skysight-inc/HackerNews huggingface dataset:
The Future of Employment: How Susceptible Are Jobs to Computerisation? [pdf]
We probably wouldn't even be thinking twice about it if this behavior was going on in Wall Street (not saying that's a good thing, but we sort of give that industry a pass since "that's how things are there")

But SV has cultivated a bubbly and "doing good in the world" image for itself. That comes with advantages and goodwill, but it also raises the moral bar for the industry.
That's true. But it's a long way from "anonymous".
Interesting Disney took on wireless charging on their own. Apple supposedly partnered with a 3rd party[1] to bring wireless charging to future iPhones. Of course the scale is different but concept is the same but Disney's approach requires the room to be 'purpose-built'.

[1] https://www.zacks.com/stock/news/243363/is-apple-aapl-teamin...
1) How did you get from "downward pressure" to "not much legitimate value"? The original statement was nuanced enough to cover this and definitely didn't make that assumption.

2) You're right, no such project has ever existed; I'd imagine it would be like an encyclopedia, full of people who donate their time to edit page about various subjects. Such a project could never stay current, definitely isn't suitable for education, and almost certainly will never surpass the accuracy or magnitude of my Microsoft Encarta CDs. [0]

[0] https://www.wikipedia.org/
What is the chat that shows up in my Gmail, is that a different service?
Finally a portal to send files privately
Your argument isn't relevant for the situation and is very black and white. Wearing male sized team gear is a trivial matter. There are obviously other cases where accounting for every minority is important but this is not one of them.
Yangshuo,the best hike in China
The Pulse Oximeter - A small device that’s made thousands of operations safer
> Say if I was writing a programme which needed to make a computation which is doable only with a quadratic algorithm. Should I not write that programme at all because it'd be a bug, albeit in most cases it'd do the processing I needed?

This only makes sense if you completely ignore context, which doesn't make any sense at all. The point/"bug"/mistake here is using a quadratic algorithm when it isn't necessary, not just the fact that the algorithm is quadratic. If something can be solved in O(1) time, it's a mistake to use an O(n) algorithm, and similarly, if something can be solved in O(2^(n!)) time, it's a mistake to use a O(9999^(n!)) algorithm (assuming constant factors are of similar orders of magnitude etc, as they are in the OP).
Maybe, but for an intra-net app that's really negligible. For example, at work, one of our HR billing applications takes 3 full minutes to startup, and uses ActiveX running IE 8. We have to run VMs to use it, but its still in use.

When it comes to enterprise internal apps, the competition is pretty terrible, so you can mop up the field even when shipping something that'd be considered terrible bloated for a SaaS or consumer facing app.
It is in Uber's best interest to cultivate a welcoming workplace. Uber has done some shady stuff but I don't think this one is just PR. If tons of people quit Uber because the workplace culture is terrible, they'll suffer brain drain.
I feel like ThinkPads are severely underrated even for their time. Their user-serviceability may not help sell units, but for anyone who's actually owned, used, and needed to repair one, the design was genius.
Things like this are designed to let you easily discover the structure of a protocol for snooping or reverse engineering.

You can do all that (and much more) with GNURadio, but this tool offers a streamlined way to do a smaller set of specific things.
It really is fantastic to take a three or four segment train trip with only a couple minutes connection time in between. As for your experience on food: never cheap out in Switzerland, you're still going to pay the same amount on dinner, you just get to decide if it sucks or not.
> I have a Nano I'm about to set up the same way and just leave it in my primary laptop permanently.

Do I misunderstand the purpose of a Yubikey/U2F device here? Is not leaving it plugged in permanently effectively reducing the strength of the second factor?

With TOTP codes behind my iPhone lock screen I can be reasonably confident that stealing my laptop isn't enough to break into my accounts (buying time until I can contact our SIRT team), but with a device plugged in permanently I lose that. Obviously an attacker would have to know my password, but that assumption is a primary reason for multi-factor auth to begin with.

What am I missing?
SPARK is defacto, safe language for embedded. Smallest I heard it used on was 8-bit AVR:

https://en.m.wikipedia.org/wiki/SPARK_(programming_language)

Ivory might git your requirements:

http://ivorylang.org/ivory-introduction.html

Tower is their other one:

https://github.com/GaloisInc/tower/blob/master/README.md

ATS is used here on an 8-bitter:

https://github.com/fpiot/arduino-ats/blob/master/README.md
Sounds like unions are a creaky old institution that's ripe for an update. If only there was an industry that goes around innovating things.
Will we really? Or will they come out with a report saying that those responsible likely left some time ago, without naming any names, and no C-level resignations? Time will tell.
There are formal and informal relationships you can have with your professor; you seem to feel the need for an informal mentoring relationship. That means that you need to get to know the professor and vice versa.

