skysight-inc/HackerNews huggingface dataset:
It may also be a limitation of what's easy to do with their payment processor.

As someone who accepts purchases online, my payment provider gives me a lovely dashboard of all transactions, and on each transaction there's a nice and easy "refund this transaction" button for me to click. I'm happy to click this button for you, in particular because it also refunds me of the transaction fee so refunding you is essentially "free" (with the exception that I don't get the money from the sale, of course).

Refunding partial transactions is a whole can of worms. A small list of questions that you would need to answer are:

* How much do I refund you? How do fees and taxes figure into this?

* If I sell you a bundle that includes the thing you want to return, but that thing was also on sale separately (possibly at different rates in different bundles), what do I do?

* How much of the transaction fees will my payment processor refund to me?

Not to say that these questions don't have answers, and possibly favorable ones. Just that it's a lot more complicated than just saying "either I click the refund button or I don't".
Why do I need to interact with another store before I can say my experience with GOG has been bad?

But yes, I have been in direct contact with a publisher (who also has their own storefront) after GOG support, expectedly (based on prior experience), refused to support me on the grounds that they do not .. support .. my system (even though I pointed out the issue was not system specific). The publisher had no issues supporting me, and indeed they were comparatively quick to respond and easier to deal with than GOG.

Here's how it goes with GOG:

* Have a problem with your game? Sorry, we don't support your system (and we also release buggy games that would be easy to fix but that's the users' responsibility).

* Want refund? Sorry, refunds are for technical issues only and "we do not support your system" is not a technical issue.

* Want your forum posts deleted? Sorry, we can't do that because we'd have to delete your account and besides, it'd break threading (nevermind that moderators are already breaking threading and removing posts without deleting accounts; and threading breaks only because their software is so crap).

I haven't got a single success story to share about GOG's support. And up til now, the lack of refunds has become a major pain point because you're not entitled to either support or refunds if you can't get your game working on a system GOG does not want to support.

This got worse when Judas' wine thread become a ghost town after the Linko90 fiasco, where GOG decided to side with social media outrage mob and fire their own people and presumably make a policy change that disallows their employees (who in the past had given unofficial but first class support on forums) from being active members of the community. Around the same time linuxvangog started looking for a new job; I believe GOG either fired him or pissed him off enough to have him look for a better place.

GOG really doesn't care about Linux, which really sucks, because a lot of Linux users do care about DRM-free games.

But hey, I've been enjoying STALKER lately thanks to you & GOG.
Current systems prevent most abuses, and many people are working on improving it to prevent more abuses.

As an excellent example, Certificate Transparency has almost completely mitigated the potential abuse of compromising a certificate authority and using it to MITM traffic. Similarly, "binary transparency" or "software transparency" will hopefully eliminate the abuse of delivering a "special binary" to just one person that others have not received.

Part of the threat model is the belief that any system with a backdoor has any hope of "preventing abuses". The backdoor is the abuse, leaving aside all the misuses of it that will happen.
What bothers me about Sam Altman's writing is the following:

1) He talks about X, X being an observation with survivorship bias painted all over it, but Sam Altman asserts as if it is true. Stop writing with authority over unsubstantiated claims - you can only be humble and say "Perhaps X is true because of my observations, take it with a grain salt".

2) Statements like "Easy startups are easy to start but hard to make successful." are fluffy with no real substance. I might as well read "How to become a millionaire" books.

3) Completely obvious observations: "Then talk about that big vision and work relentlessly towards it, but always have a reasonable next step." You might as well say "When you are embarking on a startup endeavor, make sure it is successful". I can't help but exclaim "No shit!".

IMO these articles and blog posts offer zero advice of substance. I despise them very much. There is nothing to learn from it, this is like grocery store aisle tabloid version of the Silicon Valley.
Why should Law Enforcement have a seat at the table in the design of anything?

Should my sneakers be made more uncomfortable so I can't run away too fast?

