skysight-inc/HackerNews huggingface dataset:
This is based on a misunderstanding of how ads work and does harm.

If this silently clicks ads in the background the click rate goes up but the goal action (buying, signing up) remains at 0 which smartprices the ads and tanks the value of the ads for the real clickthroughs.

If you must block ads just use uBlock Origin so you are treated like your visit doesn't exist.

A deeper question is it moral to consume content and block the ads. Wouldn't that be the same as pirating a movie? (not that there is anything wrong with pirating). Are there people who would block ads and complain about people pirating, or even stealing from a store if you can get away with it.
PFOF or paying for order flow is a strange way to make money. There are other attempts at normalizing this sort of behavior, free trades and apis over at alpaca.markets is another example of it.
Octopuses are ocean thugs that punch fish
This is a foundational policy question in security research, and Project Zero gives a lot of detail on its aproach, e.g.

https://googleprojectzero.blogspot.com/p/vulnerability-discl...
https://googleprojectzero.blogspot.com/2020/01/policy-and-di...
The elephant didn't have a cardiac arrest and humanity shouldn't get "feel-goods" about this crap.
Imagine if a Brain Surgeon was quizzed on Liver anatomy every time they wanted to interviewed for a job. It makes no sense and is borderline irrelevant to their actual job of you know doing brain surgery.
Privacy.com will generate temporary debit card numbers with easily controlled access rules. It's a lot like BofA's old service.
Blocky archive: Archiving utility with forward error correction in Rust
"I don't want to go full SPA with Django as this defeats the purpose of Django IMO" -> What is this "purpose" ? Django is here to help me model my database, handle few permissions and bring few API up online, I see no problem with having a PWA in front of it. Are you trying to get all of your website server rendered ? In which case you could do that without having to worry about integrating it with Django... TBH after 5 years of react and 8 of Django, i'm just not mixxing them up except for the front-end calling a query on the back-end (which both can be served at the same domain using nginx) ;
I have no idea why people complain about the recommendation engine that much. I either ignore it or if there is something particularly stupid, I say stop recommending. I stick to my subbed videos, and I dont have to care.

I just think its trendy to hate on things even when it gives you tools to tweak its behavior
It's not just about "algorithm hazing" but about presentation and communication skills that are often not a big part of the job of especially lower level developers, or at least not assessed in the same way.

Keeping your communication and presentation skills sharp will not just benefit you in finding a new job, but also in advancing where you are, but you're rarely fired if you fail to improve at it.
This was so much fun.

> You are 5% basic. Old Man Gloom and Distorted Harmony? Where do you even find this shit?.

I feel called out, but also kinda proud.

> You're stuck in the early 2010s. You must have peaked right around The Dear Hunter's Act Iv: Rebirth in Reprise.

Early 2010s were amazing era for Prog metal alright.
https://www.blazemeter.com/ has such actions but then you're in the territory of functional testing. I've used their service for load testing, you upload a payload file with instruction, its own macro language. I like their product but not their pricing structure: paying monthly but then limited to 15 tests/month. If I need 20 the next step is too high.

Something my uptime monitoring service doesn't have: they inspect SSL certificates for expiry, but don't inspect the full trust chain. The certificate of the SSL provider (who signed our key) got replaced. With more abstraction (resellers) we got no notification. Until it expired, making our SSL certificate invalid, too. That caused avoidable downtime.
The regulation doesn’t have to prohibit the existence of the product, but it can ensure that consumers are made explicitly aware before / during purchase: this product requires an internet connection, and may not function without one.

There’s nothing obvious at purchase time that this new breed of Apple laptops require an internet connection to reinstall. That’s what will cause some consumers material harm. If informing your customers up front about your product’s limitations causes your business material harm, maybe your product needs a rethink.
I'm a huge fan of the Youtube recommendation algorithm, and I find it works extremely well for me.

