skysight-inc/HackerNews huggingface dataset:
I am part of a weekly goals phone call. Where we have accountability for our goals. This is a men's personal development group and over the last year. We have not collectively, failed at our individual goals for the week. This is because, our group consequence is to drink our own piss. If 50% of the group fails at our goals.

Just having personal 'accountability' is not enough. Consequences are powerful motivators. Other consequences that have worked... $50 donations to a non-profit that the individual dislikes greatly.

I will add this personal anecdote. These goals calls have often been the only reason I got difficult things done. Like going back to the gym, eating well, consistently exercising. It is all too easy to procrastinate.

Your program could be beneficial to so many, to improve their lives. Coaching at a discounted, mass-scale would be amazing!
This makes a ton of sense, and yet I can't think of a time I've seen it mentioned in a discussion about passwords.

Are there any notable exceptions, where attackers don't have the db, but can probe pretty quickly?
For files that big I often find myself switch back to vi. However, vi also has its limits. If the files are really huge, then grep, head, tail and awk are my best friends.
Security updates take too long. How bout each copy of MacOS keeps local copy of revocation database, and updates in background?

Much faster, updates relatively quickly, and not subject to network outages.
> What if you couldn't install what you wanted and everything would have to go through a protected store?

You mean like on my Nintendo Switch, which I knew worked like that when I bought it and was part of my calculation when buying it?
I did a dozen or so interviews at MS. No one ever asked me if an interviewee "passed/failed". The only boolean was "hire/no hire", which took into account many more dimensions. But I know people that interviewed over 1,000 people, so my knowledge is more anecdotal.

I'd imagine no matter the problem he would breeze through an interview and leave the interviewer with some enlightenment on programming. It wasn't necessarily about whether the code was "correct". I remember once interviewing a ~20-year old for the summer program who when I gave him a problem he started talking about some linear algebra and geometry that I didn't even know were relevant but quickly made sense to me. But he was so humble about it, and looking to me like he wasn't sure if it was the right approach to take (It was hard to keep a poker face and not give away that he was a "definite hire" after about 5 minutes). His 5-liner to solve it had one bug but he clearly "passed" with flying colors. Unfortunately for us he ended up joining a startup in SV (and now is doing big things there).
> Stateful "functions" is just so asinine I don't even know where to begin

I feel like the React team did a bad job at communicating that the functions are still stateless. The functions themselves never hold state, they just access the state that react holds for each component through hooks.

I think this confusion is further fueled by the fact that most people feel

render () {

return <Button />

}

calls the `Button` function inside `render`, but what it actually does is that it registers the `Button` function in React, telling it "here's how you can create what I want", it doesn't actually call the function. The actual call is done by React, if and when it wants to.

Hooks extends that idea by letting you say "Here's how I want to update my component".

The component functions you write in React are a "description" telling React how to create that component. With hooks you can now "describe" how to update that component with new changes. I feel like hooks force you to let go of the control you thought you had with class-based components. Whether that's a good thing is up upto you.
My Mojave was also affected.
You are moving the goal posts.

It is also trivially linked to ip address, which is usually personally identifying.
According to Google, it's “apps” – but this isn't Android apps; it's something that lets them directly fetch your emails from Google. I think it might be associated with OAuth, but despite their incredibly clear privacy policy I'm still not sure who exactly it is.

Don't worry; I'm fairly sure it doesn't happen unless you click through a pop-up.
Or a $700 mini.
Honest response, if somewhat off-topic, since I can't pass this up: How could it be improved/what's been most painful for you?

Full disclosure, I'm one of the <many> maintainers working on a subset of the Azure Python SDK. Currently, there actually _is_ a large-scale rewrite in progress to bring the various SDKs up to a consistent level of quality and python standards, since it's no secret the original batch of SDKs grew rather organically. As such, this is a VERY APT time to hear this sort of comment. (And yes, I'm taking it totally deadpan even if it wasn't necessarily meant that way :P)

Do feel encouraged to file issues on the azure-sdk-for-python github as well as things come to mind; there are more formal triage processes there than "I happened to read this over lunch" :)
>I love writing code so I don't need to be motivated by the end product. That might make me different from others.

