skysight-inc/HackerNews huggingface dataset:
Text of email from DO:

> Hi there,

>Yesterday we learned that a DigitalOcean-owned document from 2018 was unintentionally made available via a public link. This document contained your email address and/or account name (the name you gave your account at sign-up) as well as some data about your account that may have included Droplet count, bandwidth usage, some support or sales communications notes, and the amount you paid during 2018. After a detailed review by our security team we identified it was accessed at least 15 times before the document was taken down.

>Our community is built on trust, so we are taking steps to make sure this doesn’t happen again. We will be educating our employees on protecting customer data, establishing new procedures to alert us of potential exposures in a more timely manner, and making configuration changes to prevent future data exposure.

>We believe in holding ourselves accountable to our customers and that includes when we make mistakes. While we can assure you that your Droplets and other systems you run on our platform have not been impacted by this mistake, we are committed to being transparent anytime we feel your data has been used in a way that does not align with our values.

>We welcome the opportunity to talk through any questions or concerns you may have — just reply to this email.

>Thank you,
Trust @ DigitalOcean
In some sense that has morphed into login with Facebook/Google
Removing UTM Parameters with Apple's Shortcuts
I still play piano on omegle occasionally. Dudes will cancel the chat immediately.

One time I got a girl who was just talking about her shitty relationship with the chat on mute. I had to skip her myself.
I'm not much of a weapons connoisseur so I don't know really what's out there, but it's striking to me that the alternatives you mention are even older than the gun which as far as I know is pretty ancient. Are there any non-lethal long-range suppression technologies? Maybe smoke grenade launchers?
No, I have a very good understanding of how most of my users, i.e. "normal" people, operate. I would suggest you pick a random relative outside a STEM field and discuss what their security requirements for a blockchain wallet are.

I haven't "made up my set of Nerd rules." I have learned what the general expectations of my users are.
Safari seems to do this too.
What is wrong with java performance? I think the garbage collection in Java is probably (if not) one of the best.

Start-up times are an issue. But once warmed-up the JVM is very performant provided tuned well.
Anecdotally, I think there's a difference from early/core Go adopters who tended to be more from a Unix background vs. the majority that "want to learn" go who're choosing VS Code not because of the Microsoft ecosystem but more so because of its lightweight but IDE like environment. In other words I doubt the fact that there's any correlation between text editor choice and the desire to learn go.
The developer experience is a horror show, and the people who control it have been making head-scratching decisions for years (you forgot to mention releasing libraries via SDK manager and git repos long after switching the recommended build system to Gradle and encouraging people to use Maven repos for dependencies), but that doesn't mean the OS architecture isn't sensible. Especially for current app-consuming use cases, the security model makes far more sense than MacOS's security model.
A revolutionary old vaccine for physician burnout
90% of the cases... yes, it would be better.
List of Top Instagram Hashtags per Industry
This is why it's not hard to bill $1000-1500/day as a freelancer with the right skills. One of those skills has to be sales, though.
Next-Generation Virtual Assistants Will Be Far Sexier Than Alexa and Siri
Facebook release multiple times a day (or they did), so the browser cache is irreLevant.
It's about a 4 hr learning curve from react - but I'm not shilling svelte, just showing that there are already superior models. Pre-compiling is really objectively better in every way except popularity, and that will change because of its betterness.
You are lucky. My present ISP, Verizon, does not give static IPv4s, and hasn't even heard of IPv6 yet.

My previous ISP, Comcast, required a business plan, statics were $5/month, and they even changed the static IP on me, once. (They issued the same IP to another customer. I complained, and they told me I had to rotate.) Did have IPv6, though.
If you only had farmers and individuals purchasing their goods allowed to trade futures, there is direct incentive for either party to manipulate the physical market through their actions, in ways that they only could, that wouldn't necessarily make any economic sense and could have spillover effects into the real economy. By having a more open market for futures, you theoretically have a more efficient market for all participants which you mention in your last sentence.
> Yes, I'd say most people on HN are aware of this stuff.

