skysight-inc/HackerNews huggingface dataset:
There are two ways to look at Mayer's payday:

1. She is getting rewarded even though her performance as CEO of Yahoo! was way less than expectations. Expectations being the salvation of Yahoo! as an independent company.

2. She is being rewarded for selling Yahoo!

People are focusing on #1, but that is really past performance and past stock grants. She has plenty of previously granted stock based on previous performance, but she did not achieve everything she could have: This past year, Mayer had to forfeit just over 400,000 of those performance shares.

Once the "for sale" sign went up, her incentive became "sell Yahoo!", not "save Yahoo!" because that is what her incentive (severance package) aligned with the moment the "for sale" sign went up.

I expect that the Board understood this very well when they created her severance package.
It takes a lot of effort to write a specification. Just think how much software you have ever seen complete specifications for - and how close that number is to zero.

So if you are going to write a specification, you really want to get maximum bang per buck out of the effort. Which means that it has to be good for many purposes:

- documentation
- verifying processors
- dynamic verification (i.e., testing)
- formal verification
- testing test suites
- verifying application software
- dynamic and formal verification
- verifying OSes, RTOSes, microkernels and other bare-metal software
- verifying compilers
- generating machine readable descriptions

Verilog is great for one of these - but less good for all the others.
Starting with a relatively neutral language gives you a lot more flexibility.
It makes any individual task a bit harder than if that was your only goal but
you save effort overall.

There is also the virtuous cycle that bug fixes and improvements that help
any one goal are folded into the master copy - so all other sub-projects
benefit.
Pokemon glow: Craze hailed as a ‘miracle’ aid for autistic youngsters
Gabriel flouted zoning bylaws, plunked down a building with inadequate security and no permits, ran disruptive parties, left trash lying around which only encouraged vandals and lowlifes. Basically, he acted with the entitlement and arrogance of the nouveau riche. And now he's wondering why they hate him.

You don't live in a bubble. The people who live around you DO matter.
The Founder: A Dystopian Business Simulator
What exactly are you considering being compensated "poorly". ONLY a million instead of tens of millions? If an exec is confident enough to think they can turn a business around in four years, then they shouldn't get the massive payouts until they do so. She hasn't done so. Why do execs still get huge bonus/stock allocations for an under performing company?

http://www.independent.co.uk/news/world/americas/highest-pai...
Why are you looking for a MB Air-replacement when you want a MB Air?
You rarely read HN, then.

For most adults/businesses in developed countries, mobile is a secondary device, while PCs run everything from AAA games to filing systems to interfaces for medical equipment.
> Now they’re doing it to Steam. It’s only just starting to become visible.

{{citation}}

That is a bold fucking claim. Exactly how has this happened to Steam already? They don't bother to provide any reference or clue.
This is one of the reasons why a seller would accept an all-cash offer significantly lower than a competing offer where the buyer requires financing. No seller wants to wait around for a lender to figure out how to do the one thing they're being asked to do.
What you are really "asking" is logically equivalent to this blaming statement:

"I see you are posting about LastPass' vulnerability, but you work for 1Password. Please confirm there exists a regex vulnerability in 1Password which is similar in nature to the one that occurred with LastPass."

Put this way, the insanity of the statement is obvious. In questions, it becomes less obvious to the majority of the population, which only serves to spread the insanity to others.

Don't feed the fear with dissonance.

Edit: It is NOT "reasonable" to ask questions with negation in them which assume blame in a piece of software which is, by a rather large assumption, a completely different code base. Reason is based on logic. This question was based on fear and uncertainty, and only serves to spread it further.

You downvoters can go fuck yourselves.
In addition to all the really great advice already submitted, I really like using Lynis[0] for scanning my servers to get an idea of obvious vulnerabilities and a baseline for hardening ssh. It's absolutely not a substitute for a security expert, but in about 10 minutes of setup you can get an idea of what action items you need to add to the top of your queue.