Imo that just makes you more self-aware regarding what makes you motivated/excited, not necessarily that it is just a minority of engineers who are the same way. It's just that most people don't really understand/realize what actually makes them tick.

After graduating college with not much experience, I thought that the shiniest/coolest projects were what made me happy/motivated/excited. After a year or two of working full time, I can decisively say that I was looking at the wrong thing, and a great manager and teammates make all the difference for me these days. The project being shiny is just a cherry on top, but it cannot override a terrible manager or teammates. But a great manager+teammates override shininess of the project every single time by a giant margin.

I initially started working on a pretty non-shiny-sounding enterprise project, and I was upset once i found out i was assigned to work on it. But after just a month or two, I wouldn't have chosen it any other way. The overall experience was amazing, and it opened so many doors for me. I ended up following the people, not the projects, and after a couple of team switches, that approach has never let me down so far.

Those people I observed following solely shiny projects ended up either being miserable due to the management or due to random mishaps with projects. Those who followed great managers and teammates ended up in a great position, no matter the projects. If those projects went a bit off-rails, great management always managed to pivot it back in a good direction without inconveniencing the engineers.

And then it kinda hit me that this trade-off just mirrors the whole systems vs. raw results argument. Sure, you might have a currently good looking project, but if it doesn't have a great team+manager behind it, it is just a single datapoint, and it can vanish any moment due to a random mishap. A great manager+team are like a good system. No matter the mishaps, the system can course-correct, and you will never end up screwed over or unsatisfied. It's like, you should not stress about building a perfect product that never fails, you should strive to build a fault-tolerant product that has effective and tested fallback systems in place.
Was this already fixed? I just opened up Aquamacs.
The "statistics textbook" part is especially confusing to me -- who is the audience for this, and why is it even here?

He mentions at the beginning of the probability chapter:

"Readers are assumed to have some basic notion of the concepts associated with probabilities, and to have encountered the idea of probability in the form of likelihood of an event occurring"

This doesn't give us any insight into what background is expected here -- do I need to have taken a measure theory based probability course? Or would a calculus-based course suffice? What about a course for non-STEM majors? The word "basic" means different things to different people, and is generally an anti-pattern in mathematical writing. It's meaningless at best, and gatekeeping at worst.

Then he launches into this downright strange rabbit hole about mental models. None of this discussion in this chapter feels properly motivated, the writing is disjointed, and it reads like an unedited, non-proofread stream of consciousness. In particular, the exposition gets too distracted by its own examples.

Don't get me wrong -- many of the paragraphs in isolation are interesting, but taken together it's excruciating to read. It's an impressive project overall, and certainly ambitious, but it falls down due to the writer's lack of empathy for the reader. I suspect the situation would be better if they reduced the scope of the project and kept the writing more focused.
“We think you’re gonna love it”
> macOS is my favorite OS, but

Ain't that the truth with every OS. I use Windows for gaming, PopOS for work on my desktop and MacOS for work on my laptop. The amount of weird issues is about constant.
Changing the filters (e.g. by selecting a new element) requires the app to be running. Or, at least, it did when I stopped using it.
Doesn't this also imply that the effect is "small" even if real? After all if there would be a very strong correlation (eg a true and exclusive casual chain) then we would see a huge signal even in small and noisy datasets. Or am I missing something?
The lead developer seems to me like the bottleneck and reminds me of The Phoenix Project, which might be a good book to read for your situation. It isn’t that she’s bad, it’s that too much is going through her, and that needs to change one way or another
We were in the final steps of a really major demo and my laptop shit a brick, I kid you not, I ate about 50 pistachios while rebooting and killing mds_stores, thinking Spotlight was losing its mind.
Of course i just found out M1 only supports 1 gigabit Ethernet, but I don’t think that changes the decision much.
I am really curious about how people realized this was the issue. Any ideas about the thought process?
I was more wondering what about these philosophies are bad.
The only reason I'm using FF is TreeStyleTab. I seriously don't understand how people live without it. Right now I have 993 open tabs, sometimes I have 100, sometimes 2k - don't really care, but they are easily navigatable as a tree-like structure on the side of the screen.
I assumed they were being sarcastic. Perhaps a reference to groups like the SEI (Software Engineering Institute).
Higher sustained speeds, larger battery, brighter screen, better mic/speakers, Touch Bar.
That's a rather extraordinary claim. It's really setting off my BS meter- Can you show us where the code is to do that in the Linux kernel?
I guess the future is Linux.
Yes, the market dictated that move, a non-TS JS may have fallen flat.

