skysight-inc/HackerNews huggingface dataset:
> Rust binaries are thus big, whilst you don't ship JVM binaries, you ship small bytecode.

This is not borne out by practical experience. While we've not experimented much with Rust, our Java deployments are significantly larger than other native languages like Go (and I expect Rust would actually be a bit smaller than that since it requires less runtime than Go).

JVM deployed binaries are large, not especially because the bytecode is large, but because you have to ship all the bytecode for all your code and all its transitive dependencies; there's no linker and the semantics of the language make it essentially impossible to statically prove that individual functions or classes aren't needed. You can trim it down with tools like Proguard, but that's a non-trivial undertaking and prone to error, which again you won't know until runtime.

Plus the drawback that you need a relatively large VM to run a JVM binary, but you can run Rust binaries completely standalone (out of a scratch container if you want).

> Go has the advantage of memory safety (via GC), plus better concurrency safety, which is lacking in Rust.

I'm curious what you mean by "better concurrency safety". My understanding is that Rust attempts to statically prove that concurrent accesses are safe (e.g. https://blog.rust-lang.org/2015/04/10/Fearless-Concurrency.h..., especially the section on locks). Go does nothing of the sort - it provides some nice concurrency primitives and tooling to detect data races, but the compiler does nothing to actively prevent it.
"The writing of Hungarian is largely phonetic"
So this program wouldn't work for hungarian. Oh well.
Your comment would look like this pronounced by me on an elementary level:
Jú kud ték a lengvidzs from ö diffrönt lengvidzs femili tu örrájv et számszing szimilár. For fördör ábföszkésön jú kud júz diffrönt trenszlésön.
Artsy Engineering
unless you're using MyISAM or something like that, all your queries are in transactions.

edit: also, I'd challenge you to prove that for a web request that needs to make ten read queries to a relational database, from Python, that you can get better performance by opening up ten separate database connections (or from a pool) and running one query in each, bundled into the async construct of your choice and then merging them all back into your response, vs. just running ten queries on a single connection in serial. Assume these are not slow reporting-style transactions, just the usual "load the users full name, load the current status, load the user's current items", etc., small queries common in a web request that is looking for a very fast response with ten SQL queries.

Note that at the very least, it means your web application needs to use ten times as many database connections for a given set of load. In database-land that's more or less crazy.
> A better method is to trade single asset retail CMBS bonds

Could be hard to short though, you got to find someone willing to lend you the bond, and this paper is not liquid
Also note many hiring contracts stipulate since you are using company resources and time they OWN what you are working on. I would give the person a stern warning then a firing. This is to protect all parties involved. If they are a contractor and working from home (not using company resources) then it is none of my business.
Yeah it's not something I'd ever allow in my contract either anymore. "I've never seen it enforced" just means you might be the first person to have a side project, not worth the risk if you can find a job elsewhere
Gigster (on-demand developer teams) is hiring in engineering, success and sales
> Where do you do sprint planning?

A church seems appropriate to practice that kind of cult.
I think there is a serious difference between a bit of HN in between compilation cycles to clear the mind, or a non-vital work-related automation that pops up when things are slow, and actively working on non-work related projects over a longer period. Especially to the extent you're disrupting your colleagues (as presented in the article).

If there is some thought that a side project might be relevant to the Enterprise then that gets discussed and agreed to before the work gets done. Outside of that: coding on "whatever" is about as desirable as reading the paper, watching Netflix, playing WoW, or sleeping in the bathroom during work hours...

If I'm paying for X hours a day and assigned tasks are done in less time, either I shouldn't be paying for the leisure or more bandwidth should be available to process more tasks. I do support building leaders at the office. I could never support subsidizing random startups out of my wallet with no equity or oversight. That's a mild form of theft and should be treated as such.

What kind of message does this send to the rest of the crew? What kind of morale will be created when someone is working in fifth gear on deadline while also watching their office mate flush away half the day?

