skysight-inc/HackerNews huggingface dataset:
It's probably a little bit of both - they don't care as much when it comes to Android (since Android's "open" nature is one of its primary selling points) and they also don't control the entire supply chain like Apple does.

The latter is important: at the end of the day, software can only be as secure as the hardware on which it is installed. For example if someone can tamper with the hardware random number generator then your crypto becomes compromised.
I keep the cpu monitor part of the activity monitor running in the dock icon and keep an eye on it. It should be completely zero when I am not interacting with the machine. Maybe I am too old, but watching the cpu monitor on any machine I am working on is as natural to me, as watching the rev counter of my car when I am driving :).
You didn't miss anything. This is why these are good interview questions, because it weeds out the people who are asleep.
This blue-sky image of Pluto is absolutely stunning
Uber suspends self-driving car program after Arizona crash
That is unfair and hurtful, Chris. I'm encouraging people to support local business, not because I'm a luddite but because I don't want to see local business starved to death by global megacorps. It hasn't happened yet, and I'm pointing out a harder option, and in good faith. I'd appreciate it if you'd be open and clear about any objections you might have to this, rather than resort to sarcasm and innuendo. Thanks.
The Hidden Author of Putinism
Yes, IMHO they know. Their Chrome security model was required reading in CS 261.

https://people.eecs.berkeley.edu/~raluca/cs261-f15/

But to me, they seem to be trying to find a moderate level of security with a profitable cost of goods. It doesn't seem that their heart is in it the way Apple's is with the Enclave. iOS is still breakable at the nation state level but well that's quite a high bar. Nation states are breakable at the nation state level.
No, UTF-8 is the same everywhere. What you're confused about is the fact that for a lot of strings there are multiple different unicode scalar value sequences that represent the same user-visible string. This is the difference between composed and decomposed characters. For example, é can be represented either as a single scalar value that represents e-with-acute, or as two scalar values, a regular e followed by a combining acute mark.

On HFS+, because it normalizes, if you try to pass either form to the filesystem, it will treat them the same. But on filesystems that don't normalize (which is most of them) they'll be treated as distinct files. As a result, depending on the input you provide and whether the tools in question do any normalization, you could end up with two files that look identical (e.g. your two "hällö" files) but are different unicode sequences under the hood.

And none of this really has anything to do with UTF-8. UTF-8 is just a byte encoding scheme that can represent all valid unicode sequences.
I dunno. We have spent a couple of millennia trying things and taking whatever is effective. It may be unreasonable that something is effective, but I can't convince myself it is so.
>Then Amazon will experience what every other company does that gets burned for selling counterfeit goods... the FBI will raid their warehouse and hold all the inventory as evidence until they complete their investigation

You'd be surprised what being a big company can do to protect you from such actions by the FBI.
This is one of the most insightful comments I've read on HN and it explains the factors at play when a big company won't respond to issues the outside world can plainly see are problems: The stats are good, the stats measure the wrong things, and whoever inside the company first suggests that a change is needed will probably limit their career.

It's also a good explanation of Apple's non-response to their increasingly poor software quality and their de-facto abandonment of the content-creator market.
I have found that some older employees have decades of valuable experience.Others have one year of experience repeated thirty times....
The additional length is a boon here. I don't think that the provided insights can't be properly disseminated in a few short paragraphs. The article does a fantastic job of distilling some of the fundamental dynamics involved in building software.

Anyone know of good places to find other similar high quality content about software development? I really appreciate when experts are able to effectively communicate the most important pieces of their painstakingly acquired mental models of complex topics.
Morgan Stanley: Tesla Model 3 10x Safer Than Average Car
As Keynes (or someone else [1]) said in a somewhat different context, "The market can remain irrational longer than you can remain solvent."

[1] http://quoteinvestigator.com/2011/08/09/remain-solvent/
https://news.ycombinator.com/item?id=13954632
If you are not using Microsoft Edge/IE or an app, you are limited to 720p.

BTW, if you want to force a bitrate on Netflix, press [Ctrl+Shift+Alt+s].
That looks like extremely irresponsible disclosure? Publishing to GitHub and then "edit: I contacted apple"

????
Geogessr: Guess where you are on Google Streetview
People say it anonymously on the Internet because, if said in the public square, they are often faced violence and censorship rather than rational discourse.
https://news.ycombinator.com/item?id=13954323
I'm sorry for posting a vacuous comment on my own submission, but... wow. Just, wow.

When I was born we had not yet landed even an unmanned spacecraft on the moon. We had a Venus flyby (Mariner 2) and a Mars flyby (Mariner 4) and that's it. The pictures looked like:

https://nssdc.gsfc.nasa.gov/imgcat/html/mission_page/MR_Mari...

And now this.

Wow.
It makes sense. It is not age bias, it is knowledge bias.

