skysight-inc/HackerNews huggingface dataset:
That's the problem. Many companies proxy all links, making the domain you are actually going to indecipherable even if you want to be careful and hover over the link to check first. It isn't like personal email.
They could also do it at arm's length. A lot of MTurk-style sites have loads of jobs along the lines of, "click this ad, fill out this form, get $0.02".
Yeah. I remember dozens of edge cases that involved errors and back buttons and flash scope and on at least one occasion, jquery plugins.

Or back buttons and CSRF tokens and flash scope...

Or, let's talk about a common use case. Someone starts filling in a form, and then they need to look at another page to get more information. (This other page may take too long to load and isn't worth putting in the workflow, or it was cut from scope to place the information twice.) So, they go out to another page, then back, and are flustered because they were part way through the work.

So, if you want this to work, you're going to need state management in the client anyway. (Usually using SessionStorage these days, I'd presume?) So, then, we've already done part of the work for state management. You are then playing the "which is right, the server or the client" game.

You accumulate enough edge cases and UX tweaks, and you're half way down the SPA requirements anyway.

Now, hopefully Hotwire will solve a large number of these problems. I'm going to play with it, but the SPA approaches have solved so many of the edge cases via code and patterns.
> Where are you getting a 4x improvement in performance?

From the link you just quoted.

Here it is again:

>Look at the difference between Apple's "little" cores and the stock ARM "little" core.

>The performance showcased here roughly matches a 2.2GHz Cortex-A76 which is essentially 4x faster than the performance of any other mobile SoC today which relies on Cortex-A55 cores, all while using roughly the same amount of system power and having 3x the power efficiency.

https://www.anandtech.com/show/16192/the-iphone-12-review/2
Is there a good source of long strings of addressable lights that doesn't involve any soldering or cutting up wires to get the power right? I have bad luck with actual hardware projects and they usually end with the magic smoke escaping, so I'm really looking for something I can plug into a working power supply that's included in the box and can talk to over like a serial port or something else that I can just plug into a USB port.
I don't know if it's related to C classes at all, but an interesting semi-related tidbit: 2.x has a weird distinction between "classic" classes and "new-style" classes that inherit from object. In 3.x, everything descends from object.
Not such a big deal and something rather subjective: Due to Covid, my university started to upload recordings of all of my courses. This has been a godsend for me, as I did not attend lectures previously and now have the chance to watch them only when needed.

Also, where before I often had to go to campus for 1.5hrs, which often meant sitting in train for equally long. Now, I can watch stuff from home and don't have to waste time travelling.
But is it enough that the company should worry? It’s not the Fappening. I just think so what, it’s tragic and Blackeye on the company, but it’s like stealing something with no value.
Thanks, its strange that they didn't include this demo on their website.
Interest in public benefit corporations will only increase from here.
My previous employer's internal PR team sent out emails that were just short clickbait text in images with a single link that went through the same tracking urls as external emails. You had to click through to get useful information, much to the annoyance of the security team
Mermaid – Markdownish syntax for generating flowcharts, sequence diagrams
I absolutely dreaded The Fellowship of the Ring because of how terrible the animated LotR film was. I loved the books but was convinced they were unfilmable.

Instead, I think the movies are sincerely better than the books.
> text on top

The video has clearly been altered.
These engineers didn't just spawn into reality the day before they were hired at spacex. They've been around for a long time working for other companies. But the things they've been doing for those other companies prior to spacex didn't wow anyone or made the headlines, did it?

Then Musk enters the stage and all these amazing things happen. Yes, the engineers figure all that stuff that makes rockets turn back around from orbit and land on a platform in open waters, but none of that existed before Musk, even though it was, apparently, very possible.

