skysight-inc/HackerNews huggingface dataset:
It doesn't kill your downstream directly, but you can't send the acknowledgements for the download fast enough if the upload is saturated. That kills your download speed
Is it the people who were using Parler that made the death threats, or the people who don't like that people were using Parler?

I honestly don't know, but I personally assumed the death threats came from people who simply didn't like that Parler existed in the first place.
The one thing the attacker definitely achieved was to reveal that a particular journalist is not very good at an essential part of their job, fact checking.
What's wrong with java.time.* ? I've never found it to be hard to grasp.
> you can use the open source chromium version, but we did what was necessary to ensure that in all cases and derivatives it will be inferior to closed Chrome

Alternatively, "you can use the open source chromium version or a derivative, but we won't operate as a free host for our competitors."

Regardless of their motivations, from my perspective this doesn't have any of the ethical questionability of actions like penalizing non-AMP pages; they seem to be well within their rights (and not in a "technically that's allowed, but they're still kind of shitty" way like some of the stunts that Nintendo pulls with copyright law).
This exact situation occurred a couple years ago to some people in the US. I don’t know their names, and I didn’t investigate the situation internally, so I don’t know just how smart the phishers were vs their victims. What I do know is that I got a call from the front desk people at our Boston office that said someone is here for their first day of work and we have no record of them being hired. Did I know anything about this? I didn’t. After some investigation it was revealed to be an identity theft scam, and within a week several other people were also found to be a victim of the same scam.

Before you judge too harshly, keep in mind that often the people affected by this often aren’t very technical, don’t know what to look for when it comes to phishing, and are just doing what comes naturally in the situation. The scammers in this case are obviously at least somewhat technical and have a huge advantage in terms of being able to scattershot communicate with a very large group of people (potentially millions, although more likely 10’s of thousands in the case I describe). Also, while I’m sure no one reading this has ever been phished (cough), it has been _repeatedly_ found that phishing is effective, even for highly technical audiences. When it comes to recruiting, it is all too plausible that the person you’re interacting with doesn’t work for the company you’re “interviewing” with, and many recruiters start a conversation not even revealing who they recruit for. In fact, there are recruiting agencies that may as well be phishing organizations, because they will claim to have a role simply to get your resume and then, once they have your information, will start shopping it to companies in an attempt to get paid.

In short, I have a ton of sympathy for people affected by this, and think the assholes who do this kind of thing are pretty much evil.
Ideally people are researching and innovating because it's something they're passionate about and not doing it purely for financial gain.

If that's your position then why not abolish patents? I'm a lot more in favour of that. Personally, I think the patent system discourages innovation and encourages rent-seeking.

Andrew Yang also suggested making government rewards for technology development, so instead of a patent for some type of technology you get say $10,000,000 - or maybe even $1 billion if your tech meets whatever benchmarks spec'd.

I like this idea at an instinctual level but I worry that it would be open to abuse. Perhaps the abuse of a system like that would be less bad than the patent system we have right now but that remains to be seen. I do know that a lot of people would be generally opposed to it on principle. They would see it as an undeserved handout.
Well, I think the stupidity and laziness is exacerbated by their ill will towards customers and users. This is also what prevents them from reforming. The general good will and sense of common purpose was necessary in Google's early days when they portrayed themselves as shepherds of the growth of the web. Now they are more like feudal tax collectors and census takers. Sure they are mostly interested in extracting their click-tolls, but sometimes they just do sadistic stuff because it feels good to hurt people and to be powerful. Any pseudo-religious sense of moral obligation to encourage 'virtuous' web practices has ossified, decayed, been forgotten, or been discarded.
I have recently found a strong renewed interest in the power of algorithms. Thinking about all of the sciences, computer science is still very much on the leading edge. There seems to be a lot of area left to explore with regard to applying algorithms correctly and devising entirely new ones.

For instance, the splay tree is arguably one of the more incredible data structures in all of computer science, and we didn't discover it until 1985. Think about all the undiscovered applications that may exist out there regarding such an algorithm. Contrast with how long mathematicians have had to play around with the ideas of Newton, et. al.

Another fun data structure is the skip list. This is probably the simplest probabilistic data structure you could hope to invent, and we didn't figure it out until 1989. 4 years after the splay tree. To me, this says "keep looking".
I read an interview by Pat Cavit (the former UI lead at ArenaNet) where he briefly speaks about it here: https://carlmungazi.github.io/sourcecodeadventures/posts/pat...
> I have yet to see a scam which would fool me

If it fooled you well enough you might not have noticed you were scammed.

