skysight-inc/HackerNews huggingface dataset:
> But every once in awhile you get a serious and important report

Yes this is true.

> and you wouldn't have gotten it without the bounty

Of this I am highly skeptical. Most companies that I’ve worked at who don’t have bug bounty programs get the occasional serious report. These reports were submitted to companies before bug bounty programs were even thought up. Bug bounty services just seek to capture value from something that was happening long before they were invented, and I’m highly skeptical of them having a significant impact on generating serious reports that otherwise wouldn’t exist.

The other issue is that everybody has a finite security budget, and dealing with the spam is going to (perhaps significantly) eat into that. In those cases, it’s taking money that could be spent on something with a decent ROI, and redirecting it to essentially just creating busy work for your security team (or spending their budget on paying somebody else to do that busy work).

I think they really only exist because a lot of security professionals don’t really know what they’re doing, and a lot of their employers don’t really know what they’re supposed to be doing.
Snowpack 2.0
Think you’ll have a hard time building a business without being dependent on a suppliers Pricing model
> Doing good concurrent/distributed programming requires so much back-and-forth with the language

You are making a lot of claims and assumptions here. A much better way is to think about what you actually are trying to accomplish. Futures and coroutines aren't going to save anyone either.

Futures are a simplified tool for the larger concept of executing asynchronously and synchronizing the results. The generalization is that you will need to figure out what data you need to package together for each unit of execution so that they can be used without dependencies. The dependencies of different units will have to be figured out so they can run when they have what they need. Futures are the same as having only one thing to execute or at best, a single chain that doesn't split or converge.

Coroutines are a way to hide the fact that you need to keep some state in between executing, just like recursive functions hide the fact that you are using the call stack as a stack data structure.

Confronting the dependencies and IO of each unit of execution as well as understanding where you need to keep state and where+how you will synchronize that data created asynchronously is what gets you concurrency and parallelism that makes sense as it scales. This does not require a different language, it just requires an architecture that does the tricky stuff for you and maps directly to what actually needs to happen.
SpaceX postpones historic launch due to weather
So the first app you ever used in your life was excel and nobody ever explained you it's purpose? How did you ever learn how the mouse works?
ISTM that Curses style applications are not really CLIs, but GUIs implemented using character cells instead of pixels.

In a sense, the help pages are a super-thin GUI on top of the underlying CLI.
> They'll have someone merge multiple cartons of eggs to refill ones that have one cracked

That's technically illegal. Grocery stores are not allowed to repackage pre-packaged food. We have strict food-handling regulations in place to protect consumers, which is part of what makes food waste such an issue.
‘Just Sitting in Limbo.’ For Many Professionals, Careers Are on Hold
What do you think of Jamstack?
Design Principles Behind Smalltalk, BYTE Magazine, August 1981
Grocery shopping has been one of my main forms of entertainment and socialization for the past decade. I tended to go to the market at least once a day, sometimes three or four stores.

However, given the concerns about the pandemic, I have switched to delivery and curbside pickup. I knew enough from reading the instacart subreddits to know that I didn't really want to use instacart. I don't like the idea of paying a delivery fee in addition to higher prices, for one. So I've gone with stores that operate their own curbside pickup or delivery services, such as Safeway and Whole Foods. I've been quite satisfied with both. As much as I enjoy going to the grocery store, it feels very convenient to do things this way.
> any sense of truth

The very "fact check" twitter claims to have done is wrong. I have provided sources in my previous comments.
The problem isn't their legitimacy, it's that there have been numerous stories about one or very few persons affecting hundreds or thousands of votes, basically like an amplification attack on democracy. When mail-in ballots are only a small percentage of the overall votes it's not as large of an issue. What Trump asserted was simply that we'll see a sharp increase in the number of fraudulent votes because the attack surface is going to be exponentially larger.

