skysight-inc/HackerNews huggingface dataset:
> Look, this is not a place for video editors (in specific),

Says who? You?

HN is a community of people interested in hacking. I don't recall submitting a Carnegie Mellon degree to join.

As an editor myself, editing is a great form of hacking. Your job is to build a timeline to very often immovable constraints measured in seconds; to consult a library of techniques and effects to produce a desirable presentation. Shit, editors even get the best A/B testing of all when test screenings are involved.

When Katrina happened my job was to show my audience what was going on. There wasn't even time to edit -- I've "edited" news live on air by pushing the TD out of the way because I knew what was there. This included hot patching. If this doesn't remind you of a late night optimizing your growth metrics, I don't know what will.

Above all, an editor is the silent hand in a production guiding your feelings as a viewer. If I linger on someone's face after they're done speaking, you're going to study their emotions and likely transfer them. If I cut away immediately you get distracted by the next thing. If I hold too long it ruins the moment and makes you realize you are watching television. That's the thought that goes into a single edit. Editors tell you how to feel and you don't even know it. That's almost the purest of UX design.

Engineers aren't special and there is no single definition of hacking. There is a lot of ingenuity and craft that goes into things with which you are not familiar.

> He's not some actor

Talent is an industry term for "the people paid to be on camera," and applies to anybody. It is the antonym of crew and exists because "cast" doesn't always apply. It is not a career. Mark Cuban became talent when he agreed to perform his services on a television show. You don't know this because you're not in television, which is perspective you do not have and oddly ironic given that you're basically lecturing this guy for lack of perspective on your field.

You are being incredibly condescending to someone you don't know, including explaining negotiations to someone after admitting you don't know what experience they have. I didn't have to go far in their comment history to determine that you've almost certainly misjudged them.

After reviewing what you've written I would suggest that you tone it down a bit. Yours is honestly the most out-of-place comment I've read on Hacker News in a while, regardless of who you are or what authority you think you've been granted to speak on behalf of the community.

(I opt out of your representation, thanks.)
Holy shit, the developers of Rogue, Thomas Biskup, Tarn Adams, and even the creator of Kingdom of Loathing (for some reason) all in the same place?
i couldnt help but laugh when i read this, possibly one of the most commonly used devices in music production and theyre asking if people use the headphone jack on it, i know many people will have an external DAC but still id wager its pretty well used
The exception is also all of the mammals that have gone extinct over the last several million years due to not reaching a balance.

Also by the predator-prey cycle argument, humans just haven't reached the balance yet. We have an abundance of food currently, so we are still growing to the balance point.
Mozilla plans Firefox fix for same malware vulnerability that bit Tor [updated]
Source is $40k up to 50 seats, and then it jumps to $100k. It's pretty obscene. The worst is that Unity will fight you if you say you need the source, like it's a crazy request.
From the blog: "Crazy Idea: Clone nanomsg, move to zeromq organization, relicense as MPL, support ZMTP, only new socket types and expose CZMQ API."

Did that ever happen? I still like the idea behind nanomsg.
Riak and MySQL are in Universe, for example: https://github.com/mesosphere/universe/tree/version-3.x/repo...
> "Survivorship bias" I hear you say.

I understand your sentiment, and have felt the same way. I made the same bets on Apple, Tesla and Amazon at around the same time and beat the market. I think the issue is — can you replicate that for the next 30+ years? I don't think I can.
Why is it the single best question? Most companies do not hire engineers for their growth potential. Most hire for a very exact fit and then pay for exactly that. That's one reason most companies are constantly bemoaning the "shortage of talent". I put that in quotes because I don't believe there is a shortage, just a lack of focus across the board to acquire and nurture talent and general software engineering aptitude.
It's always great to explore application connectivity for the next generation. Webhooks have done a lot for the web, but the lack of standardization is starting to show.

