skysight-inc/HackerNews huggingface dataset:
> At some point in the near future neural nets trained to predict human performance will undoubtedly condition on priors like nationality, race, and socioeconomic status, even indirectly if they are not explicit data points. What then? Will we continue to bend over backwards to deny reality in favor of a false Utopia? What happens when these trends suggest different interventions for medical conditions? Different learning environments? Different reactions to authority and punishment?

This doesn't feel like an argument in good faith because you both seem to already have strong beliefs about what the "actual causes" are, and also place a lot of words in the mouths of those who might disagree with you based on an uncharitable interpretation of their motives.

Consider how you lump in "nationality, race, and socioeconomic status" all of the same category. It seems you've already decided that those are all root causes, and anyone who disagrees is just denying reality.

One might say "I want to be able to identify interventions to counteract negative effects of [socioeconomic status, home life, etc] in a specific and personalized way to improve opportunities." That would be an interesting use of computational power, beyond what we could've accomplished without fancy computers.

Or you could design a model that would just mimic simple naive stats and reinforce your beliefs on race and culture, while not actually be digging into precise, specific, details. Yes, your simple model will label groups that have suffered historical and ongoing discrimination and disadvantages as less likely to succeed if you don't fully model the compounding and generational effects of that. That's neither interesting nor compelling. People are extremely complicated and yet you've concluded that it's all down to a few blunt factors. Ok.
Yes, but not nearly as impossible as it should be. The amount of precision to pull of a timing attack is difficult, but the amount of computing power to refactor 4098bit RSA keys requires computers that don't exist [yet].
One reason I asked at least part of the question is that I co-own a co-working space (and work out of it) and we might eventually be impacted by this health issue.

If you haven't, you should try a part-time desk if there are any spaces near you. We have a few part-timers and I always appreciate the social side of a shared space, including having a variety of people/jobs around me.
1. I'm not an iOS dev so I can't say for sure, but my impression is that the apps don't have that much control when they open the photo library.

2. Sorry I wasn't clear; this is what I do. The problem is that if you move the photo library at all (or even if you don't but it's a new OS installation), it doesn't trust the old sync state so it manually checks each photo. It does seem to be hashing or something since it's using very little network, but it's only processing one photo every 10 to 20 seconds. I have no idea what makes it so slow, but I've found similar reports on forums so it seems to just be the way it is.
He should really have built a password validating/auditing software for commercial use.

I used hibp in a corporate setting, like most others I looked to see if there was a way to check AD and Linux for bad passwords, a few people had some open sourcey things that only work retroactively with manual execution. We evaluated the need and decided on pursuing an unrelated commercial product that does all the password auditing using known bad passwords among a long list of other things. Since the start I wondered why HIBP did not do this. Having existing enterprise customers would have given him a lot more leverage.
We did the same thing today. Bunch tech companies have been talking to each other about how to handle this. Expect to see more announcements along these lines.
Were people really expecting the markets to go up today? Futures were mixed pre-market. Bloomberg, at least, was framing the optimism as due to people expecting central banks to intervene but central banks can only do so much when your supply chain evaporates.

I was certainly caught off guard but still managed to make a bit of money (~6%) off of one of those idiotic volatility ETNs today.
Surely Netflix's IP blocks are near the top of the list of routes you either block 100% or allow to go outside the VPN.
Home Assistant 0.106.3: Cornavirus integration (Covid-19), track the outbreak
You can use openresty and use lua to create a whitelist of certs. Example: https://gist.github.com/phamhongviet/71da4b02bb517000593cf49...
The hippie powers that be consider IP speculation to be immoral hoarding and try to prevent it. Somewhere I saw projections that prices will rise for the next few years then start to fall (but I also saw projections of BTC going to $100K so YMMV).
Vanguard was down for around 30 minutes by my count with no status updates.
> They've taken it as far as it can go, before tipping into authoritarianism.

