skysight-inc/HackerNews huggingface dataset:
> A controversial law that allows police in Minnesota to take and sell someone's personal property is coming under more scrutiny after the state patrol seized a woman's car during a drunk driving stop late last year, even though she was not driving or charged with a crime.

> ...

> Troopers seized Dietrich's car under Minnesota's forfeiture law that has allowed police agencies across the state to take close to 14,000 vehicles, generating nearly $10 million for those departments in just three years, according to a review of statewide data by 5 INVESTIGATES.

How can any patriotic American read something like this and not at least start to wonder what happened to this country?

The system of "checks and balances" that we're taught (maybe not anymore) has clearly failed here and in hundreds if not thousands of other cases, ranging from ravenous petty theft of private property owned by people charged with no crime:

https://en.wikipedia.org/wiki/Civil_forfeiture_in_the_United...

to secret courts and clear violations of the constitution:

https://www.npr.org/2019/12/22/790281142/scathing-report-put...

This is not what freedom looks like. It resembles another system, though. One that gets trotted out pretty regularly to smear political candidates and organization that try to effect change.
> how do you make humans do work? you give them money

I don't know if I buy this argument.

Think pre-Columbus Native Americans in North America. Members of tribes still did work without money.

What about people with the most money? Do they do the most work? We need to define what "most work" or "capacity" for work is.

Money is a tool/technology that acts as a bridge between two quantities/qualities. More simple, money is a common means of exchange.

Money is only an incentive to work for poor people because they will die without it. But this has to do with the capitalist system we live in, and it is not inherent to money itself.
Thumbs up for "The Age of Em". A nice example of how to assume a technology and work out economic consequences. Hanson goes into some good detail and includes physical constraints, emergent properties like relative time elapsed for simulated minds when transferring between locations and such.
Some attacks exploit vulnerabilities in dev infrastructure. Exposed dev JWT token may enable such an attack.
The Clipboard API is in Webkit - https://webkit.org/blog/10855/async-clipboard-api/

I haven't checked the others because I don't use them, but that one is.
Halite III Bot Development Kit in Rust
The alternative is prosecuting the crime, getting a conviction and applying the applicable punishment.

Instead they just inflict the punishment up front on whoever they want. Then when that person tries to get it back, they have no standing because the suit is against the property itself. It takes some special people to believe in this legal fiction that the owner of the vehicle has no real standing or loss.

The road was also being used. Can they seize that and the police department would now have a new toll road to raise revenue. Oh, you say the state didn't know what the drivers intentions were on the road? Too bad -- they should have foreseen everything done with their property.
"This model is bad"

"If it's so bad, then where's your model?"

Sometimes no model is better. Not that I don't think this article is full of it.
I don't think this really holds water.

Let's turn it around: we start off with you and a perfect clone of you, except the clone has artificial neurons. Then we gradually swap your neurons with the clone's, without ever interrupting consciousness.

Using the logic of your thought-experiment, we should conclude that the 'real you' still resides in your original body, despite that all your neurons now reside in the clone's body. This seems unconvincing.

Perhaps the Buddhists have it right and identity of consciousness is illusory, so all such thought-experiments are meaningless.
I agree with the author. Is it highly unlikely, sure, but it's important to create awareness of the risks associated. At the end of the day, you are sending potentially sensitive data to a third party.

Good security posture is all about building habits and I personally don't want myself or my team being comfortable with the idea of pasting code or JSON config files into a third party system.

If any of these online tools are sending your data to the server, don't use them. You don't know what happens with your data once you send it and accidents happen even if the service has your best interests in mind.

For the ones that are client side, such as JSON-to-go. You can save the client side code locally, set a bookmark, and use your local version instead.
So if I rent a car and commit a crime the rental company should be punished? How about buying a gun, should the shop owner who sold it be responsible?
He addresses this. He mentions leaking implementation details, and possibility for mistakes.
Wow, a usefull shortcut I was not aware of. Thanks.
There are server side JWTs that are never exposed to the users.
The title is bad, but...

