skysight-inc/HackerNews huggingface dataset:
Hi everyone,

I just want to share burnout-barometer, a simple open-source tool that I use to track my mood throughout the day. You can find the link here: https://github.com/ljvmiranda921/burnout-barometer

It also fetches the latest tweets from tinycarebot, and gives some random encouragement through the week!

To be honest, it's still a work-in-progress, but I've been dogfooding it for the past few weeks and it has helped me be mindful a lot. Hope you find some interest in this work!

Let me know if you have any questions!
https://imgur.com/KX9IJEV.png
i’m afraid i don’t have a lot of insight into the workings of spammers, but if you have at&t they offer a free app that uses crowdsourced blacklists to block then:

https://www.att.com/support/article/wireless/KM1147710

it has cut out about 2/3 of my spam calls (i don’t get many texts)
What is a worthwhile replacement to DNS? We don't have one. That's part of the problem: differences of opinion.

Try HTTP/HTTPS: we have separate ports, browser preferences, and lots of unified messaging deprecating HTTP.

Suppose we reuse the same format (name@dom). What would a migration plan look like?

Early stages:
- DNS record indicating support.
- Separate ports.
- Reduced spam (because nobody is using it).
- No warning messages.

Mid stage:
- Lots of dual-stack systems.
- Something like HSTS and preloading.
- Warning indicating insecure delivery (the client can detect this).
- Buy-in from most large corps (Gmail...)

Late stages:
- Old, insecure port goes away almost entirely.
- Revisions to spec, improvements.

We're still at the tail end of this for HTTPS, and we're building on top of a well-known, supported encryption protocol (TLS, which gets reused elsewhere).

The point is, if Gmail doesn't buy in, you've not made meaningful progress, because they have billions of users alone. And unless they move, most large corps/... won't also move.

That's, in my opinion, why Signal and stuff (while nice, secure, ....), won't replace email.

So how do we get there?

First we need a security protocol with the constraints outlined in the post.
- Forward secrecy,
- Handles key rotations,
- Notifies of device changes potentially.
- ...

That's going to take time to design, develop, and standardize. Whether we tie the messaging protocol and format (SMTP/...) tightly to the security protocol (TLS) remains to be seen. It takes time for formal verification too.

Then we need Gmail support. If it is a closed, non-standard protocol (like Signal), it won't be adopted. The RFC process is the only process I know that can influence those types of changes.

And yeah, now? It won't be secure. But we'll have a path from getting to "mostly plaintext" to "mostly secure". And we'll have to live with the fact that it takes time.

If you're not reusing the same address scheme, then yeah. You would have to educate a lot of people about the difference. But if you push that onto the developers, I think that's better. And you can make it mostly transparent to the end user, except at critical times.
This reminds of the rose colored Internet of the past.
Could you describe what you find unpleasant about it? I'm not the biggest Gaiman fan but that's not the criticism I associate with him.
A simple yet powerful alternative to yeoman and cookiecutter
Five ways your academic research skills transfer to industry
PoE is popular because electricians are expensive. That said I think there is a lot of potential to use the newer higher power PoE standards or similar for smart houses. The newer standard go up to 100W.

One thing about efficiency is low voltage DC/DC converters are always fighting for efficiency. It's much less of a problem for higher voltage DC/DC's. This is due to fixed voltage drops and I squared R losses.
Democratizing data, thinking backwards and setting North Star goalS
Unity and WebGL is pretty common now days. You'll find a good chunk of the games at https://itch.io/games/html5 use exactly that.
I think your review isn't that far off. But looking at your other comments you kind of mix requirements all over. For example your beef with WhatsApp is Facebook owns the metadata, but when someone says Wire you say it's too hard to self host. But somehow SMS is fine.

I think you need to separate them by requirements. But anyway for all purposes Moxy and tptacek keep touting Wire is way better.

- It's not tired to a phone number, but can be if you want to. Meaning finding connections is just as easy.

- it uses signals encryption

- it's message delivery is better than signals

- It's UI and UX is a million times better than signals. I let my mom use it years ago already. And you looking pretty actually matters to a lot of people.