In the abstract (in principle), sure. But how consistently do people exercise this awareness during real-time behavior?

> It's just a slow process of education

Ideally. But often, but it often seems like many individuals and communities very much prefer taking the shortcut of "see no evil, hear no evil, speak no evil". Or in other words, those other people suffer from that, but not us. No siree Bob, we are fully conscious and logical, at all times.

You and I seem largely in agreement, but I wonder if we agree on how well we here at HN, as a community, execute these principles. In my experiences, most people are "not very fond" of even discussing the topic.
My experience too. The whole "we don't use a framework" sounds great but it always turns in to some sort of home grown framework that is poorly documented, has bugs, and isn't open source so you can't take it with you when you leave.
Any Anthony Beevor books really - Stalingrad, Berlin, D-Day. Max Hastings can be good too - but harder to read

On a history topic im liking Dan Snows podcast, and Al Murrays We have ways of making you talk podcast
Except Java is extremely performant and if your engineering team doesn't know exactly what they're doing there's often a good chance they'll both use more time and create a slower product with a low level language as far as I know.
just a normal cheap digital ocean vps running python + starlette and redis as a data backend, nothing fancy at all
Liquidity is the standard answer.
> It's probably cost them a lot of lives

Who's measuring the cost of lock-down? I think it's going to show to be very costly (perhaps net-negative) as time goes on. Cancer, heart attacks, strokes, deaths of despair, economic disruption, etc.
Ask HN: How to Transition from Data Science to Cyber Security?
Hello HN,

I have been working as a Data Scientist for the past three years. I feel that the number of companies earning money through DS is limited and hence my career might hit the pavement soon ( I might be wrong here.).

Hence I want to transition into another Domain where Data Science skills can be helpful.

Would it be easier to transition from DS to Cyber-security? Which branch of Cyber-security would be easier to transition, if at all?

Anyone here who has made this journey, and can provide some advice?

Thanks
Ah! I stand corrected. Mea culpa.
I don't think they are very related.
Hole punching works for firewalls, but is unreliable for NATs. Note that most home routers are Linux based, and Linux uses symmetric NAT, where hole punching does not generally work reliably.
Garbage collectors are 3x more likely to die on the job than a cop
https://qz.com/410585/garbage-collectors-are-more-likely-to-...
Yeah, this is really two posts: (1) build a PoC, and MVP; (2) build a future-proofed architecture/platform.

You shouldn't start (2) until you have found product market fit and have enough paying customers that it would be shame to lose them and start over finding new ones.

That said, I often do (2) before then but I do it full well knowing that I'm doing it for my own edification and no other goal.
It is a very worthless statement if you really think about it. Everything is priced in.. because that's literally the definition of a price - it's the cumulation of everyone's belief of what is going to happen. That's like saying water is wet.
Maybe you should read the paper.
Skillshare Review
ReactReact just had a release (0.8) a few days ago, so it's apparently not dead

https://github.com/reasonml/reason-react/blob/master/HISTORY...
if you want not only check supporting WebAssembly but also support by version, which post-MVP feature currently support in your browser like simd, threads, multi-values and etc check this package:

btw it use only WebAssembly.validate which much faster and synchronous:

https://www.npmjs.com/package/wasm-check
The nations who fared the best were those that tested heavily from the out-set.
Well then I've improved A GREAT DEAL ARGH!
If you install from an App store and want to know if it matches the source, you need to pull the installed package from your phone and compare the contents to your own known good binaries.

Ideally, if the builds are fully repeatable, the only differences should be in the signatures, but of course, you need to confirm that the signature doesn't drive unexpected differences in behavior.

I don't have the skills or the tools to do this, but it's not like it's some impossible mystery.
https://www.pulitzer.org/news/statement-walter-duranty

Duranty got the prize for being one of a very small number of Western journalists allowed into Stalin's Soviet Union, and writing about a visit to Ukraine.

