skysight-inc/HackerNews huggingface dataset:
If Papa John's could get sued over this (it's just a pizza place...) then I have no idea how Hotjar hasn't been sued into oblivion, especially considering their analytics tools don't responsibly tell the users they're being recorded.

Edit: or rather any website that uses Hotjar without informing their users clearly (basically all of them) ...
>...you want one that isn't too local...

What's the problem with local credit unions?
Could be more different. In less tech-focused communities, the migration that follows a forum closure goes to Facebook groups instead of subreddits, and Slack channels instead of Discord.
One of the aspects not touched on for this is PII/confidential data/HIPAA data, etc.

For that, whether it makes sense or not, a lot of universities are moving to AWS, and the infrastructure cost of AWS for what would be a pretty modest server are still considerably less than the cost of complying with the policies and regulations involved in that.

Recently at my institution I asked about housing it on premise, and the answer was that IT supports AWS, and if I wanted to do something else, supporting that - as well as the responsibility for a breach - would rest entirely on my shoulders. Not doing that.
No, those are definitely bugs. The program was obviously not intented to allow forged transactions, just like so many I/O layers were not intended to incorrectly accept malformed malicious input.

Even actual human laws have bugs and exploitable vulnerabilities. We simply call them loopholes instead. There's even a very lucrative market for them, dominated by professionals like lawyers and accountants.
Nothing prevents you from "going Bayesian" in figuring out how compatible a hypothesis is with reality. Bayesians have no issues with probabilities representing frequencies even though frequentists cannot understand probabilities representing uncertainty.
I have a feeling IBM doesn't even know what they want to be themselves, let alone their acquisitions.

What they do now is dabble in a bit of consultancy, a bit of datacenter ops, a bit of software and some servers here and there. And of course all the support on their legacy mainframe stuff. But when they have something that really stands out like the Thinkpad line they divest it.

It's almost as if they don't want to be noticed or something. I don't know.

I never thought their RedHat acquisition was a good thing for RedHat, though I never thought RedHat was a very good company to begin with. When Microsoft acquires Ubuntu (and I'm surprised this hasn't happened yet) they have more good stuff to mess up. Which I'm sure they will. And it seems like Canonical in anticipation of the acquisition has already started going the wrong way themselves.
users that don’t understand those things are doomed to make the wrong trust choices. vpns are decidedly not more trusted. differently trusted, sure.
Most of us here are fortunate enough to not be seriously impacted except for specific high-cost items like vehicles or housing, but even there the poor are disproportionately affected in terms of the percentage of their monthly budget lost to inflation on non-discretionary spending.

While it may not seem like much, $1000 is absolutely a lot to those struggling the most right now. Those who are seeing their rent increase, the cost of food further limiting their already meager choices, and for whom buying even a used car is now out of reach.

You don't have to agree with the premise, scope or cost/benefit of this plan but this is the rationale that I see behind it.
I’m not sure “can be” is a violation of wiretapping law is it?
> When U.S. consumers have their online bank accounts hijacked and plundered by hackers, U.S. financial institutions are legally obligated to reverse any unauthorized transactions as long as the victim reports the fraud in a timely manner. But new data released this week suggests that for some of the nation’s largest banks, reimbursing account takeover victims has become more the exception than the rule.

I always knew that some of the pro arguments for centralized systems were suspect, but it's good to have some evidence for it now.

Now I wonder how many other cases that are touted as arguments for centralized systems don't hold up to any scrutiny.
Ask HN: How to figure out why free users don't convert?
I have a SAAS app that has a steady stream of new sign-ups for a free trial, and (in my obviously biased opinion as the creator) many more features than competing apps.

Despite this it very low conversion rates, and many of the people who do end up paying seem to drop off after a while. Clearly there is an issue, but no one uses the feedback options I provide in the app either, so it's hard to know what to do.

How would you go about investigating this and finding ways to improve conversion rates?
I imagine the mechanics of wear are very similar between a washer and a dryer. If temperature was the main contributing factor then ironed and dry-cleaned clothes such as uniforms would deteriorate much quicker than machine washed/dried ones.
I've been learning to take "real" photos with a Sony A6400 over the past few months, with a couple of Sigma prime lenses. I've been super super happy with the photos I've managed to get out of it and definitely recommend a similar setup!
That is not a law.
It feels like everyone keeps repeating the same dialog tree that 'but thou must store their contacts list' and I don't see why.

Solution? Store your contacts list on your device. Back it up with your offline chat backups (android does external chat backups now, IOS should be enabled plus give em icloud backups to boot).

with a new signal app on a new phone, you restore your chat backups and poof your contacts list gets loaded back. your new signal instance reconnects with the other clients and poof, Signal's excuse for using phone numbers and storing your contacts list on their servers is demolished.

