skysight-inc/HackerNews huggingface dataset:
You aren't wrong, but there's a nuance that I was trying to clarify on.

Regarding the idea that you rarely see trades of uneven values: that is largely because positions where such complications are likely tend to be avoided by most players. There are notable examples of players that make/made such trades disproportionately often. Morozevich, Tal, Shirov, Tate, Shabalov, Speelman, etc..

Playing in that manner is largely unusual because it is mentally fatiguing, risky and easily avoided with modern theory.
I really don't understand this. A career in software is one of the most pampered and lucrative ones I can think of. Due to the shortage of software engineers, we can go anywhere and get a job instantly.

The only downside I can think of is ageism, but then again, I have colleagues in their 50s and 60s where I work. But I suppose this isn't universal. (I'm in Atlanta and we have a lot of older workers. Age doesn't seem to be a thing here.)

Yes, we're underpaid for the value we provide, but we're paid a hell of a lot more than most people. We have the flexibility to find new work or create our own businesses.

Why introduce a new level of politics and collective bargaining? I don't want to pay union dues. If I don't like where I'm working, I'll go somewhere else.

Can someone explain why I should want this? (Or why I should empathize with those who do?) I don't understand it at all.
That doesn't necessarily mean they store in plaintext. They might just only hash the first 20 characters.
Isn't JavaScript much faster than Python these days?
WebThings Gateway Goes Global
True. That leads to adverse selection though: the clubs self select as juicy targets laden with assets. Further, only the rich can speak.

I doubt those making these proposals upthread want these consequences. For whatever reason people really don’t think their proposals through. (Not referring to you)
It's never quite clear what the best framing or boundaries are for these concepts.
I wrote a bot to mirror Twitter/Tumblr/RSS to Mastodon

https://github.com/yogthos/mastodon-bot
My suspicions are compatible with yours. Last year I jotted down some thoughts about a possible solution:

> Zero-obligation communities could probably extract more value from their contributors (including converting passive bystanders into contributors) by fostering a culture of voluntoldism and getting maintainers to put in some asks of their own. Right now, people are half-insisting that there's something intrinsic to open source that is placing a high burden on maintainers. Mostly, I regard this as the result of bad practices originating from the culture of GitHub, not intrinsic to open source. But either way, it's widely reported that maintainers are burning out. Users are showing up and asking for too much. How about reversing polarity and start conditioning maintainers into asking for things from users and less involved contributors? The idea is for maintainers to give consideration to the most effective way a project would benefit if it had at its disposal a voluntary group of mechanical turks.

https://www.colbyrussell.com/2019/02/15/what-happened-in-jan...
"Honest" (subject to police pressure) mistakes in identifying people are vastly more common than a video accidentally showing a different face.
To clarify, you don't usually see just "a" for an accumulator, as there are usually more than one accumulator-style registers in a CPU, and in many cases they are split along byte (possibly word) boundaries.

So you end up with accumulators called "A" and "B", but are composed of registers "AX" and "AY", and "BX" and "BY", with each being one byte (or word) wide; X and Y being high and low bytes/words of the register (and dependent on "endian-ess" too).

Sometimes you even get where multiple registers can be referenced by a singular name - "D" is a popular choice, and may be made up of "A" and "B" (being low/high "registers" of the larger word). IIRC, the 6809 was like this (?) - A and B were 16 bit registers, but could be referenced as a 32-bit word "D" (or maybe I am thing of the 68k or some other architecture - it's been a long while).

The only other time I have ever seen singular letters used for registers in assembly was for very old pre-microcomputer systems (beasts like the Univac and System/360 - though I think the PDP-8 had similar style). Also some of the very early "microcontrollers" (which were more like glorified sequencers with some extra memory and rudimentary branching, if any) had similar "registers" (Radio Shack once sold, as a part of their "Science Fair" electronic kits, a "Microcomputer Trainer" that was something like a very small 4-bit microcontroller with 128 bytes of memory or something like that - to teach assembler and a bit of hardware interfacing - it had "small" registers like that referred to in single letters).
I love and hate signal. The tech seems good, but the UX has some real frustrations. Group chats are the most glaringly frustrating part in my mind.
The witness statement is supposed to be verified by the witness at the end of the interrogation. Editing that statement without consulting the witness is tampering, no system would save statements like that.
rich people.
#deletefacebook has been great for Mastodon, it's currently at over 2 million users and growing actively
I'm interested in this for the obvious reason that I co-founded Latacora but I'm not sure what you're saying. We don't invest in our client companies.
Gumroad founder on learning code and advice for job applicants
This chain of logic does not follow. It is possible that your bank is properly salt+hashing your password - the truncation may have been on the back end before, and is now exposed to you because the field is shorter.
can you tell us the name of this bank so we can avoid business with them ?!
Indie Hackers Buenos Aires Meetup
> we're redesigning VLC interface those days

