skysight-inc/HackerNews huggingface dataset:
My experience is that basically all types of topic modeling tools just kinda blow.

You might as well use traditional clustering techniques instead since topic models are basically a type of clustering
One positive thing about all these horrendous security flaws that have been recently discovered in Zoom, due to its popularity, is that the company seems to be taking them seriously, recently instituting a feature freeze to focus on fixing them: https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-u...

As a consequence, I suspect Zoom's security is more likely than not to improve going forward... although it will surely take a long while. Security is Capital-H Hard.

Also, I cannot think of any other multi-video-conferencing solution that "just works" and has been as thoroughly stress-tested and attacked by bad actors in the wild at such a large scale. If Zoom does a decent-to-good job fixing all the security issues, it looks likely to continue to dominate its market.
> By the way, does anyone know why QUIC specifically put NewReno as its official congestion control [0]? Different environments benefit from different algorithms so I don't see why.

It's a "reasonable default", in the sense that it normally works quite well, and is easy to implement. The dangerous thing about congestion control is that it's really easy to get it wrong and not notice (as noticing requires performance testing and monitoring).

Google QUIC uses BBR on the server side. I wrote the initial version of said BBR implementation, and it took a lot of effort to get it to a production-ready state, so I would not generally recommend writing BBR from scratch. CUBIC is much simpler than BBR, but is also prone to subtle bugs like [0].

> 2. Not everything that needs encryption needs TLS specifically. TLS is not a one-size-fits-all solution.

I'm actually curious what use cases you have in mind. TLS definitely does not cover 100% of all possible cases, but I've seen a surprising number of cases where people rolled their own thing when using (D)TLS would have just worked.

[0] http://bitsup.blogspot.com/2015/09/thanks-google-tcp-team-fo...
You'll have to pay extra if you want `n` support
For TLS they have a port of OpenSSL (named AmiSSL). So, when that port gets updated, and software is updated to any changes resulting from the port, they get any features (if they were ported) from OpenSSL.

They import (their version of) the Mozilla trust store, so roughly the same CAs are trusted as in a copy of Firefox from the same date as your install of AmiSSL.
Continuous Deployment environments are susceptible to versions of this. You have a slow leak, and nobody notices until Thanksgiving, when the processes that used to run for 3 days now run for 10. And just about the time you think you got that sorted out, Christmas comes along and busts the rest of your teeth out.
You don't need to use heavy frameworks for auth, it's not a choice between rolling your own and using a huge framework.
I'm not sure I understand your point. The usability of clicking a link stays equal regardless of the amount of digits in the ID. Adding a password reduces the usability.
That works pretty well if you're confident of finding another job and/or have a safety cushion (aka "FU" money).

In that situation, your manager doesn't really have much power over you. What's the worst they can do, fire you?

But a lot of people don't feel confident of finding another job and are basically afraid of losing the one they have.

That's what makes it a significant power difference. They're afraid because they aren't secure.
A writer with a 'verbose' style. A terrible sin.
I've experienced this. I play & stream a game called DCSS and the developers of that game utilize a form of posiopathy to shut down any criticism. That is to say, any criticism of their development decisions is - similar to what you described - reframed as a "personal attack."

Personally I see this as a tool that authoritarians and small-minded people use to deflect criticism and/or control people. People who have control/power shut down conflict - ostensibly motivated by a desire to keep things "nice" or "positive" - but really it just compels people to accept the status quo.

I would actually argue that online communities and contemporary society in general skews posiopathic, in part because of these kinds of "hall monitor" type authority figures.
>We can choose to pay people to recognize their contributions to society, as opposed to how much they do to enrich an individual.