It seems so simple to me, but I feel like I'm failing to understand something about why this is so hard.
This was pretty much my take too until I played with GPT 3. I suspect that you're still basically right, but the code it was writing, whilst a bit quirky and sometimes full of errors, showed a simulacra of creativity. I use this term as I know it's an illusion, it is what you suggest, but it's amazing to me that this trick can be pulled off. I got the program to write some fairly esoteric functional programming code. I then pasted some of my own code and got a convincing "explanation". If nothing else, if GPT 3 can simulate understanding in some narrow cases through what is essentially a giant search engine trained on a gazillion data points, then it's a good trick.

It's quite possible that this avenue doesn't scale to anything more broadly useful. We shouldn't mistake solving 20% of a problem to being on the right path. Maybe this remains as auto-complete on steroids and it's a dead end. I was honestly just surprised by GPT 3's apparent abilities, smoke and mirrors though they may be!
Guess-and-check is not brute forcing. I addressed this in another part of this thread.
No, you have to trust anyone with access to the server; secure enclave provides no security given it appears it is vulnerable to side channel attacks; see comment you just replied to for related link.

Basically all it does is given Signal plausible deniability for public search warrants:

https://signal.org/bigbrother/

It would do nothing to stop national security letters. Basically, you should assume the functionality provided by the secure enclave is only in name; given the NSA ATT national security letters enabled both physical access and system modifications, see no reason to believe others would not be required to do so as well:

https://en.m.wikipedia.org/wiki/Room_641A

Again, average person does not have a threat model that makes this relevant, but to say Signal does not have access to the SGX data is purely based on trust, not mathematical proofs.
Rumors said putin's regime would warn 1 final time with the use of a tactical nuke over the sea.

Need a way out of this escalating conflict. With the disinformation, ppl are killing each other over there for ???
Limited support hours, lack of access when out of town, having to depend on ATM networks which can change (I guess these also apply to local banks too and not just credit unions)
Iomart DC4 Leicester is actually at: Berkley St, Leicester LE1 4AT
Biggest issue is accessing your account if you move; I've never really had any other issue come up.
I can relate to these problems. Cloud brings positive accountability that is difficult to justify onprem. I have some hope that higher level tools for project/data/experiment management (as opposed to a bash prompt and a path) will bring some accountability without stifling flexibility.
"xNix", really? I thought we'd settled on using Unix as a generic name for all Unix-like operating systems.
I had a local credit union - dropped them after it took multiple weeks to ship out a replacement debit card
> Find a decent bank with 2FA. None of the big banks are decent, they have minimum balances, piles of fees.

Can you clarify this. Are big banks not secure enough or are they not decent because of the minimum balance and "piles of fees"? I would rather pay something for security.
Eh,

It is usable with an IDE. Also it forces OO and interfaces down your throat, which is important when picking up other languages.

The other languages you'd choose to learn in the "Java" slot are:

- C++. I like new programmers too much to suggest this. Even if they know C.

- golang - Not a bad choice, but forced OO is a good thing to learn.

- C# - I haven't done enough of it, but it felt like Java on the CLR to me. Maybe with some warts moved around.

- Common Lisp: Too obscure, too alien to read.

- rust - No... just no. Too early.

- ML, Haskell and friends - Yes, I love you all. But... Understanding a simple type systems is important before taking on Hindley-Milner type system language.

So I'm kinda stuck with Java. It sucks the least. :)
This. If my lab-level server failed tomorrow, I'd be annoyed, order another one, and start the simulations again.
That's wrong, the CSA allows for the executive to temporarily change schedules and only for a matter of safety. The spirit of that part of the law is actually adding more substances and not removing substances that are on the law.
Tesla Android Project – Install Android on Your Tesla
The likes of Facebook would litigate this issue. Papa John's will write a check and move on... like most of us would actually, despite how wrong these drive-by bottom-feeding lawyer hit squads are.

No case law will be created here. It's very unlikely this suit will actually see the inside of a court room. Just a smash-and-grab payout and they'll move onto some other fish small enough to desire writing a check versus litigating.

It's the ADA website thing all over again...
I'll usually do a dollar a drink for good coffee shops (similar to how I would tip a bartender at a typical, not-high-end bar). 10% maybe if there is counter service that involves some food prep

One of the most unnerving aspects of this situation is how the POSs can be tweaked to nudge people's behavior with inappropriate shame. As I mentioned in the first comment, one more reason to lean back to cash.
What evidence is there that Facebook violated the same specific laws mentioned in the lawsuit?
For any of the types of people who are against taxes and regulation, that type of policy results in a world where outcomes of disputes are able to be dictated solely on the basis of who has more power or resources.

I'd rather live in a world where banks are solely responsible for fraudulent withdrawals than one where banks can shirk responsibility to their patrons. That is only possible through regulation.