Not to mention: tooling around at the office on non-work things to the point team members are complaining to their manager about the situation? Yeeaaaaahhhhh... I dunno what planet the "promote him!" commenters on the article live in, but someone needs a stern talking to with a clear eye to defending their continued employment. It's a great excuse for management to make a cultural statement.
> I would argue, security needs to be a part of planning day 1 rather than looked at as a bolt on prior to involving upper management.

Nothing I said implied bolting anything on prior to involving upper management.

ANY decision at any time during the process can be overruled by any MBA. That needs to change.
Getting that data "back" implied that it was yours to begin with...?

You at no point anted up the resources or effort to maintain that data, that was all them. You freely volunteered it to them in the name of 'convenience'; I don't see what part of that arrangement implies they owe you anything once you've finally realized the stupidity of that decision.

Life is not a series of 'okay, I learned my lesson, now please fix it for me' kindergarten tutorials. If it takes a significant loss of data you thought was rightfully yours for you to learn the value of data, then take your lumps and consider it a bargain.
Yeah. It sounds like his father killed himself, so now this guy is going to do it too, albeit in a more spectacular way.
DNS_AMPLIFICATION_REFLETION_ATTACK
Hi all
I live in swiss and i guess the best way to serv the whole net is:

Took your loopback device down.
Set a local ip address 127.0.0.0 :)

Set up your sub system in dev/auto/random to use port 0 for reverse engineering...

Override your bash scripy:
Sudo su
Sh
Su
Sudo sh
Su
sudo killall su

Then track the site you want to clone! First you need to track the ip and reach theyer subnet! Subnets are very easy to calculate with ipcalc...

Exampel for my small unix cernell: Nmap 127.0.0.1/0 0.0.0.0/1 --system-dns -P0 -Pn -o filename
0.0.0.0 os the endpoint amd 127.0.0.0 os ghe machine ip.

At the time you got the ip with the dns you can edit your dns file in etc/www/ or something like that

Then you are able to monitor the targetet site!!

Means you clone it and serv locally with the site they host... amd the dns you have cracked.. ;)

Tooks very long to reach the dns and clone the site!! But if you host a google site with the same dns they use its not possible to be tracked :)

Cause they cant shut down theyr own dns...

Its also possible to dns_reflect theyer pings and ddos the targeted server ;)

Problem for them is you have a local system address!!!

Dit you ever tested to track down your own system :S

Port zero is only for education research and science purpose! So the subsystem associates every connection with the incoming port... withou the need of open system ports!!

they got an incoming traffic of 60 PetaBites/second and it was only a test!!
What happend if more than one person reach the dns and amplify the ping?!!!!
At these time 9 of 13 root servers where down for houers... ICANN says they can do nothing against that kind of attack and it was not critical yet... ot os critical of the servers go down for mor than 24h...

https://www.google.ch/amp/s/www.theregister.co.uk/AMP/2015/12/08/internet_root_servers_ddos/
Yeah, this is the root of the conflict.

Web designers think web pages are like magazines, that they get to dictate layout. And most of the development in web browsers and standards lend themselves to that view.

As a user, OTOH, I think of web browser as my User Agent. I accept "polite suggestions" from the website, but ultimately I should have the last word about how it looks. The web was originally designed to work this way.

I'm not sure how to reconcile those views. I'm obviously biased towards the second, and I'd love web developers to be told to bite it. But this, unfortunately, won't work, because there are strong business pressures to the contrary.
People Who Train Robots to Do Their Own Jobs
The whole of that has been totally debunked and it's also illegal in many states.

I'm a contractor and I've been asked to sign some work I did over to the company I work for; it's very very clear what "The Software" is in the contract that my client was paying for, why make it so complicated?

"Your game designer works for a year and invents 7 games. At the end of the year, she sues you, claiming that she owns 4 of them, because those particular games were invented between 5pm and 9am, when she wasn’t on duty."

