skysight-inc/HackerNews huggingface dataset:
Just from the user perspective, frequently legit E-mail goes into my spam folder. This happens with different major E-Mail providers. Although it's mail I'm not interested in, it gets flagged as spam and I unflag it if I find the time. But the point is, usually it's double-opted in mailings which is not interesting to me at all and received in much to high frequency.

So if you are writing a system for that from scratch, consider decreasing frequency for people who don't open the mail. So it passes through spam filters, and maybe raises attention of readers, just for curiosity...
Not that simple, though. That's the "division and rounding" method of the article: share a $.99 fee equally between two parties. That's either 49 cents each or 50 cents each if you're not careful. In both cases, where is the extra cent?
c4 is meant to be self-hosted and it does not implement a preprocessor. It was easier to re-use printf creatively.
I think the bigger reason it's false in science while somewhat more true in CS is that it's basically free to check the source code for something and setup a small localhost test where replication in science is tough and expensive. Even if someone does have the funds to check experimental descriptions don't actually cover all the details usually and there's some combination of small but important details left out and well meaning but imperfect directions.

Also there's just the fact that in CS we're working on a defined system. From top to bottom it's possible to definitively say when I execute X the following Y things happen. The details may be buried deep within the hardware for the truly eldritch bugs but fundamentally it's all human defined and the bits that do exist outside human design are well understood enough they can largely be ignored (no one is reasonably going to find a bug that traces down to some unknown quirk of semiconductor physics). In the sciences we're poking at the edges to see what the system actually is.
That's another perspective on bike shedding.

http://bikeshed.com/
If Apple uses Apple hardware to host this they pay the manufacturing cost, not the retail price you pay.

It probably wouldn’t look good if they hosted this on third party machines running Mac OS.
The big annoyance with FreeCAD for me is the lack of true parametric design.

In Fusion360, you can create global variables/parameters, calculate new values from them, and reuse them across parts. I haven't found any equivalent "central configuration" ability in FreeCAD, which is pretty important to my workflow.
Movie financing was a tax shelter for the rich
A great example (IMHO) of presenting the user with only a small subset of the available features is iOS. The tech-literacy bar to make calls, receive texts and install apps is very low, but there are a ton of features hidden for advanced users.

Some will complain that these are not discoverable and that’s true but advanced users will often be fine reading the manual and I suppose making them discoverable without confusing the average user is difficult.
Chrome extension author here: make a PR and I'll accept it and publish it.
Could you add references to the sections of the GDPR which explain this? The various times I read the GDPR (as well as the local law) I didn't see your explanation in it. References would allow me to determine what I missed.
Chrome sandboxes fetch requests from extensions and tells the user what permissions the app is requesting, so it’s not actually that bad (barring bugs in the sandbox)
That's still better than the SSA. Every employer must use SSA to submit W-3 to report employee wages. They only accept case-insensitive passwords up to 8 alpha-numeric characters.
Seja um FullStack nas Soft skills
> In case the master changes

That's unlikely (last commit in the project is dated Apr 22, 2017). And it's another problem with "the Macaroons ecosystem". After initial hype people discover real world issues with Macaroons and abandon their pet projects.
Decimal floating point exists (https://en.wikipedia.org/wiki/Decimal64_floating-point_forma...), is that considered useable for financial data, or does it turn out in practice to also suffer from the same issues? Since, e.g., dividing through 3 will not be exact here either of course.
Composing Cohort Queries in BigQuery Using HyperLogLog++
Lack of valid use cases

Too many bad actors

Terrible UX
Alex Jones Jumps on Bitcoin Train
The 50 million infusion happened in 2018. Why has it taken so long to scale up?
Anyway, I don't think it can take on WhatsApp. If you look at the history of when signal succeeds and gains many users, it's only when WhatsApp is down. Which is not for very long, as it's so important that it goes back up pretty quickly.
C++, SDL2 and CUDA Quick start demo
Curious. Did you study LC or algorithms for the interviews? If so how long? Also how was your IQ measured?
They would just use the chrome engine so we would be no better off.