Trump's assertion is based on the notion that mail-in-ballots see higher rates of fraud than in-person. It's not difficult to see why that would be the case, but I will concede I don't have first hand numbers.

The insidious thing about this situation is that there is now a lot of anger on both sides. If cooler heads had waited a bit longer, collected real data on the rates of voter fraud, actually addressed Trump's concerns about stolen/forged ballots rather than calling him a liar and linking to puff pieces from two of his biggest and unfairest outlets, we would stand a better chance at resolving this amicably.
I see a lot of commentary about experiences people have had with grocery delivery services. I think this may be part of it, but it isn’t why I never have and likely never will use one.

I think there’s a large number of people who don’t mind, and sometimes actually enjoy grocery shopping. It’s a relaxing activity that fits into my week. For me, it’s a chance to be out in the world, using my senses, exploring new things to incorporate into my daily life.

Convenience is often what people optimize for, but not when it’s outweighed by entertainment and other beneficial factors. When it comes to grocery shopping that may not be the case for everyone, but the opposite is far from representative of everyone, despite the reality that many tech CEOs and press put forward.

Edit: I’m talking mostly about grocery shopping under normal, non-COVID circumstances.
Our cities and rural areas aren't exactly in a great state either. I would imagine the average resident of a dense city does not know the names of all of their next door neighbors.
> All of the things I mentioned are things that you can get away without but eventually scale forces you to tackle. Each of those things brings with it additional cost without increasing the throughput.

That doesn't mean it costs more than O(n).

Let's say you start off with 100 workers providing 100 units of support, and 20 workers of overhead.

Let's say doubling support means you need double the existing workers, plus double the existing overhead, plus 20 more workers to handle new kinds of overhead.

So 120 x 2 + 20 = 260 workers for 200 units of support.

Then 260 x 2 + 20 = 540 workers for 400 units of support.

The percentage of overhead grows every single time we double the number of workers.

And yet if you do the math, you see that the overhead never goes over 40%. And it was already 20% when we started, so that extra amount isn't hard to afford at all.

Despite growing every stage, it's still O(n). The dominating factor is linear.

Obviously those numbers are just an example. But the point is that you have to look at how much the costs increase. Even if it's theoretically faster than linear, if the overhead only grows a moderate amount as you grow from a thousand support workers to a billion support workers then it's not an excuse. It's within a small fudge factor of linear for all real-world numbers.

> This shouldn't be too novel an idea: consider a normal supply curve: cost per unit tends to go up with volume.

Only in the short term. In the long term, production ramps up until the price is pretty close, and on top of that economies of scale drop the price by a significant amount.
Why do the opinions of hypothetical groups of people carry any weight? Make your arguments in concrete terms, like: Trump is full of shit whether people agree with him or not, and if Trump does try anything it is going to have so much splash damage against other websites that he would run the risk of being sent with a SpaceX capsule into the sun...by everybody.
How to Build a B2B SaaS Brand
I have no idea what "Charlottesville hoax" is, but googling it leads me to a book by an author I can't find any information on, claiming that the Charlottesville riots didn't actually happen.

I¨m hoping you are not suggesting the same? If so, we¨re not even operating in the same reality.
How to earn money online in 2020 with brave browser
Actually I got my test signatures mixed up for a second, what you want is GTUBE: https://spamassassin.apache.org/gtube/
> I can't stand sugar alcohols, and got a ton of crap full of sucralose

I don't think Sucralose is a sugar alchohol. You can spot those because they end with "ol" - Mannitol, Sorbitol etc. I find it pallatable myself.
He uses the word “eugenics”.
It depends on what you want too.

For eating as a snack, I want small-to-medium sized apples.
For cooking, I'd rather have a few giant ones so the peeling is easier.
Ask HN: How to sync my IDE configurations with multiple devices?
I do lot of customizations on my IDE to make myself productive. But when I move to another device, I end up doing them all over again. How to do this possible or if this is not possible why ?
If you don't want to be manipulated by Facebook then don't use it. Yes, Facebook is very popular. Anyway, don't use it.
There are LED bulb requirements in California, and people have mocked them, but as I understand it they are supposed to help address this issue, as well as color quality and audible noise issues.