Also as a person working on recommendation algorithms at a large competitor, I would say Youtube does a pretty good job overall.
This is a good argument against horizontal scrolling. They make the point that it's good be able to select just the columns you want. The broader design question is what columns (information) will best support the user's judgment to be made - as expressed through the comparison at hand.
A pure recommendation engine of the sort we learn about in class would simply aggregate user preferences based on whatever content-appropriate properties are available. A real-life recommendation engine is written and deployed as part of a business plan.

I think it's fair to say that all recommendation engines deployed by for-profit companies have some element of recommending things that drive more revenue for the company. The question is, how much does end user give up, in terms of getting actually interesting recommendations vs being recommended something that is more profitable for the company, in exchange for getting things of interest to their attention.

I've seen enough to be convinced, anecdotally, that YouTube's recommendation engine is heavily skewed towards revenue-driving. For example, how much of what YouTube recommends is influenced by their big-money media customers? What users get is as marginally interesting as necessary to addict viewers.
Getting better at leetcode is hardly "bettering oneself", what a bizarre point of view.
That, this, is the most diplomatical way of saying 'just use ZFS' we've seen in a decayed. Mod parent up. BTRFS will never be a suck-zess. Use ext4 or ZFS for life.
I support a LOT of Thunderbolt docks for clients in my IT work and have also had experience with a lot of them personally.

My feedback is, almost all of these docks really suck. Spend the money and get a CalDigit. You won't regret it. It's the only one I've found that reliably performs the way a dock should.
Do you feel you did great at all 10 interviews?
if https://en.wikipedia.org/wiki/OpenEMR can be hipaa compliant, so can other softwares be. i don't think being on github is some sort of "childish" thing to say.

you said your clients were lawyers. my question, how "big" were your clients? were they shoe string budgeted legal clinics, one man pratices or medium/large multi corps?

compliance and liability is talked about stuff which is usually customer facing, has some cloud version that might be stealing data and all that. There is little problems in running offline self hosted solutions that only reside in the local network and "for your eyes only" end to end.
Google and YouTube video search are terrible. I find the result poorly matches the query I typed, the results are hard to browse, and of course favor videos on YouTube ignoring better videos that may be on other sites.

Bing video search is by far better. Assuming you use DuckDuckGo type your search and follow it with !bv. The result is an excellent browsable display of videos that match your search well, that can be previewed by hovering over them, and the results aren't biased to just YouTube. You can also add emphasis to words in your search with the +/- operators and quotes.

Also the "up next" YouTube video is rarely as good as going back to the Bing search and choosing another video.
No idea on how complicated it is to file an S1. I just type code :)

From my understanding, the SPAC goes public (with an S1) with the intent to acquire "some company". Then the company being acquired doesn't have to file an S1. I would guess that the SPAC's S1 is going to be a lot less complicated, as it's a do-nothing holding company set up to acquire some TBD company.
*Adds Mistabishi to playlist
There’s a classical studies word for that pattern: boustrophedon, with the same agricultural origin and motivation, only it refers to oxen ploughing a field, not a lawnmower mowing.
It is in the public's best interest to demand timely fix because you never really know whether bad actors know about it. A demand has no teeth, therefore you have to make a threat (fix in 90 days, or we disclose publicly). A threat is only good if you have a track record of delivering on it without exceptions. Therefore, it isn't an option to not disclose it at 90 days.
You can help it arrive faster by supporting the development: https://www.patreon.com/bcachefs
I'd guess it's an operation of: here's a set of acceptable results. P-hack your data to show statistical significance for at least one of them
They all begin as a zero day.
A while ago, responsibly disclosed bugs took an extraordinarily long time to be patched. Disclosure deadlines ensure things are patched in a responsive manner. They only work though when the reporter actually follows through if the deadline is missed (and has standing & legal projection to execute like the Project Zero folks).
Lol. Mine was LCD Soundsystem.
If you want to have an impact in tech, build the tech. Relying on dinner parties for connections is always going to be too try hard. Socialites live and die by dreams. We are engineers. We build utilities, not relationships. Of course, take it from the guys whose very existence depends on relationships and you'll be gaslit into an entirely different perspective.