You have the option to specify clearly and record what you paid the games developer for; it's on you as an employer to show this and it's a ridiculous, straw man example. If you cannot prove that the developer did this work solely for you in exchange for salary then maybe you don't deserve to own these games.
Nothing I said implies engineers don't make bad decisions. What I implied is even the GOOD decisions can be overruled by any MBA at any time.
I don't know you but thank you for treating your employees as professionals by setting expectations and letting them deliver however they see fit. I've worked at places where they "treat everyone like a hammer" so to speak and if you are delivering but you're doing it like a screwdriver you're "not a team player". Simple way to describe it is a bizarre emphasis on culture fit over productivity.
Switch Your Site to HTTPS Using CloudFlare in Less Than 10 Minutes
Thats the problem, we have limited control on people making those regulations. So as a compromise less regulation is always better.
The NSA's crypto "breakthrough" (2013)
From the 2010 article ash linked to:

"The answer is to look at who controls the pilot's union: very senior pilots. The airline management is mostly interested in what percentage of its revenues are paid out to pilots; the distribution of the money among the pilots does not affect profitability. The very senior pilots on the other side of the table say "We need the most senior pilots to get $300,000 in pay and benefits." The airline's response is "The only way that could work is if we pay the new pilots $16,000 per year." The group of senior pilots responds "We can live with that."

Note that being classified as "junior" or "senior" has nothing to do with flying skills or experience. If Captain Sully were to start work today at a regional airline, he would earn between $16,000 and $20,000 per year, depending on the carrier, and fly as first officer. He was "senior" at US Airways, but is "junior" at the new carrier."
this is very interesting to see the discussion and suggestions here all leaning the same way "does he get his work done?" being the most important bit of information required to make the decision in a almost all of the responses.

i've always suspected that over-delivering and working hard grants some leeway - that results are king, even compared to politics - whether its working on side projects on work time or equipment, turning up to work still intoxicated from last night, sneaking off for a quick spliff at lunch time etc.

its interesting to see this at least partially confirmed.
You are far above average if you can be in "the zone" for 8h a day. The rest of us will just have to "slack" while you do the hard work.
depending on the latency of those database connections I've argued in the past that the overhead of adding asyncio context switching and boilerplate is more expensive than just hitting the two or three databases in serial (and if your web request is having to hit dozens of DB sources to serve one request, I think you've already lost the performance game :) ). When your one web request is contending with many other concurrent web requests in any case, doing the DB calls in serial just lets the CPU attend to other requests.
I've probably spoken with 3 or 4 Scots in my entire my entire life, and I've heard a few speak in various news/radio spots. Listening to a Scottish person speak really sounds like someone speaking English with a heavy accent. Seeing it written is nothing short of amazing.
That seems reassuring. I think I have panicked too soon.
I like this. I would love to see this being used in APT data exfiltration / DLP bypasses.
I've been manually writing some LLVM IR recently to prepare for a project involving JIT compilation, and LLVM's type system is actually shockingly expressive. The majority of the problems I run into are the fact that you have to copy-paste more often and that leads to errors.

I wouldn't recommend anyone write real code using LLVM IR, but it's not as bad as you'd expect.
Gender and verbs across 100K stories: a tidy analysis
Better Nuclear Power Through Ping Pong
Hardly metaphysics. As if anything that we don't have good language for describing must be metaphysics.

Think of all the progress in science and medicine there's been over the centuries, where we've developed understandings and ways of describing things that we didn't have in the past. The actual things being described always existed, we just didn't understand them or know how to describe them. It's got nothing to do with metaphysics at all. It's about our human limitations.

Speaking from my own experience, I had medical symptoms for over 30 years that I didn't know how to explain. There doesn't seem to be any existing concepts for them.