In other words, California says no to cheap shitty bulbs.
There was capitalism when communism was still a force. That capitalism had to offer something better to workers to keep them from thinking "Maybe communism is better?": https://www.ingentaconnect.com/content/cuny/cp/2020/00000052...

Nowadays, well, you got your Bezos and you got your Uber...
We went quickly from "Why shouldn't they charge for a great product?" to "they deliberately toasted competing solutions by creating a white-list with only their own."

Admittedly, some other solutions were shitty and ate into the battery, but this wasn't the case for everything and forcing everyone onto a proprietary platform if they need an always connected background service is not "a great product," but a defective one.
Given the current upheaval around the world and the jostling for economic advantage it’s not at all clear that being in the EU would be beneficial - or not.
Blame Roku’s “walled garden”. They won’t let an app be on their service without making a deal that gives them a cut.

https://variety.com/2020/digital/news/why-hbo-max-not-availa...

As much as people complain about Apple’s 30% cut, Apple doesn’t get a cut of third party content apps if a user subscribes on the providers website.

No, Apple doesn’t force content app makers to offer payment through Apple - see Netflix, Spotify, Hulu Live TV, Sling, ATT Now, etc.
altavista.com now redirects to Verizon (Yahoo!).

Is there a Web search engine that only indexes non-commercial content?
I have provided plenty of sources in my other comment on why "Mail-in ballots don't generally increase the instances of election fraud" is 100% wrong:

https://news.ycombinator.com/item?id=23331091
I tried it today. I already had a directory full of .md and .adoc so it was nice to see those in a new editor.
But of course the graph is just a bubble of unlinked dots.
I did started to link some but I don't see the benefit.

Took a shower and my enthusiasm got cold: how can I know my data is safe aka not getting uploaded somewhere?

There is an AutoUpdate feature after-all.
:(
While most LED fixtures in that form factor do underperform on lumans foot-for-foot by a margin of around 30%, integral LED shop light fixtures usually have about 30% lower power consumption as well and are usually chainable internally (e.g. you can run wiring between fixtures through the metal channel of the fixtures, similar to what's done with the fluorescent). So unless you're hitting a space limit you can likely install 30% more integral LED fixtures without too much trouble. Since LED retrofit pretty much requires changing the ballast anyway you aren't really looking at that much more expense going to integral fixtures.
This deserves a frontpage post all my itself. Thank you!
My taxes went up significantly because of this administration.

It's sad to see the racist actions they take at borders.

Trump is riling up groups of people with the things he says.
My LED bulbs last until they break. And depending on who made them, they break a lot.

All my philips hue bulbs still work. Even the ones that are like 8 years old. But every bulb from ikea has broken.
11 local U.S. news stations aired segments on Amazon written by company PR team
Downloaded Obsidian and moved my notes (and plot outline too, since it supports interactive task lists!!) over, and man this thing is wonderful. Good job!
infinity = 1+1+1+1 ..... +1+1

infinity x 0 = (1x0)+(1x0)+(1x0) .... +(1x0)+1x0)

= 0 + 0 + 0 .... + 0 + 0

= 0
https://news.ycombinator.com/item?id=23325164
Even if Texas Instruments implemented SSL the fact that you went there would not be a secret to anyone who can see your packets due to SNI[0]. HTTPS is really only useful when you want to hide the contents of a message, not the recipient.

[0]https://en.wikipedia.org/wiki/Server_Name_Indication
What these companies do are selling/shipping components to China for assembly and then re-export the final products, which make the biggest revenue and profit. It's relatively easy for these companies to shift the manufacture (assembly) to other countries to keep the same revenue and profit. An India or Vietnam assembled iPhone generates the same profit for Apple.