Code doesn't care about whose hands you shook. Just build the infrastructures you want to see. Shake hands later.
There are probably hundreds of other treatments with similar results in test tubes. This is great research, but it is odd to see here on HN.

It costs > 1 billion dollars to bring a drug to market and put it through clinical trials. This means most off-label drug uses like this will never reach cancer patients because the drug patent will expire leaving no backer that can make back the cost (even if the cost is less than a billion for off-label drug use). This situation is similar for most complementary and alternative medicine: there are many compounds shown to be anti-cancerous even beyond test tubes in mouse models and initial studies in humans. But there is nobody able to take them through clinical trials.
>presentation and communication skills

These can be assessed completely without whiteboard quizzes.
I would however imagine them to need to be able to show good skills at communicating the things they actually do, and being good at communicating that is in itself a skill that they will not necessarily use on a daily basis.
That's totally false. Here's the client you can download, compile, and side-load yourself: https://github.com/signalapp/Signal-Android

And here's the server implementation you can also run yourself: https://github.com/signalapp/Signal-Server

Telegram has also been exploited multiple times, while signal has held up against a US federal subpoena.

https://www.theverge.com/2016/10/4/13161026/signal-subpoena-...
The Joy That's Typed Python
> 2020-12-03 Microsoft advises that due to issues identified in testing, the fix will now slip to January 2021.

> 2020-12-08 Meeting between MSRC and Project Zero leadership to determine details and discuss next steps. The 14-day grace period is unavailable as Microsoft do not plan to patch this issue before Jan 6 (next patch Tuesday is Jan 12).

> 2020-12-23 90 day deadline exceeded - derestricting issue.

Ouch. With xmas in the middle the grace period, I could see how this can be considered too strict on P0's part. Then, again, the initial bad fix surely harmed whatever trust there was between the parties.
Yup, we had a good venting session at our Dell rep about this issue last year.

They were very aware of the issues, very apologetic and suggested we try some sorta displaylink garbage in the meantime. We did, and then as soon as the WD19 came out we tested that, and it's been night and day.

They still require custom drivers but 99% of issues disappeared. I had one issue with a laptop that likely had a faulty tb module and was failing back to usb 3.1 but no other complaints from anyone.

Well aside from the lack of usb ports on the thing... the Eport had like 8 usbs, the wd16 had 5 and now we're down to 3 on the wd19, that'd be fine if the laptops didn't keep dropping usb-a's also, most of the 7000 line only has 2 now. I refuse to get a usb dock to plug into the wd19 just for usb, that's insane and I'm not a crazy person.
> Keeping those skills sharp even when you’re not job hunting.

Can I just add "Leetcoder" as a part time job on my resume? It is amusing how in this industry, your ability to interview will not at all be improved by spending time doing your job unless it is algo heavy. It is a separate job entirely.
The non-premium user is the product, on Youtube. They're selling your eyeballs to advertisers unless you're a Youtube Premium subscriber, but even then they use the same algos because they want to maximize engagement. It's the same tired BS as Facebook.
Having worked in a call center, I think it's more driven by the fact that labor and customer service costs are high and call centers are expensive to operate, so they try to not offer that as a support option.
archived version: https://archive.is/xItt3
There it is! Makes total sense. And yes, I've learned my lesson - thank you for sharing, and you're welcome for the free money :D
Wow this would've been so useful to me when I was starting out. You are a scholar.
What's moody about the placemats?
Historically, vendors often refused to allocate time to patch things for anywhere from months to years.

Leaving vulnerabilities in products for an extended period of time is a problem, and adding a deadline helps to ensure that important security issues actually do get triaged and addressed.

As a recent project zero blog post about their policy calls out (https://googleprojectzero.blogspot.com/2020/01/policy-and-di...) "We've seen some big improvements to how quickly vendors patch serious vulnerabilities, and now 97.7% of our vulnerability reports are fixed within our 90 day disclosure policy."

