-bureaucratic corporates.
No, it will look nothing like those. The industries have virtually nothing in common.
To me it comes down to one simple question... do you want other parties reading the messages you send to your family and friends? If not, use Signal and encourage them to as well.
The "Seven Up" series. https://en.wikipedia.org/wiki/Up_(film_series)

From WP: Roger Ebert said that it is "an inspired, even noble, use of the film medium", that the films "penetrate to the central mystery of life", and that the series is among his top ten films of all time.
The comment doesn't quite make sense, but I think what it's trying to get at is that in order to compare the different measurements of H0, you have to assume a physical model.

You can calculate the rate of expansion of the Universe in our vicinity using Type-Ia supernovae. One calls that a "local" measurement of H0. One can also do various measurements of the Cosmic Microwave Background (CMB), and using the standard model of cosmology (Lambda CDM, meaning a theory with a cosmological constant and cold dark matter), predict what H0 should be. In order to connect the local and CMB measurements, in other words, you need a theory of cosmology. If the local and CMB measurements don't match, then there are basically two possibilities:

1. There are systematic errors in the measurements. We just have to figure out who made a mistake in their measurements. (I think most people believe this to be what's happening).

2. We need to modify the theory, Lambda CDM, by adding in new types of matter (such as sterile neutrinos) or modifying the theory of gravity in some way (this is very difficult to do without violating other experimental results).
So a digital perfect information game. It's pretty well-accepted that this is a great use case for RL. The question is how much broader the scope is.
Ask HN: What is your customer acquisition cost?
A startups customer acquisition cost, basically how much it costs to get a new customer, is one of the most important parameters that should be followed closely.

So the question is: What is your customer acquisition cost, what does your product cost, and what business are you in?
What are the implications? Higher perf and/or lower price?
This has been the case for a while. For lack of a better term, I call it the Word Press Effect, where a less-technical person can put together a functional PoC that makes money.

Eventually, they hit the limits of their technical skills and they need to hire talent to expand their business. This is good for programmers, IMHO, because companies seem to be much more willing to pay when they have a business entirely dependent upon some software. It's still totally possible to make a good living consulting on WordPress sites.
Facebook Open-Sources HiPlot, Python Library for Machine Learning Visualizations
Firecracker: Lightweight Virtualization for Serverless Applications
HTTPS certs provide extraordinary limited security in any case, there is no need to single out lets encrypt.

If you can receive a http request destined to the target domain (e.g. via MITM near the real target, DNS hijacking, or route hijacking, or MITM near a CA) then you can get a cert issued for that domain by pretty much any popular CA.

With security so limited what would be the purpose of compromising lets encrypt?
No. Where did i say that?

Has it ever crossed your mind, that medical people have a simliar distribution than every other field? Do you think every software developer is an expert?

Do you think everyone who is painting, paints equally well?

Do you think just because someone studied, that person is smart?
All Chrome extensions require trust. That should factor into your decision to install any of them.

This is no more risky than any other extension whose permissions include `https://mail.google.com/`. Anecdotally, that probably includes most extensions seeing as how most of the ones I come across request `<all_urls>` whether or not they need it (not that that's okay).

In any case it's open source, so you can download it, audit the code, and install it locally to prevent auto-updating.
sarcasmatwork -

Ian from FreePN again. Does your work use OpenDNS or similar? We recently acquired the domain (freepn.com) via secondary market, so have been slowly working our way through some domain blocking issues (OpenDNS, Fortiguard, etc.)

For anyone this is an issue for, here's the main points of the article:

Why isn't Tor enough?

- Compromised Exit Nodes

- Compromised Guard Nodes

- Traffic Shaping

- Human Error / What you do while using Tor matters

- Increased use of Tor means increased exposure
That didn't really work all that well for cigarettes.
I am pro European style unions where membership is optional, but anti American style unions where you have to leave your job if you don't like the union.