However external deployment of code somehow doesn't feel like an improvement to me. From a DevOps perspective having webtask code run on a closed third party environment is a big risk. It makes continuous integration, testing and error reporting more difficult or even impossible if the webtask service isn't well thought-out.

The way forward for webhooks in my opinion should be standardization of push and pull protocols, with concerns like cryptographic signatures, metadata headers, and failure recovery through event sourcing.
Kinesis is very poor
Step into any open-plan office and do a quick visual survey and you'll find that 90+% of developers are using it.
Use 5 zookeepers, on a separate set of servers.

Use configuration management such as chef to allow you to quickly build new nodes and to roll out changes accross the cluster. You will need to make tweaks. The chef Kafka cookbook which is the top result on Google has means of coordinating restarts of brokers accross the cluster. Use consul as a locking mechanism for this. You could use zookeeper, but consul works well for auto DNS registration and auto discovery.

Use the yahoo Kafka-manager app to manage the cluster and to see what is going on.

Don't use the Kafka default of storing data in /tmp/. Your OS will periodically clean it.
https://godotengine.org anyone?
What incentive would there be on their behalf to offer such a thing to neural intruders if they could?
It is not famous people, it is Hillary Clinton.

As the article says, famous people get paid less than 50.000.

Why does Hillary gets paid five times that amount:

1-Because the Clintons already repealed Glass–Steagall Act removing controls on the financial industry and giving them billions in the process. Even a million is nothing compared to the billions they have received and the billions they will receive from Clinton.

2-Hillary is the responsible person for US invading three new countries and creating havoc on there in the last years. This invasions correspond to a transfer of several billions to the Arms industry. Even a million is nothing compared to billions they have received and the billions they will receive from Clinton.

2-Big companies had made big business with her and Obama. TPP, TIPP will make billions for them.

3-It is the candidate elected by the establishment for obvious reasons(look above). Most newspapers support Clinton, the Democrat party supports Clinton above Sanders over what most people wanted, the big companies...
Err, letting the world have your public keys is perfectly normal.

Both GitHub and Launchpad provide a public registry for these:

- https://github.com/USERNAMEE.keys
- https://launchpad.net/~USERNAME/+sshkeys

For example, mine are:

- https://github.com/Daviey.keys
- https://launchpad.net/~davewalker/+sshkeys

Feel free to add them to your servers. :)
It's petty anti-intellectualism, pure and simple, and written by a very frustrated individual.

The author shows himself having an axe to grind regarding educated individuals, and commits a long series of logical fallacies just to be able to criticize those who benefited from going to school and cultivating themselves. The author describes the cumulative result of having an education as "pass exams written by people like them", and proceeds to go on a rambling tirade regarding replication of scientific experiments, as it meant anything to him.

The article is a complete waste of time. It's nothing more than ramblings of a frustrated idiot with a heavy inferiority complex whose complains boil down to not being the one in charge because others actually know best and are better prepared than him. He refuses to acknowledge that and took the initiative to put his ill-thought out ramblings in a blog post. It reads precisely as it is expected to read.
This is how RMS has made a living for 2 decades. One advantage to attending these is being able to briefly talk to the speaker afterwards if they stick around, like asking RMS about his papers in the 1970s about propagation, dependencies and backtracking for building large-scale symbolic systems.
With ZeroMQ I had the worst possible results and experience. Honestly much of what it claims is bogus. It is highly optimized for certain cases and utterly useless for distributed systems. Try and find out in PUB/SUB what the IP addresses of the subscribers are. Not possible. In many cases you will be much better off learning TCP/IP yourself. In the mentioned case you simply iterate over the vector of subscribers - much more powerful and the sane default. It seems at some point people confused internal networking solutions with the Internet.
Is there any term like Localnet of Things (LoT), I would like that rather then IoT.
Cognitive bias cheat sheet. Because thinking is hard
> At some point, though, it started to feel like a lot of what the dev team considered tedium I considered fun, and vice versa.