Can you expand on that? What countries are you talking about?

> as they rolled into stagnation.

In today's context of over-abundance: why is "stagnation" a bad thing?
I wonder what this means for older versions of Messenger? Facebook talks about rewriting their server logic to support all the removed code from the mobile interface, but does this mean that we will soon see support for < iOS 10 (which Messenger does not support for new versions, as far as I ma aware) be dropped?

It's pretty sad that a Messaging app can't be run on a perfectly fine nine year old device. Bring back IRC :)
Another benefit will be that the self-driving car behind you will also instantly hit the brakes and won‘t cause you neck trauma, making this option a little bit more appealing than it is right now.
I actually had this same phenomenon with a desk that was shipped to me recently! The top came in its own box with a huge picture of a TV on it. At first I was really confused, but then I realized that while the huge picture was a TV, the small text said it was the desk top I'd been waiting for.
Here’s Coinbase’s in-depth plan that this appears to be partially based on https://docs.google.com/document/d/1SRP4dnVCvKB7A5WXrESe-cL5...

Some of the phrasing is identical:

> are likely to get sick more easily or for whom getting sick would be particularly problematic
Flew to SF for CodeBeam, crossing my fingers I didn’t poke the pooch.
> requires you implement a technical control such that your users cannot split tunnel

Is it actually possible to have a technical control like this?

Why can't I create a container or virtual machine that just runs a VPN client, and then use the virtual machine network controls to decide what host traffic gets routed to the VM and through the tunnel? How would the VPN client running inside the VM know about anything I'm doing one level up?

Or is this just another bullshit "you don't actually control the software running on your machine" technical control?
Bought by Thoma Bravo. Fits the pattern. You would think they would be trying to mash up some these companies to corner the SMB security market but they seem to keep all their companies distinct.

A few household names on the acquisition list.

https://en.wikipedia.org/wiki/Thoma_Bravo#Transactions
I would like that people would look at this kind of numbers and agree on the simple fact that burning fuels that release air pollution is bad and we should have a steady plan on how to phase it out and ban the practice. Regardless if people favor nuclear or renewable, we should all agree that coal, oil and gas do not belong in the energy grid.

Existing power plants that use fossil fuels should be phased out and new ones should not be legal to build. Pipelines for gas should not be built. If you don't want nuclear, build the battery and the renewable to fill it. If you don't want to build the battery, build nuclear. If you don't want the risk of nuclear disasters, accept the variability of renewable. Don't want to accept the variability of renewable, build nuclear.

The contention between renewable and nuclear can be good, but only in finding which one is safest and cheapest in a post fossil fuel energy grid. As long fossil fuels continue to be allowed the contention mostly serve to split the movement and pit the nuclear and renewable people against each other rather than against our main problem of greenhouse gas emissions and air pollution.
The world and social structure we grew up in was a world where that wasn't true. This idea that you can start a business and pull yourself up by your own bootstraps - that's made possible by the fact that the return on labor is greater than the return on capital. YC is kinda built on that idea: work hard, get rich.

The other kind of society is one in which the best way to establish a secure place for yourself is to take secure control of some piece of income generating property. Piketty uses Jane Austen's novels to show what these societies look like: marriage and other political arrangements become far more important than how hard working you are. Hard work and toil is generally associated with the poor.

So Piketty's argument is that, while we may believe we are in a pull-yourself-up-by-your-bootstraps society of hard work, the numbers show that we are in fact in a work-your-political-connections-to-establish-control-over-productive-capital society.