Every professor holds office hours (it's an obligation that comes with teaching). Make an appointment, be on time, meet with the professor, and talk with her/him about things that interest and concern you. It helps if you are up-to-date on events in your chosen field and have been doing some research on your own--but that's not mandatory. You can also ask for help.

Interaction with bright, interested, and thoughtful students is a primary reason your professor is teaching a class. The professor is not going to be worried about whether you have a side-project or what sort of grades you have gotten on your homework assignments. She/he will be interested in whether you have been thinking about the field and whether you have interesting ideas.

Office hours are often the most exciting time of a professor's day (35+ years of experience).
Maybe what he meant was that he had no issue trading money for dongles, cables & a card reader.
Yes, just last week. I'm applying for a batch at Recurse Center as a sabbatical this fall, and wanted to put in something to show off a bit.
Ask HN: What computer should I buy?
I only have one shot at this. The computer needs to last me for the next 5 years. Can be a laptop or a desktop. I like Windows 10, Linux and OS X all the same. Thinking about a Retina MacBook...

I don't play games, don't need a GPU. I don't compile things or render video, so a good CPU isn't that important.

I think I could live with a Core M, but not sure. SSD is a must, preferably a PCIe NVMe one.

Budget is $1700, but add 20% to the price of the computer for the european tax because I live in Serbia and everything is expensive.

Help me HN.
> Wouldn't an attacker just use an older browser that doesn't support 'SameSite' to launch a CSRF attack?

With a CSRF attack, it's the victim's browser performing the request - which the attack doesn't have control over.

> I feel like I'm missing something but relying on the browser to protect your site is leaving yourself wide open.

Sites can just add in the 'SameSite' attribute in addition to whatever CSRF mitigation measure they use.
I have a concern about software TOTP. As tptacek knows (but I'll mention as background for other readers), the various authenticator apps use the standardized TOTP algorithm [1]. This algorithm uses a private key that the server and the client (your phone) have in common.

The question is, where is the private key stored on your phone? According to some posts from 2012 or so [2], on Android, Google Authenticator stores the key unencrypted in an sqlite database, which you can look at if you have rooted your phone.

This seems insecure. Is this still an issue with Android? Are Apple products any better?

[1] https://en.wikipedia.org/wiki/Time-based_One-time_Password_A...

[2] https://www.howtogeek.com/130755/how-to-move-your-google-aut...
And easily switch to similar prestigious company like Stripe.
I feel I need to write the inverse article "Stopping an Internet Service Provider", since I just shut down mine.

Although this stuff can be great fun, you have to stop and ask yourself why the market is "under served" and why there isn't already some dude supplying these customers, driving around the city in his Lexus and waxing his new boat on the weekends.

The unfortunate truth is that there just isn't that great a business there, especially in light of its quite high capital costs and quite significant risks.

It is a business that suits larger players who can spread the fixed costs across many cities. It is a business that suits providers offering a basket of services, not just IP transit (TV, Phone, value-added network services). It is a business that demands either a) high price boutique offerings (e.g. the people you end up buying your upstream connectivity from) or b) rock-bottom/who-cares-about-quality, high-volume products (e.g. Charter/Comcast). A small new player can't compete in either of those markets.

I could go on, but really : would you be super-excited if you had the idea to build better electricity transmission lines to a bunch of folk; or a better sewer system? No. And the reality is that IP connectivity is not much different to these other utilities.
It's why I use it; also, because my motivation for quoting usernames was that people had dumb usernames, like "the", that I was mistakenly evaluating in sentence context. :)

You definitely can't use @username on HN; many (most?) HN commenters don't have @username on Twitter. I'm @tqbf on Twitter, not @tptacek.
Camden, in the UK? Thanks for sharing your experience. Any sort of unionized IT environment in the U.S. is an absolute rarity, if such things exist at all. I don't deny that unions would add an additional layer of complexity and will have unintended drawbacks. But if there were union shops in tech, then at least there will be options for tech workers to choose between stability and rapid growth. Certainly providing the former will help in addressing the ageism in Silicon Valley.
Do you have a clause in your contract for overdue payments? As a contractor, I have seen something like net 30 with 1-2% interest charged beyond that. I'm not sure if there's a norm for this.
"As I grow older, I pay less attention to what men say. I just watch what they do." - Andrew Carnegie

I feel you found a good explanation for the incompetence/confidence paradox. You really can get far if you just talk about things you think you can do with confidence and conviction. I actually think everyone who's successful has experienced this. Sometimes you just have to bullshit, but do it confidently.

However, the reason many people fail in regulating this disparity is that they don't know they're incompetent (Dunning-Kruger effect). They can't actually do; only speak. Truly successful people have enough self-efficacy to know when they're not good at something. They have just the right amount of self-doubt. But that's not enough. They must also have the drive and humility to correct their shortcomings.