Should they be able to remotely disable my car?

Remotely open the blinds to my home's windows?

Should I not be able to install a front door that resists attempts at forced entry?

What's the line where Law Enforcement's wants merit consideration?
there's always one...as in there is always one who has to poke people for grammer. sighs.
They've definitely moved MVIS before.
This concept was literally parodied in Silicon Valley: https://www.youtube.com/watch?v=BzAdXyPYKQo

Quite funny too.
Tech Platforms Aren’t Bound by First Amendment, Appeals Court Rules
GitLab's SQL style guide is one of the best I've seen.
I would replace the "startup model" with "VC funded startup".
This looks useful. Are there pending standards for other browser storage mechanisms than an in-memory FS?

Would it be a security risk to grant limited local filesystem access by domain; with a storage quota?

... To answer my own question, it looks like the FileSystem API is still experimental and only browser extensions can request access to the actual filesystem: https://developer.mozilla.org/en-US/docs/Web/API/FileSystem
> When you’ve got a loyal customer that’s already been through three copies of your product, it might be time to give them a free upgrade.

Some reason that line of the article really annoyed me.

If I wanted my Game Boy fixed, I want a fixed game-boy. Not another product. Not bashing Nintendo, much kudos to them. But if my GBC broke and was swapped out with a Switch, I would be annoyed.
I'm not sure I agree with the assertion that podcasts are a bad way to engage with ideas in the way that books allow you to. Of course many podcasts don't do this or even proclaim to, but my experience has been that certain interviewers/podcasters are really good at laying out ideas or worldviews that you can then evaluate yourself.

The one downside is that they generally take more time to go through and it's hard to know beforehand whether what you are going to listen to is worthwhile
I’m not sure id hi as far as qualifying PYMK as an invasion of privacy, but there are common situations where you DO NOT want to connect with others or others you know/knew connect with you.

Exes, Stalkers, People who can’t let go, Friends who are bad influences, etc...
Interesting how you go for my value system, rather than provide additional information which might make Elliot Higgins look a little less like the inexperienced, uncredentialed, paid bullshit operator that he is.
FAA wants detailed inspections, fixes of engine panels on Boeing 737 Max
> Because luck is involved, it’s only luck that matters.

I don't think that's a reasonable conclusion from the story, it's setting up a situation that is pure luck, and asserting that people will take credit for their luck. It's not saying that everything in the real world is actually luck.
I wonder how much of the driver tips are stolen by Lyft
I'm a software engineer. What matters is the code I produce. If I wear a tie, the tie does not wind up in the source code control system. If wear jeans, the compiler does not care. You're confusing the trappings of professionalism for the actual professionalism. They are not the same thing.
I don't recommend leaving bags unattended in public anywhere these days, they're likely to call in the bomb squad.
if no solutions is available and food security is threatened, minds and habits don't matter.
These are nice, thank you!
Interesting thoughts. Since you apparently have significant experience raising VC funding, I'm curious about your opinion on the following (others, of course, are welcome to chime in). If you were working on a deep tech (science-based) startup and considered using venture capital, would you prefer pitching your idea(s) to VCs, who happen to have relevant domain expertise (most likely, as their educational background) due to potentially being enthusiastic about relevant domain and problems as well as having better understanding of an industry and having some (additional) connections or, on the contrary, avoid such VCs as potentially being "biased" and/or having less enthusiasm / belief in probability of solving relevant problems and, subsequently, the success of the venture? (For the purpose of this question, assume that the market need is validated.)
If people's first impression of what you want your UI to mean is different often enough to cause problems (for example see the amount of debate here), that is the bug, not the people misinterpreting it. The use of these terms in Jira is one of my pet peeves, since different teams often use them very differently and can be real fun when sharing Jira boards with multiple opinionated companies.

