skysight-inc/HackerNews huggingface dataset:
I think you're talking about "first year of work" levels of experience.
Estimation is hard - but a major goal of Agile development is to make it possible.

I thought the same thing as you, but a month ago someone explained it to me in a way that makes a lot of sense
https://news.ycombinator.com/item?id=11641316

Actually a lot of the comments about this PDF can be summed up with "practice Agile development"
Zuckerberg's social media accounts targeted by hackers
Why Are Google and Apple Building Campuses Like Hippie Communes?
Update checks are usually implemented as soft-fail, i.e. failing to connect to the update server won't result in a notification, unless it's an active update check performed by the user. HTTPS alone wouldn't fix this scenario, you'd have to either do hard-fail (which could become annoying and cause users to turn off the update check) or have some sort of grace period and only nag after a couple of failed attempts or a certain amount of time, which still leaves users vulnerable for a time.
I am not an Arch Linux developer, but I am a systemd user on Debian 8 and Arch Linux systems.

Here is one answer from an Arch developer about why they adopted systemd:

https://www.reddit.com/r/archlinux/comments/4lzxs3/why_did_a...
Mark Zuckerberg hacked by the hacking crew OurMine Team
Think so? I'm sure lots of people have limit orders in at low prices, so that part alone isn't suspicious. But it might put you on a shortlist of potential hacker suspects.
Just curious. How do you manage the rusting of equipment? Tried living by the sea, but the A/C, fans, and everything else including the PC monitor was rusting away after 6-16 months
I think none of the things I've mentioned rule dualism completely out, but they likely restrict the possibilities of where to find it.
Meet Sultana, the Taliban's worst fear
Why don't they put the update file on a subdomain with HTTPS enabled? No ad revenue lost that way.
The Current State of Authentication: We Have a Password Problem
Fair enough on unix philosophy, I'm not a purist, compromise is understandable. Still, an expectation that lower level tools be more in line with it than, say, LibreOffice doesn't seem that crazy to me.

So, what is the advantage systemd provides to companies?
Not everyone at Salesforce wanted to go with AWS
Testing Rust with JNI
How does this argument even make sense? Since when are Debian developers or Arch linux developers overly concerned with Red Hat marketing muscle?
yes, to bump a version number in a build script. the last meaningful change was 3 months ago.
No, you're just telling TypeScript you know what Type it is and it will let you treat it as that Type.
> Locked down software ended up being a business decision for Apple's App store.

Just as all the others? That's not a defense.
Upstart wasn't bad at all. It actually worked really well. I've never dealt with other init scripts but now that my dev/deploy target is freebsd I don't really see any issues with shell scripts as init scripts either. I don't need any fancy parallelization and socket activation and all that fancy jazz for a backend server.
> I don't think your opinion about the axiomatic core matches that of all, or even most, Lisp programmers.

I have never seen anyone developing software with the 'axiomatic core'. But I see Emacs Lisp, Common Lisp, Scheme, etc. developers.

> And I'm not saying it's not possible to write lexers in Scheme or Common Lisp. I'm saying that there's no real benefit to doing so over C or even Python.

Depends on what level you program. With Lisp it is possible to develop a compact syntax, which expresses domain-level concepts, very easily. Interactive development is many times more convenient than in C.

> You're using the exact same algorithms and just transliterating it into a different language with more awkward syntax for that problem. The code isn't any shorter.

I have a surprise for you: it's perfectly legal to write imperative code in Lisp. Lisp is at its heart a multi-paradigm language with the option to add many other paradigms.

With Python you develop mostly object-oriented and in C it's mostly imperative. With something like Common Lisp you can do what you want.
It depends on how many unique URLs you have. If you have like a few hundreds or even thousand I would just use a simple hash table with counters to see what's a hot sale right now (I guess that's what you want in your example). If you have several millions than maybe I would put it into Redis or something similar where I can utilize ready-to-use HyperLogLog cardinality estimation.
Yeah, I do. Workstation is W10, Laptop OSX and deploy to Linux.

