skysight-inc/HackerNews huggingface dataset:
This seems pretty oversimplified?

Especially when the point was comparison to finance and medicine, which have similarly male-normative histories.

A few decades ago medicine was at least as male-normative as tech; culture said nurses were female and doctors were male and that was that. But med school matriculants are ~48% female at this point. Some specialties are way more than half female, while others remain large-majority male.

Meanwhile, finance has hardly budged at all.

There's clearly something to learn here, and I think we're losing insight by just saying "tech is particularly bad" without actually trying to investigate.
Whats frustrating about these analysis is they ignore the reality of children and family life. The bias' mentioned, which are appear real and well evidenced, are secondary and complicating factors to the general problem of adapting family life to an urban, specialized economies.

Prior to the 1900's the largest companies in the world were only a few hundred employees and over 50% of the population farmed. That meant a significant amount of the economic activity occurred in family run farms and business where all family members worked together. The trend towards men working outside the home and women staying at home was a somewhat unique phenomena in the 20th century and in some ways-not all-a natural progression since manual labor jobs favor men.

While bias are real and need to be dealt with, I think attributing everything to them does little to solve the real challenge of how to harmonize specialized technical work, which at the current scale is unique to our time period, for large corporations, which did not exist prior to the 20th century, with the demands and realities of family life.

Having kids below the age of schooling is a unique time and one that many very competent women are not willing to sacrifice for career advancement. And since there is almost no part-time work for STEM careers, this has the effect of limiting career advancement for those women who choose to prioritize family life and may also account for the perceptions that create the types of bias' listed in the article.

I don't think theres an easy solution, and maybe not one at all, but without considering the very real component of family these types of accounts fall short.
One of the things about human software engineers is that they can make assumptions based on what the system is for. For example you may say that "this system has to accept payments from counterparties" and they will intuitively know that they are dealing with people's money, and to be careful of situations like double billing and the like.
Ökostrom is indeed big here, but the solar thing seems logical enough for me if you look at the policy picture: The German government needs to reduce the country's overall CO2 emissions by X percent over the next Y years to keep political promises. I mean promises in both the sense of treaty obligations, and also social expectations from its own citizens as you alluded to.

And it has to do that at the very same time that it is constructing new coal-fired power plants to keep the base load power it will lose by shutting down its remaining nuclear plants. So there is some urgency to this. Rooftop PV is really the only option that can be quickly deployed en masse through incentives, right across the country, skipping all that red tape you mentioned.

If solar in Germany can be very effective for half the year, then it is still going to make a sizable impact on those annual CO2 figures. So obligations are being met on paper while also having a pretty visible presence on the ground in cities and towns.
I've seen many women(programmers) go into project management and fly up the ranks. To get an architect or other higher level senior technical title male or female requires a devotion to pedantic study that few people desire to pursue(usually with marginal monetary value).
Absolutely not. I asked this when I started and it's 100% not allowed.
Re-reading it and checking out the demo on https://shattered.io/ it looks like it's even stranger -- some PDFs are "safe", so it may be that it requires the original document (and hash) to have certain properties to be able to generate a collision (but if it has those properties they may be able to generate them arbitrarily). It sounds like this is going to be reaaaalllly interesting when the 90 day window passes.

(also, should've mentioned in original post just for clarity -- I work for Google, but do not know any of the details of this work)
No, they can't chose the hash value. Or, to put it an other way, they can't find a collision for an arbitrary file, they can only craft two particular files that happen to collide.

See this image: http://shattered.it/static/pdf_format.png

The "collision blocks" is where the magic happen, given the two different prefixes (with the different colors) they have to craft two sequences of bits that will put the SHA1 state machine in the same internal state once processed.

Once the state machines are "synchronized" you can add whatever identical content you want to both files after that and it'll always hash up to the same value. You can't control that value however.
is sad to see this kind of article on hacker news...
We don't think that's what Facebook is doing :)
BitBet: A SHA1 collision will be found before the end of 2017

https://bitbet.us/bet/1351/a-sha1-collision-will-be-found-be...
It's not misleading, even if you have the device, there is no way currently on iOS to secretly do nasty things like remote audio and video monitoring.

Also doing all those steps you mention are meaningless is many cases because an attacker close to you (think bitter divorce or corrupt business colleague) can just grab your phone for a minute and your goose is cooked.
Yup, the employer-matched contributions are free money! You should absolutely take as much of those as you can. You'll always have access to the 401k account even if you leave the company. It doesn't matter a whole lot if your investments are spread across a bunch of different 401k providers/accounts.
Thanks for the comment! Yes, we understand your risk appetite, and we expose borrowers whose risk profile matches yours. We can also filter or limit as per your preferred purpose.
There are some highly skilled professions where career progression is almost solely driven by tenure.

Airline pilots are a good example. Their unions negotiate the pay scale based on years of seniority.

