skysight-inc/HackerNews huggingface dataset:
The goal of estimating is to know how long it will take to complete a given task. A successful estimating methodology ought to provide this. I am not convinced the method you outline does provide this.

First, I would be interested to see any data you have supporting the idea that “humans are much better at estimating relative effort than average time”. My own experience is humans have biases toward optimism or pessimism and are poor estimators of the magnitude of risk, but I’ll ignore that for the moment and accept the premise as true.

The other underlying premise of your method is that velocity is a random variable about this perfect prediction with a known distribution, such that via the law of large numbers, over a large number of sprints, the average velocity can be known with high accuracy. I see a few issues with this.

One issue is that velocity is not static. Velocity changes with team morale and how interesting or motivating the task is. It changes with how well engineers are suited to a task. It changes with organizational changes, the addition of new team members, the loss of old ones, the work environment, etc. I don’t buy that these are small factors that average out over the long run, either, since my experience leads me to believe they don’t. A poor work environment or coworkers leaving the team or low morale usually are harbingers of bad things to come, and, opposite, a growing team working usually has exciting challenges, morale is usually high, etc. My experience hasn’t shown a mixed bag of equal good and bad, but instead two divergent sets.

Even if velocity were static, the other issue is the distribution is unknown. Sometimes teams have bad weeks, and sometimes they have good ones. Sometimes something catastrophic happens in the organization and a dozen engineers are twiddling their thumbs or are thrown into some task they did not foresee. Sometimes things go unexpectedly well. A priori, there’s no way of knowing what a particular team tends to, or if that trend will continue. One could try to measure it, but my experience has been that something that was supposed to be static will change long before a sufficient amount of data could be collected to be meaningful.

Even if you knew the exact distribution you’d encounter, the final problem that remains is that projects aren’t infinitely long. There aren’t a million sprints to smooth things out. There will be variation in the outcome.

I guess what I’m saying is, estimates are estimates. Why systematize their creation when they will ultimately be wrong, and creating them is so costly? I could understand having a system if it were low-overhead, but my experience with a system similar to what you’re describing was anything but that.
> you'll often encounter restaurants only providing menus via QR code.

What??

> increasingly common outright refusal to accept cash

Well, those two things alone are excellent reasons for me to avoid going there.
FWIW, There is a Bing app for Android. I trust a .APK install/uninstall more than a .DEB or .MSI install/uninstall, thanks to the security sandbox.
Yeah pilots can totally be wrong. I was once an engineer in flight test, and pilots are your endusers and can speculate all sorts of weird stuff. They are not engineers. That said, in this particular case, the fact that the pilots admitted to joking around / pranks in the past adds credibility. If they were dishonest, they would have tried to conceal this in their past.
2.4 trillion of spending over 10 years with 740 billion of taxes annually.
I've thought that it's just escapist fantasy before, and in fact there was a period of a few years where I firmly told myself "I don't actually want to make games anymore, I will never do it" but I keep coming back to the idea.

The truth is that making games is what I want to do, but I don't want to sacrifice to do it. The industry is notoriously brutal to get into and have a career progression in, so I avoided it after university.

So really the only way I would make games is either solo or on an indie team, but those paths are similarly brutal.

So it remains a dream. But maybe if I weren't so tired all the time, working a bit in my evenings and weekends wouldn't feel like such a sacrifice.
Ok, Google. I'll bite.

So you send me an email today titled "[Update] Google passkey support will replace your built-in security key starting May 3, 2023". It was in my spam folder, but I digress.

This "update" kindly informs me that "Passkey support will be integrated because they're easier to use" [sic], that it's safer than most other forms of 2-SV, that this new method will work on any devices that have registered passkeys, which includes all phones on which I'm signed in, that I'll be able to sign in to my Google account with just a passkey, that no action is required from me to do this, and that you're here to help.

Yes, Google, I'd like some help. For starters, I'd like to know:

- What do you mean by "built-in security key"? Built-in suggests hardware, so my phone presumably has a hardware security chip and now passkey is a new type of hardware chip for authentication?

