skysight-inc/HackerNews huggingface dataset:
People like tangible, easily understood, and (typically) one-dimensional metrics for assessing product quality. Look at: Mega-pixels for cameras back in the day, and sheet thread-count. Neither of those things is telling the whole story nor are they even directly related to quality. But people latch on to them because they’re a single number, and easy to compare.

No one understands what’s actually inside a car and what physically distinguishes a good car from a bad one, so they latch onto the one parameter they can actually see and touch and understand: body panel alignment and paint quality.
On a related note I've found docker for windows so buggy at times.
New AMD EPYC-based Compute Engine family, now in beta
Ask HN: Is Let's Encrypt the new swiss crypto ag?
Just wondering ... it does seem less far-fetched in the light of the swiss crypto ag revelations.
I know that PHP gets a lot of flak but come on. Compared to javascript PHP is a marvel. I recommend you to try it.
A friend of mine wrote a newsletter on this topic last year - banks are full of anti-patterns!

https://whyisthisinteresting.substack.com/p/why-is-this-inte...
I think that the old guard of open-source greybeards were generally a lot less responsive to public feedback, and more apt to tell people that were being obnoxious to go pleasure themselves, rather than pivoting into PR mode and trying to placate.
I guess switch/case support is in order.
While I don't know what baseline you're comparing it to, 12% does not seem like a high open rate.

In my experience, cold sales emails should hover around 20-30%, so opted-in lists should at least perform on par with that.

Exceptional newsletters like The Hustle average ~50% opens (with over one million subscribers).

Also, you have to be careful with your image to text ratio.

Excessive images are often not helpful for deliverability as spammers have historically tried to embed images with spam text (where it's more difficult for the ESP to parse) versus actually including it as body text.
> There is no way to shift liability from the club to an individual member who made a post under the model you’re describing. Liability would be for the site owner i.e. the whole club.

If they only let rich people into the club it might work. The club could require members to agree to contracts that require the member to indemnify the club for any costs and damages associated with any lawsuits against the club over that member's posts.

Technically, that doesn't really shift liability to the member but if the member is going to pay the club's damages and the club's legal costs it's almost as good. That only works if the member can actually pay, hence the "only let rich people" in part.
TransUnion does plaintext passwords.

Found that out when I typed in a (example) 25 character password, but at some point the field was truncated down and I somehow figured out that if I backspace IIRC 4 characters away, my saved password worked.

-_-
Are you sure you mean "parody"?

> an imitation of the style of a particular writer, artist, or genre with deliberate exaggeration for comic effect.

These seem pretty faithful, and useful since Go lacks many 'batteries included' we take for granted in other languages
Thanks for commenting the code. WTF sarcasm
As as a hardcore Perler and JS eng of 20 years - yes, Perl or Python would've been the best tool for the job. Perl in particular due to its regex readability.
I actually interviewed at a company recently that brought in an Exec because the company had no direction and the founders were too inexperienced. (This is what the exec told me) It was really interesting to hear his perspective on the company and what needed to be done, compared to what others said during the interview.

But from that experience one person will have a lot of trouble guiding a company if the other execs are not on board with what they are trying to do. I was going to join the company but was really worried about the inexperience of the other team members, but I really liked the guy that the VCs brought in.
HQ Trivia no longer shutting down
What happens to our online lives after we die?
Can it go one meme-step further and automate our jobs away? ;)
When Kaminsky's vulnerability was published it was mitigated by randomized ports almost immediately, and Dan Bernstein's DNS server --- which always randomized --- wasn't susceptible. In fact, Kaminsky's vulnerability is derivative (not to take anything away from it; it's authentically clever) of a line of cache poisoning vulnerabilities from 1997 --- that is to say, we had a dry run for it in the 1990s. Bernstein's response to the 1997 vulnerabilities was to fix his server; Vixie's response was to say "DNSSEC will fix this" and do nothing. A decade later and we saw which approach was correct: in a sense, DNSSEC caused the Kaminsky vulnerability.

You can't use DNSSEC to "catch Uncle Sam in the act", because "Uncle Sam" has de jure control over the domain names you care about. What's worse, Certificate Transparency actually has caught misissuing CAs, and the consequences for those CAs has been lethal: Chrome and Mozilla put the largest commercial CA on the Internet out of business over misissuance. When CA's misbehave, we can revoke them. We can't do that with DNSSEC: when .COM misbehaves --- and it will, we know, because it already has --- we remain stuck with it. The DNS is absolutely not trustworthy enough to store keys.
Blows my mind how many people ignore this problem when they demand more regulations.
Why? The compliance requirements don't require hashing (iirc, "commercially reasonable" protection is/was the standard), so you should assume that any other bank is doing the same thing, as they probably are.