That's a huge tradeoff, of course. If you switch jobs to another company, you lose all of your accrued seniority.
This point seems to be getting re-hashed (no pun intended) a lot, so here's a quick summary: there are three kinds of attacks on cryptographic hashes: collision attacks, second-preimage attacks, and first-preimage attacks.

Collision attack: find two documents with the same hash. That's what was done here.

Second-preimage attack: given a document, find a second document with the same hash.

First-preimage attack: given an arbitrary hash, find a document with that hash.

These are in order of increasing severity. A collision attack is the least severe, but it's still very serious. You can't use a collision to compromise existing certificates, but you can use them to compromise future certificates because you can get a signature on one document that is also valid for a different document. Collision attacks are also stepping stones to pre-image attacks.

UPDATE: some people are raising the possibility of hashes where some values have 1 or 0 preimages, which makes second and first preimage attacks formally impossible. Yes, such hashes are possible (in fact trivial) to construct, but they are not cryptographically secure. One of the requirements for a cryptographically secure hash is that all possible hash values are (more or less) equally likely.
I know this is a huge problem, but I really dislike how this article is built on a house of cards, reference-wise. Almost none of the statements are backed up by viewable primary sources.
That sounds fine. I haven't done it for 500 miles but I've done it for 50mi, 40lb pack, all over 7000ft. Yeah, you're VERY tired at the end of the day, but I'd never compare it to racing anything but a car.

I've done 100- and 200-mile bike rides in one day, and foot races up to half marathon, and I'd absolutely consider those to be harder.

For one, the backpacking I could get up and do TOMORROW. The racing, not so much.

And the racing I could not do 2 days in a row. The backpacking I could do, again, tomorrow, for 2 weeks, without a doubt.
The way I've done it is create a swap file and set it's swappiness to 0 so nothing actually gets paged into it. Hibernation forces the writes so it will get used on hibernate.
It took several attempts at doubling down on the deception (riding the course on her bike and posting the Strava trace) and being repeatedly called out before she gave up and admitted it.

Not nearly as laudable as admitting it as soon as someone accused her of cheating.
Dominance isn't being phased out, it goes back to the great apes.

I dunno, I think if anything fuck you money will make me up the antics
Replication happens after publication. Why is everyone misunderstanding ZeroGravitas' point?
Looks like it's time to update the magnet link format to use a newer hash.
except a lot of women are delaying families.
Do you really want my thoughts?

The question isn't asked in good faith, so it doesn't deserve a good faith answer. The account was also created just to make that post. And yet it was upvoted by the community. And that speaks poorly of said community's ability to have a good faith conversation on the topic too.

For better or worse, this isn't a place that this conversation can happen productively, so it doesn't. There was a time that I and others would have happily had this conversation on HN but the community has changed quite a bit from then till now.
Sorry, bad at this English thing. He's *INCREDIBLE!!
If your REST API is documented in OpenAPI/Swagger spec, then you can use Swagger Codegen [1] to generate API clients (Java, C#, PHP, etc), server stubs (e.g. C# NancyFx, PHP Lumen, Python Flask, etc) and API documentations.

[1] https://github.com/swagger-api/swagger-codegen
Don't know about ECS but ECR (the registry) is a freaking godsend.
This was a weak field local race with no prize money. She cheated out the top 3 female runners for bragging rights, that's really it.

In a better stacked race her time would have been much further down in the AG ranks, not competing for overall.
I am glad to hear it gave you pause. As a woman who has a history of being influential and getting no credit for it whatsoever, which has real world negative impact on me, let me respectfully suggest that in the future you clearly state up front "posted with permission" and "name withheld to respect her privacy."
I haven't spent much time at 10k but I routinely go to 8k and have never thought twice about it. Wake up, drive to 8k, do a trail race, go home.
That article takes a system with 2GB ram as example. For a modern system that is pretty unrealistic, even Laptops have more. My system has 12.

I missed the mention of zram. Zram can create ramdisks, and compress them. It can create a compressed swapdisk in ram, basically making your ram last longer in case you really run out of memory. In my experience that is a good alternative to having a bit of swapspace as reserve, as the article recommends.
I am an intern but I work on Reason (https://github.com/facebook/reason/) and love it. The project is interesting, the people are smart and friendly, and the work culture is great. I far enjoy my project here than at two past internships; Facebook actually let me choose what I wanted to work on. Work/life balance is roughly the same as my past internship, but definitely not as hectic as Uber.

As far as perks go, I think the food and bike are tied in 1st place.
Another important distinction between physics and, say, psychology is that the latter studies aren't testing a theory, they're testing an observation. A particular observation sometimes leads to the widespread assumption that a particular effect exists, but without anyone trying to shape a theory about its cause, only that it exists. In physics by contrast, it's all about fitting an observation into existing theory.
Not sure what's more surprising, that Wix is so big, or that DA is so cheap.
I have to agree when it comes to the business perspective. I can't imagine how Docker is going to survive financially.

