skysight-inc/HackerNews huggingface dataset:
I do this as well, I find the walking directions are usually the most direct 90% of the time for cycling.
> Both SSH and SSL base on TLS.

You are very mistaken. OpenSSH only uses OpenSSL (or LibreSSL) as an optional dependency for the libcrypto primitives (RSA/AES etc). NOT for libssl.

The SSH protocol has nothing to do with either SSL or TLS.
TLS 1.3 has been out for a while now, and always promised performance improvements (for example, see this Cloudflare article from Sep 2016: https://blog.cloudflare.com/introducing-tls-1-3/). I wonder why Netflix is only getting to it now? Even if some clients didn't support it yet, seems like they could still introduce support on the server side?
Ah, I just assumed you were in the US because we actually have a Department of Defense.
Achievement Is Not Normal
Coded a community sharing webapp in my 2 wk self isolation
Ok, but please don't post unsubstantive or flamebait comments to HN.

We detached this subthread from https://news.ycombinator.com/item?id=22936488.
I would say anything above your costs of living would be profit in a wage, no?
TL;DR: Describing "quantum engines" requires a quantization of classical thermodynamics.
Whats poppin
So with server side rendered code you can render in dark mode and send that back in the html markup of the request -- no latency on seeing the style applied. You don't need to just store the user preference locally and apply it with js. You can even store the user preference on the server as part of their profile (:o) and then NEW browsers will get the dark or light mode styling. If I am very wrong let me know but I still think it is new web devs getting lost in a wilderness of frameworks and not realizing that the escape from the haunted forest is just to walk north for ten paces, because they lack a basic compass.
The problem isn't the profit, it's the kinds of behaviours to which profit is allocated.

If profit really was a reward for good behaviour, no one would have a problem with it. (Except bad actors.)

In this situation, the goal is to get as many high quality tests out as possible.

If this is truly a reliable and useful test and results are available quickly, then the ideal level of profit is one that maximises that result - i.e. a small profit on each kit to encourage volume sales.

If the tests aren't reliable enough to be clinically useful and they're being sold to the public without a context (i.e. no information about what the result means in terms of changed behaviour or risk) then the kits should be banned for wasting everyone's time and money.
Yes, there are always hidden cognitive costs. Many claims of "irrational" behavior by economists or psychologists don't account for them. Or their model failed to consider the whole picture or long term concerns.
Agreed, the NSA is a large organization with many moving parts. If the guys who suddenly find themselves needing to break encryption have natural talents that lend themselves more toward tracking people down and talking things out of them, it makes perfect sense for them to start chasing some weird leads.
Hahaha that sounds excessive!

JavaScriptCore does it differently: many of our benchmarks are either interpreters or compilers written in JavaScript.

One of those benchmarks, Air, is just the stack slot coloring phase of JSC’s FTL JIT (that JIT has >90 phases) rewritten in JavaScript instead of C++. It runs like 50x slower in JS than C++ even in JSC, which wins on that test. So, probably it won’t be possible to write a JS VM in JS anytime soon. I mean, surely it’ll be possible, but it’ll also be hilariously shitty.
You describe a different situation than thread parent described.
Ask HN: What stack should I use for my mobile app?
I am about to start development on a mobile app prototype, which, if we can secure funding, would be used by hundreds of thousands of people daily.

I would like to build the prototype on the same stack as I'll use for the final product to start getting my head around architecture choices and third party libraries to include.

I'm predominantly a web developer, having experience in Ruby on Rails and Django on the backend side of things and having worked with React, Cordova (Phonegap) and Angular. I've built some mobile apps using these technologies, as well as a small mobile app using Kivy.

The app will largely be informational with some data capture and lots of updates pushed to users, probably several times a week.

So based on my experience, I was thinking of going with Django Rest Framework and React Native, as I've built an app with this before a few years ago. But I remember dealing with the state on the UI side being a bit of a pain and was wondering if maybe going with Django, GraphQL (Apollo) and React Native wouldn't be better (even though I don't know GraphQL yet).