You have yet to provide a formula with which to calculate this amount. And since it's such a complicated concept, I'm going to go ahead and assume it's impossible to calculate.
What's a virus, anyway? The bare-bones basics
Custom Keto Diet
Complete BS. Not true at all. the jquery era had ajax with dynamic dom updates, dynamic svg, css, and many things we have today except for websockets, web usb, mic, camera, and other devices. the difficulty was more around each browser implementing things differently. and css was a nightmare. just to center something horizontally or vertically (or both) took patience.
I think this is why Google's products have gotten worse over the last 6 years.
> (that they only barely grasp from their 1 tutorials worth of experience)

If you're going to staff your entire corporate dev team with a bunch of green developers, yeah, things will be nasty. That's not the frameworks' fault though, that's just a straw man.
(Co-founder here). If you're referring to the free tier, it only supports a single email address at the moment. What some people have been doing is to create a fake Gmail address and sharing that with their family/friends to use as a common login.

We've been exploring the idea for a free (or significantly discounted) "family" plan (or even something like that for small teams). Please stay tuned over the coming weeks for some updates to our pricing and tiers.
Did you really just compare a passenger aircraft to a garage door opener?

It would also be absurd to say that part of the maintenance for your garage door opener is tearing the whole thing apart after x amount of use, but that's absolutely standard for aircraft engines.
I feel the Google+ vibes.
That's a great idea, I'm going to look into creating an online chess game application soon!
From paragraph 2:

> It solves a couple of problems: first, Netflix was paying millions every year just for the privilege of using Gotham. When you license something at such a scale, it gets really pricey.
Thank god that you know better then the doctors from the hospital. Be sure to go and tell them they are idiots.
> My criticism would honestly be that his writing is overly stylized and lacking in nuance. He inherits the hyperbolic, poetic quality of McCarthy but often applies it to the mundane and the result sometimes feels overwrought and overdramatized vs realistic.

Could not agree more.

Bob Dylan and DFW deserve Nobels, IMO. Both of those guys have fans of all generations.

I feel like DeLillo is a “writer’s writer.” People like DFW applaud him, as you point out.

I just don’t agree that DeLillo has anywhere near the amount of influence as, say, DFW.

I’m frequently amazed how large and diverse DFW’s fan group is.

DeLillo seems to only appeal to writers. His work is very obscure, even within educated niches.
> RSA 2048 keys are unbreakable for the foreseeable future, and using 4096 bit keys are just being paranoid with no gain

This is only true if you consider pure brute force as the only way to "break" RSA 2048. While as of right now there is no hard evidence there has been plenty of hearsay that some of the 5 Eyes have had tools for years that can drastically reduce the brute force complexity needed for RSA 2048 keys.

There is also really no such thing as being "paranoid with no gain" when it comes to computational security, since digital assets can be stored indefinitely and compromised in the future with more advanced computational power or techniques. On the contrary, given the computational power of your average laptop/server these days there's really no reason to _not_ use 4096 keys, unless you are operating on FAANG scale.
This is necessary for building fish. If we wrote it in fish script, we'd run into the bootstrapping problem, where you'd need fish to build fish.
...aren't these all problems that emails have too, in more-or-less equal measure?

Of course, Slack needs to be better than email, or there's no point—but I'd posit that it already is, despite being unable to address these problems. The overall interface of a "chatroom" just works better for quick conversations compared to long email chains. Maybe not much better, but better.

As I see it, the problems pointed out in this article are the eternal problems of all communication within a large group—including face-to-face. It's why small companies can be more nimble despite less resources, and why managing the size of a team is so important.

And while the author's suggestions are great in theory, I can't imagine how you'd even go about implementing them. At least, not until AI gets much, much better than it is today.
Thank you. I hope so.
Sapiens in the Age of Coronavirus
In case it isn’t clear from our website, hCaptcha offers both bot prevention and traffic monetization options. Cloudflare does not use our service for traffic monetization, so neither company has an incentive to make it difficult for humans to pass the captcha.

