skysight-inc/HackerNews huggingface dataset:
OpenSecrets, besides tracking contributions it has a bunch of other info like the revolving door section. https://www.opensecrets.org/revolving/
related from 22 days ago "Ask HN: What are your favorite RSS feeds?" https://news.ycombinator.com/item?id=36617799
the story of the sun being a chariot driven by a god (i.e. a humanoid) must have been a story which encoded useful information, perhaps things like "every morning, get up and do your job" and "here's what happens when you show fiery temperment", etc.

you can't convincingly tell the scientific story of the advantages of adaptive evolution without realizing that stories told over and over again must have been adaptions, they're too much of a waste otherwise. We like listening to stories. Why? you said it best.

>it surely must be truth
My girlfriend is Canadian, and an AMGA Rock Guide (American Mountain Guide Association: the US certifying body). She would like to be able to work for gyms and guiding companies in the US. What's the best way to make that happen? (short of marriage... fool me once!)

Should we hire an immigration attorney?

Do you know if it would be easier for her to get permission to work in Europe?
Similarly my social group has recently become more concerned with hate speech and foreign influence on elections too.

The story’s walls are closing in on cracking down on cryptographic guarantees of privacy, network access, and information sharing.
> This makes it sound like the adult pains of holding friendships alive as you grow older.

Bring back the pop-in!
What I mentioned applies to safeguards against de-anonymization in the event of public access. Ie: a published research paper or professional notes left behind on a bus.
A common complaint with Threads was that, no after who you blocked or muted, it's near impossible to get away from a feed filled with influencers and common celebrity gossip nonsense. That seems to be part of the ongoing design intent - not just an aspect of how they wanted to bootstrap the service.
I will be downvoted but the obvious truth is that Japan has way less Moroccans and Algerians.
I also completely lost the plot here...

AFAICT, the thread went something like this:

The top-level concern is something like this: professors use their trusted relationship to schools in order to make bank on expert witness fees, which feels a bit corrupt and calls into question the researcher's motives.

A rebuttal to this concern is that we can side-step that issue entirely because these data sets should be public anyways (anonymized, of course!). This obviates the above concern, since the researchers won't need to compromise themselves in order to get exclusive access to data that allows them to be expert witnesses and rake in $$$$.

But the problem with that proposal is re-identification: if we can't make the data anonymous, then we all agree that it shouldn't be released (implicit in the "anonymized, of course!" caveat to "just release all the data" proposal).

Then you pointed out that even for more important data like healthcare data, FDA apparently has ways of allowing release of data that takes into account the risk of re-identification risk (I didn't know this; thanks for sharing!)

Then dragonwriter and you got deep into the weeds on HIPPA stuff.

TBH I have no idea which of you is most correct here. But anyways, there are two ways for this conversation to go:

1. You are correct, good enough anonymization is possible: Stanford researchers should not be silenced; it is problematic that they have access to data other people cannot access, but the correct solution is to negate the originally problematic distinction between those researchers and the general public by making data public. Then there is no reason for the researchers to agree to these contract clauses, because they will have access to the data.

2. dragonwriter is correct, good enough anonymization is not possible: We can go back up to the top-level concern and observe that "just release all the data with anonymization" isn't a feasible solution to this problem. Or maybe there isn't actually a problem here at all. IDK. But in any case, "obviate the problem in the top-level post by releasing anonymized data" isn't a workable solution.

Again, not following closely enough to have an opinion, but that's where we are now.

I think a good compromise position is that we should have a law stating that K12 data should be available to certain education researchers -- subject to IRB approval and so on -- without any other strings attached. Including "don't sue me" clauses in releases of public data sets does feel like an inappropriate abuse of student privacy concerns.
haha I have been maximizing the annoyance level of my parents and others by telling my kids these things:

- don’t focus on GPA, focus on actually gaining knowledge and understanding how the world works. good grades are a measure of how you understand things. they should never be the goal. I was a C student and I am more curious about things than many of my peers with fancy degrees.

- forge your own path, there is always a thousand different paths out there. College is just one.

- no replacement for hard work. don’t expect anything in life. anything worth getting, you’ll have to compete with many others to get it so learn to be a good competitor.

- college should be approached with all the tradeoffs and as any other investment. We’ve told them we will not pay for their college. so they will have to make choices about getting the best bang for your buck. We’re the only parents in our whole social circle that aren’t saving for their college. it feels weird and isolating when that topic comes up.

- first think about the kind of life you want and then make choices to get you that life.

they’re already sick if my lectures. and they’re 10 and 5. :-)
I think many foreigners don't try to fit into the aloof European culture where you act like a mildly sociopathic hipster.