I don't have any problems. I have sometimes found bugs introduced into a library that only affects one platform but not the others. This has happened on things like grunt-plugins rather than more critical libraries. It hasn't caused any drama other than delaying updating a dependency until its fixed.
I don't see these as mutually exclusive. Introducing a compiler/type-checker can be (depending on your situation) a very concrete way of improving the way code is written.
Presumably to get to space you still have to take off from somewhere on the planet, no?
I'm waiting for the dadada t-shirt. :D
Maybe the previous init system was not quite broken, but it had massive drawbacks, and it was not for nothing that many alternatives have sprung up in the last 10-15 years. But most of those tried to limit their scope, while the current winner unfortunately doesn't.

From the little I know, socket activation seems to be systemd's main attractive item.
Super nice, is it an asic designed for ML algorithms? Which ones? Well, I wouldn't call it a startup though, 100 employees, 10 years of development.
I use a mac and the same issue is there; all I do is override the DNS on the wireless connection to use 8.8.8.8. In systemd-land, I'd expect that to be in /etc/systemd/wireless.network:

[Match]
Name=wlan0

[Network]
DNS=8.8.8.8

(other settings omitted). However, DNS hijacking isn't necessary for a captive portal - they can reroute port 80 traffic and respond with 511 per https://tools.ietf.org/html/rfc6585#section-6, (quite common now as the interaction is better for non-browser phone apps) or advertise the login page via DHCP as in https://tools.ietf.org/html/rfc7710.
Are there alternatives to our present theories of physical reality?
I took a quick look at https://github.com/systemd/systemd/blob/master/src/resolve/r... which is where I believe the server-side part of resolvd lies, and found no use of XML at all, only the normal dbus binary serialization.
Report: Smart contact lens and other ambitious projects at Verily are floundering
Better link: https://www.leakedsource.com/blog/vk
> Apple's devices tend to be more difficult to repair or upgrade yourself, yes, but this is not malicious, even if it is somewhat hostile.

If they consciously take a hostile action (and let's face it, you don't accidentally design a new screw) then yes, I'd call that malicious. If you do that repeatedly then I'd consider you evil.

> Also, I should point out that while Apple's phones don't let you install unapproved software, this isn't true of the Mac, which, unlike Microsoft-approved PCs[0], lets you install alternative operating systems (you can even boot to DOS!), disable its security features, etc.

Gatekeeper seems like a step towards it. And regardless, Microsoft isn't exactly a paragon to compare yourself against.[0]

[0]: https://www.youtube.com/watch?v=FlcngdW2Ju4
Not, but it is relevant that there are so many Russian bashing reports in the media, while your system is probably as much crooked as theirs is.

Which is of course just a confirmation of how completely rotted your system is, how much you think your system is superior without any real proof, and how much you have fallen to western propaganda.

Did that get me flagged for the NSA already, or do I need to try harder?
Simple Life Hacks to Make Your Tommorow a Better Day
"Great code" -> I am sorry, but if the allegations are true it's not great. (Not saying every part of it is bad, I kinda like the idea of systemd-init-part, but I describe them as utterly inconsiderate to everyone else.)
Not really on the same scale but there's a farm in a former air raid shelter beneath London.

http://growing-underground.com/
I almost didn't watch this because it's over my head, but the speaker was enthusiastic and made it fun. It's a shame there wasn't time for questions. I'm now going to watch the original Larry Hastings GIL talk: https://www.youtube.com/watch?v=4zeHStBowEk
La Renault Kwid sera produite au Brésil selon le constructeur
> Downloads page: http://keepass.info/download.html

I still see a glaring MitM vulnerability…

Until the author actually switches to HTTPS, network operators can simply hijack the original downloads page in the first place. This update is barely a mitigation.