why?
Why would it be difficult? Just hide it in an "advanced" menu or something like that.
Just tried, both a swipe back and the back button work here.
What tool would seem to you as intelligent? Can you formalize that in some way?
Same motivation. Call center costs related to account recovery are astronomical when you have tens of millions of customers. The authentication systems at large banks are generally a bit more 'observational' than just watching what password is sent (not always of course) so you can still mitigate many threats while still allowing for reduced login friction.
BBC Micro Bot: Welcome to 8-bit cloud
Sahil was nice enough to answer my questions. A true hacker.
You could apply the same label to many other entertainment products and websites as well.
How much of your critique of Max/MSP does apply to Pd? ;-)
I'm pretty sure that Microsoft had something akin to a union at least a decade ago. Any Microsofters here?
Request Node lib used by 48k modules is now deprecated
> In my experience it's the opposite, you use live dating if you're not attractive enough for dating apps as those favor only the top percentile of attractive men and being average gets you nowhere.

so clearly there's something to be said about how the way you use these apps changes your experience. use the right apps and go for people that seem interesting rather than the most traditionally attractive ones. don't bother trying to make a witty one-liner to get their number immediately, have patience and be fine with having some chats that go nowhere.
>These assets are already implicitly protected by a massive apparatus extending as far as Ohio Class nuclear submarines patrolling the Pacific ocean.

A lot of good they will do you when a clever hacker from an unknown country logs in to your account, takes some money, and disappears untraceably because the bank's poor IT practices didn't involve enough logging! The bank might not even realize they need to call the FBI. The only practical security solution is to stop the money from being stolen in the first place: law enforcement rarely recovers all of the stolen assets.
Are you sure? What about the fines they're already giving? https://news.ycombinator.com/item?id=18531588
Display fake video on screen. Point video-signing camera at screen.

You now have a signed fake video. You're welcome.
^^ This. I only clicked through because I wanted to visualize where this would be. What a missed opportunity.
They have to no? If you want to link some other bank accounts you have to give them the associated credentials that they pretty much have to store in clear (or encrypted at rest whatever).
And here is @scruss' tweet[0]

[0] https://twitter.com/scruss/status/1229070234990108676
An organization I was at in the past attempted to use them as a replacement for sessions, which turned out to be a terrible idea as I suspected it would.

I've found that arbitrarily re-inventing the wheel because a new thing becomes popular should be done deliberately and with great caution. More generally - I think it's important to look for solutions to fit a specific problem, not problems to fit a specific solution.

However, back to JWTs - I'm currently using them for authorization in an EXTREMELY high traffic websocket server implementation. It's really nice because it's short duration (the ones I am issuing have a expiration of 60 seconds), and allows the service to operate entirely within memory except for interacting with a Kafka cluster.
That would be a mixed bag in several ways - while good for making a diverse ecosystem it would mean Cambridge Analytica style abuses would be the norm and rely upon user savviness for security. In a lowest common denominator base like Facebook - that won't work well.
Uber does not use float for money but the internal representation is converted to something displayable in the API layer.

Normally strings are used, for example: https://developer.uber.com/docs/riders/references/api/v1.2/r...

Guess somebody messed up for this case.
Agreed, telemetry is a classic case of "more data is not better data".

With a smaller number of organized sessions, you can still collect telemetry (without spying), and you can also collect all sorts of information that telemetry just won't give you.

I suspect that a hands-on approach can be cheaper, too. It's just not any fun because it doesn't give you an excuse to play with your company's Snowflake warehouse.
Just like Russ Hannemann
When the ribbon was introduced, Microsoft asserted patent rights and asked for a license in order to use it. In fact, you were not allowed to use ribbons in your app without a license.

You can read about that here:
https://web.archive.org/web/20100719112606/http://blogs.msdn...

Since then, license text has mostly disappeared from Microsoft's site. The license page no longer exists. You can't apply for one. I personally last saw text referring to a license requirement in the ribbon MFC samples distributed with Visual Studio. But the question if Microsoft requires a license or asserts patent rights seems to still be open - there has been no statement from Microsoft, and a quick google shows lots of people asking the same question.

* https://office-watch.com/2018/can-microsoft-office-ribbon-us...

* https://stackoverflow.com/questions/563312/is-the-ms-ribbon-...

* https://www.infoq.com/news/2018/02/Ribbon-UI/

* and me: https://news.ycombinator.com/item?id=14095662
> In the end these conversion errors are not solvable in any language

Not true at all.

Ruby has BigDecimal: https://ruby-doc.org/stdlib-2.5.1/libdoc/bigdecimal/rdoc/Big...

.NET also has a Decimal type.