(I live in Europe)
Honestly 30 sounds young. Cobol is alive and well in these companies
Those were my initial feelings as well. I guess the issue comes down to focusing on software development as a skill and having that skill rewarded in manner you can count on. Our industry is really similar to actors. They have SAG and their guild negotiates with the MPAA. So every studio needs to belong to MPAA. Every year they negotiate the daily/weekly minimum rates for actors with SAG. They are pretty flexible with different rates for indy films vs big budget films.
It's not so hard to imagine a software developers guild where they negotiate for a daily/weekly minimum for developers, dba's, qa's, devops, and such...

https://www.sagaftra.org/production-center/contract/810/rate....

If you are celebrity equivalent of a developer, then you can get paid more. There are no real restrictions. You don't see famous actors getting paid below the daily minimum. When they work for a big budget film they typically get x multiple times the daily rate. Also, if they want to work on an indy film they can agree to those minimum daily rates as well.

I think its flexible enough so if you want to work for a nonprofit you can just accept the daily/weekly minimum vs asking full price if you work for FAANG.

I don't think it's a crazy amount of protections but it sets aside a basic set of standards you can expect from job to job.

If your are making over 120k they suggest actors create a loan out corporation at that point...

https://firemark.com/2015/01/12/should-you-have-a-loan-out-c....

Can you imagine all the FAANG companies having to setup a Software Industry Association to negotiate with a Software Developers Guild every year? It seems plausible. It's probably in their best interest as well. These companies could just dump any social issues on to the union and just focus on making profits. The ability to lock out competitors might force other big software dev employers to join the association as well.
I'm talking about education in a much bigger scope. Not referring to the Kickstarter situation at all; Tech education is not enough. I'm talking about political, social, emotional, economical etc, education; This level of education is a life long pursue. Schools are not enough. Internet is not enough;
It might behoove you to not make baseless assumptions about other people's knowledge.
I don't know how you can fail to see how an organised and unified workforce will always benefit all workers in a firm. Pitting 'top performers' against the rest, scaremongering about 'lazy workers' etc. just divides the workforce and allows management/owners to exploit/underpay workers as a whole. The company would not be able to function/make as good a profit as it does without ALL workers contributing. If a worker truly is lazy/not pulling their weight, they get fired. A union doesn't stop that. A union is a unified voice for workers that can demand rightfully, better working conditions, better pay, better benefits.

This fiction that somehow tech workers should avoid unions because their pay is so well is utter corporate propaganda. The money won't always be this good people, especially as more and more are told to enter the industry. I know HackerNews is an entrepreneurial haven but it's funny to me how people here, with all their technical wisdom, are so blind to any benefits to workers and aversion to anything seen as 'socialist'.
> As someone who works in finance/banking, I can assure you that this is not uncommon.

And so, each time, you've reported them to this US-CERT thing the (current) top comment mentions so that proper steps can be taken, riiiiight?

If you know about this and do nothing that's also part of the problem.
Countless reasons why.

Low job supply in your area and inability to move due to family and other responsibilities tying you down or too busy taking care of your kids to have time to interview and study leetcode or too little time spent on a gig getting you labeled as a job hopper or as a problematic employee by other companies if you don't have enough experience backing you up.

I feel you have no idea how complex people's lives can be.
There is Code_Saturne for CFD too.
Now what are operations then? And how are they tied to events.

Let us assume a concrete architecture where views are html documents and events are put into some distributed queue. Is an operation a process that consumes events from that queue or is it something more tangible? Are operations data? In other words, are they interpreted? By what interpreter?

I think the idea of describing your business system as some giant, distributed, parallel DSL interpreter has some merits. But has it ever been implemented as such somewhere?
JWT - because you were told sessions and cookies aren't cool anymore.