What kinds of things got dropped that you liked?
Brilliant! First good laugh I've had today - thanks for sharing :D

Is pg still active on HN? I can't remember seeing any comments by him in the past year or so...
Has anybody here ever had her/his mind changed by a great overpaid speaker?
I've seen a lot of speeches in my professional life, and the ones that stuck the most were usually from non-famous low-paid speakers. The more famous and accomplished (and American, actually) the speaker is, the more the speech would steer toward a self-eulogy of the person's work achievements. And it's boring.

It's a bit sad that most of the time this kind of talks are nothing more than marketing stunts for both the speakers and the conference organizers.
NAND mirroring – Unlock San Bernardino shooter' iPhone with just $100
Feynman has a really nice quote I think that is encouraging for someone with your experiences

“Right. I don’t believe in the idea that there are a few peculiar people capable of understanding math, and the rest of the world is normal. Math is a human discovery, and it’s no more complicated than humans can understand. I had a calculus book once that said, ‘What one fool can do, another can.’ What we’ve been able to work out about nature may look abstract and threatening to someone who hasn’t studied it, but it was fools who did it, and in the next generation, all the fools will understand it. There’s a tendency to pomposity in all this, to make it deep and profound.”
– Richard Feynman, Omni 1979

I agree with the sentiment. There is much pomposity in the software engineering field and the usual interview process is more like a hazing ritual than an interview so being stressed out about software interviews in general is the correct response.

It sounds like you are a persistent and hard working individual though and those characteristics will serve you far better than being good at algorithms and software engineering interviews. My favorite quote about persistence and hard work is from John Ousterhout

A little bit of slope makes up for a lot of y-intercept

CS140, 01/13/2012
From a lecture by Professor John Ousterhout

Do not despair and continue improving. The job part will happen on its own. Trust me, you don't want to end up somewhere that values reciting topics from undergrad CS 101 over the kind of disciplined and hard working attitude that you clearly demonstrate.

The relevant links for where I found the quotes: http://duncan.mkz.com/what-one-fool-can-do-another-can/, https://www.quora.com/What-are-the-most-profound-life-lesson...
Hunting for Vulnerabilities in Signal
Calm down, it's a press release written by PR professionals, not the researchers. Others here have linked to the paper. But I would agree with you that code in academic research needs to be shared more. I haven't searched very hard, but if the code for "milk" is public, these researchers don't seem to have put it in an obvious place.
wow. im not sure i believe this...

there is no need to send the password to the server to authenticate a password in this day and age. i thought ssh was one of the first protocols to not do this.
Also see "halt and catch fire", whose 1st season is roughly based on the history of Compaq.
I was interviewing a candidate in a technical interview and it was a question they asked me.

I was impressed because it made me think, and it showed that the candidate wasn't just looking for a job, but was looking for a job in which they could learn and grow their skills.
I don't like the hunger clock.
I'm definitely looking forward to ES6 modules in node.
Comparison securityrouter
The linked article doesn't provide enough information to understand how they're using Acks to probe bottleneck bandwidth, but they've prior work on this. If it's similar to Van Jacobson's pathchar, I would have thought there might be "interesting" interactions with NICs that do TCP TSO and GRO (using the NIC to do TCP segmentation at the sender and packet aggregation at the receiver), as these will mess with timing and, in particular, how many acks get generated. Still, the authors are very well known and respected in the Networking community, so I expect they will have some way to handle this.
> Does anyone have examples to share of open source projects that have very low friction for drive-by contributions while still maintaining quality? Projects with very clear documentation and instructions for contributing?

Yes, absolutely. Read https://rfc.zeromq.org/spec:42/C4/.

We developed the C4 contract (in the form of an RFC) precisely to teach maintainers how to welcome new contributors while keeping quality high. It took many years to refine this approach. By formalizing it, it becomes really simple for projects to adopt: all you need in your README 'Contributing' section is a license (we recommend MPLv2), a link to this RFC, and later a style guide to ensure consistent code style.

