skysight-inc/HackerNews huggingface dataset:
Toolchain compromises are a non-zero risk but involve a lot of orchestrated resources to subvert systems to meaningful effect (simple exfil is sufficient for most corporate espionage v. stuff like Stuxnet to enact specific changes covertly). A company doing that given legislation to keep recommendation behavior and policies transparent to the public would be violating the spirit of the regulation by creating more opacity and delusion, no question. Admittedly, they're not going to be prosecuted in our current regulatory cyberpunk-esque hellscape, but neither would any public-benefit regulation pass anyway making the discussion of subversion moot, right? So presuming such a societal environment where regulation _could_ pass, we would hopefully have a more effective regulatory policy framework where subversion of the intent to be transparent for the sake of public safety and trust while still protecting trade secrets would be under sufficient scrutiny. All I know is that engineer-activists like Jaron Lanier are working with more tech-aware activists / politicians like Yang in proposing more effective tech regulatory frameworks than the past, and their efforts should be a lot more effective than either the current collective actions of the throwing up of our hands or yelling, whining, and screaming hoarsely.

From a regulatory standpoint mirroring the nature of our organizational tendencies, I posit that the _policy_ models should look similar to Mickens' security threat vector model - Not-Mossad or Mossad.
The reason there is such a large premium for on-campus education versus online universities is because on-campus education is an experience as much as it is a service.

If you're only interested in mastering the content, then online learning may be the place for you. That's why we see so many people pursuing online courses for their master's degrees and when they return to school later in life. They just want the content; they don't need (or have time for) the on-campus experience aspect of college.

The on-campus college experience encompasses so much more than just acquiring knowledge based on what's taught in class. It's dorm life, it's extracurriculars, it's meeting people and forming friendships and hanging out with them outside of class time. It's being in a place where there are so many interesting people to meet. It's being in a relatively forgiving environment where practically everyone is figuring out how to live on their own (or with roommates) for the first time. Being physically present in that environment is a key draw.

For me, the VAST majority of the value I got out of my on-campus education was the stuff that happened outside of class time. And I'm not even talking about the friendships or the networking or the fun. I'm talking about my actual education. For instance, I learned a lot more about journalism by working for the campus newspaper than from classroom instruction. And I don't think that atmosphere or energy can be easily recreated virtually.

I say that, by the way, as a remote worker who has had to spend a lot of time convincing managers and higher-ups that yes, remote workers can be as productive and energized as in-office workers. Remote workers are generally happier when they're not looking to their job to supply all of their social needs. But an on-campus experience is much more all-encompassing in terms of what needs and desires it fulfills for post-adolescents.
RE #2: I agree with you in principle. But in practice, I think most situations that devolve into free speech arguments are over "I have the right to be an asshole" statements. As the comic points out, it's basically the only argument you have when your comments have no merit.
I also did the same but DDG is still worse than google for technical search.

We really need more competitors at search engine space but DDG is still far away from google for technical semantics search.
MicroProse Returns with the Mighty Eighth, a 10-Player WWII B-17 Simulator
I will just assume they have a direct feed from FB, Google and Twitter too. And possibly Apple.
I’m not saying it proves anything. I’m saying HN the site is different things to different people. It’s hard to say what people intend when they upvote something, but I think they mean that it helped them and think it belongs on HN. By virtue of upvoting, they signal its relevance to them and their vote of confidence in its relevance to the wider HN community. I don’t have any burden to prove here or any angle to promote. Users vote, and HN is the result. HN wouldn’t be HN without its values (thank you) or its users (thank you all).
How does the Gmail unsubscribe button work?
I believe three things:

1) In a normal situation, some people are equally productive or more productive working remotely, and they should be able to.

2) In the current situation, almost everyone is less productive working from home, because they weren’t prepared and they have to deal with other stresses (family at home, too small of a space, fear of infection, etc.)