I have only very recently come to realise that they are probably due to some sort of nerve-related issues -- where this is the reason why they're hard to explain. Something is causing problems with the signals to the brain, so the brain doesn't quite know how to interpret it, which is why you get something indescribable. (or at least that's what seems likely to be going on in my case).
You should fire her because I understand both of the following two facts concur:

- If she told you during the interview that she would spend 2-3 hours on her work, you would not have hired her

- Your team is complaining about it, which means that rhe situation is toxic
Ah yes, time to go and read some Irine Welsh books again.

> Thing is though, Spud, whin yir intae skag, that's it. That's aw yuv goat tae worry aboot. Ken Billy, ma brar, likes? He's jist signed up tae go back intae the fuckin army. He's gaun tae fucking Belfast, the stupid cunt. Ah always knew that the fucker wis tapped. Fuckin imperialist lackey. Ken whit the daft cunt turned roond n sais tae us? He goes: Ah cannae fuckin stick civvy street. Bein in the army, it's like being a junky. The only difference is thit ye dinnae git shot at sae often bein a junky. Besides, it's usually you that does the shootin.

https://www.goodreads.com/quotes/809012---thing-is-though-sp...
Why are there two tides a day?
Ultimately there's a strong conflict here, about who gets to decide what gets rendered on my screen. I say it should be me (via my user agent, i.e. browser); web designers who treat webpages as print magazines think they should get to decide.
Honestly I don't care what those people think. Their judgement is bad and they should feel bad.
Hopefully I'm wrong, but I'm convinced that most net neutrality advocates haven't asked themselves these questions.

I can't think of a better way to challenge an idea than by asking questions.
Isn't it also low hanging fruit?

My napkin math says truck drivers are a MUCH higher % of ground shipping cost compared to airline pilot and flying cost.

Airlines have a lot of staff costs, but those would seem like it would be maintenance and ground crew which is even harder to automate.
First, tell me the number where the world became overpopulated? 5 billion? 3 billion?
BBC exposes flaws in 'world's most secure' email service [Nomx]
I guess words are now meagdfhhgffghgfexgbjkiuh your lips on a hand of your hands eternal love you can find a good man to take the pain and he will call you for a while you can find a way out of the way your room can take your breath and you put it on your face and you will be able yyy to the right to the world to be a good man and you can you get your life and everything else we can do it. Know what I mean?
Is the name Levandowski, by any chance?

"It seems Waymo now thinks that Levandowski was deceiving Google almost from the moment it hired him to work on the Street View maps project back in 2007. Google first had concerns when it found out that Levandowski was working with his own startups, 510 Systems and Anthony’s Robots, to build a self-driving car."

http://spectrum.ieee.org/cars-that-think/transportation/self...

via https://news.ycombinator.com/item?id=14205715
Leviathan framework: wide range mass audit toolkit
...this is real life, not the first chapter of an Econ-101 textbook.

Better?
Well, you can try to make people smarter (good luck with that!) or you could focus on something you can actually control such as delivering better software. Three things we as software developers normally do poorly that could help a lot:

1. Write decent documentation, i.e. actual user guides instead of reference manuals. Most software is under-documented by an order of magnitude and the documentation is simply terrible.

2. Write log messages that are meaningful to the intended users (end-users, sys admins, etc.) instead of "Error 3023: 0xFFFF flux capacitor initialization exception".

3. Make the software interactively help the user overcome the problem. Put some smarts into it. Showing an error popup and then crashing is lazy. Or worse, crash silently and then write a log message that the user can neither find nor understand.

Yes, people are dumb but we do a lot dumb things too. We should look at ourselves first.
Hockney was fully aware of this mechanism when he made these works, which motivated him to make them in the first place:

> For his part, critics often got Hockney all wrong as well, misinterpreting the intensity of the ways he would presently be engaging photography—taking literally hundreds of thousands of photos, coming to feel that the Old Masters themselves had been in thrall to a similar optical aesthetic—as a celebration of the photographic over the painterly, and specifically the post-optical painterly, when in fact all along he’d been engaged in a rigorous critique of photography and the optical as “all right,” in his words, “if you don’t mind looking at the world from the point of view of a paralyzed cyclops, for a split second, but that’s not how the world really is.”

http://www.believermag.com/issues/200811/?read=article_wesch...
I agree: the cynical Enterprise response would be to assert copyright over everything touched during working hours and all that entails. After that: take a peek at all other projects this person has touched during the employment period and look for re-use of code that infringes on what is now the companies IP...