All that is needed to steal your money is the bank account number, which you probably have mailed out or otherwise provided to numerous random third parties, who process them with other third parties. There's almost no information in there that isn't already available to anyone who cares to look.

A more reasonable approach that actually impacts your security would be:

- Opt-out of electronic communication and get paper statements and account notifications. (This ensures that you receive notice, in the mail, about changes of address and other changes)

- Opt-in to notifications about large transfers or low balances.

- Disable Bill Pay features at the bank.

- Disable external ACH transfers.

- Request wire transfer privileges, which with some banks allows you to get a physical token to secure access to your account.

- Use a dedicated PC/iPad/Chromebook/etc for your banking to reduce the risk of malware capturing your banking details.

If you're going to switch banks over this, look for a credit union small enough that they use an off the shelf banking solution, and figure out what the default configuration of the solution is.
> you're just describing a session cookie with some signed metadata.

Isn't that JWT?
> to understand what the needs where (we don't use telemetry/spying) And it took a lot of time...

Don’t worry, good design work takes time by very definition. Telemetry/spying does not magically fix that, and instead tends to lead to worse designs because people miss the forest for the trees.

Would love to see the work!
It seems like you're doing many things right.

One over-looked trick: "warm up" the inbox you send from.

I.e. start sending mail at ever-increasing volumes until you've reached the max capacity you need to send at.

If you Google "Sendgrid Warm Up Schedule", there should be a PDF with a send schedule you can copy.
Any tool for this MUST be self hosted.
was this evolution.ai?
Take the inverse and use fractional hours per penny.

Edit: And sum your (optionally price-weighted) time first.
Multiple configurations are a maintenance burden. So, all else being equal, it's better not to have them. That said, not all else is equal, and configurability can indeed increase the user experience. But if your defaults are so good that very few people take advantage of the settings, you're better off dropping them.
Is this yours? How much time did you spend on it?
When the ribbons first came out, all the techies I knew groused about them with all the technical reasons that people have mentioned here (which I feel are mostly weak arguments and reek of resistance to change). I wasn’t sure myself.

Until I saw some non-IT people using them for the first time. They LOVED them. They could easily see and get things done way better than before. The people who didn’t have the confidence to poke around in traditional menus had no problem looking through the ribbons and trying things out. In many cases they started doing things that they had no idea existed. The ribbons really opened up these tools for the users, which is really the whole point.

In the case of the ribbons, the techies who rail against them are unequivocally wrong. The arguments against them are the same ones we heard when going from DOS to Windows. It completely loses sight of the point of IT, which is to allow the users to be productive (and no, just because it broke some muscle memory you had, that is not an argument that it broke productivity, that’s an argument that you don’t like change), not to force people to remember random incantations because the greybeard says is “the right way” to do it.
The 4 methods I use to find outside IR35 contracts
Do you trust science? These five factors play a big role
https://news.ycombinator.com/item?id=22248456
C++: move, even more simply
It's a low-grade wisp of noise, not a real comment.
Oh I was referring to the new communication channels such as Slack and Discord. They are not publicly searchable whatsoever.
Agile at Scale
> Spheres can also wind up being more finnicky with precision but are rarely used as primitives to trace against in production renderers.

I've never heard this before! Interesting. Why is this?
Why is it here? :)
How to bypass iCloud lock iOS 13.3-13.3.1: Bypass iCloud 2020 Download
Sort of.

=begin HTML

=end HTML

Is pretty broadly supported for output formats that can support it.
The Canadian Revenue Agency website is down from 3am to 6am every single day for maintenance. They are also scheduled to be down for days at a time.

https://www.canada.ca/en/revenue-agency/services/e-services/...

This site is used for everything. Reviewing your taxes, reading mail and notifications you've received from the government, filing returns, making payments, etc.
It worked for Dota.
microsoft's documentation for anything other than .NET stuff is absurdly bad.

i was trying to do some work with their crm solution it took me a literal week to find out how to do simple oauth -- mostly because 99% of the documentation only had .NET examples using their own framework!
Render a timeline of your skills during your lifetime as a developer
> A lot of highly popular contemporary open-source tools are feature-rich. Foobar, Winamp and VLC are all full of stuff you won't need (but what this stuff is depends on you) and extendable.

I'm not sure if you're implying that Foobar and Winamp are open source. They aren't.
> That dynamic doesn’t reflect who we are as a company, how we interact, how we make decisions, or where we need to go. We believe that in many ways it would set us back, and that the us vs. them binary already has.

What a shameful statement.

Kickstarter has a so-so 3.6 on Glassdoor, and a sub-50% CEO approval rating. A lot of reviews talk about a secretive, insulated management group.

You don’t see companies with 4.5+ stars on Glassdoor unionizing.

So I’d have to ask their leadership: who made this an “us versus them” situation? Perhaps your local superstore sells handheld mirrors.