> Chris Belczynski, an astrophysicist at Warsaw University, previously felt so sure that such a large specimen wouldn’t be seen that in 2017 he placed a bet with colleagues. “I think we are about to lose the bet,” Belczynski said, “and for the good of science!”

LIGO has existed for decades and by 2017 had already detected a merger. My guess is he considered black holes in this range rare enough that we were unlikely to detect any. If he believed they were impossible the article certainly doesn’t elucidate on that fact.
Completely unsurprised that this is coming from someone working at a bank. I saw a lot of the same working at another very large bank. Banks are extremely risk adverse in certain areas, such as using externally-hosted tooling. Certain areas of my employer, including where I worked, couldn't even use public cloud services. (And my area was additionally PCI, meaning that we also couldn't use our internal cloud services...) It's to the point where they would rather risk the project or products success, over whatever their perceived risk using external hosting.
I don't deny that there are unhealthy habits (playing WoW 24/7 is most definitely unhealthy for the mind and body). My thought is that at the same time :
- No hobby is immune to leading to addictive patterns, (some are definitely more prone than others).
- No hobby always lead to addictive patterns

So in my opinion, if you don't engage unhealthily in your hobby, there's really none that is better than an other. So, WoW, climbing, dancing, reading, commenting on HN, whatever is good for you, I don't think one is inherently better.
WordPress.com with one of the paid plans is good for the same reason. It's backed by a real company that's been around a long time in tech terms. Their membership thing works similarly to Patreon in that a person manages their subscriptions in a central location instead of going through different proprietary payment flows, but the money goes to your Stripe account.

It would be nice if they also made the subscription in Stripe so it's portable, but Automattic has been around long enough to trust with handling it. On the customer/supporter side, I think knowing they aren't at the whim of the blog owner for cancellation is a perk.
Helping underserved Kids find their own success in STEM
We are Y STEM and Chess Inc. We teach underserved children chess, math, and coding to empower them to pursue STEM majors/professions using STEM professionals to teach. http://ystemandchess.com.

We provide Internet, Computers, Mentoring, College Application help, and Financial Aid guidance.

Problem:
Empower underserved kids to pursue STEM.

Solution:
Online STEM program that is free to underserved kids that builds STEM skills using chess, math, and coding to prepare them for success.

Current Facts:
Teaching in-person classes with over 600 students.
Finishing our website to allow remote tutoring in chess and mentoring to scale effectively.
Starting classes with 4 schools with a total of about 200 students in India.
Boise Schools to signup 12 Title 1 schools.

Our students!! Can’t upload photos.
https://www.linkedin.com/feed/update/urn:li:activity:6701600...
The Redlich family, right to left is Stanley, 7, June, 9, and Shirley 13. June has been in the program for 2 years and our first state chess Champion in 2018. June moved onto learning algebra to prepare for learning to code soon. June’s focus is on becoming a software engineer ASAP to help support her family. Stanley started the program in 2019. He started winning tournament games consistently. Shirley started the program recently. She skipped the 6th grade and is learning algebra right now.

What we need:
We need a CTO to guide development.
We need engineers in Javascript, typescript, HTML and DevOps to help refine the website. See https://github.com/YSTEMandChess/app.ystemandchess.com
We need community partners (i.e Shelters, Boys and Girls Clubs, etc) to scale to new communities.
We need computers to give to our students.

Want to donate or sponsor a child, https://donorbox.org/y-stem-and-chess-inc-learning-platform.

Follow us: IG: stemwithstemy TW: @ystemandchess FB: ystemandchess LI: linkedin.com/in/ystemandchessinc.

