skysight-inc/HackerNews huggingface dataset:
Selling user behavior data to google in exchange for free analytic is exactly one of those markets which GDPR want to turn from being invisible for the persons whose behavior data get sold to visible.

If a hospital would in secret sell my medical records to drug companies in order to get free medical supplies I would object on several grounds. First because they are doing it without telling me. Second because its not their data to sell. Third because it create an unfair market where drug companies who are more ethical get out competed.
Google Drive and Google Calendar permissions are not that great. IIRC there is no distinction between individual CRUD actions, so if the app wants to create a file they also need perms to edit and delete.
The featured article
I don't think so, in Fedora already python == python3. I guess it's a matter of breaking & fixing many packages.
Well, it's GIF (slightly unexpected in 2020)
What feature?
The issue of course is that more regulation makes it that much harder for small business to hire and over time forces more and more of the economy and the labor force into the arms of big business.
Best Cybersecurity Practices to Follow While Working Remotely
FYI the docs are now up if you want to try it out and give feedback (open issues on github) https://github.com/greenpau/caddy-auth-jwt#overview
It's bad enough that I consider the site outright malicious and just flag these submissions.
Well, it's not science, but it may be productive. A lot of people will hear "it's not so bad" and "healthy people should get it and get over it", and go out and make others sick (including people that could die or be hospitalized).

It's not science, it's crowd control. People don't exercise good judgement reliably, so that might be counterproductive.
No, WebGPU will be easier to use than WebGL, because it doesn't have the global state. Global state is the worst thing about OpenGL and requires a lot of code to get it under control.
Windows 10x isn't for the destop.
This is the most common thing to cause alarm; Google's permissions are a little awkward.

We are not reading all your files - we are only reading/writing to the google sheets input as a link to our bot.

We're looking now at turning off access for anything outside Google sheets, so this message and permissions system is less alarming.
The browser can ask me if I’m willing to accept cookies from a given website and remember my choice. It already allows me to do most of this, just does not have the pop up UI.
Charting Sleep vs. Happiness
Hiya,

I'm employed by a company which provides an OAuth implementation which I think is worth evaluating; you can look at other comments on this post or in my profile for more details. Happy to chat more over email, which is also in my profile, if that'd be helpful.

Since I don't know your use cases or needs, I would like to take a step back and think about what a developer might think about when evaluating this type of decision. Here are some things I'd consider:

* what does your organization currently use? If your org has experience with an identity solution, I'd evaluate that very seriously. It might not fit all your needs, especially if it is focused on IAM (identity and access management) as opposed to CIAM (customer identity and access management) but since your org uses it and presumably knows how to operate it, start there.

* cost of a solution. What does it cost to run the solution every month? What costs to set up the solution? Don't forget to estimate the time of staff to operate--even if I handed you a great solution for free, it would take an engineer's time to get it up and running, and that costs money.

* features and functionality. These could be what you might think of as features (does it support passwordless, what languages have client libraries, what standards like SAML, WS-Fed, OIDC, LDAP are supported) as well as non functional requirements like tenancy, performance and data center locality (sometimes governments have requirements about where user data can live).

I've built a number of software applications and I can tell you that I wish I'd started out with a separate identity provider more often. It makes it easier to create a single sign on experience, add more applications, and enable new functionality. Add that to the fact that identity is a necessary but not sufficient requirement that doesn't often differentiate or add much value to your application. If you're building a todo app, people expect to be able to login but will rarely rave about how smooth the login experience is :) . If you find a solution that works, you can often drop it in and accelerate delivery of the real value of your application, while giving you flexibility for the future.

Finally, here's a video from RailsConf about the dangers of rolling your own user identity management: https://railsconf.com/2020/video/seyed-m-nasehi-why-you-shou... . I don't know the speaker, but certainly some of the issues his hedgehogs (no, really) encountered seemed familiar.
I find it somewhat ironic that IBM is struggling so hard to find COBOL programmers to keep mainframe alive, but they also insist on locking down z/os to the point that you can't get access to a terminal unless you already know COBOL and work for an enterprise spending millions with IBM.

