skysight-inc/HackerNews huggingface dataset:
Sure, many concepts identified 2000 years ago still exist. Adding, subtraction, platonic shapes. But we still add stuff, and some things are even changed.

We don't call odd numbers "male" anymore, and even numbers "female", like Pythagoras did.

Calculus was only invented a couple of hundred years ago, and looks nothing like the creative trig proofs of the Greek.

Our handling of infinity dates from the beginning of the 20th century (Cantor), as is all the meta weirdness like the completeness theory of Gödel.

And that's math, a domain, the domain where knowledge acquired stays valid for all of eternity.
I'm guessing because it's so fundamentally different from most of the other programming languages out there, which I sometimes think are just variations on the variable/function/control flow theme (and yes, I've gone fairly far in Lisp).

I've been teaching myself Prolog, and it's sufficiently different that I feel like I'm learning to program all over again. You can sort of pretend that predicates are just funny functions, where you have to put the return value's container into the argument list, but that's not really what's going on. I loved reading the docs for SWI-Prolog, where most of the predicate docstrings start: "True if...". You can say that the length predicate returns the length of a list, but really it returns true if the given list has a length equal to the given integer. It will tell you the length of a list, sure, but it will also do the reverse:

?- length(List, 5) -> List = [_,_,_,_,_]

Nuts!
Saint Pierre and Miquelon
https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto...

"The AES-128 keys, which we verified are sufficient to decrypt Zoom packets intercepted in Internet traffic, appear to be generated by Zoom servers, and in some cases, are delivered to participants in a Zoom meeting through servers in China, even when all meeting participants, and the Zoom subscriber’s company, are outside of China."
From my experience with friends going through the residency match, more people end up unhappy or mediocre about their match rather than happy. I say this as the partner of someone who matched at their number one choice. The day was defined for me by how I felt for all of our friends who didn't end up at their number one (or 2nd-5th choice) and ended up feeling somewhat broken.
It is quite obvious from how many CVE entries you can find for each one.
The Zoom client works really well, Webex works okay for me most of the time but not all the time and has a lot of little problems I find annoying.

- Overall webex UI is very slow/laggy, subjective - yes, but I think it'd be obvious to any regular person.

- It makes my self-view a tiny floating box (this drives me crazy, I want it to be the same size as the others).

- Gallery view doesn't work well, sometimes the speaker is duplicated in sharing content speaker view and again in gallery view.

- Audio switching doesn't work as well between putting airpods on and off.

- More video/audio failures than Zoom in general (enough to be annoying).

I'm not sure why Zoom is the only one that does Gallery view right - the others all seem to mess this interface up (maybe because they can't handle the traffic?)
While I am not a fan of anything resembling communism.

It really should not surprise you that a generation that grew up with the rising wealth of their baby boomer parents (so were used to some comfort), and were suddenly cast into a world as independent adults and yet simultaneously completely fucked over by the Great Recession ... would find things that are drastically different from the current status-quo (e.g., Communism) as appealing.

That being said, most Millennials would not want anything close to actual communism ... I think.
If it’s canary, you don’t trust it fully, no? Tests can pass and you still end up munging data or the user experience.
That's good, compared to the nominative type systems, on that point at least!

I'm just trying to help the person I'm replying to to see more arguments in favor of dynamic systems without types, not necessarily straightly aimed at TypeScript as they mainly mentioned just types.
'The politics of generosity': Brussels aims to counter Chinese virus narrative
If all participants have good internet and are geographically close it should theoretically be possible to have delay not much greater than rtt/2 for everybody.

With rtt < 20ms that should make musical performances possible. After all, sound only travels less than four meters in 10ms. So this is just like singing in a choir (with more visual delay - but that can be solved by having a conductor).

Unfortunately I'm not aware of any software making that a practical reality, even with ftth.
That is the point of the question. If you believe that is not possible, then we should not use software in systems where an entity can derive more than $1 Billion in value from compromising the software otherwise it makes economic sense for them to compromise it. If the authors believe it is possible, I would like concrete information that is sufficient to counter the belief that it is not possible (I am pretty sure most people in the technical community believe it is not possible).

