jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
You have to look at the candidate's overall performance in the interview; not the answer to a single question.

Describing a closure is actually a great example of something many great software developers WON'T know based upon their prior domain experience.

A strong Java or old school C/C++ programmer (yes I know C++11 has closures) may actually be an excellent candidate, but have no idea what a closure is.

I would expect that a front end JavaScript developer, RoR dev, or anyone else "experienced" in a language with some functional support (Scala, Haskell, F#, etc...) should be able to explain a closure.
The TOTP too is a secret between the client (usually a human user) and the server. After all, it is used to gain access to another system, so if an attacker can guess the TOTP then the security of the system is compromised.

Consider the following example. The TOTP value to log into a system at a given time is 27182. Only the client and the server know this because they share the same secret key from which the TOTP values are generated. Now assume an attacker that can send arbitrary TOTPs to the system and has access to reliable timing information about how long it takes the server to compare the received TOTP value with the expected TOTP value. Now in practice, it is hard to get access to reliable timing information, especially when the communication is over a network where random network latency can make any timing measurements reliable. Regardless, good security requires that an attacker should not be able to deduce any information about the secret or the TOTP value despite the possibility of having reliable timing information.

With the assumption of reliable timing information being available to the attacker, here is how an attacker would carry out the attack. Brute force the first digit of the TOTP by sending TOTP values 100000, 200000, etc. The observation that it takes slightly longer for the validation to fail for 200000 helps the attacker deduce that the first digit is 2. The attacker can perform this recursively for other digits and deduce all the digits within a maximum of 60 attempts. This is a great reduction in the security of the scheme which required 1000000 attempts originally.

Of course, one can mitigate an attack like this by locking out the user's account after 5 failed attempts or so but that would be an additional layer of security. Each layer of security should be sound on its own. Therefore even if there is an account lockout facility, the TOTP validation algorithm should be secure on its own and should not be vulnerable to timing attacks.
29 USC 158 (a)(1) probably. Maybe (a)(2). 29 USC 162 arguably.
> It's like saying if rubies are the same as emeralds, then we don't need rubies.

If rubies didn't exist and somebody were setting out to invent them at the cost of major ecological harm plus enormous waste and collateral damage to financial novices then that would be a decent comparison. Except that rubies have intrinsic value, whereas Bitcoin doesn't, making it a yet worse analogy.

> different but [...] still being "the same"

I am going to take this as an exercise in aggressive point-missing on your part. If you still don't get the point, feel free to ask.

> Bitcoin is absolutely valueless

I didn't say Bitcoin was valueless. Again, you seem to be aggressively missing the point.

> BNY Mellon and BlackRock

That's not proof of value. Traders will trade anything with enough volatility, because that's how they make money. Making money is frequently distinct from creating value. I'm speaking specifically of value, which again, Bitcoin has not demonstrated net value creation, especially when compared with other things that started at the same time, and especially when there's a full accounting of costs.
This isn’t about having a shitty ISP specifically it’s the fact that the network path between your machine and the server is by definition untrusted. The much harder problem is securing the entire internet so that you don’t need encryption. Or you could just encrypt the content and be sure you have a clean connection.
The creative process isnt just the end result, but also the process and medium.
Go by market cap (for public companies). The markets are pretty effective at valuing companies.
I like this idea, and it is similar to something that I had wanted before (although in my case, what I wanted was mainly for public data without API keys, needing API keys for private data or for writing). But: Are joins with local data supported? Are writes supported? Can it be used with SQLite at all (perhaps this might be possible with a plugin)?
I browsed the buttons demo for a while, then went to "Panels" demo. The combo box worked fine at first, but after I opened an alert box and closed it, the combo box does not work properly any more. The combo box popup does not appear in the place it should be.

