skysight-inc/HackerNews huggingface dataset:
Scrum as a concept is great - at it's best it cuts through all the noise, gets the proper stake holders to communicate quickly and clearly, aligns everyone at the right levels, and of course allows for quick movements with large teams.

However it takes a level of commitment and often breaks down if you're not active in implementing it. The standup is a perfect example - stakeholders shouldn't be part of it and it shouldn't go into strategy or deeper discussions. Everyone knows that, and understands why that's helpful, yet both of those rules are constantly violated. A good scrum master (and you need one because it's impossible to stick to the rules without someone who feels empowered to enforce them) will keep things on topic, and I remember at one company one scrum master kicking out the stake holder from the standup multiple times. At most companies the power difference is too large to do that.

The jargon and emphasis on processes makes it too easy to focus on the surface level of scrum rather than the intention behind it. If it were presented as a flexible set of processes that you can customize to your team and project I think it would be far more successful.

And when it comes to Kanban, it really depends on the project. If you're working in a factory setting (like making assets from a list) or if you have a stable product and you're adding orthogonal features, Kanban is ideal and scrum doesn't work. If you're working in a space with unclear or developing requirements and some amount of R&D then scrum is a good fit. Scrum can make large teams move quicker but everyone needs to be on board with WHY it works, instead of HOW (which is typically how it's presented).

Ultimately though there is no one-size fits all approach. What you want is as dumb a system as is possible given the complexity of the requirements and communication.
I believe that is standard for trials like these.
I am using J on and off, but I am not aware of a ML package for it. Are you writing all algorithms yourself or could you recommend a package?
It doesn't look like it, there is some more footage online of that drone and you can clearly see the spray stick to the glass in front of the camera.
TOTP is definitely helpful vs phishing.

They only last for 30 seconds, requiring better infrastructure(automated logins) which also tremendously helps with detection.

The vast majority of phishing is just storing passwords for later attempts.

TOTP by design can be stronger than password. the seed can be pseudo-randomly generated therefore you cannot guess the code without it, even if you have previously generated codes.
Where is the un-corruptible agency that is going to enforce these laws? Someone stealing a bag of chips has no recourse to get out of prosecution. A wealthy insider trader has the resources and influence to reduce or even eliminate any consequences.
I think we/they have to.

I'll don my tinfoil hat for a moment. A combination of initial vaccine effectiveness estimates having to be downgraded, and variants reducing effectiveness further, along with the infectiousness data of vaccinated carriers putting the herd immunity targets at risk have public health authorities scrambling for the next potential solution.

The data out of Israel and other places is damning. Not in the sense that anti-vaxxers would like, but in the sense that we are still nowhere near containing this thing.

We either need better vaccines, or drugs. So yes, epidemiological standards will relax in the face of a worldwide pandemic, to some extent.
My iPhone supports my Google Titankey through NFC, and I think newer Yubikeys also have NFC.
If you're in the SF Bay Area and want to see these in-person, Saildrone HQ is in Alameda:

https://www.google.com/maps/place/Saildrone/@37.7829877,-122...

(I don't think they have public tours, but I could be wrong)

Usually you can spot the drones in Seaplane Lagoon, and the water nearby.
Right, many countries have similar ideas. They all define them slightly differently.

The americentric part is using the american legal term of art in an international context and assuming everyone just understands it, and that its a reasonable definition in context.

The idea that minorities exist and should have some additional legal protection is not the aspect that is americentric.
I do actually agree with this. At least we should be honest about what we're doing, that we're forcing this on businesses (and that's a good thing!)

Nationalization of most social media would do a tremendous amount of public good, and moderation should exist only for illegal content. That means: spam, porn, extreme political views should all be legal to post and not be able to be removed. Moreover, comments should not be removable, users shouldn't be able to ban each other and so on. And you shouldn't be able to post anonymously on these publicly owned platforms. Also, nothing would be monetized, which is also a huge boon to the public, as you won't have people trying to game algorithms for monetization purposes. It's just a far healthier way to operate social media for a society
At this point I think the thing holding back U2F is just user experience. It is not "hard" but it is a pain in the ass and most people just find it annoying.

