skysight-inc/HackerNews huggingface dataset:
Definitely no dismissiveness intended -- apologies. While Stripe has been in business for 10 years, Radar (our fraud prevention tool) has only existed for 3.5. We've made a good deal of progress in that time and I would guess that it's 1-2 years away from being sufficiently complete that we can start to seriously focus on things other than fraud. (As it happens, I just had a conversation about this with the guy who leads it.)
I'll have to get it out (might end up wasting some time on Myst tonight!) ... I'm remembering that some Wallstreets had Ethernet ports and others didn't and that those without couldn't be updated. Of course, that machine wasn't terribly speedy with OS 9 on it so I'm not sure it's worth the upgrade. Still, it was an amazing piece of hardware which still runs almost 25 years later.
I don't know, "unicorn.computer" sounds legit to me.
What is the difference between "looking like a conspiracy" and "being a conspiracy"?
How many courses are you taking per term? Do you spend 10-30 hour/week with only one course?
The native Americans had numerous little nations. Those nations were mostly destroyed by immigration. There was lots of fighting and death, and a hostile cultural change, and property seizure. Individual immigrants could be brilliant and hard-working and friendly, but then they voted for leaders who did terrible things to the native Americans.

This is not something to repeat.
Having worked at an ML fraud prevention company, can confirm that this is a pretty standard part of a fraud prevention stack. It's essentially used to block credential stuffing. There's a high probability your bank also does this.
Ask HN: What do you enjoy least about being a software developer?
Deal :)

I suggest Give Directly https://www.givewell.org/charities/give-directly

If you prefer something else, I suggest anything on https://www.givewell.org list of charities
I used to use Motion but it asks me to login and shit and then doesn't even bother syncing across browsers. Waste of time. And then it slows down web pages and sticks that annoying little box on the side. My user agent has a place for you, in the toolbar. Stop rendering on top of content and then making scroll slow. Ugh.

I'll give this a shot.
> Meh, I feel like it's probably healthy to minimize work

That’s missing the point. I don’t expect people to do work for the sake of doing work. We’re trying to get something done.

The problem comes when individuals on the team try to minimize their own workload at any cost, which inevitably creates more work for other team members. They either find ways to shift difficult tasks to other people on the team, or they cut corners and saddle the team with technical debt.

I know the popular framing is to think of workers vs. big evil corporations, but in reality most of these people end up hurting their coworkers far more than the company by selfishly minimizing their own workloads.

> if the alternative is going into the office and not being productive for those hours anyway

In a properly functioning team, that should never happen. I can’t think of any time in my professional career where our work backlog has literally gone to zero. A properly managed roadmap and backlog means there should always be something to work on.

I don’t expect employees to work extra hours to chip away at the backlog, but if someone finishes their assigned tasks early then they need to step up and help the team or work on the next tasks in the backlog.

If someone is constantly running out of work and finding themselves spending unproductive hours at the office, their team is likely oversized in the first place. Those people are either moved to another team or at the top of the list when it’s time for layoffs, sadly.
In canada we use feet and inches for building dimensions, but not for distance travelled. so we've still got the weird metric/english combo, but not quite as weird as miles and metres.
I use stripe.js in a number of my projects but I've never trusted it. Looks like my fears were justified.

Instead of loading it on startup, I always load the library as the last step before the checkout flow is initiated. Here is a working example of how to do this for anyone who's curious.