- What's 2-SV? Two Sievert? Dos El Salvador? Double Support Vector? Second Silicon Valley?

- What the heck is a passkey?

Luckily, you provide a link to your HC article [1], which I click on. It's titled "Sign in with a passkey instead of a password". It helpfully informs me that with a passkey, I can sign in to my Google account with my fingerprint/face scan/device screen lock like a PIN. There's a bunch of other valuable information in that article, like how it won't work in Firefox, won't work in incognito mode, that Bluetooth must be enabled, and that anyone who manages to unlock my device gets full access to my account. Needless to say, sounds totally awesome, I'm sold!!1

What the heck is a passkey?

Is it like the thing that sometimes uses my Android phone as a 2FA device to sign into Google properties, just... somehow different? What's the difference, except that I now need to enable Bluetooth and can't use it in Firefox? How is it more secure than [something I know + something I own] if it removes [something I know] from the equation and only leaves me with one of the two factors? How is it more secure than Dos El Salvador?

Who the heck wrote this email?

[1] https://support.google.com/accounts/answer/13548313
...if it's not on Strava...
Pretty much all governance is nominal. VCs and team members typically own the majority of the tokens and just swing all decisions their way.
There is no framework. Just simple JS calls and bindings to HTML with somebody defining REST or GraphQL backend. And some eye candy CSS. The point is that with ES7+ JS can be finally readable and not a spaghetti code monster so anyone can easily understand and extend any code.
I've been a UFO enthusiast since I was a kid, always excited to hear about the real, hidden truth which is surely just around the corner, about to be revealed. (I like the slightly sinister sense of mystery, I think). But I have to admit, it is suspicious that given the super high res. cameras we all carry around, every UFO video we see these days is just a few blurry pixels.
Fixing something too complex by adding additional complexity? :)
Are there any "prodigies" in philosophy?

Music and chess (the examples the author gives) along with math, are special cases where there is obviously some shortcut most of us don't possess that makes some people naturally really good. And critically, they're all completely objective.

Pretty much everything else, especially philosophy is wildly subjective anyway, so it's not like a kid could just step up and drop a philosophy bomb the way a piano prodigy could demonstrate their skill. And it's got all sorts of complex dependencies, like reading a lot of stuff. There are also no biblical scholar prodigies.
Google pretend-playing "building a more private web" again.

Blocking third party cookies is great, but with these "Third-Party Sets", self-appointed gatekeeper Judge Google (Judge Dread) takes requests from website owners for lists of domains they control to be partially exempted from these third party cookie restrictions.

Instead of making third-party cookies obsolete as is one of the exclaimed goals of the broader initiative, they turned it into an insidious and opaque tool that lets them increase their insight, influence, and control over the web and all its users even further.

This is bad for both advertisers and their prey alike.

Addendum:
Getting rid of third-party cookies whilst not breaking Single Sign-On and similar such features could also have been achieved with a user-controlled local browser setting and a new type of permission request popup.

The need for Google to be in control of this is non-existent and the people working there are more than smart enough to understand this. They are playing us all here.
To expand on this, since it sounds kind of flippant:

In the US at the moment, public transit suffers from the fact that in most areas, for most people it's largely optional: you can drive, or you can use public transit. Quite a few people choose to drive, leading to a disproportionate fraction of the people on public transit being people who have no other option, and furthermore the fraction of outright deranged individuals (leaving all their clothes on the platform save for a baseball cap and a syringe tucked behind their ear, for an example I witnessed a few days ago) being over-represented in the public transit riding populace.

Overcoming this stigma is important for getting people to use public transit as their primary means of transportation, and working towards making truly car-optional cities.
Kantubek
> Required inputs

> Since we introduced Angular in 2016 it has not been possible to get a compile-time error if you don’t specify a value for a specific input. The change adds zero overhead at runtime since the Angular compiler performs the check at build time. Developers kept asking for this feature over the years and we got a strong indication that this will be very handy!