So it should be no surprise that HN is a great place to find counterarguments for Piketty's theories. :) But that's his theory, and I believe it's worth keeping an open mind as to whether it's true. If it were, we would see that it's easier to get richer by already being rich or making friends with the rich than it is to get rich by working to build something yourself.
Company IP that the lawyers didn’t screw down.
Chilove Beauties
No even in the same ballpark of fuckup as being down an entire trading day will _zero_ information as to why.
Any links/info on these devices?
HTTPS: //djsupplement.com/leniva-anti-aging-cream/
Leniva Anti Aging Cream is one of the counter maturing medicines which are being sold on the web. The producer of Leniva Cream clarifies the itemized data about the working of the item and it is referenced on their official site. They have a broad site that shows their full scope of limits alongside the evaluating for various pack alternatives and furthermore incorporates data about the organization, client examples of overcoming adversity and extra data about Leniva Cream.As indicated by the producer, Leniva Cream is wealthy in cancer prevention agents, which acts an enemy of maturing operators in the body. The key dynamic fixings utilized in the equation are recorded on the item page with a concise clarification of each.

How should you use Leniva Anti Wrinkle Cream?

The surface of the skin should be washed and sponged. A sufficient amount should then be applied to the skin and massaged gently for about four minutes to better penetrate deeper into the layers of the skin.

Where to buy Leniva Cream?

Leniva Cream can be purchased via its official website. Now you can only get your test package safely! This product is legal and certified, so potential buyers are advised to buy it on the manufacturer’s official website. It is about protecting the benefits and rights of the buyer because you will be directly consulted and you will also get the discount.

https://djsupplement.com/leniva-anti-aging-cream/

https://youtu.be/dob3UntrEEU
Not to be particularly combative to this top-level comment author, but I did not see a reason to reply because I did not feel they had read the post particularly closely.

Obviously defense in depth can go as deep or shallow as you see fit, given an organization's resources. We believe that the short-lived SSH certificates, IP whitelisting (via "enterprise port knocking"), endpoint authentication (device trust), password authentication, and multifactor authentication are enough to protect a single production deployment. Encompassing all of that with a VPN seemed unnecessary when other protection mechanisms like the above, and additional mechanisms that we won't speak to publicly, are taken into account.

Like with anything, it's a game of risk, and it is up to each organization to decide what risk level they will tolerate. I believe most organizations have deployed VPNs in a way that gives them a higher exposure, and simply wanted to share some of the things we have learned through the process :)
The point of R is that it also compounds, much like G. Imagine that B has $2M instead of $1M but needs to spend only $100k/year. For B:

first year: $100k spending, $100k extra capital gains, $2.1M total capital
second year: $102k spending, $108k extra capital gains, $2.208M total capital
third year: $104k spending, $117k extra capital gains, $2.325M total capital.

And so on.

The real argument against Piketty is that people don't stay rich for long, i.e. they don't really get R, but a crazy volatile version of R. There's a large rotation in the top %. Nassim Taleb is quite vocal on the fact that, in the end, pretty much nobody gets market returns. Most people get below average returns, while very very few outperform a lot.

This is the same reason why stocks should outperform bonds - they're more risky, and you need more capital to take more risk. Therefore not everyone can afford stocks, therefore stocks are cheaper (from a return point of view).
Whova | Full-Stack Engineer (React & Django) | San Diego, CA, USA | ONSITE FULL-TIME NEWGRAD VISA
Whova is looking for new full-stack engineers to join our growing team in San Diego (growing 2X every year)!

The position involves developing new features from scratch in Django and React to our core product.

Prior experience in Django/React/Web/... is not needed: we are looking for people willing and capable to learn, and seeking interesting challenges to solve.

If you are interested to learn more, feel free to drop me an email at simon.ninon@whova.com.

---------------------------------------------

Whova | QA Engineers | San Diego, CA, USA | ONSITE FULL-TIME NEWGRAD VISA
Whova is looking for new QA engineers to join our growing team in San Diego (growing 2X every year)!

The position involves developing new automation tests for our web and mobile products, improving our QA testing processes and developing tools to increase automation tests throughput and accuracy.

We are looking for people willing and capable to learn, and seeking interesting challenges to solve.

