jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
> ... the freewheeling ways of the male-dominated technology industry increasingly drew scrutiny.

> Episodes of men behaving badly make the news frequently here, whether it is sexism or harassment in the workplace or just derogatory attitudes toward women.

So the story in the NYT is that it's a story in the NYT (unless by "here" the author means tech or SV? Either way, Narrative is a juggernaut. The thinking and the story becomes more founded in what people are saying than what is.)
> OJ was unanimously found guilty by the jury in his civil trial.

Civil trials don't find guilt, they find liability. And, aside from the difference in evidentiary standards (beyond a reasonable doubt vs. preponderance of the evidence), the actual fact question in a criminal murder charge is substantially different than that in a civil wrongful death charge -- one can be liable for wrongful death on the same pattern of facts under which one would not be guilty of murder.
Awful title ("Silicon Valley Bias Claims Rejected").

A jury found that Kleiner Perkins did not, based on evidence Pao submitted, find sufficient cause to believe that the firm itself was not in violation of the Civil Rights Act.

I would (very hesitantly) agree with that verdict. Sloppy HR and disgusting office politics and fraudulent performance reviews? Yes. Intentional gender discrimination? Probably not.

Silicon Valley is still as biased and unfair as ever. It will probably get worse, after this verdict. A better title would be "Kleiner Perkins Not Proven Guilty of Gender Discrimination, Jury Says".
not sure, but what jury is going to be sympathetic to someone getting paid a 500k salary (higher than her peers) and receiving such generous severance?
I think HackerOne as a platform failed here as well. I understand they try to leave themselves out as much as they can and just collect the fees for the bounties paid. But, in cases like this, I feel they should have been a little more proactive about it. I received an email from HackerOne shortly after I wrote this blog saying they will investigate but I haven't heard a word till now. Soon after that, I found out myself that I have been banned from reporting any bugs to Slack without any notification. HackerOne could have at the very least sent me an email out of courtesy but no, never happened. I even sent them a follow up email asking for clarification but haven't heard a word till date.
You really don't see the difference between "Let's not invite any women to this event, they're all bitches" and "Let's make a women only event because they are a minority and their voices tend to not be heard in the masses"?
> 2) It's not abusing the algorithm, it's using a longer salt (in the concatenation case).

But PBKDFs like bcrypt and scrypt are not designed to keep the salt parameter secret; in fact they assume the attacker knows the salt. And so if they happen to reveal the salt to the attacker, this is not considered a bug in the algorithm and won't have been flagged or fixed by cryptographers.
You just continue to state the same thing: that OE does not protect against an active attacker. We know that. Nobody says that it does. What it does is protect against a passive attacker. And that makes it useful for some use cases.
Yeah, he's so interested in games his English homework is League-specific. (Ever written League of Legends poetry? It's actually surprisingly possible...)

We did some text dungeon stuff last year and that almost clicked. But the boy is mercenary. He washes dishes in Vermont in the summer - when I mentioned that money was to be had with programming, he sat up straight. I think he'd never thought about it seriously.

I'm trying to get a sense of "If I were just starting now..." from the community. And yeah, Python does seem to be ranking rather high, doesn't it?
Whatever you want to call it, I expect a bigger one next year.
There's still 40x difference to biggest EC2 instance to a maxed out Dell server (244 GB EC2 vs 6 TB for a R920). Not to mention non-PC hardware like SPARC, POWER and SGI UV systems that fit even more.
Any decent tutorials out there to get me up to speed on CL tools? I use grep and a few others regularly, but have avoided sed and awk as they seem difficult to jump into.
Quite a lot of cars have lane assist now, where they will have a light on the wing mirror if there is something in your blind spot.

They also vibrate the wheel if you go over lanes and aid in steering your back.

I imagine this is a combination of the two. My worry is how it deals with something like this http://www.op-online.de/bilder/2012/12/18/2669673/1360212316... Does it just stop?
One problem is that most postings will not advertise equity splits and most of the time not even a salary range.

