skysight-inc/HackerNews huggingface dataset:
>You need both parties to know the nonce and the salt for this to work, so you’ll need to send it over.

I get the impression you don't understand what the nonce and salt are, so I'll break it down.

The salt is used to make the hashes for particular values unique to this site. It generally does not change across the site, but it makes it impractical to use pre-computed hash tables to find the original values for a given hash. By using a salt, the site ensures that transmitted hashes cannot be trivially reversed.

The nonce is used to allow the use of an HMAC to create a one-time hash that cannot be reused. This would typically be implemented as follows:

1. Service sends NONCE, SALT

2. Client Sends password as SHA256(SHA256(ClientPasswd + SALT) + NONCE)

3. Service Computes SHA256(StoredSaltedHash + NONCE), confirms that it matches what the user sent

4. If the two match, the user is authed.

An attacker cannot reuse what the client sent because the nonce is not reused, and he cannot fake the nonced hash because he does not know either the password or the StoredSaltedHash.
Yes! You can even use a brand name distinctly different from Gmail like "Inbox".
I guess it's for historical reasons. Markdown wasn't really that popular before GitHub made it popular. Hacker News is older than GitHub.
Tried skipping dinner?
Chinese Cultural Revolution
Sure, and if a meteor crushes the capitol while Yellowstone violently explodes in apocalyptic volcanic doom all while running out of toilet paper again due to Covid I suspect people will be upset. I don’t envision the hanging of any politicians though.
I see - you ended up crafting for your own community. What if you are not part of the community yet and you want to join one, how would you do?
Build Google Analytics in Go
There has been official training at multiple, large tech companies other than Intel specifically geared towards preventing even accidental use of language that can be taken out-of-context. The practice is alive and well.
In the venture community today, we reward “visionaries” much more than executors. And a big reason for this is that we make investment decisions based on pitches rather than on execution (aka working) in our decision-making.

Another reason is everyone wants to back the next Steve Jobs, and if you don't have those Jobsian traits, you fail the investor pattern-matching test.

Some startup CEOs know this, and have really perfected the VC signaling down to choices of clothing, speaking styles, and shitty treatment of (some) employees.

I heard something similar from an older advisor at the MIT Venture Mentoring Service. He said something to the effect of, "if you're not raring to go" and "your board has to practically hold you back" then investors wouldn't fund you. He was probably right.
I wasn't referring to basic updates such as minor UI/UX, security, etc. I specifically said, "substantially innovate."
You can buy your way past the queues either per treatment or with private insurance in the UK and still pay far less than in the US.

Most of us wait because the prioritisation is by clinical need, and is usually 'good enough' and some because they can't afford it.
It's hard to remember exactly what result quality was like in 2010, but I'm very satisfied with the utility I get form Google search. I can throw a dozen different oddball questions at it and either get the answer directly (without even needing to click through to an often slow and cluttered page), or get what I was looking for as the top result. They do all this in an extremely adversarial environment where "SEO" people spend the majority of their effort trying to boost their pages for specific words.
You can do this:

@_ images |> filter(size(_,1)>100, __) .|>
resize(__, 100,100) .|>
crop(__, 25,25,75,75)

with Underscores.jl. Not exactly `images.first.resize(100, 100).crop(25, 25, 75, 75)` anymore, to point out that this doesn't need every function to prioritise one argument, the pipe feeds into __ in any position. And that .|> applies them to each element.
>The US doesn't have much institutional experience dealing with rioters or massive protests of this nature.

I am guessing by your spelling that you are not American so maybe you are not familiar with American history or politics, but this statement could not be more wrong.
Anyone have any good suggestions for android recorders? Preferably something which will start uploading somewhere (dropbox? A server of my choice via ssh?) ASAP
In Germany, for such an unpaid internship you will have a contract that says that unless they fire you with a proper reason during those 3 months, your temporary contract will automatically convert into a permanent position. In many cases, it will also already list the salary that you can expect to receive after the 3 months are over. Plus you'll be meeting your future teammates every day in their office.

To me, that is a very different level of commitment by the company than working for "exposure" for someone who has no intention of hiring you.
I feel like this would be better as a Well-Known URI, for example /.well-known/password-manager.json with similar format to the repo – That way it's not up to Apple to decide what goes in the repository
You really want to build that house and I respect that, but the client just wants a tent and the hammer budget is zero. And since a storm is 10 minutes away they're not wrong...
What does Google have a shrinking share of? This article is specifically referencing ad tech, of which DFP has near 100% market share, while AdX is greatly outperforming it's rival (Facebook audience network pulled support for mobile web in April while Amazon's much-ballyhooed A9 platform turned into a big Whataburger).
As implemented in most places, Markdown does many unexpected things to user text. e.g. changing numbers in lists, breaking some urls, breaking textart.
Too soon, man.
Ask HN: What notes do you keep if not a student or a writer?
There has been a recent spike in HN discussions on the best tool for taking notes, as well as different note-taking methodologies. And I agree that there are good reasons to do so if you are preparing for an exam or writing a book on civil war (or a blog post comparing two JS frameworks). But for the rest of you, what notes do you keep?