This goes along with your thinking, because the obvious response (in a workplace) by someone who doesn't know how to do something is to find someone else who can do it. That being said, delegating isn't the key. Recognition of your own incompetence is. Delegating, and edifying yourself, is the proper response though.

Early on in my career, I wanted to do everything myself. And I did. I would do stellar work on a few projects, then eventually I'd take on too much and things would fall on the floor. Some superiors saw this as incompetence.

Now I confidently accept too much work, but I'm not afraid to say "I need help with this." At my current company I've gone from doing solitary projects to having 3 other developers work on my projects under my direction. I'm not a manager, or even a lead. Hell, I don't know half the things I'll need on a particular project I accept, but I know the other developers have that knowledge.
Amusingly I just ran across this[0] link an hour or so before this HN post went live.

I haven't done it yet, but it looks pretty reasonable. I prefer not to mix LUKS with random many-year-old GitHub repos.

[0] http://askubuntu.com/a/599826
Impressive ... really lots of lube of code ... thanks for sharing ..
That would open them up to discovery, which all companies -- and Uber in particular, if half of what she says is true -- go to great lengths to avoid. No, Uber's lawyers would dig up whatever dirt they could find, present it to her legal team, a pre-trial settlement would be reached, and none of this would ever see the light of day. I actually find it quite noble what she's done here; she passed up an easy five- or six-figure payday for the opportunity to tell her story.
> Well, one answer is to create stronger federal legislation ...

That is one answer, but it's not a very encouraging or empowering one. The people currently in charge of the US federal government seem less likely than the average government to implement this sort of change. But leaving aside our harasser-in-Chief and his party's firm grip on the legislative branch, federal legislation isn't something most people feel they can do much about anyway.

What I'd like to know is: what can I as a man in the tech industry do about this -- aside from not harassing people, which seems like a bare minimum.
So you're antiminimalist because Jonathan Ive is pro-? That seems an odd criterion. What would you do if he changed his style?
'I'm terrified to leave the country'
Why would that be the case?
You should basically assume your TOTP secret on your phone is as secure, and no more secure, than any other piece of sensitive information on your phone. If you don't trust your phone, that's a good reason not to use your phone to generate TOTP secrets. For users like that, you can configure a Yubikey to function as a TOTP token (but it's a pain).

For me, I trust my phone more than any other piece of computing equipment I own. I also rarely unlock my password manager on it, so there's no one attack that gets you everything you need by hitting either my phone or my computer.

If I had a generic, non-Google Android phone, or any kind of rooted phone, the equation would be different for me.
How are they doing what they do? How could a spammer get to know Mirrorshades protocol to send a false referrer report (which is not the Referer header) in an AJAX request?
Ssh?

https://lwn.net/Articles/590870/
He is also known for Montgomery modular multiplication, which is a technique widely used to efficiently implement RSA in hardware.
Not sure why we need 6400+ today, except for pissing contents and/or stalking).

I agree with your overall point - and I've pretty much abandoned my APS-C camera, using my M43 camera almost exclusively.

However, there is a good reason for better high-ISO performance. It allows for tradeoffs in other areas. It means we can hand-hold in darker lighting or at higher focal lengths or smaller lighting than anyone could before. The ability to take a sharp photo while out on a hike when I didn't want to lug a tripod is valuable.
> The real solution is secure SCM, ability to build from source, and a trusted point to start with. You have the latter unless your system is pre-backdoored. Reproducible builds might have other benefits such as during debugging. It's bringing you little security benefit over the stronger alternative I mentioned.

Even if you have all that, how can you be sure no one tampered your system at some point? Reproducibility lets you compare your entire system against known-good states.
Where is this API even documented? The COM interface doesn't even yield any msdn hits. A lot of new APIs all seem hidden.
That's fair. I might be preaching to the choir here, but something that might help is braising the meat in a small amount of liquid, rather than stewing it by covering it in liquid.

http://www.thekitchn.com/whats-the-difference-between-a-stew...
The problem is (not) realizing that our consciousness is as much a function of our brain as it is generated by our interaction with other human beings. I agree with your point about the overestimating. Indeed, social behavior by necessity is rather simple, and, therefore, so is our consciousness. Complicated systems are unreliable, which is why we try to keep things simple - things that we can personally control anyway. And so when things, in their natural progression, get complicated - which they inevitably do, - we give up and submit ourselves to an even simpler, purely social, form of consciousness (by asking for advice, participating in all kinds of social gatherings, etc.), where "qualia" all but disappear. From this perspective it is indeed unrealistic to try to explain human consciousness only as a function of the brain of a particular isolated person.
This may be the Apple fanboy in me talking, but I think Apple was in a tough spot- seems like the tMBP has supplied-constrained components (I think it was hard to get in-store even 3 months after the launch), so their options were- delay it until they had a large number of laptops built already, charge an "acceptable" price and have people wait months for one, or charge more and have the price keep demand down. They went with the last option because, well, they can. I'm guessing the price should go down soon now that supply has somewhat caught up with demand.
I canceled all my subscriptions. I would happily pay 1 organization good money for subscriptions to the top 6-10 papers. I'm really surprised they haven't tried this yet.
> How will you solve the underrepresentation of women in tech? By forcing more women to take jobs they may not be interested in? By forcing companies to hire more women because 'gender diversity'?

