skysight-inc/HackerNews huggingface dataset:
If you want to get paid a fair bit of money and are not some name brand genius (Steve jobs etc) I think you have to be someone folks are eager to work with, ask questions etc. I'm sure the psychologists would be able to expand on this.

For some, that means you don't laugh at them. For some who don't curse it may mean you don't say "F*ck" all the time. For some it's skipping lots of strong political talk when trying to do work. For some its being smart and being able to have an interesting conversation. For some it's having a clear technical opinion backed by experience (ie, you can provide good clear direction). For some its always trying to understand their problem before solving it.

A lot of the folks who say their behavior should be fine (ie, cursing, getting into politics) the point is that it's not per se wrong, it's just doesn't in my view lead to someone a large group of folks are eager to work with. Telling other people to be OK with your behavior (even if you are "right") is not always comfortable - and these folks can be very very confrontational and don't handle other views well often.
You have to be careful in general whenever you are correlating two common features. If 80% of your deaths to a disease are among people who are overweight or obese, and 70% of your population is overweight or obese ... yes, there is a correlation. But it's a much weaker and less interesting correlation than if 20% of your population were overweight or obese, or if 97% of the people who died were obese or overweight.
Spotify Tells Employees They Can Work from Home Until 2021
Are you implying there is only one side one must be allowed to take on climate change?
If you have a problem with "telemetry" becoming a bad word among technical audiences, take it up with the developers and product managers who insist on surveilling users without opt-in, and without an option to opt-out, and who then decided to use a euphemism for this behavior: telemetry. This user-exploitative behavior is eroding any veneer of euphemism from "telemetry" and revealing the surveillance at its core. Highly technical audiences have decided to take the battle directly to the word their opponents chose.

"Surveillance" has already been thoroughly scorched by the reaction to the US government's broad violation of the Fourth Amendment. Talk to anyone in the defense industry. Now, rather than internalizing that many people don't want to be spied on, product managers are deciding to double-down on surveillance but use euphemisms. Don't whine when people respond by scorching the new word as well.

They could call it "logging" next year and we'll start tarring and feathering the word logging. The issue is not the word, but the behavior it represents.

Gathering detailed usage behavior of applications must be made optional to the user, as doing so without opt-out is decidedly hostile to the user's privacy.

You say it is impossible to get feedback from programs without a vocal minority being dominant. This is untrue on the surface since providing the option to disable telemetry removes a minority of users, probably a set highly correlated with the vocal minority you are concerned about. So if they have something to let you know, they'll probably contact you directly—the old fashioned way.

As others have pointed out, there's also no compelling evidence that software is better since the advent of widespread telemetry. Telemetry so often lacks context. You don't know what the user was trying to do; only what they did. Just because a feature is used a lot, that doesn't mean it's a good feature. It's merely what users have found in your software that approximately does what they intended. What's unseen, what can't be seen, is intent. You can't (yet, thankfully) measure the reluctance or happiness of the user as they pressed the button.

Even when working ideally, and observing willing users, telemetry has a nasty habit of navigating products to local maxima at the expense more quickly finding significantly better options.
Do you think that such people should be banned from content distribution channels?
It absolutely should be opt-out. I also think that if you choose to opt out, you should not be eligible to receive donated organs.
Parsed as much as I could to make a slightly more formatted list. Stars are the ones I was drawn to most. Sorry if I accidentally missed a rec or cut stuff out.

https://www.notion.so/moderndesert/List-from-Hacker-new-chan...
Covid-19 Interactive containment marked map for India by Delhivery
The 'criddler' word seems humorous. Is there any particular need to ban it outright? These kinds of neologism happen all the time in real life and we ask people to 'tone it down' or give some other social signal that the joke has gone too far. The social feedback is immediate with breathing room, nobody is ejected from social areas, but you know they might be eventually. The joke naturally deflates as the last dregs of fun come out of it, and we all move on.

Someone famous once said (100yrs ago) that when people write to you they want to test their mettle. It is often best not to reply until a week after the letter was sent and to find the fire in the original message has since left the person who sent the letter.

These instantaneous and unpredictable word bans seem to be almost the perfect design for getting the maximum amount burn out of a given burst of new flame. Is the lone moderator too far removed from the pulse of the crowd to give effective feedback?
More uber eats drivers are rushing the streets.
A typo: that should've been ‘if you can ride on APIs’.
I had a similarly awkward conversation.

I sometimes take my mother to go see movies. I'm a fairly tall man, and my mom is a fairly short woman. Anyway, one day after seeing a movie, we had stopped in the parking lot near our cars to discuss what we did and did not like about the movie.

While we are talking, a woman drives up with window rolled down and says, "Is that man bothering you?"

My mom responds, "What?"

The woman repeats, "Is that man bothering you?"