Really happy firefox is alive and well.
Airbnb Shared Transition – “Can It Be Done in React Native?”
> Instead of taking weeks or months to develop a custom application, it can be done in a few hours or days.

In other words, "pile up massive amounts of technical debt"
Having worked in the OCR world pretty much non stop for about a decade, i'd say its more just a case of there not being a lot of 101 yr olds, and there being a lot of 1 year olds; the system is likely over-optimized for switching the digits to 20 v's 19 as it's more probable that the individual is 1 than 101. Really, when the confidence is low, or the data seems exceptional, it should be flagged for a manual review.
Unfortunately, they are still non-committal on what is required. They advise that passwords should be hashed, but there is nothing that makes that a binding requirement.

The gist is still "do what you think is appropriate".

The ICO talks about balancing risks and convenience, and the banks will argue that their systems are secure overall, and don't make the consumer liable anyway.

Under the ICO's guidance, an organisation could argue that plain text (or reversibly encrypted) passwords allow them to do things like password reminders.

You or I might think that's terrible, but they can argue that it's a better user experience.
Cool! When will be the IV part?
Re-Reading Papanek's Design for the Real World (2012)
It took me a bit to grok this but I think I finally understand it. Super clever.

Now, how would you do greater than / less than comparisons?
Even better, one of the guys involved with the code has a fantastic Youtube series on the Finite Element Method [1]

I used it in grad school, he's a great explainer, and he's addressing the talk to an audience of computer science students. It's long, of course, but it's spot on.

[1] https://www.youtube.com/watch?v=K2mkx7va5LQ&list=PLh_UinHuMh...
Blogspam of this: https://news.ycombinator.com/item?id=22326731

Extensively discussed already; this piece is literally just a summary of that one.
That may sound like a flood of buzzwords but he's not wrong at all, except maybe for "alarming rate".

This tech is "revolutionary" in that nothing like it has ever performed anywhere near the current level. MNIST is effectively a solved, toy problem now, and many image classification problems are as well.

Democratized in the sense that you can for the first time write and test these state of the art algorithms on your personal machine and, while a couple years ago you needed something beefy like a 1080 TI, even that requirements has been relaxed with many optimized architectures.

More importantly, all of this has literally exploded in the last 5-10 years, no doubt due in part because of the open access nature of arxiv and open source.

That's totally fine though, while comparisons to blockchain are a little insulting, all of this cynicism means less competition for me!
I use FreeCAD with the ship design/testing module and it makes my (beefy) desktop warm up the room a bit. I suspect that you could use the Pi 4 for drawing (to some limit) just fine but if you're calculating a lot of splines and then displacement, I really doubt you'd want to wait for the results (if there was enough memory to finish).
I think the culprit is GitHub notifications. If you are not careful they will pull you in all sorts of directions.

There are some days where I set myself to a task. Open GitHub. Quickly check the notifications because the blue dot grabs my attention. Three hours later it's time to go to bed and I haven't done anything satisfying.

It's fine to fix other people's problem but it also prevents from building deeply meaningful things. Most of the interactions on GitHub are superficial issue discussions.
Death and Pizza: How Domino’s Lost Its Mascot (2014)
The A16Z Marketplace 100
Detection of Design Principle Violations
Wells Fargo isn't really Wells Fargo. It was a massive bank in the midwest called Norwest (based in MN, but offices all over midwest). Norwest acquired WF primarily for the superior name recognition. The merger with Wachovia happened after that.

for the longest time they you could set your password to be anything, but they only checked the first 8 characters and it wasn't case sensitive. Just chalk it up to shit being written in the 80s.
The Marketplace Glossary
Sorry I had a typo. I meant to say very little of the content is in English. But the page title is in English and that matters because I can google for "Jagran UP budget" to get to the second article.
The FOSS development model is best suited for modular software where you have a relatively stable core and dozens of independent plugins for different purposes by different authors, all implementing a well-defined interface. Any new contributor adds stuff in parallel, without being blocked.