You may be a good employee when you have experience, but you may also know what to expect from a "good management", like paying the hours worked.

For instance, I have been literally barred from an interview because they made explicit references to young people being more flexible about accepting to work (way) more than the announced weekly work hours on the contract for free. I said I would accept without making a fuss, they did not trust me.

Actually they were right; if you try to trick me, I will do too.
To be fair, almost all the problems after 6 are just variations on BFS and DFS, just different ways to ask the question.

For example, (11. Check if an undirected graph contains cycle or not) can easily be solved by just performing a DFS with some exit conditions.
What this Node module offers is not raw sockets - let's not spread misinformation. ;)

https://en.m.wikipedia.org/wiki/Raw_socket

It does not even offer real access to a TCP socket, for example you can't set any options or flags in the TCP header of a packet. All that it provides is a way to open a socket and send / receive data. Very useful, but not a raw socket.
TypeScript's Type System Is Turing Complete
Thanks for the clarification! Can I upvote you twice?
Timeline of Solar System Exploration – Wikipedia
>" ... My impression is that usually, in my experience, they're very jaded and set in their ways. They seem to like to do things their own way and give the impression that they're infallible because they deconstructed an x stack in y decade ..."

Remove the word "decade" and that could describe people from just about any demographic in tech - millennials, Gen X, etc.

>"and complain about the cyclical nature of programming"

How is complaining about that particular thing different or worse than complaining about why language X sucks because it doesn't have generics or feaure ____" or any of the other complaints about various languages or frameworks that come up on HN all the time?

>"They also seem to usually not go out to happy hours/events with the team to get to know one another as often, so they're excluded a little more, which leads to fewer people getting to know them."

The only way to get to know people is to go drinking after work? You know you can go out for coffee and lunch with people too right? Or is that somehow less meaningful because it doesn't involve booze or craft beers?

Honestly your comments come off as ageist.
Uber grounds entire self-driving fleet as it probes Arizona crash
The most annoying thing with the new power connector is the lack of a light indicator showing that your laptop is charging.
Matroid can watch videos and detect anything within them
Has the image changed or something? In its current state, I have a hard time seeing how anybody could misunderstand it...
> I see people as young as 25 being set in there ways as well when it comes to the latest hipster trends

I once watched a fistfight almost break out in the office over threads vs. event loops. Both engineers were in their mid 20's (as I was, at the time).

From my limited experience, pig headedness seems to be a personality trait - not something intrinsically age related.
This is the term used in Out of the Tar Pit IIRC.
No. From my point of view, not at all. From my point of view you are actually at a very priviliged position.
A few other comments that you curiously did not reply better explain why there is no exploitation here.

That said,I am not one of those people that think that privileged people should not complain. At all. Every has the right to try to improve their life. In your case, I believe you should practice negotiation. Try negotiate your salary. If dont get a raise and dont get a better offer elsewhere, maybe you are earning a fair salary.
Try negotiate the deadline. Explain why is asking too much to do all that in 4 months. Maybe you will learn that their expectations of quality are much lower than yours. A logo and a website can be made on one morning if there no expectations at all.

Or maybe you will end up your negotiation with a raise and more time.
Fired as in just fired, though I'm not sure, since they are well connected to the school's main operation.
Mmm? Secure enclave is present on most Android devices and is mandatory since Android 6.0.

(It's just called something else.)

Historically Android has been lagging behind a bit from iOS devices when it comes to security, but Pixels and their software have a very similar security model and design (with some exceptions - less granularity with file-based encryption and some other mostly minor details).

Non Google devices however are usually significantly less secure - not so much due to Android design, as due to manufacturers deliberately disabling Android's security featuers (e.g. only Pixel actually uses dm-verity at this moment if I remember correctly), refusing to update them, building devices with bad trustzone drivers... etc.

If you keep to the 1st party (Google-branded) devices like in iOS world, you're mostly ok.
A list of Apple ID's isn't exactly a big deal. I've got mine listed in my HN profile.
Or athletically minded parents tend to have children on certain months.

Correlation is not causation.
Freeciv WebGL 3D Development Status Update
I never thought to equate my PR when I see a great library/framework/tool, with my kid's PR (puppy request) as we pass a pet store.

My eyes have been opened. I am enlightened.
I feel like Google has a bunch of teams working independently on things like this and somehow don't have to check with some central assurance party before releasing their competing products.
> The nuclear triad is our backbone.