I use Docker at work, and I 1) don't have any loyalty to their brand and 2) try as hard as I can to abstract away their specific APIs.

For example, we use Convox [0] to deploy containers to AWS. I could care less what Convox and/or AWS are doing under the hood. They could switch out Docker for rkt under my feet, and I probably wouldn't even notice.

It is kind of like POSIX to me. My apps are designed to run in a POSIX environment, not specifically CentOS or Debian. And just like it's easy for a new Linux distro to come along, give me POSIX, and give me some other shiny features I like, it will be easy for any competitor to come along and replace the Docker interfaces I use.

[0] https://convox.com/
To me setting up a server/installation and maintenance is in the chore category of work so 1hr setup and say 15/min/month maintenance ~= 3 hrs/yr. Good programmer contracts can command $500/hr and the work might actually be fulfilling. 4hrs*$500 = $2000 pays for years of hosting.

Also you are not going to hit the top of HN on a regular basis as a casual blogger. Look at real data like your blog's historical traffic in the last year to get an accurate picture of the costs.
Finally! Congratulations to the V8 team for completing the switch to a sane compilation pipeline. :)

Hopefully this will lead to many more simplifications in the future.

Does anyone know which optimizations finally catapulted Ignition+Turbofan ahead of FullCodeGen+Crankshaft in terms of performance?
How many commits are there in total on Github ?
>Do you ever consider that when non-women who are given more opportunities it is because they are men? White? Tall? Are not bald? Have good teeth?
If that doesn't run through your mind, please don't suggest that anyone not a cis-male only gets there to meet the criteria of a diversity program.

In the absence of programs specifically and openly designed to promote and hire people with good teeth, I'm not going to have that as my default reason an under-qualified person was hired.

If I put together a program to emphasize building more blue cars quickly and then I see a bunch of new blue cars failing, I'm going to assume that the program resulted in lower quality cars being built. That might not be the correct reason, but it's going to be the assumption most people make naturally.
Six Steps to Superior Product Prototyping lessons from an oculus engineer
Wait, why would high-frequency traders care what people on reddit think? It's not like they're trying to sell their services to the public.

Are you sure you're not just seeing the usual flame wars over controversial subjects?
For anyone who's used Google Translate, it should be entirely unsurprising that the best "AI" we can cook up appears to be doing little more than rating individual words.

I admire the effort, but the tools seem to be so fundamentally lacking.
How come his beard isn't growing? It's freaking me out!

I did 50mi backpacking over 7k feet with a 40lb pack in 5 days, and lost 10lbs. Which is impressive considering even at my hardest training I have a hard time losing more than 1lb/week normally.
It is far-fetched 'cause it's not AFAIK true. My experience for this is having set up a GKE Kubernetes cluster last night, it was definitely running Docker.
A practical guide to having a remote company
I agree on both your points re: the paper - the author was very upfront about the methodology and the car thing was a bit of an eyebrow raiser. Sorry if I gave the impression I was accusing the author of dishonesty: I didn't mean to suggest that.

On road congestion specifically, the current 'mainstream' thinking is that variable congestion charging is probably a good way to price that externality. Weight also needs to be considered: large trucks do quite a bit more damage to roads than smaller vehicles. Unfortunately fuel taxes are a poor proxy for these kinds of externalities. That is to say, these should ideally be levied in addition to a carbon price. Singapore has variable congestion charging, but I guess it's a little easier to do if you're a small, autocratic island state.

For me, a carbon tax or cap and trade system are by far the best policy responses to climate change and air pollution. Although (at least in Australia) they are rather unpopular. My observation is that people (and politicians) prefer lavish subsidies for this or that 'green' technology, because there's a greater sense you're "doing something", plus everyone hates tax. Unfortunately, direct subsidies are also horribly inefficient and almost certainly will cost far more than just pricing the externalities and letting the market figure the rest out.

People seem to forget that the money being spent on these inefficient subsidies are their tax dollars, meaning the government has to cut services or raise taxes elsewhere (likely further compounding the efficiency cost of 'picking winners').
I find models like nearlyfreespeech.net where you pre-pay to be perfect for friends and family for situations where they have no idea if it will even leave the ground.
Damn it. And I thought it was for life, too. Welp.
How to Use Customer Avatars to Get Clear on Who You're Selling To
Thanks a lot! We will revert soon :)
Dense was incorrect, in retrospect. Let's say denser than stereotypical suburbia. Single family homes and duplexes, few garages. Subdivisions from around 1910 or so. Areas, which are acceptable for car-less living for some people, but not great.

I lived in Santa Clara without a car for years. It was not terrible. Where I live now is better, technically not a suburb, but a pretty suburban feel, mostly duplexes.
The severity between the preimage attacks depends on context.