https://jsfiddle.net/167ajcbw/
Any idea what the false positive / false negative rate is?
I'm not looking forward to another 1-2 years of waiting - or 3-4, schedules slip ;) - but so be it. Thanks for clarifying!
People are learning how to build new businesses in lockdown
if you can email me (my HN username @dropbox.com) the email address associated with your account once you've sent the bug, I can take a look!
https://news.ycombinator.com/item?id=22933359
Yes, this is very common in Cambridge. I think it is a good idea and generally makes me feel pretty safe.
Fairchild Symbol Computer
really unreasonable customers.
Where NSA is lauded for breaking the law, I will criticize NSA for breaking the law. The way to avoid this criticism is to stop lauding NSA for breaking the law.
I also quit directly because of Allen Carr's Easy Way to Stop Smoking. This is a fantastic book, and I gladly gift it to anyone I know who wants to stop smoking.
Thanks! Very glad it worked out for you. I quoted you in my response at the top -- hope you don't mind. (Can remove if you prefer.)
So where is a calendar widget in the OSX that allows me to see my events when I click on it ? Why do I have to install itsycal when windows has it built in to the os date time widget which is superior to OSX ?

It's a ridiculous argument and I don't see why screen capture should be a part of the OS other than you expect it from OSX.

Besides the UX of OSX screen capture is inferior compared to Greenshot - much easier to determine the capture target and way more options - I don't want to spam my desktop with screenshots.
Well stick that in your pipe!
As it happens, Steve can provide some metrics for this:

https://words.steveklabnik.com/how-often-does-rust-change

https://www.reddit.com/r/rust/comments/fz8mwm/how_often_does...
Yes, I posted the same questions there
I earn remarkably more as a remote developer than I would for my area because I work remotely for a company based in a high income area (NYC) but live in the midwest. I probably make 20-30% more, at least, than a Senior Engineer at a local company would at the top of their payscale.

It has nothing to do with experience levels or anything like that, just companies based in high income areas pay more. My salary is even scaled down a bit based on regional cost of living (I'd likely earn 10% more if I relocated to NYC, which would not make up for the cost of living in new york)
Young dad kills himself after ‘feeling lonely’ during Covid-19 lockdown
This paper is terrible. There are errors in the abstract. It uses percentage of percentages to make results look important. It relies on self reporting when people are strongly encouraged to misreport. It excludes groups arbitrarily (no ICU patients, no one treated by certain departments). Its all about 1 hospital for a few weeks in one part of France.

Its like a test paper to teach people to spot errors and weaknesses in papers.
Google Maps is useless for biking or hiking. Barely usable, perhaps, for road cycling.

I have yet to find a better one than Mapy.cz. Great app, offline regional maps and (subjectively) beautiful map aesthetics.
Yeah, haven't false negatives been a scourge of at-home testing kits released in other countries?
> I miss Sun. They were fun.

I miss Sun so much. It was the glory days of Silicon Valley. I wish there was an employer as awesome as Sun around these days.
Exactly. I'd love to ask all the people criticizing this to work for free for a few months because "it's the right thing to do in a crisis".

I'm guessing there would be zero takers.
Whats with these ‘hit jobs’ on tech firms coming up every now and then?
I have a background in physics and am a first-semester OMSCS student. So no formal CS training, though my day job is computational geophysics.

The r/OMSCS subreddit has excellent threads where folks list their backgrounds and whether they were accepted. It’s a great way to get a rough estimate on your acceptance chances.
Probably not. Mitnick was just getting out of jail in 2000.

I was thinking along the same lines though. Who were some high profile hackers that were on the FBI/NSA most wanted list?

Max Butler maybe? Aleksey Ivanov?
>People are not simple cost-benefit calculators, and even if they were, it's easy to screw up that calculation

Yes of course there could be other entity that try to shift my perceived but its still on me to take that into account.

>Once you're hooked, it's no longer a fair fight

Life is never fair. if I have a susceptible personality, that mean I just have to fight it harder than other people.
Satellites Show Air Quality Improves in California
This is particularly important problem when playing poker.
Honestly, it’s probably the perfect time to dive in, now that async/await has dropped.

During my time in rust, the major changes in idiomatic code have been around Results/Errors, async/futures, and a few macros and syntactic sugar goodies have evolved. None of these evolutions were problematic to migrate to, and all of them were moving in the right direction, IMO.
First, I forgot to disclose: I am the author of https://dwheeler.com/trusting-trust .