Scams run from laughably blunt like the Nigerian prince to remarkably close to the real thing, like the callcentre that rang me pretending to sell phone contract upgrades that used exactly the same crap phone sales techniques my actual network used when they (coincidentally) called me a week later, and had a 1-letter different email address with the URL redirecting to the same website
Other comments say that Chromium is affected as well. Is it?

I reread the article, but it doesn’t seem to state it explicitly.
To be fair, they’re selling to those executives. It’s unlikely that devs on the ground have the authority to sign off a large consultancy bill.
> Proactively claim ownership of all your production domains in Google Search Console.

That's one of the first things you should do, when registering a domain and setting up a website. It takes about 2 minutes. So I wonder a bit why a business of this size would learn doing this through such a crisis.
Wow I have the same problem here. In my case I found out it is at&t themselves.
I've heard that watching a lot of American television shows can be effective. I think that can help you get familiar with commonly used slang, cultural values, typical patterns of behavior. Also, it would be essential to practice in real life, by interacting as much as possible with the "natives".
You are not the only one and you are not alone. It is not too late and you are worth it!

It sounds like you had a difficult and traumatic past. My parents never beat me but they weren't there emotionally for me and they themselves were emotionally immature (and in some sense still are). They stayed together for us kids and that was a disaster. I am still dealing with the fallout. But as kids we are highly perceptive and learn coping skills to manage in an environment we have little control over. We take these skills through our lives even when they no longer serve a purpose or help us thrive.

In general, it is our thoughts that create our mood. I suggest reading the book Feeling Great by David Burns MD or his older book Feeling Good. He also has a podcast. That's what some people call bibliotherapy and then well podcastherapy. https://feelinggood.com/category/dr-davids-blogs/feeling-goo... If you can find a therapist I would go see one. Schools usually have one available. Others have sliding scales. Focus on specific issues you have and take it one day at a time. The patterns in the mind are quite consistent and common so just as you trust a doctor to heal a broken bone you should trust the professionals to help you through challenging times and give you tools for the future.

We measure ourselves based on years and often lose sight of that it is the days that build us. And these days are built on hours. Start small.

Your CS education will help you and if you enjoy it and programming then you will go far. Education is the most powerful force we have to improve our lot in life. You don't have to be perfect. There are plenty of folks who failed out of high school, got a GED and then eventually went to medical school and even graduate school. Like the stock market past performance is not a predictor of future success.
"Simple things should be simple, complex things should be possible" - Alan Kay.

Instead, in overthought out systems, complex things are simple, and simple things are possible with unnecessary effort.
I agree that order of execution is sometimes problematic in Groovy and you have to use evaluationDependsOn() or afterEvaluate {}. I don't think the DSLs are per se particularly problematic; they generally just set some properties of the task (when they're more complex and yet the abstraction leaks, then they do more harm than do). But yes, the documentation is awful, and is IMO the biggest problem with Gradle.
While I agree with you that it should be obvious that Groovy knowledge is necessary to operate Gradle, I think it's important to note that the intersect between people building things in Groovy and people building things in Java/Kotlin is quite small. And for that reason Gradle, with Groovy as its star feature, will always be a fraught choice for a build system.

Developers simply have to know too much Groovy to operate Gradle effectively.
Not to mention that universities typically don't hire people at the associate professor level. The first rank is called "assistant professor," followed by "associate professor," and then "full professor." Associate and full are tenured ranks, which is why there isn't much hiring at that level.

Also, one would expect any open position at a US university to be advertised, most likely in The Chronicle of Higher Education. This is something perhaps only someone who's got a little familiarity with the academic job market may know, so, I suppose one could be forgiven for not knowing it, but I would assume that one would at least google for open positions at Harvard to find out if it really exists.

That said, naïve or not, I also don't think victim blaming is a productive thing to do here. All it does is discourage people from speaking out about their experiences, which means we can't learn from them. It may also discourage people from seeking help when they think they might be getting phished.
WhatsApp Delays Privacy Changes Amid User Backlash
As I responded elsewhere, that's not what she wrote in the post that people are responding to. I would agree that if it were the case that she was offered a full faculty position after a 90 minute remote interview, that wouldn't pass the sniff test. But that's not what she claims in this post. It's very plausible that a working journalist would teach at Harvard Extension School. Though it's at least a bit of a stretch that Harvard would relocate someone from India to do so. And it does seem that her story is changing.

ADDED: And, yes, there seem to be different claims on twitter than what is stated in this post.
When I read that I immediately thought about GraphQL subscriptions. I don't know whether this will a bottleneck, but perhaps it makes sense to route everything through GraphQL, this means: someone updates via GraphQL and everybody listening gets an event by subscriptions.
For anyone who wants the gist of Zettelkasten, I've just finished reading How to Take Smart Notes by Sönke Ahrens.