I'm not saying that "all of Europe" is like that, but definitely the major cities of many Western European countries.

That said, we have SV / Seattle, so I guess we have our own hipster sociopaths in the USA.
To elaborate on your point:

Static type systems in programming languages are designed to break at compilation-time. The reason this works is because all users are within the same “program unit”, on the same version.

In other words, static typing allows more validation to be automated, and removes the need for multiple simultaneous versions, but assumes that the developer has access and ability to change all other users at the same “time” of their own change.

I find this whole topic fascinating. It seems like programmers are limited to an implicit understanding of these differences but it’s never formalized (or even properly conceptualized). Thus, our intuition often fails with complex systems (eg multiple simultaneous versions, etc). Case in point: even mighty Google distinguished engineers made this “billion-dollar mistake” with required fields, even though they had near-perfect up-front knowledge of their planned use-cases.
If the idea is to make "World ID" universal, in that everyone is going to have one, what does attesting that someone has one means? Nothing. Virtually nothing. Everyone either has one or can get one, to attest that they do means nothing of value.
You seem to have missed the point of Agile.

But then, that's normal.
The distributed part shifts the problem from "find types that represent your solution" to "find a system of types that enable evolution of your solution over time." I think this is why bad things like json or xml do so well: they work fine with a client dev saying, "I need this extra data" and the server dev adding it, and then the client dev consuming it.

The more modern approaches, like protobuf or capn proto are designed with the experience of mutating protocols over time.

It works pretty well too unless the new field changes the semantics of old field values, e.g. adding a field "payment_is_reversal_if_set" to a payment info type, which would change the meaning of the signs of the amounts. In that case, you have to reason more explicitly about when to roll out the protocol readers and when to roll out the protocol writers. Or version it, etc.
> The internet is private enough that you feel comfortable commenting fighting words from behind a keyboard.

With respect, nothing said by maxbond in this thread is what I would consider to be fighting words. If someone was talking face-to-face to me and dismissed human rights violations in Saudi Arabia by saying "f** around and find out", I'd feel extremely comfortable saying to them, "if that's your view of human rights we might not be able to see eye to eye."

Privacy violations in the US itself leading to human rights violations and attacks from the government are common. Since you are a privacy researcher, you should be aware of this stuff already. I don't want to insult you by suggesting you're not. However, if I assume you are aware of how online tracking has been used in the US proper to target marginalized groups, prosecute cross-state abortions, and dox and harass activists -- then the only conclusion I can draw is that you're aware of it and don't think it changes anything about your position.

In which case, if that's your view of human rights we might not ever be able to see eye to eye on this.
I wonder if this doesn't have a lot to do with cars.

In surrendering utterly to the preeminence of streets, we have essentially taken our open, free world and overlain it with an immense grid of electric fences -- thick lines all over the map that, if children wander across them, might easily lead to their deaths.

So "hold hands everywhere" and "don't let your children run free outside" become the norms. The only safe place is locked inside or behind fences; the wider world is a death trap for children.

Play inherently requires a degree of freedom, but children have none. We are just prison guards eternally transferring them from one captivity to another.
is it better than something like shadowsocks?
I typically go to archive.today[0] for paywalled articles. It does some voodoo behind the scenes to show you the unpaywalled article. Also it helps if you browse with a VPN and rotate to different IPs all the time so you don't max out the amount you can read with a singular IP.

[0] https://archive.ph/
Threads will be alright in the end.

They launched it at a very opportune time when Twitter was having massive technical issues.

That was enough to get millions of people to kick the tires and more importantly, create awareness.

The next time Twitter goes down, and it will any day now, people will again flock to Threads and notice that it got a little better. Twitter will get fixed again, and a lower percentage of Threads users go back again.

And repeat.
A few days ago they introduced a 'following' feed. They seem pretty intent on iterating quickly on it.

And even without that, the influencers mostly went away for me when I followed people I found more interesting.
I came here to post exactly this. It is appalling that we live in a neighborhood where everyone can walk, there are plenty of kids that my son knows within a mile, he's 14 and more than old enough to be out on his own, but every one of his friends is in a math class, or French school, or out of town on vacation, constantly. He goes to the park and there is no one there. So he stays home and watches anime. The only way we can get him out is to call other parents and schedule something.

There is something deeply wrong here. I blame other parents who overschedule their kids.
The "optimization" really is around signifying class. How much can you afford the exotic activities, how good is your network to get that unpaid internship or that volunteer opportunity, and of course you can't be in a financial situation where your child has to do menial work like retail.

There was a discussion here a while back with a college admissions person where they confirmed that volunteer work is a bonus where actual work is not. It's not explicitly stated, but anyone who comes from a family where they _have_ to work is at a disadvantage.
> The irreversibility of crypto transactions means that you have to have some trust that the person you're dealing with will be willing to make things right when erroneous transactions happen.