My mom answers, "He's my son! No, he's not bothering me."
No worries. Just curious if there was a global source for that.

From looking at the numbers, I can't help but think we really failed protecting the elder population.
Does it have to be different?
> I hope that Shopify will start to invest more into R&D for CRuby as well now as well as having Chris there working on TruffleRuby.

Hi,

I'm the Manager of the Ruby and Rails Foundations team at Shopify.

We are investing a lot on R&D for CRuby as well.

We have 6 people working full time on Ruby implementations, both CRuby and TruffleRuby. Not only Chris Seaton is here, but we have two CRuby Core members as part of the team, Aaron Patterson being one of them.
This has been going on since the beginning of the platform, far before the shelter in place orders went into effect.
This depends. My Dutch credit card with a PIN protecting it can be used online as long as you have all the numbers.

However, almost everybody I know never uses credit cards to buy anything. Everyone I know uses debit cards. With the rise of contactless payments there's an argument to be made that those are still usable, but it only takes a quick call to your bank to disable that.

All Dutch banks I've seen used online require at least SMS 2FA. Payment through mobile banking apps often do not, but the process of authenticating your phone with your bank is very cumbersome even for legitimate use. In my local banking ecosystem, digital fraud only really exists in the form of phishing. I don't think I even know anyone who's ever done a chargeback.

The credit card system is horribly designed and because of compatibility reasons (and fear of change) fraud is much more common than with banking like I'm used to. I use my credit card as backup on holidays and for paying on some foreign websites but I never feel at ease entering my card details. It's ridiculous how in this day and age credit cards are still so easy to abuse.
7 is widely recognized as the best Windows ever. And many people both devs and non-devs have moved to Apple.
The trouble comes in your dependencies when you don't know what they're reflecting upon or what features they're using that aren't supported.
Is anybody keeping a list of potential security threats so browser vendors can check them off and the community can verify that they are correctly dealt with?
>DNS rebinding can be fixed at the DNS server level

You can't always depend on that. eg. when you're on public/enterprise wifi that intercepts DNS requests.
It matters a lot; I am flying very relaxed knowing the type the plane I fly has a very good track record of reliability and most problems happened due to pilot error. At least I know that if I respect the rules and don't do stupid things I am almost as safe as a commercial airliner and that is considered the safest means of transportation we have.

And I know enough about planes not to fly a GA plane with an unknown pilot. It works for me, I have my own license, so the main criteria is the plane reliability and that is different between various models.
great book!
Seconding this. When our day care closed we originally sent our 2-year-old to her grandparents; when they couldn't take it any more (she can be a handful!) we brought her back. Since her teachers from day care were also out of work we called the one she gets along with best, and that's working splendidly. Unfortunately this costs more than day care, but we're spending less normally just because there aren't as many opportunities to spend money, so it's okay.

Licensing might be an issue, as some people have mentioned. More importantly, though, I wouldn't trust my kid to someone who doesn't have experience with kids. So this may or may not be an option for your friend.
There is a difference between preventing a document from being publicly shared and a document being deleted from a users account. The article provides no evidence that files have been deleted.
When you say "gone or moved to MQ" - if not moved to messaging services like RabbitMQ/NATS/etc, where else could things have gone? At least from my experience, HTTP microservices are still very common, especially when using things like AWS Lambdas.

I feel like most continually-running backends will make use of RabbitMQ/NATS/ZeroMQ/etc, or more and more I see lightweight systems going completely serverless and just using lambdas - which are HTTP microservices.
Rabbit's federation is a good way to bridge point-to-point connections between geographically distributed systems. I'm not sure that's a great scaling pattern for throughput though.

The clustering might look tempting but it hasn't been resilient for me in the face of janky networks. Split brains and data loss can result.

In the past I've scaled my rabbits for throughput by implementing my own routing/sharding layer.

If you're tempted to use the message persistence and you care about retaining messages, kafka is a bigger but much more capable hammer.
This is indeed the case. NYT is now an AdTech company according to recent business press, and will be selling the data themselves.
Just from a layman, this is so freaking cool, thank you for writing it and sharing it!
What software do you make. If you feel entitled to spy on me I feel entitled to be able to avoid it.
I don’t think someone working at a call center has the technical aptitude and financial resources to source and build there own extrusion machine.
What percentage of tweets in general are by bots? Not insignificant, I'm sure. Bots did not spring up for this occasion.
Prettysure there is some functionality benefits tied to karma here on HN...
This is why we designed TUF and in-toto to detect MitM attacks anywhere in the software supply chain between developers and end-users themselves, and provide E2E compromise-resilience.