- The Desktop messaging usecase is properly addressed even for a business setting. Signal feels like a crappy SMS client for desktop on desktop

I have no idea why these two people write the things the way they do, but unfortunately its looking less like a let's get people to use the best solutions and more like smear pieces for everything that is not signal. It's really too bad.

BTW signal as a messaging client when you frequently switch countries is such a horrible citizen on my phone and judging from peoples issues I'm not the only one who has that problem.

- If you have multiple sim cards god knows what you cannot just reply to messages since it will just send from the wrong one.

- If you're in an country with a sim that doesn't send the country code with system messages and it differs from your signal number the country will be detected wrong. Replying might cost you. Everytime I upgrade signal I kinda hope it's fixed, but they might as well just put a wontfix label on it.
I felt the same was last year before I had ever deployed a server publicly. It's really not that bad for small things. I run Nginx and some docker containers and proxy to those docker containers for certain subdomains. Now that I know how to do it, I moved from AWS to DO and the new setup was probably 20-30min to get everything set up, including Let's Encrypt.
i use this one alot, it has various decryption tools and you can apply "recipes" : https://gchq.github.io/CyberChef/#recipe=From_Hex('Auto')&in...
Artificial intelligence makes a splash in efforts to protect Alaska’s ice seals
" I get somewhere between 2% and 5% back on virtually everything I buy."

This is more a function of the extreme power that VISA etc. have over the transactions. They are locked into their fees and make it impossible to do things like 'pay this other way and save 2% etc.' i.e. trying to do anything to obfuscate to the consumer that they are in fact responsible for 3% of every purchase you make.

So various entities find ways around those controls by giving you money back in another direction.

Basically, there's immense 'market pressure' on those 3% fees, but the oligarchy has control over it, so those fees will nature be eaten away by any and all other angles.

If there was no oligarchy, those '2% back' programs would be less likely to happen and what we would see is material margin erosion for such fees.
Black Hole Perturbation Toolkit
I know this is more relevant for movies, but it would be rather cool to have a movie compressed for a year of computation, and deliverable in about 100MB, then let it decompress for a few hours on your computer back to its original 9GB size.
I have one really annoying complaint with stripe connect. Its authentication work flow using oauth is conflicting with aws amplify authentication for social providers. Both of these are pretty much essential nowadays. I hope someone picks up on this comment and considers finding a solution
It's actually quite common. The typical series of events is something like:

- criminal steals someone's SSN

- criminal uses that SSN to steal an identity

- the SSN owner notices their identity has been stolen and reports it to authorities

- the authorities investigate and are able to trace it back to where it was stolen from (and sometimes even who stole it)

- the authorities notify the company that was breached.

It's more common with larger breaches with more stolen SSNs (and thus more people reporting that their SSN was stolen) because that catches the FBI's attention more readily and makes it easier to trace it back.
I'd guess a huge % of engineers don't know what MD5 is. It doesn't exactly come up that often outside of being "some random string that is on download pages now and then."

Heck I know what it is and I've only used it a few times outside of copy/pasting stuff w/o needing to think about the underlying details too much.
I think you made a good choice in picking renter's as your first policy offering. It's not complex, many people are required to have it (as a landlord, I certainly require it of my tenants), and you won't have a tough time getting some reinsurance for your policies.

How will you deal with aggregator sites? Will you allow scraping?

Best of luck.
Investment Firm Buys Taxi-Medallion Loan Portfolio
Some of the other comments in this very post [1][2][3] suggest that Stripe isn't being charged the full fee by other parts of the network.

If they're intent on working with the customer to keep prices down, they should only charge a fixed fee for refunds (to pay for overheads), and not the interchange fee.

[1] https://news.ycombinator.com/item?id=22371571

[2] https://news.ycombinator.com/item?id=22371746

[3] https://news.ycombinator.com/item?id=22371626
In theory, sure, but reality is a bit of a prisoner's dilemma.

Consider:

Person A is evading Taxes.

Person B is not evading taxes.