> In v16 now you can mark an input as required

Amazing to finally see this land, awesome release
It's not a problem of "life", "rights", "representation". These ontic objects are deeply flawed, as can be seen in the present state of the political. Even taking it in ridicule: what is one to do, fight for the right to representation of every paramecium and amoeba?

It's more about seating the political in a realm of the inconsolable (fundamentally every political decision is the bad one), uprooting the current games of bad faith and energy poverty which have constituted the political since the first gathering of hominids. The inconsolable, which at the limit is death itself (of a self, of a society, of a territory, of a universe), is binded to an ever greater cone of care, at the same time bringing closer the post-human and the post-human increasing the cone of care. The lesser-known, brilliant nonetheless, thinker Vladimir Jankélévitch [1] has some more thoughts along these lines in 1971, L 'Imprescriptible and 1974, L'Irréversible et la nostalgie.

[1] https://en.wikipedia.org/wiki/Vladimir_Jank%C3%A9l%C3%A9vitc...
I do think it's odd that the FTC is going so heavy on one company. Shouldn't we have laws that apply broadly to the industry? It's not as if Meta is the only social media company anymore (is it even the most popular?)

> Pause on the launch of new products, services: The company would be prohibited from releasing new or modified products, services, or features without written confirmation from the assessor that its privacy program is in full compliance with the order’s requirements and presents no material gaps or weaknesses.

Do we really want the government to have to approve every new product a privacy company releases? That seems quite extreme and typically only applies to very specific industries with broad safety concerns (like medical care).
yeah sure. I just need a cost center and program code to charge my time to...
> Except… you can just use a YubiKey. It’s closer to saying “install Firefox” than “install a different OS”.

No, you're literally recommending I use a separate physical device because there is no API to achieve the same functionality that the OS provides via their bundled implementation.

> Sure, fine. This is like V1 of every provider’s implementation. None of this was even available three months ago, I have no doubt these things are coming.

On iOS, Passkeys have been available for more than half a year now. I really hope that Apple will eventually follow suit.
There are already reasonable ways to proactively or unproactively copy session-cookies from one domain to another one that shares a backend. What does this solve except saving a roundtrip when you visit google.co.kr?
There's a bit more info in this forum thread: https://intofpv.com/t-orqa-goggles-bootloader-bricking-issue...
If I was an alien spaceship I'd try to stay just outside the current identification range on purpose.
> What it should not allow is for joe-random-domain.com to declare that the DoubleClick ad endpoints are first-party to them.

But it lets Google declare that doubleclick is part of them.
Perhaps it also includes (quasi) dead code that is not used anymore because regulations changed, and code for one-off analyses and experimentation?
Perhaps their plan was to, once successful, create a Minitel AppStore and allow smaller developers ...
/s, perhaps? It seems like that argument could have been used 10 years ago (and yet here we are), or 20 years ago (similar), or 30 years ...
They are the same, but Firefox on my iPad syncs with my real firefox on: linux, windows and android. I can send tabs to and from it, sync passwords etc. What rendering engine is used is completely irrelevant to me most of the time.
Also another GPU driver attack vector.
OpenJDK, that's what.
My mind is blown but I'm also wondering if this isn't some kind of incredible over-engineering? Surely CPUs are fast enough to emulate these kind of devices in software. If they aren't, they must be an order of magnitude simpler in complexity.

I wouldn't ordinarily care about emulators, but actual hardware emulators is the craziest thing I've heard in a while. All that for a small handheld console?