It sounds like it's working as intended. The only way you can make it actually work is to make sure it has some teeth though, hence you have to actually disclose when you say you will.

> doesn't it cause more harm than good?

Microsoft is harming its users by not fixing a security vulnerability. In this case, it's even more clear since there's "in the wild" exploits. Project zero's just helping to raise awareness of the harm microsoft's causing.
> open the site in incognito and go to the "trending" tab.

I just tried that and all of the top trending videos were something called "My Best Friends" followed by a long scroll of NBA videos.
>The key question is "if putting a shit-ton of opioids (which already cross into the brain) in cancer patients doesn't already meaningfully treat this condition, why do we imagine that delivering the same class of drug past the blood-brain barrier suddenly will?"

It appears that as they say now that they have identified the specific mechanism of cell death that can start looking at ways to target the tumor cells without flooding the rest of the brain with loperamide or other opiates. It will be a good trick but better than the other (non) options for glioblastoma.
One very major difference is, Thunderbolt's spec requires that this cable carry 100W of power in addition to the 40Gbps of bandwidth.
The reason it is considered a 0day is because it is being exploited in the wild.

This wasn't discovered by a security researcher looking for holes. This was discovered by a virus scanning company that realized people were actively being attacked using this method.
The Chinese equipment might be locked out from the US market, but not from the world market. Unless the US could leverage the trust the world has on them to keep China from gaining market share. Remember they asked candidly the British to not buy China's 5G.

Also, not so long ago there were "reports" claiming Huawei devices were compromised and no evidence was provided. The negative marketing against China has been candid and in the open. The US is just trying to win in the court of public opinion on several fronts.

So yeah, "The military is scrambling to understand the aviation crash risk from a new 5G sale" and don't provide a technical basis for the concern: it reads propaganda all over.
>I would however imagine them to need to be able to show good skills at communicating

Yes, that's called an interview. No one is saying there is no need to interview... So you seem to agree that leetcode style questions are irrelevant and pointless?
Additionally, you can go to your history and choose "Remove from Watch History". I've found this can do a good job keeping certain "highly 'viral' videos" from infecting your recommendations.
Why would you want to shit on the company you work for? Just go virtue signal elsewhere.
The playlists they (Spotify) created? Yes. I think there's an argument they own that data.

The playlists that users created? No.

I apologise if that distinction was not clear enough in my original post.
> I swear I remember KFC being delicious

Not as delicious as Roy Rogers. As a kid - Roy Rogers > KFC > Popeye's. Too bad Roy Rogers disappeared at the turn of the century. Now Popeye's > KFC but man do I miss the crispy Roy Rogers chicken.
If Leetcode is all you can think of to do to learn and practice skills then you've got a poor imagination.

One side project I did in my spare time outside of work got me onto my PhD and has literally saved people's lives. People here probably think that's a waste of time and I should have just lazed about instead.
True, still time-sensitive, and Robinhood was/is definitely not the right tool for that job, but maybe for other jobs.
"Your spotify was retiree-softball-league-tommy-bahama-africa-on-touchtunes bad.

Thank your obsessions with Steely Dan, mellow gold, and Africa for that.

Based on your listening habits, I can also tell you your spotify was...

60s-acid-flashback bad

mercury-idolizer bad

parody-song bad

midwest-classic-rock bad

punk-with-grandchildren bad

But wait, it gets worse:

You listen to these tracks too much:

Calling Occupants Of Interplanetary Craft by Klaatu
Working Man by Rush
WEIT WEG by Rammstein
While My Guitar Gently Weeps - Remastered 2009 by The Beatles
The Dope Show by Marilyn Manson

You stan these artists to an uncomfortable extent:

Ninja Sex Party
Rammstein
Led Zeppelin
Steely Dan
Rush

You are 15% basic. You're trying to be cool with Klaatu, but your favorites are the same as everybody else's..

