skysight-inc/HackerNews huggingface dataset:
I appreciate your response. To be honest it's a bit of chart/graph overload for me. If you've got the moment I'd appreciate and find helpful your take on this -

https://www.pewresearch.org/fact-tank/2018/08/07/for-most-us...

Is the article talking about something different? Would you say they're incorrect? Is their data old? Etc.

To me it seems they're arguing real wages haven't increased that much in the last 40 years.

Also I just want to point out, that the very end of your article about wages increasing for low-wage workers, says:

"That's not to say that low-paid workers have it easy. According to the Tax Policy Center, the bottom 20% of households are earning typical annual income of about $13,300. By comparison, the top 20% of U.S. households earn about $221,000 annually, or nearly 17 times more than the lowest quintile."

My interpretation is, who cares if there's a 50% wage increase from $10/hr to $15/hr if neither of those is a decent living wage to begin with, and the folks at the top of the pyramid are just making staggering amounts of money? The top 20% averages $220K, the top 1% ... much much more.

Which is a bit off-topic, but, at the end of the day economics itself is about people, otherwise there'd be no point! : )
Can you share more details? Are you using massive parallelism or model reduction techniques like distillation?
Also, it is perfectly possible to make the necessary qualities of sand from coarser rocks. It is just more expensive. So the great sand shortage is just a shortage of cheap sand.
Your biggest difficulty at the moment is in discovering what country is "a safe, clean country with a non-toxic culture (and preferably a cool climate)."

I also would like to move to a suitable country. But .... There is no country on Earth at the moment which conforms suitably to my criteria.

For what it's worth, New Zealand while not particularly suitable is more suitable to me than other countries at the moment.
Didn't ytcracker work for Grinder?

It's a hard thing to Google, but I follow him on Twitter and I thought that was the case. If so, this is a hilarious event for some other rapper to dunk on.
This is a less-than-compelling retort. The point isn't "don't do it", the point is "well, why?". OP even admits the more compelling thing here would be to talk about how it's an improvement on glass thermally. The pollution savings are indeed unimportant, but make for good clickbait. That's the annoying part.
I can guarantee that most teachers do not want "power user" software. I think you are over estimating the need and desire of non tech related professions to use complex technology, unless that complexity is hidden completely for the user and they can take advantage with simple interactions
Thanks for those resources; I'll check them out.

I've been wary about going into security because I've heard that in order to be moderately successful you have to be naturally paranoid, disable telemetry on everything, lock down your computer and phone with super complicated passwords, never use your name on anything on the internet, etc. How true is that? I try to take precautions but I have a social media account with my real name so am I done for?
Bit surprised to see aspirin in there. Anticoagulants are standard AFAIK, but I thought they used apixaban or camostat.
I'm surprised I rarely see concern for virtual book sharing killing off the vast US public library system that has so far - and rather remarkably - successfully survived the mass use of the Internet and rise of Amazon's Kindle. That public library system is a national treasure and needs to be protected.

If virtual book sharing becomes very common online, the majority of public libraries will die. It'll consolidate down to a smaller number of large public libraries that do the lending. Even if just half of small public libraries close, it'll be an enormous cultural tragedy. It's common for small towns and cities in the US to have public libraries, they're invaluable resources and part of our national heritage. I'd rather not see our national public book stock and access relegated to further intense centralization.

I grew up in a smaller town in Appalachia, we had a great public library and we were fortunate to have it. It was on the larger side and mostly well run. Everyone used it, everyone had a library card as a rite of passage. It also had community value far beyond the book utility value. (I use the past tense for my own experience, however it's still a fully operational library)
Why would it be bad property for a window material in particular? The bad thing about glass is that it’s sharp, fragile and heavy. If this transparent wood behaves mostly like regular wood, it sounds like an excellent building material.
> we believe we addressed the issue before it was exploited by any malicious parties

I wonder how they are sure of this.

In their logs, there would be no difference between a legitimate password reset and a malicious one, given that even a legitimate flow would result in an initial request from some IP address, then when the user receives the email with the reset link they will most likely click on that from the same computer, thus the same IP address showing up on the logs. In case of a malicious attempt the same pattern would be seen - there is no way for them to know whether the user obtained the reset token from the e-mail (as they should) or directly from the password reset endpoint itself.
To be clear, you may not understand what the problem is.

For 2019, it reported a total of 1,004 people shot and killed by police

It's 1 kill every 328 thousands citizens.

In my country it's 1 every 20 millions.

20,000,000/328,000 =~ 60

If you can't see that's what you would expect from a narco state run by warlord criminals, I don't really know how to help you.

Or maybe that's exactly what you want.

Because what you are saying is that the police in your country have, more or less, the same behaviour of criminals.

You might be onto something there.

Enjoy your violence man...