If he wants more ad revenue, his only option is to find another ad network. Eventually someone else is going to start hosting a popular fork on a different HTTPS site if he keeps stubbornly ignoring this issue.
Most Expected Celebrity Weddings of the Year 2016 – A2zWeddingCards
That's like mailing a postcard to a company that puts it in an envelope for you.
This reminds me of what Pythagoras believed, Number being an universal archetype, "the principle, source, and root of all things". http://science.jrank.org/pages/10928/Pythagoreanism-Number-C...
"Love" is a strong word. The syntax is nicer than JavaScript, and I prefer to use it when possible. Though granted JS is making strides and the difference isn't as great as it was 5 years ago.

You're part of a MS project doing this, or you're doing it on your own?
I'd rather a fingerprint to lock my phone and always lock on screen blank, than a pin so complex I'll hardly ever lock my phone.

If you're living as some kind of enemy of the state maybe it's just time to stop developing software. And do you really need to holiday in North Korea?
There's a good argument to be made for signing the update information using offline keys - it reduces the damage that could be caused by a compromised SSL key. That being said, they should've still used HTTPS to secure the transport layer, as it would prevent replay attacks (as @dchest mentioned) and make it harder to exploit vulnerabilities that could be caused by e.g. corrupted update information.
Some people are advising that duckduckgo can say that they are not tracking you but being based in the USA could be made to do so by the NSA.
> To see why interior point methods are more efficient, suppose your feasible region is a convex n-gon in XY plane, for some very large n.

The convex n-gon is a really bad counterexample since the encoding length for inequalities describing it is Omega(n) - thus the required number of simplex iterations is linear in the input length.

Better consider the Goldfarb cube (Nina Amenta and Günter M. Ziegler: Deformed products and maximal shadows of polytopes, Contemporary Math. 233 (1999), 57-90.).

>
No. Dijkstra's algorithm operates on fundamentally discrete structures (finite graphs), whereas the simplex method solves linear programming problems with continuous variables (conceptually ranging over the reals, although of course on a computer one uses floating-points or some other approximate representation).

It is equivalent to optimize over a finite set of points in Z^m or over its convex hull. The convex hull of the integer points in a rational polyhedron is a rational polyhedron again. So we just have to know its facet-defining inequalities. Sometimes these are known - for example for the problem of finding the shortest path with nonnegative edge weights (here the Total Unimodular (TU) property holds). Any step of the Dijkstra algorithms corresponds to some specific simplex iteration (or dual simplex iteration? - at least one of them). Yes, as an implementation it is faster to implement it on discrete data structures, but fundamentally it is a simplex algorithm in strong disguise.

Source: I currently do my PhD in discrete optimization.
Basically because RedHat has an obscene amount of clout in the ecosystem and can basically push through whatever they want.

See here systemd, pulseaudio, lvm, selinux, kvm, many more.

Some of these things are good, some of them are bad.
The important thing is once RH has decided they want to take over another component of the ecosystem there isn't really a lot anyone can do. Not even Linus has been able to halt the systemd nonsense.

Why do other distros cave? Well because RH controls most of the other important projects too and they go to great lengths to create integration that is unnecessarily difficult to decouple. For instance Gnome. Probably impossible to run without systemd now (or at least highly impractical).

At the end of the day it has nothing to do with the technical merits of systemd and everything to do with how much power RH has to steamroll whatever solutions they want through.
Is he in this thread?
> dbus is xml-based.

No, it's not: https://dbus.freedesktop.org/doc/dbus-specification.html

> "XML" isn't inherently bad.

Yes, it is (well, as a data format; as a markup language it's ugly but serviceable). XML is incredibly verbose, arcanely complex and a colossal time-sink of man-hours which could have been spent on pretty much anything else in computing. It's the JavaScript of data formats (which is amusing, since JavaScript's data format JSON is actually not half bad).
Working on the Bleeding Edge – Building Angular 2 Application During Beta Phase
Father of rape convicted ex-Stanford swimmer's plea for leniency
I am surprised that your senior colleague says it's "too damn hard." Are they referring to the conversion of your data into the right format, or are they referring to getting an implementation running? The latter is fairly straight-forward, the former depends on how clean and convertible your existing data are.

If your data are currently messy, you need to clean it up anyway. There will be political issues with doing work your senior colleague says is not possible, but if you can solve - or avoid - the political problems, learning how to do this, and then doing it, will be good for your personal development.