Here's my rather brief summary of the process:

* You create fleeting notes to capture ideas as they happen. They should be short lived notes that don't become the main store of your knowledge.

* You create literature notes as your read material. These should include your own thoughts on highlighted passages, not just quotes and highlights on their own.

* You organise your fleeting notes as permanent notes into your 'Slip Box' (taken from the original use index cards). Each note should contain a single idea and should be understandable when reading in isolation.

* You want to avoid burying knowledge in large notes as it makes it hard to glance at and link to other notes in a concise way.

* Notes are linked to other notes which support your ideas. This also help the discovery of new ideas.

* You use your slip box to help you do your thinking. You want to ask it questions, find the related notes that support/oppose the arguments and find gaps or newly related information.

* You can create index notes that help you find your way around.

* Part of the process is to help your understanding by writing. With a well maintained slip box, you'll never be starting from a blank sheet. You decide what insight/question/knowledge you want to explore, and pull together the notes that give you the body of research to get you started. You shouldn't need to start a new blog post by researching, that happens prior by taking smart notes as you naturally read what you're interested in.

Hope that's somewhat helpful. I'm still experimenting with it to find out what I understand correctly and what I don't.
Ask HN: AWS account expires in 2 weeks. Can't login, but they keep asking me to
My small AWS account which I use to handle emails from web applications and sites is not allowing me to log in anymore. ( i need to pay a small bill since that VISA is expired, which requires login)

I know my credentials and i can access my email. OTP is always successfull ( One Time Password).

I have my phone with me, but no notifications coming in ( I have never enabled MFA on this account, and i'm not receiving any SMS)

Every customer support issue directs me to urls where I need to login, but I can't.

Is there a way to let them call me and verifying my account without doing that verification step? Because that's literally the issue.

Or any other advice? ( It's a small account, but it will give me a lot of hassle and errors if i have to reconfigure every website/webapp and approve every email again. Setting me back for > 2-3 days)

Edit:

Thank you all!

I changed the default SMS app ( the default was the normal one for Android) and it showed me a lot of missed messages, including OTP ones from Amazon.
Some german ISPs used to force a reset of home internet connections every 24h to trigger IP changes so that static IPs would remain reserved for the business tier. The time of the reset could be shifted by preemptively reconnecting at a desired time, they only reset the link after 24h of actual uptime.
No, anyone at Harvard uses a @*.harvard.edu address.
Ask HN: Self-Experimentation During Lockdown
All days look the same for me during lockdown and I am sure some of you can relate. While this is somewhat dull and unsatisfying, it should also provide ideal conditions for some harmless self-experimentation. I'm not necessarily talking about stabbing your eyeballs with a needle like Isaac Newton did, but more about self-optimization like finding optimal sleep or eating schedules.

Has anyone had the same thought? Is the idea valid? Suggestions for experiments?
It's right there in the abstract:

> We ran a subjective flicker marking experiment to fit the model parameters

The article goes on to describe how they performed cross-validation on the experimental data to validate how accurate the predictions are.

Or am I misunderstanding your complaint?
That's not a half bad idea if the setup is any more complicated than "clone these repos and run the setup scripts."
There are patterns along the coordinate axes and also along the diagonals, but otherwise the distribution looks pretty random: https://commons.wikimedia.org/wiki/File:Gauss-primes-768x768...
“Don't host any customer generated data in your main domains. ”

This is extremely important for multiple reasons. One reason is the blacklisting as mentioned in the article, the other reason is security: browser typically implement security policies around domains as well, such as cookie scoping and whatnot. Putting all user generated content under a completely separate domain avoids a whole category of potential issues.
+1 on @detaro's message. Sounds like a 24h disconnect. Your router may have a feature to set dis/connect times manually ir you unplug/replug it at the time you wish to have the dis/connect to happen.
I concur. I worked on a java project at a previous job and Bazel was instrumental in getting fast deterministic builds. There were some growing pains as the bazel docs weren't great back then (this was before bazel reached 1.0), but once we got things to work it was nice to work with. We were able to leverage Bazel for our Angular application as well so it was nice to have everything building with one tool.

> A big part of the reason is that tools suck as Buck (which, like Bazel, uses Skylark as the language, which is a very limited python in essence) avoid the general programming patterns to avoid the issues described here.

I also agree with this. My current language of choice is OCaml and the most popular build tool is dune [1], which uses an s-expression based configuration language, and its nice to have a more restrictive DSL that avoids some pitfalls of using a full blown programming language for configuring builds.

[1] https://dune.build/
As a layman (mere college math major), I liked the explanation that a prime is only divisible by itself, which gets screwed up if it's also divisible by the negative of itself. At least it necessitates adding a layer of obfuscation to the layperson's definition of "prime" that doesn't add any useful mathematical insight.