I've worked on salary calculation applications and e-commerce platforms, and found that language choice makes a big difference.
Laziness or arrogance.

Like when the engineer and statistician W. Edwards Deming suggested improvements in manufacturing, but US manufacturers ignored him.

>Why were Deming's views on quality control initially ignored in the United States?

>Following World War II, Deming was largely ignored in the productivity-crazed United States. ... The message Deming made to the United States was that productivity without quality was a dead end. He attempted to teach engineers his philosophy, but the companies they worked for were focused on other things.
Was Python faster than javascript a long time ago? I'm not super old and javascript has always been way faster in my mind, but it's fine. Python has many great libraries for doing heavy computations very quickly.
New COVID-19 cases reported across Japan
USAA will just decline first and ask questions later. (I'm not saying this is a good thing; it sucks as a customer.)

I tried to order from a German e-retailer with my USAA card. First time, rejected; I got a text asking if it was me. I replied "YES". Second time, rejected again, got another text... I had to use another (Chase?) card eventually. Still got a text, but this one was prompt and I was able to respond before the transaction was rejected.

These are all automated; no CS rep is sending these texts (or rejections) by hand.
I had the exact same "Deja vu" moment until I realized the same as you.

Feels rude for OP to just verbatim copy/paste their comment without acknowledging they are doing that. It cheapens their words and makes it feel like copy-paste garbage you see all over the web. It also makes me think OP never learned anything significant from previous replies to their first comment, and is just spamming to get others to agree with them.

edit: Furthermore, OP never engaged with the comments on their previous post, and isn't engaging with comments here that disagree.

So, is OP part of a misinformation campaign of their own design? No idea. Wish they would bother responding rather than copy-pasting the same stuff each time uncritically.
Just look at their employee reviews. The management there seems toxic.

I implore you to also think twice about the way in which you are demonizing unions. Sure, some unions aren’t the best, but what you’re saying is 100% discounting the benefits that a union can bring to employees. Union dues can more than pay for themselves in wage negotiation. They can restrict overwork, unpaid overtime (see the special salaried overtime exemptions that IT employees and teachers get enshrined into US law), and unsafe working conditions.

Sure, unions have bureaucracy, but they have bureaucracy that is incentivized to increase outcomes for the employee and not the employer. You are directly paying the union to represent and fight for you.

The “go work somewhere else” solution isn’t an equitable or realistic solution for many employees. That often equates to “I can go work somewhere else that’s just as shitty.”

Sure, life is nice for many tech employees right now, but what happens when the supply/demand situation inverts?

Tech employees often also have a very bad habit of pretending that more poorly compensated areas of their own company are enjoying the success in the same way. Ask someone in support or a junior graphic designer about what they think about the prospects of “working somewhere else.”
Agreed. The best products often propose a way for doing things that people didn’t think about. But they show a deep understanding of the actual needs. I don’t think many users of 70s computers would have come up with mice and windowing systems if asked how to improve systems.
Evidence of massive-scale emotional contagion through social networks (2014) [pdf]
Kickstarter Union Receives NLRB Certification
I'm currently rewriting our store implementation, and it's complicated.

One example is that some currencies have 100 subunits (eg USD), some have 10 subunits (EG TWD/MOP) and some have no subunits (eg JPY). This is made slightly more difficult in that Stripe/Paypal will treat subunits differently, for example Paypal might treat JPY as having 100 subunits and Stripe will treat it with 0 subunits.

You want to be really careful here not to charge 10x/100x more/less to the end customer than you imagine.

Formatting currencies is also something you need to do carefully as dots and commas mean completely different things in various countries and can lead to unexpected charges for customers.

Don't get me started on VAT :P

All worth it in the end though, I enjoy writing this sort of thing and I do see long term benefit to our business that we do it all in-house.

I'd also recommend future proofing implementations to use longs instead of ints for storing money values. Back when Bitcoin was less valuable we allowed BTC as a currency where 1 subunit = 1 satoshi (100,000,000 satoshis in a bitcoin). It was possible to overflow an int this way.

You also can't really write payment systems with the speed you might write other code in your startup - errors and mistakes here could have real impact on peoples lives. For example, loops that create charges that don't end (possible with both Stripe AND Paypal). Loops can manifest themselves as lock collisions as well. Basically, be careful and if speed is important you probably want to outsource it at the expense of some control.
The story I heard is that the first time this was attempted in real life, the account balance grew so fast that it attracted attention and they were caught.
Put a Little Love in Your Forms
I am constantly creeped out by how well Amazon markets things to me.

There are two types of recommendations I get from Amazon though. The first is ads I see on sites like Facebook and are things I would never look up, but I'm also curious if that is part of their strategy. I get ads on facebook for things like a unicycle that is motorized and can go like 35mph. Half the time I end up clicking on these insane ads just to read reviews or the description.