Then you come to realize that JWT is basically pointless except for doing MFA (which you could probably have done with a random token).
The Czech Republic is usually considered to be in Central Europe. As an aside, it's Eastern-most border reaches about 18.8 longitude, Italy's Eastern-most mainland border reaches about 18.5.
It gives workers a way out of their job. With a union, Kickstarter will be less likely to compete with similar companies that come out of China or anywhere else who realizes that a free market provides better outcomes for the majority of constituents.
I was an engineer, served in the military, and programming is now a hobby.

Not all diplomats are political science or economics majors. Policy touches so many sectors that it's useful to have people with backgrounds in many areas.

It's not uncommon to have prior software engineers, teachers, etc in the foreign service.
The (original) article only mentioned one grievance, that Kickstarter removed a "punch nazis" project and the employees revolted. Honestly it sounds like they had it pretty good.
I'll start:

Customer acquition cost: roughly 15 us dollars

Product cost: 200 us dollars

Businnes: lifestyle and tourists
> I'd be hard-pressed to think of a way we could collectively be treated with any more contempt than we already are.

I'm guessing you've never worked a job in the retail, warehouse or food service industries :)
It is an SSO platform with authentication based on client side cryptography that enables end-to-end encryption for applications. It supports SAML clients like other SSO platforms.
Nanvault – smart CLI tool to encrypt/decrypt files in the Ansible Vault format
There if for example https://github.com/NanoComp/meep
Whew, My first thought was import the thing to database, use database engine to sort.
Nrby: Location Intelligence Made Actionable
AFAIK it's a cultural / historical delineation, not a geometrical one. Kind of like how the "US Midwest" is actually mostly in the eastern third of the contiguous states. AFAICT the boundary is roughly the eastern border of the Holy Roman Empire.
I didn't say Telegram was perfect (nor did I even mention it), but at least the desktop client uses a sane gui framework (Qt).
Not sure what exactly OP is referring to, but this bug has plagued Signal for quite some time in that it doesn't handle Signal to non-Signal group messages gracefully:

https://github.com/signalapp/Signal-Android/issues/8571

The bug is my only real complaint with Signal's group messaging system.

EDIT: I should note that the bug was opened in January of 2019 (although existed for much longer than that) and as of December 2019 it was still in ongoing problem for some users.
Ohio's in the "Midwest" even though it's a solid 80% of the way to the East of the continental US. The Middle East is also quite far west in the context of Asia (or even in the context of Eurasia).

Geographic clustering is always slightly arbitrary, but in American parlance "Eastern Europe" and "Western Europe" are used dichotomously, and with the former usually corresponding to erstwhile Warsaw Pact members.
That exact same scenario happened to me but it wasn't at a union shop. Seems weird to blame this on unions in general. Dumb rules are dumb rules...
By "best" and "proven", you mean most popular way in the JS/TS world.
WHO daily sitreps provide very clear stats on transmission outside China. The latest one for Feb 17: https://www.who.int/docs/default-source/coronaviruse/situati...

Japan (excluding the cruise ship): 59 confirmed cases (6 new), 26 cases with travel history to China, 33 cases (6 new) without (what they call “with possible or confirmed transmission outside China”).
Commonly Used System Resilience Techniques Annotated with Resilience Function
Being easy to do does not mean that it should be expected or usual to do - and even then, if it wasn't easy to do for just a single person in the company, they now have another layer of protection against that. Not every employee lives in the same personal circumstance.
Thanks for the clarification, all of you. "Turdpress" gave me a chuckle. That said, honestly would like to know so I can explore this further, are there any resources or guides you could recommend that lay out how to build a secure and straightforward static site in this way? For someone who isn't a developer by profession.
I suppose it would be trivial for them to issue compromised certificates or record the private key in a targetted attack for a specific domain without anyone noticing.
Wine vs. Weed in Napa Valley – Politico
And what utility did it provide while it was in production for the effort that was put into it? We had a nasty nasty 3k line Perl script “in production” at a former client for like 10 years. It was written in a couple of weeks by another outside vendor and did it’s job well enough. It had basically zero abstractions. Minimal dependencies. Did one thing and was well commented on intent. The investment vs utility made it last a long time. Yee, rewriting a decade later with minimal Perl knowledge wasn’t fun but the business rules had also evolved so we really used it as reference docs and did just fine
Previous discussion from May 16, 2017: https://news.ycombinator.com/item?id=14347648
Great, what does that have to do with the tech industry