If you are interested to learn more, feel free to drop me an email at simon.ninon@whova.com.
Not to mention, remote on short notice is definitely not going to have the same productivity level as when people can actually plan their life around it.

Any worker with young kids is going to see their productivity plummet to zero. Especially if the schools close and the kids are home all day.
Hmm got down voted. Would it be possible to elaborate on what is wrong with my post? Kind of new to HN so I would be glad to learn what I did wrong.
Says someone who hasn't seen numerous small(ish) businesses still running their VPN as hardware devices hooked up to ISDN lines...
I agree with this. Perhaps I don't know what I'm talking about, but it feels like it would be difficult to execute. A smaller office space would be ideal, but what if half of those 80/20 folks come in on the same day? Would people have to be sent home?
Correct, but his solution is a hair improvement at best over port knocking.

A VPN means an individual connection is authorized into the interior courtyard.

A Lambda with 2FA to whitelist an IP, then a cron job to cleanup means everyone at your local cafe wireless access point is also authorized into the inner courtyard.
I wonder how this will effect Lite. I use it over Messenger strictly to reduce bloat and get an app with the bare essentials of chat and calls fol friends that refuse to use Signal.
With enough battery, variability is going to be limited. B ut you are right, the discussion needs reframing.
Really frustrated that my employer isn't doing this. I convinced my immediate manager to give everyone approval to WFH, but I cannot fathom why the whole company isn't. I don't know whether it's an issue of priorities, foresight, or capabilities.
Consider that someone pulled a gun and tried to murder someone over 12,000 (a famous domain)
>How do you stop a black box algorithm from descriminating based on gender, class, age, or sexual orientation?

you DeepDream the algorithm to check whether it is dreaming about a young straight white or asian male CS major with high GPA from top university.

Anyway, it is pretty cool that the next article on the same page is "What do we look for in a ‘good’ robot colleague?" Peak cultural fit.
It sounds to me more as if we’d already need to be gods in order to master teleportation.
It also depends on your definition of intent. If you knowingly implement a system with flaws that make it systematically racist, you have intended to be racist.
Location: Houston, TX USA

Remote: Only

Willing to relocate: No

Technologies: Professionally, web technologies such as CSS, Javascript, ES6, Node.js, etc... I have client projects in various web framework such as Vue.js, Riot.js, Mithril.js, but not React due to legacy browsers support. On the side, I have been writing in Erlang, Elixir, Python, and some other languages that I can't say I'm fluent yet. Have worked with MSSQL, PostgreSQL and managed SQL Server.

Résumé/CV: http://github.com/sntran

Email: hn@sntran.com

I'm looking for a fully-remote position that does not requires some certain timezone. Even though I have been a professional in web for about 8 years, I like to experiment with Elixir/Erlang or even Rust. I like the idea of using the right tool for the job and would love the company to be the same. What I don't know I can learn.

If you see something interesting in my profile, let's get in touch.
Cisco Webex: Supporting customers during this unprecedented time

https://blog.webex.com/video-conferencing/cisco-webex-suppor...
Also, I'm not understanding why HSL doesn't automatically inherit the P3 color space without any code changes. It shouldn't require any additional syntax, the HSL model is describing abstracted color values, unlike HEX or RGB which are hardcoded values.

Unless I'm not understanding this correctly. If that's correct, it seems strange and sloppy to require the display-p3 definition.
I don't think the proposal is to cease return on capital, but to reduce it to a level which maximizes some other aspects of the system, perhaps even overall growth.
Cookies may prove to be excellent barter... but hard liquor and ammunition do better per unit volume.
Ask HN: Self-taught dev, how to improve my job prospects in 2-3 months?
People at my company are great and the work is okay, but I am not growing my skill set. I will have some extra time for the next 2-3 months. How best can I improve my job prospects? My dream would be to work at a company that is a technology fist company (aka FAANG), but any improvement would help.

