skysight-inc/HackerNews huggingface dataset:
>> but if a site is not ad-supported, and "paywall" is almost an epithet (and circumvented to boot), how is any site supposed to remain viable?

They're not. Think about news sites that rewrite stories from paywalled sites and collect ad revenue. They are parasites that make money from other peoples work. Same thing for all those YouTube channels (though they are not other sites) that repackage other peoples content and make money doing so.

What we need is not so much a way to advertise on the net, but a way to make small payments and subscriptions simple. If sites needed their users to pay them, the quality of the content might go up dramatically. Places like HN could still exist just fine too.

Having said that, I think there are ways to verify ads without cookies and such. It's just that it takes more effort on the server side.
If some site chirps 'listen to our podcast', I'll have a look for acceptable (e.g. no password) feed URLs. If they don't make one obvious, they've lost their chance. Generally, IME those worth downloading offer RSS.
Or spun differently, _I_ can run private, trusted code on an adversarial, remote EC2 instance without compromising my privacy and preventing the adversary (Amazon) from tampering with my secure execution.

At least in theory. IIRC, a number of side channel attacks are exploitable on Intel SGX, so the adversary could leak secrets but not tamper with execution.
If you're legally required do your payroll with a buggy computer system rather than manually (and not even "this specific buggy computer that we gave you", just any old buggy piece of crap), then, uh, I don't really know what to say to that. My condolences, I guess?

If you mean it's impractical and error-prone to do payroll manually, well that's the point of automating >99.999% of it. For the remaining <0.001%, someone is going to have decide how to deal with it, and I'm sceptical that a programmer seven years ago will know better than a lawyer today what the legal requirements today are.
Some of us like the office...
> because that would be better for society.

Citation Needed.

I can think of many legitimate reason that a site owner might want to be anonymous. Maybe they're exposing corruption or sharing information that powerful people don't want to have exposed.
> The flexible hours come in exchange for contractor status.

You keep saying that, but there's nothing backing it up. Contractors typically have more flexible hours, but companies are free to allow flexible hours if they want to. If the drivers were employees, it would be Uber's choice to give them flexible hours or not.

> If they paid employee benefits they could attract employees who don't need flexible hours. Which means if you force them to pay employee benefits either way, they take those workers instead of the ones who need flexible hours and the ones who need flexible hours are out of work.

That's all speculation, though. Maybe the displaced employees will start an Uber competitor that does give flexible hours, beat out Uber, and become the next unicorns. It could be the best thing that ever happens to them...

Really, it's a wash. One group loses a specific job option because they need flexible hours and Uber (supposedly) won't allow it , and another group gains that option because they need regularity.

> There are a bunch of rules and incentives with respect to employer-provided health insurance, unemployment insurance etc. that apply to employees and not contractors. If there was no difference then why would anybody care about how the drivers are classified?

Who is paying for the driver's insurance right now, though? If each driver pays for their own then they'll collectively save a ton of money on a corporate group plan. Employees working under 30 hours a week aren't even required to get employer provided insurance, though, so there may not be a change for people taking advantage of those flexible hours...

> In general you could expect a reclassification to negatively impact everyone involved, because being an employee involves a lot more paperwork and bureaucracy but the value in any advantage from it should then get reflected in correspondingly lower compensation (or loss of employment if that level of compensation falls below minimum wage).

There's not more paperwork and bureaucracy - the existing paperwork and bureaucracy is just concentrated into Uber's HR and finance departments, instead of being done by thousands of drivers.
I disagree. If there's anything you can count on is the end user abusing and taking your features to their limit. Using games as an example, you can't release game and then publish guidelines on how players should not cheat. If your game allows players to cheat easily, they simply will, so it just follows that it's on the developer to release something that will be used appropriately (my point is there is no other way, if you think you can educate the masses, good luck).
I think the problem with asking people this question is that most don’t understand automation, almost all are biased toward themselves, and employees frequently think their job is stupid given their imperfect information.

I remember years ago I was talking with a friend of a friend who worked for a small 3-4 person software company. In the same conversation ve said ver job was bullshit because the software was written years ago by the two owners, who did nothing now, leaving all customer service to the friend of friend. So the argument was that ve should be paid more since ve creates all the value. So the argument was that the owners had bullshit jobs. There was a counter argument that small bugs had to be fixed, not by owners, but by the friend of friend who thought vis job was bullshit because the owner should fix it since the owner knows the software well.

I think it’s hard to get a straight answer because of this limited perspective as well as the natural falseness in responses to “is your job bullshit and we’ll pay you UBI so you can do something cool?” Or “is your job bullshit and we’ll fire you?”
I had a similar conversation with a government customer, saying that they should pool their web applications into a single shared Azure Web App Service Plan, because then instead of a bunch of small "basic" plans they could get a "premium" plan and save money.