Ultimately it's the synergy between a general and the troops. Shitty troops will lose the battle no matter how awesome the general is; a shitty general will lose battle regardless how awesome his men are. In USA there is plenty of awesome talent (troops) inhibited by tons of shitty generals (entrepreneurs) that have no vision or courage to use that potential to make great things. So when someone great show up, like Musk, it's more than appropriate to commemorate them.
> The only "scientific" tool they emply A/B testing, blindly and massively.

Which optimizes for metrics that aren't beneficial to the end user.
Half-life 2. It delivered way more than expected. Looking back, it also feels that the hype was more genuine, mostly fed from the bottom by fans rather than orchestrated by PR and marketing departments. May be that could be a part of it's apparent overdelivery?
“Really - if you slowed down for a sec and thought about security, is this the language in which your employer emails you?”

Yes. Friendly language is becoming common in corporate emails.

“Also, why does your employer need you to fill out any forms about your location - they know where you are.”

They very often do, because things aren’t wired together within the company - and because many schemes are administered by a third party. Filling out forms with details that ‘the company knows’ is commonplace.

Companies even add ‘Warning: External email’ to subject lines of emails from outside the company, but then fail to whitelist trusted third parties, so employees get used to flagged emails actually being legitimate ... and then getting used to ignoring the warnings.
> unusually good language for just getting shit done.

I agree, but only for very specific/small values of "shit".

A codebase with thousands of lines of Python is IMHO already stretching the limits of readability; when you get to the tens/hundreds of thousands of lines, it's definitely past.
> I have no idea how anyone lives with it for anything except writing extremely repetitive, formulaic, and superficial code, because having to dig into its guts feels like a nightmare.

This is sort of why I like Python: it prioritizes getting something working today and trades off being able to build a complex system over several years. Java is a great language if you're going to build a large-scale application and want a bunch of developers across time and space to productively contribute to it. But business requirements change, and if you can get what you want done by using a series of applications that live for a few weeks or months, why wouldn't you do that?

Another commenter mentioned scientific computing, which is a good example. When you're evaluating hypotheses, it's important to be able to write new code with high throughput. That means you need enough power of abstraction to be able to have libraries like NumPy etc., but you don't want so much structure that it's hard to write 10 lines of code and validate or falsify your gut feeling and then move on. Python was built around a REPL; Java only grew JShell fairly recently, and Jupyter was built for Python, not Java.

And even when you're trying to reproduce old work, it's a lot more scientifically valuable to have someone be able to look at the paper (the spec) and write a new implementation than to say "Start with this 100 kloc Java codebase which we wrote for Java 1.2 but still works today." There are of course useful applications for that capability and it's great that Java supports it, but this isn't one of those applications.

I don't do scientific Python myself, but I support users who do and I do a lot of infrastructure work. For that, it's still much more valuable to be able to write new code and get rid of it than to work within an old and well-built system. If I want to answer questions of, say, what our storage use patterns look like so the business can figure out what to invest in, it's a lot more valuable to be able to take that problem statement and produce an answer quickly than to build a long-lasting application that can keep producing answers to variants of that question, because the next question isn't likely to look too similar in terms of implementation.

Or maybe put it this way - if you're the IRS, and you're writing code to process and verify people's tax returns, Java sounds great. You're going to want to keep the tax code from N years ago still working, and you're going to want this application to live many years. But for me, I have a little program to do the math for me to fill out my taxes, and that program is in Python, because I have no need to keep maintaining the script when the tax code changes (or when I move states), and I'm the only author. I make a copy of the Python file each year and I drop anything irrelevant. The ability for me to read the entire script top to bottom and be convinced "OK, this solves this one task accurately" is far more valuable than the program being able to solve hundreds of tasks it needed to solve in the past.
Hmm. Nowhere did I say my culture is bad. In fact it is the opposite. Where teams proactively think about security from the ground up and bake it into their respective products. A gotcha stunt like this diminishes that culture all so that you can pat yourself on the back for emulating a phish with a high click rate.
C has classes?
How were the bids setup? When you underbid you'll get matched with people nobody wants. Also if real users aren't interested in whatever interaction you're soliciting you're bound to only get bots.