Websites that use hCaptcha for monetization can adjust difficulty settings and the types of data labeling jobs their users will see. The value hCaptcha derives from human data labeling is provided broadly as a service to other companies, not just to provide training data for our own autonomous vehicle division. Since we are growing capacity like crazy and have a broad footprint of sites primarily interested in bot prevention and not traffic monetization, hCaptcha can offer the lowest cost data labeling to everyone. hCaptcha is also privacy-focused and doesn’t track you around the internet to show you advertisements. We support the privacy-pass extension and have an accessibility option which sends you to a cookie via email (because we can’t just cookie you when you log into our email service).
No, You Didn’t Just Lose Half of Your Retirement Savings
I don't know that this study is talking about reduced hospitalization times. In fact, mild cases don't end up in the hospital. However, it could be that mild cases end up turning into severe cases that need hospitalization less frequently if this treatment is used. Since hospitalization is only needed in some 20% of cases, it would probably take a larger study to meaningfully determine those effects.

Of course, (and even though this probably isn't the case) if all this treatment does is make the mild and moderate cases (those without and with pneumonia and not needing supplemental oxygen) end faster, we can get to herd immunity that much quicker.

And yes, people are using this drug and are going to be using this drug at an increasing rate, so we'll have plenty of evidence soon.
> accessible

For what it's worth, his website works better with my screen-reader than most modern-style websites.
I strongly disagree. If the 787 would show an obvious warning before takeoff saying that it must be rebooted, that would be a different story.

The
Shouldn’t that be “the aeropress simply allows me to brew the most consistent cup to my liking”? Taste is highly subjective, after all.
> dont move the goalposts.

Thought I was asking for clarification. What goalposts did I move?
yeah, that's what i tried to use for a while too. The problem is that so much of the ecosystem doesn't use it, and the python community fails to converge on a solution here the way other language communities do.
> The ‘stuck at home’ economy is gangbusters. VR headsets are selling out, video chat esp Zoom is under heavy use (though security / privacy news is hurting them), Peloton’s stock is up presumably on sales numbers, and remember Blue Apron? They’re back baby.

People are gonna die, and this is what people think about? How can I profit off of this? What stocks should I buy and sell? Hundreds of thousands of people are gonna be dead in the next few months. Global capitalism is the reason why we are so vulnerable to outbreaks like this. But you know, it’s great that Microsoft’s stocks have gone up; best of luck to the 10% of households that control 84% of the value of the stock market. They’re the ones who are going to come out of this crisis ahead and more rich than they started, unlike the millions of working-class people who have and will lose their jobs.
Location : Moscow, Russia

Remote : Yes

Willing to relocate: Yes, to Switzerland, Germany, UK, Sweden, Canada, US

Technologies : Python, Databases (SQL, Postgres, MySQL, Mongo), Machine Learning (scikit, pandas/numpy, Tensorflow), Web dev (Django, Flask, Tornado), Git, AWS, Docker

Résumé/CV : https://bit.ly/serge_mosin

Email : serge@databrawl.com

Video introduction : https://youtu.be/mlvkNYo_chM

Linkedin : https://www.linkedin.com/in/smosin

Github : https://github.com/Greyvend , https://github.com/Databrawl

I have a Ph.D. in Mathematics/Computer Science. I have a unique blend of Software Engineering and Data Science experiences that allows me to both design and implement ML models as well as develop code infrastructure around them and orchestrate deployment process.
I honestly think the safest solution is that an aircraft should refuse to take off after two weeks until you reboot it. In stead, Boeing and Airbus leave it to customers to test if the plane still flies after six months.
QUIC does use TLS, but since TLS sits on top of TCP and QUIC replaces TCP entirely they wire TLS directly into their protocol rather than it resting on top as it does with TCP.

Technically this was fairly complicated to do, but cryptographically nothing much really changes, except that now more things are encrypted.