The colloquial usage of 'severity' and 'priority' just has too much overlap. Something like pairing 'likelihood' and 'severity' assessments, as is standard in safety, would still be general and make it immediately clear why something could be severe yet low priority, especially since people commonly mean both likely and severe when ranking a problem as severe. Keeping with the author's definition of severe, renaming severity as 'System Impact' at least immediately narrows down what is severe, but still carries the possible implication of 'frequent'.

I think fighting for a given interpretation here without using different terms is akin to insisting that people simply understand that a 'significant difference' reported in science means 'statistically different' as opposed to an 'important difference'.
Six months ago, the drug that costs $2k now cost $1800 for a 30-day supply. A year ago it was $1600, and about two years ago it was $1400. The patent expires this year.

Gilead did not develop or discover emtricitabine, university research through NIH grants did. Tenofovir was discovered via university research in Prague.
Here are some articles that explain how (the original) Magit is different from other Git clients:

* https://emacsair.me/2017/09/01/the-magical-git-interface

* https://emacsair.me/2017/09/01/magit-walk-through
Are you talking about the same New Zealand that literally has a government position called Chief Censor? The same New Zealand that tried to censor sites after the attacks? The same New Zealand that then went on to push for weakening free speech protections online?[0] New Zealand is at the bottom of the list for me when I consider western countries that protect free speech.

[0] https://www.scoop.co.nz/stories/PO1905/S00277/new-zealand-pm...
According to this chart[0], world healthcare spending was $7.7 trillion in 2016, of which $3 trillion (39%) was spent by the USA. The USA really does do most of world healthcare spending, disproportionate to its population.

[0] https://www.emergobyul.com/resources/worldwide-health-expend...
I'll think about the topic a bit and see if I can come up with something! If you'd like to give me some feedback we can connect via twitter (@Proziam) and if I can come up with something I'll send it to you for a first pass.

[0] Pulse Esports (The organization I founded in 2011/2012) had some great sc2 players, mostly because I was playing starcraft at the time. Running a young org took a lot of time, so I decayed in skill pretty dramatically (down to the diamond/master level).

[0] https://liquipedia.net/starcraft2/Pulse_Esports
The IRS really doesn't care where the money came from if it is reported. The money that he received was reported on his tax returns, so the IRS would not look further at this, as long as the numbers matched up.

In this case it appears that the IRS was brought in to it to correlate the individual's finances with the expected windfall, rather than instigating the investigation. That is, the investigators (in MS and law enforcement) knew who did it, and they were gathering further evidence.
Yup, never said he was opposed to markets nor accumulation of capital. But capitalism as we know it is hugely influenced by our current system of private property. Georgeism would have many similarities to our present form of capitalism but it would also look very different.
Outside of institutional traders who can individually move large volumes of stock it's all herd mentality. Where the algos have the advantage is they see the herd moving either way earlier and react quicker.

On a naive level you could just think of the Reddit group simply spooking the herd to start going in a certain way. All fun and games.

In reality it's likely the same few individuals doing the triggering making it an effective pump and dump scheme. Someone has to lose out when stocks move with no underlying justification.
Recommendation seconded - for people with a fascination for secret doors!
Hm... trading bot trolling.
I don't disagree with you, but I would be absolutely shocked if that matters one bit to a court.
This is giving wayyyy too much credit to a sub-reddit that's all about poking fun at the trading game, and each others. Please don't throw your money away following them.
> If TCO is guaranteed at the language level, as in Scheme, then it will always be enabled regardless of compilation settings

https://www.gnu.org/software/kawa/Compatibility.html
Remdesivir isn't approved anywhere for use, it's still treated as an experimental drug. Are you referring to Kaletra (lopinavir/ritonavir) that is also effective against COVID-19?
Thanks for your feedback.

I agree that the post does not offer a generally applicable solution for the rotation of configuration. Unfortunately, it looks like in this moment of time there is no such solution available (at least not that I'm aware of).
On the other hand, the reason for writing this post was not to solve this issue but to help developers of Spring applications to use Hashicorp Vault for generating dynamic database credentials.

