skysight-inc/HackerNews huggingface dataset:
Thanks for responding Patrick, as I said I actually do believe that the claim you're making is not false.

I am always curious about/collecting patterns successful teams leverage for solving problems that I consider important.

Being able to communicate fraudulent payments that Stripe blocks is definitely one of them.

I was being a bit selfish when I asked that, my thought process was like; "Going forward data-collection is going to be scrutinized much more than now and rightfully so. If I ever run a business where we collect data for a very important use case I would want to make sure that we are able to communicate what, why, and how with utmost level of transparency)."

Hope that puts some context to my question, it was a good-faith question. :)
I drew the ire of our security services in a much dumber way sometime in the early nineties; after having seen Wargames, I set up my MicroVAX, rescued from a dumpster at the local bank, to ID as a DoD box whenever any of my friends dialled into it.

A few weeks into this, I get a summons to get down to the local police station ASAP. The commissioner then gives me a good verbal beating for being such a stupid kid; apparently someone had dialled into the uVAX by mistake or wardialling, figured it was a real DoD machine, had reported the security breach and had gotten all sorts of gears moving.

He wound up the sermon by telling me whoever had called him from the relevant department at military intelligence had chuckled and told him they kind of found it funny - but could he please get hold of me and tell me to stop doing it immediately, or else have my landline terminated?
YouTube is the only product there that can stand on its own. The others are complimentary services that may not generate much revenue independently, but they add tremendous value to an ecosystem of complimentary products.

Example, Android allows for traffic data to be sampled in real time, which is then sent to Maps.
But those 2 layers are at different level, one is for content the other for the HTTP protocol.
Yeah - people have to remember that they've grown up with maps where the northern hemisphere is twice the size of the southern. In reality NZ is roughly as long as the west coast of the US and covers roughly the same latitudes (and range of climates, though they're not as continental).

We have been very lucky that the govt put incoming people into voluntary lockdown quite early, China first, then everywhere - that means that lots of cases occurred in isolation and didn't spread (seems like we've received probably more cases from the US than elsewhere), of course some people were stupid, we kicked out some tourists who wouldn't do it.

5 new cases yesterday nationwide, and a continuing lowering trend. Still ~400 people with active cases so we have to be careful - we're nominally getting out of "level 4" lockdown next week, our "level 3" is roughly where California is now, that's predicted to last 2 more weeks - then apart from international travel, and at risk people still taking care we will largely be back to normal. Of course one mistake could scupper all of this.
>given that the data they're dealing with is films and TV shows, rather than, say, payment details.

I definitely have had to enter payment details on Netflix.com before
My thoughts exactly as I was reading. Analytics gathering that’s not related to UI improvements wouldn’t bother to collect information on pointer movements.

But it turns out to be a pretty good tool for bot detection. That’s why you can now just check a box to verify you’re human (Something about that sentence feels quite dystopian).

I just don’t see the issue with Stripe’s practice here. They have a clear business model, and selling user data could severely undermine that model.
If they are big in the sense of having a lot of employees then this is good news. If they are heavily capitalized low employee count businesses like a lot of tech startups, then that’s a bad thing.
Is that a security concern, an obscurity concern, or a readability concern?
How are you distributing the hashes?
That sounds a lot like picking cotton. If the immigrants don't become Americans (who supposedly "won't do this type of work") then what are they? It sounds an awful lot like keeping slaves. They even arrive crammed in the holds of ships, unable to speak the local language.

Americans will do the work. They won't if an excess of unskilled labor drives down the wages, but that doesn't have to happen. We don't need to keep an underclass.
> I probably caught the virus early on, and it wasn't particularly bad for me (even compared to typical flu).