That said, it's MS, not some side project. They could feasibly take the road to 'pure TS' especially now that they have the core following and MS has some brand trust.

There's probably a huge following of folks that would jump on a Pure TS train as long as it wasn't cloistered by all the .Net legacy.

Like PureTS on Mono VM type thing.
The way trustd works has annoyed me since Catalina was released, I do hope that it's improved in Big Sur.

I get what they were trying to do with it to improve security/privacy, but the execution fell flat (as we've now witnessed).
So continue to use the Apple store and you have no problems.

App not on the Apple store? Don't use the app. So simple.

---

I bet your first response to that statement isn't positive - Now reflect that this is exactly what Apple is saying to developers. "Don't want to use our store? Don't release on iOS."

Because right now, if you use an application on iOS, you are not a customer of that application. You are an Apple customer who happens to use a product resold by Apple.

Now - I have no problem with you preferring that arrangement, and I'm certainly not suggesting removing the Apple app store. I'm just saying it feels a tad like bullshit. Maybe entirely like bullshit. Actually - Nope, it's just bullshit.
What's the Deal with CMS Direct Contracting?
Do you know of a Wireshark filter that will reveal this on Ubuntu? What you're saying doesn't sound credible, but to incentivize, here's the bet:

If you can provide a Wireshark filter that will show a certificate check on a vanilla Ubuntu 20.04 system when the following commands are executed in a bash shell, then I will donate $25 to a charity of your choice. Commands follow:

cat <<HEREDOC >/tmp/file.c
#include <stdio.h>

int main() {
printf("Hello World");
return 0;
}
HEREDOC
gcc /tmp/file.c -o /tmp/app
/tmp/app
Thanks

It's like the bad-old days where every site had it's own markup though
Quite a demo lol
You can apply Noether's 2nd theorem to Friedmann cosmology with cosmological time as your generator. This yields the expected contributions to the energy density, with an additional negative term that is (if I remember correctly) proportional to H² and gets interpreted as energy of the gravitational field by some.
This is a nightmare in so many respects. I can’t believe my ability to run software on my own machine requires successful network calls. I spent two hours today thinking my hardware was failing catastrophically.
A perfect example of how with non-free software, the user is controlled by the software.
Sincerely and without any intention to troll or be sarcastic: I'm puzzled that people are willing buy a computer/OS where (apparently) software can/will fail to launch if some central company server goes down. Maybe I'm just getting this wrong, because I can honestly not quite wrap my head around this. This is such a big no-go, from a systems design point of view.

Even beyond unintentional glitches at Apple, just imagine what this could mean when traffic to this infra is disrupted intentionally (e.g. to any "unfavorable" country). That sounds like a really serious cyber attack vector to me. Equally dangerous if infra inside the USA gets compromised, if that is going to make Apple computers effectively inoperable. Not sure how Apple will shield itself from legal liability in such an event, if things are intentionally designed this way. I seriously doubt that a cleverly crafted TOS/EULA will do it, for the damage might easily go way beyond to just users in this case.

Again, maybe (and in fact: hopefully) I'm just getting this all wrong. If not, I might know a country or two where this could even warrant a full ban on the sale of Apple computers, if there is no local/national instance of this (apparently crucial) infrastructure operating in that country itself, merely on the argument of national security (and in this case a very valid one, for a change).

