peoplewindow

I was wondering how far down I'd have to scroll to find the first sensible comment. Congrats.

The internal logic of these claims is non-existent. During the actual campaign Hillary and her supporters were convinced Russia (the generic bogeyman of the western establishment everywhere) was shilling for Trump. After all Trump was a lot more friendly and Hillary was stating that she'd shoot Russian planes out of the sky over Syria, so such a motive would have at least made sense.

Now that whole narrative fell apart entirely. We have the head of famously anti-gay and conservative Russia posting LGBT memes and supporting Hillary, despite the risk of war between Russia and America should she have won.

Yet, the desire to believe is so strong, that like all conspiracy theories it's simply morphed into whatever the smallest step to fitting with new information is, that preserves the core. Now it's all a genius plan to "sow division" by posting pictures of fox statues made of shotgun cartridges. Quite why Russia specifically benefits from generalised "division" or why US culture needed help being divided is left unexplained.

This is exactly the behaviour you'd expect to see if people with strong motivations were looking at noise. Leading us to your last question:

how much confidence do we have these are Russian state sponsored ad?

We only appear to have Facebook's word for it. But you have to watch out. One of the subtle ways this conspiracy theory tends to morph and warp is the distinction between the Russian government and Russians. Even in the headline of this thread, note that it's "Russians" and not "the Russian government".

There are liberal Russians. There are conservative Russians. There are 144 million Russians, a little under half the population of the USA itself. If even 0.1% of them decided they cared about the globally-famous US election, and if Facebook had simply selected "ads paid for by Russians", then this is exactly what you would see - a mishmash of stuff with no unifying theme or agenda.

Or Facebook could have just made a mistake. The government asked them to find evidence of Russian interference, and let's face it, going back with "there's nothing there you are all delusional" is not a good political strategy. I'm sure they felt they had to find something.

Because the actions that would be obvious outcomes of the identified problems are pointless to suggest, they will never happen.

For example, a key issue identified in this discussion is the perceived career risk of being friends with women at work. Stories have been shared about harmless comments that came back to bite innocent men years later, or being described as creepy, and of course, we've all seen the string of high profile men losing their jobs based on mere tweets.

An obvious action that could address this is for women to stop collectively insisting that they never lie and that they should be able to shoot down the career of any man based on nothing more than a complaint to HR. But there is no sign this will happen, why would people give up such power.

Kotlin has null, but also nullability in the type system. They kept it in for interop purposes. Also, optionality is very common, so having it integrated into the language makes it more convenient and efficient.

It's not a theory, it's a description of my observations.

I've presented my sources. Why not go find counter-examples? I bet you'll find it's harder than you expect. But OK, I'll make my case more strongly.

Here's a simple exercise. Pick a buzzword, say blockchain, search for "women in X" and let's look at some of the top results.

https://www.womenontheblock.io/ - check out the speakers. The first is a PhD student in cryptography, not a bad start. But then there's a co-founder, another co-founder, another founder (of "Investing in Women" i.e. an activist), a lawyer, an actual software engineer! Sort of - in 2011 she was an intern, she spent two years doing support tickets and is now a PM, but hey, that's at least something. Then we're back to a lobbyist, another founder (of a foundation), another lawyer, "Chief Discovery Officer" whatever that is, lawyer, digital content lead, shareholder (?), co-founder, business development executive, CFO, lawyer, CTO of the World Bank Group whose background is actually management consulting and "thought leadership", sales, "human capital officer" etc etc.

You get the picture. I just worked down the list and of all the people listed, only two appeared to do anything actually related to writing software: a cryptography student and someone who spent a couple of years as a support engineer but then quickly moved into product management.

Notice the pre-ponderance of women calling themselves founders and co-founders. That's very common. They are not what HN readers would recognise as a startup founder. Often they've founded entities that don't do anything, or are just organising more "women in X" meetups, or in the rare case where they're making software, have partnered with men / outsourcing shops to do so.

Here's another example: https://www.blockchainbeach.com/live-2018-women-in-blockchai...

Look at the agenda. It starts with a basic intro to blockchain, ok, slightly technical but nothing you can't find on YouTube. But then we're right into a discussion of "her time in the middle east and dispelling misconceptions about women in that region" i.e. about general women's issues, not tech. Then a panel whose first listed topic is "social impact" and one of the members is a musician (at least two of the women do appear to be at least somewhat technical). Then a marketing pitch for some random alt-coin whose relevance appears to be mostly that the marketing person for NEM is a woman. Then a keynote on "diversity in blockchain" - women's issues/feminism again. Then a panel on "women empowerment and inclusion". Useful observations like "42% of all the women in the world do not have a bank account" (men's problems of course don't count). And so on.