Screenshot: http://i.imgur.com/EgRNJ.png
am on chrome 10, linux.
Yes, very large red/purple/green grapes without seeds are the common variety in stores in the US.
Are you looking to diversify across ebs or set up dedicated hosting?
Because I would hope they didn't follow the random mutation and non-random survival method of evolution.
I just watched the mentioned video[1] the other day and made some notes, so thought I'd share them since this hit the front page.

- Fructose is metabolized similarly to ethanol. Both can only mostly be metabolized in the liver, whereas glucose can be metabolized throughout the body. Both result in a storage as fat of a significant portion of the calories, possibly in the liver, where the fat causes long-term harm. Most of glucose on the other hand is stored in the liver as glycogen, which is not harmful long-term, and is the main source when you're eating a bunch of white pasta (glucose) storing up for a big race.

- If we just ate fructose from fruits we'd eat 10-20% as much as we do today. Plus fiber is protective against many of the negative effects associated with fructose. So fruit is probably on the balance still good for you or neutral in terms of the negative effects from fructose mentioned here.

- Fructose seems to suppress the post-eating dip in ghrelin levels, where ghrelin is thought to be important in encouraging us to eat--the "hunger hormone".

- Fructose doesn't cause a spike in insulin and reduces leptin, which he views as a negative, as it goes along with not discouraging further eating.

- He gave no evidence that glucose is good or beneficial, or reasons why glucose isn't a threat to increased risk of diabetes, etc. He's just chosen his battle as against fructose, as it's more winnable than against all sugar.

That last bullet is my conclusion/wrapup of his perspective. I think his points are valid, and his recommendations are good for an overweight person (ie, your average American), but he oversimplifies things to make his case simpler and stronger. If you're really trying to stay healthy, eating a ton of glucose is not a good thing--an issue he mainly skirts to keep the focus on fructose.

[1]http://www.youtube.com/watch?v=dBnniua6-oM
Such a person, though, if kept by anyone, would be budgeted under a high-ranking executive or "internal affairs" group that would want to know what's going on in order to optimize their requests—not by some group wishing to publish updates and to thereby be optimized. I'd imagine that this person would be constantly reassigned to whichever project was currently experiencing the most emergency-like conditions (if they weren't given free-reign to find these projects—because, hell, they're in the absolute best position to hear the word-on-the-street of new emergencies.)
good article. the big question really is how (in)dependent azs really are.
US taxes are low.
Yes, I found the visual design to be interfering with the message (the animated logo is a poor choice, for example). You're right, it is edgy and artsy in a startup-y way. Maybe I'm wrong, but I think that incubators should leave the edge to the startups they fund.
Did you mean: discoverer
If they stick to the "do no evil", they can't stand by Apple's side for too long.
LISP is not on the timeline of languages!
Yes, I meant 'optimize for profit/risk ratio' I think - Ahold is a 'safe' company so low profits are tolerated by investors in return for a 'certain' return, as compared to investments in high tech where a higher yield is demanded because the risk is higher.

I think we're on the same page but I don't understand your last line - are you saying that companies with 'low' (single digit) returns are suboptimal choices for investors?
Minor nit: the "while listening and lip-syncing Lady Gaga" I thought was cover for his CD-RW ostensibly containing Lady Gaga music, while actually containing classified data for export.

The rule is supposed to be no personal electronic devices in a secure environment -- this is one of the reasons! (the other reason is that a third-party could bug an electronic device, without your knowledge, and it would be really hard to detect. If it's a phone or smart device, it would even be possible to do in software)
I scanned the headline and thought "Bet all my fellow HN'ers will defend this guy, no matter what the situation, because of the old bits got to be free bullshit" (Which I agree with in principle, but I find most folks are not interested that much in the edge cases as much as the slogan)

Then I read your comment and changed my mind. Surely what he did wasn't worth the death penalty.

Then I read the article.

I agree with you, lionhearted. And the reason I agree with you is that there is only a one-in-a-million chance that any particular potentially treasonous crime would actually be treason. But this is that one-in-a-million. If this isn't treason, I don't know what would be. If he is guilty of the things he is charged with, the deterrence factor alone is worth the death penalty.