As discussed in detail in that dissertation, if you are using diverse double compiling to look for malicious compilers, the trusted compiler does not have to be perfect or even non-malicious. The trusted compiler could be malicious itself. The only thing you're trusting is that the trusted compiler does not have the same triggers or payloads as the compiler it is testing. The diverse double compiling check merely determines whether or not the source code matches the executable given certain assumptions. The compiler could still be malicious, but at that point the maliciousness would be revealed in its source code, which makes the revelation of any malicious code much, much easier.

You're absolutely right about the general case merely showing consistency, not correctness. I completely agree. But that still is useful. If two compilers agree on something, there is a decent chance that their behavior is correct. If two computers disagree on something, perhaps that is an area where the spec allows disagreement, but if that is not the case then at least one of the compilers is wrong. The check by itself won't tell you whirch one is wrong, but at least it will tell you where to look. In a lot of compiler bugs, having some sample code that causes the problem is the key first step.
I see so many tactics of an expert negotiator here. Being incredibly nice and respectful. They were able to get what they wanted. They were able to convince you of an issue, with urgency, without any evidence of the use of your code other than the words of the officer. The story could have absolutely been fabricated to obtain access to the source code per an initiative to have access to cryptographic software, or it could have been true.
You know what the best shortcut is?

The menu key (windows and linux only)

Want to fix spelling of a word? Press menu key
Want to refactor? Press menu key

You name it... press the menu key.
> I've always felt that object-oriented programming as a concept (that is, define structures and then define functions to operate on them together) is useful: object-oriented programming as a language design is not.

What you describe here are abstract data types. Unless it involves inheritance and/or dynamic binding I wouldn't call it object-oriented programming.
A Congress Without Lobbyists and the Coming End of Federal Reserve Independence
This is so true. Half the VCs you talk to want you to re-locate to the Bay Area.

What does that mean to someone mid-career (you know, the type with enough experience to really do something big and build) - it means:

- They often have kids.

- They may have student loans from advanced degrees

- They have to worry about healthcare for their whole family

- They may be willing to live on ramen-noodle salaries, but dont want to subject their kids to it.

Unless seed funds and VCs start allowing more reasonable founders salaries, or allow non-bay-area founding locations with reasonable cost of living, the numbers often just dont work out

At this point in the discussion, I will often have a load of people jumping on me to "get roomates" or "eat pasta" or the "all schools are good" argument. Let me pre-answer those:

1. OK, so you have a family with children. Do you really want roommates?

2. Yes theoretically I can eat pasta everyday and save money. But is that really the life I want to give to my family (FYI, I can easily work on wall street and make a half-million salary, so really...)

3. No, not all schools are good. My high school for example had metal detectors on entrance. A staff member died from a heart attach after a confrontation from a student. No, not all schools are good. Perhaps you want to subject your kids to that, I dont.

So what do you end up with? Rich kids funding other rich kids building juice squeezers, after which they will just join the VC firm and perpetuate the cycle.

And as for the eggheads, present them with a shitty enough "deal" and it makes total sense to either go to a big firm or go work on Wall St. "Thought Leadership" is cheap.
The whole application runs on the client (in the browser). The server just serves up static resources. These are cached by the browser so the application will still work if you are offline. The result is much like the desktop applications you mentioned, but without anything needing to be installed.

The JavaScript application presents the UI and controls editing of a JSON representation of the MATPOWER case structure. This data can be seen using the JSON option on the Export page. The WebAssembly program contains GNU Octave and its dependencies. It is run in a WebWorker (background thread) and the JSON data is passed to and fro. The program that converts the JSON into Octave data structures and back again is available here:

https://github.com/rwl/octpower
Pixel by LabCorp
I'm sorry but if you think the NSA is the shadiest government agency on the planet, then you live in an information bubble.

Do you think the NSA is shadier than the KGB? What about the Iranian Revolutionary Guard? Or even the CIA?