Now, if your TLS implementation just presents as a shim layer between a TCP port and your socket code then this may mean a significant rewrite, but again that's not about cryptography it's just an engineering problem.
Observations about Silicon Valley Two Weeks into Quarantine
Use Open Sans instead, it's free.
> too much extraction results in a acidic, heavy taste, too little extraction results in the dreaded "mud water" light taste

It's actually the opposite. Over extraction results in more prominent bitter flavors and under extraction in more prominent sour flavors.
My thinking is the former problems -- pay, growth, perks -- are more damaging to their hiring prospects than the actual work the US gov is doing.
>very few people who weren't prisoners starved to death [during WWII].

If it's relevant, 3 million people in India died due to widespread starvation during World War 2 caused by British colonial and war-time policies. Additionally all their cloth production was used by the British war effort, so many Indians went without clothes during that period. https://en.wikipedia.org/wiki/Bengal_famine_of_1943#Cloth_fa...
Gephi (and other graph tools) aren't quite the same thing.

The front-end user interface, and the workflows are different. It's a little closer to how maybe yED works with dragging and dropping of entities, connections, groups, but also a robust meta-data system attached to all of those things + some tools that make bringing in new information from free-text (or wherever) simple. Then all that stuff should be stored in some kind of centralized semantic database that any user using that system can search and find stuff somebody else already put in there. Maybe a document search as well so you can see what raw documents have been ETL'd.

Then take various attributes off of some of the entities and relationships (like dates, or geos, or IPs) and builds various ways of looking at, filtering, and search that stuff quickly.
That's an interesting issue and makes me happy I'm working with a non-critical device. I like to follow practices (again, in non-critical settings) where cases like that can be accepted - but if such a case is detected we bail fatally. With an airplane or even a medical instrument, the cost of suddenly aborting in the middle of an action could be the plane falling out of the sky or some surgical tool becoming unresponsive at a critical time... So I think trying to keep working is the best course of action, but I thank the stars I work with non-critical applications where I can always declare a bad state and refuse to continue.
> Currently I'm stuck with a codebase with almost no documentation of a mess of legacy and new code with layers and layers of developers' opinions on top.

If it was originally built using a framework, what framework do you think that would be? And would it still be in active development and evolving today? How do you integrate new code in a legacy or evolving framework? My experience of this says it is not really a framework vs no-framework problem, but a problem of how to keep an applications code base healthy in a world of ever changing and evolving features, developers, frameworks and technologies. I think thats the real problem you are dealing with here, and not "hot-shot developer from 10 years back didn't use the coolest stack of that time".

And it is the problem you were hired to solve. If everything was working perfectly with no new features required to be added to the legacy code base, they simply wouldn't need you.
2008 started in 2007, things move slow until they don’t. Banks are just as leveraged as they were then. They started doing many of the same things they did then in recent years. They are stronger in part because of the stress tests and implications fed back stop they are counting on so luckily the won’t likely panic and stop lending to each other. But make no mistake. If mortgages and credit cards start to default their balance sheets have limits on what they can with stand. Tightly coupled systems implode quickly even with small changes.
> Talk to anyone in the industry, and they’ll tell you the toilet paper made for the commercial market is a fundamentally different product from the toilet paper you buy in the store... The paper itself is thinner and more utilitarian.

I can't be the only one that wondered what's up with that. I've purposefully held a #2 until I got home just so I can use better TP. Maybe that's the point?
I think any modern LDAP client has TLS support, same goes for servers.
It's currently a little under 5% worldwide. There are on the order of 1 million cumulative cases and a bit under 50 thousand deaths.

https://www.who.int/emergencies/diseases/novel-coronavirus-2...

Doesn't account for lack of testing, of course.
All of the circuit breakers are in the cockpit for a reason.
We use a technique called simulcast. It consists on making every participant "work a bit harder" for the good of the bunch.

That is, every participant sends 3 separate video resolutions to the server: 720p, 480p and 180p (this may change due to bandwidth constraints). Then the server will only forward the approopriate layer to each other participant. So, if you are only seeing me in a thumbnail it will only forward the 180p layer. If I become the active speaker (or you choose to pin me to the large view) the server will immediately switch to forwarding the 720p layer.

