jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
I think his point is that ssh is just opportunistic encryption if you don't compare the fingerprint at the first connection. Anybody could just MitM your first connection to the server without you noticing, and then MitM every future connection as well.

In a sense telnet/ssh is exactly like http/http_with_oe. And still we make a big deal out of the telnet/ssh difference while saying that http with OE is only marginally better than http.

Of course it's not nearly that black and white because ssh stores the fingerprint, meaning you are safe if (and only if) your first connection wasn't intercepted.
I didn't downvote you, but the reason why you were downvoted is as follows:

1. This is an extremely sensational (aka emotional) topic

2. No one here or in the link has the full, true, story, but we definitely have our own opinions on this issue.

You want to have a fair and balanced discussion on this topic? Then go through the entire article and replace the following sensational trigger words with words that carry no emotional response to any one:

woman -> sigma class

discriminate -> operated on by a classifying function

harass -> operated on by a utility decreasing function

retaliate -> operated by a 2nd order markov function

sexism -> subset of classifying functions

By the way, re: "women are buzz kills", the more sensational articles like this we get that go about and draw a huge gulf between men and women - that, in modern social media parlance, seeks to "raise awareness" of the problems in sexism - the more women will become buzz-kills and men will become oppressors.

Is there a sexism in tech? Yes. But it wasn't a problem for any of us until we got "red-pilled" by social media (be it the tumblr SJW or 4chan's /pol/) and firmly convinced it was by cherrypicked statistics and carefully crafted words. And it has become far worse today thanks to sensationalism in the media and interested parties hyping it up. What used to be flirting, joking, and laughter around the office water cooler has now become tension and political correctness masking intrigue and malicious snarls of "she's a bitch" or "he's a pig". As a society, we need to figure out that just because Ellen Pao is a woman doesn't mean she, her case, or her situation has any significance for us individually as a person.

By the way, if anyone is interested in seeing what "sexism" looked like before social-media made it a toxic minefield, go get a job as a plumber or as a child-educator. If you can keep your chin up, be patient, and stop blaming society for your own problems, you can... As a girl plumber, be pleasantly surprised at how, despite the fact the guys all smell like sewage will wolf-whistle at you and hit on you, they'll be unblushingly fond of you and enjoy your company. And as a male child educator, despite the fact literally everyone will suspect you're a pedophile, the women will come around and stick up for you.
Not long after, hobbyists and hackers will be hijacking that cellular connection.
When submitting anonymous confessions,its okay to be edgy/funny, but please be respectful!
At least Tom made a prototype of his idea, rather than letting the "Jump to Conclusions" map fester in his mind forever.
As I've said before, drop the dvd drive and gimme a 3x2x2" aluminum soapbar for $299 and it'll set the world on fire.
"Also, stop listening to rap music. All rapper love to rap about their money, but it's a stupid pyramid scheme because they only get money from selling music (or drugs)."

I'm afraid that rap music isn't all about money and drugs.
"The Berkeley-Iowa Naked People Finder" describes one approach, which seems to first classify pixels as skin/not skin by color, then identifying "limbs" from the pixel regions.

http://www.cs.hmc.edu/~fleck/naked.html

Some other people have worked on better skin classifiers:

http://www.computer.org/portal/web/csdl/doi/10.1109/CVPR.199...

http://portal.acm.org/citation.cfm?id=1240564

Looks like a hot topic. :)
One neat idea they had at Google I/O that I had never seen before was that they offered you the option to embed a vCard with your contact info as a QR code on your badge.

I've had people give me their business cards at conferences, and the cards just sit in the bottom of my bag. If I scanned someone's badge and immediately added them to my contact list that'd certainly lower the barrier to getting in touch with them later.