3) In the current situation, educators are less able to teach online than they would in person in a normal situation, and similarly students aren’t able to learn as effectively.

It can both be true that working remotely in a normal situation should be an option while this situation makes it harder to get a good education.
Slightly tongue-in-cheek answer is that the rest can’t afford their devices.
Indeed. Anyone who lived under Edward I. Koch’s mayorship would agree that the broken window theory has merit. As you say it also requires proportional response with the intention of steering behavior towards a better society rather than looking at it as purely “punishment”.
Tenochtitlan
You're right, there is something to be said for this billboard being more about building name recognition than anything else...I just worry that they're jumping the gun on it a bit, and honestly would have loved to have seen something that made a case for privacy. That would be very difficult to do with a billboard, though.
He is saying exactly that.

If they loot shot then, that's what he is saying.

It would be fine if it's: if they loot arrest them and if they treat to prevent this by using weapons like guns then you can shoot them if there is no other way.
I was looking into debezium to do this but an elixir solution would be fantastic. I'm trying to solve this in my own startup. Are you guys on the elixir slack? would love to sync up.
Techmeme.com. It's the best aggregator and has been for over a decade IMHO.

And I appreciate the pithy article summaries.
Designing for Time-Blindness
This is great! Now we can have a real conversation about free speach, net neutrality and so on...hopefully Trump will get some some abusive dmca notifications as well. That would be gold!
See other comment here https://news.ycombinator.com/item?id=23350712

Drinking raw milk from a local farm has been one of the best things I've done in the past year for my health and nutrition. I drink almost a liter a day.
It's a non-problem. For example, three.js (a library that covers all your 3D rendering needs) is 600kb minified. You download it once and drop it in your project. Update it every month if you want, or keep using the same version, it won't break. Doesn't have any transitive dependencies either. If you don't need all its functionality, tree-shake your project at build time. A small set of such libraries can cover everything your project needs. The whole affair is trivial.

Though if you come from a "many small dependencies" culture, things look different. You'll try to cobble the same functionality from twenty libraries, each of which uses twenty others, and not the same versions. Soon you're asking for optimization - how to make download size smaller? How to build a whiz system for versioning and dependency resolution? Maybe some clever hashing and caching will help? But if you'd used a small set of comprehensive libraries from the start, none of that would be needed.
Why isn't this tweet censored?

https://twitter.com/oliviagatwood/status/1266231558047846400
Judge for yourself, the exact tweet is:

> These THUGS are dishonoring the memory of George Floyd, and I won’t let that happen. Just spoke to Governor Tim Walz and told him that the Military is with him all the way. Any difficulty and we will assume control but, when the looting starts, the shooting starts. Thank you!

Worth noting that this is a quote from former Miami Police Chief Walter Headley. In '67, he said the phrase "when the looting starts, the shooting starts" during racially charged protests.
American citizens should be shot in the same circumstances any other citizens should be shot, like when all other reasonable countermeasures fail and they are posing a credible treat to other people's lives.
How else would you interpret “when the looting starts, the shooting starts”?
You can also pull salaries of key personnel for non-profits from their tax forms which covers manu(most) private universities.
> still, does not make it racism

Depends on your definition of racism. If you just mean "atomized, individual prejudice," you might be correct.

But this is textbook systemic racism, even if the cops aren't acting on a conscious bias. Even if their chief gave them clear orders explaining why, and the reasons ostensibly had nothing to do with race, it is still systemic racism because it falls into a pattern of systematic, nationwide discrimination which is irrefutable and that disproportionately affects people of color.

Recommend you read "So You Want to Talk about Race" by Ijeoma Oluo or "Me and White Supremacy" by Layla Saad to learn more about racism as actual experts on the subject understand it.