That's why it's important to vote for people who aren't afraid to create regulations, and that's why it's important to question people who claim that "the free market will eventually result in reasonable outcomes."
It lets you create languages like Pie which is designed to teach others about dependent types:

https://thelittletyper.com/
I definitely get the point. I often have the urge to use destructuring for saving space, but want to kick myself when revisiting the code a month or two later. I like your rules, thanks for sharing.
Don't you still leave jail with new debts because they charge you for your stay?
This doesn't involve a phone number, and I haven't enabled 2FA either. This is a security check that's activated under some combination of unfamiliar location, WiFi network, or device. It requires you to confirm your identity by using the app.

If you delve though GMail's settings, under "Sign-in and recovery":

Trusted mobile devices
Google can verify that it's you by sending sign-in notifications to a private
phone or tablet. You can remove it in your recently used devices.

There's no way to turn it off as far as I can see. You can remove a device from the authorised list, but that's not very helpful if you don't realise that it's been added.

It's idiotic. It's essentially: "confirm that you're allowed to access your email by confirming that you already have access to your email".
The world’s largest offshore wind farm is going to get even larger
I worked on a slide deck we were proposing SD Cards & Thumb drives preloaded with Kiwix and an almost full almost localized version of Khanh Academy (KA Lite at the time) which could be mass distributed in active conflict zones where the schools and education were some of the first casualties. I don't think it ever went too far which was a shame compared to how other monies were spent at the time these could have really made a difference.
Jesus you're right... I'm such an idiot.
I would love to see it stamped out in the US but I'm not sure what it would take to create the necessary change in culture
Source code - https://github.com/tesla-android

Video guide - https://tesla-android.gapinski.eu/youtube
> static site builds in both Next.js and Gatsby can’t make use of server-side rendering functionality.

Which is why they're called static builds?

Next.js supports ISR, which is a great way to hydrate pages without causing too much overhead.
Ex business partner of woman who infiltrated Mar-A-Lago shot at Esterel resort
Would you be so kind as to mention the issues in the talk page of said article?
Google's Imagen was trained on about as many images as a 6 year old would have seen over their lifetime at 24fps and a whole lot more text. It can draw a lot better and probably has a better visual vocabulary but is also way outclassed in many ways.

Paucity of the stimulus is a real problem and may mean our starting point architecture from genetics has a lot of learning built in than just a bunch of uninitialized weights randomly connected. A newborn animal can often get up and walk right away in many species.

https://www.youtube.com/watch?v=oTNA8vFUMEc

Humans have a giant head at birth and muscles too weak, but can swim around like little seals pretty quickly after birth.
Learnings as a Tech Lead
Sharing what I’ve learned in the past 1.5 years as a TL
Correct but you've gotten off the subway at chud station and the MBAs are going to be seething
Wikipedia is the closest thing the west has to Regime media. It’s usually correct about factual matters, but has high levels of embedded bias towards establishment ideas.
And many, many institutions are over cautious. My own university, for example, has no data classification between "It would be totally okay if anyone in the university has access" and "Regulated data", so "I mean, it's health information, and it's governed by our data use agreement with the provider..." gets it kicked to the same level as full-fat HIPAA data.
Notes was always pretty horrible, slow and buggy. It was right handy to make little databases in it, which wormed their way into business critical processes and became dependencies long after their developer left the company. I think this is what kept Notes going, because there was no migration path for all this legacy stuff. We spent years moving away from notes, rebuilding each little 'handy Joe's database' that was caught somewhere in a critical business process manually in modern technologies. And this was after we already discarded the 90% that weren't important.

I'm pretty sure that if not for this we would have moved away in the early 2000s. Instead we waited until the situation became so untenable that we had no choice to invest the millions and years to make it happen. I remember Notes constantly crashing when someone would send me a 'funny' GIF on Sametime, and of course it would take all my draft emails with it because the autosave never seemed to do what it was supposed to.

The only thing I did like about it was collapsible sections in emails. And the fact that you could write really advanced 'agents' for it. I had one that would remove the "return read receipt" flag and insert a button in the email so I could send it whenever I did wish to send it instead.

Anyway, when IBM took over Lotus we were still full-on using it and I was really hoping they'd clean up the product and make it functional. Of course none of that happened and they just let it continue on its path to extinction. I have no idea why they would buy something way after its prime and then just let it wither away.