That having been said, I opted out of this as Google did not let you choose what contact info to have encoded on the badge. You had the choice of encoding all of the info you gave in your registration (which in my case, included my home address!) or nothing but your name. So if you're going to go this route, make sure you give people control over what they're willing to share.
I applaud your enthusiasm, but... seriously?
I saw a few of the talks yesterday and they were interesting and well paced. Can recommend anyone with an interest in notebooks to check in today. Pluto is a different kind of notebook and has some really big ideas about what they want the notebook to be capable of, in terms of knowledge sharing.

Particularly the talk about PlutoSliderServer.jl and how they want notebooks to be easily used for creating interactive websites

https://www.youtube.com/watch?v=QZ3xlKm92tk
Is the code available somewhere? I would be interested to read it
Does anyone know what this is about?

Microsoft Paint (MSP) version 2 decoder

Microsoft Paint (MSP) demuxer
What you have is increasing productivity, not laziness, according to these same economists, while wages stagnate.

So one working person produces ever bigger share of GDP, but is not getting paid for it.

More importantly, also a shrinking working population. Still not laziness unless your definition of laziness includes people with chronic medical conditions deemed typically unfit for work.
macOS does have mouse-following interaction in some situations. If you move the mouse over a background window, you can scroll it with the trackpad/wheel. You can't click on things or type in it because that's dangerous and would make people afraid to accidentally touch the mouse in case they move it.
Is this a troll? First thing is a cp command with no explanation of the file system structure or cd. Who is this for?
> — DO THEY TELL YOU IT WOULD TAKE TOO MUCH TIME TO REPLACE WITH PROPER APPS?

This might be just me and my professional circle, but we understand "app" as a toy that runs on a phone. Apps, by definition, are never "proper". We would never replace Excel with an APP. We might replace Excel with a "program" or a "system", or even a "framework".
I'm sure the vast majority of managers are extroverts, and introverted managers would be more ok with remote-work.
Yeah, sorry but the continental European keyboard maps with those keys in the number row suck. There's no ifs or buts about that.

I have learned on the US keyboard and keep using it more or less.
What do you mean? Nearly every native English speaker who works with Coq pronounces it "cock" (from experience at POPL, PLDI, and other PL conferences).

Personally, I'm very happy that they are changing the name.
Short summary [It's too late to write a thorough response]:

1) with any sort of outsourcing solution, you either end up paying too much or having to hand-hold and babysit the development process. both are expensive resource-wise.

2) especially if you arent focused on the technology, the people who actually do the work treat you as nontechnical, and try to screw you over. Worked with an outsourcing firm once, and a person messaged me:

"okay
4/11/11 1:03 AM
tell me whats issue on XHTML/css which is developed using web2.0 technology
4/11/11 1:03 AM
not Table based old technology .
4/11/11 1:04 AM
This xhtml/css is very much all search engine friendly as well as Google friendly .
4/11/11 1:04 AM
Whats the issue with xhtml/css ?
4/11/11 1:04 AM
Please explain so that we can fix issue asap ."

now, needless to say I wasnt particularly focused on the development of the website [it was ancillary]. I estimate i spent more time babying the outsourcing team than I would have spent actually getting the site up myself.
dont see why political hitpieces should be on hacker news sites,

considering that U.S. itself is currently torturing the Wikileaks whistleblower Bradley Manning in prison who exposed the fraud and war crimes of U.S. at the much greater international scale

so that Germany is protesting the inhumane prison conditions of Manning

http://www.msnbc.msn.com/id/42571392/ns/world_news-europe/

leave politics aside would be a good idea ..
This isn't a source, but I did hear the same sort of thing mentioned here:

http://news.ycombinator.com/item?id=2476931
It took a very long while of careful consideration to arrive at this handle, and I'm not giving it up for anything. It's unique, tasteful, and memorable, much more so than my real name, which was the 3rd most popular the year I was born.
http://en.wikipedia.org/wiki/List_of_countries_by_GDP_(PPP)_... puts Thailand in the 80s in GDP per capita. The Philippines is 125, 113, or 132 depending on the list. All three lists agree that Thailand has less than 1/4 of US GDP, and the Philippines has less half of Thailand's, putting it on the edge of the bottom quartile.