Really, if you have never investigated these events before - don't bother. They are mostly just non-technical feminists complaining about men, engaging in outrageous sexism and generally making the whole feminist cause look bad.

That attitude doesn't help the cause of women in tech. It makes things worse.

Machines don't have empathy. They do not care about feelings. Code is harsh. So are professional code reviewers. Therefore if you're a programmer, you will in fact spend a lot of time dealing with nitpicking issues, finding sources for claims you make, debating alternative theories and so on.

If women can't even do that in debates they start then they should give up in being programmers. They won't make it and they won't get along with their colleagues.

I don't think they are incapable of such things, as I always get the impression posts like this one ("why can't you just respect her opinion") are actually written by men. But her compiler won't give her opinions automatic respect. Why should anyone else?

"Women in tech" events are a good example of how women exclude themselves. A typical event has the following attributes:

- Men strongly discouraged or banned from participating.

- Many of the attendees are "women in tech" but not "technical women", it's common to see women who describe themselves as co-founders, activists, HR staff and so on but relatively rare to find someone who actually spends all day banging out code.

- As a consequence of the above most of the talk at these events revolves around gender politics, not tech.

Source: girlfriend has learned to code and attended one or two meetup events advertised as being for women in tech, also from reading agendas or blog posts about such events.

Meanwhile the men are creating inclusive events that focus on knowledge sharing about hard tech topics. They use what they learn to build new things, they scope out each others talent and form professional relationships that can be used to build companies. True geek girls go to these events and are in the minority. The rest self-select out and create the exclusion they then blame men for. I have no sympathy.

You're assuming CS class performance correlates with ability.

Most of the people on my CS course hadn't programmed before, and they mostly all passed. But many of them couldn't code at graduation and went into non-programming jobs.

They passed anyway because the university carefully rigged the course to ensure it was possible to get good grades despite being unable to write any sort of non-trivial program. After all what are they going to do, constantly fail 90% of their class and attract questions about their own competence as teachers?

Because the idea that gender disparities are due to the choices men and women make is some sort of ideologically impure heretical thought, for some reason. If it's not to do with oppression/awful men then where's the fun? Where's the virtue in fighting for it?

Maths is clearly warmer. Go look at the stats for undergrad vs postgrad. There's a huge difference. Women get maths degrees to become teachers, more or less.

GOSPLAN didn't fail because of lack of MapReduce. I don't think you could make a planned economy even with all the big data tools that exist today. There's far too much important information affecting prices that isn't represented in any database.

Maybe not, but it worked out pretty well for him.

I realise we're not meant to meta-discuss here, but that post you're replying to was flagged and dead, and I vouched for it.

For what it's worth, I agree that the post was ridiculous - Musk's behaviour is dumb and with every week that goes by I expect reality to catch up with him more and more. But I don't think the HN community should be flagging and killing posts for being naive and un-business-like. I struggle to identify what rule was broken there, and (supposedly) west coast "money is free" bias is not a good reason to suppress someone's post from being visible.

No, SubstrateVM and Graal are both open source.

The enhanced versions compile to faster code, pretty much. You can do without them if you don't want to pay.

That implies the balances are being represented as floats and turned directly into strings ... how does something that basic happen at all? Is Sabadell's Spanish web UI like that too? No wonder they're screwed

Who is suggesting that will happen?

I suspect you aren't quite sure about what "support" means here. It doesn't mean your app suddenly stops working one day. For most apps it'll make no difference in fact.

There are several points in this post but the bulk of it is, I feel, one of those classic fallacies that journalists or security hobbyists often engage in:

"I found what looks like a flaw in a system but I didn't try to exploit it for real, look how clever I am"

So his mate registered a company with the same name as another company and got an EV cert. Well done. Everyone knew that was possible already, at least everyone who has gone through the process. It doesn't matter much:

1. Ian wasn't actually a phisher or criminal. If he had been, and had used that EV cert to phish Stripe customers, he'd have been reported to the police using the details from the CA and possibly prosecuted. Bear in mind he had to register a company in the USA, not Kazakhstan.