I've done some FB advertising for news type content (much easier to target properly) and was getting incredible value for the money. Usually it's pretty obvious real fast if you're getting real action or not and you can adjust accordingly.
Which all works great if you serve all markets but my high end work was pushed off Apple because they literally didn't sell machines powerful enough (still don't), trying to get a 60fps 4K video off my iPhone and onto the high end PC to edit it was a complete nightmare I was lucky enough to experience recently.

File is too big for gmail,whatsapp,slack and all the usual gotos, my work Mac laptops hard drive is too small to airdrop there and transfer. Can't remember what my solution in the end was but the walled garden of iOS wasted over an hour of my time on a deadline.
All a joke, we tell the auditors what they want to hear, we provide documents to prove the processses are implemented as they should but then in practice nothing if followed but they dont get to know that.
Hm, that's a surprising take. I think JWT is super simple.

One header chunk, one data chunk, one signature chunk. Base64-encoded and concatenated. Done.

You don't need a JWT library, although I guess I'm taking JSON parsing ability as a given. This seems reasonable -- anywhere JWT would make sense, JSON is likely established.

Some of the other associated standards (JOSE, JWKS, etc) can get complicated, but JWT is about as simple as it gets.
Maybe technology-wise, but the games are all super expensive and there aren't enough of them to justify a subscription.
> I wouldn't particularly care about the drugs side but conspiracy to murder (x5) is pretty hard to forgive.

Given that the those convicted of an actual slaughter that was a war crime have been pardoned by Trump, someone whose sentence took into account uncharged involvement in murder for hire schemes that did not culminate in actual killing is kind of small potatoes.

> If trump wants to be generous, let him look at Snowden, Assange and Manning.

Assange makes sense for purely corrupt reasons so has a better chance than the others, but all three would fit his lame-duck feces-throwing style pretty well.

(Which isn't to say I don't see good arguments for pardoning Snowden fairly generally and Manning more selectively; I just don't think those good arguments are in any way relevant to Trump’s likely behavior.)
That is wild. Too wild. Jesus.
UK students lose Erasmus membership in Brexit deal
It was good but too much deux ex machina with Captain Marvel.
>Could it be possible that male fossils are more likely to have usable DNA and thus bias the results?

You can't change the hypothesis to match data. We try to avoid doing that in science ;)
I've never heard of this youtuber but I'm really digging her videos. I'm now on my 4th video of hers. They are long and I cut out about half/quarter-way in but thoroughly enjoying her reviews.
The Butter Robot from 'Rick and Morty' Pre-Order
Python has classes defined in C.
One solution to the number of ads is to simply download the video with youtube-dl (http://www.yt-dl.org/).

Copy out the HN youtube URL, run youtube-dl, giving it the URL, wait a minute or two, and you have a 24m37s video with zero commercials.
From xref's other post:
https://www.wfaa.com/mobile/article/news/godaddyunderfirefor...

https://imgur.com/a/eqrijWx
VSCode (based on Electron) runs on arm64, not the full-featured Visual Studio 2019.
The term "defense in depth" comes to mind.

Of course, ideally the IT team has screened out the phishing attempt and secured systems as much as they can.

If they do it perfectly, then your comment applies and nothing else matters.

If, however, the security team cannot be perfect, some amount of bad stuff will land with the users. This seems realistic.

So training people to be security-minded is useful. It's the next line of defense.

How do you train your users? "Just send an email and request that users report it to whoever is responsible" as you mention is one thing. But you can also imagine someone complying with that but then falling for a well crafted phish (that happened to me, as I mention elsewhere in this thread.)

Being confronted with falling for something makes people take the threat more seriously. It takes someone's attitude from "it can't happen to me" to "oh, it did happen to me."