You want nerds to flock to your platform, you have to give them access...
ah good point, thx :)
It'd be really fun to race Nmr/MassSpec/Ir/Raman teams to see who can make a cheaper home gamer analysis tool.

My money would be on mass spec, although it requires high voltage and vacuum. Back in my old university days Zbigniew Gasnaya made a home gamer mass spec that worked fine for what looked to be about 300$ in today's parts

3 high DC voltage plates, a harbor freight vacuum, an amp...
That sounds perfect. Login is the only legitimate use case for persistent cookies that I can think of.
No, I haven't but your service is making it literally impossible to browse with Firefox and Tor (understandably because you're here to make money from your customers labeling people like me as a threat in their dashboards not to enable people to actually browse easily). Even reCAPTCHA doesn't do that.
No, it's not orwellian at all.

There a ton of things you can't ask as payment for your services. It may be physical (let's say body parts), or conceptual (let's say the user freedom of speech). Those things can't be enforced by any contract, however you want to write them, and even if you somehow got someone to sign on it, it would still be void.

In the EU, we deemed suitable to add "privacy" to the list of things you can't legally ask a payment for when providing a service in the form of a website.

That's it. Maybe that's shocking for you, but it's not for me, it's not for the people I voted for, and apparently it's not for quite a number of people and so, it passed.

If you don't like how the law works, well, don't live in the EU ? You can find a lot of countries where this is isn't a consideration, and that may suit you better. Otherwise, well, you've been pwned by democracy. Tough luck !

(I won't begin to adress your comparison with the baker, because, well, I can't begin to make sense of it.)
Nah, the Illuminati are funding it. It’s fine.
This is the first in a series of cuts, and this cut didn’t effect anyone in tech, it’s mostly the front line service agents. We expect 800 eng layed off globally as has been reported in leaks.
Given that any most implementations of WebGPU will be open source it should be trivial for you to add a way to use pre-compiled native shaders to whatever implementation you choose to use.
Given my browser sends out a "Do Not Track" header with every request, explicitly opting out of tracking, I'm not sure why I should ever even have to click a button to opt out. DNT is supported by Firefox, IE, Chrome, and Opera, and was supported by Safari until February 2019. The reason Apple dropped support was insufficient support and adoption by sites.

The advertising industry is actively user-hostile.
Is this a buy signal for some of these travel or travel related companies I wonder? I can see them having a issue with cashflow now, but its not always going to be like this, people will need rental cars, maybe not as many, but they will need them. Potential consolidation first to reduce capacity and then price rises.
Really? I found it slow enough to basically not be able to use any of my regular build systems (Maven, NPM, Cargo, etc.).
Check out VS Code. It can now read and edit files inside of WSL remotely [1]. I've been using it on a new project and it works almost seamlessly * . I don't know if other editors will get this functionality, but there's really no need now for me to save files in /mnt/c.

[1] https://code.visualstudio.com/docs/remote/wsl

* One curious effect is you can't move folders from VS Code due to permissions. So I have to close it and use Windows Terminal for that, but moving folders doesn't happen too often.
Also highly dependent on the laws of the individual countries as to what counts as R&D spending.
Ugh, sounds painful. Luckily my Youtube habbits are only watching videos, so I don't need playlists or other functionality.
You'd think .. but no: Google is the default homepage, so they type in to the search field. It's mad.

Some have Bing as their homepage, if you've ever done IT training you might know the next line. They do it differently, they type "Google", click a link to go to Google, then type "BBC" (say), and click on the link for "bbc.co.uk". It's insane.
Mac-a-Mug Pro (1986)
It's starting to feel like we just built the Borg from Star Trek. Everything bigger, everything more centralized, everything more efficient and streamlined and outsource everything you're not good at. Economies of scale so massive you can argue they are just monopolies. Every new venture needs to scale to billions or it's not worthwhile. Some competition and innovation, but mostly just growth throw acquisition and assimilation.