The other issue is that you ultimately need some sort of fallback mechanism if someone loses their keys. And it will happen. So you still end up with a process that can be socially engineered, which is generally the weak link in any authentication system.
It definitely seems like it is from within the eye, or at least extremely close to it based on the video imagery.
It was one hell of a well-engineered rabbit-hole though :)
SEEKING WORK | Cambridge/London UK or Remote

I'm a software engineer with over a decade of programming experience. I've helped startups get started and big companies keep going.

I've organised a couple of jobs through HN now; it's been a good way to find interesting projects, and my clients have been pleased with the work. One said: "Thank you! I've played with it a bit and it looks very impressive! Way better than what I imagined this project could be."

React Native is a particular interest at the moment, as it suits my polyglot programming skills and I can always dive into native code to understand and fix issues if needed.

I've also worked on a very wide variety of web-based projects, so I will be able to hit the ground running on those. If you need more general programming, I can do it. If you're doing something a bit esoteric, that would definitely suit me – I've done FPGAs, network protocols, more ETL than you can shake a stick at, and devising novel algorithms.

I am productive in every commercial programming language I've tried. In the last 5 years I've done commercial projects in (at least):

Typescript/Javascript (React Native, browser, and Node.js), Ruby, Java, C#, and Python. Last year, I completed 23 days of Advent of Code in Rust.

I'm friendly and easy-going. I can talk to customers and other stakeholders, and help work out what we should be building, as well as building it. I enjoy working with other developers and helping the team learn. I'm happiest on fixed-term projects that I can complete on a schedule that suits both of us, and my clients have been very happy with this process too.

My website is https://www.lambdacambridge.com

Email: robin [at] the website above
Yeah it is not like 'you are the only(/de facto) choice now, so now you are illegal!'; you also need to abuse this position to get this kind of attention.
Keep in mind that any negative effects, even those unlikely to be caused by the medication, need to be reported as adverse effects. It allows for making a clean comparison between the placebo, and also makes it possible to retroactively relate effects that have been overlooked previously. For example, you want 'patient was hit by a car' as possible side effect, because the medication could make people drowsy.
A lot of reporters don't get final say on the headlines for their articles. That could be the case here.
Working for FAANG simply isn't sustainable. First of all, it's very difficult to get a job there as an engineer. And even if you did, most people don't last very long: I think the average is like 2 years. And, even if you somehow manage to stay longer than 2 years, you're going to keep getting abused with high pressure work environment: I've heard several first hand accounts of this. and you can find evidence of the same, all over glass door if you read the reviews.
Yeah only remote right now. Normally I’m open to relocate, but I recently had to renew a lease that’s not breakable.

I’m in central FL and I’ve been generally disappointed in this state from a job market perspective. Most of the recruiters I’ve spoken to are recruiting for roles within the state, regardless if they’re fully remote or not.
It clearly states that clinical use should be carefully considered, so don't worry they're aware of its side-effects.
The Need for High-Res Content Is Driving File Size Growth
There's an interesting way you can implement TOTP that avoids the phishing problem described in the article. The method doesn't work for all situations, but it works for many -- it works particularly well if all you're trying to do is protect access to a mobile app.

At my company we have a mobile app and we use TOTP for MFA. But instead of requiring a separate app like Google Authenticator to generate and type in 6 digit codes, we store the TOTP secret and generate the 6 digit codes all internally. In other words, we bundle the functionality of Google Authenticator directly into our own app.

From the user's perspective, it's wonderfully simple: the user scans a QR code on our website and they're instantly enrolled in MFA. Then for all subsequent logins, they just type in their username and password -- the 6 digit TOTP code generation is handled silently in the background.