Email: devin@ystemandchess.com.
Accidental Pinhole and Pinspeck Cameras (2014)
It actually will (at least for websockets), it's just that websocket messages aren't nicely included in the timeline along with typical requests. You need to find the request that initiated the websocket and go to the details -- it shows the messages there
Probably not if you're also wearing a jetpack. It'll rip you in half.
The noise specifications for the drives are available from the WD prior to purchase.
Tesla obviously is a bubble. It's hype that hasn't delivered in its promises, and certainly not on its returns. But the fact that the company itself isn't worth much doesn't mean you can't make money from it in the stock market.
Location: Kano, Nigeria

Remote: Yes

Willing to relocate: Yes

Technologies: PHP, JavaScript, C#(Unity), framework (laravel, Vue, Tailwind CSS, livewire and AlpineJs)

Resume: could send when contacted

Email: mz.vanniatech.com
muazumusamuhd@gmail.com
Not sure if you fully read the article, but I mention that up until fairly recently, jwt.io was performing some metric collection, which I'm not sure many people were aware of
This is precisely why my comment makes it clear that dev shouldn't be available to the outside world.
It is also listed on the Patreon page for that creator, if you have the patience to wait five years for the page to load.
I love this. I started with trying to have simple, short and descriptive names for the test methods but then it doesn't work quite well with more complicated test cases. So I grew to like something along these lines:

given_someInput_someOtherInput_when_doX_then_thisThingHappen_thatThingHappen

which has the advantage to be optimised for reading. When I want to skim over the test class quickly I can simply look at the method names to get an idea on what the test is doing and if I want more details I can look further at it's implementation
Check out “Deep Work” by Cal Newport if you want to improve the quality of your work (to progress effectively). Quite a few good tips in there.
Ok, but if they get all of their employees to post links to their website, they get paid by Facebook for that?
1 - Stop using JWTs would be a better first step, go to https://paseto.io

2 - Look at the network tab, see anything leaving your browser, websockets whatever ? if not, it's probably fine
For those criticizing the author for 'fantasy' security problems, it seems relevant to emphasize that they work at a bank---their threat model is probably rather more vigorous than most.
My undertanding of asset forfeiture was that its original intent was to target criminal enterprises. If you bust a drug cartel, their (often significant) assets might as well go towards the common good.

And somehow, that turned into a system where cops can stop you and take your property according to mere presumption of guilt, as in this stupefying example from a few years ago: https://www.washingtonpost.com/news/wonk/wp/2015/06/30/drug-...

Any system with such a glaring conflict of interests and profound lack of accountability is going to be abused to the hilt, as this is. I don't have a problem with confiscating cars from habitual drunk drivers, but there has absolutely got to be more justification for it than this—to say nothing of due process—and it should go without saying that the confiscating agency should not directly benefit from these actions.
The article is not comparing the fundamental valuation of the two assets, it is talking about bubble behavior. Investors caught in a bubble behave the same way, regardless of the asset class. That's why it's a bubble--the fundamentals are ignored and the "greater fool" theory dominates market decisions.

Also, I think it may be a very long time before 15 is considered a "normal" P/E ratio again, if ever. It seems like low interest rates are here to stay.
But do you care what CCP does over here using their companies. Remember every chinese company is controlled by their government.
This is interesting! I've blogged about an OpenSSL-only version in https://www.jvt.me/posts/2019/06/13/pretty-printing-jwt-open... which optionally needs Python, so you can do it with basically 0 new dependencies, if that's what you want :)
What about most favorited comments?
LIGO and VIRGO are sensitive to gravitational waves within a specific frequency range. The bulk of GW energy is emitted at a frequency that is twice the orbital frequency of the objects emitting the gravitational waves. Supermassive black holes are sufficiently large that they merge before they could have an orbit compact enough to emit gravitational waves at high enough frequencies for LIGO and VIRGO to detect them. Less massive compact objects are smaller and so can reach higher orbital frequencies before merging.
I'm in the same boat. Even knowing it's there now, I have to look hard for it; there's no visual anchor to draw my eye there.
I want to validate my startup idea
I believe the cited work is "The Company They Keep: Founders' Models for Organizing New Firms" by M Diane Burton, 2001. [0] That's 20 year old model. It's a chapter in the book "The Entrepreneurship Dynamic: Origins of Entrepreneurship and the Evolution of Industries" [1].

Any how, the paper talks about 3 dimensions of culture: attachment, selection, and coordination & control. Rishi Dean's summary [2] is OK.