As an example of consequences of a belief that it is not possible:

The JP Morgan hack resulted in the loss of 76 million records. That means if each person's record is worth more than $14 it would be profitable for someone to hack JP Morgan if they had a system that could not prevent compromise by a red team with a $1 Billion budget. Given your question, I will assume you do not believe that such a system does not exist, in fact, you probably believe there is no system that is even in the general vicinity of that number (apologies if I am misinterpreting your statement). If we assume a $1 Million budget is all it takes, then each record would only need to be worth 1.4 cents for it to be profitable to hack JP Morgan. How do you think people would feel about that? Do you think it would be problematic for JP Morgan if they announced they protect every account with $14 of security, let alone 1.4 cents?

Now the JP Morgan hack is a little old, it happened in 2014, so let's use something newer. In 2019 Wells Fargo lost over 24 million records. At $1 Billion that is $40 per record. At $1 Million 4 cents. Do you think it would be problematic for Wells Fargo if they announced they protect every account with $40 of security, let alone 4 cents?
I just had a Google Meet call. They couldn't hear me. Zoom has its issues but it is definitely reliable for its purpose.
OK, so now you have version 1.0 of a product.

Read about MVP (Minimum Viable Product) the Wikipedia entry is fine, then the decision tree is as follows:

Do you want to try to make a MVP out of this? YES / NO

IF YES: establish a budget, a timeline, and tangible metrics and go for it

IF NO, new decisions tree: Pivot existing product OR scratch it and start a new one (using the knowledge acquired building this and the MVP knowledge)
100% agree but I'm tentatively hopeful that alternatives to Zoom have caught up. Zoom raised the bar and I have seen that other products have improved. Meet is decent right now and Jitsi (in my very limited testing so far) seem actually pretty great, possibly better than Zoom (they mix audio more smoothly when two people are talking over each other in a way that is less jarring, not sure but that's my current theory of why it "feels" better). Even historically awful alternatives like Webex really are honestly improved. Anyway, Zoom is getting outed as being a seriously a-hole company - there are definitely alternatives better than selling out just for convenience of not switching or even trying to find an alternative.
I worked at Google 2006-2010, and from where I sat, Google's biggest problems were (1) rapid erosion of corporate culture over that time frame and (2) weak project management.

A friend was managing a project on a shoestring budget. Upper management (C-suite) had reviewed the idea and green-lit it. He had been told Larry and Sergei in particular had voiced support. He got it done ahead of schedule and under budget by managing a stream of off-cycle interns. The week it was scheduled to go live, someone in middle management killed it. My friend and his team got zero credit for a job very well done, a big setback for him. He and I were working on an internal tool for datacenter management as a 20% project when I left. I asked him about it later, and our 20% project met a similar fate: enthusiastic support from management, including giving us some resources, all the way through completion, followed by cancellation shortly after completion. My friend left less than a year later.

Another friend started a modest improvement to chat as a 20% project, which later got expanded to a full-time project for several engineers. I forget the external name, but the internal code name was "Taco Town" after the SnL skit. Walkabout / Wave was a skunkworks project that used its separate repository, which was very rare at Google. People knew something mysterious was going on down in Australia, but we really had no idea what it was, other than the Google Maps guys were running it and it was named "Walkabout". When Walkabout / Wave came out of skunkworks mode shortly before external launch, the Taco Town team realized they needed to launch very soon or their project would never launch because its functionality was subsumed by Walkabout / Wave. Taco Town rushed its launch, was a bit buggy and had some scalability issues that they knew about, but expected to be able to improve shortly after launch. I think Taco Town's botched launch a few weeks before Walkabout/Wave contributed to initial confusion around Wave and some of Taco Town's problems colored perceptions of Wave's launch.

Shortly after I left, Google publicly announced they'd be putting "more wood behind fewer arrows", which was a step in the right direction.