The thing about C4 is that it teaches people to make small testable patches, and to trust new contributors. We know from experience that it's users of a project who keep it alive. Original authors and core maintainers burn out, get full time jobs, start new projects. As long as you have users, though, you have potential contributors.

Small patches, merged immediately, with reviews and improvements made asynchronously over time. This style is lovely to work with, kills bike shedding (we argue with new patches rather than comments), and reduces the friction in the project to as low as possible.

More on optimistic merging: http://hintjens.com/blog:106

In terms of friction: we aim to get a patch live on master within a few minutes. If that breaks master, we fix it either with a new patch, or a revert. Anyone can submit a patch, anyone can revert or improve previous patches. You can't merge your own pull requests. We work straight on master so new code is pushed aggressively towards users capable and willing to use it (those who build off master). We use CI heavily to test backwards compatibility, i.e. that existing APIs and protocols haven't broken.

There is also a whole theory of how incremental testable patches remove the need for "intelligent design" and thus the dependency on brilliant key individuals. That's another story which I cover in my book "Social Architecture". Free to read online if you want it.

Best of all, this process works. We know because we've been using it quietly and successfully in the ZeroMQ community for years.

Of all the things I've done in open source, I consider this my most important work, as it solves the really essential problem raised in TFA, which is how to keep open source projects alive over the long term.
Is that the rms responding a bit further down on that thread? Great comment either way:

> News.YC does flame wars a whole lot better than the rest of the internet...
Embraer Phenom 300 yaw damper fail due to loss of GPS signal [pdf]
VMware Workstation Pro 12 Key, Serial Key and License Key Free
OpenXCAP: open source fully featured XCAP server for SIP buddy lists
Only amateurs bribe any more. Professionals negatively bribe: They sponsor the whole show and just stop giving you money once you oppose.
This is so true and so sad. It's what kills many projects: maintainers who think they have some holy mandate for "quality" and create such a difficult environment for new contributors that we fork the project instead.

Read my longer comment in this thread about the C4 process and imagine: you send a patch, and it's merged onto project master within half an hour, and you can then depend on it being available to you forever, as long as you invest in some documentation and tests (if it's a new feature).
I don't know about changing my mind per se, but I definitely got a new perspective on financial regulation after attending a talk by Barney Frank (famous for the Dodd-Frank bill). I don't remember the exact details now, but hearing about how he designed the regulations was very interesting, even if it was a pretty high-level description. It colored my understanding of the regulation in a way that just reading a description on Wikipedia didn't.
Ransomware Getting More Targeted, Expensive
I recently put up on github the latest incarnation of a password generator I've been using for over a decade now.[1]

It uses gpg to encrypt each site's username and a random password (using /dev/urandom or CryptGenRandom as the entropy source) in a separate file ~/Documents/Passwords/<domain>.gpg . At the time I first wrote it, I wanted something that was future-proof and where I could decrypt my passwords anywhere, and where a hardware fault while adding a new password was unlikely to cause corruption of pre-existing passwords.

Make your xkcd wordlist (http://google.com/search?q=oxford+3000 is a good start), one line per word, and bzip2 compress it as ~/Documents/Passwords/wordlist.txt.bz2 (or My Documents\Passwords\wordlist.txt.bz2 on Windows) and run the password generator with --alphabet 100 (restricting choices of "alphabets" to those with over 99 characters) and you'll get xkcd-style pass phrases. I also put some numbers in my word list, so I get passwords like

blood Evil pint Urge occupy short railway 38
Diagram elbow Arrest 80 Ceremony monday salt sector

It defaults to making the password/pass phrase length ceil(96 * log(2) / log(len(alphabet))) (96 bits of entropy). If you want to dial that up to 128 bits (or down to 80 bits), put { "bits" : 128 } in ~/Documents/Passwords/config.json (My Documents/Passwords/config.json on windows).