All in all, this appears to be a design fuck-up of monumental proportions. One that might very well deserve to have serious legal ramifications for Apple.
It's not every day you get to see a test reactor pulse
Normally if there's no internet Gatekeeper instead checks the "stapled" notarization ticket from the notarization process. But since there is internet, and the ocsp server is technically "up" gatekeeper isn't checking the tickets.
>has a sane timeout (I believe 30 seconds)

What the hell? You have to wait 30 seconds before you can run unsigned code on Windows without calling home to Microsoft about it? How is that considered sane? (I mean, forking on windows is slow but it's not that slow.)

How do people (and corporations! Especially ones sensitive to sharing IP!) put up with this stuff?!
> Sweden did things. Not French style military police on the streets with fines though. Here's the mobility data.

This point really needs to be hammered home.

Sweden basically did a lockdown - it just wasn't enforced.

Please, everyone, look at the mobility data in OP's post.
I would argue that, apart from startup time if your are not using the Daemon, Emacs is a great vim. The vim emulation is close to perfect.
This constant OCSP banging is absurd.
Except on Windows, you can establish that trust level with stores as you go along, instead of having just one store.

For example, I trust Steam, GOG, Epic's store (though I don't use Epic's because I don't want to fragment my library), and a whole assortment of developers specifically.

Also, it's not 2007 anymore, if you trust a developer you can almost always guarantee the app came from the trusted source through code signing. Almost everything is code-signed nowadays. If it isn't, Windows lets you know about it. If it's also not a popular app, the platform actively alerts you about it. VirusTotal and other reputation services also help you make an informed decision on whether an app is trustworthy or not.
I used it for a long time (and 2 years as my main search engine) for 3 reasons...
- it is french
- it is working in Europa/USA/China (I studied in Paris/San Francisco/Tianjin)
- my best friend used to works their.
We had some good talks about Qwant, but it will not be relevant for my user review.

So here we are:

1. They are not Open-Source (as opposite to Searx).

Only the plugins are.
Can we trust them when they say to respect our privacy ?

2. They are not TOR friendly.

Full of captchaS !!!

3. They have no onion site.

DDG have one.

4. They run some kind of weird analytics.

Each time we click on a search, the JS code trigger a fetch to `https://api.qwant.com/api/action/url` and include:
- our current language
- the query we searched
- the link we clicked
- etc...
They were backed by Bing before, is it still the case or are they running their own stats engine? I do not know.
If we trigger ourself some false fetches, can we show "twitter" as first result when someone searches for "facebook"?

5. Their lite version is not lite (=/= duckduckgo.com/html/).

They redirect all our clicks to be able to run their analytics without the JS's fetch API (proof: `https://lite.qwant.com/?l=fr&q=hacker+news&t=web` the first link does not offer `https://news.ycombinator.com` but `https://lite.qwant.com/redirect/yFOdE8r1P1LTSLsA9IIBNKaZmDF1...`).
Possible attack with `https://lite.qwant.com/redirect/yFOdE8r1P1LTSLsA9IIBNKaZmDF1...` (see the fake "&query") ?
Also, They cannot store the config: go to settings, do whatever you want, do your search, switch tab (go to "news" for example) => your settings are reset to default. You may fix it by adding your settings to the link "&l=fr...".

6. Their front-side is broken.

If we visit their site without user-agent, we have an exception in their JS which crash the page (blank page).
And their is more.

7. They do not care.

I emailed them maybe 5-6 bugs, they never replied nether fixed them.

8. Their API is sometime weird (just because not documented ?).

I ran a custom front-end without Qwant's analytics and the minimum working request is: `https://api.qwant.com/api/search/web?q=hackernews&count=10&o...`. What is "&uiv=4"? Why can't it be null or 0? What is "&t="? Is it really needed? Why is it not needed everywhere? => `https://api.qwant.com/api/suggest?q=duckduck`.