Wasn't the Borg devastated by a virus?

TNG was such a good show.
It will likely be up to the courts to interpret around the edges, such as "can the modal have everything turned on by default?" That said, at a baseline it means that if you didn't click a "consent" button or some equivalent action, they can't assume they have your consent.
captcha is the cancer of the web
They're used to stonewalling USian regulators who will capitulate after a round or two.
23 tracking cookies? Cookies have other uses.
Seems technology sparing. One of the big things that this crisis has made me realize about uber/lyft/airbnb and other disruptive entrants in regulated spaces is that they have to have footprint in pretty much every market they operate in - their staff scales more w/ use than a pure software operation. Explains their "bloated" staff counts better than just "oh they're venture backed and blitzscaling" imo.
This says rural areas have lower influenza vaccination rates: https://www.sciencedirect.com/science/article/pii/S0264410X1...

For underlying data you may need to look at BRFSS.
I watched Aaron Patterson's keynote from RailsConf 2020 (these talks all just came out this week, Couch Edition) and I'm struck when reading your comment that it's absolutely possible to do this, and ultimately you may or may not reach a state where it's possible to "end-of-life" one or the other alternative without making anyone cry about it.

He spends most of the second half of the talk explaining (with a profiler) how two query implementations on ActiveRecord which should be doing pretty much about the same thing, actually perform wildly differently, and narrowing it down with data to understand why.

The talk is really interesting and I think it's a parallel to the current discussion in a way because, in Aaron's talk there were two implementations and one was obviously better performing (but unfortunately it was the one that is harder to write.) He argued mostly that, unless there is a reason for these two implementations to behave and perform differently, the one that is slower (but easier to write) should become more like the one that is "enhanced with a performance pro-tip" that arguably the ActiveRecord user shouldn't really need to know about. In other words, that the bad performance was actually a bug.

(tl;dr: the pro-tip is, to build your own pre-sanitized SQL WHERE clause strings, because you may save something like 38% performance in a pathological case, recovered time that the SQL engine was going to spend traversing AST and compiling.)

My point is that, exactly. If there is bad performance over here, it is a bug. Bad performance over there, bug. But bad performance over here, that can only be solved by swapping for bad performance over there?

This does not sound like a bug anymore, it starts to sound more decidedly like a trade-off. But given enough time, perhaps they will fix the bugs, and the two can be made to perform similarly, fixing bugs on either side, and the need for two alternatives will go away. So why would that be bad?

(And if it can't be done, or can't be done yet, why wouldn't we expect to see both implementations maintained as long as needed to find a solution that pareto-dominates them both?)
Narayanhiti Palace Nepal
Is the writing on the wall?

First Lyft, then Airbnb, and Uber... are all unicorns taking this kind of hit right now?
People are all driven by something, and it is not being gritty for the sake of gritting. Figure out what it is and you can hack yourself into whatever you want just by pushing this "get up and get it done" motivational button. Find reasons why whatever goal fits with your deeper purpose and motivation will be by definition.
I've been more skeptical of Grit after reading this:

A Skeptical Look at the Latest Educational Fad
By Alfie Kohn

https://www.alfiekohn.org/article/grit/

The gist of the argument is that grit may not be what we ought to aspire to sometimes. The justification for grit is circular. Why focus on just 1 thing as oppose to have several interests and activities?

The author approaches the topic from perspective of raising children / education. It looks like grit is about forcing compliance with shitty curriculum in schools.

Lots more good stuff in the article I linked to.
That was accurate until Focus v6. Since then, Focus switched to GeckoView, which is somehow different than Gecko, though I don't know how.
There have been games whose anti-cheat software incorrectly flagged Hyper-V hosts as being Hyper-V guests and would refuse to launch the game, but I believe they are all fixed.