2. Therefore in reality it is very rare for phishers to use EV SSL certificates. Actually I've never seen it.

So is this a demo that the system is horribly flawed? I don't think so. It's rather similar to people who send 10 spams to some accounts they just registered themselves and claim they've found a way to beat a spam filter so the whole thing is useless ... well, no, you weren't actually a spammer so the filter did the right thing. You're testing a flaw you think sounds realistic but isn't. Another common case of this, someone who beats a DRM system on a game 6 months after it was released and then talks about how useless copy protection is, not realising that after 6 months almost all sales happened already so the system worked just fine from the developers perspective.

What about revocation? Is the CA exercising undue control here? Probably not. CAs have language in the contracts you agree to at the time about how you're not trying to misrepresent yourself as if you were someone else. Ian's argument that he registered a name that happens to be identical to a well known payment processor, but in another state, is technically correct, which is of course the best kind of correct. But the underlying purpose was clearly impersonation, which is a violation of the agreements and thus not only grounds for revocation, but to not do so would rather undermine the whole system - why should Ian get away with it when others do not?

If stripe.ian.sh had been an actual operating company that happened to have experienced an unfortunate naming conflict with the other Stripe, I bet the CAs would not have revoked. They'd have found some reasonable solution - probably by letting the cert continue, on the grounds that no malicious behaviour was taking place in violation of the agreements. But it wasn't - it was just a dummy site.

Overall I don't understand Scott or Ian's point. Yes, legal names aren't globally unique. Did anyone think they were? Yes, Chrome's EV UI is rubbish and the big players other than Apple tend to have an institutional dislike of EV certs because of historical clumsy attempts at market segmentation pricing by CAs, that were totally unreasonable for companies with lots of servers. Yes, EV is imperfect.

The alternative though is paypal-customer-centerr.com ... which is better, how, exactly? It isn't.

If Scott Helme or Ian Carroll don't like how EV works today, why not go find actual criminal abusers and propose specific improvements that would stop them - perhaps making Chrome's address bar work more like Safari's. Otherwise this is just another blog pointing out security stuff that doesn't really matter.

And OpenBSD has large numbers of skilled VM engineers sitting around doing nothing?

OpenJDK is Oracle. They're the same people. If Oracle stop releasing bug fixes to the open source project OpenBSD isn't going to step up and suddenly start doing backports all themselves.

How is selling security fixes unprecedented? That's basically the entire Red Hat business model in the early years - yes the fixes are "free" if you want to spend all your time downloading and recompiling software, or you can buy RHEL and get a steady stream of backported fixes to your server for years. But it'll cost you.

As far as I can tell, the reason Oracle is the sole maintainer of Java is mainly historical (Sun legacy) and because no one felt an urge to do anything about it before. I'm sure it's going to change now.

Why? Neither Google nor IBM particularly require Java bug fixes from Oracle. Google maintains an in-house OpenJDK already and IBM actually maintains an entirely separate JVM. Also Google is hardly famous for its long term commitment to stable APIs and old versions of software, quite the opposite.

It doesn't make much sense for a company to pay for the expensive work of finding, fixing and backporting bug fixes to years old software .... all for free.

developers, pay us or we will direct your players' complaints to you

How is that even remotely unreasonable though?

The game example is poor for a different reason; Oracle don't seem to care about desktop apps anymore and they want you to bundle the JVM with your app anyway. Hence new tools like jlink and javapackager.

There is no sign reflection is going to be removed. That wouldn't be possible anyway. The "denial" of use of internal APIs can be disabled with a command line switch.

The point of the new warnings is to try and start slowly weaning the Java ecosystem off the use of internal APIs, something to which it has become quite accustomed.

The only other companies that have been proposed all make money by charging for support.

And since when is charging money for work done 'greedy'?

Well, the intervention is to change the pensions, surely. And the goal is to intervene before a collapse occurs rather than afterwards.

If the argument is "we don't need to change the university pension scheme because when they go bankrupt the government will bail them out", I suppose that should be made directly.

Haidt is a psychologist whose research and advocacy has in recent years moved towards political bias in universities, in particular he talks a lot about student and faculty driven morality-based censorship.

He started the "Heterodox Academy" which argues for and promotes ideological diversity (i.e. both left and right) in universities.

That makes it sound like it's all the students fault.