Government says 'Well, we aren't getting enough money', So they raise taxes on those who can't realistically evade. By a second order effect, Person A is causing Person B to get 'stolen from' twice instead of once.
I remember I checked Hinge API a few years ago and the exposed their users last name. Wonder if this has been fixed by now.
Back when AS/400s were AS/400s, I made a little tool to help the operators run a long process at night. I felt playful and left an easter egg: on Fridays the 13th, it would work as usual, but display a skull and bones with blinking red eyes while doing it.

It seems that Fridays the 13th are rarer than I estimated, because months later my boss woke me up at midnight because the operators had woken her up because it was the first time the egg was triggered. In hindsight, it was a foolish thing to add since this was a bank. Fortunately they took it with good humor, and even kept the easter egg to scare new people.

I suppose NASA is more formal than a bank, so they only let you fool around with the comments.
> You honestly can't fathom a situation where Assange would know for sure Russia wasn't involved?

I can certainly imagine situation s where Assange would know this, but Assange hasn't claimed that Russia wasn't involved, by his own claims even when a pardon that would erase the risk he has been fleeing desperately from for years was dangled in front of him as an incentive, so I think it's pretty clear that either that situation does not exist or he has an undisclosed reason to preserve the image that Russia may have been involved. The former seems to be the simplest explanation.

> knows they don't work for Russia (because the person already has high-level clearances/was rigorously vetted/etc.)

World powers have had highly placed agents in foreign governments and political parties, etc., with high-level clearances that require rigorous vetting numerous times in the past. So, no, the person being in such a position does not establish that they are not a Russian agent or that Russia was not involved in their actions.
There is no sane option but to pick the cheapest option. You go to the shop here and see 3 or 4 brands, and looking at the details they all seem identical. You choose your voltage, colour warmth, and if you want to pay a premium for the only brand name you recognize.
I don't see why you need special cases in the code. Sat nav units have had speed limits built in for years. Why not just look it up in a database? (the car knows where it is after all, and requiring a GPS fix could be mandatory - most drones won't arm without it, for example)
This is not a new policy change -- it's been our pricing for all new users since 2017. (The news is that we're now applying this pricing to Stripe's older users, in part as a response to some price increases that the card networks are making.)

A phrase that comes to mind is: two wrongs don't make a right.
Raw agricultural oils have a limited number of unsaturated chemical bonds between some of the atoms in their carbon chain structure.

These carbons are available for reaction with alkalies such as lye, which saponifiy each pair of target carbons by adding a molecule of water H_O_H. H_ to one carbon, _OH to the adjoining carbon.
The properties of the resulting material, soap, are not very similar to the original oil, it is quite water soluble by comparison, and capable of easily emulsifying regular oil & grease as expected for water rinsability.

If the raw oil is instead reacted with hydrogen gas, one _H goes to each reactive carbon and the molecule after that point is referred to as being saturated with hydrogen. That's why they call it hydrogenated vegetable oil. Things like Crisco which are solid at room temperature and able to cook at high heat because they are hydrogenated, even though the raw oil they are made from is light and does not even solidify under refrigeration.

The lye is not very reactive with vegetable oil that is already saturated (plain mineral oil is saturated naturally).

The heavier fractions or varieties of palm oils can be solids at various room temperatures, and under refigeration the heavier waxes from olive oil often separate from the lighter fractions readily. But both of these waxy fractions are solid naturally just because they have a higher melting point, there has been no hydrogenation and the raw solid oil when melted can be reacted with lye as fully as raw light fractions can.
Makes me have hope for the internet again. Thank you.
Ahhh understood.

I’m seeing various things, but the consensus seems to be that the payment processor does get refunded the interchange fee.

https://www.quora.com/How-are-credit-card-processing-fees-ha...

So it would be fair if Stripe charged a small transaction fee for a refund but returned the bulk of the interchange fees.
> Some might argue that you should just use EF (or whatever language-specific ORM), but I prefer the level of control and the substantial performance boost you get with raw SQL and a simple migrator approach.