From my perspective, I would look at trust, which Laszlo Bock has reported on, where your prospective organization's products are in market, and how that organization figures out what to build.

FWIW, Abstract for "Founder's Models" -- This chapter examines the employment models founders use as they begin to construct new firms. The empirical setting is a sample of emerging technology firms in Silicon Valley. This chapter focuses on two questions: (1) Why are new firms founded under different conceptual models? and (2) What are the factors that lead a founding team to espouse a particular employment model?

[0] https://digitalcommons.ilr.cornell.edu/cgi/viewcontent.cgi?a...
[1] https://www.amazon.com/Entrepreneurship-Dynamic-Evolution-In...
[2] https://rishidean.com/2010/10/23/startup-employment-design-p...
CSCO is a better comparison and Siegel analyzed its valuation back in March 2000: https://www.wsj.com/articles/SB952997047343478041

Someone should use Siegel's thought framework with 2020 tech company numbers.
Where can I find an EKS worker node AMI with 4.19+? The EKS documentation shows latest is 4.14.x in the current 1.17 k8s.
OpenBSD for 1.5 Years: Confessions of a Linux Heretic [video]
I think there's a crucial difference between TSLA, bitcoin and other "pure" bubbles. I would include The Dotcom in the pure bubble category... definitions are soft therefore debatable. This is IMO.

"Stocks (in a bubble) can become inflated through mania-fueled narratives - not fundamentals."

I disagree on nuance. Narrative often drops off during a pure bubble. Rising prices fuel mania and further rising stock prices. This is a key element of bubbles: feedback. We have a debate about TSLA in 2019. You say it's overpriced. I buy TSLA. I make money. We argue again. It's hard for you to win the argument now.

Bubble narrative tends to get vague as time goes on. Bitcoin's narrative was that it would be a real currency. People would get bitcoin salaries and buy groceries with it. That isn't the narrative anymore.

The dotcom narrative, towards the end, became a vague "this is just how the economy works now." The mania was there. The stock prices were there. The narrative itself fell off. Uber is another good example. What's the narrative now?

Tesla has some differences. A "narrative" is actually driving stock prices. Tesla investors are betting on certain things being achieved. They may or may not be achieved, and that will determine whether or not it was a good investment.

Narrative 1 is (at current prices), break-even or less for investors: Tesla will keep its position in the EV market, but the EV market will grow massively.

Narrative 2 is: Self driving is coming soon. Tesla is in position and others are not.

The first half of the narrative is suspect. "Soon" can be a long time. The second half is (IMO), pretty solid. It takes time to make new models of cars. This is the other extreme to software. If all factories switched in one day, it still takes a decade to replace the full fleet. Meanwhile, factories long lead times. Etc.

If the software works and they get a regulatory green light, Tesla immediately controls an existing fleet and all their new cars are immediately self driving. It's a very big lead in a very, very saucy new market.

Now... You can think that's likely or unlikely. But, A Tesla share is really a bet on this narrative/prediction becoming reality. A bitcoin is no longer a bet on any prediction besides future prices.

"Sometimes, performance becomes completely untethered to any analyzable fundamentals."

This is true, but I think it mistakes what these "fundamentals" mean. It's like using BMI to determine if someone is fat. True, on average. Average is good enough for a stock analyst or an insurance actuary concerned with portfolios and populations. For any individual though, the "mirror test" is more accurate than BMI. The fundamentals of any day 1 startup always say "don't buy."

A more fundamental fundamental is (value)=([p]narrative 1)X([$}narrative 1) + ([p]narrative2)X([$}narrative2)

Insert your own probabilities(p) and values and you have your guess at Tesla's "real" value.

Whatever you think of current prices, you have to be extremely bearish to come up with a value that reflect TSLA's current "fundamentals".
Reading this reminds of learning that some *nix systems placed binaries inside `/etc/`. In fact, the linux kernel at boot looks for `/etc/init` [0], which is wild to me.

It made me really appreciate the FHS's standardization of linux directories and files.