Some options I was thinking about include:

- learning a new language (Rust or Elixir)
- a new technology (block chain or Docker)
- a new framework (Akka/the actor model)
- contribute to an open source project
- practice data structures and algorithms (leet code)

Currently, I am working at an industrial company managing a team of developers. Most people around me are not passionate about software engineering and I rarely have intellectually stimulating conversations about technology. I don't want to spend the rest of my life working on boring projects and tell myself that it is okay because it pays the bills. I enviously read blog posts from companies like Netflix or find myself looking up api design tips from Stripe.

Any advice?
Is Coinbase willing to make their guide on how to stay safe when working from home public? It’s a link in the doc.
How about "Re-envisioning the archaic dependence on a deprecated, transportation-dependent zeitgeist into a frictionless, Cloud-leveraging Utopia!"
Net: Err_cert_common_name_invalid in Chrome – How to Fix?
Is this common? Might be a bit slow here but this sounds like hoarding.
Not only does it pretty much by definition create a monoculture, but it also runs into what in economics is called the Lucas critique.

Trying to make policy decisions based on highly aggregated historical data without understanding foundations fails because the policy change has an effect on behaviour, summed up by the idiom 'a signal that is being exploited too long ceases to be a useful signal'.

There was already the hilarious case of people putting words like "Oxford", and "Cambridge" in their applications in white font on a white background to trick some ML system that scanned applications for these signals.

I think we need to teach people who think they can solve every problem with some ML system a lesson in economics because this stuff is getting out of hand.
For Passionate Woodworkers Only
Many of our customers use SSH jumpboxes - its a natively supported feature of Okta Advanced Server Access / ScaleFT.

From a post awhile back about using Bastions with ScaleFT:

> One of our values at ScaleFT is to do our best to support our users where they are, with the decisions and tools they’ve already selected. This means treating SSH bastions as an SSH feature, parameterizing and centralizing the associated configurations, and seamlessly integrating it into our users’ daily workflows.

https://www.scaleft.com/blog/bastion-hopping-with-ssh-and-sc...

So, if you want to layer on top VPNs, or SSH Jump Boxes, we try to let you. We also try to make parts of the chain better whenever we can.

(disclaimer, I'm ScaleFT co-founder)
You’re expected to provide two color declarations for every element. This is normal practice for backwards-compatibility in web design, so there’s nothing surprising in the method. Frameworks that generate CSS will quickly learn to handle this for us and it’ll be fine.
Nope. Netflix would not allow that to happen. There is always a balance and check, freedom and responsibility, right?
I'm not sure what the solution to that would be. Maybe sodastreams will become popular again.
How to Find the Best Paid Writing Freelance Jobs Online
Vigilante hacks into Indian criminal call centre's CCTV
Yes, the RDP story is very painful.

To the best of my ability, my goal was to make the post more about the network architecture (esp around the concept of SSH bastions) and less about the actual OASA product itself. I think there are a number of fungible solutions which would be just as effective (though I think the integration with Okta is a key product feature). What I find interesting and novel is more what we can do to only open ports to authenticated IP addresses, and to address connections between a single source and a single destination. To me, that's where the real power lies.
Zoom’s stock (ZM) is up about 50% over the past month...
Why wouldn't it be even more secure with a VPN in front of it? Is defense in depth no longer a good strategy?
"Then we shall work in the night"
Location: Montreal, QC (Canada)

Remote: Yes

Willing to relocate: Yes (Canada: AB, BC, ON)

Technologies: JavaScript/ES6+, TypeScript, Node.js, Express, GraphQL, PostgreSQL, MySQL, MongoDB, Firebase, RabbitMQ, Docker, Kubernetes, React, Vue.js, Webpack, Babel

Resume: https://github.com/alex996 (will send CV upon request)

Email: alexnezhynsky@gmail.com

YouTube channel: https://youtube.com/c/CodeRealm
You also have to somehow synchronize second counters in a way that accounts for relativistic effects.