Foreign companies have difficult time making profit in China due to protectionism. McDonald opened thousands of restaurants in China and had to sell their ownership to Chinese companies last year.
Completions are very limited in their surface. And you still need to learn where to start to get the completion.
I have provided plenty of sources in my other comment on why 100% factually correct:

https://news.ycombinator.com/item?id=23331091
Yes, absolutely key to it all.
>Yet votes cast by mail are less likely to be counted, more likely to be compromised and more likely to be contested than those cast in a voting booth, statistics show.

"Statistics show." Yeah, no, that's not how it works. Evidence shows, and there isn't any, or the New York freaking Times would describe it.
Tab completion makes CLIs more discoverable.

It still places some responsibility on the developer of the command line tool to expose a reasonable interface. But if they do so, users can learn the interface by tab-ing their way to glory.

The Google Cloud SDK (gcloud command-line tool) is a really great example of this. It was the first cloud infrastructure I worked on and I learned how Google Cloud worked by tab-completing gcloud commands and reading the --help pages.

AWS CLI is an example of when too much complexity is exposed to the user. They have similar tab completion functionality, but they provide such fine grained control that it is hard to use it to learn the services themselves.
It's a dumb, racist thing to say - but it's practically the logical conclusion of a lot of the rhetoric that's passed around on the left (even far-left). If Trump is Hitler/a white supremacist/etc., it'd be insane to even express hesitance about voting for Biden.
Just that if two people make changes at the same time on different clients, I don't have much control over merging those changes together with Firebase (that I know of). I think it's just a "last change wins" type system.
The important thing is that the `x` number of years requirement is a function of the role, not of the applicant's age.
Thanks for explaining to me how the fifth most visited english language website in the entire world works. A site that I've been visiting on a near daily basis for past 15 years, and to which I've contributed numerous edits and where I've become way too familiar with weirdly specific controversies (my favorite being probably the 'Verifiability Not Truth' debate). But wow, you told me that Wikipedia can be edited, which blew my mind. So thanks to your extremely helpful insights, I'm all up to speed now. But... did you have anything constructive to add that related to my comments on this particular article?
Ask HN: Show Your Personal Homepage
I love looking at homepages where you can see it was build by hand, hosting carefully collected and/or created content that goes back and is not just a snapshot of today like what we see on all the big services we use. I've been late to the game with https://h.43z.one but so far it's been a fun journey and it makes me proud to see it become what I like so much about other pages I've seen.

Show yours!
I'd cast just as much doubt on stats showing low cases/1000 in small cities and towns and subsequent predictions that small towns won't be affected.

I don't think we have enough data in those places to know the patterns either way, especially since the situation is changed daily. The dynamics of this disease aren't well understood enough. Earlier it was thought that the heat of the southern hemisphere was protecting it, but now Latin America is seeing a large rise in cases.

EDIT: removed my comment about low sample size and high variance, since the case rate is just a about cases/100 people, not based on a sampling procedure.
All of the 3 big antitrust cases with fines the parent linked to resulted in Google changing their practices.

So IMHO "nothing will change" does not seem right.
Throw in one of the streaming services that support 'live' cable TV and that hikes up the prices, plus adding things like HBO, Showtime, etc to a Hulu subscription, and you get there rather quickly.

Personally I try to keep the number of services I'm subscribed to to a sane minimum.
Actually, I think Udemy might be in a very big market. It competes in the market for continuing learners who could not get an education they wanted during their 18-25 year ages. I would love to work at Stripe and perhaps Discord. SpaceX too, but I am not a resident American.
Yes, the lockouts were in place during that incident too, but for several good reasons they are non-modal - you have to hold two buttons at the same time to trigger some critical operations like manual RCS controls. Which is exactly what happened, so the confirmation procedure had to be changed as well.
I watched it happen, several times, on projects where I not only had 6 weeks of undivided time to run an app assessment before I took over their bounty program, but the client had contracted assessments from other firms prior to me being involved.