The cypherpunk answer to this dilemma is that revertability of transactions under some circumstances is a service that, if it is desired (for quite some applications of cryptocurrencies, it is), should be build in a layer above the "bare-metal" blockchain.
I started getting a PhD in device fingerprinting and quit when it became apparent that my views were relatively far removed from most people in the field.

I’m trying to say that the current privacy situation is good enough. The status quo can’t be abused such that money can be made.
I'm not sure what deliverables you're referring to, but if it's not useful for shielding one's identity from prosecutors/persecutors, why would spies, grifters, traffickers, terrorists, child abusers, and puppy-kickers make such extensive use of it?
The same is becoming true of Twitter, can't remember the last time I saw an embedded tweet.
Not for Samsung. Or Google.

Apple's damages expert got paid $2 million.
That's my read/thought too. The generator is lost, and distributions will probably be carrying an analogue forward -- for benefit of third party relics.

I don't believe it makes much more assumption than... $script {start,stop,restart} as the Exec lines in the unit

The hairy part is how package scriptlets and so on that assume SysV/want old utilities -- eg: chkconfig, service.

systemd captured these, and that may go away too
Everyone knows you need an out of band channel for it, I don't know why you're putting this out there like it's a fault instead of how it's designed. Whether it's RPC where you can deploy your services or a schema registry, that is literally just how it works.

Wrapping a message with its schema version so that you can look up that version is a really sensible way to go. A uuid is way more than what's needed since they could have just used a serial integer but whatever, that's on Kafka for building it that way, not Avro.
Another thing to consider about deanonymization:

HIPAA says that 4 or more digits of a zipcode is PII. The people who protect your healthcare think most of a zipcode is too cardinal to reveal.

How many schools serve more than one zipcode? More than a few?
Tax information is also collected by the government, should that be public? What about publicly funded hospital records?
Android Auto is able to show your current route/map to the car's screen. Android can do that reasonably successfully, so it's worth the price of admission for this reason alone. This said, there are a few usability annoyances and other failures elsewhere in the overall experience. But this particular feature works pretty well.
The average American is not going homeless or hungry.
Avro makes that case slightly better because you can default value for a missing field in one of the two schemas and then it works.

It's not worth the boatload of problems it bring in all other and normal use cases though. Having the default value in the app or specified by the protocol is good enough.
Maybe they're A/B testing it; I don't see any such option.
This is like when people use protobuf to send a list of key-value mappings, and call that a protocol. (I've seen that same design in many protocol description arenas, even SQL database schemas that are just (entityId INT, key CLOB, value BLOB).
The discussion was whether billing over $800/hr was "ridiculous." It's actually common for credentialed professionals who are at the very top of very specific fields.
Then just do it.

The reality is that 18 wheeler s are there for a reason, and probably you should know it before think urban center only needs small trucks.
Or... you know... Newgrounds.com. That's also a "living flash museum" in a way, as it has been around continuously since 1995 and still will show you flash movies from any date.
>unless you enjoy solving captchas as a hobby it is only worth using when you actually need some anonymity.

Use services that respect your freedom. Hacker News works just fine using Tor Browser. ;)
What is all these negative nonsense about "people don't give a shit" on every thread about this. We don't need every single person in the street to give a shit. We only need enough influence within the industry and regulatory to give a shit. And they are. We are all upset by this and upvoting it and companies and organizations are writing about it. Keep that up and push for other companies to reject it or for regulation to stop it.

You know what Google fears most? Being broken down. If they push for this, we can organize calls to our representatives and raise our concerns and call for regulations and/or breakdown of Google's anti competitive behavior.
I'd like to see some semi centralized but social benefit Corp create a Twitter that utilizes the h factor score that scientific researchers have.

ie something like Reddit karma but it's based off how controversial a users posts and comments generally are, how many times posts are reported or flagged, and use ai to do sentiment analysis as well to verify the reports and scores are accurate.

Maybe have the users tweets a shade of blue and the more respected the brighter the blue color.
What exactly do you mean by "facilitating", outside of a person explicitly running an exit node?
Previously: https://news.ycombinator.com/item?id=36906331
Yup, I've seen the effects of this first hand.
Did I?

Where does the manifesto talk about a process of any sort? It’s a set of values. It doesn’t mention anything about iterations, breaking things down, etc
Well, when you force users to login at least 1/month to keep their handle/account, you're 100% going to get an inorganic and non-truthful MAU metric, especially if you define that "A" to be <=20 seconds.
How did you learn those skills? I wouldn't know where to start with such a project.
This isn’t true, you’re conflating risk profiles.