One off the cuff solution would be to add a seniority enumeration like seniority: "junior", "senior", "super duper".

Another solution would be to move the sensitive information to another record type or somehow mark it as not public.
I agree strongly with number 2, and characterize it as, “there’s no such thing as a container”.

It clarifies security thinking if you pretend you don’t have a container, but instead, you’ve got a new kind of tar file, some namespacing, some niceness, iptables, and some convenience aliases:

https://github.com/p8952/bocker

None of it’s magic, and none of it brings new security guarantees. There’s just the stuff hosts had, that’s what they still have, so however you secured a process under that stuff, you still must do it to a process under this stuff, just now against an extra pile of abstractions and duplicate OS cruft.

Devs are mad at the security team because they want to inexplicably pile another dubious OS into with apt-getted software of dubious third party libs somehow expecting the whole thing to be safer, and the security team reaction is to want to “scan” the pile of nonsense.

Both groups, and the vendors exploiting them, desperately do not want to grapple with the implications of your point 2.

This position is not popular.

As for point 1, it could be argued Google is continuing this experiment, and learning from it, as seen in more than one CVE last year addresses obtaining root on GKE:

https://cloud.google.com/kubernetes-engine/docs/security-bul...

That said, your point 1 can be found, if you already had a way of securing a public host with security boundaries asserted from outside the host.

For instance, one of the GKE CVEs mentions the GKE Sandbox relying on gVisor:

https://cloud.google.com/kubernetes-engine/docs/concepts/san...

https://gvisor.dev/docs/

(About that extra OS in the container, note Google’s plea for distroless and no shell. Are folks even listening?)

See also Firecracker:

https://aws.amazon.com/blogs/aws/firecracker-lightweight-vir...

While gVisor and Firecracker are fantastic, I’d argue for a real “belt and suspenders” instead of just more belts. Most likely it’s better to get actually outside the host metal, stop counting on software.

Perhaps the best known commercialization of a custom hardware approach that’s readily available to end users is AWS Nitro, with an ok-if-markety backgrounder here:

https://www.allthingsdistributed.com/2020/09/reinventing-vir...

Google offers a good writeup on the isolation layers:

https://cloud.google.com/blog/products/gcp/exploring-contain...

Note their comments on the hypervisor, and consider what Nitro is doing.

https://aws.amazon.com/ec2/nitro/

https://aws.amazon.com/ec2/nitro/nitro-enclaves/
Of the JVM languages, AFAIK only Kotlin is making a serious push to get off the JVM using something like LLVM. Interesting idea, though I wonder how long they can preserve compatibility between JVM and native targets.

Scala native doesn't feel like it has the same impact, perhaps in part due to a lack of momentum (as I perceive it).
The author is CEO of ATOS Therapeutics. He has invented seven FDA-approved pharmaceuticals which have helped over 80 million people. He has been cities over 9,000 in various works. I heard his company's breast cancer treatment had a major win last week - phase 2 so successful that it's being halted and moved immediately to phase 3. I don't think it's fair to put his work in the YouTube loon bucket.
It should actually be CPC (communist party of China), but the acronym in English has become CCP.
Which is not obviously an improvement.
If Hiawatha Crater is the result of a cometary impact during the Younger Dryas it would have had global effects.
Down votes or up votes don't matter to me - I'm just glad (and surprised) that what I thought was basically an innocuous "IMO" comment generated so much discourse.

Isn't this the point of public forums? To encourage discussion?
You mean because his reasoning is Austrian and not Keynesian it is wrong even when the crash happens which he predicted would happen? That's convenient.

Gold has also done pretty well hasn't it?

You can list wrong predictions all day, but if the guy is occasionally right you need to give credit.
The NYT still has a staff consisting of some of the most excellent writers and reporters of our time. That said, they have definitely been wobbling in the editorial compartement lately. They're overcorrecting as if they've lost their balance (and they probably have).