[0] https://cisofy.com/lynis/
> I don't see how recursive queries are going to help you

You construct a graph of objects with very few queries, transform it and write it back; with knowledge of the db-schema this will outperform any ORM-based solution and give much greater flexibility.

> As for building queries [...] The problem is that it composes very badly. [...] the best you can do is concatenating partial queries and hoping you got the parentheses count right.

There is an area between full-fledged ORMs and string concatenation. In a purely functional approach queries are composed by composing functions that compile to queries. Postmodern[1][2] is a good, open source example, though in most commercial projects we just built our own wrappers for the tasks and databases at hand. This also allows for much better performing code since for a lot of tasks hooking up the db-reader to the json emitter without going through object instantiation reduces memory and cpu consumption by an order of magnitude (or two), while in the same project, some code benefits from a OOP approach (for which you just use a reader that constructs the objects on the fly).

[1] http://marijnhaverbeke.nl/postmodern/

[2] http://marijnhaverbeke.nl/postmodern/s-sql.html (yes, it does string concatenation at run time, but it does it for you, you don't worry about getting the parenthesis count right)
Dissing X was probably a way to test your fitness with their culture. If you answered neutral and political correct stuff, you failed their test.

(This is only speculation I have never interviewed with them and only know them through customers).
a mid-range plan for a family of 5 here in NC can easily be $1500/month - assuming CA is higher, and she's got a family plan, I can't imagine it's "super platinum" but average.

somewhat OT, but ... is there any value in billionaire's having 'health insurance'? When you are worth more than some smaller insurance companies... what value is there in buying insurance? Aren't you already self-insured? There may be procedures that the insurance company wouldn't fund anyway, but you can just pay for it yourself?

EDIT:
Just looked up family of 3 - higher end "blue cross" in CA may be $1200/month. Other companies are cheaper (wow, must be nice to have so many options! in NC, I have 2 options, and only 1 the year before, that's it).

Throw in a dental plan, and that might bring you to ~$1300/month. Add in expected increases over the next 2 years and.. $2k/month is probably still on the high side, but perhaps not by too much? http://www.coveredca.com/news/PDFs/CoveredCA-2017-rate-bookl... shows that there's an expected 13% average increase in 2017.
Pardon if this is out of sorts but this will probably be the funniest thing I read today, and I salute you for pointing out the sticky-wicket of talking about 'fuel' in this case.
The counter point is that companies are profitable despite high salaries. That suggests an engineers contributions exceed even the bloated salary and therefore they are undercompensated.
Yes. Completely irrational. I can secure $60k+ in a matter of hours to purchase a new Tesla or Merc. Drive it off the lot and suddenly worth less than the loan. Real Estate, however, can take 45 days to close a loan when the projected value of the asset is surely positive. Antiquated and balkanized title process and (I suspect) unhealthy regulatory requirements are a bog. From there, I think it is simply inefficiencies in the lenders' operations. Would love an insider's take.
It depends if you have enough capital to trade on that algorithm at scale. The more capital you personally have the more potential value you get from keeping it secret.
One reason: It's much easier to carry a five gallon jerry-can of gas or diesel with you when you head out into the boondocks, just in case, as opposed to spare battery packs sufficient to get you back out to civilization.
Company town
They migrated from MySQL to Postgres (https://www.yumpu.com/en/document/view/53683323/migrating-ub...) with almost same reasons and now they are counter argumenting for their inability to use software and lack of skills to upgrade!
The point here, is that her compensation should be based on changes she made in her tenure. Not what two other companies are doing, where she happened to be conveniently in the CEO role at the time they did.
In the fleet space Smith Electric worked on this since 2005 and it seems like their trucks are in the perpetual prototype mode. The battery energy density vs cost still seem to be the major factor. Interestingly enough even regular gasoline engines are pretty reare and diesel dominates the field.
https://en.wikipedia.org/wiki/Smith_Electric_Vehicles
There is rather a lot of cost in being able to hook your algorithm up to the markets with fast enough access.
God forbid. No hire if they cannot reverse binary tree on the whiteboard using angular react e6.
Mining Bitcoin with pencil and paper: 0.67 hashes per day
GitLab 8.10.2 released
I have met several former Macbook owners who swear by their MS Surface Pro units. Usually the Pro 3, not a lot of talk with people with 2s or 4s yet.
I am absolutely OK with the idea that you'd stop using LastPass because they have a bug this dumb. I'm even OK with you believing that LastPass should pay more than other companies because they are so clearly reliant on external researchers to work on spec to find the simplest possible flaws in their code.