Do I have better options? Would my suggested stack be able to eventually handle the workload? Obviously the API will have to sit on some solid cloud infrastructure as well.
Thank for the clarification.

How do you find gigs/customers in the US?

I'm in nearby Austria and would like to do the same. The salaries here are a joke.
It's funny, because I do the exact opposite.

As a developer I usually have a pretty powerful machine, and I've found that debug mode is a good way to approximate slow computers, and something that is unbearably slow in debug will bother some users later on.
It’s frustratingly hard to find a modern laptop with a replaceable battery. Which laptop did you get?
You can already selectively include it on pages. And it doesn't make sense to me to "disable certain [parts of the url]".
Interesting! I didn't know, for example, about Secular AA.

Reading their brochure, however, it seems they are effectively not a 12-step program, since they ditch or ignore most of the steps (a must if they want to remain religion-neutral, since about half the steps mention god, a higher power or prayer in one way or the other).

From their brochure:

> "What about the 12 Steps? How can you
be A.A. without following them?
A.A. co-founder Bill W.’s thinking evolved on many
issues [...] he wrote that, “so long as
there is the slightest interest in sobriety, the most
unmoral, the most antisocial, the most critical alcoholic may gather about him a few kindred spirits and announce to us that a new Alcoholic Aonymous group has been formed [...] these rampant individuals are still an
AA group if they think so!”"

That's a very lax definition. It's very hard to measure effectiveness with this...
How about similar things in other languages? Chinese, German maybe?
Defining Common Network Terms
Je vous souhaite bonne chance!
Existing within a system is not inherent endorsement of that system.
What kind of games are you playing? I'm guessing for something like Quake, particularly if you're good, even 50msec can throw things off...
Open != good. "Not Invented Here" doesn't just come about from anticompetitiveness or stubborness, sometimes there are real problems encountered - especially in edge cases or at scale - where trying to fix them through navigating open standards vs making your own thing that works better for you is a really viable option.

See also Google's reinvention of things like build tools internally. Lots of open source versions, but they caused plenty of engineering pain of their own.
I did a project back in 2013 that made unikernels for really old games. One was a bare-metal z-machine interpreter to instantly bootup interactive fiction game. Another was a Linux+C64 emulator+modded game (one of the first graphical adventure games, Below The Root, from 1984).

http://arcade.saul.pw/games/
I bought an NSA mug at the National Cryptologic Museum in 2000 or so. I was amused when it developed cracks and started leaking around the time Snowden was just getting into the news.
Has anyone taken a look at the underlying data set, specifically for the compensation aspect? https://drive.google.com/file/d/1QOmVDpd8hcVYqqUXDXf68UMDWQZ...

Each record has a currency, a "CompTotal" (number of units of pay currency), a "CompFreq" (periodicity of pay; yearly/monthly/weekly) and a "ConvertedComp".

ConvertedComp is CompTotal multiplied by the number of CompFreq periods in a year, converted to USD based on the specified currency and then clipped at the 98th percentile which seems to be $2M.

It seems ConvertedComp is what analysts are intended to use.

Of the United States-based, developer-by-profession responses who gave a salary (~13,500), about 14% specified their CompFreq as something other than annually. That subset has a mean ConvertedComp of >$1M.

On the other hand, there are a grand total of 17 responses for ConvertedComp of >$1M for those who specified their CompFreq as annually.

Color me suspicious, but I suspect a large fraction of the responses in that subset gave annual compensation rather compensation-per-period; undermining the calculation of ConvertedComp quite considerably.