I get it that management doesn't want to discourage engineers or stifle innovation, and they know they don't have a good handle on what will be successful and what won't, but keeping around zombie projects gives engineers false hope. The "throw mud at the wall and see what sticks" style of project management can be soul-crushing for talented junior people managing small projects, unless they're properly supported and really get proper credit for doing a very good job engineering something that fails for non-engineering reasons.
Convenience ≠ Security

These two remove from one-another other.

Zoom just showcased this back to back to back to back in a few weeks time). They played tricks with the words. "we wrote ABC but what we really meant is XYZ" is a shitty response to any type of audit/scrutiny.

This is a public company. They have an Internal Audit. What the hell were these guys been auditing in security audits??? The color of the background????
It’s not so much what you store, but what someone listening in on might be storing, or learning.

A number of our hospital customers were diving in head first with Zoom, but are now backing off. I am curious to hear if there is any legal fallout from any of this.

[1] https://theintercept.com/2020/04/03/zooms-encryption-is-not-...
I share you pain using other products, I really do. I'm stuck with Skype for Business and Webex. However Zoom's attitude to security is unacceptable, and therefore I will not accept it. Full Stop. Every now and then I'm on a company call that, if made public, could do serious harm to the company. My children do video calls with their friends from their bedrooms without adult supervision. In neither of those scenarios am I willing to trust Zoom right now.
I don't know if Dr. Hotez is directly involved, but St. Luke's, which is a Houston-based hospital heavily affiliated with BCM/TCH (where Dr. Hotez works), started trialing this in patients a few days ago.
Where "larger" really means Google and Yahoo, others as you now see are less zealous about MTA-STS as the main way forward (there's little sign of broad adoption beyond a small number of the largest providers).

For Google, part of the issue is that signing "google.com" where the MX hosts live is a non-trivial endeavour given all the DNS-based load-balancing kit that's deployed at scale. That can be solved by e.g. switching the MX hosts to another domain, e.g. "smtp.goog" which is signed, and already has mx[1-4].smtp.goog as alternative MX hosts for the same domains (gmail.com and all the G-suite hosted ones).
All that's required is TLSA RRs for these, and presto-magic, inbound DANE for Google-hosted domains that are signed and have designated these MX hosts (some already have, despite lack of official guidance from Google that these are supported, nagging for such guidance continues...).

And of course gmail.com could be signed without having to sign google.com, so given willpower to get it done, technically they have a simple way forward.

For yahoo.com, there's no separation between the email domain and the (does anybody still care about it) website. So DANE SMTP for yahoo.com could be more difficult, but again not insurmountable, if they still have any resources left to get new things done. If they're only on life-support, then probably not any time soon. (I'm still waiting for native IPv6 from Verizon Fios...)

Another significant obstacle is perhaps internal politics. There is sadly some quasi-religious zeal (feels like in-group vs. out-group territoriality) around "dislike" of DNSSEC. True believers in the faith are wiser and more prescient than us unenlightened masses, and have been effective barriers to progress in more than one organization.

There's of course work to be done to improve DNSSEC usability (with significant progress in e.g. BIND 9.16 automating key rollover, not just resigning), especially the interface between registrant and registrar, where CDNSKEY/CDS support would remove barriers to KSK management.

It would be great to see more domains upgrade from RSA-2048 KSK + RSA-1024 ZSK to ECDSA P-256, or at least at a 1280-bit RSA ZSK, with adequately frequent (~90 day or so) ZSK rollover. For RSA, algorithms 5 and 7 which use SHA-1 signing (now deprecated) need to be upgraded to 8 or 10 which use SHA2.