The only problem I have is with the virulently bogus meme that companies should pay more for vulnerabilities because otherwise the "black market" will outbid them. No:

* The "black market" does not in fact want these vulnerabilities.

* Finding a vulnerability and then not using it to to enter into a criminal conspiracy simply isn't praiseworthy, and reasonable people don't have to paid not to do that. It's hard enough to do this kind of work in a society that believes there's something sketchy about finding vulnerabilities at all, without the constant chatter about how maybe they could just make a living by enabling crime.

* The argument doesn't even make logical sense. If the vulnerability is easy to find and exploit (as this one was), then no matter how severe it is, it doesn't command a high price because you could spend less money to independently rediscover it. Moreover, there are surely many other vulnerabilities to be found in the same target. The economics of the argument are all wrong.
Smartphones have already become a commodity. I wonder what else?
but the solar plane does not need 100 million years to replace its fuel...
It looks like you have been working on how-to-program-in-java.com for quite a while. I'm curious about the story of the site's development.

How did you identify an unmet need?

What other solutions did you try?
Usually don't represent total comp. Most big tech companies include a lot of stock. If it's a publicly traded company it is liquid and therefore can be considered a variable cash compensation amount, but that isn't captured on Glassdoor.
> Obvious downside was very self selective almost exclusively male club that had to exclude talent that could not adjust

Why is that a downside? I mean, you say that they were very successful... Maybe the people they excluded wouldn't be as successful?
Unfortunately, the discussion took place on the "Hack Day", and wasn't recorded (I think they're going to try to change that for next year). Chris Broadfoot took pretty comprehensive notes, though: https://docs.google.com/document/d/1xMJ0c-YxvcgNglzjbALzncs5...
I see no need to read that into it. It's a reasonable question. Sounds like they just want to know if they, as a 1Password customer, could be affected. A little misguided, but a reasonable question.
She could deliver some value to hypothetical competitors which might harm Yahoo or its new owners. It is not that unusual, I have a friend at a company where anyone Sr Manager or above will get 1 year of salary in case of layoff with condition to not join the competitor.
What's the recommended way for US users to get Xiaomi devices?
Heh.

https://mathiasbynens.be/demo/url-regex

https://lostechies.com/chadmyers/2010/11/20/parsing-a-url-wi...

https://stackoverflow.com/questions/27745/getting-parts-of-a...

What do all these have in common? They all demonstrate that it is hard to write a regex that parses URLs.

Regex's hide programming mistakes because they not only become harder for humans to parse as they get more complicated, but also there isn't simple programming code to handle potential security vulnerabilities in-line with the code. It also hides the [at least] two considerations of secure programming: designing a secure function, and handling the function securely.
Huh. Fair enough. I wasn't really thinking quite like that, but that is true
The non-Win32 apps are signed and distributed by MS through their own store. All apps delivered that way pay a toll to MAS. That's what Steam wishes to avoid, since they collect the toll right now.
In this particular thread, she's not being slammed for stock performance (although it seems questionable whether she had much effect either way), but rather the "perks" she negotiated for herself as the company got swallowed up by a bigger - and probably less benevolent - entity.