I don't know which fields the author actually used, but I have a lot of questions about the usefulness of this data.
I work at a company with dual paths (management vs individual contributor) and a requirement to work at the code level would cap your progress upward on either path. As a senior engineer you are expected to spend significantly more time doing architecture work, mentoring other developers, and other non-code activities.
I thought this was product was dead.
Not a lawyer, but not that surprised that the laws you refer to are growing technical loopholes. Here are a couple things that mouse movements can identify in case no one knows what I'm talking about:

https://www.researchgate.net/publication/221325920_User_re-a...

https://medium.com/stanford-magazine/your-computer-may-know-...
The blog writes that ,,Duo already uses AI to reduce audio interruptions'', but WavenetEQ was a Pixel 4 only feature as far as I know. Is it rolled out to everybody as well?
Because fraudsters' browsers/clients/scripts are also set up to record no history or cookies, and otherwise evade detection/categorization as much as possible. Somewhat ironically, in order for them to accurately distinguish between privacy-conscious users like yourself and actual criminals, and to block criminals from making a purchase while not incorrectly blocking you, they need to collect additional data.
But it then prevents redistribution of the container images in a legal manner, because the game files themselves are still under copyright.
This doesn't explain getting a fake NSA number from 411.
Same. I could have swore they canceled this. Maybe they had a chance of hear or I’m confusing it..
Maybe it was, but right now it has gotten repriotized because of the coronavirus and Zoom valuation.

Anyways I welcome the competition.
Those aren't reconciliations, they are contradicting the assertion that this is just another seasonal flu by identifying a way in which it is worse. I don't know what you mean about having "wildly divergent facts"?
Likewise, but also I now realise, after a long break I really like programming with "system languages". I get a certain amount of satisfaction that I don't get with higher-level languages, where I spend so much time plugging together half-built crappy modules.

Partly this is because I have realised, I like knowing the nuts and bolts of what is going on in a computer and solving problems with consideration of how it will run. It also has less magic and crappy layers going on.

C++ has evolved a lot from what I used many years ago, and it looks mostly for the better, thankfully we have escaped the 'thou must OO' age.
I wonder if what the hardware limitations are. Given the current state of AV1 encoders, I imagine there has to be hardware encoding to make this feasible.
On the Genealogy of “Art Games”: A Polemic
When you emit C, you're limited by C, at least if you want to emit C as opposed to inline assembly wrapped in C. For example, it's harder to have a function return more than one value in C than it is in most architectures, you can't do things with processor flags (on architectures which have them), you're at the mercy of the C compiler's optimizer as to vectorization and loop unrolling, you can't always preserve semantic information in the source code even when a "reasonable" compiler would be able to use it to improve the machine code...

LLVM was created to replace emitting C, by providing programmers a way to turn source code into a representation that is lower-level than C without having to write the whole optimization and assembly code generation pipeline.
Note that noexcept(true) in destructors has been the default for a while. It was a breaking change, but there is very little code that can handle throwing destructors that in practice jad little consequences.
This looks pretty similar to https://lobste.rs/

Is it the same codebase?
Makes sense, but I don't trust it to never be tied to PII.
I'm confused- as far as I'm aware, there are three different video calling products at Google - Hangouts, Meet, and now Duo? What are the similarities/differences between them?
How many hospitals or morgues should be overrun before it becomes evidence that we are not dealing with the same kind of problem as we do every flu season?
I agree with you in general, but this is a big step up. This is essentially the most invasive, intrusive technology that can possibly be deployed on the web - because fraudsters (and other cybercriminals) use the most tricky, dynamic evasion techniques.

And this is regarding website owners adding a script that may run on every page of their site; the consent is for the website owners who are using Stripe and deciding how/if to add their script to their pages.
> I think this is one of those situations where statistics can't be applied because if you can't guarantee a 0% false positive rate, even one person being convicted wrongly can't be tolerated.

You can't guarantee a 0% false conviction rate even when requiring unanimity. That's why I said if the false conviction rate was the same, but the true conviction rate was better, clearly that's a better scenario.
Rapidapi and cloudflare workers based subscription API for spotify metadata
Probably should not have named a product or URI as ‘albatross’, lest they get a dead one around their neck.