I think the most exciting way to look at the situation is that no one is really to blame. There are some fucky emergent collective dynamics about, acting like some mythical monster with hapless individuals as its neurons. A grasshopper never chooses to become a locust; it transforms into one when there are too many grasshoppers at the same place bumping into each other. It's no longer an individual. It's part of the swarm. And with the swarm comes destruction.

There's a tendency for cults to suddenly become destructive. Like they've become Harlon Ellis' AI that has no mouth and must scream. Cursed with sudden uncontrollable sentience, it seeks revenge. The Rajneesh movement and Aum Shinrikyo both carried out biological warfare. And you can see these destructive tendencies in most cults, for some reason.

And now, literally connected in a globe-spanning network we see cult-like behavior take on a whole new dimension.

The editorial staff at NYT obviously wants to make good, honest decisions and carry out an important social mission to the benefit of us all. But what if it's not their choice anymore? What if there are collective dynamics that supersede individual agency?

(I do not mean to say that the NYT operates as a cult; it's more that we might be witnessing the sort of dynamics we traditionally see in cults play out across the social media landscape at large.)
I know you can reference images via the hash which no one ever does.

It’d be nice if container registries where immutable so when you pull the image by tag, it’s the exact same image every time. As it stands the image you pull today might not be the image you pulled yesterday (unless you pull by hash).

For private non public apps I’m a huge fan of tagging containers with the git short hash. Every build produces a brand new artifact, no previous image gets modified. It’s easy to know precisely what is deployed by checking what was in the source repo for that commit. It means a bit more effort around deployment automation but generally seems less problematic than pulling the latest image for a mutable tag. As it’s by convention though a malicious actor can go overwrite a previous tag so doesn’t prevent poisoning.
The stats are a little daring, I wouldn't consider the social media link effects interesting ("significant") at all. Short versus long is a good thing to back up with some data, though.
He may be senior, but he's not making sense. If somebody asks for your slides at your talk, there's a good chance they've seen the talk. So they have the context, they may just want a refresher later. Or maybe they saw something on a slide they couldn't make out before you advanced.

Besides, what do you care? What's the real reason you're refusing?

Here's the logical extension of the suggested alternative: don't bother to give a talk. Just send copies of your papers.

But that sounds silly to me. I think there's probably a reason people both give talks and write papers. So here's my suggestion: if your slides aren't worth giving out, don't show them when you speak.
Google routinely implements, fails to implement, and fails to deprecate features that align with their company goals (i.e. namely collecting lots of data). AMP, Browser Extension Manifest v3, cookie privacy features, ad-blocking features, file formats, and many more that most people have never heard of.

Happens all the time. Without Webkit and Gecko, the web would simply be "whatever Google wants to do". Having multiple browser implementations helps balance out whatever Google's agenda is at any given time.
Most of those libraries are written in C, C++ and Fortran.

You can use them from any language with native FFI bindings capability.
No, I meant that the sheer number of them makes any single one of them less useful - the value is in the curation. This is separate from personalization.
Taking Reddit down isn't market manipulation, right? Asking for a friend. (by @nostetselyk via Twitter)
I don’t know it was definitely noticed when it happened and honestly I have a hard time believing it could be more hyped up than these last couple of days.
Again, reading the treaty quickly, I don't see any mention that the tribunals "can act entirely in secret." Actually, to the contrary, Article 28 does lay out:

> Where, after consulting with a disputing investor, a disputing Contracting Party determines that it is in the public interest to do so and notifies the Tribunal of that determination, hearings held under this Part shall be open to the public.