And please take inflammatory terms like “bootlicker” to your antifa meetup. We are adults.
Looks interesting, when is this coming out?
Previous discussion: https://news.ycombinator.com/item?id=4189811
From my work at a major consulting company the way to fix this is to rebuild the offices over ~150miles away (the exact miles is NY law). Rehire all the positions and then let go of the employees in NY.
What does fucking word has to do with latex my nigger? Best of two separate worlds? Jesus fuck man. Hope your fucking docx es burn in hell. Fucking degenerate my man. All respects though.
Programming is now a hobby and I still do some open source stuff and push out various side projects for fun.

Eventually I'll have to retire and so I always hope some of my side projects will take off to supplement my retirement income.
Show HN: Lunched, an app that makes it easy to have lunch with your teammates
I would not be surprised if there is some low level effort amongst some of the larger companies in silicon valley.... especially after the whole issue of not bidding up talent or stealing talent from each other...
In my opinion RuboCop is too strict. Every code standard analyzer takes some tweaking to get it set up for a particular project and team standards, but RuboCop needs changing of a ton of rules to make it even usable in a reasonable fashion.

I love it because it brings some order to a meta-everything world, but it'd be nice if it came with a reasonable set of rules by default
No reasonable person would ever use DNSSEC to protect end-user PGP keys; that design would be incompetent on its face.

Don’t get it twisted.

Nobody suggested protecting end-user PGP keys with DNSSEC.

Because DNSSEC ensures the integrity of DNS records, a user that publishes their public key in the DNS using a CERT or PKA record (both defined in RFC 4398) or uses an OPENPGPKEY record as defined in RFC 7929, can be sure anyone who uses a DNSSEC-aware resolver (Google's 8.8.8.8, Cloudflare’s 1.1.1.1, Quad9’s 9.9.9.9) can confirm the integrity of these records.

Exporting public keys to be published in the DNS has been supported by GnuPG for at least 10 years.

Without DNSSEC, there’s no way to ensure the DNS records haven’t been tampered with. That seems particularly important for public keys.

RFC 4398: https://www.rfc-editor.org/info/rfc4398

RFC 7929: https://www.rfc-editor.org/info/rfc7929
> I note that the logo depicts macarons [1], rather than macaroons [2].

Partly (largely?) my fault. When we wrote the Macaroons paper, I was simply not aware that Americans use the French word when referring to the French variety of macaroons.

I think pedantry in auth should be celebrated.
It's usually better to put that information in the revision comments when you commit rather than in the code itself. Otherwise the code accumulates layers and layers of comments over years.
Hi there. Thanks for your attention, your kind comment, and your correction —we already fixed it.
Just looked it up and yeah, you’re right; it is possible to be totally uninsured. Fortunately, even worst case you’d only pay 3 times the insured cost and be able to deduct from taxes, so it’d still be cheaper than somewhere like the US.
> That insult to usability should have never been adopted by browsers

As a web developer, it's kind of funny seeing people exclaim "this feature should not exist" after seeing a few abuses of it, even though they probably benefit from it every day without realizing it. Overriding copying is needed for wysiwyg editors and selection blocking is needed for many kinds of drag&drop interfaces and also editors.

Instead of complaining that useful features exist because they can be misused, maybe complain about the misuse itself - maybe even to the people actually misusing them. Shoot them an email and they might actually do something about it. Most of these misuses hurt accessibility (screen readers, etc.), so if nothing else, they'll see it as a way to reach more customers.
Coronavirus Disease (Covid-19) Japan Tracker
It sounds like the problem was really about failing to document technical debt.