He made no mention of the mass famine ongoing at the time, the Holomodor. Wikipedia lists the death toll as "3 to 12 million", because it was a totalitarian state and real measurement was impossible.

So the answer to "is it possible for millions to die and it simply not be reported at the time" is "yes".
Two big reasons: Values passed via connect can be validated by proptypes, and by using connect you can mount your component without redux. That may make sense for building shared components that may be used with redux in one part of your app, but without redux in another part. There are a lot of smaller reasons to prefer connect, but those are the big ones to me. FWIW I use both approaches depending on needs.
There's no way to get consent without asking (informed, freely given, opt-in affirmative action) but consent is just one of the paragraphs that give a legal basis for processing private data - it's legitimate to use data that's needed to fulfil the contract (e.g. the adress to deliver goods), comply with legal obligations (e.g. KYC in banking), for legitimate interests that don't conflict with freedoms of the user, for public interest (e.g. news reporting), etc (see Article 6 https://gdpr-info.eu/art-6-gdpr/), and all these use cases can be carried out without the user's consent. However, in some cases where the data processor could assert some other basis for processing, it may be simpler to just ask for consent.

But for the particular case of sharing data with thousands of third parties so that they can use it to target ads, consent seems to be the only one that applies. Direct marketing is one of the very few use cases explicitly listed in the GDPR, e.g. in the 21.2 'the right to object' - "Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing."
It might not be a concern in some cleanrooms, but it definitely is when entering and exiting a cleanroom. And no matter how good the equipment and protocols are in manufacturing areas you could also still get it by grabbing the doorhandle of the main building entrance or a bathroom.
You would get bonus points if you wrapped the mongodb process so that when it receives a SIGKILL it logs out "Mongo like candy!"
Sounds like someone discovered why unchecked capitalism can be a shit system.
A decent overview of Knapp's original process, but not complete by any means. I'm participating right now in Global Virtual Design Sprint 4, being run by Robert Skrobe of Dallas Design Sprints. Originally, design sprints were onsite, but afaik, GVDS was the first to popularize Virtual Design Sprints, where global teams participate remotely, using tools such as Zoom, Mural, Miro and Figma. This started in 2019, so very timely to be ahead of COVID-19. Virtual presents some challenges but also great opportunities.

The Design Sprint is a useful tool for generating collaboration, shared process and fast prototyping results. As such, it is not a cure-all, just a very handy tool to use.
They really don't want you sorting chronologically. That negates The Algorithm™.
But these countries were isolated from the world

Do you not realise just how large the Communist world was back then? The USSR alone was vast. Now China and North Korea are all that’s left.
> your website may occasionally miss potential traffic during "high-traffic" periods.

The thing with personal home websites is that there's really no actual problem if the site gets overloaded, or if it goes down for a day or a week or is only up intermittently at all.

These requirements of constant availability and massive scaling aren't universal requirements. It's okay if a wave of massive attention is more than your upstream can support. If people are interested they'll come back. If they don't it's fine too.
Don’t know about python, but Snap Camera lets you develop your own filters, and takes care of all the virtual device stuff for you.
The point about choosing your bottlenecks carefully is so interesting. I actually love that Zoom automatically sets a time limit on free-tier calls. I might even pay for that feature. The vast majority of meetings don’t need to be a full hour but meetings always seem to go until someone has a hard stop.

Of course that’s the exact opposite of what Zoom is trying to accomplish in cutting us off.
If anyone is trading futures and did not know they were trading on margin or trading highly levered instruments then they either are trading on a platform that has zero compliance or they misrepresented themselves as an investor.
You're right that at least large parts of this can be tested and answered with data. Obviously short of a magical classifier for questions like "is this a productive debate" and "is this ideological fighting or a search for truth?" then we're going to need someone to hand classify a bunch of things which is expensive, slow and only as accurate as the person making the judgement call. In other words, we'd just be making ad hoc judgements again, but calling them something else because we made those ad hoc judgements in a csv instead of a comment.