Do you have reason to believe that, or were you sick in January/February and just kind of assume that was it, even though we were at the height of regular cold and flu season?
Teleportation Using Tensorflow.js in JavaScript
According to windows: 371790 files and 15.6GB.
> A long time ago I did a bit of work on disaster alert systems. They’re not dissimilar to fire alarms. The engineered purpose of a fire alarm is not merely to let people know there is a fire. Many will have already perceived the fire. The alarm, buttressing training delivered far before the alarm rings, gives you unquestionable and immediate permission to evacuate. We know that otherwise some people, smelling smoke and feeling uneasy, would look around the room, see other people not moving, and conclude “Who am I, to disrupt everything going on by shouting ‘Fire! Fire! Fire!’?” The history of humanity has seen far too many rooms where no one shouted ‘Fire!’ early enough.

This alone is a pretty interesting point. Can apply to many other systems that are much less significant than literally "life or death."
maps.me an offline map also have pretty good cycling routes.
Netlify Incident Report (NY area degredation)
This web page looks like it’s straight out of 1999 itself. Why does it require JavaScript to render?
Wow, I really appreciate that! My aspiration is to work on this sustainably full-time and expand to mobile, etc. so I do plan to eventually come up with a paid model for Intention (and would love your support when I do!). For now, it'll be free while I work out a lot of the kinks and make the product truly excellent. Thanks for your comment — really heartening to get this kind of feedback.
Strange how people in the same world live in such different realities.

I am lawyer and I think trial by jury is one of the most important features of democracy and freedom ever invented.
Interesting that you mention doing this (version numbers) with views too, I didn't think about that ...

... Maybe that could be a way to "perview" a database migration, before running the migration for real. There could be a table 'Some_table_view_v2' that shows how that table would look, after an upcoming data migration. And then v2 app server code, would use that new view. — Then one could be more certain that the data migration, will work fine.

(At the same time, one might need to be careful to let just a small a fraction of the requests, use the new View, if the view is a bit / a-lot slower than the real table.)
> This is a fundamental traffic design failure. Prior to the existence of bike lanes, motor vehicles never had to yield to something behind them (perhaps 30 or 50 meters behind them) while traversing an intersection.

This is true. The closest thing thing to this is checking for pedestrians, but even the fastest pedestrians aren't moving more than 7 to 8 mph and will almost always check for vehicles prior to entering an intersection. A cyclist could be moving anywhere from 10 to 20 mph and could be quite far from the intersection and still end up in a crash with a turning vehicle.

> My "solution" to this problem is to carefully but fully occupy the bike lane before making such a turn. Yeah, it's illegal

In most states in the US, it's not illegal. The law states that right turns must be made as close as practicable to the right hand edge or curb.
I gather that LibreSSL has an (unintended) OpenSSL dependency?

"LibreSSL is composed of four parts:

- The openssl(1) utility, which provides tools for managing keys, certificates, etc.
- libcrypto: a library of cryptography fundamentals
- libssl: a TLS library, backwards-compatible with OpenSSL
- libtls: a new TLS library, designed to make it easier to write foolproof application"

:shrug:
The practice of looking up algorithms by name dates back to that same time. The phrasing of the law, since they were treated as munitions, was that you couldn't even export something that was designed to have crypto bolted on. So you made it so anything could be bolted on and some of them just happened to be crypto.

The legacy being things like the blacklist/whitelist discussion we had the other day about case sensitivity in crypto algorithms. We still look up algorithms by string name (instead of enum or some other mechanism) decades later.
Leaving zealous guarding of IP behind worked pretty well for Linux, the de-facto standard in server-side and cloud OS.

I wonder how far would Apple's design go if other people and outsiders could hack on it freely.
Hi ddevault -- we would like to do this, and I'm very supportive in principle (and, per GP, we are perfectly fine with anyone not using Stripe.js), but our current product/engineering focus is on trying to build better tools for the businesses who are losing tens or hundreds of thousands of dollars to fraud. We think we have to first help the businesses who need help immediately. We'll probably then circle back to build products that explore more points on the [efficacy of fraud prevention] - [PCI burden] continuum.
Sadly, only a government can 'print' the money to deal with this situation as part of an integrated rescue/pump-priming to re-establish the interripted cash flows that have been used to pay furloughed employees, pay plane leases, maintenance, storage etc - this across the broad economy. The airline simply does not have the money to refund you - the entire broad national economic process has been shattered. They will have to simply print the cash to make it run and deal with this later.
>Learn from Apple.