I mean, really, to NOT accept a freee vulnerability and be force-herded through a portal full of terms and condition. Me think IBM lawyers are trying to rope too much of the free Internet in. Oh wait, they did ... and failed.
Came here just to leave the following link : https://www.goodreads.com/book/show/367720.Software_Configur... which is the Berczuk book about such patterns. I read it years ago, it's good.
You send your DNA to someone every time you post an envelope. LabCorp is the largest provider doing tests, when you are tested at hospital for example, most likely they will send your sample to them, so there is no difference with doing it at home.
Personally, I would do (and have done) certain kinds of work without monetary compensation because I want to see it done, or because I think there's some other upside.

However, I probably wouldn't ask that of LabCorp in this circumstance, because what I want from institutions providing testing is scaling up while providing an effective product/service. Not getting revenue makes that considerably harder.

Public subsidies might make a lot of sense, though, especially to the extent that everyone wins the broader/deeper test coverage is, but not everyone has a disposable $100.
Well, I wrote "consumption" for a reason. It's arguable that Manhattan real estate is valuable largely due to the land value, and land is an asset that isn't really consumed.

Externalities are a cop-out. There are always externalities, but they're just used as an excuse for special pleading. If you average a large amount of consumption, the amount of oil per dollar, and the externalities of burning it, are going to be fairly consistent. The type of consumption is dwarfed by the amount of consumption; that's the claim I'm making. It's not that the "environmental choice" isn't better all else being equal, but it doesn't make up for hardly any consumption as a percentage. If you're not saving significant money as a percentage with your choices, you're not improving your lifestyle significantly.
Sympa ! Je ne connaissais pas
Hello! I'm Chantal, a Junior Technical Recruiter from GitLab. It definitely sounds like you've got a good plan so far. We love when folks contribute, and it's a way to get to know some GitLabbers.

Another way to stand out would be to make a nice cover letter if you have the time/resources. I can still recall several awesome cover letters I've read and know that it does make a difference!

I'd be happy to have a video call with you if you'd like to talk more about this topic. I was a Junior Backend Engineer with a non-traditional background, so I've gone through a similar experience!
Thank you for releasing a Firefox version along side the chrome extension.
edit: I'd argue that this isn't devoid of morality since it's literally a zero sum game, and the negative externalities are pretty clear. Making money at someone else's expense is definitely a moral quandary.
That may well be true. But still, this story influences my _guess at the likelihood_ that this author would do so in the direction of "more likely."

Likelihood that the authors/owners of software are willing to cooperate, and capable of cooperating, with adversaries is an important metric for comparing options. Very high profile open source maintainers are less capable, due to the oversight of the community. Anarchist- or security-absolutist type personalities are less likely. The author and his project don't fit either bill.

I'm not arguing that this is the only metric that matters when considering one's options. But it does matter.
AFAIK there aren't any current mobile devices that have native AV1 playback so this is all in-software for now?

Though if the goal is to allow for extremely low bitrate use it might not chew up too much of the processor and battery.
Why would you think that? Were you thinking of Allo?
And every SVP refrag means killing the predecessors initiatives to “make a mark”.

Google are terrible at products
The Greatest Minds in DevOps in Animal Crossing
> how could they expect to distribute it in a way that a bad guy was more likely to download than by going to the official site?

Man in the Middle attacks work even if one goes to the official site. It could have looked something like this.

1) User attempts to go to the official site https://...

2) NSA intercepts the message, downgrades to http and sends back a dummy site with the malicious binary [1].

3) The user doesn't notice the change and uses the malicious binary.

Today, a series of steps have been taken to make such an attack more difficult. Now browsers tend to try to warn the user and sites can take advantage of HSTS preload lists[2]. However, this article was written about an event in early 2000 when many of these safeguards didn't exist.

[1] https://en.wikipedia.org/wiki/Downgrade_attack

[2] https://blog.mozilla.org/security/2012/11/01/preloading-hsts...
Maybe you're thinking of Allo which was released at the same time. Pretty sure Duo is fairly widely used.
A Gameboy Supercomputer (2018)
A brighter Apple: XCode on iOS 14
If I had to guess, the AV1 encoding is being done server-side. AFAIK no phone has a hardware AV1 encoder (or decoder for that matter). The bitrate is low enough that a software decoder is likely fast enough.
Sure, but the border was sealed after 100s of thousands of tourists, and hundreds of infected cases arriving from overseas. This was before we had any ability to test for the virus. Returning NZers were asked to self-quarantine for two weeks, and I’m guessing the majority did.