They rejected it because it's "too complex to do internal chargebacks" in a shared cluster model.

This is what I mean: The cloud is for orgs with one main application, like Netflix. It's not ready for enterprises where the biggest concern is internal bureaucracy.
Hash the file you have, then compare to the hash of the official version.
still use it for podcasts, butgetting increasingly more troublesome to track down for new podcasts
According to early February's reports, 3M's mask making factory - in China - was nationalized by the Chinese Government. Ships en route to the US with mask deliveries were supposedly ordered to turn around and bring the masks back to China.
Appreciate you posting that archive version.

NY Times article will not translate to other languages via Google itools for more than 2 seconds, it is blocked.
I agree, but think it’s not a very important distinction. Certainly the owner could muck the stall and perform that job. But most owners of horses don’t like to do that and pay someone.

So I think a job is just a task that involves payment. It doesn’t change the argument. Someone has to do the task. If you give the horse owner UBI to free up more time, it’s unlikely to be spent shoveling horse manure.
Yes - but if you could extract (for example) some HDMI-like master keys (so you can pirate first run movies for resale), or eventual access to someone's billion dollar bitcoin stash, it might be worth the trouble. It's not something you'd do to get cheap netflix/etc

It is something a government might do to get someone's crypto keys or iPhone, or to hack into foreign network infrastructure (Huawei/etc) (after all in the past they've built special purpose submarines to do such things)
Really good article, especially for someone like me looking to make the jump.

Especially about importance of getting your workstation right with lighting etc. Completely agree!
I find this to be highly compelling. The “fatality rate” is the number of deaths divided by the number of known cases.

There are several very significant variables which determine the number of known cases, but the upper bound is the number of people tested.

Take for example in WA where the number of cases is ~40 and 10 deaths. The total number of tests last week was some number of hundreds.

With a virus which can be extremely mild in the vast majority of cases and where a test costs thousands of dollars, it is reasonable to expect the total number of cases could be vastly understated.
Price should not be conflated with quality, which I think this article may be doing in it's closing statement:

>But he also found people with "conscientious" characters seek out pricey models, too.
>"People with this type of personality are, as a rule, respectable, ambitious, reliable and well-organised," the statement said. "They take care of themselves and their health and often perform well at work."

Seems to me those people may be seeking quality and build sophistication.
I think weekends will keep getting cannibalized by work as long as employers provide overtime pay for it in the lower-paying jobs and, in higher-paying jobs, it'll persist due to the culture we've established: want to be successful? Sacrifice, sacrifice, sacrifice. Put work over leisure, be available to handle emergencies. This isn't just true for employees anymore, startup leaders now give up their spare time to succeed. It's better than CEOs who spend time at resorts while employees slave away but it's still not healthy.
Total submergence into the culture of the other language 24/7. For example, if you were to try to learn Spanish, start watch Novellas in Spanish, and listening to music in Spanish and watching soccer games in Spanish, and reading articles online in Spanish... The goal is to totally emerge yourself into the other language, while at the same time still learning the language.
To be honest there are going to be only 3 types of Coronavirus People:
1. Those who didn't catch it,
2. Those who survived,
3. Those who died.
The first cases appeared in my city a few days ago...
Not sure why I always get this wrong. Maybe it is because when I draw these characters on a surface, I start from the top not the bottom. Hence the line goes forward for a "backslash" and backward for a "forward slash". What is the etymology of these terms?

Probably better to just use "escape" for backslash and "slash" for forward slash.
One, I think starting another instance of a well-known kind of business is very different than creating a new product, especially when one has used that kind of business a lot. So even if what you say were true, I don't think it would be relevant to, "I've started a business, what kind of product should we make."

But two, I'd like to see some evidence that people really did entirely arbitrary things based on demand, without relation to other factors. If we look at a well-known example, the way Indian-Americans have dominated the motel industry, there's pretty clear evidence that wasn't just driven by looking around the neighborhood to see what was needed. E.g.: https://blogs.wsj.com/indiarealtime/2012/06/11/why-indian-am...
Switching a large enterprise software system is almost as time consuming, expensive, and error prone as developing a replacement in-house. You would have experienced substantial problems even if it was in-house -> in-house-rewrite or external->in-house or external-a -> external-b.
I still read my news in my Winds RSS reader, put in quite a few commits to it as well: https://github.com/GetStream/winds
once you start talking about SAP and other enterprise software you are talking big $$
> For some perverse reason that's better left to the imagination, X insists on calling the program running on the remote machine "the client." This program displays its windows on the "window server."

Um, what? By your own description, X's terminology is correct and straightforward:

> The idea was to allow a program, called a client, to run on one computer and allow it to display on another computer that was running a special program called a window server.