On the other hand if you're programming a function isPrime() for some practical purpose, then whether you include negative numbers will be dependent on that purpose. Whether you include floating point numbers will be between you and your conscience. ;-)
> The article says that NoSQL has no relations. Is that the case?

No, not as stated in the article. It is absolutely false that “no matter what format they store data in, these databases don’t support relations between data.” (that's particularly laughable for graph databases.)

This sounds like the author knows that “nonrelational” is another term for “NoSQL”, but, as is distressingly common in the field, doesn't know what “relational” means. (It means it doesn't follow the relational model, who is centrally about (though the model has other elements) storing and operating on data in the form of “relations”, a particular logical abstraction (tables, views, etc., are all concrete realizations of this abstraction.)
A "relation" in this context roughly means a table that can be manipulated with relational operations (e.g. join).

https://en.m.wikipedia.org/wiki/Relation_(database)

EDIT: the sibling comment is right. The article's author seems confused.
> I keep reading this on the internet as if it’s some sort of truism

I don’t believe this statement was initially intended to be axiomatic, rather, to serve as a reminder that the injury one is currently suffering is perhaps more likely than not, the result of human frailty.
No, we can't vote with our clicks. That's what it means when a handful of companies dominate most of the web and the web playing a dominant role in global economy.

We have very little real choice.

Occasionally people will pretend this is not so. In particular those who can't escape the iron grasp these companies have on the industry. Whose success depends on being in good standing with these companies. Or those whose financial interests strongly align with the fortunes of these dominant players.

I own stock in several of these companies. You could call it hypocrisy, or you could even view it as cynicism. I choose to see it as realism. I have zero influence over what the giants do, and I do have to manage my modest investments in the way that makes the most financial sense. These companies have happened to be very good investments over the last decade.

And I guess I am not alone in this.

I guess what most of us are waiting for is the regulatory bodies to take action. So we don't have to make hard choices. Governments can make a real difference. That they so far haven't made any material difference with their insubstantial mosquito bites doesn't mean we don't hold out some hope they might. One day. Even though the chances are indeed very nearly zero.

What's the worst that can happen to these companies? Losing an antitrust lawsuit? Oh please. There are a million ways to circumvent this even if the law were to come down hard on them.
They can appeal, delay, confuse and wear down entire governments. If they are patient enough they can even wait until the next election - either hoping, or greasing the skids, for a more "friendly" government.

They do have the power to curate the reality perceived by the masses. Let's not forget that.

Eventually, like any powerful industry they will have lobbyists write the laws they want, and their bought and paid for politicians drip them into legislation as innocent little riders.

We can't vote with our clicks. We really can't in any way that matters.

That being said, I also would like regulatory bodies to step in and do something about it. To level the playing field. If nothing else, to create more investment opportunities.
Interesting. How do you know that I have never been targeted. Did you ask your crystal ball? Or is it that you just know everything? I am amazed and bow to your skills, great magician.

Also, implying that I am not actively engaged with anything is a pretty personal attack. Reserve your patronising behaviour for your children please.
Recently started using TiddlyWiki as personal notes archive. The automatic indexes of really work well to connect each note to others.
How could that be validated? More energy was going to be used no matter what due to increasing population and technological advances leading to increased uses of motors, etc and the whole industrial revolution.
Yes, of course.

But the senders were not at Harvard, so it's very likely that they did not do so. And they would not need to do so, for their purpose.
Writers Can Benefit Quora Spaces – By Dr Mehmet Yildiz – Illumination
I've only just learned about Mithril streams:
https://mithril.js.org/stream.html#combining-streams

No experience of using them, but they look cool for managing state.
There are worse things than using Grails. For example using straight up Spring. Grails is a sane wrapper around Spring so you can easily bring regular Java developers into a sane ecosystem. For example Grails' Gorm is the only sane way of using Hibernate in the entire JVM ecosystem. Using Hibernate directly will drain your sanity very quickly.
This reminds me of a college summer job I had cataloging a design company's photography. I almost immediately ran into the limitations of a single taxonomy: "Is this picture of a tree, or a landscape?" Of course it could be considered either by a user, but the single hierarchy forces an exclusive organization.
Svelte is hard to get passed the hype until you build a reasonable size project with it.

Personal anecdote/plug: I built https://www.listenaddict.com/ last year with Svelte. It's medium-ish sized (majority of the app is the moderator and administrator pages). It's extremely fast to develop (and will only be faster with SvelteKit+Snowpack). It's trivial to implement components and stores make state management a breeze.

Having done React for ~4 years, and some Vue projects, I won't be going back to those anytime soon.

That said, it's not without its own issues, but anything I've had issues with I've been able to solve relatively quickly or have someone within the community help.