(Edit: typo)
uber has a lot of cash and yet still laid off.

i think it’s in the shareholders interest to lay-off instead of eating into cash reserves
I agree that the existence of the problem doesn't justify any possible policy, and patting down random groups of teenagers does seem bad. But, I mean, crimes are bad too. Ideally nobody should have to live in a neighborhood where they're afraid of being mugged or having their car broken into, and today a lot of people do.
Educators are working their best, but that doesn’t mean that it is equal, because the stresses that have been put on students and educators are significant and can’t easily be worked around.

Also some things are simply impossible to do remotely, like music lessons or chemistry labs.
Twitter is well within the rights to do this, but I have seen tweets from blue check marks essentially calling for violence and Twitter didn't remove them. So, does that mean Twitter actually -supports- those view points now? If Twitter is going to police people, it needs to be across the board. Otherwise it's just a weird censorship that is targeting one person and can easily be seen as political.

Everyone is applauding this because they hate Trump, but take a step back and see the bigger picture. This could backfire in serious ways, and it plays to Trump's base's narrative that the mainstream media and tech giants are colluding to silence conservatives (and maybe there could even be some truth to that.) I know the Valley is an echo chamber, so obviously no one is going to ever realize this.
This is good feedback, and quite honestly something I haven't quite figured out how to communicate to future potentially skeptical users. Basically it's just a personal project, that I host on my personal AWS account.

I literally just made it because I didn't want to pay for a service anymore for my static sites that need to collect information.

Maybe solidifying some of the verbiage on the website, and giving it time to not be so new are the two biggest things I can do to solve this?
Attack Surface Monitoring
Ask HN: Do you use your personal phone for personal use, at work? How much time?
I am curious if others do this and how much. I am also doing it but i never could amount the time because of the shortness of interaction time. Maybe others have a better idea of their behaviour.
Basically all telecom. Highly important for three-letter agencies to have access, and they have basically unlimited resources, so they get access.
Off-topic, but what kind of door lock is shown in this picture?

https://upload.wikimedia.org/wikipedia/commons/8/89/Room_641...
Violence != Shooting people
There are lots of petty crimes on Wall Street too. Check out downtown Manhattan on a Friday night and you'll find plenty of people with illegal drugs...yet...the broken windows theory seems to focus only on select [poor] neighborhoods.
Uh, maybe I should have worded that differently. I didn't mean "extremist" as a value judgement. Just someone being on the extreme end of the spectrum "all software should be free" vs. "all software should be proprietary and patented".

Edit: And now I see that in my grandparent post I wrote that the BSD and GPL people are extremists on opposite sides of the spectrum, which doesn't really match the above. I don't know what I was thinking when I wrote that, what I wanted to write was that they are both on the same end of the spectrum.
The 2016 US election only had 56% turnout[1].

What is the threshold for determining whether an election is valid? If I don't like the choices can I also boycott? Would it have any effect if another 6% of the population did likewise?

1. https://www.pewresearch.org/fact-tank/2018/05/21/u-s-voter-t...
which college is this, if you don't mind me asking? I mean the dean of HR is making 1million ...
To be honest, I am not sure what should be wrong with adding code by hand.

Libraries were added manually by legions of developers long before one thought he'd need to create a downloadable left-pad "package".

The whole package management issue is overrated.
Not op.

You can use something like this.
https://github.com/FGRibreau/mailchecker
Thanks for this comment, and thanks for all your work on generative models.
Would you be willing to open source this? That way it can stay free forever (at least basic functionality) and you'll likely increase the adoption by other folks.
Lethal force is occasionally necessary, and I agree it should be applied in as minimal as a way possible.

That’s pretty orthogonal to whether or not the political leader of the US should publicly say that looters should be shot.
This is great and super useful! The admin panels are shockingly well designed for something that is free. Thank you!
I understand why they have billboards. I'm not sure I get why they have this billboard map up, other than showing that they could.