In sum up, in a customer point of view, Qwant is just a frenchy Google hosted mainly in Europa and allowed in China. Nothing new here, I recommend to stick to DDG for the moment.

Edit: fix minor typo + add proof for QwantLite analytics
> O(million)

What does this mean?
It's like no one at Apple has ever had sporadic internet access and they don't plan for it. The Apple Music app does the same thing, if you are connected to wifi but don't have internet access it takes 60 seconds for a song to start playing every time you click one. Because apparently that is a reasonable timeout for a UI action
It seems like quality code management gets passed over by (bad) management because it looks like it doesn't directly move the project forward.

Which is strange because those same managers may be full adherents to micro tasking projects in a project management system whose purpose is basically to do for the project what code management does for the code itself.

In my workplace, we've recently had leadership that appreciates these things, and the difference is night & day. Simple requests from "stakeholders" (I hate that term) are often filled in days, or same day, instead of weeks. I think it helps tremendously that the primary manager is also a coder herself, and still codes ~25% of her job.
Just like portable game consoles, with their app stores and internet connection.
Found another reason for me to not get a Mac
Hey Alex, Alejandro here :wave:

I was a bit surprised to see the announcement about making Redpanda open source (although very interesting for poking around!).

Question: are you, as a company (Vectorized) pursuing the same business model as the Confluent one?
OSS Kafka, but paid official support, cloud, connectors and registry?
> But in the long term I actually think it’s going to be a really good thing for the industry if we can get more developers using non-x86 devices and deploying code to non-x86 servers.

Why?

If it's about the dominance of x86, I think in about 15-20 years there will be no other architectures in widespread use except for ARM and maybe RISC-V.
Graviton2 is looking really compelling in our tests. At this point we plan to migrate all of our instances over the next year and we’re going to want arm machines locally to develop with. It’s starting to come together.
A limited change would be to fail-open more of the time, e.g., if the OCSP server does not respond within a few milliseconds. (MacOS already fails-open in some internet scenarios.)

A better option is to asynchronously update a Certificate Revocation List ("CRL") and perform any check local to the machine. This avoids disclosing to Apple every single time you run a program, which program it is, and what network you're on. It could also emergency-revoke certificates just as quickly as the OCSP design by polling at the same frequency (every app startup).
You've stated this several times in this thread. Do you have a source for your claim?
Qualitative research needs to be open-source [pdf]
Talking about a cluster.

Now when I get my new mac, I'm going to find a way to opt out of this.
OOPSLA 2020 (Object-Oriented Programming Systems, Languages, and Applications)
Seems very true.

Even McKinsey is getting in on the act:

https://www.mckinsey.com/industries/public-and-social-sector...

https://www.mckinsey.com/business-functions/risk/our-insight...
We kind of started on a different note. We wanted to solve some fundamental problems (no Zookeeper - similar to KIP-500) and most of all we wanted a single binary we can ship around, something that is easy to run.

I think people LOVE the kafka _api_ but they have a hard time operating clusters at scale. So we decided to keep the same API but solve the problem of operational complexity.
New details revealed about iPhone SE 3
Analyst Ming-Chi Kuo shared some information about the third-generation iPhone SE, which is expected to be released next year. The smartphone will come with a 6-inch screen, dual rear cameras and Touch ID technology.
That's not a particularly compelling argument to me. I'd rather see direct comparisons made. Do gaming platforms require a 30% cut of all sales on the platform, including subscriptions? Do they forbid applications from discussing other subscription options? Etc.

I'd say the GP isn't really playing devil's advocate, because he hasn't shown the comparison is apt nor that if it is apt, the gaming platforms aren't also a problem for consumers.
Freedom and computer security are in fundamental opposition. It’s the same basic question as GC vs manual memory management.

The only way to offer safety on a platform is to secure that platform. If Apple disables the API’s which lets apps access users contacts then they can be sure 3rd party iOS stores don’t compromise user’s privacy. If they allow API access and don’t vet stores then guess what that directly means breaches will occur.

PS: If you disagree try and come up with some supporting argument.