Nuclear triad is defense against 3 countries in the world who can realistically hit USA (Russia, China, somebody else). F-35 will project power to the rest 193 countries and hostile organizations. There is a little way nuclear weapon could help USA to fight ISIS or Al Kaida. F-22 is very niche product. Less than 200 jets is too little to support USA's global ambitions, and they can't be air-carrier stationed, and project power across the globe. It is not clear if dogfight is the thing in the modern world. Also F-35 may be good for ground support, future will show.
Simultaneous tracking of spin angle and amplitude beyond classical limits
or blockchainified ;)
And what exactly would you do with those Apple IDs? Just knowing the email address doesn't really get you very far.
Because of the nature of HTTPS, combined with Websockets, would give you a really easy way to proxy yourself out of restrictive internet situations. Use an HTTPS connection to Google to domain front to an App Engine instance that has this running on it. Now you can TCP to anywhere from anywhere and it just looks like HTTPS traffic to Google.
Harvard Scientists Plan Geoengineering Experiments
Typically schools get between $4-8k/pupil/yr. Rich neighborhoods get more, owing to the greater property taxes collected and the ratio of local/state/federal (approx 50/43/7 in CA). Rich ones have a lot of other resource advantages but that's a discussion for another place.

Critically, there's an big economies of scale advantage in schools relative to homeschooling. Resource specialization has advantages. Just spitballing, I'd imagine the curve would show it's at least 2-3x cheaper to provide an equivalent education to a student at a mid-sized school relative to a student in a 5-student homeschool environment, and probably 5x+ for single student - obviously depends on the parent's earning capacity and skill as a teacher. The argument for homeschooling is almost never about cost though, due in part to this enormous disadvantage.
Apples and oranges. This tool is a proxy not a VPN.
I believe HFS+ was created before Mac OS supported surrogates.
Literally every company is going to have some non-zero number of security leaks. I don't think it's reasonable to be disappointed in an entire company because of a bug written by (likely) one engineer. God knows I've written my share, but none of my software is on routes easily accessible to the public. Unless it's part of a larger pattern, this reaction is going to lead to you being disappointed with 100% of producers of software, past, present, and future, which doesn't seem like a useful state.

Incidentally, in the list of IDs you published, are those real? If they are: that's BS that you are publishing real people's IDs, and I'm also surprised by the number of numeric qq.com accounts.
I've been following crossbar for 2 years now, wrote some doc and tutorials for the team, but only this week have I finally used it in production. Made a real time dashboard for a big transport facility, coupled with vuejs and django.

In short, it's a fantastic piece of software: RPC and Pub/Sub can't be easier and cleaner. The fact it also packs a process manager, a static file server and a WSGI servers makes it amazing.

But we really need a framework around it because right now it's a lot of manual work.

It would probably take a year or so to make something worth it and not "yet-another-microframework", but I've been studying the beast for some time and using it would allow to create a Python framework loaded out of the box with:

- full async web (and non web) microservices

- live settings, including routing

- task queues, with PUB/SUB talking directly to the browser

- task runner, including for building static assets

- advanced cache busting strategies

- hot reloading to help you in dev, or to deploy in prod

- load balancing and fault tolerance strategies

On top of the regular features.

Additional stuff we could add, not related to crossbar:

- configuration framework (there is literally no good general solution for configuration management out there. The less terrible being pyramid's and zope's)

- life cycle and error handling helpers (this is somewhere async framework fails big time) with clean logging, event model and debug tooling.

- wrappers offer a micro-framework like API that you can unfold into a full-scale framework when your needs grow. Aend not just one or the other.

- clear story for DB. Qraphql is something to explore but it's a hard topic, with bad asyncio support for ORM and nosqlite db.

- 2 pass template rendering. Meta template generating templates, then generated templated used on the fly as views. This allow many tricks like pregenerating translated page, URL routing, static assets name based on hash, etc.

- administration web console, not for the database, but for the project itself.

We really need something to compete with new gen frameworks in Python. Right now there is nothing trying to be on par with meteorjs and the likes.

The trap is that Django is good enough right now, so investing the time and resource into dev something THIS new is hard to justify. And I read the code base, it's not easy to groke (async never is anyway, but here you have to manually deal with the event loop) so finding a team would be hard, and doing it alone even harder.
>It's a good idea until you end up with two files that have the "same" name (eg. Amélie.jpg and Amélie.jpg) because one uses decomposed characters (U+0065 and U+0301) and the other one uses a single character (U+00E9).

It's still good then. And several systems allow for that just fine, including VMS (uniqueness comes from more than the filename). This is more alike real world folders (which can have identical items, e.g. two copies of the same paper), and is also an excellent way to keep different document versions (keep the name the same, change the date shown).
At first I thought you meant for the entire education, but primary school is not 12 years. So I thought you meant per year. Even covering primary school, your figure of $200k is off. If you meant all of schooling, including middle and high school, then it's closer.
All form objects in HTML 5
Make no mistake: developer productivity has VASTLY improved.

We still hit some pretty fundamental limits when making a feature-rich product though.
Ask HN: How to best release “Windows desktop software” in wild?
I am going to be releasing a windows desktop software for sportfist.com in wild soon and need HELP.

What steps did you take to maintain control over your software?