>> at my company anything important is gated by a U2F token, among other things. We are simply 'immune' to most types of phishing

I don't know your business' threats but that seems naïve. Imagine your sales team gets a phish email asking them to list
your biggest customers, including contact info and revenue "so that we can send them an appropriate thank you gift for the holidays." If someone replies to this/fills out the form, you have leaked critical information even though nobody has penetrated your system (so your tokens don't help.) Even if this type of thing isn't a problem for your business, you can imagine it is for many.
How has nobody said "the iPhone". Hell it was called the Jesus phone before it came out. You don't get more hyped than that but it definitely lived up to it.
>... do you have a better way of reaching those targeted viewers?

I'd be curious to see how blogs do at targeting certain demographics. Presumably if you had a blog aimed at high-earning college educated people you could get a pretty high ratio of (target demographic/all viewers).

But I assume advertisers generally trust metrics more than intuition so you need something like Facebook or Google's ad network to identify someone as belonging to a certain demographic before the advertiser will believe it.
I'm no fan of Facebook, but honestly, this doesn't seem like a big deal. Actually, online ad networks like FB or Google are way more transparent than the alternatives. Sure, when you say you want to target X it's not going to be 100% X, the data is noisy.

Ultimately, the data speaks for itself. You can see impressions, clicks, and conversions, and it's almost instant. If you don't like the results, you stop/change your campaign.
Hard to run a business without the socialists going all Twitter on you.
For someone who is not a lawyer, you're making some strong statements about the legal aspects of this situation.

Yes, it's true that an undelivered gift is not a contract...but you seem to have forgotten (or possibly never learned) about promissory estoppel. If the giftee was told of the gift and reasonably acted upon the expectation of the gift, then the gifter could very well be obligated to actually deliver the gift. This is covered in first-year contract law. There are indeed a great number of cases on this point in which the gifter was required to provide the gift.

Also, generally employee bonuses are considered compensation for labor, not gifts. Labor laws trump contract laws. If a company tells an employee that they are getting extra compensation through an official means of communication (like an internal email), they may very well be bound to that, even if it turns out the email was just a phishing test sent by the IT department. You do not fuck with the Labor Board.
It's standard TensorFlow practice. e.g. `model.compile(loss=loss)`
Wow I really didn't expect this, possibly the biggest revelation of modern times
BS. AMD has been down for a long time and then they came back up. It's simply Intel's turn to take a seat for a while. Nothing is finished until the actual door closes.
That Mark Zuckerberg doesn’t care about you one bit, and the matter how much you want to defend him, it won’t change anything.
The cool higher-ups see themselves as a [ insert buzzword] company.

From "mobility" to a "services" company, the worst part is they see "making cars people want to buy" as an embarrassment and the whole transition period of "We now make cars the chinese tell us they want, because they are the ones buying them until we reach our Nirvana" it's just corporate sleazeball speak to "let's keep the wheel spinning because we made a terrible mistake but i don't want to lose my job".
You obviously never used one before the iPhone! Part of the reason the iPhone was such a revolution was that it had the first decent virtual keyboard.
Anybody know how they keep something like that from melting everything in the room?
Provenance is an idea that shows up in multiple fields. I first encountered it in discussions of archeology. But then it showed up in, for example, https://www.ralfj.de/blog/2020/12/14/provenance.html discussing how improper handling of pointer provenance can cause code to get miscompiled.

https://en.wikipedia.org/wiki/Provenance gives more on the term and the way it shows up.
This is a nightmare. Getting spammed by ads on my devices is bad enough. Now when I go out in public I get shamed for all to see. Targeted automated advertising has got to be banned outright.
https://i.kym-cdn.com/photos/images/original/001/299/158/00a...
How much is shipped over the wire with server side?
Maybe Idina Menzel lives up to the hype.

Something about Rent aged poorly, especially if you saw it around 2009 during the recession. It was just hard to relate to characters who had no interest in work struggling to pay rent in a gentrifying slum while in the present day, people were struggling to pay rent and find a job.

