skysight-inc/HackerNews huggingface dataset:
Except "embracing" is definitely not the right word. Very few professors I know are happy about this whole situation. Universities are begrudgingly accepting the fact that they can't have in-person classes, so they have to turn to online alternatives. Tuition can't be changed because the few costs that are being saved (facilities still need maintenance) are offset by the massive losses in revenue from student housing and the added costs in prepping online classes. Very few professors are thinking that they're delivering the same quality of education online, even though they're having to work even more to create and deliver an online alternative from scratch, plus having to teach themselves video production skills.
One of our designers teamed up with one of our web developers, went away for a week, and came back with this website for it:

https://www.outfluxdata.com/
I hate teams with a burning passion but:

> it’s just not going to work.

Some people love teams, and it’s enough people to stifle the company from spending even more money; and, crucially, from having sensitive data spread across multiple companies instead of just one.
The scenario is "without oil" and not "based on renewables".
Hasura has been a godsend for me. I'll be using it for all my MVPs for the foreseeable future.
Its dogma. Like a religion. A whole generation of people believing in things with no root evidence except that the knowledge is ubiquitous
Not OC, IMO MS should be forced to offer 2 different products, Office without Teams and Teams should be an independent product you would have to opt-in and buy. Then if Teams and Office communicate then this protocol should be open so anyone could use it.
It is quite amusing to see Slack filing competition complaint after being so brash in bashing MS at the launch of MS Teams.

Remember the full page ad they ran in NYT? https://www.theverge.com/2016/11/2/13497766/slack-microsoft-...

My oh my how the tables have turned. There is something to be said about Microsoft and their ability to execute in the office space. Even my Dad, an architect at 70yrs old, is using MS Teams, while he never heard about Slack or any other collaboration tools.

And looking at their product portfolio around MS Teams, if there is a company I'd be willing to bet that they win the workplace transformation race is Microsoft. It's easy to forget when you're working comfortably in the Silicon Valley tech scene, that there is a real business world out there and MS is the ruler.
I don't think I disagree with your assessment of Twitter, but I don't see the problem. It happens all the time.

The Wild West gave way to towns and suburbs too. Turns out, most people don't want to get shot in the street at high noon, and once the pioneering time is done, that kind of behavior becomes no longer acceptable. Pioneers who have also decided they're done risking having to duel in the hot sun will stick around; pioneers with more risk tolerance (or a thirst for that kind of experience) then often set out for new territory to tame.
And you can't do that remotely because we don't have a decent network connection?
> someone was able to get into Twilio's Amazon Web Services S3 bucket, which was left unprotected and world-writable

"Someone" was able? If the bucket was unprotected and world-writable, then _everyone_ was able.

> 'non-malicious'

> And judging from the URL involved, it appears to be an attempt to install a payment-card skimmer – RiskIQ has spotted the same URL in other S3 buckets targeted by miscreants.

In what world is that non-malicious? Non-immediately-damaging _maybe_, but it seems clear that there was a malicious chain of reasoning involved. Twilio got super lucky if this is all that happened.
“But it has emoji’s and we have a built-in bot that will fire off http requests to endpoints you choose!”
It’s not exactly how you’re reading it, but you could say bleeding edge is how he operates. When there is a 51% chance of success, he goes for it. We’re talking in the lab. For consumer products, the standards are different. A lot of his statements are about the lab versions.
My understanding is that the dosage within those few seconds is the equivalent to absorbing half a year's worth of radiation. That's explicitly what Sieverts are designed to measure: https://en.wikipedia.org/wiki/Sievert

Correct me if I'm wrong, though?
Databases are also designed for safe concurrent access with enforceable constraints on data. Would you like your application behaviour to depend on a transient "database" someone made up on the fly? :)

I think the key is that your database stores data that lives outside your application, making it observable outside any particular application instance and allowing you to perform ad-hoc queries to validate consistency and fix problems. If you have such mutable state inside a process, it can be very difficult to debug problems when a series of interactions sends your process into an inconsistent state that is only detected some hours later when (if) it finally crashes.
Yeah I also noticed lately that the numbers collapsed after a peak on June 24th. The people being diagnosed on the 24th should have been infected just about on midsummer. And then the numbers collapsed. That matches extremely well my experience that after midsummer (June 21st) most Swedes clear out the cities, going to summer houses or abroad or, failing that, being outdoors as much as possible.

So I was "surprised" to not even see that fact be mentioned in the article and would be cautious about attributing this to the Swedish strategy. Did they make any policy changes in the days leading up to the 24th?
At that point you've got enough wealth built up that if you've played things right you have a part time job managing your own portfolio. And a lot of people on that route that I've met have vague ideas of doing charity work or something at that point.
Sure, but their distinction seems kinda silly. They're arguing that because the Microsoft Office suite has been so successful, adding any new product to it is anti-competitive.
Scott Alexander is a public figure. He himself shares his first name, middle name, profession, and city.