Agreed. I wrote a performance-oriented lightweight ORM on top of SQLite calls: https://github.com/zmj/sqlite-fast . Its focus is minimizing allocations - treating SQLite as something closer to an in-memory store than a network API.
It’s worse than nothing. People who know their message isn’t secure can adjust what they say accordingly.
I'm a self-driving skeptic, but this test is not fair.

It's also illegal to do this, so it's not a valid edge-case.
See his article "The Smalltalk Environment" in the August 1981 issue of Byte magazine: https://archive.org/details/byte-magazine-1981-08/mode/2up

The basic idea is that modes make the same action (pressing the "D" key, for example) do different things. They make things easier for programmers who want many operations on machines that only have a few possible actions, but they make things hard for the user who have to pay attention to the current mode and know how to navigate from that to the mode where the desired operation is possible.
Depends.

The Micro-Orm I use in C# manages to work around this well enough; the only thing SQLite is really hard to work with is Time since there's no real structure defined for it.
This trend is awful for businesses. In October 2019, PayPal (which owns Braintree) also started to retain their 2.9% + $0.30 processing fee from refunded transactions. Stripe is now in the same class as PayPal.

https://www.theverge.com/2019/9/20/20876570/paypal-refund-fe...

Square still refunds processing fees to merchants for refunded transactions. They have the same fee (2.9% + $0.30) for online transactions, and a lower fee (2.6% + $0.10) for in-person transactions with their card reader.

https://squareup.com/help/us/en/article/5060-refund-overview

https://squareup.com/us/en/pricing
Using key functions to sort data in Python
Great strategies depend on great inputs
I was a Sanders supporter in 2016 (and am in 2020); while the system was in many ways rigged in advance to favor Clinton over any rival, there is no sense in which it is accurate to say that it was “stolen from” Sanders. I know this is a narrative that the Fox/Trump camp likes to push to exacerbate divisions within the anti-Trump opposition, but it's not at all accurate.
Dylan was indeed created by a group at ATG Cambridge run by Ike Nassi
I'm not trying to be rude to you. I'll believe you that you worked there, worked on excel and maintain contact with people still htere and that people are "working on performance" and you can believe me that we just can't see the results of that work.

But yes, I'm a bit jaded. I think you'll understand why that is too. The vast fortune in revenue that doesn't fix bugs put me off excel in a big, big way. That was 2008 or so.

Here's Andrew Gelman in 2013 on the topic:

"Microsoft has lots of top researchers so it’s hard for me to understand how Excel can remain so crappy. I mean, sure, I understand in some general way that they have a large user base, it’s hard to maintain backward compatibility, there’s feature creep, and, besides all that, lots of people have different preferences in data analysis than I do. But still, it’s such a joke. Word has problems too, but I can see how these problems arise from its desirable features. The disaster that is Excel seems like more of a mystery."

https://statmodeling.stat.columbia.edu/2013/04/17/excel-bash...

We've heard from microsoft so many times they have people working on all those bugs too. I remember the sheer disappointment in testing the newly fixed rand() function after all the fanfare by filling a page with =rand(), conditionally formatting when negative to be red and seeing the page turn largely red after a couple of F9 re-calculates.

I simply don't believe that excel programmers are idiots and have been for 15 years.

That leaves "they say they're working on it but they are not, not really." At the top of my alternatives. Is there a better one you can suggest?

Enlighten me please, how does this epic cluster of fudge happen? You were probably there while it was ongoing.

Parts of excel work well, /all/ the stats should have been removed 15 years ago as unfit for purpose and zero will or ability or effectiveness in getting a fix and making good.

Excel, just don't. That is a pretty reasonable response, don't you think? Yeah it's sad. I don't relish it but let's not pretend it's all ok, yeah? But I guess the masses of revenue keep coming in so I guess it is all ok from microsoft's point of view. Are you ok with that yourself?
And Peter Montgomery.
"I’ve been into ‘80s/‘90s design for years, I can’t shake it, it’s just so full of fun and positivity."