Other kinds of software which are a particularly good fit are non-end-user-facing middleware and libraries implementing a standard or a protocol. That standard or protocol pretty much describes what the software must do, and FOSS software often becomes the "reference implementation". Think of zlib, libpng, ffmpeg.

For the regular monoliths you need a team that is much more well-knit and communication and focus is key. Each unit of code has a lot of dependencies and it can quickly get out of control without any "social" coordination.
Presumably the whole thing would have to be tamper-resistant. Try to get to the CCD and it fries itself.

And sticking a monitor in front of the camera probably wouldn't work, at least if telesync/cam rips are anything to go by :)
Just yesterday I watched a video that was difficult to detect it was fake, it was too funny to be true though. Anyways I couldn't tell just by looking at the video. The video showed Mexico's president next to a phallic shaped cactus.

I like to think I'm good detecting fake videos or images, but I guess now I'll have to check the sources every time.

Fake (possibly NSFW): https://www.youtube.com/watch?v=4r0TCQrfMq4

Real: https://youtu.be/31KzD5a3KS4?t=88
The A16Z Marketplace 100: Index
Strains credulity? What do you mean by that?
JWT is not awesome. I spent yesterday implementing it. The smallest usable JWT I could create was 137 bytes, not including the Authorization header.

This is absurd -- the total amount of data I needed to store in the JWT was about 10 bytes.

This inefficiency bloats requests. At a time when we're migrating to http/2, which which deliberately reduces headers to speed things up, JWT is going in the other direction.
no no no that’s just switching from Coke to Pepsi

I’ve been using USAA for over ten years now, it's magical. Contrary to popular belief, you don't have to be a service member for it.

If I couldn't have USAA I'd look into local credit unions.
> I have no idea how they could 'train' a non CS major to write code for hard core stuffs like OS or DBMS.

There is probably someone better fit to describe this [hah!] but schools aren't really designed to teach something specific. It is more about creating hard working drones. Doing anything meaningful in [say] chemistry is harder than brainfuck.
I think he deserves like 17% of the credit.
Haha I should have known it would be even simpler than trying to estimate which date is reasonable. Interestingly Oracle just treats all XX as 20XX from my brief testing when doing to_date with 'YYMMDD' as the format.
Tether launches Stablecoin on Algorand's next generation Blockchain
Other parties can always close their APIs to FB data slurping, and just share the minimum that's required to interact.

Having FB actually implement even that level of interaction would be a net gain in reducing the siloing effect.
If you use floats and rounded that one cent would disappear with them as well.

Unless you're storing half cents in their account and not showing it.

Which is perfectly legitimate by the way, because if you earn a fraction of a cent interest accumulated over a couple months that might actually be a cent and you have to pay it.

The solution might be to store everything as 1/100 of a cent, as an integer.
My main bank does this all the time.

To be honest, while I'm aware it's not the best of practices, I don't care much. To me, the most important thing about bank security is that if there are fraudulent operations in my account, I can call and have them undone without much fuss. In this respect, my bank has behaved well in the past when random charges from an exotic country appeared in my credit card, in fact they noticed before I did, gave me a call and everything was fixed immediately.

For this reason, I think I'm OK with banks not having too strict security practices. If at some point they start being really paranoid about security, they might feel tempted to conclude that if there is fraudulent activity, it must surely be the client's fault, because their systems are unbreachable. I'd rather have the current situation in which I don't have much responsibility about security, problems happen but the bank responds.
> Quite a lot of people do that. It's pretty much the reputation of Stackoverflow. And of course everybody knows it's bad, but it saves time and it works and there's deadlines so they move on and ship it to production.