I would welcome somebody making the case that I am wrong. But I am left with the knowledge that some things -- maybe not these things but some things -- need to be secret, even in democracy. If the people charged with keeping those secrets are playing ego-based games with disclosing them, then they have to face the consequences of their actions. If everybody in service to their country, including the president, is responsible for defending the constitution, and nobody is above the law, then this guy is in serious trouble.

(And it's worse still for him because unlike leaks in the Cold War, there is no enemy power to do a spy trade in a few years. He is well and truly screwed)
> I'm not sure what you mean about it collapsing into a single-line breadcrumb.

I just meant exactly what you're doing, but without the extra parent categories so that once you get down to a "leaf" category it only shows one line: "Parent > Child > Grandchild". Sounds like your other idea will essentially accomplish the same thing.

> *AHHH. The money. Yes. I should make that more clear on the "About Us" page. However as you probably guessed we make money off the banner advertising, I know, it's going to be a long hard slog to the top of this one! :)

Oops, that's what I get for browsing with AdBlock all the time; forgot I even had it on. :)
Rails is released under the MIT license, Stanley. It's been open-source for a long time. Fork them and make whatever improvements you want and start a push request.

Instead of complain about how slow it is, why not attempt making an "evented" version of Rails? Enable thread-safety for Rails to get a speedy application, even on a shared server.

Frankly, I can't write code for EventMachine. Just looking at its style makes me cringe: there's just something about the design of EM apps that I can't compromise with (and it ain't the fact that it's evented).
Skip the Bose. I flew a lot, and the best thing I ever did was ditch QuietComforts for Shure EC series in-ear.They cost a little more (and a lot more than the mp3 player you plug them into) but are well worth it.

To put it in numerical perspective, I had my mp3 player on volume 20 with the Bose, and volume 11 with the Shures to get the same level of music.
Being unsure and not a douche should prevent you from making an ass of yourself.
No error for me too.
We used software and hardware key loggers to get system and firewall passwords. We'd just shut the firewall off if we wanted to do something that was blocked.
Facebook just achieves lock-in in a different way, AOL forced its subscribers to use their portal and aggressively tried to hook people by providing free samples. Facebook has captured enough of the market that people "voluntarily" only interact with their online friends through facebook, or rather they are forced to due to network effects and spend a significant amount of time consuming "content" and ads.

It also turns the dynamic of the web, where you actively seek out information through search and by following links, on the head, by pushing information to you, forcing you to at least acknowledge them. It has a similar ad-ridden, homogenous aestetic as AOL, practically unbearable without some ad blocker.
Wrong. The "TV Team", assuming you mean crew, are there to do a job. they are the operators. it is the job of the production company, the Agency, and the Location to communicate with standers-by and any relevant bodies in the vicinity. this may seem like a small point, but i am really tired of hearing consumers of media alternatively blame "the TV guys" and "Hollywood" for anything really good or really bad that shows up on their screen.

film and television are made all over the place. we have shitty people in charge just like every industry. there are nebulous regions in terms of legality just like every industry. there is always more to the story than what you are watching in "your" programs.
I tried that out and noticed minification and bundling of my js code taking several seconds rather than a couple of milliseconds. Am I doing it wrong or is that to be expected? I was using Ubuntu in virtual box on win8.
Which is great until you have to OO-ify `playWith(steve, bob, ball)`. OO dictates that one of steve, bob, or the ball, knows how these three interact, and that it not vary with respect to the other two.

Or `steve' is given to you from a 3rd-party library, and you want to imbue him with the ability also to eat. Well, you can't define `steve.eat(salad)', unless you subclass his class and make a proxy of the object from the library.

To properly solve either of these, you are forced to resort to the second-class citizen of a static class, which is exactly just functions in a namespace.