I mean if I'm learning something new, let's say type embedding in Go, and I need to refer to it later, 1 - in most cases accessing it via a Google search is much faster than referring to my notes, 2- in 6 months, probably someone has written a better explanation for it, which probably will rank higher in Google results, and 3- in 5 years, it probably is obsolete anyway.

More fundamental types of knowledge are not going to expire, but the first two reasons are still there.

I see the need for a more temporary note-taking, say what actions the team is going to take after this meeting, but I think that is not what most people on HN mean when they talk about keeping notes.

So my question is: what are the topics for your notes, especially in the context of retaining knowledge for the long term?

Much appreciated!
Indeed. You learn in all roles that the only way to get your projects pushed through is to give overly ambitious timelines. If you were conservative or realistic, nothing would ever progress.

I've constantly been on projects where someone said, "This will only be a month of work for maybe 3 engineers." That project quickly becomes 5 engineers over a year because of empty promises.

That said, some of these projects frequently time a very long time because there's dishonesty in time estimates. If they were honest with estimates, you wouldn't have to cut corners. They try to cut corners to push a project through quickly - but it backfires constantly... Which leads to more work rather than doing the more effective and reliable part of lots of non-visible work before seeing visible results.
And as deeply entrenched as ever in the enterprise work space.
There's a lot of truth in what you're saying but Google did create some interesting products in its second decade, here's the list I came up with:

- Google Assistant is advanced magic. Much better than Apple's Siri or Amazon's Alexa, IMO.

- Google Photos is great.

- TensorFlow is close to its industry's standard.

- Chromebooks and Chrome OS are a hit.

- The Pixel line of phones is great, especially their industry leading camera innovations.
Yesssss you can definitely make 1.5k/month with Fiverr and upwork. It might be a grind right now but it's possible! You can get in with companies pretty quick too if you're just a nice person that works hard and communicates.
I just wish Apple allowed better integration with third-party password managers.
They should have spun off DoubleClick for Publishers and other server/ad mediation into separate companies and is likely what will happen if the government is successful in their case.
I found it helpful to work on nose breath power. I needed to for boxing as I was mouth breathing. So on my jogs I started to nose breath took some time to get the throughput I needed but sleep improved and general breathing feels much improved.
> nope

Wolfram isn't a crank but his graph idea is interesting and not much else at the moment.
Cops may ask you not to record and even threaten you with arrest for recording. Do not be intimidated; it is your right to record without obstructing.

If you find yourself in a situation where you might be detained and thereby unable to control interactions with your device, on iPhone you can disable TouchID and FaceID by holding one of the volume buttons and the sleep/wake button simultaneously for a few seconds. This will require you to enter your passcode the next time you want to unlock iPhone. Anyone have similar instructions for Android?
> The hypothesis is posed by Yishan Wong, an ex-CEO, with responses from Altman and Ohanian.

I found the response from Altman (https://old.reddit.com/r/AskReddit/comments/3cs78i/whats_the...) but where is the response from Ohanian?
Perhaps they should. It certainly hasn’t killed Microsoft, nor stopped them from innovating.
My general sense is that fewer power brokers in DC would complain if they had stuck with the bottom part and complemented that with GCP.

Its one thing to serve ads on the bottom (i.e. ads for pentalope screw drivers against articles about pentalope screw drivers). Its another thing to encroach on establish media outlets turf, AMP up their content and sell ads to Auto, CPG and Airline companies based on that content.
> It's not like engineers are experts in whether a feature breaks the law or not, nor should they be.

"Full stack engineer" gets ever more all-encompassing.

> If anything, these execs were forced to be less complacent.

An alternative explanation would be that the hypercompetitive win-at-all-costs types left for less regulated pastures, leaving the more complacent ones.
Ask HN: Companies working on privacy-related problems you suggest working for?
I am looking for companies/startups/foundations such as Mozilla, Signal, etc.
It's just a small mistake in the CSS file :) Since Julia requires a ton of Unicode characters, I'm using a different monospace type from usual, so I forgot to put the fall back `monospace` at the end of `font-family`, but it's fixed now.
Adding Scripts to Specific Pages with Gridsome / Vue
As it happens I have catalogued and ranked all mentions of Coursera courses on Hacker News - you'll note that many of the mentions in this current discussion appear there as well.