With this approach you get all the benefits of TOTP-based MFA, but without the phishing risk. For all the mobile apps out there that offer TOTP as a form of MFA, I'm surprised how many of them require you to use a separate authenticator app.
Mandatory reminder that hexagons are the bestagons.

https://m.youtube.com/watch?v=thOifuHs6eY
> Were we not excited here yesterday on HN, that Cloudflare is cloning and undercutting AWS S3?

I think there's a bit of a difference there.

1) There's an important difference between winner-take-all (or most) markets with very strong network effects and other markets. If most people use S3 and I use R2, it doesn't really damage my experience using R2.

Let's say that Facebook was cloning features, but all platforms could interact with standard, open APIs (like the S3 API basically is). Then we wouldn't care about Facebook copying. In a Fediverse-like world, we don't care about someone cloning the features of a competitor because their cloning doesn't stifle competition.

2) I think there's a difference between a new company challenging the 10,000lb gorilla and the 10,000lb gorilla crushing a new company. Cloudflare isn't tiny, but they're definitely tiny compared to AWS. When Facebook talks about cloning the features of a tiny competitor, it comes off as the giant trillion-dollar company trying to crush any tiny competitor that might serve customers better.

With Cloudflare's R2, we see a smaller company cloning something which adds competition and puts pressure on the larger competitors to treat their customers better. Maybe AWS won't respond, but at least we can use R2 when we want to. Maybe AWS will respond with free bandwidth. Even better!

When Facebook does this, it feels very different - especially given the antipathy that many people feel toward Facebook and its policies/behaviors. Let's say that NewSocial comes up with something that seems to be resonating with customers. They only have a million users right now, but people like the feature(s) and they like that NewSocial doesn't seem to have the baggage/policies/behaviors that people don't like about Facebook. Consumers might be getting a better option that treats them better...and Facebook wants to clone the features to blunt their growth and prevent that new option from getting the critical mass to be sustainable so it dies out.

Note: I'm not passing judgement on Facebook's policies/behaviors. I am simply noting that there does seem to be some antipathy in the public toward Facebook.

I don't think that people are against cloning features. I think that people are against large companies cloning features in an attempt to stifle competition and prevent consumer choice. When Cloudflare clones S3, it benefits us as consumers and as internet users. We see that R2 could allow new startups to offer cool things to us that might not be affordable given Amazon's bandwidth pricing. When we look at Facebook cloning features from tiny startups, we see our world being locked into the Facebook ecosystem while the company tries to destroy any competition that might offer us something better.
Everyone commenting that this isn’t wrong/illegal/bad. But it sure is a sign that an organization no longer believes they can sufficiently innovate. Is this inevitable?
Dynamic/static typing came in/out of fashion several times already. Any trend is temporary; neither kind of type system is a help or impediment in collaboration.
Most antitrust rules are in place to protect the consumer, not the competitor. You might be thinking of patents with the USPTO.
Ganglands Season 2: Is Netflix Planning to Renew the French Series?
Do you need me to hold your hand when we cross the street?
If you truly could get 3x as much done, why not just go out and do it on your own? (Because all the stuff you don’t like actually has value, and you need someone to do it!)
Here is a fairly deep dive into the case by a lawyer on youtube.

https://www.youtube.com/watch?v=B7d2KoXmPXk
Nano/Raiblocks has been around for years, the original developer was also one of the first to work on Bitcoin, apparently, and the network has been live for some years and successfully transacting.

I don’t think it’s a matter of the technology being unproven or unreliable. There was recently a 22 million dollar transaction that was both feeless and recorded to the network in <5 seconds.

It seems obvious though that to adopt the protocol means sacrificing a plutocratic winner-take-all mining regime and everyone in the crypto space wants to be that winner.