The other issue is that communities are dynamic, and behaviors trend. You're probably not going to see a flat correlation, you're going to see something that resembles a wave function.
You can't apply American averages to just New York City data. (or any specific locale). Obesity rates are about half that in New York. I'd imagine similarly different for all the other metrics.
Yeesh, you've badly misinterpreted my comment. Re-reading it, I'm partly to blame here.

>That's not an argument to have no cabinets.

This isn't the point I was trying to make. I didn't mean to piggy back on this part of the parent comment: "Have you worked on a platform that uses nothing but pure JS and fetch calls?"

I meant to respond to this part of the parent: "they are tools for developers to streamline development and make maintenance easier." I often find that the most ardent React fans will see "not React" and jump immediately to "spaghetti of vanilla js and fetch calls," with no further questions asked.

I'm trying to argue against React dogmatism, I'm not arguing in favor of "no framework" dogmatism.
> As a firefighter/medic

And today I learn rsync is a fellow fire/medic.

I entirely agree too. I work with several police departments and let's just say that there is a wide spectrum of attitudes and perspectives.

One local department had two excited delirium deaths in custody a few years back, leading to a coordinated LE/EMS significant training program on recognition and response as a medical emergency, not a criminal one, despite the fact that many of the hallmarks of excited delirium are "antisocial" and lead to a LE response (hyperthermia, leading to people naked in public), glass (reflections) attraction (leading to breaking windows, etc.), keening (animal noises, "he's crazy!"), bruxism (grinding of teeth, taken to the extreme, gnawing on things/people).

Every other department in the County was onboard. Excited to learn. Sure, help prevent deaths in custody and lawsuits! "Compassionate policing"! Win, win.

Not the department involved. They wouldn't touch it with a ten foot pole. "We will continue with our SOPs".

It was like an episode of The Office where I believe there was a sexual harrassment issue, and everyone has to take training, except Michael, who believes he doesn't need it. Until he's taken aside and told "Actually, this is because _you_ messed up. We just didn't want to single you out and make an example of you".
> get information about the liveness of objects it couldn’t determine statically by dumping gc info?

Well it may be possible to optimize via profiling (this is what PGO is), but this of course wouldn’t be a static analysis, so it would just allow some optimizations on dynamic access.

In theory you could use profiling as part of the implementation of a theorem prover, but I haven’t seen any examples where that is more effective then the conventional methods of data flow analysis. And in this case, it would still be static analysis.
>Speculation on futures seems dumb if you have no intention of taking delivery

What? How is it any more dumb than speculating and buying a stock hoping it will go up?

Speculation in futures is what gives those farmers liquidity in the markets.

Futures is a zero-sum game.. so in my world futures make way more sense to trade than everything throwing money into stocks to magically make money out of thin air until they don't.
It's not a cash settled contract.

"Delivery shall be made free-on-board ("F.O.B.") at any pipeline or storage facility in Cushing, Oklahoma with pipeline access to Enterprise, Cushing storage or Enbridge, Cushing storage."

Source: https://www.cmegroup.com/trading/energy/crude-oil/light-swee...
Acknowledged and handwaved aren't the same thing. It will be fixed at the first opportunity (change requires breaking the protocol, and they definitely want to get more done in one go when they do that).

And it's remarkable that the only issue cryptoanalysts found is this one which requires your private key to be stolen in order to fake messages from your friends to you.
When you don’t use transpilers, you have to write ES5 code. No-one wants that.
YouTube TV subscribers getting access to Viacom channels including VH1, BET, MTV
In 2012 they were able to scale to 2 million tcp connections on a single box (and trust me, they actually needed that):

https://archive.is/Jo6n
I haven’t tested but I doubt the problem is with the CSS, is it?
Superior in what way? Do you really trust that SvelteJS is going to be a better product in 5 years over something like React that Facebook invests millions of dollars every year?
I think the advice is sound, but Kotlin and Graphql are pretty mainstream. This sounds like a local market problem.
Flame GPU – Large Scale Agent Modelling (CUDA)
Here’s a brief write-up [0] on techniques and software for Japanese tokenization.