You don’t want your employees to unionize? Offer highly competitive salaries, benefits, and opportunities to grow. Treat employees like real people you care about and avoid turning the C-level suite into a force of secrecy, discrimination, and exclusion.
Oh wow! Thanks for sharing, I’ll probably join up.
Telegram's cryptography isn't comparable to Signal's. Telegram provides end-to-end encryption only for private messages between two people, and, last I checked, that encryption was disabled by default. There is no group end-to-end encryption; rather, Telegram claims that TLS hop-by-hop encryption --- in which Telegram's own servers get to see message plaintext --- is sufficient.

Signal provides true end-to-end encryption, for groups, by default, always-on, in a privacy-preserving design that ensures that Signal's servers don't have to collect a log of who's talking to who. Signal won the Levchin Prize at Real World Crypto --- in fact, they won the first Levchin prize ever awarded, meaning that when Dan Boneh and Tom Ristenpart and Kenny Paterson and the other referees sat down to figure out who should get the inaugural Levchin Prize, Signal was the first thing that came to mind.

That cryptographers recoil from Telegram's bizarre IGE-based cryptography is besides the point. Nobody needed to "FUD" Telegram to show that it's inferior.
What is IR35?
i feel like it's better than docker for macos, but that's not a really high bar to clear tbf.
Show HN: Identity management with end-to-end encryption
What do you mean trust didn't deplete?

Faked images are super popular and effective and are used to reinforce biases.

Major outlets like Fox News that traffic in false information have bad reputations and also good reputations among others.

You are right that this is isn't a technical problem though. Why bother faking a video or photo when fake words (misquotes and lies) are 10000 cheaper and just as effective?
HOW TO SHARPEN PENCILS (2013)

https://vimeo.com/60718161
FEM os the workhorse of pretty much any engineering field that needs to use models expressed as partial differential equations, such as heat exchanges, mechanics (solid and fluid statics and Dynamics), electromagnetics, etc. It's hard to go through a day without using anything whose design process involved FEM analysis at some point.
> Unlike software development, where you can improve things here and there incrementally, with design you need to have an overall view of what you want to do, where you want to get, how the final product should look.

There's a downside to this too though. Take swagger-ui[1] for example. A few years ago I installed it at my company. It was great. Then managers wanted more features, so I peaked into the source and found it wasn't too hard to augment the HTML/JS. I added a search bar to filter HTTP APIs by dynamically altering the JSON document. I added a button to generate a PDF. I added a drop down to select release version from a database. It was quick and easy and hackable.

Then they got sponsored and redesigned it from the ground up "professionally" using React. I recently tried to upgrade to the latest version and... the level of complexity has gone up several orders of magnitude. Whereas before I just opened index.html and started hacking, now there isn't an index.html at all. It's all a labyrinthine nest of components and configuration files that somehow get magically compiled and bundled with some build process and I have no idea how to even start porting my features over.

I suppose it all makes sense to full-time React developers, but seeing as I mainly work in embedded Linux drivers, I don't really have a desire to learn React since I was previously coerced into learning AngularJS which I now regret.

So I guess my point is: if you pull in professional designers to design your FOSS, it may become less accessible and hackable for non-designers like me.

[1] https://github.com/swagger-api/swagger-ui
New Paradigm / Metamodern / GameB Leadership School Launches
The answer to technology is technology. People need better tools for communication and authentication, but tools are public goods, and the market under produces public goods because there is no way a producer of public goods can capture the value generated through private property rights, and so there's no mechanism in the market to sustain and incentivize producers.

The solution will make both free market advocates and government intervention advocates happy: use public revenue to create better communication and authentication tools. Let consumers freely choose between the tools provided by private enterprise and those produced by government funded development.

If the government fails, consumers are no worse off: they still have their market borne options. If it succeeds, they have better options than they did before.

Regulation of private enterprise is lazy, authoritarian and a case of putting all of one's eggs in one basket.
There are plenty of other tricks that can be used and won't break the "triple click". I just threw together [1] as an example (and in that one, even if you don't triple click but accidentally select past the end of the line, you are also getting unexpected text).

Combine a few of those techniques with a fancy-looking text box that you are supposed to "click to copy" to get a command, and it becomes pretty easy to even write css-only "exploits" to put stuff in the clipboard!

[1] https://jsfiddle.net/gxosfn83/1/
I'm personally against using any instant messaging app, even more so if it's on a smartphone rather than on a desktop computer. I don't care how private they are. Why? Well, I think it's an inefficient communication tool, and thus a huge waste of time. Modern instant messaging applications work by interrupting people and being interrupted by them constantly throughout the day, since there's no way to turn it off—in contrast, MSN Messenger didn't allow for offline messaging until 2005; most of the time you found yourself in front of the computer with the program opened if somebody sent you a message, ready to engage in conversation instead of dealing with anything else.