You're stuck in the early 2010s. You must have peaked right around Ninja Sex Party's Under the Covers.

That's it. I'm done.

I need to go recalibrate my taste levels.

Shutting down."

Yeah, I'm a 90's kid who listened to their parents' music from the Classic Rock stations they always had on. If anything, I'm more stuck in the 70s; the early 10s is just when I stopped paying much attention to new music, though my wife is trying to change that. You can't shame me, A.I.!

What's funny to me, is that I actually discovered Klaatu via Spotify. I'd never heard them before, but they came up in one of my weekly playlists, and (obviously) I took quite a liking. "Calling Occupants" was my #1 song of 2020.
I agree that some curation effort makes a huge difference.

I have a "Queue" playlist into which I copy my "Discover Weekly" every now and then; then I listen to that Queue playlist, which lets me delete the tracks I don't want, and keep the ones I do (you can't modify your Discover Weekly). Then, every time I refresh the Queue playlist from Discover Weekly, I first move the current Queue contents into a YYYY-MM playlist (e.g. 2020-12 for this month).

I've been doing this for several years and it's been great — I've got a timestamped record of what I was enjoying/discovering during those months, and it does seem to have helped Spotify to keep recommending me things I really do enjoy. (Weirdly some weeks seem _really bad_, like I delete virtually everything — but I guess there's some A/Bing going on there.)

(Also: I'll only like/heart tracks I _particularly_ like, and sometimes I'll just listen to my "Liked Songs" playlist; I think this helps teach Spotify what I really like.)
Can you name a single occurrence where a publicly funded university in the US or Europe forced a researcher to retract a paper because it conflicted with the universities' commercial interests?

From my time at academia I also don't recall the university or research institute asking to check a manuscript before submitting it to a journal, I'd even go as far as saying that this was unheard of as it would go against the spirit of research.

And in terms of research outcomes the funding bodies usually want publications in high-impact journals, public acknowledgment or results that can be commercialized. There are disciplines where commercial funding plays a larger role (e.g. pharma, medicine), but for most publicly founded research it's a rather bold assumption to claim that the funding is conditioned on achieving a particular result and not on the general impact of the results.
You are describing philanthropy, which is definitely not "basically a tax".
The premise of your argument seems to be that investors are entitled to the best possible price improvement, rather than the RegNMS NBBO, and that any sliver of a penny they get less than the best available price at any brokerage is a "fleecing".

That argument doesn't make much sense to me. People trade slivers of pennies for all sorts of things across the economy. Literally just liking a UI color has a value you can denominate in some sliver of a penny.

The SEC's problem with Robinhood isn't that they weren't offering the best available price improvement. It's that they knowingly weren't, but told customers otherwise. The implication is that if they'd simply been up front about it, and said "we don't charge commissions and have a snappy UI, and we make up for it by taking a bigger share of the rebates our upstreams offer to retail traders", they'd have been just fine.

(Robinhood is bad, but the reasons have very little to do with PFOF).
I really hope they are not hand picking only My Best Friend and NBA videos.
> the problem isn't page weight or JS frameworks, it's network latency[3].

if that was the case electron apps with content available locally would not be so slow
That's an amazing talk and I thank you for bringing it to my attention. Congratulations, you beat YouTube's recommendations for me.

BTW I was already aware of all the questionable things AI is used for, but Mickens' analysis is beautiful.
Where is a good area to begin studying computer modeling/testing for pharma?
Both features are broken.
"Not interested" does nothing aside from temporarily hiding the video. It's not a signal for "I'm not interested in this category of videos". These videos keep coming back anyway and the problem gets much worse if the same content is uploaded to multiple channels. There are videos I've blocked at least five times
"Don't recommend channel" is a cruel joke. It works at first but it gets reversed when you view a single video from that channel. There's no way to enable it pernamently. Sometimes I like certain videos from a particular author but dislike the others and don't want them recommended to me and I can't click on a video added to my favourites without reversing the channel block.