If the employee was working on a startup, then they just got acquired at the awesome valuation of "not getting sued to death" :)

Contractors and consultants are another issue... though billing Customer A for anything but work for Customer A creates its own kinds of legal pain...
The advice I give everyone is to try it out first and see if you like it- it's not for everyone.

The worst is to complete to some sort of software engineering career track, without ever realizing you're not interested in programming. So you come out knowing all sorts of minutiae about software and having all these great opinions, but you can't solve FizzBuzz. Nearly every company in the country, large and small, knows how to filter people like that. Don't do that.
The Tough Immigrant Tree That Represents New York
They could also be suspenders for motor-gliders. Like these from the Netherlands:

http://www.amtjets.com/
I'd ask them why they're doing it.

I wouldn't ask if they're bored, if they're just not busy enough, if they're interested in a new technology, if they want to make the next Facebook, but a reason should come out of any discussion. Are 1-1s even regularly done? This sounds like a red flag on that.

The Quora question from a CTO, albeit of a startup whose financial situation may or may not be sensitive. But any kind of probing moves action from the employee to the prober. Less hours? More salary? Bonus? New role? Equity? They can't just promise something, as savvy people know such promises are empty.

In proto-corporate world, the manager's hands are tied much tighter. Promotions happen at fixed times of the year, or one-time-of-the-year only. Their budget is much more fixed. But if they are good at what they're supposed to do, manage, they will find a way, however too many managers don't think this is possible.
Quite possible. Not sure why that should negate anything I said. It is quite obvious that products like the Juicero are easily developed with MBAs at the helm.

If engineers run the shop you might even end up with another Uber. And we all know what a disaster that is.

However, at some level, MBAs and engineering need to be on level terms. If there's a conflict it can be resolved by going higher up the chain and both sides have the opportunity to make their case.
Test Reporting Like a Bad Food Critic
Wayback Machine now requires JavaScript
People should feel bad for using CDNs.
you pay me for working 8 hours and not for something else.

Actually, if you're a salaried employee and not being paid hourly, that's objectively false.

A salaried employee is paid to ... Well, it's up to the employment contract to decide.

Personally, if I hire someone on salary I expect them to estimate level of effort honestly to the best of their ability and complete work at a rate I consider acceptable. If I lowball that expectation that's really my problem.

And the reality is most employees would be dissatisfied with that situation, because most people want to do meaningful and challenging work. So if someone completes their assignments early and ends up filling their time with side projects, it's because I've failed to give them work that challenges them.

The only thing I expect from the employee is that they tell me when they're done so I know what's going on and can decide what I want to do about it (and that should mean working with them to give them more satisfying work so they don't leave out of boredom).
That is spot on I think, some people will spend a whole lot of their personal time on work tasks just because they like it. The issue could be with the colleagues that clock-in/clock-out and see him work on personal stuff and think they can do it too.
> I'm going home after 8 hours

Because you don't have competent technical management.

My team comes and goes as they see fit, we have the highest profitability margins of any of our departments so noone in HR bothers to tell me anything.

Edit: However, with that comes 3AM phone calls where I expect them to act like adults and do what needs to be done, so I'm not perfect by any means.
15+ Best Presentation Software Alternatives to PowerPoint (of 2017)
see my edit at https://news.ycombinator.com/item?id=14218862 where I propose a challenge to show that it's more efficient to use ten relational database connections for a request that needs to run ten small queries, vs running ten queries on a single DB connection.
Behind the Screens: The Code in “The Bells of Saint John”