In other words, the tribunals are really no less secret than any other regular court case.
Because HN doesn't hate its users?
It generally doesn't. As an example of what kind of things might be kept secret, take a look at the history of softwood lumber disputes and aluminum disputes between Canada and the United States.
It's underground salt caverns. This is extremely feasible and has been done for decades with natural gas.
For some reason as of late, I keep trying to frame what is going on now with socioeconomic events of the past. Then the idea wandered into my mind about something I see emerging, where data is not only gaining more economic value, but it is increasingly available to people to monetize if they can "connect the dots" with whatever they seek to provide value in (or how someone starts seeing value where you previously did not), which seems to be landing us in an age of the data robber barons. Where the ability to offer people something they might value, in return for data about not only them, but the world they live in through the way they see it.

Maybe I'm over thinking things, but as someone in the midst of it all, I can't help but try to make sense of what is going on in relation to other things.
Long term, I think the goal should be to improve the general public's response to information to the point where it's okay if everyone knows right away because they won't be stupid about it.
> Investigations should certainly be conducted politely and respectfully, but at the same time they need to be persistent enough to deal with the attempts of guilty parties to conceal the truth.

Do they really? How often do planes blow up because of a bomb a passenger brought on? Once a decade? Less than that? I'm frankly willing to live with those odds if it means I don't have to take my shoes off and submit to molestation every time I get on a flight.
Nice idea, though I'd probably just end up with a book of what everyone's had for lunch last month.

Can I select a group of "close friends" or "don't do duck face" rather that tagging?
Yeah... what notahacker said. :)
i hate to be 'that guy' who says "me too", but i felt the same way when reading it 5 years ago. i had far higher expectations of a pulitzer prize winning book in non-fiction. another pulitzer prize winner that's almost as long but far more engaging is Jared Diamond's "Guns, Germs, and Steel"
Bret,

That is really nice to hear. What is the stance, then, on said 'free expression on Facebook' regarding the filtering of mentions of torrents in the FB Messaging platform?

Is this protected expression? Or will the FB Messaging platform filter content based on an automated perceived risk of copyright violation etc?

Is the official policy regarding free expression, and what constitutes free expression, that one (without a Facebook account) may read posted anywhere easily accessible?
Oh, thats a good one! Wonder what changed for them?
Let me guess: iPhone?
That's cause I just fixed it : ) I found two versions and added a third! It's been stuck in my head ever since I got portal a few weeks ago.
That's pretty amazing. He said it's easy to build and he wanted to open source the code, so that people can build their own. I hope he actually does.
Visit any web page anywhere that has content controlled by an attacker, have a backdoor transparently installed on your system. Is there more you want to know?
The potential is, that these applications react to the world you are in. For example the knowledge that there are products on the shelf and I want the cheapest and the best.
The other thing, that I don't need to carry a camera, a phone, a book, a laptop, an ipod or like paper, pencil, wallet, puppy, drum, guitar, tv, different looking shirt, shoe, wallpaper... So many things could be virtual. (I mean augmented with the real world.)
"...God Creating Adam in the central panel on the ceiling was a perfect anatomical illustration of the human brain in cross section..."

+
"..construction the voice box of God out of the brain stem of man.."
=
The human mind created God.
Once, we had an issue with a single board computer that seemed like a hardware issue so we called support, and they wanted the output of a logical analyzer. Unfortunately, we didn't have an interface for our old analyzer, and so we set up a webcam to show the analyzer screen to the support guy over NetMeeting. It was kind of funny, but worked great.
You're right that it's not that big of a deal, but downvoted for using "apple fanboy".
Here's some illustration of the previously-discovered hidden brain on the Sistine Chapel ceiling:

http://boingboing.net/2009/12/16/brain-on-the-sistine.html
I'm not sure in which universe you live but I've met plenty of incompetent and ignorant doctors who gave advice which didn't make any sense.

Same with lawyers and accountants (accountants have so many certifications it borders the ridiculous).

More than the knowledge you've proven to have once, it's important to evaluate ongoing performance and care on the job.

That's something you can hardly prove during an interview.

A market based model of work with a system of reviews would be an improvement in my book
I mistakenly pressed “yes” to this. Is there anything I can do? Can I revoke it?
You can use a web browser aimed at the Skype website to setup a calling card equivalent system to dial out internationally over plain old telephone service for 2 cents per minute. You don't even need an app installed.