Why go through the trouble of developing a photonic mining system if there’s already a viable alternative to PoW/PoS in the real world being used? Why all these outlandish schemes to “green” PoW networks (that never come to fruition) when there’s a viable technology transacting at a literal 6 millionth of the cost of a single btc transaction?

At a certain point, you begin to see that a large part of this space is not committed to the aims they espouse but to a kind of delirious financial brinksmanship that yields little in the way of progress but makes small numbers of people very wealthy.
For the best.

Just today we have (another) situation - user added a card that works for apple pay to google pay, but google pay not only didn't add it but suspended the account entirely. They rely on google pay for google fi, so are now likely to lose their phone number.

https://www.reddit.com/r/googlepay/comments/pmyog8/what_can_...

Customer support is no help (of course).

If Amazon did this it would be a different story, but google just takes craps on the users on their way to the bank - I can't imagine them having enough customer service focus to manage a bank type offering!
I use Nim, C, Python/Cython, Shell, etc., etc. After a short while Nim felt to be the fastest/most fluid development time frame of the whole bunch - while also having a strong static typing style..I find it a very "get to the point" programming language/style.

Sure, sure. Nothing is perfect. It could use stronger REPLs, one has to workaround compiler limitations occasionally, and I seem to be the only one telling people to use the TinyC/tcc backend as a default in their $HOME/.config/nim/nim.cfg or $HOME/.config/nim/config.nims for sub-second compile-times (part of "fluid"). It is very good as-is and deserves more attention than it gets.
Now do the petrodollar.
AIM Encryption Certificates
uBlock Orgin
I'd settle for a decent means of rewarding the good ones. There are plenty of great journalists who have paid a hefty price for doing their jobs properly. If there was a way to balance the social cost of being a real journalist by rewarding journalists when they do good work, that would go a long way to getting us the kind of journalism we would all like to see.
Personally I don’t see a scenario for myself, but I can imagine that there are some where this might be useful.
But isn’t there a extremely high risk of data loss an inconsistency when adding an extra layer on top of OS file system handling?
I was using very basic factors - temperature and humidity primarily. I never ran into that issue, but I could certainly see it being a challenge.

Out of curiosity, what have you been using buoy data for?
British baron, industrialist and prominent banker Josiah Stamp... https://en.m.wikipedia.org/wiki/Josiah_Stamp,_1st_Baron_Stam...

A quote attributed to Stamp is:

"Banking was conceived in iniquity and was born in sin. The bankers own the earth. Take it away from them, but leave them the power to create money, and with the flick of the pen they will create enough deposits to buy it back again. However, take away from them the power to create money and all the great fortunes like mine will disappear and they ought to disappear, for this would be a happier and better world to live in. But, if you wish to remain the slaves of bankers and pay the cost of your own slavery, let them continue to create money."
Paywalls die in sunlight: https://archive.is/NXlnH

> “I lost a couple of people that I had been very good to on an interpersonal level because of the Harper’s letter — people who unfollowed me and blocked me with no explanation. They actually know me. That’s crazy,” says Williams, clearly upset by this. “The details of what’s right or wrong don’t matter, it’s that ‘you’re not with us’. I never thought ideas or writing were about signalling allegiance.”
For the non UK people here...

The UK energy market is near collapse because wholesale prices for gas have gone up 10x and retail prices are capped in law. This means many energy suppliers are making massive losses. 80% of energy companies are expected to go bankrupt (ones that did not hedge/insure against this eventuality). When an energy market participant goes bankrupt, their debts get paid by being spread between all other users of the market in a process called 'smearing' - payments must be made in 89 days. When asked to pay the debts of all failed companies you get a cascade failure...

Octopus is one such energy company, and presumably they will use this $600M to pay for their losses and the losses from the smearing process, and avoid bankruptcy, with their reward that they end up with a lot of potential new customers and little established competition.
Ironic opening statement, there.

> No one has to this day "confirmed" that anthropogenic global warming is a "scientific fact".