When you're finally "winning" greatly expand your product portfolio?
Ok, we put the smoking kid in the title above.
Very interesting. By any chance do you have recommended engineering/product reading around this?

Even if they're blog posts from eng/prod teams that would be a huge favor.
We can't test people doing deliveries because we don't even have tests.

Even if we did have tests, at some point nearly everyone is going to have the virus- especially delivery workers. There will literally not be enough people to make clean deliveries.

Quarantining the population is easier for us because the majority of us have dwellings already. We do not have tests or ppe.
If you have a statement to make, please put it in words so we can have a proper debate. Otherwise, as you see, you're getting downvoted.
AA is also pretty well known for having very mixed success rates [1]. I believe the truth of the matter is people form addictions for a wide variety of social, psychological, and physiological reasons.

12 step programs work for about 40% of the people who participate, and a large portion of that success is attributed to the availability of such programs. [2]

I believe logic has it’s place. Like a 12 step program, it won’t work for everyone, but there is a place for rational approaches to treatment of addictions.

1. https://en.m.wikipedia.org/wiki/Effectiveness_of_Alcoholics_...

2.
https://www.psychologytoday.com/us/blog/evidence-based-livin...
http://archive.is/qRDZQ
a history of smoking is a condition
Worth noting that B3’s biggest win was higher peak throughput. It generated better code than llvm. It achieved that by having an IR that lets us be a lot more precise about things that were important to our front end compiler.

It’s not even about what language you’re compiling. It’s about the IR that goes into llvm or whatever you would use instead of llvm. If that IR generally does C-like things and can only describe types and aliasing to the level of fidelity that C can (I.e. structured assembly with crude hacks that let you sometimes pretend that you have a super janky abstract machine), then llvm is great. Otherwise it’s a missed opportunity.
When Zen first came out, intel had i3/5/7 and AMD proposed Ryzen 3/5/7 (1300, 1500, 1700 and then variantz of those, like 1750 or 1800) and then ThreadRipper (numbered 1900).

Intel saw they couldn't compete on the core count, and so they immediately announced the i9s, which were just the top i7s rebranded under a different name.

And then AMD just announce Ryzen 9 and kept the ThreadRippers. Long story short, i9 is a marketting name for the thing that would've been the most exclussive i7. And then AMD "paired" the offering just because they could. And I think they were also testing if Intel would launch an i11 ^_^"
Already done! https://github.com/simonw/datasette-publish-fly

They wrote about it on their blog: https://fly.io/blog/making-datasets-fly-with-datasette-and-f...
I decided to treat it as if it was a language I had never seen before. That helped a lot.
Too early to say for sure, but this seems to strike the sweet spot as far as nudging me towards my 'intention' without being so onerous that I simply disable it.

Thanks a bunch!
Lets be fair, unmaintained proprietary software has the same vulnerability.
On the other hand, businesses in other industries that are not so beneficial to society will happily charge gob loads of money for their services. IMO giving these companies some profit is a good thing, so long as the money is made available so that everyone can afford the product, and so long as it doesn't stop or slow it's distribution.
IIRC, Amazon Prime actually uses less obnoxious DRM on their own content than for 3rd party stuff.

At least, when I had a computer configuration that they said was unsupported for HD due to DRM reasons, I was still able to get Amazon's own videos in 1080p
This Is How China Succeeded Stopping the Virus
c'mon...