The trick of it is, it's only "bad" if you care about code quality and/or maintainability, fuzzy attributes which are seldom measured or optimized for. It's the only logical conclusion to "move fast and break things."

p.s. - the good news is, most of us are working on software that doesn't really matter terribly much, so the fact that it's bad also doesn't matter very much
I don't have a Ring device so I obviously don't know all the features/use cases, but were there a particular facets/features of Ring that made requiring 2-factor auth particularly problematic (e.g. "friction")? For example, I had read Ring made it easy [0] to allow multiple accounts to share access to a single device. How does 2-factor auth affect that feature?

Non-related: I know this kind of doublespeak is common in tech press releases, but this seemed particularly obvious:

> Ring does not sell your personal information to anyone.

In the same section, a couple paragraphs later:

> You can now opt out of sharing your information with third-party service providers for the purpose of receiving personalized ads.

So Amazon/Ring is just sharing personalized info to third-party advertisers for free?

[0] https://support.ring.com/hc/en-us/articles/211018223-Control...
Losing Sleep over the Quest for a Perfect Night's Rest
I save time by letting my customers use Git (and they don’t even know it)
I personally prefer that applications have ideal defaults instead of removing features. It should be easy to pick up an application and use it, but if you want to change something, you should be able to. This can be by using the settings dialog, or for particularly advanced features, by editing a config file. Some users have needs that cannot be met by a bare-bones application, and usually these users depend on Open Source applications that either implement their needs or allow them to change it for their uses.
My UK bank has a "memorable word" which is separate from the login mechanism (which uses a physical TOTP pad). Authorising online transactions requires you to give "3rd, 6th & 10th letters" eg of your memorable word.

Are you thinking of that?
Same. It only failed me once, in a logic lecture. I complained out loud, and the lecturer kindly answered the command is \parr
Surprisingly succinct.
What do you mean with "sandboxes fetch requests"? That's not a valid countermeasure at all...

The grandparent was worried about the extension stealing his email's contents.
Even though websites are really important, I think they mean other business critical services going down for an hour.

Imagine if all credit cards with a company failed to process transactions for an hour, or depositing/withdrawing money didn't make a change to your balance. Those types of issues are much more severe than a customer not being able to log in to the website.
> As someone who works in finance/banking, I can assure you that this is not uncommon.

Your assurance is not reassuring.
As someone who has worked in Javascript basically since Javascript was invented, it's been "quickly changing" that entire time, and the majority of the changes have made things worse, not better. It used to be that you could trace your code through 15 layers of callback hell and eventually find the problem. Now there's 10 different syntactic sugars around callbacks, so you get to save a few characters of typing and then trace your bugs through 50 layers of callback hell, most of which are in some 0.0.1-alpha-versioned promise library which may actually just be a XSS attack. Improvement? I think not.

Just because more people are doing it, doesn't mean it's improving.

I'll believe things are going in a good direction when `{}.foo` throws an exception in all major JS implementations. But I'm not optimistic about that ever happening.

My only hope for JavaScript right now is that it might die because WebAssembly lets a reasonable language achieve dominance.
Melzer has said he was of the same opinion until he started looking into the case.

Don't underestimate how closely tied many European countries are to the United States. Swedish security forces snatched two asylum seekers (that we know of) off the streets in Stockholm in 2001, and handed them over to the CIA. They were immediately flown to Egypt, where they were tortured. All this was done in violation of both Swedish and international law.

Melzer has said in interviews that countries like Sweden have strong legal protections, up until the point at which they consider their own security interests to be at stake. At that point, you can expect all sorts of violations of procedure and law, dirty tricks, etc.
On the other hand, malicious actors have been remotely draining banks, especially small banks, remotely due to their poor IT practices.

So a bank system that is "up but insecure" is only a recipe to be horribly hacked later.

I rather my bank be down for a few hours and come back online with my money intact than be hacked and drained and but online.
I couldn't agree more.