You talk about "scientific fact" and "proof" like this is mathematics. The best empirical science can do is to gather as much data as possible and arrive at a probability that a conclusion is true given what is known. And what is known is that there is a greater than 99% chance that global warming is anthropogenic:

https://www.reuters.com/article/idUSKCN1QE1ZU
(Actual paper is paywalled and if you cared you'd go find it)

You're right that our instruments and data have only gotten better over the last 70 years, but studies from the 50s conducted by oil companies already suspected that that global warming was happening and experimentally confirmed that CO2 released by fossils fuels were a likely contributing factor:

https://www.slideshare.net/SimoneBoccuccia/cabon-dioxide-ech...

So much for "revisionist history".

But all of that is beside my point about media propaganda, much of which you are simply reciting in your own comment. My point is that the propaganda works, so thank you for taking the time to illustrate that.
So the TOTP seed is deployed to a specific users mobile app?
As I've used slack over the last 5 years I've come to the conclusion that they have a quality problem of some sort. The software just behaves weird, especially in the voice and screen sharing areas.

It seems like their management runs the "quality via escalation" anti-pattern.
Twitter disallows liking, commenting, or retweeting “Misleading” tweets
The verbosity I felt in Frama-C contracts (when I tried back when) e.g. was around C's lack of 'parameter passing intent' specification (Ada has in, out, in out, not just by-value, by-ref, by-constant-ref-but-have-fun-with-the-value. People pass their structures as reference (struct thing *) and you have to ensure everywhere that that pointer isn't null. Same for over/underflow that isn't implicit in C. So lots of things needed to be required/checked explicitly instead of implicitly of with typing in SPARK. Cbmc has a similar thing where it has options to insert check if you ask it, checks that cbmc decides where to put, but are not defined in the language.

As for the rest, I checked again some recent Frama-C examples after your reply and verbosity is on par (similar quantifiers, loop invariants, etc.) and I don't see 'extremely verbose' in neither. Mostly I was focused on implicit versus explicit (in a 'boilerplate' sense).

As for the decline of Ada I see different things in my industry and a language and environment that keeps evolving and getting into more industries and making strides in very interesting domains. The DOD isn't the most interesting indicator of the liveness of a language, and I'm not sure what Ariane 5 brings here, except that when you reuse a binary component in a different setting without integration testing you get wild French fireworks?

As for the 'can't program a basic list in rust' I can only say that 99.9% of the time we're not rewriting a basic data structure, we reuse one from some standard library or a trusted component library, and I may have seen maybe one bug in those in my 15y or sw engineering, and countless ones in app or business logic, or serialization/deserialisation code... So yeah, if rust, spark or other hard ass static analysis tools makers are reading this, please keep making proof & verification tech modular. The more the tech advances the more spark we can have proved automatically without proof chops, the safer the world will be. But let me opt in the very hard stuff, please... Let me put the effort where it counts.
This paragraph seems to concisely summarize what NYT got wrong in their analysis:

> Age is a common confounder in public health research, and COVID-19 is no exception. The mortality burden of COVID-19 is not randomly distributed across age groups. Indeed, age appears to be the “strongest predictor of mortality” from COVID-19, with one’s risk of death increasing exponentially with age. According to CDC figures, the oldest populations experience a rate of death 570 times higher than that of the youngest populations. This is precisely why older populations were vaccinated first; we knew that prioritizing this population would have the most dramatic effect in curtailing hospitalizations and deaths. Yet the crude county-level analysis reported in The New York Times failed to adjust or account for age at all.
That’s great! Most banks do not have that because it might be toll-free for you, it definitely isn’t free for them.
Well, without fear you can't bring in a global carbon market that benefits corporations while cutting off spending to individuals that have hit their 'carbon limit.'

See Duconomy...

https://www.fastcompany.com/90396592/this-credit-card-cuts-y...
Ah that makes more sense given the rules you're implementing. Agree friction is a good way to solve these kinds of issues.