Is that true of “Maria” in your example?
How to Check and Analyze Website Traffic Statistics: Beginner's Guide
> its market-dominant Office productivity suite

is it really that dominant nowadays? I think it was around late 2000s when I last saw a 'use MS Word format' in any personal/corporate document exchange
The Automated Administrative State: A Crisis of Legitimacy
Because that's the academic answer that doesn't have to deal with real world constraints and pressures. I too have a deep hatred of the "you don't want to do that" answer for this reason: I do deal with real world constraints and pressures and I'm asking my question because "the right way" can't be done in my circumstances!
This is the correct design pattern as of 2020. Roles + STS, and always be stingy when granting a role any permissions, both at the resource or API level.

But, as others have said, the documentation at times is poor at best, and it can be easy to make mistakes.

Some preventives every ops team can take are:

1. Never make manual permission changes in the console. Everything is done via SCM’d code.

2. All permission changes are peer reviewed.

3. Create logical separations of buckets so it’s more obvious what the permissions should be of a bucket. You can go so far as to have separate accounts that are for public uploads, separate accounts for public assets, etc. Avoid granting elevated permissions at a folder level, which is harder to understand as a developer without access to view the ACLs.

Good luck everyone!
New G Suite security features
I think you might be conflating two camps of academics. There have been folks for a while now who were vehemently against online education, and there are also those pushing digital pedagogy forward. The former were stuck in a rut when classes moved online this spring, and the latter were there to pick up the slack and start organizing workshops and trying to make all university teaching better online.
This is right on. Slack's pricing is based on regular usage, so they have an incentive to keep you distracted (to put it bluntly).

Microsoft sees chat as a piece of an overall communication "puzzle". They have Sharepoint for more persistent information and Yammer for "outer-loop" communication.

My startup (https://www.friday.app/) is based around the idea that there needs to be a "home" for the most important stuff at work that complements workplace chat. It's somewhere in-between Slack and a wiki (which most people don't use regularly).

Workplace chat tools like Slack are wonderful for quick collaboration, but if you over-index here you will run into trouble. That's why Zapier, Automattic, and Stripe have all built their own internal tooling to help.
Show HN: Genomelink and I built this Open Biobank to fight against Covid-19
No love for the corporate stalwart waterfall chart.
I'm not sure why, but it is often ignored or despised by people who geek out on data viz.
briefingsforbritain is a pro brexit site that pretends not to be. Their whole Advisory Committee are hardcore brexiteers as are the editors etc.

This is another CLASSIC case of Brexiteer-ism. A very bias source pretending it's not. I'm honestly struggling to think of or find an honest, Pro-Brexit source at this point.

The BBC and WTO both have pages on this:

https://www.bbc.co.uk/news/uk-politics-41859691

The WTO have one too:

https://www.wto.org/english/thewto_e/countries_e/united_king...

Not good...
Why no spinbox?
Sorry, it's an X1 extreme with a i7-9850H, also 45W. Compute capability wise, I'm quite happy.

I've been disappointed with build quality compared to the older 440s. The nvidia prime setup with a shared frame buffer also makes the external display ports more or less useless under linux.

I feel like I've paid a high lenovo premium for a more-or-less average notebook. If all branded laptops are using the same platform, I'm wondering if there's a way to avoid paying that premium.
So some brief advice from spending about 5 years as a visualization engineer/designer/data scientist:

1. Get an intuitive understanding of the data

2. (via Alberto Cairo) Aim to allow the user to correlate, organize and compare this data

3. Come up with a few visual means to do no. 2, and get feedback and iterate.

4. Go to the catalogs and see what work has already been done on your version of 3, and then implement.

It is amazing how many "original" charts I have created which have already been named and studied from a perceptual science point of view. But it is still important to come to a clear understanding from your own point of view of how the data fits that representation.
One of my all time favorite talks in software.
Some studies claim that immunity for SARS-CoV-2 only lasts for two weeks, which would make that "herd immunity" strategy completely foolish.

https://www.livescience.com/covid-19-immunity.html
This would be okay if the strategy was explicitly "we will let people die and then hope that everything goes well once everyone's outdoors in summer." At least then people would honestly debate whether that's a morally/economically solid stance to take.

But in that case they'll also have to explain what their strategy will be at the end of summer.
This is implementation of a law passed by congress in 2018.
It's more than just signaling -- the primary value of limited admission is providing greater networking opportunities and directing social and academic culture. Although, this is mostly lost by going online to begin with.
Reaper isn't Open Source but it runs on Linux and it's really good, IMO. And you can try the full version for free.
AWS does audit this. You get a huge warning when you make a bucket public in this way, and they send you emails about it.
Too bad you went to a bad college. But that's the problem with the US model, there is no quality control (regional accreditation sets a very low bar, as the lawsuits the Department of Education show), and especially first-generation students have no clue how to make the best of the environment and what to do when things go wrong.
I feel like it's important to emphasize the importance of writing as a way to organize your own thoughts and create your own mental maps. This may not be the best way to disseminate information to a team, or share with the world.