I don't like the pacing of Wicked, but the staging and performance of Defying Gravity is amazing. I can't remember exactly what it was, but there was morality lesson that felt shoehorned in. Maybe Doctor Dillamond was an allegory on racism? I enjoy Wicked, but I felt like it need more work.

Phantom of the Opera is ok, but I wouldn't go out of my way to see it. I'm also not really an Andrew Lloyd Webber fan.
SARS-CoV-1 spread to humans in 2003

MERS-CoV spread to humans in 2012

SARS-Cov-2 spread to humans in 2019

Coronavirus making the jump from bats (through intermediate species) to humans may not be as common as the flu making such a jump; but it is not exactly uncommon.
Why? So you don't crash in water if something happens?
You're totally right about promissory estoppel (I updated my other comments about that). It's been awhile since I was in 1L :). Again, nothing I say should be construed as legal advice. Appreciate the feedback.
A subscription is only worthwhile if it reduces the up front purchase price. This being BMW, you know that won’t be the case; you’ll be stuck paying full price for the car and paying a monthly fee for a feature that comes standard on much cheaper cars.

Consumers would be more willing to accept that from a budget brand, not a luxury brand.
Yep, they should be seen more as anthologies rather than a single work.
This article confuses stock price with profits.

Additionally in a single year Amazon almost doubled the number of employees they have. Does that not count as sharing profits with people?

With companies going bust left and right, Amazon has been one bright spot to give people jobs. Yes, I know they are warehouse jobs, but when over a million people accepted such jobs I think reports of how bad they are are overblown.
Cloud infrastructure is not immune from the SolarWinds Orion breach
I have wondered why GPG signed emails aren't more common for internal company email? It seems like it would solve at least part of the problem.
Regarding the "it's free money, claim it now" language... my employer also does regular phishing tests yet I wouldn't be surprised to get this as a legitimate email. Benefits from company partners, wellness incentives, etc. all read something like this and you never really know who the company gave permission to contact you until the message comes. A few anecdotal email subjects, all to my work address, from a 15,000 head company on the S&P 500:

1. "Claim your check now! $1.50 is waiting for you" Apparently a legitimate email refunding me for one time the vending machine failed to read my card properly (but had my work ID scanned).

2. "You could be earning an additional $1000 per week– find out before it's too late" Something about our 401k but included a link to some survey that HR required we fill out.

3. "Reminder: Claim your wellness check now" I expected this to contain a link to the health survey we're supposed to complete which gives me a $5/week discount on the health insurance I get through the company. Turns out this was actually related to some other company wellness incentive which gave us gift cards for participating in various events (bike to work month, etc.).

I could probably dig out more but I passed all of those along to the corporate email check to make sure and each was verified as legitimate. I'm sure plenty of other companies have made attempts to increase "social engagement" without realizing the consequences it has for security.
Can you say who you work for? I don’t want to work for you either.

You seem oblivious to the fact that you can still be effective but not a shitty security team.

Your way of approaching this literally makes people who should listen to you and trust you want to do the opposite. What an awful security team you’re part of.
I'll never forget that scene with Marlo, with the lollipop in his mouth. It strangely makes him seem extra ruthless. My wife finds it odd that I remember such trivia, but that is one of the most prominent details of the whole series for me.
I would very happily read that! Or if possible would love to chat about it -- sent you a message via LinkedIn (Only contact medium I found)
Laser propulsion is an interesting / wacky idea. Don't know if it would actually work, but the core concept of keeping the energy source on the ground is an interesting one at least.

https://en.m.wikipedia.org/wiki/Laser_propulsion
I picked up a set of Twinkly lights this year and liked them so much I got a few more sets to give as gifts. The API appears to be local network accessible and there are a couple libraries written in python and node for playing around with them.

The mobile app is decent, with a few bugs, but it does include a cool mapping feature to map the layout of lights so the effects work correctly. Definitely would recommend checking them out.