> Doing it properly doesn't take that much more time

If you don't have a cutting board for a small thing, surely you wouldn't put your cooking on hold to drive out to the kitchen supply shop to buy a cutting board. You'd just use a stack of cardboard or something. (And make a note to buy a proper cutting board later, of course.)
Seems like this is currently disabled in Firefox [1]. Do you have any sources for Safari or MS Edge?

[1] https://wiki.mozilla.org/PKI:CT
This assumes you want to build a personal relationship with your customer. Think high value customers. You would want to provide a concierge like service in that case vs making it anonymous and distant

It's a Twilio/Slack integration, but it's actually a fair amount of work to get the nuance right. We handle calls, text campaigns, etc. We're also looking into a web based shared inbox for teams not in Slack
Aye, I've dealt with Ford and Mazda dealerships that were utterly abysmal. Others were better. Hit or miss quality of dealerships and service centers is not a surprise and not a flaw of the brand per se.

"But Tesla is a luxury model that competes with Porsche and should make me feel fancy and be super nice etc etc" ...eh kinda, but not really, IMO. The S model does but future models are aimed at a more down-market segment and are going mainstream.
Wasn't there something similar in Brazil few years ago ?
Yes, this property (CAs are capable of creating and signing near-arbitrary certs) is inherent in the concept of Certificate Authorities in general, and the log doesn't automatically fix that because nothing can. But auditors regularly check served certificates against these logs and report unlogged certificates automatically. This can be verified in your browser with things like OCSP stapling.

You may find this useful: http://www.certificate-transparency.org/how-ct-works
Oh the faggot doesn't even use secure connections, fucking faggots my niggers.
Then that was the employees fault. They took the risk of moving to the middle of nowhere, (which for Kickstarter happens to be New York?), and are getting paid a bit less than industry average because of it. Is that a call to unionize? Absolutely not.
Where's my Coolest Cooler?
Conditional Language Generation with Bert
> Kickstarter has a so-so 3.6 on Glassdoor

Glassdoor's ratings are not terribly reliable. Here's something I wrote previously about my own experience with using it:

-----

I left a poor review for an employer only one time in the 10 years or so I've been on Glassdoor (there were only a couple other reviews). And almost immediately after, there were about 20 or 30 5 star reviews posted in a short amount of time. The company only had about that many employees, which proves that the CEO (or someone at the top) either told everyone to write a good review, or some of them were fake, both clearly 'incentivized' by any sane definition of the term. I reported this to Glassdoor and they refused to do anything about it, and I even had the report escalated and re-reviewed, without any effect.
I never said end-users should care that it's decentralized and open source. I am mentioning it because we're on HN, a tech-oriented website. The selling point of the fediverse is the governance model and sustainability, and the way these qualities are missing from Twitter/Facebook/&co has been in the mainstream consciousness for a few years already. Also the grandparents comment is nonsense. How many people's grandparents are on Snapchat or TikTok? How many people's grandparents are on Instagram? It's a completely arbitrary demographic goal post.
1 week. 11,869 articles unlocked
The beta is live! We'll do a full rollout in the next week or two. Sign up for early access :)
> From the mind of a top performer

Unfortunately, we also know that tech has a big age discrimination problem, for example. Unions are one of the tools to combat that.
This, plus in the USA you can't quit your current job without another one lined up, because your access to healthcare is dependent on employer-sponsored health insurance. Especially if you already made enough money for the year that you don't qualify for a program like Medicaid or state-sponsored subsidies.
I tend to just implement minimal JWT myself... auth server issues token, all services expect an authentication-bearer header with one. Also, pinning the algorithm and allowed keys is absolutely important.

I'm also not a fan of "sessions" other than at the client, they tend to fail at scale.
I work in a gym, where lots of people take video of themselves doing exercises (for instagram, or form checks), despite the gym's policy for privacy reasons (other members in the background).

There's an immediate need for an app that will remove the background of people for privacy purposes.