If only I was not so broke...
5). 404s. Other systems went for total consistency. Good luck with that!
Kind of concerning that "hey that's pretty neat" comments are immediately suspected (probably accurately) of being bots. A comment like that example isn't useful to the other comment readers, but it's probably pretty motivating to the author, and it makes forums more positive places. Removing the organic versions of those will make forums a more negative place, and that's a shame.
Wearing an eye mask during sleep improves episodic learning and alertness
We had MAX on the macs at the computer art lab at San Jose State. We mainly used it to control peripherals in art installations and projects. It was such a cool program but too expensive, protected and obscure to be cracked. Sort of the anti-photoshop of it's day and my personal example of how to not market software.
This: https://sneak.berlin/20201112/your-computer-isnt-yours/
I don't think I would agree broadly with the person you are responding to (riding the coattails of covid is a phrase that paints a picture), but this narrow point has merit due to the way herd immunity works. It is genuinely a matter of community health.

No idea what to do about it given all the absolutely unhinged perspectives on the topic, but still, I care.
Wait you said Fedora. Replace .DEB with .RPM, obviously.
A tool to help me get a mental model of it's doings would reduce complexity where it matters the most: inside the developer's brain, ha.
Voyager as Technosignature
Is the free media securities fraud? Is free speech securities fraud? Is sharing an opinion about a company securities fraud?
basically every restaurant in Sydney right now
DailyMail? Why are these low-effort articles posted on hacker news?

Also,

> Instead of taking you to an online menu or checkout, the links instantly download malware onto your device, stealing your location and personal information

How is that supposed to work? Specifically on iOS?
> And it's got all sorts of complex dependencies, like reading a lot of stuff. There are also no biblical scholar prodigies.

There are cases of people who among other things can read and almost perfectly remember comparatively massive amounts of text at a young age. Someone like that could qualify if they picked such a direction to focus on?
Given how big telecoms usually behave, I really don't think so. Remember the fight for usable mobile internet... Ever tried WAP and developing on it?

They set the whole thing up to control it and charge extraorbitant fees for it both to the user and to anyone publishing on it. Minitel as well as WAP. Apple's 30% is peanuts compared to the fees I'm talking about - I mean contracts with minimums in millions.

Good thing Apple kicked their sand castle down. People don't give them enough credit for that.
Rx can be awesome for some complex problems. But I’m angular it’s everywhere and often makes things much more complex than they have to be.
such as what?
I’ve lived through half a dozen of these hype cycles, all lasting 3-4 years before they go bust.

I tried 3D printing. The results were subpar and the utility wasn’t much beyond a toy or a hammer.

I tried VR/AR. VR just made me nauseous. AR was a cool tech demo that I would never use because I’m actually trying to reduce my screen time, not increase it.

Tried web3.0. Got scammed.

Currently trying AI. This somehow feels like the real deal. I’m at least using it every day, even maxing out my GPT-4 limits.
The question of "where is the line" presumes there even is a line between matter ("objects") that expresses or does not express consciousness, which is also a big and unsubstantiated claim that requires proving. Occam's razor (i.e., our standard scientific apparatus of null vs alternative hypotheses) would seem to indicate it is appropriate to assume there is no difference in kind, only difference in degree, until there is evidence to prove otherwise.
At least one thing you said is a bit bizarre:

> there are days when they make so much energy they have to export it

"Oh no! Our power generation is making so much energy that we have to sell even more of it and make even more money! What a disaster!"

You do get that power companies want to make money, right?
If this is something users actually care about, wouldn't Vulkan AI be a big deal? It has way more features for AI than WebGPU will likely ever have, and it's widely available today.
Inflection AI, Startup from Ex-DeepMind Leaders, Launches Pi- a Chattier Chatbot
I'm not sure how it's all that different from Windows Hello.

> Passkeys are easy to set up and let you securely sign in to your Google Account using your fingerprint, face, screen lock, or hardware security key. You can create a passkey on this device, or use another device.

When I press [Continue], Windows Security appears where I can then scan my fingerprint which I already use to sign on.

A single glide of my finger worked as expected and a 'Passkey created' screen appeared with [Done] being my only option to continue.