So jumping down someone's throat for calling the RP a poor country looks a little premature to me. (I lived there for two years and my gut feeling doesn't disagree with that, although if you've only been to Makati I can see how you might not realize that.)

That said, to me "3rd-world" has pejorative connotations regardless of income levels, and I also wish the submitter had left the title alone.
Not sure if you are American, but to make you feel better about your country, it is worth pointing out that unlike Russia in US the corruption is mostly happening at the top. In Russia (and whole ex-Soviet space pretty much), the corruption is spread through and through the society. It is like a metastasized cancer.

It starts with grade school where you have to bribe the teacher so they don't lower the grades of your child, you have to bribe your way out of a traffic ticket, you have to pay "extra" to not be ignored by nurses in a hospital, you have to pay public officials under the table to pretty much do anything. Then it goes to the top -- if you run a small business you often have to keep paying larger sums to avoid a mountains of artificially created red-tape, if you are unlucky you might have to also pay protection money to the local police/mafia. Then it gets worse as you go higher. Once you reach a certain level then you really have to start worrying about your life. Contract killings are just part of the business there.
I don't know why you're getting voted down. It's a pretty central quote in the article, and it is of course ridiculous to assume that all religious people were at church between 8am and 9:20am on good friday.
Same here. I was at a party 35 years ago in my late teens. One of my friends, a little drunk, told us all at the party he had become a Christian. Not exactly the state a Christian should find himself in but my friend was just learning. None of my family, or friend's families went to church. As I slept on a sofa in this random house party I said, "Jesus, if you are out there, come into my life. Jesus gave me new life that night. I was going to write here about all the journeys my faith has brought me on over the past 35 years but this seems a bit shallow. The resurrection of Jesus has been changing lives for thousands of years and will continue to do so. Happy Easter.
STOP.
END BODY.
STOP.
END TRANSMISSION.
\0
This (including the original paper) is a very liberal interpretation of a small data set. It's an interesting idea, but by definition the data are from a very unusual point in time - at the beginning of brain death - so interpreting them in terms of normal brain activity seems something of a stretch to say the least.
It is a bad thing. We should go back to where only the middle class can afford quality protein like chicken.

Let the poor eat beans I always say!
What is your gitlab project page?
I think it's super disappointing that this was discovered by some guy asking people on Facebook.

If there is a hotspot or common pattern in a disease, it should be a department of health research team who finds it by doing statistics on medical records. They should identify the pattern and the root cause, and do what's necessary to make sure no more people get affected right away. Eg. Close the school till any contamination has been found and fixed.

It's just crazy for a government not to be trying to find things that have such widespread health impacts.
Would you say the same of the cable industry? What about Fox and MSNBC channels that spew hate and conspiracy theories non-stop?
I’ve run into many issues with tools when moving from docker to podman, mostly because they tried to be smart.

Some tools try to detect whether podman exists on the system or not and change their behaviour accordingly. I couldn’t get docker-compose to work properly either even though I had a socket exposed.

I would much prefer if the podman binary/cli also supported the compose command.

Then there are slight differences such as the registry that is used by default when resolving. Docker defaults to docker.io where podman asks. The same when an image is available in multiple registries.
It's 41% increase, not 4% increase.
Nobody said they didn’t?
No, Venture Beat simply announces the A.I. center. They say nothing about the jingoist conspiracy.
> I don't even know what the baseline is for satisfying programming jobs.

For myself, it's always been about the team I was a part of. When you are part of a team that takes pride in their work, and they perform well together, supporting each other, learning from each other, etc - no "prima donnas", and they all have fun doing it - it leads to a good day of work.

I'm lucky in that for most places I have worked - from the first shop that took me in, to my current employer - this has been the case. I can only think of a couple of places I worked where that wasn't entirely the case; both came with excess politics, and other stress that I just didn't (and still don't) understand. I stuck out with it at both, but I'm glad I'm no longer a part of either.