[1]https://github.com/kmag/store_password_gpg
Do they give a discount for speaking gigs in/around their hometown? It seems like 90+% of the "work" (and certainly the time) involved in most of the out-of-town speaking gigs would be traveling to and from them, rather than the actual speaking.
Instead of using fd with a RNG, you should follow the RFC...

SixxS even runs a registry for ULA prefixes: https://www.sixxs.net/tools/grh/ula/

Put in your MAC address, get back a ULA. Then register it so that in the future if someone happens to have the same mac address you don't accidentally use the ULA.
> she is invited as a retired secretary of state, as other retired secretaries of state have been, rather than as a current presidential candidate

Did she leave the part of her that was a future (at the time) presidential candidate at home?
No, it is famous people in general.

Scott Adams, the Dilbert cartoonist, has openly written about being paid well over 100k per speech, several times a year. You can Google this. George W. Bush charges, on average, 150k per speech. A-List and B-List celebrities can easily get well in the six, occasionally in the seven figures for a public appearance of this sort. Rutgers University even paid Snooki about 32k for a commencement speech, if you remember this delightfully controversial event.

You have to keep in mind that for such events, the speaker usually does not constitute the majority of expenses. Organizing meals, booking a venue, and other logistics are not cheap already. Above all, such events are mostly for purposes of showing off or building morale: organizers want attendants (usually employees) to feel good about where they work. Just like with other kinds of corporate-level showing off, there's a big budget.

If anything, I think Hillary Clinton is paid surprisingly little for her public appearances (even though they do happen in great quantity).
I used to be on a team responsible for a single small-ish Kafka cluster (between 6-12 nodes) doing non-trivial throughput on bare metal. Without commenting on whether ZeroMQ is the right alternative: I can understand being scared off. Our hand was forced such that we had to go the other way and understand what was going on in Kafka.

The kicker is that Kafka can be rock solid in terms of handling massive throughput and reliability when the wheels are well greased, but there are a lot of largely undocumented lessons to learn along the way RE: configuration and certain surprising behavior that can arise at scale (such as https://issues.apache.org/jira/browse/KAFKA-2063, which our team ran into maybe a year ago & is only being fixed now).

Symptoms of these issues can cause additional knock-on effects with respect to things like leader election (we wound up with a "zombie leader" in our cluster that caused all sorts of bizarre problems) and graceful shutdowns.

Add to that the fact the software is still very much under active development (sporadic partition replica drops after an upgrade from 0.8.1 to 0.8.2; we had to apply some small but crucial patches from Uber's fork) & that it needs a certain level of operational maturity to monitor it all ... it's easy to get nervous about what the next "surprise" will be.

Having said all that, I'd use Kafka again in a heartbeat for those high volume use cases where reliability matters. Not sure I'd advise others without similar operational experience to do the same for anything mission critical, though -- unless you like stress. That stress is why Confluent is in business. :)
The top section of people there is the greater than $50k section, not less than $50k.
Familiar enough to know that if he really would have aced the interview there's no way they would have dismissed him for that reason. The fact that he blatantly and hubristic claims he aced it adds to the warning signs.
The set of problems that any particular design will answer (it's a general thing, not just software) will change over time as economies change. That's why you probably don't own a horse, and certainly don't ride to work on one. Software may be 100% stable and yet will become gradually less accurate over time, doing work no-one needs and yet which places a cost on the project.

You cannot prevent this. The right thing to do is to learn to abandon old solutions when they're no longer economical, and to move rapidly to build new ones that fit the same APIs, yet know more about the modern world.

Hence your car seat is approximately the same API as a horse saddle, built on different technology.
GPA is just a number, and a snapshot taken at a certain (early) time in your life and development at that. The PhD's most likely have at least 10 more years of experience than you, and their achievement - the research you read - is again only a snapshot of their life and level at that point in time.

The impostor syndrome (which you seem to exhibit signals of) is mainly caused by only seeing the higher steps, and forgetting the steps you've already taken.
EasyJekyll: A GUI Front End for Jekyll