[0]: http://www.solutions.asia/2016/10/japanese-tokenization.html...
I don't think that binary is helpful. We can make graduated steps to get a new normal. While I do agree that food shortages would be likely, they are still likely. We could be focusing on initiatives to get food to people in their communities that aren't restaurants. I think the nihilist perspective of "make it how it was before and damn the cost" is a failure of imagination. We need to adapt and focus on taking care of our neighbors. There are ways to do that to weather a storm. Apparently we have chosen not to.
There is a huge advantage to 'embedded computing' (using the physics of your system itself to do the compute): energy efficiency.
I happen to believe that we both did land on the moon, and that we faked a moon landing to make footage, or in case the first thing didn't work out.
Fortran didn't have dynamic memory allocation until Fortran 90. If you wanted to run a problem larger than the original code's author had anticipated, you needed to recompile the source with larger values. This could indeed be an annoying restriction. But you might be surprised how much software was successfully written in Fortran.
Looking at the internet today, I think we need to lower our expectations and be realistic. At least in the US.

We are still driving 60mph on freeways and what trains we have do not travel at 300kph.

Perhaps many of us flipped out when we only had 9600 baud modems, but you could get up, brew some tea, walk the dog, or read a book while waiting for a page to load. We all had so much more patience back then.

Why do we need instant gratification with FB and other social media? Maybe, or maybe not /s.
Before spreadsheet software (Excel, etc) showed up, some people were using actual physical spreadsheets (very large pieces of paper). Spreadsheet software appeared to make that job obsolete. And indeed it did. Nobody uses the paper spreadsheets anymore. But how many people use the computer spreadsheets? Hundreds of millions?

It's going to be the same with robots. Maybe actual lathes will disappear, but there will be computerized things that will perform that job, and people manning the computers. Some of the jobs will be automated (think Excel macros), but many will require human interaction and iterations.
That seems a bit misleading. Two way data binding simply means your changes are propagated from UI -> Model and Model -> UI

Also vue, backbone and many others provide two way data binding. React is the cool pure kid.

Some people might think of meteor js from your description.
Thank you for this post. I yell at my screen each time I have to use leboncoin.

It was super ugly, but it did the job. Now it's super ugly, but it steals my focus at every opportunity, refreshes parts of the UI I'm about to click, or has select inputs that love to play hide and seek with my cursor. It's a UX nightmare.

I must say their new payment system is nice. But boy do we have to suffer when looking for something to buy now.
The issue I see is not related to whether a site contains a balanced view point or not. That is up to honest moderation based on the site's guidelines.

The main issue is how a site provides tools for promoting healthy discussion. As long as a submission cooperates with a site's guidelines, the site's (moral) duty after that is to ensure that people that make good use of logic, reason, facts, and sources have their voices heard. What I see sometimes on this site is that people that have legitimate arguments and authoritative sources have their posts silenced (greyed out) or flagged just because a majority group of users disagreed emotionally. To me, that is a red flag. I believe that HN tries it's best to promote healthy discourse but I also believe that there is more they can do to optimize it.
It also implements relays, if both sides can't be reached.

And it works with TCP, if it can't be made to work with UDP.

And it supports ipv6.

You're pretty much covered.
Something like this terrifies me- https://www.youtube.com/watch?v=TlO2gcs1YvM

Tl;dw, mini weaponized AI drones get loose and mass havoc ensues. I'm sure the feasibility behind these isn't close but still, it's an interesting design fiction.
Very interesting. Current Swift capabilities make this extremely easy to implement in an iOS app.