How often did you ping your server with what information?
Which obfuscator did you use?

How did you make sure that software becomes useless on license expiry (given that most of the obfuscation can be reversed)?

Which software did you use to update your app (squirrel, clickonce etc)?

What's the cheapest way get certificate?

How did you get error log back to server (given that log files can be bulky & smaller log files might loose relevant info)?

How did you password protect your sqlite db (ilspy can be used to reverse any password protection strategy)?

How did you minimize support effort for your software?

Anything else I should keep in mind (release checklist, tips)?
Loose Language: Noble V. Samsung
The current modularity is important, because the market thrives on it. TB3 enclosures are expensive; to duplicate that cost across every graphics card sold would be expensive.

Yes, it'd be smaller. But the increase in cost would not be worth it for the current niche market. Until TB3 penetration across regular consumers (as compared to the techie niche) goes up, there's no point in making slick consumer-market pre-builts.
> it gave the impression of focusing on the word "everywhere"

That's precisely my understanding of it. I am a native English speaker (British English).
Exploring Expressions of Emotions in GitHub Commit Messages
>If filesystems are using binary data for filenames, there can be a case when is really no way to address a file by typing its name, even if you can type in that language

You could do that trivially in UNIX since forever.
> debugging js build chains

I just spend several days trying to build a deb package for a opensource native C project (fontforge).

It was no walk in the park either.
Launching v2.0 of Zero Bullshit CRM
We are launching version 2.0 of Zero BS CRM for WordPress. 1 year on. It's matured a LOT. Hope you guys like it https://zerobscrm.com/extensions/
Any solution you come up with must work with replacing existing software piecemeal, or it's no solution.
Yeah, I'm not sure either, that seems to be an editing mangle.

The bit about "it's safer to train the model and observe its performance", though, is reasonable advice. The main problem with multicollinearity is that it gives you a model with poorly-defined coefficients - that is, their standard errors are high. That's a big problem if you're coming at the problem with a statistician's mindset and trying to come up with a parsimonious model with statistically significant parameter estimates. If you're just going for the best predictive model you can get, though, then you don't necessarily care about super tight standard errors on all your coefficients, so it's not such a big deal.
Are the findings dated?
But you won't have access to the file system unless you further modify it.
VTOL aircraft have bigger issues than full sized carriers. The Harrier that the Marine's currently use has a terrible range and payload.

Also there are carriers that carry full sized aircraft that are smaller than US Marine carriers like the French Charles de Gaulle.

The US marines would like full sized aircraft carriers just like the army would like CAS jets.
Glad you recognize it for what it is: bias. This is exactly what prejudice looks like. Take a small sample, derive a generalization, rationalize it, let it affect your judgement. At least you're aware of it, and hopefully fight it within yourself to try and work with the most talented people regardless of background.
I've seen this a few times now already - a GPA over 3.7 or so is a red flag for many employers - I think they interpret it as "does little outside of school".
>What do slaveholders think?

Not anything that different from "sweatshop" employers or any shitty employer for that matter.
https://news.ycombinator.com/item?id=13951092
Ageism is just poor leadership. By that I mean discrimination purely on the stereotypes of older workers is a response to one's own failings as a leader.

Think we don't like to go drink with our friends? Don't like to learn new things? LOL. If I would rather go home than drink with you once a month then maybe you should take that to mean you're a bore. Maybe be pleasant and interesting?

If I don't like to deploy on new stacks for the sake of deploying on new stacks maybe that's a strength? If you think I can't be motivated to use something new that is legitimately better then maybe you can't articulate your ideas well? Maybe you aren't very inspiring?

If you think I can't work hard because I don't do long hours that's on you. Maybe you should stop wasting my time at work and get out of my way so I can get the job you pay me for done during normal business hours.

I could go on...
If Amazon is knowingly selling fake items, that is a criminal offense, and the company should be prosecuted and put out of business.
My interest in this is adding a 10 GbE SPF NIC to my 2016 MBP running macOS (you can find drivers for 10 GbE, but tradically not yet for 25 GbE cards). I don't know if has been tried yet.
Enjoy! :)

https://tools.ietf.org/id/draft-loreto-http-bidirectional-07...
Æternity – a scalable oracle machine – testnet and OS contribution campaign
Both arguments are not equally plausible though.

The argument for the compounding effects of physical advantage relative to peers is a lot stronger than the supposition that parents would happen to have children on certain months.
Yeah, they fixed it... +1
I've always been intrigued by the age requirement to become an air traffic controller--a federal job no less--which is under age 31 [1]. I recently came across the study [2] that preceded this rule. An interesting read.

[1] https://www.faa.gov/jobs/career_fields/aviation_careers/
[2] http://libraryonline.erau.edu/online-full-text/faa-aviation-...
for open source development contributions https://blog.aeternity.com/security-transparency-simplicity-...