jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
But still, why do they need to steal your addressbook? They can offer you to spam your contacts without demanding. Is the profit contingent on selling the address book data?
To the point where they won't let you invite more people (help them grow!) without it?
I have mixed feelings about this. I agree with him that if the SVR specifically targeted a particular organization with a specific goal in mind, it wouldn't really matter if they had weak passwords or not.

OTOH, I think it's not out of the question that one or more organizations (intelligence agencies, criminals, etc.) found the password and took advantage of it more as a "let's see where this thread leads" type of opportunistic attack, and all of the downstream consequences only happened because of that.

I've never worked for an intelligence agency, but I've been a professional penetration tester for about a decade, and when I go after an organization, that's typically my approach: find the weakest links and start following them to see where they go. In a complex environment, usually that leads to control over everything sooner or later.

Edit: just to clarify that last paragraph, what I'm getting at is that if I imagine myself in the shoes of an intelligence agency, the "organizations" I'd be going after would be foreign countries. I'm sure in some cases it would make sense to go after specific businesses of interest, but in the absence of legal restrictions, I'd be looking for the weakest links in entire industries that supported those countries in some way, not necessarily picking a specific business and targeting them.

There are quite a few companies out there that make systems monitoring and administration software that would provide similar levels of access to a wide range of organizations if their build chains were compromised. The one that was compromised was the one that also had a publicly-exposed update server with a password that could have been obtained in at least two different ways.[1] Coincidence? Perhaps, but I don't think it's fair to just take it off the table.

[1] Accidentally exposed in a public GitHub repo for many months, as well as being easily guessed. Either alone would have been enough. Both being true seems to me to make it more likely.
How do you increase your market past people who have already liked Ms. Swift?

The argument still stands - just replace TS with mom jeans. My point wasn't actually about Taylor Swift marketing - it was that demographic targeting is a reasonable way to identify an audience. Those mom jeans are not going to sell very well in a younger, urban demographic compared to Iowa.
You don't even need to use JavaScript - you can do it in the cache with edge-side includes:

https://www.varnish-cache.org/docs/3.0/tutorial/esi.html
Heroku doesn't require any Github account - that's the beauty of git :)

That said, I'd still argue that you should practice defense-in-depth; plan for "this is how I'll limit damage when someone gets ahold of these credentials" rather than "Nobody will get these, so I can do dangerous things with them".

It's the same argument behind "don't do things as root unless you have no other choice"; trading security for convenience works really nicely right up to the point where you get your teeth kicked in.
Well, no, but it would be a nice-to-have.
Nobody said it was their responsibility. If adding an optional feature that prevents you from shooting yourself in the foot makes people like github more, maybe it's worth it to them. "Responsibility" has nothing to do with it.
I taught myself to code at a similar age (around 13, am 17 now) so this is based off personal experience.

Python's recommended a lot but personally I'd avoid it, it's a nice language but there isn't much to use it for without starting using frameworks.

What I'd recommend is starting with web development (that's where I begun). HTML can be taught easily and provides quick gratification, you can easily teach enough to produce results in a few hours, alongside HTML I'd teach the basics of CSS. I can personally recommend W3Schools[1] (though I believe codeacademy[2] is good as well), this can easily be personalised to make it appeal to your brother.

When he's got a decent grasp on this, Javascript or PHP links in perfectly (it could even be an extension of the HTML lesson - a larger project) so would work well to move onwards.

Another thing that I wish I'd have known about when I was learning is the amount of support available. I've since been involved in a local CoderDojo[3], if there's one where you are, I'd highly recommend going along to one with him! Even without any coding experience, I'd recommend it.

If you have any questions, feel free to ask :)

[1]http://w3schools.com

[2]http://codecademy.com

[3]http://coderdojo.com
Is there really little downside?

Anecdotally, I've heard from friends in the jamband scene about friends who did LSD who came back "completely changed , and not in a good way."
You released these apps under the MIT license. This means that people can do with it what they want, as long as attribution is given in the app or when source code is used in binaries

If you did not want this, you should've released it under a different license (e.g. GPL).

Why are you upset?
I was thinking that there are probably thresholds that trigger alarms when large amounts of crypto are converted to fiat. If crypto is coming from a clean address, there is not evidence of illegal activity. But there is still the question of where those funds originated. So I am not sure if government entities can seize those assets...
Uhm, many of the larger companies have direct connections out of China that don't cross the GFW, even Chinese companies. If you are important and rich enough...
A search engine needs $100+ million to $xx billions to create and a very different angle to market since Google is bookmarked and people go there to search for stuff. You see Blekko trying to get some press by saying that they deleted 1 million domains from Serps? As if that makes sense

But yeah, if he wanted to create a web search engine, then he was asked the right question.
^This.
The (main) goal of the NYT paywall was to push people back to print subscriptions.
Also fruit and some other unprocessed things.
"Either could be wrong, but neither relies on authority."