I studied CS at a top tier UK university (not Oxbridge but a tier below). The course was a mess. The professors were useless, often didn't understand their own subjects, marking was random and arbitrary, most of them quite obviously saw teaching as a chore to be disposed of as quickly as possible and many failed hard at even basic principles of teaching, like "if you set coursework, students should all have the same amount of time to complete it in".

There was no effective way for students to complain or get anything fixed. The department ran a student/professor relationships council or something which was a joke, the students on it had volunteered mostly to suck up to the staff and didn't have any idea how bad the teaching was or how hard they were getting stiffed.

If universities were _actually_ real businesses I'd have been furious and demanded my money back, but they aren't so what can you do? I just tell people not to go to university at all these days.

Er is it a questionable scenario? UK universities all have very similar businesses, customer bases, staff unionisation levels and risk profiles. It's quite imaginable that if there was a sudden drop in the number of students attending university they might all get in dire straits simultaneously.

You make it sound like a zero sum game. If academics are being hired into industry, that frees up grant money to be spent on other areas where they aren't recruiting so aggressively. It doesn't actually 'deplete' academia except in the short run, unless the supply of students who want to do research becomes fully tapped out.

Also, people who are trained already can always go into academia or return to Europe. These movements aren't permanent by nature.

European countries and companies are less likely to go big or go home in my experience. The USA has the expression, "bet the farm" and American leaders like to use it frequently. I can't think of any European equivalent saying off the top of my head. That results in bigger bets, bigger payouts when they succeed, more capital to invest in even bigger bets, etc.

The UK case of DeepMind is a good example. A big bet by British standards - lots of money raised and spent on pure research with no business model to drive it. By British standards that's incredibly brave and/or reckless. Yet a successful gamble, sold for half a billion dollars. But, sold to an American company literally called Alpha bet.

That's absolutely true but if you read between the lines it's possible that's not what he means. Lots of people in Europe use the word "Europe" when they actually mean "EU". This is such a common verbal tic it largely passes unnoticed.

The systems groups you name are mostly in the UK (soon to be ex-EU) or Switzerland (not EU, doesn't want to join). Only Linz is in an EU country with no signs of that changing.

Substituting Europe for EU and the original statement might well be correct from a purely geopolitical perspective (obviously tons of research is done in the USA by people from Europe so we're only discussing geography here and not ethnicity).

Is that really true? Everyone in science speaks English and DeepMind, based in the UK, is in fact one of the world's top AI research hubs. Their papers are consistently excellent and of course DeepMind's workforce comes from around the world.

That's the European AI hub, right there.

The issue here isn't the language barrier. The issue is one that goes largely unstated in the ELLIS letter (it's a call for action, not really a plan). Which is this ... remind me what's wrong with working with the Americans again?

DeepMind was founded by a Brit - the guy who once worked on Theme Park and other much loved British games. He built up an absolutely top class research team out of nowhere, based purely on VC funding, then sold to Google not only because of money but because Google also built a world class AI research team out in California, and it made sense to join forces so they could work together on things like TPUs.

And why shouldn't the European AI hub have joined forces with the US AI hub? What benefit could there be from preserving institutional and funding barriers between Google and DeepMind? The letter sort of dances around the edges of this question, but ultimately the answer is purely politics.

It says things like

"This weakens Europe"

and

"we want the best basic research to be performed in Europe, to enable Europe to shape how machine learning and modern AI change the world"

and

"many European companies whose future business crucially depends on AI are not perceived as competitive"

These are all political goals, worse, they are not logical thinking at all - not a good look for a bunch of scientists.

AI research is entirely open. Having a new academic research hub in the EU-that-isn't-the-UK won't change the access those European countries have to the underlying research papers or techniques. They can use AI just the same regardless of where the research is being done. Maybe China would try to close up their researchers, but America and the UK certainly won't.

So if European companies are "perceived as uncompetitive" or are not "shaping the world" due to their poor use of AI (this is a dubious theory to begin with) then the solution is for more European companies to download TensorFlow and Torch and get cracking. It isn't for money to be poured into academics who will take it, write a few papers and then go straight into industry anyway.

Linux became popular because it was free as in beer, because it was essentially a clone of pre-existing systems that lots of programmers happened to like (the commercial UNIXes) and because those competing systems were fairly stagnant.

So far open source communities haven't really tried to clone Facebook to the level of detail required to make people feel at home, and you're already competing against 'free'. So that avenue isn't available either.

I suspect it isn't possible to compete with Facebook because for most people it isn't broken.