HN Academy: https://yahnd.com/academy/

I've also more recently done the same thing with mentions of Coursera on Reddit: https://reddsera.com

Hope it helps!
>It's hard to reconcile that theory with the facts of most of the cases that make the news.

Why would you expect a uniform sampling of cases from the news? Police killed 1000 people last year. Almost 3 per day. How many of those did you hear about? Why would you hear about some vs. the others?

> The first step everyone needs to take to resolve this problem is to stop blaming the victims of police violence.

Who are you addressing this to? Me? I didn't blame George Floyd in the least. That was straight up murder.
Dehumanizing someone for holding right of center views and then using that unilateral label as justification for targeting them is nothing like domestic violence.

People have started throwing around the labels "racist", "white supremacists" and "Nazi" far too liberally given that these words have the power to destroy lives.

When near center moderates are deplatformed and start to feel targeted for wrong think, you push them to align themselves with the extremists, the only people who claim to actually be looking out for their views and well-being. Not to mention that most of these accusations are based on glaring double standards.
The argument is:

Cops are heavily equipped, given tremendous leeway to protect themselves, significant attacks on them are rare, and those attacks are met with overwhelming and immediate force. As a result, their job is actually surprisingly safe - your average window roofer is at more risk of on-the-job injuries and death.

What's happening at "these events" are that cops are now instigating violence and suppressing peaceful protest of their activities. Not only is that unacceptable, but it works counter to the supposed goal of protecting themselves. https://en.wikipedia.org/wiki/Police_riot

Showing up hyped up and armed to the teeth doesn't protect them, it escalates things.
In a civil-war scenario, that level of destruction would be suicide for a government's economic and international survival and cause mass military desertion/defection. That counts as deterrence.
Fire in a crowded theater is not an exception according to the Supreme Court and hasn't been for a while.

Clear and present danger is the standard.

According to the Supreme Court saying that all members of a certain minority group in must be killed, is covered under free speech, but saying that a specific member of that minority group must be killed at 9 p.m. tomorrow night, it's not free speech but clear and present danger.
This is using the terminology a bit strangely. Usually a Turing machine is something that's in a complexity class above a stack automaton which is in a complexity class above a finite state machine. And then we think of computers as Turing machines because that's helpful but they are in practice finite state machines because they have a limited amount of state. But the equivalence between a Turing machine and a state machine in the article is only true if the state in the state machine can be infinite.
Here is the definition: https://en.m.wikipedia.org/wiki/Hysteria

I am not sure why that word comes across as offensive given that people were rioting. I can’t think of any better example of a sudden burst of excess emotion.
I can vouch for this one as well.
hahaha. oh nooo. you’re not satisfied :)

the initial discussion was about all physical object. since you cannot have concepts without representing them onto something physical (paper, in the memory of a computer, in brain, etc) it immediately follows that concepts exist only with a state machine substrate. therefore concepts, distilled to their essential components are (insanely large insanely distributed) state machines
Can confirm, since the lockdown I've been cycling a lot more and I feel amazing after I cycle. I feel like cycling also does wonders for the mind, I can think a lot more clearly after and my mood improves significantly.
This is a few components that make up the very baseline of some aspects of a standalone 5G core.

If you want to add commercial base stations to it, you'll find you're missing a few non-standardised things missing from all "open source" solutions - you'd need base station orchestration and control, to handle configuring and managing the base stations and getting them to behave in the ways you want.

For one or two base stations you might cope without it, if you can figure out how to configure the radios, and they happen to work. But generally, there's a load of integration to be done that isn't part of the standards, and that you'll need in addition to this. You'll also need to handle scaling up and clustering some of the components that need to scale up with traffic.
I suspect you don't mean mode in the same sense but quantum field theory does model particles as vibrations in a field.

But, those particles have, as good as we can measure, infinitesimal volume
First of all. Thank God for the police. Thankfully there are men and women that are willing to serve in this role because the Thin Blue Line is a very real thing. There is not very much standing between order and chaos, and after seeing much chaos, I choose order.

Having said that, absolutely have a dashcam/recording device in your car. I do and it has saved me from getting a very big fine in addition to providing hours of entertainment after the fact.

Remember respect is a two way street. When in uniform, police are always your adversary if you have a negative encounter them. That's their job. Respect that reality.

Finally, if you want to change the world, then actually do it. Join a police force and be force for good. Or at the very least, study law enforcement as an academic pursuit. There are no shortage of books that go way out in the weeds on the subject.
Weird example because I am sure Facebook is a major outlet for vacation rental marketing. Here's the Vacation Rental Management Association's advice on using Facebook: https://www.vrma.org/p/bl/et/blogaid=1253

I imagine other large players in vacation rental marketing are VRBO, TripAdvisor, and AirBnB.