For Git, for example, a first-preimage attack won't buy you anything, but a second-preimage could be potentially devastating depending on how lucky you get.

If Mallory wanted to make it look like you signed a document you didn't, second-preimage would be devestating. And with the demonstration of two PDFs sharing the same hash, this is a pretty severe one: many PGP signatures, for example, still use SHA-1. But even so, you could take some signature from any point in the past.
many acquirers focus on revenue more than profits because once ingested, the cost-side of the business can change dramatically. according to quantcast, deviantart is doing over 40MM monthly uniques. i suspect it is that reach (and not profit or revenue) that wix is actually acquiring.
>Is there any way to tell the OOM killer which program to kill first?

From TFA:

>Without swap, the system will call the OOM when the memory is exhausted. You can prioritize which processes get killed first in configuring oom_adj_score.

The linked solution document is only available to registered RH users, though, and the name is actually oom_score_adj and not oom_adj_score.

`man 5 proc` has details, but tl;dr is set /proc/<pid>/oom_score_adj to -1000 to make a process OOM-killer-invincible.
I'm not an Android developer, but I installed Android Studio a few nights ago just to play around with Android.

I'm not sure where the author's coming from, but the IDE seems fine to me. I use IntelliJ at work, so that's what I'm used to. Maybe there's stuff that an actual Android developer would have issues with -- more advanced features, but I thought that the tool was leaps and bounds better than the Eclipse extension that used to be supported.
The visual description of the colliding files, at http://shattered.io/static/pdf_format.png, is not very helpful in understanding how they produced the PDFs, so I took apart the PDFs and worked it out.

Basically, each PDF contains a single large (421,385-byte) JPG image, followed by a few PDF commands to display the JPG. The collision lives entirely in the JPG data - the PDF format is merely incidental here. Extracting out the two images shows two JPG files with different contents (but different SHA-1 hashes since the necessary prefix is missing). Each PDF consists of a common prefix (which contains the PDF header, JPG stream descriptor and some JPG headers), and a common suffix (containing image data and PDF display commands).

The header of each JPG contains a comment field, aligned such that the 16-bit length value of the field lies in the collision zone. Thus, when the collision is generated, one of the PDFs will have a longer comment field than the other. After that, they concatenate two complete JPG image streams with different image content - File 1 sees the first image stream and File 2 sees the second image stream. This is achieved by using misalignment of the comment fields to cause the first image stream to appear as a comment in File 2 (more specifically, as a sequence of comments, in order to avoid overflowing the 16-bit comment length field). Since JPGs terminate at the end-of-file (FFD9) marker, the second image stream isn't even examined in File 1 (whereas that marker is just inside a comment in File 2).

tl;dr: the two "PDFs" are just wrappers around JPGs, which each contain two independent image streams, switched by way of a variable-length comment field.
What I've always been specifically confused about, is if there's any point in giving a VM a swap partition inside its virtual disk, rather than just giving it a lot of regular virtual memory (even overcommitting compared to the host's amount of memory) and then letting the host swap out some of that RAM to its swap partition.

Personally, I've never given VMs swap. I'd rather have memory pressure trigger horizontal scaling (or perhaps vertical rescaling, for things like DBMS nodes) than let Individual VMs struggle along under overloaded+degraded conditions.
You start out with n amount of programmer time demanded from projects a b and c, given that you can do x with y number of programmer hours. So imagine that increased efficiency means you can now do 2x as much fantastic now you only need n/2 right!

Not so fast now that you can do more with less d, e, and f are worth doing and n+ are now demanded.

Basically simple economics says that decreasing price, the price for a given unit of work going down increases the demand for such. This is not realistically infinite however most of the world has a long way to go to catch up with the developed world and the developed world itself seems to have no end in sight as far as demand for automation and tech.

It would strongly look like until it doesn't is so far out on the time horizon that it is hard to predict anything at all on that scale.
Being a programmer is a lot more like skilled blue collar job such being a plumber or an electrician than we like to admit.

What kind of career advancement do those fields have? Pretty close to what we have. Maybe you supervise/manage a group less experienced tradesmen. Maybe you open your own small business or go freelance. The result is the same ceiling where real, continual advancement is on the business management side.
Something seems to be seriously wrong with the swap implementation on modern systems.

20 years ago on Windows 98 it just started swapping, but it was no big deal. If something became too slow to be usable, you could just press ctrl+alt+del and kill that swapped program and everything worked fine afterwards.

On the other hand, my modern linux laptop, it starts swapping, and it swaps and swaps and you can do nothing, not even move the mouse, till 30 minutes later something crashes.
Your wixness can be your strength...
Tabbing tends to be a military term as far as I'm aware

The MilFit community have brought it into mainstream usage. I don't remember not using/hearing the term hiking.