Internet-scale infrastructure changes take effort and time, and if you're not actively participating, at least try to not get in the way.
Free endless runner game on Android
"Open standards"?
Types are information about the code which enables compiler optimizations, so statically typed languages generally can be faster than dynamic languages. They aren't, always, of course, and other factors come into play.
Thanks. That's actually great, I was wrong.
Ask HN: Framework to build cross-platform apps for both mobile and desktop?
I'm building an app which needs to leverage functionalities native to the target platforms (e.g. menu bar on MacOS, widget/notifications on mobile), therefore a purely web-based frontend wouldn't suffice. Since this is a solo project for now, it would be much more realistic for me to use a framework which allows me to reuse as much code as possible across different target platforms.

I found some Ask HN posts on this, but many of them are 3 or 4 years old. Since this landscape is apparently evolving very rapidly, I thought it would make sense to ask it again. What would you recommend based on your experience?

Some of my more specific questions based on a preliminary research (feel free to skip them):

- Seems that the current frameworks are mainly divided into two camps: Xamarin.Forms vs. JS-based solutions. I am curious about how bug-free Xamarin.Forms is. There is even a project[1] that facilitates using F# with Xamarin.Forms, which sounds great since I want to write as much functional code as possible. But I heard some concerns over Xamarin.Forms' development speed and reliability on different platforms.

- There are several JS-based solutions, e.g. Ionic, Quasar, Framework7. But it's really hard to tell the difference between them at first glance. Apparently they all offer desktop support by eventually leveraging Electron, but how different are they in terms of development experience, features and support, especially for a solo developer?

- Flutter seems to have generated a lot of attention, but it doesn't seem to fully support Windows/Linux yet, though that's on the roadmap. Should I skip it because of this, or can I count on the support (at least for Windows) being available soon?

- The above question sort of applies to React Native as well, which does have Windows support by MS but doesn't seem to have reliable Mac support yet (Maybe I'm wrong).

Thanks!

[1] https://github.com/fsprojects/Fabulous
Rocket Lab catches dummy rocket in midair with helicopter during crucial test
Right. I've worked almost only remotely for several outfits over more than ten years although conveniently I am currently unemployed. I have used WebEx, Skype, Hangouts, Slack's built-in video conferencing, Zoom and I'm sure I'm forgetting others. If you have a sane setup all of these work fine.

I hadn't used Jitsi until this current situation meant friends wanted to "meet up" drunkenly on Friday evenings but it's the same.

The main obstacles are hardware. The cheapest correct working solution for a single individual participant is a headset and a webcam. Can you use lapel microphones, or (as two of my Youtube creator friends do for Friday evenings) sit in front of a huge professional microphone with filters? Yes, yes you can but that's not for most users. Can you plug a high-end SLR that's focused dead on you into a converter and stream that instead of a webcam? Yup, but again most people either don't own an SLR or don't want to set it up just so they can be a bit clearer and brighter when drunk.

And the thing about hardware is that we abstracted this away entirely. Zoom doesn't have different hardware support from Hangouts or Skype or any other tool.

"Which VC tool should we use for this meeting?" is a bike shed discussion at the best of times. Chances are good either you didn't need a video conference at all, or any of the tools would have been fine.
Well, I was also instructed by my company to uninstall Zoom clients. And Zoom deliberately make the "use the web version" as obnoxiously difficult to use as their native client is easy. (Why would that be, I wonder? Hmm...) Is "I need to talk to someone at one of the dozens of companies that have forbidden Zoom" a good reason to switch to Jitsi, which is 1) open source 2) entirely browser-based 3) runs anywhere Chrome runs without any extra plugins / installation?
It's only scary in the same way that it's scary how anyone walking down the street could kick you in the pants when you're walking down the street.

They could but they won't because we live in a society. Which is great because that means we don't have to walk around in steel suits to avoid getting kicked in the pants.

I choose to trust the people I work with every day. And then as a bonus, I don't have to hear people yelling "you're muted!" at one another. We just get on with it.
TS can generate such good and natural looking JS that, faced with someone insisting on receiving a JS codebase, I’d consider keeping a shadow-repo in TypeScript and handing them its output.