A solution for the more generally applicable, but also much more complex problem of configuration rotation without downtime would likely also solve the issue of the blog post. But as long as this solution is not available a more specific approach could at least address the challenges for some of us. The quite narrow scope of the blog post is bound to relational databases and HikariCP and I hope that I could point out that this still addresses a lot of use-cases (at least as long as SQL databases are not dead ;) ).

Additionally, I would like to increase the awareness that Spring itself is currently not automatically addressing the issue of rotating expiring secrets provided by Hashicorp Vault. Because Spring provides so many out-of-the-box production ready solutions for a lot of use-cases a lot of developers don’t know and even think about the edge cases which could still create pain.

I’m really interested in more details about the proxy-based approach you were writing about. If I’m able to build a more general solution with this approach I would be really happy to share this approach in another blog post.
Or do you know if it there already something planed in the Spring backlog to make this easier?
If the price of a drug then is 50x in the US (as in this case), and the US buys it at the same rate as the rest of the world, then sales to the US would account for ~70% of the revenue. To attain the same revenue with a constant global price, would require an increase of just over 3x of that lower non-US price point. The original characterization ("What we should be pushing for is a change in circumstances that get those in other countries to pay their fair share so Americans don’t bear the entire burden of incentivizing bringing drugs to market.") doesn't seem particularly incorrect.
You missed the point: in 1932 a good fraction of the western world was antisemitic and then those millions of people agreed with Him (the fürher), that didn't make any of them right.

The fact that millions of people are still racists nowadays doesn't mean we should accept that either.

Hopefully, Nazis will be defeated in the long run, but it looks quite far ahead of us unfortunately.
Any recommendations on podcasts?
In my opinion, Stephen King might be the best English language novelist since the mid 1950s or so. I think people mostly look down on him because he's generally identified with horror, which is of course his typical genre -- but his work transcends the genre and is deeply literary.

Carrie should be on the bookshelf next to other somewhat recent masterpieces like the Grapes of Wrath, Invisible Man (Ellison's), Lord of the Flies, the Great Gatsby, and Ulysses.
> To put this in perspective, transmission of HIV could be virtually eliminated in the US if some of those antiviral drugs were made available to at-risk populations.

No, the biggest issue with preventing HIV transmission is stigma of the disease

Besides, Gilead, much like every other large pharmaceutical company, has patient access programs to ensure that anyone who needs their medications can get them: https://www.gilead.com/purpose/medication-access/us-patient-...
The one that got me to delete the app was when I went out one night on a first date with a woman, and then both the woman and I immediately started showing up in each other's "do you know" prompts.

There is probably an explanation for this that doesn't boil down to "FB watched our GPS and noticed our phones sat next to each other at the same location for several hours," but it still felt sufficiently creepy to make me uninterested in sticking around to figure it out.
That's a pretty good analogy. Firing up Emacs for just one thing is a pretty large side dependency. Also, Emacs's keybindings are jarring when bouncing back and forth between apps custom built for a particular OS. They're not bad in any way, just very different.
Singapore is a democracy in name only and is its own budding surveillance nightmare.
Is it really so crazy that people might care about more things than money when considering what to work on?

If I were given the opportunity to go back in time and work at Bell Labs or Xerox PARC, I would probably do so even if paid no money at all. This seems rational to me, both in terms of how much knowledge I could accumulate and just the self-actualization of working on such interesting problems. I imagine the calculation for early employees at start-ups is similar.
I really would not be surprised if will surface that Telegram has a backdoor for Russian special services. After Anton Rosenberg's posts [1] and Durov's (very unconvincing) responses, it is clear that Durov lies a lot how Telegram operates, and it is quite likely that all their 'blocking' in Russia is just a show to boost credibility.