But I don't wish for it in my backyard

Sorry not sorry!
The company that makes it said they won't say exactly what it is for patient privacy, but that it is currently in phase 3 clinical trials. They can legally give it to him under a compassion program.

It's been pointed out that one of the requirements of the compassion program is that the patient be gravely ill and the drug is their only remaining option.
Yeah, in this particular case, they were just glaringly stupid.

Just gaming out ideas in my head. I have friends from rather more repressive countries, namely China, where being gay is still a grey area in terms of legality and acceptance, and I’m just thinking of better ways to structure a system.
It appears you don’t even know what philosophy is. If you think it’s all word play, you must either be unwilling or unable to understand the concepts behind the words.
There is nothing difficult about this. Modern TVs can be opened from the back to be repaired and are very modular. You can disconnect wifi antennas if you need to.
https://twitter.com/PressSec/status/1312122950133272576/phot...
Regardless of the rate of time (which we can all experience with doing an enjoyable or boring task), there's no reason to believe the fruit fly experiences time in reverse or as a loop.
> Apple also notes that the number of stolen and resold devices must logically be greater than 103,845 since iPads and Apple Watches are only Wi-Fi compatible and cannot be noticed on carrier networks.

How is that a logical necessity? It's noting other than extrapolation.
The Debian packaging system only allows one version of a package to be installed at a time, as it assumes that a newer version of a package will contain substantially the same files as a previous version. Versioned libraries install different files, and can be installed alongside each other.
The hallucinogens reinforced your left-leaning beliefs and opinions. There's nothing wrong with that but it's not exactly revalatory knowledge that will be shared by right-leaning individuals such as myself.

Indeed I have taken hallucinogens and have had no such feelings, to the contrary I have leaned even more to the right after having taking them (although I attribute no causal role). It did produce an appreciation of the numinous, alongside the hallucinations, but that's about it.
Oh, my biggest worry was futures expiring, but I hope nobody thought to switch over to a new system on the same day, and same with an IPO/2ndary offering.
But they are describing time as looping. I take no issue with time being variable - I've experienced slow and fast days, but looping is the issue.
That’s appalling

Bug bounties are are well and good, but a basic pen test would have picked that up. They aren’t that expensive and for a business trading in data that can get you killed in some parts of the world, should be mandatory.
Yes, but even if the referenced security risk is patched you would still be able to find out if some has an account or not since a password reset page will tell you if it has successfully sent an email to an account.
> This happened three days in row. I finally took all the posts down.

Time to start employing “trap streets”?[0]

[0] https://en.wikipedia.org/wiki/Trap_street
Compared to glassmaking though. At least trees are renewable. We can grow more. We do this now with wood, and it isn't always necessary to cut down virgin forests to get more. Responsible countries have laws about planting more for each tree you cut, and responsible suppliers check up to make sure they get their materials from upstanding companies.

Glass is made from sand - and we have a finite supply. It is definitely not a renewable resource. This isn't getting into the additives and stuff, just the base material (easier to compare).
Holy crap. I've avoided buying a U2F/FIDO2 device (eg. YubiKey) for a few years thus far, as I'm "happy enough" with TOTP. I know the differences in terms of implementation/security, but not enough services even offer TOTP, let alone the U2F/FIDO2 protocols. It's not worth the investment right now for how generally unsupported it is.

Do most services that support such devices really only support a single key/device? Do they offer the same one-time recovery codes that are generally offered with TOTP (though the storage/security of such codes server-side is dubious), for the eventual failure of the Yubikey (not if, but when)? Surely a tiny hardware device reaching the end of its lifespan doesn't mean you lose access to your account.
Mainframes remain mainstream in the digital business environment
I wrote deleted my impulsive hot take comment here,
it was cathartic enough to write it and not send.
> tricking users into providing access to their data on Facebook by installing apps

> same scheme with chrome extensions

These are very different things. One took place via Facebook's own platform while the other did not.

If their own platform officially allowed for third parties to collect user data, it is reasonable to complain about that being the case.

If their own platform explicitly forbid collecting user data in such a manner but they stood by and let it happen anyway, it seems reasonable to object to that.

I don't see how it's any of their business what a legitimate user does with their own data after it's been sent to them (ie the page loads). I suppose they could add a provision to their ToS disallowing such use; if a violation were discovered they could ban the user in question. But a third party almost certainly never agreed to such a ToS. It's not the existence of the program that violates the contract but rather a specific instance of its usage.
Ultra Mobile/Mint Mobile|Various Roles| Costa Mesa, CA| Full-Time| Onsite but remote/WFH for time being due to COVID

Ultra Mobile and Mint Mobile. Our two brands are basically the Batman and Superman of the wireless industry, saving our customers from our overpriced competitors with incredible prices and premium wireless service. We are inventors and innovators who believe in owning the outcome of everything we do, being action-based, and embracing the journey we’re on as a team.