After a sign out, re-enter of my gmail and these are the next few steps: https://imgur.com/a/heLrUkb

It seems like it just integrates the built-in verification methods depending on what device you are on.
Pedantry around the meaning of words with common stems is against the code of conduct. In other words, do Conduits not conduct water?
It's only profitable if you have enough to invest to meet the entry costs in that market. Which is where the regulatory capture is causing trouble by raising entry costs. But that only means you need more or bigger initial investors, not that they don't make money by investing.

> We've always known that a big guy can come into a small guys party and squish them all. That's why microsoft wasn't allowed to push their browser (OS = big guy, browser market = small guys party).

That was an antitrust issue for an entirely different reason. The browser market had the potential to disrupt Microsoft's control over the OS market, because web pages are platform-independent. That gives Microsoft the incentive to dominate the browser market by operating at a loss in order to make sure that web pages are tied to Microsoft Windows by using platform-specific ActiveX controls or web extensions specific to Microsoft's browser.

The web reducing dependence on Windows is largely what happened in the intervening years outside of some specific app markets like gaming (where Microsoft has held on through similar dirty tricks with respect to DirectX and other APIs, and is finally starting to lose their grip).
This is maybe an oversimplification, but the token that your phone gives your laptop includes "only valid for good.example". Your browser on your laptop then knows not to send it to evil.example.
next major release is after 6 months, so still in 2023
> - does Linux works well (e.g. no intel 12th gen integrated graphic tearing problems or similar), sleep power saving not being grate doesn't matter

Probably not. AMD laptops have struggled in the past. Even Intel Alder Lake works better with 6.2, but I still have issues where it does not resume properly months after release, which was months after Intel released Alder Lake mobile. When I lift the laptop lid, it stays suspended for a few minutes until it wakes up or I need to close the lid and reopen it. Had similar resume and suspend issues with my Skylake System76 Lemur. Feels like it takes years for Intel to resolve issues with their laptops on Linux.

Works better than it used to. Better than when GNOME Settings would crash the system to freeze-haven't had that issue in over a month.
I haven't used it, but there's at least one active Angular meta framework: https://analogjs.org
> By default apache should not be running as root.

Everywhere I've run apache, it runs the control process as root, and the serving processes as (nobody|www|something); that way it can open new sockets when reloading the config, if required, before forking new serving processes. There's ways you can avoid a root control process, but that's going to be the default, as it's the easiest way to achieve the results people usually want.
T-Mobile discloses its second data breach so far this year
But are they good because of Unity or despite Unity?
Chinese e-commerce giant behind Temu moves HQ from Shanghai to Ireland
Fun fact'! 30-year fixed rate mortgages is a uniquely American thing. Most other countries are adjustable rate mortgages, even for boring primary residential loans.
Im ashamed to admit this but I’ve spent a notable percentage of my time in therapy discussing angular and recovering from PTSD.
As a long-time fan of Indian music, I'm so happy to see how the world is catching on to the depth and value of classical Indian musical traditions, and how Indians are making their voices heard worldwide. Just a 5 years ago I don't think you would have found a discussion between trained musicians in Hindustani and Carnatic on a tech-focused news aggregator. Rock on... or raag on, and thanks for the recommendations. M.S. Gopalkrishnan was certainly amazing.
Getting downvoted over this is funny, next year one dude will say "i predicted it" and he'll get upvoted :)

Anyways, attach your seatbelt, turbulence ahead!
When updates or apps go wrong on Windows, you sometimes need to use Powershell. Sometimes it's easier to use Powershell for admin tasks to avoid janky settings menus. What's the difference?
the common argument I heard from the anti-vaxxers was that the mRNA COVID vaccine was obviously bad/fake/contrived because it required a booster and "no other vaccine requires a booster!" And if you mention tetanus, hepatitis or meningococcal, or other vaccines that required a booster/multiple shots then you just get ignored. Ignorant gonna ignorant.
Javascript and the browser use the response headers. The example they gave is overriding CORS. Let say you're running code locally and using remote APIs. Now you can override CORS to allow your local code to still call the APIs.