All my Blizzard games seem perfectly happy to run on a machine that has Hyper-V.
Ask HN: Could Google create a Covid-19 risk score for locations?
When searching for a business on Google, the results will usually include how busy the location is historically and currently. It will also include the average amount of time a person spends at the location. I assume this data is collected from mobile devices somehow.

My question is, couldn't Google take the number of unique visitors and the average amount of time each spends at a location (maybe even the local infection rate) and calculate a risk score that you could view before visiting the location?

I can see why Google would not want to label customers as high risk, but I think this information would be helpful for the public.
Frankly, I'd be happy if sites just supported Do Not Track.
I think a "honeypot" HTML input field works well for anything not written explicitly to target your site. If any text is entered, mark as bot/spam.

<form>
<div style="display:none">
If you are human, please ignore this field:
<input type="text" name="Name" value="My Name">
</div>
Name:
<input type="text" name="actualfield">
</form>

Bots can't resist. Accessibility is fine, I think.

(Edit: suggested earlier elsewhere in the thread by tyingq: https://news.ycombinator.com/item?id=23090550 )
See also Comby, which is a language-aware sed that Just Works for many common use cases. It matches named :[holes] in your code (think capture groups) and can perform additional logic on the matches (think Rust's conditional match arms).

https://comby.dev/
I/O performance characteristics changed, your ability to share the same filesystem for both OSes changed, etc.
Legitimate. Thanks for bringing that up. Wasn't aware.
Oil Painting Timelapse – Grisaille – Fur, Tongue, Eye Patch, Ears, Lips, Teeth
I suspect that a key question is whether a probabilistic system is enough to bring agency into the picture. I can't be held (e.g. legally) responsible for my actions if they are the product of strict cause and effect processes. But it is also not clear if I can be held responsible for my actions if they arise from probabilistic mechanisms.
> There's an entire subculture that believes that individual ownership of firearms is going to enable them to carry out counter-revolutions.

I didn't address this part in my other post. I spent too much time listing out the things that didn't make sense to get to it :)

While I wouldn't phrase my beliefs that way, I'm confident I'm part of the subculture to which you're referring. We (well.. "I") don't have any illusions that a handful of guys with small arms is going to be carrying out a counter-revolution. From a political standpoint, we see the individual right to arms as a means to keep government wary of overstepping too greatly.

I think it is a positive thing for lawmakers to be acutely aware that the people they serve have the ability to do violence against them. After all - laws are ultimately enforced through violence and the threat thereof.

That said, while I'm personally certainly not going to be trying to overthrow any foreign governments, based on this story I'm better equipped than people who do attempt it.
This sentence is false.

"This sentence" = "This sentence is false."

[This sentence is false] is false.

"This sentence" = "This sentence is false is false."

[This sentence is false is false] is false.

"This sentence" = "This sentence is false is false is false."

[This sentence is false is false is false] is false.

...
How to Make $100 Fast? – 15 Doable Ways
> military ID

That ID is expired and has been for years. I've got one like it, similarly expired. The certs on them don't work, and most military facilities are pretty diligent about checking the expiration date - that's why its in bold on the front. They're not useful for anything, should've been replaced with a veteran's ID, very unusual to carry.
Surely they can require an account for all users. Of course then no one would register because who has time for that.
We don't couple it to chores. Chores are something everyone does because it helps the family. We're trying to be intentional about not connecting those concepts.

I think we started "chores" when she was 3. Obviously a three year old doesn't really do much, but she showed interest in feeding the dog and folding some blankets so those became her chores. We make a point of having both parents visibly do chores together.

We'll see how effective this is in another ten years, I suppose.
A look at the Two and Byzantine Generals' problem, popular consensus problems
Bill Joy's greatest gift to man – the vi editor (2003)
The iPad's new cursor and keyboard
Eng layoff is also coming.