Since Yegge provides no evidence, and a lot of criticism of the current culture of Clojure, I must assume he is relying on his authority to make his case. There's nothing else to back up any of his assertions. It's either argument from authority, or argument for the sake of argument with no rhyme or reason at all. While argument from authority is weak, it'll convince a few people who think he has authority to speak on the subject.

But, his arguments are clearly not technical. He makes no case for why those languishing patches deserve to be in Clojure...just that they exist, and that's enough for him to believe they have merit.

"As an aside, Yegge has achieved something noteworthy in language marketing: his writings about programming languages have a large following. Perhaps he exaggerates his influence, but for better or worse it's non-negligible."

I don't disagree. I enjoyed Yegge's blog immensely over the years. But, talking loud on a blog, and building a language community aren't necessarily the same skills. I see people suggesting he had some hand in Python's rise to it's current position of importance, but I was a Python developer before Yegge started talking about it, on a major Open Source project...Python was doing just fine. It was actually entirely news to me that Yegge had anything to do with the Python community, in fact (it's been a few years since I was working in Python, so I haven't followed it since). Python made Python popular, not Yegge.
i see what you did there...
Startup's site has been down all day, probably lost about ~$500-$1000 in sales, more concerned about the longer term loss of goodwill and the potential damage to google seo rankings though.
Foursquare and its venue classifications are probably can be argued for, but strict POIs are probably not.

True.

All in all, I have to say thank you to SimpleGeo though. This is a huge step in the right direction.

Agreed on that! Good for them too ... great example of commoditizing one's complements.

(http://www.joelonsoftware.com/articles/StrategyLetterV.html)
One of the few unique features of Safari is the "Reader" button (similar to readability), which I find very useful in reading such content (it's also great when applied to Anandtech, Arstechnica or other sites where article page count goes to double digits).
SimpleGeo's places API made it really easy to extend http://walksy.com to generate walking tours on the fly for any US or Canadian city. The fact that places are categorized made it possible to guess about which things would be interesting points for a walking tour.
Up next Tesla to cut extra wheel from cars due to shortages. Engineers debated about telling customers but ultimately decided that only 3 points of contract were required for stability
> My reference..

No worries. I assumed you must have meant something like that.

> I am, however, aware of the scale of what I am proposing…

For smaller cities I could see how this might work if it’s done before they really develop. I was thinking in terms of existing large cities, where it seems intractable in part due to the existing sprawl. I can’t imagine how this would play out in Seattle (where I live) because the sprawl is already well outside the control of the city. Even if Seattle wanted to do this, all of the land is under the control of the surrounding towns (Bellevue, Kirkland, Shoreline, etc.) at this point.
The US wants free markets its business class can benefit from. Just as it wants democracy its business class can benefit from.

It's almost as if what the US really wants is an old-fashioned hegemonic empire that benefits its ruling class, and rhetoric about democracy and free markets is an expedient wrapper for that.
Weren't these chips failing because of bad thermal design of the enclosure?
I have to say crypto seems much easier to solve than bad politics. If you'll grant this, your argument hinges on crypto being useless under an oppressive government, because it will be controlled. I find this implausible given that no government in history has ever really succeeded in fully controlling black markets. Indeed, the trend is that the more dysfunctional the government, the more power the black markets have.
Essentially true, but you need to make sure the file will be in a consistent state. Rather than locking it, it’s better to use the Backup API or VACUUM INTO command.
"Losing our support" means a process, it doesn't mean everybody hates Google now, of course it's not the case.

> I always question the agenda of people promoting this.

My only agenda is my growing frustration with using Google Search and the lack of competition. Web pages can be excluded now for not using any of Google's plugins for example. I see how Search is increasingly becoming a tool for plain old profit maximization. It is generally up to Google to do whatever they desire with their own products, however the belief that Search is fair and "democratic" is lost now. No matter how technically competent, Google is lost for me as a company I can trust.

So, where is my fair, convenient and comprehensive search of information on the Web? There's none on the horizon. This is very worrying.
As the whiner who whined about this title - the story isn't worthy of note at all, other than someone fishing a supposedly-important detail out of it and putting it in the title. Apple hasn't as much as sold a machine with an Nvidia GPU for many years. This non-editorializing thing is explained in great illustrative detail here:

https://news.ycombinator.com/item?id=21617907
Token sale scams plus token sale scams. For references see above
Sometimes the best way to prevent a physical fight is to carry the would-be fighters outside over your shoulders, and then offer to referee it. Securistas calm down very quickly when they realize they're not the only people in the room willing to use their hands.
Right course, wrong reaction.