I wholeheartedly agree with this premise, but without some guardrails I feel like this advice leads to dumpster fires like Medium.
It's mind-boggling how quick and drastic this shift is happening in terms of the value and importance of college education.

A gap year sounds like one solution. But chances are many of these people would have figured out something that work for them (greater impact, for less money) that others will adopt and follow.

Much of the impact will be here to stay.
There are big signs on world-accessible buckets when you go into the S3 console. It's a fairly new thing but they are (slowly) trying to help auditing and finding these things I guess.

However I'm not sure if there are any built-in tools to find weird nested policies attached that could cause a similar permission to be granted to all..
I think maybe folks got the model number confused. There are strips where the entire signal is passed verbatim without being reformed to every package on the line, but everyone stopped using them because they're awful.

In my experience, slow microprocessors are WAY more tricky to deal with than a 3V3 logic voltage for these strips; and often lead to crazy hacks. I'd way rather just put a modestly powerful resistor or a buck converter in my project than deal with trashy old Atmel chips, given how absurdly cheap ESP32 and ARM M7 packages are.
Summer tends to give other reasons for a decline. We will see what next winter brings.
The hardware itself is implicit global state, and often with devices that behave like singletons.
So awesome to hear! If you have any feedback on how to make your experience better, would love to hear it. :)
This was already explained so many times at Hacker News, at least three times by myself. Here is another attempt:

If you are a reader of Slate Star Codex, and you google for e.g. "Scott Alexander, psychiatrist", you can find that his real identity is Alex Salamander. Scott was always okay with this, because he trusts his readers. (Yeah, maybe he regrets it now.)

But if you are a patient looking for a psychiatrist, and you google for "Dr. Alex Salamander", Scott doesn't want you to find Slate Star Codex. Because... that's obviously not a good thing to read for people who are depressed, or paranoid, or whatever.

NYT publishing an article containing "Alex Salamander" and "Slate Star Codex" together, would obviously put SSC into top google results for "Alex Salamander". Which is what Scott is trying to prevent. Does it make more sense now?

tl;dr:
google for Scott Alexander, find Alex Salamander = okay;
google for Alex Salamander, find Scott Alexander = not okay

(By the way, his real name is not Alex Salamander, I just made it up now to make the example easier to read.)
TimescaleDB definitely supports backups :-)

Here is a page from our docs on how to perform Backup & Restore:
https://docs.timescale.com/latest/using-timescaledb/backup

Not sure what's going on in that one Github issue, but we are looking into it.
Where I could read up more on it? Or are these sort of insider knowledge? ( If so, if you dont mind expand on it in a bit more detail )
I can live happily without promotions, as long as “pay me more” part is working.
I read the headline and assumed this is about free online MOOC classes. I'm starting to think they are worth less than zero as well. So much time spent listening. Its better to get a book and try stuff yourself.
These are all great to use for data exploration. But if you're going to show data to a non-analyst audience, stick to bar charts (not histograms), trend lines, pie charts, and choropleth maps.

I'm not trying to condescend. I've tried for years to introduce more chart types, bit always received pushback on how hard they were to read.
From the credit card. They will then deal with the company. So then it becomes their (the credit card company’s) problem.
No, it just diverts focus from building a successful company to figuring out how to eat.

Forcing entrepreneurs to risk devastating personal bankruptcy just isn’t kosher, and there’s zero evidence that it creates healthy companies. It just encourages founders to take even more risks, which aren’t always ethical (i.e. Instacart’s predatory pricing and tipping model).
You can charge at that full rate to about 80% battery capacity. And none of that matters because 99% of charging is done at home at night. I guarantee the average EV owner spends less time inconvenienced charging their car than the average ICE vehicle owner spends standing at a filthy, toxic gas pump. The only time an EV owner thinks about charging is on a road trip.
> OpenGL has one global state.

As far as I know, it doesn't, it's actually thread-local state; you can have multiple states, and you use glXMakeCurrent/eglMakeCurrent to choose which one is active for the current thread.

And the protocol which can be considered the successor of OpenGL (Vulkan) replaced the thread-local state with an explicit reference to the state.

> A database connection is a global.

The product I develop at work uses multiple database connections, to several different databases, which can be added and removed at runtime. They most definitely aren't global.
Pretty much everyone has a vision of the rest of the world that doesn't match reality.
This problem is identical to the one you get when you're in the office. If you have a conversation with someone that impacts the group, you need to either a) have that conversation in a public channel (like a team slack channel) and/or b) need to provide a set of notes from the 'meeting' to your team.