80s music strikes me as this way. Even the breakup songs have this upbeat vive.
Sure! But a screenshot is trivial to forge anyway, and even if you block PrScrn, people can always taddle. The goal is to get the message safely to the recipient, not prevent the recipient from disclosing anything afterwards. (Non-repudiation is a common goal, but screenshots being easy to forge solves that.)
Isn't paypal's fees the exact same 2.9% + 30c?
Can we also stop pretending Signal was some genius stroke that happened in a vacuum? With all due respect to Moxie signal was born out of years of experience with OTR and SCIMP for XMPP and the need for asynchronous key exchanges in chat systems.
I don't think many crawlers will be downloading fonts though?
I find the commercial top-n lists not useful.

top fantasy: #1 urban vampires #2 harry potter

top scifi: #1 star wars book #2 star trek book

recommended for you: author(s) you bought before
> I'm not a fan of bootcamps because I think a lot of them are more focused on making money than actually helping people

This idea doesn't pass a common sense test to me - I'm sure bootcamps can be profitable, but the people running them are used to building things that scale. Bootcamps definitely don't scale. If these tech people were looking to get-rich-quick they surely wouldn't be running a school, of all things, even a profitable one.
The oil and gas developers I worked with who were some of the most incompetent people I've ever known had fancy masters degrees (at a minimum) in computer science.
I want more of this kind of internet.
Love your work!
The article comes on so strong that many will be inclined not to believe it.

One point. The encrypted systems are many and not inter-operable. That's a problem for me and many others.
Eric Schmidt was, as I recall (which was when I was there), at PARC proper, doing his PhD thesis research and writing his thesis. But as Larry Tesler's interaction showed, there were fluid interactions between at least some people at PARC and the XBS and Xerox Star teams.
If you know you want to email alice@example.dk and if you trust DNSSEC, then fetching the public key for alice@example.dk from the DNS should be at least as secure as visiting https://example.dk in your browser.

(If you don't trust that Alice's email address is alice@example.dk then you shouldn't send an email for her to that address regardless of MitM attacks.)
He really doesn't like LARPers.
Trump offered Assange a pardon if he denied Russia gave him emails, lawyer says
I'm surprised no one has mentioned Delta Chat yet. It solves some of the problems, as it's based on email but adds automatic encryption. See https://delta.chat/ and https://autocrypt.org/

For me this is a good compromise and a great alternative to messengers like Whatsapp and Telegram. This is a first step towards decentralization while relying on the existing email infrastructure.
I really want to use Signal but having a centralized server and requiring my phone number turn me off. I'd love to be able to self-build the iOS [0] and desktop [1] apps, and self-host the server [2]. Has anyone tried any of that, are any of them even possible?

[0]: https://github.com/signalapp/Signal-iOS

[1]: https://github.com/signalapp/Signal-Desktop

[2]: https://github.com/signalapp/Signal-Server
Sources:

1. Doug Ford says his support for Trump is "unwavering": https://toronto.citynews.ca/video/2016/10/13/video-doug-ford...

2. Meet Doug Ford, the Canadian conservative candidate being compared to President Trump: https://www.theguardian.com/world/video/2018/apr/30/meet-dou...

3. Canada's Trump moment? Doug Ford rises in conservative party: https://www.theguardian.com/world/2018/apr/30/doug-ford-onta...

4. Every single similarity between Doug Ford and Donald Trump: https://north99.org/2018/06/05/every-single-similarity-betwe...
Why do I feel like I've read this headline a bunch of times before?
Thanks!

I think (correct me if I'm wrong) you're asking about comparison sites - in those cases the law requires them to establish an agency relationship. We're open to it and think we'll compete well, but much like Southwest it would be hard to give better prices anywhere else than our own site.
Right on.

Similarly, people often conflate something morally good with something morally bad and ask/argue ”If I mix the two is it overall good or bad?". Which similarly doesn’t matter.

The good should never be conflated with the bad. Otherwise, the good will just be used for rationalizing the bad...

(That’s not to say morality is not somewhat ambiguous. I just often see people trying to justify immoral behavior by doing this)
Doesnt sqlite fail fast when many users commit at once?
I am not American, I have traveled and I don't agree with you.
You're thinking about lead in crystal, not uranium in glass.
Lol. “Should be pardoned.” I’m not sure you’re getting it.