Warning: I suspect the political problems will actually be the most difficult part.
My answer is going to be very skewed towards what I do (embedded systems), but:

- It offers a single, easily-configurable way to define startup tasks, issue various system-level commands (shutdown, suspend etc.), which is immensely helpful when you write a daemon that has to write on a dozen different targets. The official story is that SysV was nice and easy because it was just a shell script and we loved that. Truth is, writing startup scripts was a heart-wrenching adventure in figuring out the subtle differences between distributions. Systemd's solution is not better, IMHO, but it is certainly far, far easier...

* ...which is a big deal when, now that Linux is suddenly the next big thing (especially in make-belief markets like IoT), you have to suddenly convert swarms of Android and Windows programmers to Linux programmers. Especially on platforms where there's a lot of integration and packing work to do (which often gets outsourced to someplace where programmers are cheap and super-specialized), this is useful, because it's a lot easier to teach people to write systemd service files than it is to teach them to write shell scripts.

* Having a unified system for virtually every system-level task reduces the surface on which your customers can exercise their creativity, which reduces support costs.

* For companies that write Linux software, as opposed to "just" integrating it, having a standardized system for virtually every system-level task means that, as long as you stick to using that interface, your software is going to run on whatever distribution or platform you deploy it on. Historically, this was problematic on Linux, as every distro did its subtly different thing and, consequently, you had to test on every distro.

Edit: just to be clear -- these are all good things. My beef with systemd is related to its community's attitude towards reliability and bugs, the abysmal documentation that surrounds not just systemd, but its entire entourage (like D-Bus), its developers' lack of concern for anything that is not systemd or Gnome and runs on something other than their laptops, and the aggressive PR around it, the result of which is that a) now there's a bunch of systemd bigots who keep trying to push it into everything, even where it doesn't belongs, and b) there's another bunch of anti-systemd bigots who insist it's the doom but won't code a damn line to give us something else, and I have to keep explaining why systemd is OK sometimes.
Android Instant Apps: Is It a Game Changer Feature for App Market
RedHat controls development of other important Linux subsystems and introduced hard dependencies on systemd.
Ummm. Dominick Reichl makes Keepass available free of charge. It's not easy to stay ahead of smart, motivated and unscrupulous cybercriminals. The best thing to do if you want quicker response to threats is to send him a donation.
In cases like these, most people (like me) who read these exchanges have no idea what is true and what is not. Either there is rape or not. If not, there is libel and slander. In any case Internet publicity is not correct place to get justice.
I guess I'm just trying to understand why police weren't involved. There a story on the blog he refers to of him taking advantage of a woman when they were completely intoxicated and allegations she was raped by him and his friends.
... and how much energy by comparison with conventional outdoor farming?
Disgust made us human
If it's cryptographically signed and you found the public key from a more reputable place, you are ok. This is how apt repositories work - they use HTTP, but since everything is signed, mitm attacks can't do much other than see which packages you install.
That fork is KeePassX [1]. And it's cross-platform too!

[1] https://www.keepassx.org/
The author doesn't mention their patent trolling application :(
Excellence R Us: University Research and the Fetishisation of Excellence
Almost nobody is going to search for external sources to verify the content on keepass.info

> mitm attacks can't do much other than see which packages you install

On the contrary, if you MitM the entire downloads page you can simply offer up a hacked/backdoored version of the software. There is no signature check if you remove the signature check in the version that you distribute.
No, I think it's good change. Last year I stopped contributing to ArchLinux, I'm seriously considering doing the same for FreeBSD/PC-BSD now. BSDs have a lot to catch-up, even things like network-manager don't work on BSD, it have to be ported, or network connections have to be configured manually in rc files. Personally it's ok for me to work like that. OpenVPN configuration in FBSD was EASIER than doing the same in UI on KDE5 nm-applet. (Personal opinion->) I think connection to VPN providers is more stable and I lose less data on BSD than on Arch. So it was another benefit :) Generally a lot of things are much easier in BSDs, there is literally ONE manual for everything and it applies from FBSD-NetBSD-OpenBSD-DragonFlyBSD. When one manual for a thing for ArchLinux doesn't apply to Ubuntu or even worse tutorial from Ubuntu doesn't work on Debian, things become ugly... I value it a lot.
At first I considered that the accusations were planted by some three-letter agency. This has seriously changed my opinion.