Don't get the subscription, pay as you go with Skype credit.
No. The President is out for at least 21 days (more than no minutes in this case) if the supermajority does not materialize.
It's quite rare for me to watch/listen to tech related stuff (I prefer written words). However, I'm going through "Teaching Python" https://www.teachingpython.fm/ as one of the ways to improve myself as a writer (and the occasional workshops).
Having a tech track is the right direction.

Having no track even better. Some people like what they are doing and the field is constantly changing. You want your best surgeons doing operations not managing other doctors.
For impromptu groups when you don't want to give your number?
This really cool. The examples in github doesn't seem to show any defining of feature types (categorical, binary, continuous, etc). Is there automatic detection of feature type?
> Maybe faith in the process should be shaken, but a volatile transition period isn't the time.

I doubt that its correct to allow someone to take office under the cloud of illegitimacy because of our fears of "volatility." The best thing for stability is clearly to what is necessary to ensure that the elections are both secure and known to be secure.

> I have full faith that the election process has a moderately low fraud rate, below any amount that would change the outcome.

The problem is that people with an interest in subverting the process see your faith as an asset. You have faith in elections, good. We need to demonstrate election security to people who do not share your faith.

> Even so, the peaceful transition of power is more important than any particular mechanism.

I think that making sure anyone in power is actually legitimate is probably more important than that.

> If any of the parties involved would like to raise a court case actually alleging fraud (which is why the cases have been dismissed

Many were dismissed for procedural grounds or lack of standing; additionally proving fraud requires proving intent, which is not easy.

> because they failed to do so, and anything short of this would have no remedy

Thats another problem, one shouldn't need to prove the state of mind of a hostile party in order to demonstrate that an election was corrupted.

> an investigation would be in order.

There are open investigations. Despite this, some people insist that we coronate their preferred candidate without seeing what law enforcement is able to discover.

> So what, exactly, is the problem here? It seems like you're raising concerns of things that could have happened, without any actual weight behind them that they did happen. It's meaningless.

I'm not sure what you're asking. There's a video of poll workers counting ballots that had been hidden under a table until all the R observers had left. No one has presented a chain of custody for those ballots. The people who may have stuffed the ballot box with questionable ballots say they didn't. There's an open investigation, so they won't release any evidence that would show that these ballots are legitimate (assuming they would even be able to prove that); but that doesn't stop the investigator from making a sworn statement that nothing happened; naturally there was no supporting evidence.

> without any actual weight behind them that they did happen

I'm saying it happened and its on video. I don't think the excuse "ballot stuffing is how we normally win elections" is going to de-escalate the situation.
Honestly feel sorry for particle physicists... Their entire gig is spending billions on fancy equipment, and hoping that observe something unexpected. If they see exactly what they expected to see, all that effort was basically wasted. Also, a lot of "discoveries" turn out to be equipment miscalibration - remember those particles which supposedly moved faster than light a few years back? Always struck me as an odd way to do science.
I don't really fault them for copying other people. That's a pretty decent strategy for the market leader to take.

Deals is a fantastic way to monetize their competitive advantage (the massive database of social profiles and friendship connections). I'd prefer they implement all the creative ideas they can to keep Facebook usable and valuable, rather than suffocating the experience with ads.
I disagree. It's faster to write garbage than it is to write good, clean code.
Agreed. There is also a difference between security conscious people like us giving "explicit permission" and common user (who greatly outnumber us) handing out permissions like they're going out of style.
chap, as I've mentioned before, I think this is yet another great way to contribute to open source. It's not always about writing code - projects like this are just as valuable as someone who works full time on documenting open source projects, writes code or creating user interfaces. thanks for a fresh idea!
Might I ask you to re-read my comment? I never claimed that iTMS used that particular stipulation. I compared it to a common pricing-relate stipulation.