Check out our careers page to learn more about us and see all open roles: https://www.ultramobile.com/careers/ and https://www.mintmobile.com/careers/

We are currently hiring for:

Lead Software Engineer: https://grnh.se/e588d4cf3us

Sr. Product Manager - Data Platforms: https://grnh.se/33581da03us

Product Manager - Devices: https://grnh.se/b712f8c53us

Data Analyst II - Retention Marketing: https://grnh.se/695e742e3us

Site Reliability Engineer - Databases: https://grnh.se/5f82f8f83us

Telecom Engineer: https://grnh.se/43438e993us

UX Developer: https://grnh.se/8c8726bc3us

UX/UI App Designer: https://grnh.se/bc3f87373us

Sr. QA Analyst: https://grnh.se/e83bc9323us

QA Analyst III: https://grnh.se/a85284eb3us

Software Engineer I: https://grnh.se/d5ec34b83us

If these positions don't appear to be a fit for you, refer a friend or colleague and get $1,000. Just send us an email to referralbonus@ultra.me with 1) your name and 2) their resume or link to their LinkedIn page. If we hire them and they stay for 90 days, you get $1,000. For more details of restrictions and rules, please email referralbonus@ultra.me.
> Apparently he was given an experimental antibody treatment earlier today? Anyone have any more info on that?

According to my local newspaper it is REGN-COV2: https://www.regeneron.com/covid19 . It appears to be a synthetic replication ment to mimic antibodies from humans covid survivors.
That was 10+ years ago. New company was a startup so he worked out a short term arrangement with them
Automate Processes with Document Workflow
On the opposite side, what about making tools that cater only to power users? Tools like Roam Research or Superhuman that are popping up in the productivity space for example. You could just deny customers who are more casual, as you're not going to convert them anyway unless they learn your tool.
Was it unreadable? Sometime ago everybody believed that after the IPv4 exhaustion everybody will quickly switch to IPv6. It was quite reasonable to sell them while they were still worth something if they believed that they will be worthless is several years.

Sadly, there was no big switch to IPv6 and double NAT is the thing now.
$50 says they're not. This is something every organization has to say for PR reasons, but saying "we believe" is very fishy wording. It could well be this bug has been around for months before it was discovered, and used by many black/grey-hat hackers.
I’ve worked in a lot of banks, and other similar organisations, and the truth is that big enterprise just sucks at compliance. You can approach compliance frameworks in two ways, you can put a lot of effort into designing your infrastructure and compliance testing methodology (I would suggest Amazon as a canonical example of how to do this well), so that it performs well and meets all the requirements, or you can take out the sledgehammer, implement a new control for every occasion, and create a cumbersome bureaucracy.

The good design approach is obviously superior in many ways. But the downside of it is that you have to trust the competency of a lot of different business units to maintain it. A cumbersome bureaucracy on the other hand ensures that incompetent/lazy/low-initiative internal actors can’t impact your compliance. If you fail, at least you fail in a compliant and auditor-approved way.

That said, a lot of the failures I’ve seen in organisation like this stem from silo’d expertise. People don’t know that much about the systems that are outside their remit, so they will make changes that impact connected systems in ways they failed to imagine. As an example I have seen 3 seperate banks have non-trivial service disruptions stem from the same independently made mistake. A person enabling debug logging on the SIP phones. The traffic DOSes their networks, and all of a sudden, core network infrastructure starts to die. Afterwards they send the right reports off to the right people, make the correct adjustments to the bureaucracy, and proceed with their compliance intact.

There is also a 3rd way to approach compliance, via negligence. But the more you are in the regulatory spotlight, the less of an option that is.
tldr: PVA is the window of the future, and it turns out that in additional literally anything else, we can also use highly bleached balsa wood to the point where infusing it with PVA makes it transparent enough.

Slightly longer: also, PVA literally dissolves in water, so this is in fact an absolutely stupid idea unless you're also going to coat the resultant panes in chemicals that don't just act as water proofing but are also scratch proof. None of this is even remotely better than using actual glass.
Car manufacturers and models also have a reputation regarding how well they hold up over time - Which is brilliant. It should be much more in the collective consciousness (Apple is actually quite good in this regard).
> Generally, I think managers are looking for a magic bullet for complex project management. They are thinking that a some uber reporting and dash board vomiting software package will save them. I know it won't.

Perhaps. But then I feel there's a big hole on the market, something desirable by both individual contributors and product managers. A lightweight ticketing/work planning system that supports certain (arguably fundamental) task management features like:

- Infinite nesting (not just 1 or 2 levels).

- Fast adding of tasks

- Modelling tasks as DAGs, not trees. That is, allowing for proper dependency graph between the tasks.

- Allowing entering both absolute and relative time estimates ("start: 2020-11-01, end: +5 days", and "start: N/A, end: +5 days", where "N/A" means "once all dependencies are complete").