The "service being provided" is "display a window", that the client connects to. There is no inversion here.
Fred Dibnah: Steeplejack (1979) [video]
Pega Is Showing Companies How to Put Empathy into Their Workflows
Th cloud provider would be able to provide a message signed by Intel that says "this computer is running only code with hash XYZ at the top privilege level, and the code with that hash has produced public key ABC". The cloud provider would publish the code with hash XYZ, which would be open source and publicly studied to verify the claims that it runs the users' compute workloads securely without allowing other processes to spy on them. The code would create a keypair upon startup, keeping the private key private even from the cloud server operators, and therefore you can know that if you encrypt a message to the public key in the signed message, then only the server's code running with hash XYZ can read the message. You could encrypt your compute workloads (or messages to your own running workload) to that public key and know that the cloud server operators can't read the message.

This does require trusting the CPU manufacturer (Intel) though. It's possible that Intel could collude with a server operator to create fake remote attestation messages, and trick you into encrypting your compute workload to them instead of the securely-sandboxed code of hash XYZ. That's not any worse than the current setup where your submitted compute workloads can't at all be encrypted in a way that the cloud operators can't read. Currently, if I want to use a no-name cloud host, then I have to trust the no-name cloud host to not be conspiring against me. With remote attestation, I just have to trust that the no-name cloud host and Intel aren't working together to conspire against me. I trust Intel relatively, so it doesn't matter how shady the no-name cloud host is.
Twitter CEO Jack Dorsey Rethinks Africa Trip as Coronavirus Spreads
I would think that it would have to be a syntactically simple language. The human brain isn't super efficient at processing instructions in the traditional CPU sense, so it would perform better if it "compiled" into reusable bits of "code" that could be made a habit.

Not exactly a programming language feature, but it would be nice to have a scheduler implemented somehow if that's possible. You can sort of train yourself to do this, at the cost of context switching inefficiency. Context switching is really expensive for the brain in time but can be feasible if done at boundaries of "task units" and only every few seconds.
Depends. Some countries ban homes, some agricultural land but other forms investment might be available.
I have a data import task I run about once a week - I've found Numbers does a better job not screwing the date field up I add than Excel does when I export to CSV (for import into our relational database)
The Maginot Line
Well, the whole theory of a franchise is that it reduces all risk because the product has already been figured out. And franchising didn't really become popular until after WWII, so I'd have a hard time calling it "traditional".

And just to be clear, I'm not thinking of Bezos as an example of small business owners. He's just the only person I've ever heard of who successfully said, "I'm starting a business. I wonder what it should sell?" As you say, I think he's an enormous outlier.
FWIW, SGXv2 enabled machines -- to my knowledge -- have a user-programmable MSR that you can stuff your own key into. So Intel is no longer needed at all for attestation. (I think they even released an SDK so you could more easily implement your own attestation services, too, like the ones they run.) The problem is that very few SKUs ship with v2 at all, and zero of those SKUs are in the Xeon lineup as of now.

Once the first set of patches for SGX support in Linux got rejected specifically because the user couldn't set their own keys -- I felt it was inevitable Intel was going to cede control on this, only a matter of when the chips appeared. It's just not how they roll; Intel's relatively good and well-prepared-in-advance Linux support is one of their good strengths, and they almost certainly don't want to keep patches around for a major feature like SGX any more than they absolutely have to. (The latest versions of the kernel patches, I think, only support SGXv2 style user controlled attestation. They have yet to be merged upstream.)
How it came to be is basically irrelevant when determining how materially useful it is, given all the bizarre artifacts of git. Nobody really seems to really have mastered it, most people seem to grasp only a subset, and there are so many potential pitfalls. It's a very powerful, raw technology that hasn't been properly productized, or rather, 'it works how Linus wants it to for his reasons' and everyone else just gets dragged along.
Unfortunately, AMD has PSP. [1] ARM has TrustZone. [2] You'd have to get a system with a POWER9 [3] chip, such as the Talos II from Raptor. [4] That has quite a price tag though, on account of not being mainstream.

[1] https://en.wikipedia.org/wiki/AMD_Platform_Security_Processo...

[2] https://en.wikipedia.org/wiki/ARM_architecture#Security_exte...

[3] https://en.wikipedia.org/wiki/POWER9

[4] https://www.raptorcs.com/TALOSII
It's more complex than that right?

If you have a VeraCrypt partition that they can detect, it makes you look like a spy. Lots of random data in unused sectors on your hard drive is a bad look if you're trying to convince the border agent you're not a spy.

If you have a plain old laptop with some mildly embarrassing information on it that's not encrypted, you might still be a spy, but they wouldn't be able to tell from the laptop itself.
This is not correct. It is not their job to police the internet.