$ cd servo/components
$ rg -F 'panic!' | wc -l

276

Likely a fair amount is justifiable, but things like this ? https://github.com/servo/servo/blob/master/components/script... or this https://github.com/servo/servo/blob/master/components/gfx/pl... ?

that's a really strong code smell (or at least doing a similar thing in a C++ program, e.g. calling abort() / SIGTRAP, would be, even with a signal handler, a really really really long discussion in code review)
It isn't. The page says:

> The input files shall be text files.

"Text file" is defined in https://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1... :

> A file that contains characters organized into zero or more lines. The lines do not contain NUL characters and none can exceed {LINE_MAX} bytes in length, including the <newline> character.
Hi,

I was wondering if you might have a LinkedIn profile so I can review your experience and skills.
Maybe in the near future, we can use someone with your abilities in our company.
Not so much right now, winter is just starting
You forgot 4) China makes half the world's masks and was keeping them for themselves: https://www.nytimes.com/2020/03/13/business/masks-china-coro...
Duplicate: https://news.ycombinator.com/item?id=22937705
You seem to have tackled the "little monster" of nicotene-directed urges but not the "big monster" of urges that come from the programming in your brain. You definitely should read the book mentioned in the other comment, The Easy Way to Stop Smoking, by Allen Carr. Time to take down the big monster.
They're not /really/ connected, at least historically. But the author sees a reasonable progression in ease of use, while maintaining a lot of flexibility. And the idea of starting with a forth-like system, building a lisp-like system with it, then putting a python-like syntax on top of it is very interesting.
Mono culture provides an average or worse UX experience but the sameness element hits many humans subconsciously.

The JS problem was solved with jQuery.
Quantum entanglement offers unprecedented precision for GPS and more
I've had a hard time as well, but I think the reason is different.

Software work feels very similar to the games I enjoy and I do that 6-10 hours a day. Games effectively trained me to be able to understand and build complex systems, which is great, but now they're just games.

I prefer hobbies that get me away from a computer. It's a pretty limiting constraint -- computers are super useful.
Coronavirus in America: The Year Ahead
Sometimes you don’t even get enough for a nice mug.
Depends on what you mean as a "condition". In a medical record, smoking status is often stored as a top-level value tied directly to the patient, and also often coded into their condition list[0]. In the FHIR standard, a physician's observation of a patient's smoking history is usually represented with an observation resource, but often will be "upgraded" to a condition resource[1].

But, yeah, from a non-healthcare data standpoint, what a "condition" is really just depends on your definition.

[0] https://www.icd10data.com/ICD10CM/Codes/F01-F99/F10-F19/F17-...

[1] https://www.hl7.org/fhir/condition.html
Historically writing a compiler in the language that you’re promoting is a good way to really understand the limitations of your language.

I think this works so well because language designers tend to understand compilers better than they understand other software.
In Defense of Not Saving the World (2018)
I'm guessing not so much in January and February.
Would it make sense to update your blog post to include pc's response?
In my opinion, there's no moral issue with doing this. Fighting fraud and other kinds of cybercrime is an endless cat-and-mouse game. Although there are very bad associations with it, one simply does need to use fingerprinting and supercookies/"zombie cookies"/"evercookies" if they want even a fighting chance.

I think if it's being solely used for such security purposes, isn't shared with or sold to anyone else, and is carefully safeguarded, then it's okay. The main risk I see from it is mission creep leading to it eventually being used for other purposes, like advertising or tracking for "market research" reasons. I don't personally think it's likely Stripe would do this, though.
No, LibreSSL is a fork of OpenSSL that predates this vulnerability, it even predates the OpenSSL 1.1.x API break (some compatibility has since been added), and has an entirely separate and new TLS 1.3 implementation.

https://www.openbsd.org/papers/bsdcan2019-tls13.pdf (video: https://www.youtube.com/watch?v=MCVIBwGOwNY)

It maintains source compatibility with OpenSSL at an API and command-line level (e.g. openssl(1) utility).