[0] https://github.com/torvalds/linux/blob/master/init/main.c#L1...
It's not so much that the "checks and balances" have failed, but that some places are so partisan that they would literally rather support the people who are telling you the police can take your stuff without trial than consider voting for a different politican than they're used to.

The checks and balances work when there are people actually on the other side of the scale.
I use these shell scripts for generating passwords. This uses bash.

gen-pass(){
gpg2 --armor --gen-random 1 15
}
gen-pass2(){
openssl rand -base64 15
}
gen-pass3(){
strings -n 1 < /dev/urandom | tr -d '[:space:]' | head -c15
echo ""
}

edit:formatting
Chromium Support URL schemes for the Distributed Web
Yes, surely it's possible. But the resultant test is highly tightly coupled to the implementation of the SUT which gives the test more than one reason to change.

We should strive generally to have tests that only change if the business requirements change. But if I want to refactor my unit (whatever that might be) then the test should not change, or at least should not change __much__
> they work at a bank---their threat model is probably rather more vigorous than most

Until one day when you work with ACH files and start having existential dread about the american payroll system.
I also keep it local, with vimwiki: https://github.com/vimwiki/vimwiki
"Russia is trying too much, way above it head. It is a developing country, yet it is acting as if it is a strong power." - I totally agree with you on this. I'd like to see stronger Russia, which is unfortunately hardly possible under the current kleptocratic regime.
Yeah, also I used to store the music egg in the fridge along with my normal eggs, and I think that didn't help the accuracy either. I should ask the Egg Timer app people to implement playing custom songs though, these comments have thrown me back in time where I had the same reactions you describe...
$290 + tax, and $30 back for reselling Borderlands, so effectively $260. BL3 was only a few months old but I think the value was tanked a bit by being an Epic Store key, it was free so I can't complain.

The launch prices were $350 for the 5700 and $400 for the 5700 XT (after the pre-release price drop response to Nvidia), so $260 was $90 under list price, or 25% off.

And really, even finding a GPU for list price instead of being marked up for mining ethereum (or whatever else) was a bit of a miracle compared to the last few years of GPU price insanity.
If the app runs locally in the browser, you monitor network connections and whatever else for web sockets, etc, to ensure that no information is passed from your browser to the site beyond the initial http request, then, there never would be any information sent to the site to batch, correct?

I think that is correct.

Also I agree with previous posters who pointed out that for the common JWT use-case: user authentication in an SPA or website, the JWT is running in users browsers and so should not contain any sensitive information to begin with.
Haskell MOOC
Err what? Stripe's design team for a decade has been so solid, so good, that they literally drive some design trends across the web (at least with tech companies).

I'd say they're probably one of the biggest champions of people in the "visual arts" among tech companies.
Second Measure (YC S15) | SF Bay Area - San Mateo, CA (downtown) | US REMOTE (see below) | https://secondmeasure.com

----

Second Measure analyzes billions of anonymized credit card transactions to answer real-time questions about consumer behavior.

Through our self-service analytics platform, we help our clients – some of the world’s largest brands and investment firms – answer questions like:

- How do restaurant delivery companies perform across different US cities? [1]
- Where is Uber gaining or losing market share? [2]
- What impact has COVID-19 had on the rideshare industry? [3]
- (Check out our research blog [2])

We’re 60 people today — mostly senior engineers and data scientists — and are backed by a strong mix of VCs (Bessemer, Norwest, YC) and banks (Goldman Sachs, Citi, Jefferies).

We’re looking for other strong builders, especially those who can grow into leadership roles:

- Senior Data Engineer
- Editorial Marketer

Open to local (San Mateo/NYC, but WFH for now) or remote in a supported state (Alabama, California, Colorado, Illinois, New Jersey, New York, Texas, or Washington)

I'm a founder (mike@). Apply directly [4] or email jobs@ and CC me.

[1] https://www.fastcompany.com/90405922/soulcycle-customers-tak...

[2] https://secondmeasure.com/datapoints/rideshare-industry-over...

[3] https://www.wsj.com/articles/grubhubs-struggles-could-chill-...

[4] https://secondmeasure.com/jobs/