I hate the ribbon so very much. You stated the many problems with it better than I, but here's why it actively makes me angry:

It takes a lot of space, and seems to always make it very hard to find the things that I need to use. If I have no option but to use the ribbon, my productivity using that software plummets because I so often have to take a lot of time to find the operation that I need. It's incredibly frustrating.
FreeCAD generally feels more like a traditional CAD program to me. I'd use OpenSCAD, but can't for my application: OpenSCAD fundamentally uses imprecise shape approximations. You draw a sphere but get a high-poly ball, sorta like raster vs vector in 2D imagery. This is fine for a lot of applications, but I want to CNC large, smooth undulating surfaces. The best way to get into my CNC (Shopbot PRS alpha) is via Fusion 360, and Fusion 360 barfs tremendously quickly with those high-poly shapes unless you get the actual (mathematical, "vector") shapes in with a format like IGES or STEP.

OpenSCAD is _awesome_ for targeting 3D printers, though.
Eye-witnesses can at least be prosecuted for perjury if they're found to be deliberately lying. It's hard to apply the same threat to a CCTV camera.

Honest mistakes are obviously a separate issue, but the parallel there would be bad lighting or a corrupted recording, neither of which are new issues.
Sometimes you need org-level rubber-ducking.
That is unfortunate.

I run two HP Z32 4k monitors side by side in portrait mode. Running Debian Linux Buster. Connected to NUC8i7hvk. LXDE, sometimes KDE. Text is clear. Moving windows around is smooth as silk.

27" would be too small. 30" is about the right size for the resolution.

Plus I have five or six virtual desktops to task switch between various development projects.
>Who hasn't heard of FEA?

Probably the vast majority of programmers who have 0 mathematical or scientific background beyond a handful of required college courses.
Blows my mind that in the entire article, not a single map is provided

(╯°□°)╯︵ ┻━┻
Ask HN: How would you label the different tasks you perform?
What labels would you use to classify time spent at work?

For example a really simple (unrealistic) labeling for someone whose only job is to write source code in one language, for one project, on a "normally" structured team. Labels = Programming, Debugging, Meeting, On-Break.
(For the sake of the example, I'm excluding all other common tasks programmers are expected to perform)

Of course many people's jobs have a lot more scope than this example, so I'm curious how you would classify your own work.

I'm asking because I'm trying to get a better handle on how I spend my time at work by classifying chunks of time spent on different tasks. While the core of my job might be "shipping code", there are many work items and projects that might involve very little "shipable code". So when I have days that don't involve "shipping code" it can be hard to .

For context, I currently work as a "software engineer" and my team and role have a pretty wide-ranging scope from maintaining/writing APIs and Web-Apps, to creating new infrastructure. So, I'm curious how my first classification scheme (which I won't share to avoid bias) compares to other people in different roles.
Gravitational-lensing measurements push Hubble-constant discrepancy past 5σ
Ultimately, if a bug in a library causes issue with your program, and your company loses $X, your superiors will not give a shit. You have the burden of responsibility for the program.

For common major libraries used worldwide in enterprise products, you are right in that there is an element of trust. They are made by people much faster/better/stronger than most of us. If all else fails, the sheer magnitude of people using it is a small insurance policy, as disastrous issues will probably be quickly apparent. That still doesn't absolve you of responsibility, but the overall risk is usually pretty low.

A segment of code on SO, or a weeny niche library? You only have your noggin to vouch for its stability and accuracy.
Temporary code is permanent code in many, many cases.
The number of lines isn't really the point; it's C in 4 Functions, not C In 500 Lines.

What's more impressive is that it's self-hosted and implements just the subset of C required to compile itself, which makes it harder to keep the code short, but it manages anyways.
> You can have a ribbon with standard icons right?

That would be fine, as long as it's possible to completely hide the ribbon.
Let me know when it's ready to use without a phone number.

As it is, I lose my identity if I switch phone numbers (say, I move to another country). Even worse, someone else might get my old identity when my old phone number is recycled.
This idea worked out really well for Friendster