LibreSSL cannot copy code from later versions of OpenSSL as they relicensed it under the Apache 2.0 license.
Come on, his comment is legally binding.
Hi,

Do you have a LinkedIn page by any chance?
I would like to review your resume and skills.

We will need some additional force in our company in the near future, and you might fit =)
A problem-scenario that comes to mind involves "set your own" config files, like when a codebase has a config.xml.dist and you're supposed to copy and customize it to config.xml which should never get checked in.
Err, that page says $192 for me.
The 1600AF is not a product. It's AMD clearing inventory. Infact the rumors are you can't find the 1600AF anymore but the 1200AF is popping up.
One of those on-site benefits is a desk.

With a phone, IT access, rental costs for the floorspace, heating, electricity and all the other associated costs that a company can save on by hiring someone remote.
Stripe is cheaper than most other processors and charges a flat rate for the transaction, regardless of the upstream cost. Amex is more expensive than Visa for example. A fact of doing business is that things will go up in price, as I'm sure your company also raises prices from time to time.
The Benefits of Forced Experimentation: Striking Evidence from LondonUnderground [pdf]
Actually in the article there's a different proposed explanation related to nicotine and its withdraw when in an hospital setting.
Honesty is the best policy here:

"When I was interviewing for the job with you, I was also interviewing with other companies. Your offer came in first and the job sounded interesting and the pay was good so I accepted. However, since then one of the other companies I interviewed with has given me an offer for a more interesting/better paying/shorter commute/etc. job and so I've decided to accept that offer. I hope this doesn't negatively impact you and that you can quickly find someone else."

Or something like that. Tells them the honest reason why, doesn't burn your bridge too badly.
Glad you like it! It does optimise for low (motor) traffic routes. But you'll see that there's a little "Any road/Paved only" toggle - currently the latter just filters out unpaved roads/paths, but my medium-term ambition is for it to be a bit more blasé on city streets too.
Personally I'd love to see someone explore the idea of incentives that heavily favor benefit corporations and/or employee-owned coops for commercial activity in direct support of human rights (assuming we're approaching the problem from a place where people agree access to healthcare, medicines, etc is a human right).

People who do the incredibly valuable work of developing drugs shouldn't be forced to live a life of squalor, and can be compensated generously for the value and complexity of their work, but I think most people's objections to pharma companies as they typically exist today are centered around companies reporting substantial profits and conflated ideas about obligations to shareholders.

Its a lot easier to feel good about a company reporting a profit if you're confident the company's governance structure ensures that profit is mostly lockboxed for future R&D instead of a shareholder dividend to people who may not even know their investment is funding medicine.
> We have lots of mature, debuggable languages to process text...

You mean like sed? Sed was written in the 70s and has been in mission critical stuff for decades on many platforms. What are you recommending that is more mature than that?
This should be a case study in how to properly handle bad press. Of course, it helps when you’re Doing The Right Thing™ to begin with, as it limits your recovery to simple reassurance of the user base. Still, it appears this is being handled exceptionally well.
This is right. You'd have to read a ton of our source code to see this first hand, but the reducer state has nothing about React in it. It's a lot of stuff like "what answers did the user give?"; "was the answer correct or not?"; "what were the start and end timestamps for each attempt?"; etc. If we maintained multiple clients, we could reuse that structure because it's all about the application, not about React.
> why netflix et al have reduced stream quality due to increased load?

This is not quite true - it's less about _Netflix's_ load and more about load on the _access networks_ (end-user ISPs).

They are seeing longer peaks, increased congestion (fewer folks are leaving their homes), and thus the reduction in default streaming quality by many streaming platforms was a move to limit congestion on these last-mile networks (and some IXs) where possible.

The EU & India anticipated the most congestion here, which is why you likely saw these announcements start with the EU before becoming global, as other ISPs/IXs/govts began to think about the same.

Disclosure: I work for Google in this space, but don't represent them here.