NZ has temperate weather - it is not a hot country: https://weatherspark.com/m/144837/3/Average-Weather-in-March...

In March in Christchurch (approx 1/10th NZ population) the temperature would be called “cool”. I think you are rationalising.
Pleeeease tell us why you want that
Just switch to Gopher :)
Thank you for bringing hard research to this discussion!

I find it interesting that the one that contemplates authentication requires supervised machine learning and goes on to explicitly state that "analyzing mouse movements alone is not sufficient for a stand-alone user re-authentication system". Taken together, this suggests that a sizable corpus of mouse movement data known to be associated with one user may qualify as PII under some definitions.

Again, thank you for sharing this timely information.
People are scared. It looks a lot like selfishness, but it’s not. Lots of people in this forum read your words and want to help but they’re scared. What if they make it worse? The more they care, the more scared they are, the more selfish they look. I guarantee that there are people out there that feel just as bad as you, and you can make them feel better too, if you’re not too scared to help.
Well, that's a shame. Doing architecture work and mentoring other developers absolutely can include working with actual code.
> In addition, as only 2 states in the US allowed for a majority conviction, the data set would necessarily be small

Small data set does not necessarily entail it's not statistically significant.

> So while I understand your point, as you stated, we have no other information and as such the numbers we would need to validate it simply don't and won't exist.

"Won't exist" is a pretty strong claim. I posited but one example where the original claim was false, but I can probably come up with dozens of other scenarios where simple majority or unanimity are clearly inferior as the only two options.
Right. They could possibly do this and have done it before. But they wouldn't need to request the source code from the author in order to do it - they could patch the binary. Also, it's a pretty involved thing to do and not that easy to pull off in a situation like this. For example, presumably all of the targets already have the software installed, and they may have no reason to visit the official site again; especially if updates are very infrequent.

Finally, it wouldn't do them any good for trying to crack things that are already encrypted with it, which from the conversation does seem like was at least one of their goals. (Could be deception, but that's the most likely reading, to me.)

I'm just saying that that doesn't seem to be a likely reason for requesting the source code.

The reason is likely what they said it was: they want to look at the source code to see if there's some way to crack the encryption faster than they otherwise could - for example, some bug causing key generation to be somewhat predictable.
> And let's not speak of the amazon/ebay duopoly that's developed. Google could have fought against that but chose not to in the hope of slightly increased advertising revenue.

Froogle (est 2002) has continued to exist in one incarnate or the other: https://en.wikipedia.org/wiki/Froogle

Besides, Google has partnered with e-commerce firms in the US (Walmart) and in India to presumably counter Amazon. Walmart and Google are the two largest mobile payment processors in India through PhonePe and Google Pay, respectively.

https://en.wikipedia.org/wiki/Great_Online_Shopping_Festival

https://economictimes.com/small-biz/startups/newsbuzz/walmar...

Google has invested and continues to invest in startups, and I'm guessing a few of those must have been strategic investments targeted specifically to counteract that duopoly.
> 'LC_ALL=C'

Wuff, reminds me of the completely incompatible difference between BSD sed and GNU sed
Hangouts doesn't exist anymore. There's just Google Meet (business-focused video conferencing) and Duo (consumer-focused video calling).
I anecdotally in my 20s found that a lot of non drowsy cough syrup (DXM) is great for any kind of withdrawal.
Amazingly realistic VRChat room with dynamic shadow
AFAIK - Hangouts is going to be nuked at some point. Meet is for gSuite, Duo is the product for consumers.

TBF both Meet and Duo have been awesome, Hangouts has withered on the vine. It could have been a unified solution but... Google.
can you formalize/quantify "understand" please
> Le GoOgLe KiLl PrOdUcT Am I rIgHt PlEbBiT?