So...

You're opposed to involving the part of the business tasked with stopping inappropriate behavior because that might result in accountability for the inappropriate behavior.

You're reframing a manager propositioning a new hire for sex as people being "offended".

You're suggesting that because there was no actual violence, management shouldn't be alerted.

And you're only ideas of how to solve the underrepresentation of women in tech is to force women into the jobs or force companies to hire more women.

I suspect you know your suggestions are meant to be straw men, but just in case, the correct answer to your question is to stop harassment of female employees. Stop dismissing the harassment of female employees as them simply being offended. Stop insisting management shouldn't be alerted to harassment because you're worried that they might do something about it.

My small part in solving the underrepresentation of women in tech is going to to be to support accountability for inappropriate sexual advances towards subordinates.

> Do women go through life fighting every day dealing with these advances and comments? Not that I've heard from my female friends.

And you fully intend to disregard all the women saying they do?
The big win from a U2F device permanently plugged in to the laptop is as a defense against phishing.
You're really twisting the GP's words there. Converting a sentence condemning her for being "irrational" into one claiming "I wouldn't be as tough as she is in this situation" is a mighty big leap. Even as you amended it ("if my boss did this to me..."), it's still irrelevant and focuses on the victim's behavior after the harassment, not the act itself.

Now, if what you want to say is "I wouldn't be as tough as she is...", then simply go for it. It's still irrelevant, but can at least be construed as supportive to the victim.

The original statement -- that she was "irrational" for staying -- cannot, and is wildly inappropriate.
The TL;DR is that a tech company with enough information about its users could charge them "dynamically" based on what it thinks they would pay for news.

Should books/music/movies/tv cost more to those who can afford to pay more as well?
I believe its like using it as an HSM; keys are protected against a remote intruder copying them, but physical access is another issue - you should still use it in conjunction with something-you-know, then it doesn't matter if the laptop is stolen.
Very different, URH assumes you have the 1's and 0's and wish to decode the protocol. gnuradio is more about implementing and decoding known protocols and interfacing to rx/tx hardware.
Wow you actually got somewhere! I crashed at verifying credit card.

Since they are Europe-based they require "secure 3d". My Amex with $65,000 limit that I use personally and for business works flawlessly in USA and outside for last 7 years. But not with those guys.

After back and forth battle with their ticketing system, I was advised by engineer to "finally get a secure 3d card". :) Scaleway should send said engineer for a trip to USA to see we don't use much of Secure 3d here. In fact, my personal account rep said Amex will never implement it because it only adds unnecessary layer and actually doesn't make things safer.

Until Scaleway fix their broken payment system, I will stick with DigitalOcean and few other mature and reliable hosting companies, because how the heck am I supposed to trust them with my mission-critical systems, when they cannot even figure their own payment page.
A few years ago I wrote an article entitle "Should you use C++ for an embedded project": http://blog.brush.co.nz/2011/01/cpp-embedded/ -- however, my embedded experience is mostly on very small micros, like less than 256KB flash and 64KB RAM. In those cases, I'd still very much lean towards the explicitness and simplicity of C. For less resource-constrained systems, C++ would be reasonable.
> NetBSD can build the whole OS from source tree to distribution media with a single command.

This one, at least, can be done in NixOS/Guix once you check out the source -- and the Nix package manager can technically be installed on any Linux distro, too (and some other ports to Cygwin/FreeBSD/Mac etc) and run a single command to get the ISO, or any kind of build product you want.

The carefully tested and maintained portability/cross-compilation is another thing though: NetBSD has fantastic support here that is not easily replicated without just doing a ton of work. So its universal basically-always-works cross compilation, everywhere -- is rather unique here. You can't build NixOS ISOs natively e.g. Nix-on-Darwin, which is rather unfortunate.
more of a minor technicality

It all depends on what kind of photography you're doing, and your personal style.

For me, getting that shallow DOF is a nice-to-have, but it's not what I'm typically going for. More likely, I'm using a 7-14mm lens (on my m43 camera, if it you care), which for most reasonable compositions has infinite DOF if you just use hyperfocal distance.
Day-To-day Product Management Inspiration
Related conversation from the Facebook co-founder Dustin Moskovitz and early product manager Dave Morin: https://twitter.com/moskov/status/831631451011452928