The one actual "benefit" OO gives you is run-time dispatch; the ability for the program to defer until run-time the decision which implementation of `steve' actually handles `.drink()'. Outside of OO's poster child of GUIs, I have rarely seen a need for this capability in 20+ years of programming. (Mere compile-time dispatch, as captured precisely by OCaml's module functors, is much more common.) Centering a paradigm around this rarity is quite bizarre.
> as the OO-ness has been tacked onto Python afterwards

This is a myth, if I recall correctly.

Python had the OO-ness from the very beginning. It might seem "tacked-on" if you dislike Guido's style of OO, though.
Removing files is included for completeness (because people kept asking for it), but it's hardly necessary. Just glancing at the list reveals half the files are old man pages; there's little harm in retaining them. Even libraries aren't a problem; the linker won't use old versions.
On projects too small to have a workflow for automated deployment (let's be real: not everything is worth the overhead of setting up all of those tools), I've found the duo of Sublime and ExpanDrive[1] works well. The latter mounts a server that is accessible via SSH as a local drive (it's essentially a nice GUI for something like sshfs).

Otherwise, some combination of tmux and vim/nano/emacs.

1. http://www.expandrive.com/expandrive
The FCC did not write the document, so they are not the best ones to know what in the documents are trade secrets.
Thanks everyone for all the answers! It's really nice from you :)
Ok, good that you clarified. I was wrong.
This is the story of how a grad student's blog comment at Marginal Revolution appears to have blown up into one of the most influential critiques of Piketty to date. The WaPo story linked here has more more detail as well.
I can't emphasize enough how much I prefer to let the browsers vendors handle that.
I often do this - although it's not a "server" in the sense of a machine hosting production services. The code I'm writing relies on a high bandwidth/low latency connection, which I don't have from my normal place form work (home). It's much faster to run tests on an EC2 instance than from my laptop.
Does it seem odd to anyone else that the article begins with a big Russian flag? That seems to be implying some sort of official Russian involvement. To me it seems much more likely that Solarwinds just left the username and password as admin:admin, and any detail about Jetbrains are kinda irrelevant
We disagree. The mechanism for getting Github to take down code is the DMCA request; it's what you use when someone at Github is hosting code that they didn't own that you'd like removed and you feel you have some grounds to have removed.

It was a mistake for them to use a DMCA request here, because the code was MIT-licensed and thus even the author can no longer ask for it to be taken down. But nobody paid legal fees here, nobody was sued, and the code is back online, so, no, I am not amenable to the idea that Dropbox is being abusive.

Continuing to file DMCA requests would be abusive.
To me the IT people who bought into cloud hosting are the same type that would gladly buy a vacation time share: you end up paying too much to rent a slice of a resource that is never really yours, when you could've used that same money to outright own something much better.

When people tell me how great their vacation time share they "own" is I ask how often do they actually use it (3 weeks per year) and how much are they paying (a lot) then I point out that they could've booked first class air travel and a top floor penthouse at a 5 star hotel at a luxury destination for 3 weeks each year for far less money than their time share costs and fees. I'm glad someone is clearly pointing out that you can make the same case with cloud hosting vs. colo hosting.

Why is owning physical hardware so scary all of the sudden? Dear Lord, is it really that difficult to rack a physical box and replace the hard drive once in a while? AWS marketing deserves a Gold Medal for Industry-wide Brainwashing. The cloud is a time share!
Does it support hosting/syncing the static content to a 3rd party service like s3?

The problem with most of these asset management apps is i can't use the templatetags, since they save new css files etc. During deployment i usually ship the static media to S3.
Considering Dropbox doesn't do automatic upgrades (at least on a Mac it doesn't), you can always stay at an older version of the client where this new protocol isn't supported and thus Dropship still is valid. I doubt that Dropbox would ever ban previous versions of their client purely for this purpose.
It's a shame that Dropbox has resorted to attacking its users and threatening them with loss of data. Looks like it's time to clone Dropbox and offer some respectable service to users.
If you're using Android then you're logged into your Google account all the time. Whenever you make a Google search your location is logged as part of the search data (I'm in Tuscaloosa, AL; I Google "Birmingham" and it points me to "Birmingham, AL" not "Birmingham, UK"). Google routinely logs all search query data. Google loves data.