It also should be noted, that while Telegram markets itself as the most safe and protected messenger, it's regular chats are, in fact, non-encrypted at all and are way less secure than WhatsApps. It's actually baffling, he bashes WhatsApp with such audacity [2], telling in one sentence, that 'if your phone dies, you can't access your messages on another device', and then continues preaching how cool it is to use encryption. BUT IF ONE USES END-TO-END ENCRYPTION, ONE CAN'T ACCESS MESSAGES ON ANOTHER DEVICE, BY DEFINITION!!!!!

It never ceases to amaze me that people bought into this. A comfortable to use app and a really good promise of security turns out to be better than real proper security. ¯\_(ツ)_/¯

[1]: https://medium.com/@anton.rozenberg/friendship-betrayal-clai...

[2]: https://youtu.be/kVZN9QbtFgs?t=106
Yup, it's about $15 for 30 pills in my country (brand name, not generic), which isn't cheap, but pretty affordable.
For those interested in r/WSB's reactions... https://www.reddit.com/r/wallstreetbets/comments/f9sx9d/cong...
https://archive.is/GPVv4

https://nextstrain.org/ncov
The title is incorrect. It was invented to demonstrate with exclusionary land ownership. Even Adam Smith recognised that this would be a problem.
You can. I used to work in a retirement community in Florida. I met thousands of retirees who either through their own business or from stock earned in a corporate job or from a solid 401K savings had more than $1 million in net worth. There's more than 10 million households with a net worth of over $1 million in the U.S [1]. It's not hard work and perseverance that matters. It's smart work and money management that matters.

[1] https://www.statista.com/statistics/617390/us-millionaire-ho...
I feel like the money quote was buried in the postscript.

> Another solution to this problem is to think about startups that can become quite successful with less than ten people. As compensation packages from the giant tech companies continue to increase, I suspect this will become a trend.

As cash comp at big public companies grow and the future value of startup options plummet, we need to start thinking about different ways to start businesses, and this feels like the right solution to me. Starting a company with 10 competent people that I enjoy being around and targeting $5-10mm in revenue sounds perfect. Maybe $10mm isn't reasonable, but even if we hit 1/4th of that amount, it's still plenty to support a small company.
Dupe of https://news.ycombinator.com/item?id=22425648
Creator of the 'Konami Code' Kazuhisa Hashimoto Has Died
so a stalker will get recommended to a 'stalkee' ?
? seafile, syncthing, nextcloud, ...
Ahead of its time?

PL/SQL also allowed (and allows) you to create entire apps within a database.
I'm not suggesting a refusal to listen to the question. I'm observing that it's dangerous to accept the premise of a question that may move the goalposts, without first noticing the implicit premise or differing definition, and explaining why the premise or definition is faulty. Accepting the faulty premise moves the line to "so you just need to come up with the right technology", which then moves to "what's the most secure system you can build while still having a backdoor". The right answer to that is not "here's what we could hypothetically build", it's "by definition we cannot build a secure system with a backdoor, and also here are all the additional problems that a backdoor would introduce".

By all means, fully listen to proposals, in order to understand the misconceptions and better address them. Or, in some cases, it's useful to listen to proposals to anticipate upcoming security threats and build a more robust security model. For instance, the potential threat of compromising CAs led to the invention of Certificate Transparency, which almost completely eliminates that possibility.

We also need to get a lot better at rhetoric and PR.
They have fallen these last days in China, if that means anything.
Don't bother with the Nordic countries if trying to avoid surveilance. Surveillance shitholes and it's only getting worse.

Denmark has been illegally requiring all telcos to monitor everything for years, and nothing has changed. No one is willing to change anything or impose any consequence for it. It's even gotten people falsely imprisoned due to complete reliance on location data from mobile phones.

Sweden is not much better, and just passed legislation allowing law enforcement to hack people's phones.

I'm almost certain that Norway, Finland and Iceland are no better.
How tightly they wrapped up the results? Perhaps you could give examples?
I am not hopeful. There are very very few indications out of India that are positive. I wish it weren't so.