Knowing that addresses may not conform to any arbitrary rules should lead to disabling automatic validation (or downgrading it to nothing more but suggestions, "are you sure that's correct?" hints).

Not to stop offering users any guidance.
By having you create an account I get your email. By getting your email I can start retargeting you for advertising purposes and perhaps even you will tick the box allowing me to send you spam. This is called customer retention.
2. Don't force visitors to use a 3rd-party provider. Always have a local option. As a counter point to (1), many visitors won't want to use their Facebook/Google accounts for authenticating to other sites.
> Use a slow, secure hash function like SHA-256. Don't use MD5!

Don't use a single round of any hash function, including SHA-256.

You shouldn't try to roll your own crypto, and you shouldn't try to roll your own password verification either. Use bcrypt and you'll get salting and you'll get a multi-round hashing process that has the ability to easily scale up in complexity as computing power continues to increase.
Some of us have been online for decades, and have seen our fair share of walled gardened apps with a login screen hiding the app. We are sort of used to registering, but we are also sick to the teeth of having to register too. The problem can lie in the micro copy too; you often see "10 seconds to register" or, "one click login". It is rarely that - it usually entails a frightful tale of password management, making the password match the requirements of the app (alphanumeric and maximum 8 characters nonsense), alongside a11y issues, PIA (Personally identifiable information) issues, and a slew of other barriers to entry.

Very much something that has gone un-noticed by developers for a long time, is that login systems are an obstacle and something to be avoided if we can. Login systems can not be solved with Single Sign On (SSO) / OpenID systems either. (Not all of us have FB/Google accounts, and never presume so) Every developer is scrambling to find a solution for the 'login problem', and completely overlook how login systems complicate things for their users. A lot of login systems suffer from Not Invented Here™ syndrome. Often online forms are a sort of 'mystery meat' where users don't know what to expect there. I once saw an account registration form asking to include an emoji character in my password, for example.
Lots of people think that is "big data". For most people if it's too big for an Excel spreadsheet, it's "big data" and the way you process big data is with Hadoop. Of course once you show them the billable hours difference between setting up a Hadoop cluster, and (in my case at least) using python libraries on a MBP, they change their minds real fast. Its just a matter of "big data" being a new thing, people will figure it out as time goes on and things settle down.
I've recently started developing a django app for syncing with tmdb's data
https://bitbucket.org/zalew/django-tmdb/wiki/Home

just released the first commands and everything is in early dev, but it works.
Thank you for catching that :-)
This thing could do dishes, change diapers, play with the dog and um... girlfriend... this thing could totally replace men of the house.

Strap this thing to a Roomba and get them talking to each other and there's quite a bit more it could do. ;)
And, with that post, you had a chance to explain it to PG a third time (Application + Interview + Blog) :) Good idea.
Its been said by other commentators, but I think this was a super honest and candid post. It read as if was truly written from the heart. This is the kind of tech writing that I like reading. Basically as if I sat down with this guy and he just opened up his heart and soul.
The same problem was true for engineering/CS graduates in developing countries. The problem in that case was that the skills available did not meet the economic profile of the countries they were working in. For instance, labour may be so cheap it is not cost efficient to automate processes.

In many cases, we need to properly analyze the chain of value creation, from basic sciences to applied engineering, and iron out the inefficiencies. Once this occurs, PhDs will again enjoy their proper place in the economy.
I agree; I read this same story, or something extremely similar to it, 12 months or more ago.
Good luck finding competent security developers, Sony.
I was talking about which is more secure. The real point is that this isn't a static vs. dynamic language issue: C and C++ are static and full of terrifying security traps; Haskell is static and it isn't. Since C and C++ are the most commonly used static languages, and they are much less secure than the most commonly used dynamic languages, it's questionable to claim – without additional elaboration – that static is more secure than dynamic.
Losing the high ground to what?

Ubuntu 14? Windows 8? Chrome OS?

I'm not running OSX as a server OS and don't plan to. But even with the latest 10.10.1, I still see uptime in terms of weeks including mandatory reboots due to OS updates. I think it's easy to say that other desktop OS's are years behind and falling farther behind with each release.