- Turning said task DAG with estimates into a GANTT chart.

- Turning said task DAG into a PERT chart and computing the critical path.

Seriously, the last three are kind of fundamental if you want to do some kind of scheduling around planned work, and yet I haven't seen a single developer-oriented product that could do it. I'm not pulling this list out of my ass - this is what we came up with at my previous job, and we spent time looking for a solution implementing even a subset of this. But for some reason, it's become a religion in our industry that tasks shall form trees, of depth no larger than 2, and GANNT and PERT are for PHB MBAs and not for self-respecting developers. sigh.

If I wasn't a busy parent with a job and a videogame to write, I'd probably write this myself.
It's against the law to pay the ransom. So damned if they do, and damned if they don't.

I supposed it may light the districts' ass to get good security, but if you don't know what good security looks like, how are you supposed to know?
> It's been pointed out that one of the requirements of the compassion program is that the patient be gravely ill and the drug is their only remaining option.

<speculation>

I do honestly wonder if that applies at his level. Could one of his doctors just requisition it? Would a company want to experiment on the president if it wasn't life or death?

</speculation>

I guess we'll know within a couple of days one way or the other.
That’s a lot of words but your facts are false.

1. Japan has low wealth inequality

2. Japan does NOT have high inflation

3. Japan has both low unemployment and high labor participation

[1] https://www.indexmundi.com/facts/indicators/SI.POV.GINI/rank...

[2] https://tradingeconomics.com/japan/inflation-cpi

[3] https://en.m.wikipedia.org/wiki/Labor_market_of_Japan
I thought about it and even joked about feeding him bad information to see how much crap he would stupidly copy.

I was howling into the void in frustration about my life. It's only aggravating because it is evidence of malice aforethought on his part in how he has treated me for two years and that walking away from my volunteer work won't rid me of the problem. He will continue to be a problem because his bad behavior is willfully malicious and not because he really thought I was dumb because I'm a woman or poor or whatever.

I'm still thinking about how I will handle this for stuff that I want to do that is "serious" and not me just bitching about my life randomly.
How do you support yourself without doing what someone else wants you to do?
That’s why doing pen tests on the regular is necessary. We shouldn’t rely on humans getting it right every time, or strangers on the internet reporting it.
You can have wood without cutting down the Amazon. Besides, I'm not sure if any of the wood I use comes from the Amazon and I think soybeans (and other crops/livestock), lax laws, and lack of enforcement is a much bigger threat to such areas.

Responsible wood farming is quite possible, and it can be forced by strong regulation with the ability to enforce some rules and stop imports of things not meeting rules.
Doesn’t triple glazing largely address that?
You're probably better off the buy the screen you like and pair it with a low cost NUC to sidestep the privacy invasion of the "smart" part of that TV.
> Why is there a philosophy of morality and not a philosophy of hunger when both sets of behaviors are arbitrary and serve the purpose you stated: "but some are useful, perhaps even necessary, for the well-functioning of society. Discussing how to make, extend, and enforce these <hunger/energy seeking/sex-drive> systems seems likely relevant to any society made of independent agents, whether human or not."

You are moving the goalposts. First, it was about whether or not morality is specific to human culture or not. Now, it’s about whether or not the study of morality counts as philosophy compared to the study of hunger or sex.

And yes, while I agree with most of your arguments about morality, you’re still making philosophical points. Yet again, you demonstrate an ignorance of what philosophy is in your attempts to brush it aside.
From experience I noticed that a lot of developers don't look at the big picture and don't have a full understanding of how the system works, what's the rationale behind how the feature achieved its objective and how it might be abused by a malicious user. The #1 thing that I think about when I'm looking at some code or feature (and recommend others do the same) is how malformed or intentionally malicious input would break it, but it seems like their developers clearly didn't do so.

This is also compounded by the drive to artificially complicate software stacks (microservices, etc) and "silo" developers into their own little bubble where they only work on a small aspect of the system and never have a need (nor the mental capacity - due to intentionally complicated stacks with dozens of microservices in various languages) to look at the big picture.
I agree that the company would probably be happy to risk getting in trouble if it means they can say they saved the President. Besides, it would be his FDA that would have to pursue it.
ZGlue Teams Up with Antmicro and Google in Open Chiplet Initiative
I was disturbed by that statement as well. It's pure PR spin based on turning a blind eye.

They could detect mass malicious activity if a single IP was resetting thousands of accounts. But I'm skeptical they even checked based on the horrible initial flaw and specious response.
This is a fantastic video that breaks down the process, including great visual aids: https://m.youtube.com/watch?v=vuIlsN32WaE
Could you explain why that's bad for someone who knows nothing about security?

Where should the password reset token be?
Premature optimization is the root of all evil.

—Donald Knuth