Doesn’t work so well with an existing codebase, but still.
RIP capture cards.
At some point a new build needs to roll out to production. There's always going to be some risk that something goes wrong, so better to test with 2% of the population initially rather than 100%. By then, the build has already gone through integration tests/dog-fooding, so if something goes wrong in the canary phase, it's generally due to some production environment configuration issue.
No idea. Credit card only isn't all that common in my experience other than situations where it's sort of inherent (planes, food delivery, and so forth). Sit-down may (rarely) be cash only in the US but I'm not sure I've ever personally run into a CC-only restaurant where I'm in the physical location. They do exist apparently but they're rare and, yes, I think they're probably mostly fast casual sort of places where you order at the counter.
Dataloader-codegen: How to manage and autogenerate DataLoaders for GraphQL
I'm interested in the Data Scientist position. How can I apply? The position page just says "For more information, visit us at https://kevalaanalytics.com" but no more information is to be found at the homepage. (:
It seems like the ballot issue in Colorado (where I live) is a little too late, the wolves are already here. At this point rather than spend the money to re-introduce more wolves to Colorado we need to start funds to protect the ones we already have. If the wolves succeed in Colorado like they did in Wyoming then we could have over 100 wolves in Colorado in the next 20 years. There is still a very vocal outcry against wolves in the agricultural community in this state. If there is not some kind of plan put in place to reimburse ranchers for losses caused by wolves then the ranchers are going to quietly deal with problem on their own and that's not good for anyone.
Take a look at historical life expectancy in the US:

https://www.macrotrends.net/countries/USA/united-states/life...

About 10 years more than 1960.
LOL, of course!
> You lose flexibility when suddenly everything is locked to each other by name.

This is only true of nominally typed languages (such as... most typed languages). TypeScript is a notable exception: values just have to have the same property names and types and they'll fit. The language's philosophy is basically to describe the way people write JS rather than prescribe how people should write it, so idiomatic JS is usually easy to express in TypeScript.
Free Android game trending in the playstore
Yes, just this week the FTC brought a tech company to justice for false and misleading promises to users about information security:

> “We allege that Tapplock promised that its Internet-connected locks were secure, but in fact the company failed to even test if that claim was true,” said Andrew Smith, Director of the FTC’s Bureau of Consumer Protection. “Tech companies should remember the basics—when you promise security, you need to deliver security.”[1]

Armed with clear and indisputable evidence of Tapplock's blatant lies, the bulldog enforcement lawyers at the FTC took the opportunity to make an example out of the company. After 18 months of hard-fought negotiations the FTC announced a settlement agreement[2] whereby the Commission agreed to resolve the matter in exchange for Tapplock's pinky promise to not get caught doing that again. Per the arduous terms of the settlement, Tapplock neither admits nor denies any of the FTC's allegations.

So when a company promises their users security that company better deliver security. Or else... absolutely fuckall will happen.

[1]https://www.ftc.gov/news-events/press-releases/2020/04/canad...

[2]https://www.ftc.gov/system/files/documents/cases/192_3011_ta...
It's almost as if you shouldn't fix aerodynamics problems with software...
Can someone with more experience using Jitsi comment on benefits/limitations for use at work? We typically have 2-5 people on calls but occasionally up to 20. I tried it a bit with 1-1 calls and it was pretty great but I'm assuming there are some limitations vs Zoom to be aware of.
A related question is why do we still have SQL databases when everybody could be using Datalog?

https://en.wikipedia.org/wiki/Datalog
Signal Threatens to Dump US Market If Anti-Encryption Bill Passes
Paying the ranchers for animals lost to predation, is what I mean.

A side of beef is half a cow. Usually a dressed side, all fees included, runs about a thousand dollars, a little more or less depending on who you get it from, when, how, etc. That's the consumer price, so a wholesaler probably gets less on a commercial sale, but if we're already (rightly imo) supporting the return of predator species to their ancestral habitats, paying ranchers a couple grand per wolf-killed animal doesn't strike me as unreasonable.

Of course, they'll shoot wolves anyway, every chance they get.