This looks to be just for service workers and contractors (like recruiters)
It doesn't need to have a perfect metaphor for all possible cases, just something you can picture in an instant: 'behaves like a concating variable length box sequences'. It's a mnemonic / learning aid, not a formal spec. But I can stretch it :)

+: concat marbles sequence

* : concat prime factors sequence

++: concat box sequence

For * , it can also be reduced to + via logarithms. I just don't have a good metaphor for '+ over reals' this morning.
You could put 80K in the stock market, and if you have an emergency borrow against it at 2%.
Not quite, there were a bunch of other persistent data structures. Finger trees, PATRICIA tries, etc. And the perf was competitive. See http://blog.ezyang.com/2010/03/the-case-of-the-hash-array-ma... for example. In there Haskell's IntMap (powered by a PATRICIA trie) just beats out Clojure's HAMT without transients. In practice they're probably more or less equal, because in order to make IntMap usable for arbitrary keys and not just ints, you need to have a hashing step first that generates an int from an arbitrary key, so you have the overhead of a single hash.

Ah you're totally right RE transients. I don't know why I had the notion they were tied to HAMTs... Nonetheless I view it as one of the big improvements that Clojure brought to the scene.
If you block the domain in umatrix it basically does that.
For instance techcrunch redirects me to some "guce.advertising.com" url and umatrix blocks it https://imgur.com/bxGAbiH
Well, it makes a lot of sense that companies that make money in hospitality and transport would be taking a big hit. Other unicorns like Dropbox, Stripe etc that work pretty much exclusively online, however, are doing fine.
Yeah, in my experience whenever a new C++ feature becomes available there is always someone who really wants to shove it in the codebase everywhere.

As Carmack once said, if it compiles, it'll find its way in your codebase.
Is it just me who reads this wrong or everyone else?

The way I read this cookie "consent" banners are exposed as worthless so web sites should be no better off using them compared to not using them.
I think similarly. I have this heuristics that my life priorities occupy a decreasing amount of my attention, cutting in half by each priority level.

I consider personal life, like time to family, friends, out of this system. I am including here things that I must focus on doing properly to improve myself and my life in a number of dimensions.

Goes like this, priority #1 gets 50% of your attention, #2 gets 25%, #3 gets 12.5%, #4 6.25, #5 ~3% (which in practice, rounds down to zero most of times, so for #5 and beyond I effectively equal to 0%).

I define "attention" as a loose mix of your time and your mind space.

So if you have a day job, kind of by definition it's your #1 priority. No matter how much you hate it, consider unimportant, or think you are neglecting it, you are still 8 hours of your day doing that, so it's your #1 attention priority. It has 50% of your attention.

My current #2 is my side-project that I hope to earn enough money to become my day-job and #1. Freeing space for other things I want to do (coincidentally enough, also reading books and playing soccer)
Note: this is from Didier Raoult's group, the one who published a rather controversial study on a very limited number of patients last month.

I just skimmed through the paper, but what attracted my eye is the mention of severity at admission being a risk factor (but the confidence intervals are huge so I don't know what to make of it).
Real interest rate are ususally defined as Nominal Rate-Inflation, so with inflation at virtually zero, the real rate is 10% for them. To be 35% we would need deflation of roughly that much. Though a 10% real rate is bad enough.
Thanks! There's a product called a moon jar that we have found some success with and gave us the idea.
Spot 2.0
The link you provide is not a DPA nor a EU body. I would advise getting better sources, as cookies to remember user preferences are allowed without consent.
I wouldn't think of it as "all unicorns". Lyft, Airbnb, and Uber are especially exposed to COVID related issues because their revenue sources, like the travel industry, are directly affected by all of the COVID countermeasures.

However, I think you can make a pretty good argument that it's going to turn into a general economic depression, which means pretty much every company is going to take a hit sooner or later. Millions more people (in the US) will be struggling to make ends meet over the next few months, and that's going to have bad ripple effects.
Are you familiar with https://portfoliocharts.com/portfolio/golden-butterfly/

20% Total Stock Market

20% Small Cap Value

20% Long Term Bonds

20% Short Term Bonds

20% Gold

You could replace short term bonds with Cash, TIPS, CDs, Bitcoin.
Allergenic Foods and Their Allergens