I know people are upset about the Snowden revelations but there are much graver sins that have been committed by other agencies.
My startup was recently facilitating card testing attacks via the Stripe checkout on our website. It wasn't small purchases, but just started and cancelled transactions.

Unfortunately, I was not alerted by Stripe, but by a "customer" whose credit card number had been stolen somewhere and who saw on his statement our company name (I'm not sure how, since the attackers don't complete the transaction).

The startup is dormant, so checking the Stripe dashboard isn't part of my daily routine. Or even my monthly routine. Even when it was active, we had only a handful of transactions - it's a niche market.

I contact Stripe customer support only because I thought the email from the "customer" could be a phishing attempt. Stripe customer support saw the logs and helped me roll a new public key. When I asked why I wasn't informed of such impossibly high token creation, the answer was that it wasn't a feature. When I checked the dashboard logs, I found that there had been 75k tokens created in the last 28 days (100% card testing). That's 75k stolen credit cards that my website (and Stripe) have helped to validate - and just in the last 4 weeks.

For all the promise of AI, I'd be happy just to get an alert that 75k tokens were created in four weeks, while exactly 0 (zero) completed transactions in the same period.
My favorite teenager behavior modification ad campaign is the Australian anti-speeding campaign with the pinky curl.

https://www.youtube.com/watch?v=c2nvAFOk7x0

The subtext is "you are speeding because you have a small penis".
That reweighting doesn't address the most troubling selection bias: people choosing to participate because they want to get tested (e.g., because they think they might have had the disease).
Then never regret, accept that can choose but you may never make perfect decision.
It's a common phrase that means to drink enough alcohol to pass out. Presumably because otherwise sleep would be difficult to find, due to withdrawal symptoms.
> Its all about 1 hospital for a few weeks in one part of France.

We already have similar results from hospitals all over China. This is gravy.

Read the "smoking history" section of Table 1. https://www.nejm.org/doi/full/10.1056/NEJMoa2002032 and compare it to smoking rates in China over the past several decades.
Sure, before they extended quarantine to everyone and barred all foreign nationals from entering, people who exhibited no symptoms and could demonstrate a 'viable self-isolation plan' were allowed to voluntarily quarantine themselves instead of being put into government approved facilities. That's still something which is considerably easier to impose in New Zealand after only six known cases of a disease than in Western Europe, where people take day trips or even commute to other countries. Sure, NZ isn't [usually] cut off from the outside world, but it isn't a transit hub, somewhere you expect to visit to conclude a business deal or watch the away leg of a football match or a stop on a busy itinerary either.

For related reasons NZ only had six known cases by mid March when they imposed that restriction. Italy had 21k cases and 1400 deaths at that point, with a few hundred more dying every day from that point onwards.
How has 21 and Me been dealing with vials of saliva making it to their lab?

Shipping biological hazards is a solved problem.
If it was I wouldn't have asked.
>what's stopping the power going out to some of your servers

Redundant power supplies

>pushing a bug into production

Nothing, but again, SourceHut is demonstrably better in this regard: because it's distributed, a bug in production would only affect a small subset of our system, and the system knows how to repair itself once the bug is fixed.

And I don't think I need to apologise for kicking Golaith while he's down. Someone said they want alternatives, so I pitched mine with specific details of how it's better in this situation, and that doesn't seem wrong to me. I would invite my competitors to do the same to me. We should be fostering a culture of reliability and good engineering - and if I didn't hold my competitors accountable, who will? "Here's an alternative" has more teeth than "I wish this was better."
This is quite fun! One problem is that it's easy to accidentally spoil the answers by guessing a previous movie in a series or the original/remake of the movie in question - but that might be hard to fix automatically?
Ireland's approach and results seem to be nearly identical.
From the page:

> Why should I trust you?

> [...] If you're worried about both, consider this a proof-of-concept which you should replicate on your own server (using a separate domain name from the rest of your site).
"It covers C++17 plus a few likely features of C++20.", from http://www.stroustrup.com/tour2.html
You do realize regardless of resources they had at their disposal, the reason 9/11 happened was because of inter-agency competition and the lack of knowledge sharing between said agencies?