What she did isn't illegal, nor is it particularly unexpected these days. But it is selfish and slightly grandiose. No one is questioning how much she was paid during her tenure, just this fluffy extra crap at the end that makes it seem like she was royalty. While it shouldn't be made illegal, it should be shamed to a degree. Because if not, then where does it end?
Comments moved to https://news.ycombinator.com/item?id=12172372.
If the box is on AWS, make sure to make an AMI snapshot of it for later postmortem. Also create a security group just for boxes built using that AMI that specifically only allows the minimum amount of access required to do the postmortem.
> I don't understand this. What do you say touching the disks is? Like physical touch, or logging in and looking at the logs?

Is this sarcasm?

If not, hypothetical situation for you:

OP works at a company that processes card information of customers. A hacker demonstrated gaining unauthorized access to production servers. Hacker pulls a db dump as well as any keys used in encryption of data (some bad practices here, but this is common). Hacker does not tell OP of his additional actions, only demonstrates unauthorized SSH entry.

OP does the logically correct thing of wiping his db servers, and "cleaning" the machine, because, well, mitigation of future damage.

Hacker pissed he/she was not given reward for demonstrating his proof of vulnerability, uses this production data for ill will. A third party audit (which will happen) finds that OP has done a full wipe of the server - logs for who pulled vulnerable information is now unknown.

With no finger to point (the hacker contacted him "anonymously", remember) OP is then implicated.
Twitter's Fucked
This is the profit centre vs cost centre problem. Companies are incentivized to spend more on developers, since developers build features, and features drive sales, and sales drive profit.

SysOps folks keep the site up, but once you start hitting >99% reliability, throwing more money at sysops isn't going to increase revenue.
As long as software quality and synergy with hardware at Apple side there is no problem, For example Android video capture still nowhere close to iOS. In phones made for Chinese market its even worse right now, but getting better.
Performance reviews: what millennials really want
> There was also a shortage of the Radioactive material to make the RTGs

From my understanding, this shortage is caused by the lack of nuclear power facilities in the USA - which supports the GGP's point about negative political/public reactions to anything nuclear.
Take a look at the UK for a great example of how well that turned out. You can get a buy to let mortgage at around 3% (using your existing home as collateral), and achieve rental income of 10%+. I think you were even able to claim back tax on the interest up until this year.
Yes, please feel free to take them to task over that.

But while you are doing so, please avoid misrepresentations as egregious as Motorola announcing that they will stop updating their phones with the new security updates. (and less egregious ones too).
I had motorolla, asus, and more high end phones but i'm a happy $120 xiaomi redmi owner here.

the problem with iphone (&ipad) is that apple forces some limitations, like say... no sd card. my sister -- who has ipad -- always have trouble moving files to non-apple devices

i used to say "i don't own iphone, i can't help you", just like when someone asks for general computer problem, equivalently as saying "i don't use windows, sorry"

now i don't get apple related questions because everyone i know uses android, either as primary or secondary phone.
Should We Torture Suspected Terrorists?
Your graphs look a lot like the ones I made internally :) Try comparing the `agree_` and `important_` across age ranges / genders, I was able to pull some stats out of those but since the sample sizes are so small I didn't want to release it to the world.
Zero down is more concerning. It is commonly accepted to grant loans based on employment income. That is a cash-flow stream unilaterally cancellable by one's employer with limited notice.

Stock is not cash. It is less liquid and more volatile. But if one properly discounts to accommodate those factors, it's just another deferred cash flow. This time, not relinquishable by the company. (If the stock goes to zero the employment cash flows do, too.)
Or maybe he's just curious if this type of url regex fail is more widespread among similar software.
POWER MODE for atom
This is a crazy argument. HN is a community populated in large part by software developers, most of whom will at many different times in their careers ship vulnerable code they wrote. You're saying that if you start a new company, you should either (a) get your code absolutely perfect, which nobody ever manages to do, including people who go to great expense to try, or (b) be held hostage by extortion schemes to pay greater sums for vulnerabilities lest the discoverers exploit them to cause the most possible damage to your company.

You know who does fine in a world where that's the norm? Facebook. No matter where vulnerabilities get valued at, they will be a rounding error expense to Facebook.