Oh yeah and the notes mail databases. When there was a new version we'd get tons of questions like "why does my mail still look like the old app but notes itself is new??". Well, click on the upgrade your database. Ooops now it got corrupted completely well good luck bye :D

Seriously why did the email UI look and behaviour have to be embedded inside each user's mail database??? This makes totally no sense and breaks pretty much every software design concept. As well as create tons of vulnerabilities for malware to embed itself. Data and code don't belong in the same place. Though luckily Notes got deprecated before that really became a thing.
These MPI-based scientific computing applications make up a bulk of the compute hours on hpc clusters, but there is a crazy long tail of scientists who have workloads that can’t (or shouldn’t) run on their personal computers. The other option is HPC. This sucks for a ton of reasons, but I think the biggest one is that it’s more or less impossible to set up a persistent service of any kind. So no databases; if you want spark, be ready to spin it up from nothing every day (also no HDFS unless you spin that up in your SLURM job too). This makes getting work done harder but it also means that it makes integrating existing work so much harder because everyone’s workflow involves reinventing everything, and everyone does it in subtly incompatible ways; there are no natural (common) abstraction layers because there are no services.
You're not making a distinction, you're classifying it incorrectly. Containing a messaging component does not make it a messenger.

It's a social network, it clearly believes that the connections between people is the most important part of its offering. It can migrate a user and their connections.

Again, I would enjoy it if it did take posts, too, but clearly they disagree. I'm not going to say that they cannot claim it to be a migration as a result of that.
Over on /r/sysadmin there was a discussion this morning about email systems for dementia patients. How do you provide for someone that is forgetting that they are forgetting?

Pretty much EVERYONE will have cognitive decline in their twilight years. It would be nice if we could have communication systems that are compatible with basic human biology.
Lots of UI frameworks by various companies - I keep track of the big ones here: https://gist.github.com/manigandham/34154e63dc3c1b8747fab40d...
I'm an avid Go user with zero interest in generics. I figured I'd learn then when I had to, i.e. when a dependency breaks and I need to go debug it and it uses generics.

I still haven't learned generics.
> Can you initiate a message?

Yes. There is a little write icon on the top-right of my iOS screen. Click that and paste in the number.
This might sound facetious, but my biggest regret is spending time regretting things.

I was socially awkward and tried to overcome it: had fun, had panic attacks, learned some tricks, but still just as socially awkward. Many other flaws of mine I’ve tried to overcome similarly and not really got anywhere. I just don’t care about them now and want to be unapologetically ME as I exist. This attitude has ended up paying dividends. No one cares if I’m awkward, or kinda mental or any of my other flaws. People actually seem to enjoy me… ?

Now at 29 I can look back at my teens-20s and how things could have gone differently, but there’s no point. Me then could never have been like me now and I couldn’t have convinced myself to, even with a time machine.

It’s like I’ve reached a point of “sour grapes” but without any cope. My life, successes, flaws and mistakes just… are… and I have to accept it. I’m done trying to go against my nature to transform to some state I’ll never reach, for god knows who.

I’ll continue to learn from my missteps. I’ll continue to try new things and get into and out of trouble for the frisk. I’ll continue awkwardly trying to elevate the people around me and keep them in good spirits.

But I’m done feeling inadequate for my flaws or wasting time trying to fight my nature.

Oh, I wish I started endurance running earlier but again, there was a reason I didn’t and I do now, so fuck it.
I think a reasonable strategy would be to pick a target less able to defend itself, in order to more easily win and set a precedent to prepare for a second attack against a bigger target.
> How would this be any different if I were to design my site to use a websocket and stream mouse events and keystrokes to figure out if you are clicking a button, versus using a javascript event handler or something?

It shouldn't matter the collection method. The point is that you'd be collecting these keystroke and mouse events as they happen in an environment that I, the user, may believe they are not leaving my system.

> The very same non-technical folks that you allege are misled here also have no clue how buttons work on a site either... it's all magic to those folks. Are we not supposed to do any logging now?

That's a fair point. Some users will have no idea at all what data they're sending to the likes of Facebook, for example; it's just a magic box that shows them photos of their grandkids. The test here is given the average person's understanding of the products they are using, is it reasonable to assume the data being generated is not leaving your local system? I think even the average user would assume mouse movements are not being sent away to reconstruct their session on a website down to that level of granularity. You may disagree but that's the tricky issue here: where does the line of an expectation of privacy get drawn? From a technical point of view, I'd argue it's at the separation of client-side and server-side interactions where anything not needed for the functioning of the product on the client-side remains client-side. Hence, something like my mouse movements on a run of the mill website for analytics is across that line but something like mouse movements in a multiplayer video game is not.

> Your TV tracks what shows you watch, what buttons you press, how often you skip commercials, etc.Your smart fridge tracks how often you use the ice feature, your car tracks how often you drive aggressively, etc.

The point is where does this data get sent to? Admittedly I don't know exactly what data my car collects on my driving habits, but I'm pretty sure it doesn't leave the car in that it doesn't have an Onstar-like system installed in it.

If this data is used to essentially be an observer sitting over my shoulder without telling me when I don't have a reasonable expectation that it's happening then, yes, that's a violation of an expectation of privacy. The fact that all of this is legal really demonstrates how far behind laws are to the issue of data collection around usage of services and products.
Live Commodore Amiga DJ Stream from the UK