It's strange that the paper doesn't mention us considering that we have considerable expertise in this very area.

https://www.datadoghq.com/blog/engineering/secure-publicatio...
I always come back to the analogy of nearsightedness. You can be a little bit nearsighted, or a lot nearsighted. It’s a continuum. It isn’t even precisely a problem to be nearsighted, in theory. It’s just a problem in our society which is designed around being able to see things that are far away (e.g. road signs.) Glasses aren’t technically a treatment for an illness; they’re an optional prosthesis—a “body mod” in the cyberpunk sense. But there’s no stigma to getting them (nor should there be); and anyone who has any degree of nearsightedness has no reason not to get them.
With provisos it seems right, they have remote support by default, no: https://winaero.com/blog/disable-remote-assistance-windows-1....
>this problem is bigger than Reddit and focuses on lack of enforcement for digital actions that would qualify as genuine crimes of harassment if translated into the physical realm.

Part of the problem is that online communities rely on the fallacy that, because most people are good, such communities can thrive with some reasonable amount of guidance. But it only takes a relative few people acting in bad faith to cause great damage.

As such, I've long considered that the online world amplifies the sociopaths, bad actors, and worst among us to an untenable level, giving them outsized power and voice. I think it's driving our "real" society and culture in a negative direction to a degree that people vastly underappreciate.

Layer on top of that adversarial nations that actively use our online communities to divide and propagandize, and there's a very real question of whether we're better off without these communities.

More succinctly, many of the largest platforms that enable online communities seem consistently unable or unwilling to rein them in. And when you look at experiences like those you convey, it's little wonder. Attempts to moderate bad actors will invariably add to the problem, as they devolve the discourse further and generally seek to be heard, else burn the place down.
Don't forget - if you can do your job from your home, someone else can do your job from their home.
Another one. This is a big-and-getting-bigger deal.

I'm keeping track of announcements here: https://airtable.com/shrC1mvKjwntaqocO/tbl73UY1jDmReLge7
How to Upgrade Your Wi-Fi and Make Your Internet Faster
This is the future of all systems/OS programming in my opinion.

My other goals for 2030:

- RISC-V ubiquity

- RedoxOS on all major archs

- Linux kernel maintenance shifting to at least 25% Rust code

Rust Analyzer is one of the biggest pieces that I think will get us there as far as compile times and beating out C++ ubiquity that is already in this space.
In the enterprise space (i.e. Windows 10 Enterprise users), users can fully opt out of Windows 10 telemetry, unlike everyone else but Windows 10 Education users. (Someone asked in the GitHub issue how that tool respects the various control levels over telemetry that Windows 19 offers, but the issue had turned into a shout-fest, so I'm not expecting the rank-and-file MS dev dealing with that issue to want to respond there.)
It's not, but that doesn't make it legal.
Just to provide the other side of this.

Imagine seeing a post exactly like yours, literally word for word, with the same civil tone and all.

Except the user in question had been banned for posting a tubgirl (its gross) image by a moderator that happened be female and had responded in private messages on a clear alt account (minutes after the ban with the same IP address) calling that moderator a slut who deserved to be raped and killed.

And that style of interaction being relatively common.
Not clear. They build new houses. Health care hires and expands. New schools open all the time. And volume decreases cost in those areas too.

Now they may be over-regulated and broken; no argument there.
It will be interesting to see what happens with salaries, given increased world-wide competition for jobs.
The particular problem they boast about having solved,does simply not exist in the malloc(3) I wrote 23 years ago, because it does not have the silly linked list to begin with.

In addition to all the security problems inherent in mingling metadata directly next to user-data, the linked list gives O(Nalloc) performance on free(3) and realloc(3) whereas my malloc had O(1) performance.

That may not seem like a lot, but when the 'O' is a page-in from disk, and Nalloc is from C++ code, it is nothing to sneeze at.

Not only did that make my malloc faster, but it would, not "could", but "would" detect several classes of malloc-usage errors, double-free etc, unconditionally.

Over the next 10-ish years, that practically eliminated entire classes of malloc-mistakes, making a lot of FOSS software safer, no matter which malloc you used it with.

Given the definition of the malloc(3) family API, there is no way you can detect all corruption without hardware support, but there are people working on that too, notably Robert Watsons CHERI project at Cambridge.

So yeah, nice pointer arithmetic, but how about people solved the real problem instead ?

(On big memory and multi-core systems use jemalloc, on small memory and single-core systems use phkmalloc.)
There's been a lot of press about delivery services gouging restaurants now that a majority of them are being forced to use them.

I did see the other day Chipolte is doing their own delivery service now which is awesome. Not sure why more places ditch Grubhub and Doordash and just have their own in house delivery service. It's so much cheaper than outsourcing to companies who've been gouging restaurants and the consumer.
10M (nowadays 16.8M) is the total number of matrix IDs we can see from matrix.org based on phone-home stats from Synapse. 2M (nowadays 5.18M) is the total number of matrix rooms from Synapse.