If you're used to being able to just tap people on the shoulder and get a group of people looking at something, you can still do that, just get everyone on a call. Working remote, those "collaboration" sessions start to look more like "interruptions", for better or worse. If your team doesn't have more robust communications strategies than being in earshot of each other, it's going to show.
What does AWS have to do with this? Sure, the technical debt of S3 being one of the first services is clear to see. But it was a world writable bucket. What is AWS going to do about that? Eventually, you have to know and care about what the hell you are doing.
Yes, but they're already using that money.
In Defense of Our Teachers
I can advise Plerdy SEO checker. The tool helps specialists to keep abreast of changes on the site. Every day they receive new SEO data: changes in tags, analysis of semantics on every page where there is traffic, analysis of keywords from the Google Search Console.
Have you thought of making a TimescaleDB app like the Postgres.app for macOS? Or could I use Postgres.app to make a TimescaleDB app?
That's why EU is so important. Its the only institution with even a chance. The US is far to captured to ever start thinking about basic anti-monopoly regulation.

Because that's all you are describing is: basic antimonopoly regulation.
Suppose the first slide of my 10 minute sales deck described building a house out of literal waffles, and letting customers eat those waffles. Would you actually pay attention to the other 9 minutes?

Overlooking the fact that if I attempted such a thing it would be amusing as hell. Imagine somebody taking that idea very seriously.
How could we implement a law that requires disclosure of an AI?
When I communicate via telephone or video, I would like to get an honest answer to the question "Are you human or an AI"? With GPT-3 and deepfakes improving, the day will soon be here when we are confronted with virtual humans indistinguishable from the real thing - at least to our senses. And when we ask them if They are human, they will lie and say yes. Is there a deep learning model that can distinguish between a human and an AI? TO put it another way - can a deep learning model be developed to perform a Turing test based on vocal cadence, diction, grammar, accent as well as visual cues (when dealing with an image)?
Very amusing - and brings back memories of when a friend actually did remove the /bin (and IIRC the /lib64) a couple months ago :-)

Getting stuck on #/oops_print_file_contents - the command times out. Not sure if I'm missing a better solution or perhaps the server is overloaded

The command I tried was (here protected with rot13):

zncsvyr sbbone < zl-qvffregngvba.gkg; rpub "${sbbone[@]}"

--

A mild irritant is that the usual ^W (delete word to the left) instead closes tab in Firefox. Perhaps this could be prevented...?
What's the deal with the firmware? Will it run coreboot without a hassle?
Office365 is cloud based. The more you use it, the more you use Microsoft's resources, the higher the cost for them and maybe the higher the strain on resources available to others.

So for an Office365 bundle with x products, you pay the same price whether you use all x products or fewer. The fewer you use, the better for Microsoft and they don't take a hit on revenue.
Startup Is Starting Commotion with It's Branding
Back home all we got were local OEMs doing their own brands, Topis.
Clutch, the Open-Source Platform for Infrastructure Tooling
To quote myself, “it should be avoided”, doesn’t mean never.

DB connections as global state, I might go as far as saying global for a single thread, ie it might be reasonable to have a thread-local-storage for checked out connections. I still would keep access to that thread-local restricted, and keep most of the code more testable by having the connection be a parameter to each function.
One of the most shocking things I realized when I graduated college and started working as a software engineer is how insecure, or really just improperly-configured, large enterprise systems are.

This is anecdotal, of course, but it seems to me that any company that didn't start cloud-native is going to have flaws like this, and it's often not at the fault of developers but at the fault of top-down initiatives to "get to the cloud" ASAP instead of correctly.
It's difficult. I like the idea of subresource integrity a lot, but a counter example: Twilio discovers a bug in their JS SDK. Without subresource integrity they can push up a fix and propagate it to all clients immediately. With subresource integrity they would need every client to update their web site to change the integrity attribute. If it was a serious bug then that could be a huge issue.

Even putting the security arguments aside you can bet a lot of customers would be really irritated having to constantly update this stuff on their site. If a competitor didn't have that restriction it would become a selling point. IMO the ideal is that Twilio provides both options: a "sdk-latest.js" that's a moving target, as well as "sdk-v1.3.js" that is frozen and can be locked with subresource integrity.
You don't have to do the prioritization yourself, you could do it with the therapist.

You could ask yourself witch bothers you the most.

Also if there are clusters of schemas, start with the ones in the same cluster, but your therapist should also be able help with what to start.

I do know of such a prioritization for BPD where you first have to learn to answer back to your internalized "punitive/critical parent" mode, and eventually eliminate it, because it will sabotage your progress, just like a real life punitive/critical parent would.