Of course, you can turn the notifications off and check messages at a specific time every day, but good luck with that! If nested conversations without a subject attached to them, no character limit, and no formal way of telling when they either start or end aren't already put off enough and stretched out unnecessarily, imagine setting a time restriction to your responses. Imagine setting up a meeting or a date: as cumbersome and as long as it takes as it is, you'd spend a week trying to meet with somebody. Believe me, I've been there. I've tried it all: installing WhatsApp on a virtual machine with Android_x86 and only using it at night didn't solve a thing; still, a phone call was always faster and much more efficient in dealing with anything you can conceive. However, most people didn't want to pick up the phone; texting, on the other hand? I'd receive texts from people wanting to start full conversations there, to which they would respond every two or three hours. How can anyone do anything efficiently or be productive enough at work, or even enjoy hobbies, while doing that?

I know I'm alone on this one, but it's really frustrating seeing how something that isolates us and separates us from our own lives, immediate environments, and thoughts will probably never stop growing.

End of the rant.
update your account and try plugging in a test card number.
4111-1111-1111-1111 for example. It passes all the surface level tests but won't actually fund anything
There is a very simple solution to Facebook - demand that they offer compatibility through an API so that other products can offer News Feed products that are seamlessly integrated with the FB Friends. Same as having a universal messaging protocol that's compatible with WhatsApp, and an Instagram API that also allows for compatibility with competitive photo feed products. Basically - open up the social graph and allow for super aggregators with different functionality. That's allowing for competition and breaking down the artificial moat they created, where they have managed to legally extricate their users from their own data property (essentially a form of digital enclosure that violates your right to your data as your private property). They would be destroyed within a year.

Same as windows - you just force them to have an anti-monopoly function.

Alternatively, allow for other ad suppliers to work through their network with a minimal amount of friction. Then you annihilate their revenue.
Ironically enough, not only can science not solve the trans debates, the view of a scientist has no special weight in the matter. It is only as the scientist puts on a non-scientist hat that she has any credibility in the discussion.
You can create a "spreadsheet" with named cells and refer to those names in your constraints.

For example you could create a cell called "cylinderbore" and have either a static value in it, or a value computed from something else, and you could set a radius constraint to "cylinderbore/2", or "cylinderbore/2 + 0.3" or whatever you want.

There's a demonstration in this 5-minute video: https://www.youtube.com/watch?v=b07qbhYHZbU

(Contrary to what the video implies, you don't have to manually click on each constraint whenever you change your spreadsheet, the global recalculate button will do it.)
I'm in the interesting position of having just walked into a situation where the paitent was already dead, and organs had already been harvested from the old company. Rightfully angry customers hadn't had access to the legacy system (it's costs killed the company) in several months.

In the words of Monty Pyhon it was a dead parrot, and I came in to say "It's just resting... It's pining for the Fjords!"

I'm almost a month in on a complete re-architect from scratch. Most customers are overjoyed that the business will be back soon, but I'm afraid their good will is going to be short lived if things aren't running soon.
It's because the old mainframes they used to use only accepted uppercase passwords. A lot of of financial applications were uppercase only. I know this because my dad would often message me in all caps and then say, "sorry I was working in FinAppX and had caps lock on".

When the banks first moved to going online, they were just building thin interfaces on top of their mainframes. Hence things like password being letters and numbers only and max 8 characters. Some banks made this explicit, some just did upper() and truncate(8).

And at this point some have converted to modern technology but their tech debt lives on.
High Scalability – Feb 2020
"trivially"?
I think it is required at some institutions (pretty sure it was at CMU when I was there), because not only is it useful to understand such a fundamental daily tool at a deeper level, but as the post says:

>everything in compilers is packed to the gills with absolutely gorgeous algorithms

So you get to see practical usage of some advanced things rather than just abstractions.
>in which a nation improving its economic conditions makes its medium run economic output worse

It doesn't say that economic output would decrease, only that luxury goods sales would decrease. I will take this misunderstanding into future consideration. It is also a misunderstanding to assume that "the other countries all copy it better": the implication is that when the first country uses the system, it buys fewer luxury goods from other countries as well. However, people would be more divided on the benefit of a country BUYING fewer luxury goods. If people want expensive German cars and they can afford them, let them, right? But everyone in Germany presumably wants Germany to SELL more luxury cars.

Also, in regards to whether an unused system could be beneficial, it's worth pointing out that the overtime system was basically invented in the 1930's, during the Great Depression. Companies suggested it as an alternative to further mandated decreases in working hours.
Postscript definitely is.
Betteridge's Law says "No" ... and given certificates are generated locally, I don't see how the certificates themselves could be compromised. The trust in a certificate (or trust in a false certificate) could potentially be manipulated in by and upstream party.