This is the primary reason the Department of Homeland Security was created in the first place.
>At the same time, yeah, it seems very plausible that a white guy in Japan announcing the Japanese pandemic response is run by fools would face blowback for it.

Haha, yeah pretty much that. And any blowback may also have been directed at his employer, Stripe. So there was certainly cause for caution.

That said, I don't think recognizing in late March that this virus spreads faster and is harder to control than previous similar ones was much of a leap of insight, and the article does seem a little too self-congratulatory over that.

Having that realization back in January is evidence of foresight, but late March not so much. But maybe the situation was different in Japan and merits it, dunno.
Story of Amazon vs eBay told by Steve Yegge here: https://medium.com/s/story/jeff-bezos-jack-ma-and-the-quest-...
> Unless the road has sufficient room for a bike lane of a minimum width of 5 feet, then you end up with a lot of close passes from cars in the right lane and also end up riding in the door zone of parked cars to your right.

Thank you for clarifying. Yes, cyclists riding in a regular traffic lane should absolutely take the center of the lane for all of the reasons you've listed. Again, make people choose to hit you; don't let them do it by accident.
I don't think this analysis really captures idiom questions, so while it's related, I'm not sure it's the right thing here :)
Unfortunately I agree here. We're not out to save as many small businesses as possible, but jobs. If we want so save small businesses, we need to earmark more money for small businesses only; especially should this extend beyond April.
> it's extremely uncommon that you have to put yourself in a position that you can be right hooked

I'm not so sure. I think there are definitely things to do that can make you avoid the vast majority of these incidents (don't bike to the right of a car when an intersection is coming up if you can avoid, obviously look at the car's turn signals before passing them on the right, pass on the left when you think someone will turn right, etc.), but there are plenty of instances where it is not avoidable and even experienced cyclists can get right-hooked (like biking on a bike lane on a heavily trafficked road with many side streets to turn off of).

> It's naive to think that we're going to train every driver to do the safe thing.

I think it's not an either-or. I don't think that we have to throw in the towel on every effort to change behavior - people have been convinced to stop littering to a massive extent, checking your right mirror seems minor in comparison.
It's not logic goes entirely out the window when you're addicted.
Show HN: I made a macOS app to let me draw on the screen while on video calls
Huawei P40 Pro Unboxing and Price
Sure, but if I'm signed up for a 4K plan and Netflix has entirely disabled 4K, they cannot possibly provide me what I'm paying for.

Note: I'm not even sure they have disabled 4K, it's just an example.
Now you're in trouble. You named a hypothesis but the experiment doesn't test that hypothesis does it? No one checked whether any or all of these people actually smoked. Weirdly they let them report different levels of smoking but don't include that data
And no one thought to ask about vaping (where there are far fewer chemicals and you would have a stronger case to pin point nicotine). Plus they included Chinese data which is mostly made up. And they excluded random arbitrarily groups (no ICU patients, maybe all the smokers went straight there?).

A good experiment is one where you learn something. You prove or disprove your hypothesis.

This paper doesn't mean anything. Like you say, the answer to the question si "maybe". Maybe nicotine helps, maybe it doesn't. Maybe literally any chemical helps, maybe it doesn't. Great, thanks for wasting everyone time...
We seem to have recently switched from 10GbaseT to SFP but with reasonably cheap 10GBaseT adaptors, https://www.servethehome.com/sfp-to-10gbase-t-adapter-module... with cheaper switches and more widely available cards. Even motherboards have switched to sfp, but you dont have to use fibre. DAC is another cheap option for short distances with SFP.
Is that surprising? They do stuff that is rather paranoia-inducing, like: illegitimate dragnet spying on our populous, breaking into networks to eavesdrop and gather secret keys/intel, backdooring random number generators, etc.
So the solution is to make currency flows centralized, traceable, and subject to government regulation? Fascinating...