As has happened in prior OSX releases, this latest release may have been rushed. The next release will probably address current bugs.
My frustration with Netflix's current recommendation system is that it includes films that it knows I've already seen or rated.
Wouldn't be hard for them to make your next executable download point to something with ransomware, but with the name you downloaded. Scary stuff.
current apple engineer... the sprint (milestone) development system is still in place... it's not the problem though, it's the problem is the focus on new useless [imo] features at the expense of core functionality and quality

hope marco, geoff and others keep writing these articles so that eventually tim or someone sees one and shakes things up. pressure from the bottom has not worked so far
Side note:
Recently a teacher posted a thread on Reddit, that while discussing social media he mentioned Reddit and his class snickered. They teased him „Mr teacher are you a Reddit user?“ which he confusingly acknowledged to more snickering. He finally found out that teenagers regarded Reddit as a porn site like pornhub!

Interesting perspective and maybe generational divide: if you are not a geek with special interest hobbies and reason to visit subreddits, you only know it from nsfw stuff?
Regarding freelancing, how do you deal with the multitasking related to getting the next project while working on the current project? Did you outsource this? The organizational work, the back and forth, the scheduling of interviews, etc. It seems like something that's very difficult to do with AD(H)D.
> Language isn’t the be-all end-all of a software project.

Certainly not, but at some point you make a move to scratch an itch. Sick of doing typeless python with runtime issues everywhere? A typed language may be a good break from that. Annoyed of Haskell in a company where people care more about their exceptions than about the business? Maybe you'll do the opposite move.

It's not so much about doing things the one right way as experimenting with what makes you productive and happy. And if people find they're comfortable doing that one thing only, good for them.
Easy. If it's a unanimous echo chamber on Reddit, (see QAnon and WSB/GME), it's likely wrong and I'd bet on the opposite.
> You could argue perhaps that the proportion is lower, but then we have a lot more people bopping around...

Yeah, that is what I meant. Amount of people buying actual drawings as gifts or to decorate office/house is smaller.
> We ensure the CRDT is synced with at least two nodes in different geographical areas before returning an OK status to a write operation [...] we ensure durability of written data but without having to pay the synchronization penalty of Raft.

This is, in essence, strongly-consistent replication; in the sense that you wait for a majority of writes before answering a request: So you're still paying the latency cost of a round trip with a least another node on each write. How is this any better than a Raft cluster with the same behavior? (N/2+1 write consistency)
AFAIK you shouldn't get this problem if you use the sass/less sources of these frameworks directly.

But I didn't find any good tutorials on this.

Also, I don't know how this should change the html-elements needed by stuff like the bootstrap components.
I have a Davis Vantage VP2 station and reverse engineered the serial connection to the back of the console, the datalogger interface, and the wireless communications from the outdoor unit [1]. Using something like a $20 Moteino [2] (an Arduino clone with an RFM69W RF transceiver), I can monitor its readings without even needing a console. The wxforum [3] is also a very active and helpful site for people getting into this kind of thing. Recent experiments are opening the door for homemade temperature / humidity sensors and the like. Fun stuff.

[1] http://madscientistlabs.blogspot.ca/search/label/Davis%20VP2

[2] http://lowpowerlab.com/moteino/

[3] http://www.wxforum.net/index.php?board=59.0
It always puts me on edge when people choose to write their web-app in a particular language or framework 'because performance'. The C# VM is by no means slow but the fact that StackExchange is running off 9 front-end servers under pretty light load is testament to the fact that for regular web app workloads, it's just premature optimization to pull out the 'performance' card.
Day job >> Kids >> wife >> dishes >> laundry >> bills >> depression

I have to break through all these barriers to get to spend a minute after work writing code. Before pandemic, would happen like once every other week, maybe. Now it's like once every three months.
Zero trust networks can't come soon enough
> No one really paid for it

When the govt creates money out of thin air the value of the dollar drops aka inflation, all savers pay the cost.
There is no such thing as "evolutionary purpose." Evolution is a stochastic side effect of lossy self-replication. There's no one involved to do any intending.

Traits that don't impact fitness are selected neither for nor against. And there's no distinction you can draw between traits that arise by happenstance and those for any other reason, because there never is any other reason.

So why be surprised that such a (presumably) durable epiphenomenon of human neural complexity, having once arisen by happenstance, should persist? There is quite literally no reason for it not to.
Mechanics, technicians, doctors and lawyers are jobs bridging between technical and non-technical. Mechanics and doctors needs to be able to talk to laymen, but mechanical engineers and chemists who design the parts/medicine don't need to do it. Similarly you have pure developers focusing on developing core parts, and bridging developers who focusing on delivering those parts to customers/users. Pure developers are still extremely important and a viable career path that pays well, you can't say that it is wrong to focus on that part.
I don't judge anyone for believing this story, you are better off believing the story to keep up your optimism streak and avoid falling into a pessimism streak called depression, but it is either fake or a dream created by the brain. The creature is speaking English, which is a dead giveaway.
Better readability

https://threadreaderapp.com/thread/1515324097223225345.html