The on site recommendations work very well for me though (they know I love woodworking and Cooking/Kitchen stuff).

I'm curious if the outrageous ads are to get you on site, then the targeted on-site ads are to actually get you to buy things?
My bank just changed from a 6-number password (literally no option for more or less characters nor anything but digits) to rational passwords this month. I don't know how my WoW account 10 years ago needed an authenticator but the people managing my retirement savings didn't light a fire under asses to get that done.

Legislation should have and likely still should be put in place.
Yep. We mostly agree it seems.

Problem is, as the author notes: developers loves to work on these features.

I also don't have a problem with devs cutting down unmaintainable mess.

My problem is with this general idea that a designer should come in - especially in open source projects - and decide what is and isn't useful.

I also guess that some of the problems one see when designers try to join open source projects might be related to this.
It's missing basically every major email marketing provider.

* Salesforce
* IBM
* Contact Contact
* Campaign Monitor
* HubSpot
* ActiveCampaign

etc etc
That COBOL layer that underlies almost all of our infrastructure.

It was written when the cost/benefit calculation of writing it involved "downsizing" thousands of clerks who were doing the job manually.

It can't be replaced because the cost/benefit calculation of replacing it does not involve anything like those kinds of numbers. The benefits of avoiding even a major security incident just don't compare to the costs.

Y2K taught me this. Nothing has changed since.
> These banks' IT systems are storing things that many of us would argue are much more valuable than your passwords. A bank's core system also represents the actual monetary value of every customer's account. We are talking about password security in a system domain where there are arguably far more valuable assets to secure.

The password is what secures the more valuable things inside the account (the money). In fact, in nearly every case a password is used, no one really cares much about the password itself, but what's inside. That's why services require password in the first place.

EDIT: Also, don't be so sure that passwords are not useful. If you can compromise a password in one service, there is a significant chance that the user in question is re-using the same password on other (or all?) services. If your password is "joe123" on somewebsite.com, if I can crack that, I can try to use that information to guess your login on somebank.com, somedoctor.com and somegovernmentservice.gov. The more things become "cloud"-based, the higher the value of cracking a password.

I think the bigger consideration is actually how to exfiltrate money from an account that you compromise: If you initiate a wire transfer to some account you control, that leaves a paper trail, and typically has a lag time, during which the institution/customer have a chance to react. This is also why scam centers in India ask you to send them cash equivalents: gift card codes they can redeem/resell.
> All this clutter is followed by adding optional themes as a solution to the complaints people have about the user experience, which, in my opinion, can never fix the problems because they go much deeper than the superficial surface, and that is all that a theme can fix.

There's one case I've run into where themes are great. That is when one wants to improve a craggy FLOSS interface. Invariably a craggle will ask for an option to turn the ugliness back on and a non-default theme provides the perfect place to do that.
It's not identity theft, it's just fraud. Calling it identity theft is an attempt to put the cost and responsibility for ordinary fraud on the victims.
I saw this on Internet of Shit: https://twitter.com/internetofshit
Past coverage (though using the abstract at the time):

https://news.ycombinator.com/item?id=7956470

I think this is one of the more important papers in the past ten years, and it seems like a shame how few people have read it.
If you're going to bring in "Good to Great" then you have to consider the fact that some of his case studies (Wells Fargo, Fannie Mae) went down the tubes because of what Collins postulated made them successful (overfitting, unscientific).
Sean is more prepared, but I like Lex's open-ended style more overall, probably. He gets more philosophical and abstract than Sean does (though Sean certainly does, too). As others have said, it's not a competition; both podcasts are probably the best tech/science ones out there that I know of. Plus they have two different fields of expertise.
I think you have some bias here. Of course, an art newsletter that says "look at this picture" will have a higher open rate, because open rates usually are measured through remote-loading images from a tracking server. In most other emails, there is no need to load remote images. This doesn't tell you anything about actual open rates.
As a contractor, I'm happy for them. One day we will have one big union.
Javascript is quite neat today. I play a lot with map/reduce and async/await and it's great.
I'm not sure it's really possible to launch new decentralized protocols anymore, and get any kind of mainstream traction. We have HTTP and email basically by historical accident. Even RSS was shown to really just be an implementation detail of Google Reader, and there wasn't enough of an organic ecosystem outside of that for it to survive.
It's funny that my small-ish credit union is not only more technologically advanced, but also way more ethical (looking at you, Wells Fargo) and convenient, and has top notch customer service. Seriously, I've never interacted with more pleasant customer service reps than my CU.

Why are people giving their money to big banks again? Is it just advertising pressure?
wow so cool :) take my money ! I want one
It's not that they're not solvable, it's just that you have to go out of your way to use the proper type or library. The default floating point type still has problems.
Oh, I see you've had a Fidelity account too.