At one point I sorta considered ioerror a personal hero of mine. Not so much anymore.
I guess if drugs are a big part of your life that could be a dealbreaker. But what's the big deal about clearances?
I get it, you probably want to be private and rather not have someone read everything you do. But if you follow this checklist to the letter, you'll have a big fat "SUSPECT" warning on your file in no time.

Hiding non-suspect behavior is, for everyone watching, the same as hiding very suspect behavior. If you do this and make a single mistake (anything really, speeding could be enough) there could be a red flag on your file that makes sure your possessions will be searched (and possibly taken) and be prepared to spend some time in jail.

I get it, everyone should be hiding all their activity online so that hiding your activity online isn't suspect behavior. But I really don't think that will ever happen and I'd rather be an open book about all my behavior then try to hide as much as possible while becoming a target.
Ideally you have both: Unlock the phone with the fingerprint and unlock more private data with a passphrase.

Same for password managers: Are there any that allow you to split your data into two categories: Protected by fingerprint and protected by passphrase? I'd love to see that feature.
So far, the only thing I'm fairly sure of is the "jacobappelbaum.net" and "@DieJakeDie" social media efforts are doing more harm than good, and were a horrible idea.

They might make a not-extremely-guilty person look worse than he is, or make a horrible person somehow sympathetic to people who think he's "also a victim", but they don't help.
NEOs are still good. Have one for my PGP key, works great to move files between computers/OSes.
“Forest wilderness” simulator
"...though at $50 a claimant, no-one stood to be much enriched out of the settlement..."

The lawyers must find that mildly amusing.
Use unique SSH keys for each service (sharing a SSH key on your GitHub/Gitlab account, network router and AWS/Azure instance is a very stupid idea)

I don't see how this makes sense. Assuming your private keys all live on the same machine (presumably with 0600 in /.ssh), then if your machine is stolen and your user password compromised, access to one private key is the same as access to all of them.
Internal competition destroy's companies.

Deming said this over 40 years ago:

"The present system includes competition between people, teams, departments, divisions, students, schools and universities. Although economists have taught that competition will solve our problems, we now know that competition is destructive."

http://maaw.info/ArticleSummaries/ArtSumDeming93.htm
The part about the browser is a bit too short.

If you are privacy conscious you should configure your browser to

a) block 3rd party cookies (all browsers except Safari have them enabled by default, even Firefox)

b) delete all cookies when the browser is closed.

Make it a habit to close the browser every now and then.
You could probably attain that by using 2 password managers.
It only protects you against SSH fingerprinting done by hostile servers.
Clear text passwords? I thought it's 2016. If you are not using bcrypt/scrypt or similar in 2016 then you should change profession.
Odd ambient noise generator.
> I don't know if I should post on HW

Many people would be really interested to read a submission about that. I think they'd especially be interested to read how you solved any problems you had.
That's a good point, and one I didn't think about. Cooking is, on the whole, a much more unstable industry in terms of work experience and generally the kinds of restaurants that even do a stage are the kinds it's even worth taking the risk on even if you are employed.

One possible solution might be to make it a remote contract. "Work on this bug/commit/sample project at your leisure, commit by no later X date". Then moonlighting applicants or even just people who don't want to risk being off the search during the trial period can still participate on the same playing field, though they would potentially still be disadvantaged compared to unemployed applicants. I don't think though that a little bias there is entirely a bad idea personally, though you could possibly argue the merits either way.
things like network-manager don't work on BSD

That is a feature not a bug.
Gatekeeper applies only to GUI apps and can be trivially turned off.
use startpage.com then. They're based in the Netherlands.