In addtion, we use SVC with temporal layers, so thumbnails may be given at just 15fps or even less.

We do have a trick up our sleeve (but IIRC it haad to be disabled for the time being) which involves disabling the ssimulcast layers that nobody is requesting. That is, if nobody iss seeing me in the large view, why send the 720p layer at all?

Hope that helps!
I also had harder internship questions, and a harder time passing, when interviewing at places like Yelp than I did full-time at most FAANG-tier companies (disclaimer: I did not interview at Netflix).
I was really surprised that the article didn't mention Gotham or any other HF&J font. Those were the most expensive I had encountered up until now.
Yeah. But they got selected by the ecosystem because they were GREAT homegrown solutions. While Angular was an accidental success, it seems that Facebook really grasped early on what was happening with React, (we all benefited from the Angular experience, warts and all) and really put in the resources necessary to make React successful, for the benefit of all.
2017-2018 was a bad flu season at 61k US deaths. So, if this turns out to be 100k, it's not 5 times worse than that.
Death rates really don't capture the full picture. What if zero people died from the disease directly, but it still caused painful illness with possible long term complications and overwhelmed health care systems? The economy would still be shut down. Social distancing would still be in place. The economic damage has very little to do with how many people die, and very much to do with how many people are unwilling or unable to participate in the economy.
I can only speak for myself:

I was interested in WireGuard for a while, but setting it up properly seemed rather a daunting task to me. With Tailscale, this was literally a matter of minutes. I'm not sure I would pay $10/month for this, but the free solo plan is sufficient for my purposes and works great.
I always wondered why teleconferencing systems don't incorporate a workflow where people connecting in need an approval from the organizer before actually entering the meeting.
I think people can regnozinze the business going on... and be sensitive / sympathetic to the situation.

I'm writing code / getting paid to do a thing(s) because of COVID, is just part of keep calm and carry on.
Global pandemics are absolutely not capitalism's fault, what in the world?
Agile Isn't an Excuse for Bad Management
> The idea of Patents was to encourage entrepreneurs to invent, but the consumers get shafted by increased price and no competition

For a limited time, that premium is imposed; that's where the incentive comes from.

> Products such as AeroPress, Frisbee, Rubik's cube, etc. leave a bad after taste as a consumer.

Two of those are long out of patent protection. (Well, in Frisbee's case at least on the base design, new innovations may be still be covered.)

> AeroPress should get a 2 year headstart.

So you have no problem with the idea of patents, you just want to reconsider the duration of either patents in general or patents in some particular subfields?

> We should have a labor quotient - if country X imports from country Y, country X should charge import duty that is proportional to the labor quotient exactly to counter balance the higher labor cost in country X.

Is this average labor cost per hour or industry-specific labor cost per unit delivered or something else?

I suspect once you decide this, you'll see a whole set of unintended consequences...
I've really hoped that a stainless vacuum-sealed thermos-type tube could be created to replace the main chamber. It should be to handle and clean.
Save us the petulant comments, take that to reddit.

The amount of people that are going to die is TINY compared to diarrhea. You want upvotes for this, take it to reddit or facebook.
Yeah this is some dystopian stuff. Guarantee that people on here will (rightly) criticize non-Western countries for doing stuff like this, but will ardently defend Palantir doing similar stuff because they’re “innovative” or a “tech company”.
Experts tell White House coronavirus can spread through talking and breathing
Zoom Lets Attackers Steal Windows Credentials, Run Programs via UNC Links
Security pretty much always reduces usability - that’s the trade off.
If you had 4 people the video was going trhough the JVB for sure. Since a Jitsi Meet installation uses multiple components, maybe you didn't shut them all?

Video shenanigans can be a dark art, but not that magical ;-)