So [alleged] Jobs is right about Google and Android. As for the other stuff, who knows.

Now it's important to know that if you're going to commit a crime or something that your iPhone may retain information to trip up your alibi, but that's very different from being routinely tracked by the vendor of your phone's OS. (But we all use Google and it tracks all of us, so learn to love it.)
thanks jessica. This was an inspiring one. It's unbelievable how many unique management techniques they came up with.
It would be a nice exercise but relying on it doesn't make sense to me.

We had to write a text editor in our first semester of our CS undergrad program. I'm not going to use my own text editor in favor of say MS word or Google doc.
I think you've got a good point, but I hate products with logos and that would make me not want to get it.
I do generally prefer to give my audience the credit of assuming that each member can and will evaluate for themselves whether anything I'm saying is of value to them. Perhaps there's some error to be found in this assumption, but if so, I have to confess myself unable to recognize it.
Isn’t a perfect computer is also a perfect heater? Quantum or not...
I've heard some skepticism regarding the PoS of eth, so I'm in "let's see it when it's there" mode, but I'm somewhat optimistic here. Can't go fast enough for my taste, I'm really curious if it'll turn out to be what it's supposed to! Hopefully this will also mean people start to move over to this better tech.
Doesn’t any method by which work is done, in a proof of work system, consume energy?
When slime molds are in the plasmodial life stage (when they become macroscopic and "smart" according to the paper), it is not a collection of cells, but a single cytoplasm sharing multiple nuclei, making it a technically single-celled organism. Of course, because it contains so many nuclei over such a large area, it ends up behaving like a multicellular colonial organism.
I don't understand why we dont, at this point, have a specific module built into every processor or motherboard whose purpose is to serve as a simple entropy source. It's bizarre to me that this isn't built into the architecture standards.
“You can have some authority that says "THIS artwork belongs to THIS token". Then, you don't need blockchain, because you have a central authority.”

You need blockchain because central authorities can shut it down; however, most smart contracts in this space are centrally controlled.

I think the reason people struggle to understand how NFTs make sense is because it is new and there is no mental model for it. It’s easy to dismiss, but if you think about it and in particular if you program an ERC721 contract and/or use it, you begin to get it. Younger generations won’t need to do this because it’ll just be the way things are. You won’t trade MtG cards but NFTs. You may be in a VR game and see a work on art on the wall and buy it right there for your collection. It is absolutely legit regardless of the mania or the fact that contracts aren’t decentralized (yet).
ETH is great, but it has some scaling issues that are going to take years to sort out.

One benefit of ETH over BTC mining is that PoW mechanism (ethash) has, so far, kept most ASICs off the network (1). This has prevented the speed / power race BTC faces. In addition, the fastest GPUs are not necessarily the most ROI efficient, so people aren't EOL'ing their hardware every week. Even better is that GPUs still have life after mining.

(1) Yes, there are ethash asics, but being a memory constrained algo means that at the end of the day, the limiting factor is memory, not asic chips. The other issue is availability... shipping asics out of China is expensive.

Disclosure: very very large ETH miner
can I add comment ?
So, Mt. Gox is too big to fail.

Very good points. I hadn't considered the BTC that they keep on trades. I wonder if they sell some of this BTC at certain threshholds, such that they are constantly converting to fiat?
@geigster describes this well;

"We're not trying to replace Slack for huge operations teams, we want highly mobile or highly personal teams to communicate and manage their work better."
If you ever sell, you were never a part of... that thing... that happened... and is happening... always :)
Four Expansion Cards, two on each side.