Anyway if you redefine the online advertising market to include only the things that Google dominates, such as search ads on Google itself, then sure you can make it look anyway you want.
Ask HN: How to prepare for a back end position interview?
I am looking for resources for any step of the process of hiring for a backend position. Soft skills, algorithms, programming challenges are my main concerns. Suggesting any related resources is highly appreciated.
The Fusion Driven Rocket
> every single American cop

based on what?
Your best bet is going to be freelancing/software dev contracting. There are many platforms other than Upwork and Fiverr. If you're on LinkedIn, post it to your network that you're looking for some consulting work. Talk about what you can build - focus on outcomes (how you can help clients deliver stuff). Join Slack communities focused around your skills. Find any community you can join and keep an eye out for work.

Even in a "third world country" (fwiw I don't like that term), you can easily get $25-40/h doing freelancing for US/Europe based clients. At $30/h, you only need to freelance 50h a month to make $1.5K. It is very doable.

My personal 2c is ignore all the other advice you're getting in this thread (some of it is outrageously impractical and divorced from reality) and focus on finding freelance work.

NOTE: I'm talking from experience (though I'm in the US). Heck, I'll send some work your way if you're good at your stack. Send me an email (in my bio).
No. Just an act of Congress.

Its actually relatively easy to change the structure of the executive branch. An executive order would do, but each President can overturn executive orders as they get elected.

So it needs to be an Act of Congress if we want the organization to last between presidential terms. Of course, a future act of Congress could wipe it out, but that seems like a hard sell if we ensure that Americans remember the lessons from today's unrest.
I wouldn't mind if they fixed the problem where my old profile picture keeps appearing in gmail and calendar. It's been changed for over a year now.
I think half of the police force should be 'armed' with nothing more than cameras.

Arrests are not necessary in the vast majority of situations police are called for, and recording technology is far superior to verbal testimony for serving our courts
> How is that any different than using python.org python? You'd still be unaware of what versions to use.

Because python.org doesn't ship with numpy, matplotlib, or any of those other packages. Anaconda does, which makes it possible to import those libraries in projects without explicitly listing them as dependencies.

> That's way more of a problem with pip. You have no idea what versions a pip package is pulling in until install and then what binary actually gets installed depends on your compilers.

What? The problem here is that conda has it's own repos, which contains different packages than are contained in PyPi. What exactly do you mean by "no idea what versions a pip package is pulling". You realize you can set versions, right? numpy==1.13.2. The problem is numpy 1.13 on Anaconda can be different than numpy 1.13 on PyPi.

> That's impossible unless one is actually copying binaries manually overtop of system binaries. You'd have to be root or use sudo to overwrite the system python manually. The whole point of isolation is to keep system python isolated and stable for system stability. That can happen if someone installs python from python.org and copies it into place.

This is just wrong. Anaconda overwrites the system python by messing with the user's $PATH regardless if you are in a conda environment or not (probably easy to disable this "feature" but I've seen a lot of people with this setup). This causes major headaches.

> If you are working with SW engineers, you better know what versions you are pulling in, because you are going to be in serious pain using pip and trying to understand the provenance of your packages. Conda is way more powerful here for serious engineers to specify exact versions and reproducible and exact builds.

I'm not sure why you think you can't specify exact versions with pip. Projects like pipfile take it even further. The issue with conda is it's different package repos, not the ability to lock package versions.
> milking their Windows/IE/Office monopolies (and eventually losing them)

Losing them? Nearly all the business workspace I know is Windows-only. Maybe not in Silicon Valley or top tech schools, but Windows is the norm for most businesses. It's not a competitive marketplace.
It's been normalized everywhere, it comes off to me as some sort of badge of honor for people to blame all the ills of the world on one race. Amazing how this doesn't fly for other groups.
>Honestly, I don't get why /r/all even exists,

I'd venture to guess /r/all exists for the same reason the Facebook News Feed exists: to increase engagement with the site. It's a curation mechanism that amplifies the already popular items within the sub communities, and exposes them to the community at large in a virtuous (vicious?) cycle.
I wouldn't, but I think it's important to be sensitive to what people are actually protesting about. It's mostly these outrageous cases and (in the case of black folks) lived experience that make people angry.

People cite statistics to illustrate the fact that these cases are part of a bigger problem of systematic racism. Some people expend a lot of effort trying to explain the statistics away, but that largely misses the point.
It might work, could you explain how you convert emails to JSON? There could be quotations, attachments etc - is there a script for that? Maybe a manual somewhere?
Same here, I don't know what their standard for racist and violent view is?
Dear Mr. ..., is the direct transition for a common formal getting in Germany. Furthermore formal greetings are used for anything business related in Germany. Through that's getting less common with the younger generation.

So yes for a middle aged German speaker with non fluent English skills not using dear or omitting the "Mr" can seem that it maybe might be unprofessional or impolite so they will just add it.