One thing I do know and understand - this comes from someone who started their software engineering career when they were 18 years old, and now I'm pushing 50 - every place I have worked that I have had this "good team quality" has been a small employer, usually with fewer than 50 employees. My current position, there are fewer than 20 employees.

No - I don't make, have never made, and likely never will make "FAANG" money - but I'm not stressed either, and I make enough to keep a roof over my family's head, the lights on, and food in the pantry. I'm content, and if an opportunity comes up for a FAANG-money type position - I will have to look long and hard at it, before making that leap - because I feel that it might come with costs that just don't make sense to me any longer. I'd rather have a more "basic" salary and little stress, than a lot of money but stress out the door due to a myriad of reasons in such a workplace. That isn't to say that's inevitable, but I've just found that as the employers I've worked for were larger, the less my satisfaction with going in and the job overall.
>Your point is specious. The people who claim a right not to be offended are engaging in “discussion” only to redefine the limits of what’s allowed to be discussed. The limits become arbitrary, and grounded in nothing except whatever the current moral panic is. The free speech “absolutist”, such as they actually exist, are of course bounded by the actual law.

Well, yeah, this is a debate about free speech so of course one side wants to redefine what is allowed to be discussed. The difference is one side says "these are the things we don't want to be acceptable anymore" the other says "any change is unacceptable". Which side do you think is more likely to compromise? And free speech absolutists definitely exist, there are plenty in the comment sections here defending Facebook and their practice of allowing nearly anything to be posted.

>I don’t know what your example about Cohen and Jews is attempting to show. Neither example is “violence”.

I was assuming your "literally violence" comment was in relation to hate speech since that is the only time I have seen that type of language used. I was pointing out that banning hate speech can basically be viewed as simply an extension of our existing laws banning speech like defamation.
I am going to go with NO!
> encouraging them to seek out triggering content on their own and approach it at their own pace is going to create a stronger, better person

Are you a therapist?

Are you their therapist?
Ok, this may be a dumb question but is there any risk to using/enforcing PATCH in your APIs in this day and age? I still avoid it but that's probably just cargo culting now, right?
You mean Mad Muks?
heck no, had to go back and sit in court to get judge to proclaim things for them to put in form for me to sign.
AWS Has written Firecracker for this purpose https://firecracker-microvm.github.io/
I think it's due to how linear studying is. Actual work on the other hand can be quite unpredictable, it's a bit like a monster of the week show where monsters are incidents, bugs, and unreliable leaders. And there's also linear work on top of it.
Yeah we do this but also give people an option of either a take home test or live challenge. It works really well and fits all developer types.

At the end of the day all your after is signal on how well they understand software. There are lots of ways of doing that
Yeah I think that book is actually a great read. Too bad the name is that way --- it is a lot more than about taking notes.
I poach eggs for breakfast in my InstantPot. 3 eggs for 5 minutes on steam. I've found that eggs with orange yolks tend towards a jammy texture, but yellow yolks tend towards a drier texture.
Originally spotted here: https://m.youtube.com/watch?v=Z3t94ceMHJo
I applaud Alexander's efforts, but the hate is somewhat warranted, because they make misleading claims such as having "innovative memory management" when in fact they merely use Boehm GC. All the hate could be entirely avoided if their "marketing material" was a little more honest and humble.
Take away chargebacks and then the tables will turn. Tons of super shady sites will capture your money and run off with it.

There is a reason CC fees are so high in the porn industry and it isn’t just huge companies ripping off the little guy. The CC processor not only has to factor in the risks of client chargebacks but also the merchant themselves doing something shady (malicious or not)… say getting their DB hacked and having all the CC data in plaintext or something. Or just the merchant folds up shop and bails on the customers…. 10% rates exist for a very good reason
I think that acceptance is less an acquiescence and more a charity for convenience.
>It will NEVER happen due to the lack of a sustainable economic model for passenger service.