The ratio is about what we'd expect - there's a mix of DMs, private rooms, and massive public rooms; the DMs will dominate, hence this ratio. Every conversation in Matrix happens in a "room" (even DMs), under the hood, which might be the point of confusion here.
The other thing that helps with these risks is having a properly managed backup system.

If you can always just practice the upgrade on a new machine, or easily roll back if the upgrade does fail.
It can't be done, IP address alone is a problem. And even if there's trust today, that could change at any time. I'd rather not have the lifetime chore of making sure I still trust something I never wanted to have to trust in the first place.
> The cynical part of me thinks all this "WFH Permanently" initiative is just a disguise for companies to start lowering cost for entry to mid-level IC positions by hiring from areas with much cheaper CoL.

This isn't cynical, but the sword cuts both ways. Eventually, those lower CoL areas will equalize towards a higher CoL as folks begin moving there to WFH. The other way around will occur there too, as the discount to entry or mid level IC engineers will erode over time, and the good ones will cost more because of trajectory, while the more middling ones likely will experience some erosion due to increased labor market competition.

With that said, I can't really speak as to what the second order effects or black swans will be regarding the shift to remote first. Some speculation:

- Will suburbs become more or less attractive as commute becomes less important of a perk?

- Will more remote tracts of land previously relegated to just outside the reach of exurbs become more or less attractive now that inhabitants are no longer precluded from virtual labor market participation?

- Will a caste system solidify around those who continue to commute to the office versus those who do not, or will it dissolve as the majority moves towards working and collaborating virtually?

- What will the effect of timezones be? Will we begin to see nations organize around timezone based vertical blocs as economies increasingly shift towards virtual labor and knowledge work?
It is not.

Steam has lower prices in some countries. Factorio sells for the equivalent of $12 in India while it sells for $30 elsewhere. Most games are similarly discounted. That said, someone who buys it from Steam can't gift the game (or presumably extract a key) to someone in a different country. If you bought the game in India, only an Indian account can play it.
Launching a Knowledge Transfer System
> Maybe if mods were more transparent across all the subs.

We're (r/relationship_advice) rarely transparent with removal reasons. Our templatized removal reasons generally look something like this:

> u/[user], please message the mods:

> 1. to find out why this post was removed, and

> 2. prior to posting any updates.

> Thanks.

or

> User was banned for this [submission/comment].

The reason is because we have a high population of people who:

1. post too much information and expose themselves to doxxing risks, and

2. post fantasies that never happened.

So in order to protect the people who inadvertently post too much information, we tend to remove these posts using the same generic removal template. However, if people know that the post was pulled for one of these two reasons, the submitter may still end up on the receiving end of harassment as a result, meaning we have to fuzz the possibility of the removal being for one of these two reasons by much more broadly withholding removal reasons.

This is specific to r/relationship_advice. Other subreddits have other procedures.
I agree he's harmful.

I just wanted to put in a nice word for Penny Brohn. They very careful position themselves as complementary, not alternative, to conventional cancer treatment.

There was some work that looked at the outcomes of the Bristol Cancer Help Centre that showed poor outcomes, but that research didn't correct for the illness of the patients. Lots of people using the service were on palliative care pathways and were expected to die. They were using the service to get the death they wanted.
Static binaries still have dependencies, they just embed them all into one file. That's not generically possible - as the most trivial example, consider a bash script which runs other executables. If you're trying to solve this problem, you need to actually solve it for all real cases; otherwise your solution breaks down and you're back where you started, in dependency hell.
I think this would lead to an actual war. Taiwan has weapons, its own military, etc. Hong Kong doesn't. There will be protests, however. Nevermind potential U.S. involvement.

It's so tragic.
Could you explain how RabbitMQ clustering is going to improve performance? For how it works I would expect it to lower performance.
Actually I think WFH would improve this. If both the west and east coast colleagues have to commute to their respective offices, there is a lot of wasted time during the beginning & end of the day. A person may arrive at the office on the east coast just as the west coast is waking up. If both locations were simply WFH, there would be more useful overlapping daylight hours to use because neither side has to commute. Additionally, one office could have modified hours such that they more overlapped with the other office either as a standard or simply as needed.
It's not a donation to the Matrix.org Foundation, it's an equity investment in New Vector (https://vector.im), the startup that the folks who created Matrix began in order to make money to support Matrix development. New Vector makes money by selling Matrix hosting (https://modular.im) and providing consulting/support/services to large folks building on Matrix.
If you want the reverse of an autopilot, try this:

https://news.ycombinator.com/item?id=23172281

... and pull the appropriate Interstellar music up in a separate tab.
Geocities Research Institute