You know who does not do fine in that world? Anyone smaller than Facebook.

Thankfully, that's not the norm in the real world. Unfortunately, the real norm is: if you pay a bounty at all, random people on Twitter and message boards will claim you're being negligent by not paying more for them. The lesson then is: don't offer a bug bounty. All you're doing is attracting negative attention.

You know who does fine in the real world where that's the norm? Apple and Cisco. Really, so does Facebook, despite the bullshit flak they take for their bounties.

You know who does not do fine in the real world? End-users.
Restricted shares may not be used to back a loan. They can only be used as a measurement of future income.

edit: actually its complicated
Does LA really have credible public transit alternatives such that people don't actually need personal cars? Doesn't seem like it.
Slack: Data Consistency Checks
I disagree. Complexity can arise through interactions between simple pieces of software. Given, planning that out may be complex, but certainly less complex than writing it all in one go.
This reply would be much more comical if you linked to a stackoverflow thread about history.replaceState. :)
Researchers find more than 100 Tor nodes that are snooping on users
I've cut out ingrown toenails many times. Nothing a little frontier medicine can't handle :)
Long Term Greed
Range is not solely due to the battery pack; weight, frontal area and drag have a big impact.

Nonetheless $20k is high for a 200 mile pack even today. It should be around half the cost.
From Quantopian website: "You own your algorithms. Your algorithms are kept secret. Ideas are some of the most valuable assets anyone has. We are committed to protecting your intellectual property and keeping it safe."

More importantly, a lot goes into developing an algorithm including clean data, back testing, infrastructure. Quantopian handles all that for you, so you can focus on developing a stellar algorithm. Of course YMMV.
This is less a plane, and more of a battery with wings. The amount of cargo a solar plane could carry is minuscule.

Limits to battery energy density means that we can't improve very much on this.
I think the key to qualifying something as a sense means that it provides info external to the mind and body, i.e. the whole organism. Proprioception doesn't qualify as a sense by this standard. It depends on where you draw the line. You could include it if you defined sense as providing inputs to the mind only but that commits you to the mind/body dichotomy.
Cruising for a Purpose: Have Fun and Do Good Through Impact Travel
>With UWP you have no choice, it goes through Windows.

False. With Windows 10, sideloading is permitted by default. The caveat being, of course, that you're on your own for making sure the app is safe if you choose to use a sideloaded app.
it heats up a bit under heavy load, but not more than my earlier Thinkpads.

The X1 Carbon is much cooler but also less powerful ;)
I really think you mean "mediocrity" or "the quality or state of being mediocre" rather than "mediocracy" or "a dominant class consisting of mediocre people, or a system in which mediocrity is rewarded."

I say this because you're trying to "give developers a code to live by that will increase the quality of code and coders." However, you're not talking about a "dominant class" or a "reward system." So I think the word choice is off.
Bleeding money and need to raise capital constantly?

-> Investing in infrastructure to meet the huge demand for their next generation electric automobiles, using common stock sales.
What is a CCO? There seem to be a lot of them: https://en.wikipedia.org/wiki/CCO
> I think that impression might be quite subjective

Agreed, that's why I have the caveat
I'm not sure what point you are trying to make.
Yes, I think the subtle distinction between highly-qualified and skilled is what matters here.

$10k is the difference between several years of experience. To switch from SRE to developer, you would have to be willing to give up a few of those years.
This case shows how simplistic it is to measure an executive's success by stock price alone.

Instead of competitiveness and productivity seeking, we get pump and dump:

- pump the stock price up (workforce reductions, stock buybacks, mergers and acquisitions)

- cash out

- let the company crash and burn.

Rinse and repeat.
Mayer had absolutely nothing to do with Alibaba or Yahoo Japan though. What she is directly in control of has been hemorrhaging money.
...and mediocrity != mediocracy.
Hide it. Look for ways to "hide" your server , simple things such as using a VPN or change IPs