Tangentially related, DuckDuckGo is also sponsoring NPR programming. I've heard their snippet on All Things Considered a couple of times recently.
Please note:

The calculation of TyG is ln (fasting blood sugar) x triglycerides/2). Many studies make the error of calculating it as (ln (FBS x TG))/2. The only online calculator I've found, I think, falls into the latter category, or has worse errors - I didn't go through it too rigorously, but I put in values beyond what human life can sustain and didn't get close to the cut-off for this paper's bottom risk tier.

If you look at studies/calculator using the latter calculation, it looks like this study looks at really, really severe diabetics.

If you compare with the appropriate calculation, though, they're looking at more run-of-the-mill "not optimally treated and obese" diabetics.

Hosseini 2017 did a paper analyzing a number of other TyG papers and calculating results under both calculation methodologies, for context.

Please also note that this paper does not state when the results were collected. Insulin resistance/hyperglycemia is a symptom of sepsis - if these labs were drawn on already-severe patients, it would be entirely unclear whether they reflect a cause or an effect (or, as is almost certainly the case, both!).
Only if it's a good one, the bad ones will just load more content before you're able to click anything in the footer
i can tell you from experience it’s often misrepresented as well. the leadership will say something in an internal announcement and when it gets leaked it’s like a game of telephone. where the news is slightly different than what was actually said
Why would a Wikipedia article require a date? Someone else just posted a Wikipedia article about an ancient Aztec city but I think it would be kind of ridiculous for the title to include (1325).
We have one in Berkeley. My 2 year old daughter loves it. I guess this is how branding works.
Remote work in engineering is completely different then remote learning. Engineers are self-directed, a particular type of thinker. Maybe the professors are just as effective at performing remote work, but that does not mean that all students can just flip a switch a perform at the same levels.
Yes, what a heroic display we're commenting on here. What exactly is your point and how is it relevant to this unsettling video? Just the platitude that not every interaction is necessarily racist?
You can choose to use E2E if desired. Why is the default so important?
Trump playbook:
1)cause problem
2)throw a fit, bluster, and lie to get his base riled up
3)gain minor concession from opponent and/or back down
5)claim victory
"[triglyceride and glucose] index was closely associated with the severity and morbidity in COVID-19"

So perhaps part of the reason why COVID-19 morbidity is lower in Japan/Korea/Taiwan compared to the U.S. is due to lower prevalence of metabolic syndrome. I wonder if that's also true for Europe.
why there are so many billboards in bruxelles?
I'm a Redux maintainer. As I said over on Reddit when this was posted:

The biggest issue is that it goes directly against the principles I listed in the Redux Style Guide [0], particularly:

- put as much logic as possible in reducers [1]

- reducers should own the state shape [2]

- model actions as "events", not "setters" [3]

Also, Dan pointed out early on in Redux's development that "cursor"-style approaches to state updates are not how he intended people to use Redux [4].

Will it run? Sure. Is it something I'd actually recommend? Definitely not, and especially given the existence of our official Redux Toolkit package [5] and the React-Redux hooks API [6].

[0] https://redux.js.org/style-guide/style-guide

[1] https://redux.js.org/style-guide/style-guide#put-as-much-log...

[2] https://redux.js.org/style-guide/style-guide#reducers-should...

[3] https://redux.js.org/style-guide/style-guide#model-actions-a...

[4] https://github.com/reactjs/redux/issues/155#issuecomment-113...

[5] https://redux-toolkit.js.org

[6] https://react-redux.js.org/api/hooks
Sure that's true in theory. In practice contractors are let go at the end of their contract unless there's a renewal and often due to co-employment risk they can only be renewed for a certain length of time before they must either be hired or let go. It's also seen as no big deal to end a contract early. You are there fully at the convenience of the company. Often there's no need to go through HR, they just make a phone call to your agency for you not to come in the next day. That's much different than most companies treat their FTEs, even though in the USA employees have almost no protection in most states anyway.

Just because something is legally similar does not mean it's used the same in practice. This is very true of contracts.
technically, you can use any valid python expression in annotations.