It's also a refrain I got from almost everyone I asked about running bounty programs.

A fundamental truth I don't think anybody who does appsec assessments professionally can escape: multiple audits of the same target will turn up different bugs. It happens even if the same people do both assessments! I've never talked to a software security professional who pushed back on this; maybe you'll be the first.
That's great, but that's not discoverability, that's searching for something you know/hope/suspect is already there.

Discoverability is about having what you can do be presented to you in the first place. It's the very opposite of looking things up. The information comes to you in a contextual way, instead of you having to go searching for it.
> How does it affect your life concretely?

Right now, he has tanked our country. We could have had a plan for the virus, and instead we are muzzling scientists.
> Fees should based on OUR revenue, not usage.

So if someone builds a business that makes very little money but uses a ton of compute, the cloud provider should subsidize that? And conversely if you make a ton of money using barely any compute, you should pay your cloud provider a premium? This business model makes no sense.
Most genetic modification by viruses is deleterious, as are most random genetic mutations.

Part of endosymbiotic theory is pretty well accepted now (I remember being told in school that mitochondria may have come from prokaryotic cells), but it's a bit optimistic to think that symbiosis causes all speciation. It's very conceivable that most speciation is caused through many generations of reproduction, environmental stressors and separation.
So the solution is to use another separate CLI utility that you have to read the manual for, and memorize '-i' as an option for it?
US tech execs have dumped $3.6B in company stock this month
That is a very apples to oranges comparison. For example, in the case of Iraq (a terrible moral mistake and embarrassment for the US in my opinion), the President, his administration, and most of the media really believed the Iraqi's were making weapons of mass destruction. They were extremely biased, and they suppressed the counter argument. All bad, I am not trying to defend it, but not the same. The other historical examples you give are all different in their own way. But in almost every case (except Watergate) they involve some reputable people who in good faith believed what they were saying.

No knowledgeable person believes what Trump is saying about mail in ballots. I don't think he believes it. This is really different.
Trump will sign an executive order on social media companies
Well, yes, it’s a silly question. I’m essentially asking what would happen in a coup (as other people have said it is), and that’s not going to happen in the US anytime soon it seems. But it doesn’t mean we can’t ask, “what would probably happen?”
clear sign of stupidity ... nothing else needs to be said ...
>Social media websites do not fall under any kind of "publisher" obligation

No one said they did. But also Section 230 does not imply that they're exempt of that, in the case they become such a thing. And remember that those rights/obligations are acquired the moment they are exercised.

Consider the following:

Twitter (the platform), on its official twitter account (on their own platform) decides to publish something which has legal repercussions. Are they exempt of them because of that statement on Section 230? No, not at all.
If evolution is successful because it is unguided, then by guiding evolution we negate what got us here in the first place.

On the other hand, if evolution is successful because it is guided by a supreme mind, then our physical properties are only a small facet of what makes us who we are. Thus, a eugenics breeding program is unlikely to make a big difference. And, if we do selectively breed a bunch of attractive, athletic, high IQ individuals, then that could lead to a moral disaster.
Conceptually I think that's about right (meaning, similar concepts as us, but who's to say whether this is objectively the best approach...). Practically, we're heavy on AWS, so we've found that for our size/scope/breadth, it was more performant/efficient to store the data as parquet files in S3 and cataloged in AWS Glue, and yes there are a lotttttt of joins needed, so it's worth taking time to invest in some deep thinking about, how best to partition your data and how best to optimize the type/variety/complexity/number of joins you'll have to do.

I can see RDBMS being reasonable for small-to-medium size of data, but beyond a certain threshold, I think it starts to breakdown (at the few 10s/100s of TB level, maybe?).
There's https://wiby.me that's worked quite well for me so far, for finding very niche/specific things and when I wanted to be surprised.