What about the oil for Jet-A reaching $500/barrel?
To clarify, MOST school districts are not giving financial or other rewards for passing the exams at an acceptable level, it's simply expected to occur.
In my opinion, it isn't about ignoring anything. It's about moderating our reaction to things such that "outrage" dissipates in the face of more reflective, sustained modes of thought. The 24/7 news cycle, which is often based on infotainment, doesn't allow time for contemplation of ideas, just emotions.
Good for what purpose exactly? They’re not really taking accountability so where is the good that you’re talking about?
I’ve been in various security adjacent jobs over the past 30+ years, and many times I’ve been working with security experts to try to secure some service or another that my team supports.

IP address reputation based blocking was a concept that we saw back in the mid-90s when I was fighting spam as the Senior Internet Mail Administrator at AOL. It worked okay, for a while. It quickly became a game of cat-and-mouse, where some spammers wouldn’t care that we blocked them, but plenty others found various ways around the blocks we were implementing.

More than 25 years later, and the problem really hasn’t changed that much. You still get lots of people who think they can just block stuff by IP addresses and that will solve all the problems.

The best modern WAFs that I’ve seen in the past five to ten years are probabilistic at best. Set the rejection threshold too low, and you start getting way too many false positive hits. Set the rejection threshold too low, and too many attacks just skip right past the WAF. They are a tool you need to have in your toolbox and you need to make use of them, but they are weak protection, at best. They’re table stakes, which set a low bar for your attackers to clear.

Mod_Security is an excellent example of a free and relatively low effort WAF that you can implement, but there are alternatives. Fastly is a well known commercial CDN/WAF provider, but Cloudflare has their WAF service, AWS has a built-in service, etc....

If you really want to be secure against attackers, you need to make sure that every layer of your code is secure. Do all the standard network scanning and fuzzing tools. Have someone play red team against your system and see if they can penetrate your defenses. Use the source code analysis tools that are appropriate for your language — Fortify might not always be the right answer. Use the dynamic application security tools like the stuff from Contrast Security, where they can scan your object code as it is running in real time and monitor for all known vulnerabilities and attack patterns, and then update that list of things to scan for in real time.

Make sure you actually fix the weaknesses that are turned up by these tools. It doesn’t help you to identify a bunch of problems and then just leave them unfixed.

The OWASP stuff is a start, but they’re just skimming the surface. This is a true deepness with no bottom.
People skills. Move into management. Lead teams of web developers.
Seems like an honest question. "Stupidly" is a key word there because humans are, without exception, vastly too stupid to deal with the combinatorial explosion that the heap presents. This is a key goal of languages like Rust: allow the compiler to deal with the complexity for you.

There are vastly fewer interacting elements when you restrict yourself to the stack: basically logic errors and pointer arithmetic become the key concerns (and Wuffs supposedly deals with the latter). Really smart people may be able to completely reason about this space.

Developers are known for imposter syndrome, but we have an unhealthy amount of overconfidence at the same time.
Atlassian | Cloud Network/Infrastructure Engineer | Remote or Onsite | Full-Time | https://www.atlassian.com/

* We believe that people should be able to work where they want, and we currently have team members in Sydney, Armidale, Perth and Nagano Japan. 1/2 the team is in Sydney, but even we all work remotely with only some days in the office.

* Our teams mission is to connect Atlassian to the world, and we'd love to talk to anyone who can help us deliver the Cloud experience our customers expect.

* Envoy, AWS ALB, AWS NLB (L3/4 load balancing), HTTP/TLS + TCP/IP, Python, CI/CD, IaaS: Packer/Salt/Cloudformation/Terraform

As a member of our Edge Services team, you’ll build solutions to enhance the availability, performance and stability of Atlassian’s public edge infrastructure, which serves as the public gateway into Atlassian’s products and services. You’ll be exploring and deciding on new technologies, implement proof of concepts and be involved in key production projects. You’ll design, build and support solutions for the public cloud, to solve a variety of gnarly technical problems.

If you're interested apply here https://jobs.lever.co/atlassian/bab91539-9f13-4e0f-8189-ff8b...