[int]
{str: int}
{'x': float, 'x': float}

are all valid python syntax, so e.g. these are all valid:

def f(xs: [int]) -> {str: int}:
...

def g(x: 1+2+3, y: what('ever')) -> foo / bar:
...

it's just that tools like mypy won't be able to use that, because they expect a class or a `typing` type.

i'm pretty sure you could even write a mypy plugin that'd interpret `[int]` into `list[int]` etc
> Is the POTUS clearly inciting violence or is it another instance of people having a wild interpretation of what he said?

The POTUS unambiguously quoted racist Miami police chief Walter Headley who called for violence against African Americans during the civil rights movement of the 1960s. This couldn’t be a more clear example of inciting violence.
This is incorrect.

If you are hashing passwords (or doing equivalent operations - specifically, the inputs are much lower entropy than the bit length of the hash output, and attackers have basically unlimited guesses), then you want a password-hashing algorithm, and not a general-purpose cryptographic hash, and you want it to be much, much slower than any general-purpose cryptographic hash - i.e., each attempt should take a good fraction of a second. Argon2 and scrypt are good password-hashing algorithms. None of MDx nor SHA-x nor BLAKEx are suitable here, at least not directly. (You can use them as a primitive in a password-hashing algorithm - for instance, Argon2 happens to use BLAKE2 internally - but then it doesn't matter if the primitive is "too fast," the password-hashing algorithm will just run it multiple times to slow things down.)

For all other purposes, including signing and verifying files (documents, executables, etc.), signing and verifying cryptographic certificates, signing and verifying chats, etc., - i.e., cases where the input is higher entropy than the hash length and you're using the hash to allow you to sign/verify a smaller item than the original message - you want a fast, secure cryptographic hash, because that's how you build a fast, reliable system that people will use and not decide they want to use plaintext instead. Also, as it happens, most cryptographic hashes (not password-hashing algorithms) that are slow are also weaker than the cryptographic hashes that are fast.

These are two different use cases that demand two different tools, and it's dangerous to lump them in under the terms "security context," because you'll end up with less secure and less usable systems. Password hashing needs a password hashing algorithm to be even slightly secure, and everything else needs a good hash, not just a slow one.
Great, glad to hear RTK is working well for you!
Nuclear Tornadoes
Employers are cutting people’s compensation.

In any case, completely different scenarios. Except in very rare cases, employers don’t make huge upfront payments before the work is done. College students do.
>In my state, one must comply with any order from a police officer

Surely you are mistaken. As but one example, if a cop shows up at your house and says you need to let him in to search, you can tell him to stuff it.
I've also found that it's more useful to use a good doc as an outline for your own documentation than to start from scratch + style guide. Using a good doc as a guide can help you develop your own documentation style – you can figure out what works and doesn't work for you.

Style guides can be great in the right context, but I think focusing on them too much can take away from the most important part of documentation – the content.
> Cops can hold you for some amount of time, generally around 24 hours without cause.

This is simply not true. Police may not keep you detained if they do not have probable cause or reasonable suspicion that you have committed a crime. However, in real life, they do this sometimes, even though it's been ruled unconstitutional.

They do occasionally face repercussions. Thousands of civil rights lawsuits are settled quietly around the country every year, and some go to court and establish precedents, such as Turner v. Driver.

They don't suffer consequences enough, though, and depend on citizens not knowing that what the police are doing is wrong. It's also difficult due to the "thin blue line" BS where cops are elevated above the rest of society.
Looks like rivets are holding a panic bar or stronger bar.
I see what you're getting at but it's not really a valid comparison.

Advocating violence (or whatever you want to call it) on Twitter directly affects their bottom line, and enjoyment of the site for other users.

More simply: A toxic environment repels advertisers, users and investors.

Using Namepcheap/AWS/Intel/Whatever for the same purpose does not affect those companies bottom line, or otherwise affect the user experience for other customers.