There is active targeted surveillance by a nation state. Tor is not going to help you. No crypto or tech alone will help you, you’ll need to develop extreme opsec practices to stand even a remote chance against a well funded and well equipped adversary focusing on targeting you.

Then there is passive mass surveillance, i.e. the presidential surveillance program, which Tor/VPNs/HTTPS etc will absolutely help with.
- While the K-3 visa technically still exists, in practice it is rarely granted (i.e. on the order of 1 or 2 every year globally) [0]. You can apply for it in addition to the CR-1 visa but in practice, once they approve your I-130 petition the K-3 visa application will be cancelled automatically (and you will move forward with the CR-1 visa application)

- The first step to get a CR-1 visa is to file the I-130 petition, which as per [1] is taking about 12 months on average. Your luck may vary.

There is no magic pathway unfortunately but on the positive side, your spouse will be a permanent resident as soon as they enter the country.

[0] https://travel.state.gov/content/travel/en/legal/visa-law0/v...

[1] https://egov.uscis.gov/processing-times/historic-pt
I have thought a bit on this but I have also been pretty much just been recovering lately. We will probably need to assemble a blog post at some point soonish, but we need to talk to a few people first.
I think it is hard to learn... using the tools people used to learn DNS with.

BIND is great at what it does, but its configuration files suck and its manual is long, terse, and unnecessarily complex sometimes. Dig is powerful, but abbreviates everything like we're on an 80 column terminal. At times Wireshark was a better tool debugging DNS issues than Dig was.

Give someone PowerDNS or another modern DNS server and I think they'll have a much better time configuring a working DNS server. I don't know a good modern DNS client, so I've learned to deal with Dig instead. As a user of the "--color" flag for the `ip` command, I'd love to see tools like dig produce more modern output (I'll alias the command line flags, just add it to the command!)

Seriously, "MSG SIZE rcvd: 71" did not need abbreviation. "flags: qr rd ra" could've been full words as well. I don't know what the semicolons before the lines are supposed to convey but they're only making things confusing.

I find it no wonder people get confused learning DNS with the materials provided to them.
I didn't say that, though.
> It’s becoming increasingly obvious that Twitter isn’t going to be that place with each new chaos monkey attack from Musk

Is this hyperbole? Twitter will be fine, Musk isn't going to train-wreck 10s of billions. Twitter today isn't even that fundamentally different from pre-Musk. The biggest change has been perception from ideological extremes. I'm sure Twitter will evolve but evolution is for growth, not death.

You use Twitter for exposure to writers, wouldn't the proposed lifting of the character limit be a net positive for writers? Wouldn't writers use Twitter more if writing on Twitter was a source of income?
Let me know when you find it…
Are there countries where behavioral public policy has not been led astray?
(I have not read the article)
There is something you can do. Becoming a privacy tool power user helps change the landscape of how people use and interact with tech.

My question reading, assuming it’s main purpose is preventing as blocking, this is whether my pinhole dns blocker would be affected. If the new standard is dns blockers for everyone that’s an improvement in the landscape, at a small cost to the users.

There is little adoption or support of privacy tools when there is no need for it and we trust our systems to be free and open, everyone is a tinfoil hat wearer until they aren’t and the boundaries have shifted. People should generally have better understanding of personal data protections, control over their services and the like but we are lazy until there is no other option but to take back control.
> Andrej Karpathy, another OpenAI employee [...] “My hope going into Oppenheimer was that it would be a kind of true story ‘Avengers of Science,’” he said in a tweet. “It's still a good movie with lots of gems but the focus was elsewhere.”

These are the type of people building and running OpenAI? We're in a fun ride, seems they're more out of touch than I could have imagined.
No one has near-perfect up-front knowledge of a software system designed to change and expand. The solution space is too large and the efficient delivery methods are a search thru this space.
Wow, this is so sad. I grew up in Europe in the 90s with parents who pretty much let me do whatever I wanted as long as I was a well-behaved child/teenager and getting reasonable school grades.

At 6 years old I was literally biking by the river or wandering in the woods with my friends after school for hours on end. Every day was an exciting adventure without any adult supervision, just random groups of 2-10 kids who would gather in the afternoon to play together. The rule was "home by dinner or there won't be any dinner for you". I never did any extracurricular activity, ever.

This did not prevent me from going to a great university in my country, get my master in Computer Engineering, graduating in the top 5% of my class, have a curriculum good enough to legally immigrate to the US, and working at several tech companies including FAANG, making high 6 figures now.

I would never give away those wonderful memories and early life experiences for some random extracurricular activity just to "stand out" later on, I do believe such freedom helped form my character to a much greater extent than any scripted activity would have.