The analogy is more like writing a messaging app then being asked to revoke access to someone because they are texting while driving.
In cases like the example mentioned, this is clearly a malicious entity. I don't agree that "get a subpoena" is the right response, some judgement should be applied to cases where someone is clearly using your service to do harm.
The engine is on the same platform as the engine in the Honda NC700 motorcycle, and it shows.
They're funding podcasts on the condition they are Spotify-exclusive. It's not about if you enjoy it or not, but just that you need to use Spotify to listen to a particular podcaast.
An Airbnb of farmland rental space
This is why the "Universal" aspect of it is so important. It's ridiculously easy for people to vote for defunding services that "other" people benefit from, and politicians can always whip up support by scapegoating some minority group as the root of all of our problems. But if the benefit is shared by everyone then it becomes near political suicide to suggest cuts to it. How many politicians successfully can campaign to get rid of social security or medicaid? Those are programs shared with a significant percent, but not even a majority, and as such it's really hard to successfully push for cuts to such systems. With a total universal application of basic income it would be political suicide to push for cuts, everyone's life would be planned and organized already around such a program. Look at how hard it is for universal healthcare systems to be cut in nations that have such a benefit.
Show HN: AirSend – Chat,Share Files,Complete Tasks(Replace Slack and Dropbox)
Two New Moms Return to Work – One in Seattle, One in Stockholm
It's cheap. It makes drinkable coffee quickly. Win. End.
I'm not trying to censor anything, lol. Just referencing many hilarious moments in your comment history where the HN mods tell you to quit spamming, and here we are again with more off topic mark spam ;)
Someone should hand you a Nokia N900. A smartphone from 11 years ago, with specs that kind of sucked even for the time, but it ran X, and pretty well.

It's not some weakness that forces them not to use X, it is NIH. Same reason Google is writing a new kernel for no descernable reason.
"This guide provides best practices to safely and efficiently set up multiple multi-tenant clusters for an enterprise organization."

This "multiple" multi-tenant clusters part isn't coming through. Please do jump into "Securing the cluster" section to cut corners and learn what to do in a single cluster. We're fixing the sections to avoid the confusions. Thanks for the feedback!

https://cloud.google.com/kubernetes-engine/docs/best-practic...
https://twitter.com/lwcalex/status/1235091542219448321

"Dr. Pak-Leung Ho, head of Centre for infection at
@hkumed, thinks it was due to the stepped-up vigilance of #HKers that no. of #COVID19 cases in #HK didn't skyrocket like Iran and Italy. He highlighted universal mask-wearing as one of the reasons widespread outbreak didn't occur."

"#HKers started wearing masks, universally and regardless of symptoms, even before the 1st confirmed case emerged in the city. Some say panic, some say unnecessary, some say cultural difference, but it is really down to our collective experience of #SARS."

"17 yrs ago #HKers learnt the impact of a disease outbreak at the cost of 299 lives. We knew if it starts in China, sooner or later it will reach #HK. Afterall, in the 1st week of Feb alone, 100,000 mainlanders entered HK, not to mention returning HK citizens."
It's considered bad form to lump them together.

https://www.gnu.org/philosophy/not-ipr.en.html
Office 365 is a bit more than some office apps though, you have teams, OneDrive, planner, forms, Todo, powerapps, stream and so on... It actually replaces a whole stack of SAAS apps most companies are already shelling out for.
Worth mentioning: http://www.runwes.com/2020/02/11/howilearnedfrench.html
WHOIS data cannot be handled in this way as this would be a violation of GDPR.
I have absolutely no clue about quantum computing, but I remember this from two years ago. Haven't heard anything since.

Is this relevant? Does anyone have thoughts on this?

https://spectrum.ieee.org/tech-talk/telecom/security/china-s...
I was recently in Northern-ish Ontario, and I had to pump some gas, so I was in the shade of the roof overhead the pumps. It was about -40 degrees.

I was standing there in relatively dense clothing, since it was cold, and I was out there for maybe 1-2 minutes.

It was the first time I really felt and could believe that standing out there in that temperature would cause me to simply die in not very long. I could feel the bite through my thick coat, through my boots, through my hat. I could feel the heat leaching out. Cold like that is no joke.
Relevant Utah Phillips story: https://youtu.be/j9c1vSIpHA0?t=97
This is not actually happening, and I'm sad to see how long this misinformation persists on HackerNews... Not only not technically feasible, it'd also get out in the numerous lawsuits that Facebook is involved in, which get access to internal information like this.
I'm super impressed with how quickly this was identified as an issue and reverted.
Some of Boston’s Priciest Real Estate Is Sinking into the Earth
Face masks to prevent transmission of influenza virus: a systematic review (2014)

> There is some evidence to support the wearing of masks or respirators during illness to protect others, and public health emphasis on mask wearing during illness may help to reduce influenza virus transmission.

> There are fewer data to support the use of masks or respirators to prevent becoming infected.

https://www.cambridge.org/core/journals/epidemiology-and-inf...