skysight-inc/HackerNews huggingface dataset:
There is no logic that justifies attempting to be "not another public company" if you are a public company.

Laws. Culture. Press. These things stand in the way of trying to be public while saying you won't act like a public company (by being a b-corp for example).

Public companies have functionally modular governance, which means if I don't like you (manager) and your ideas, my friends and I can buy enough governance units until you have to listen to us. It's not quite that straightforward but it's pretty much how it works.

In a way, it's similar to venture—you can try to escape the gravity of venture norms but to do that you need viral + network effect growth.

In the Market, you can try to escape the gravity of public company norms but to do that you need Amazon level revenue growth and the temerity of Jeff Bezos. Even then its an outside bet.

Rabois says startups should go public and I suspect his approach to the problem is he believes (im armchairing here) that the problem of founders hiding mistakes / making intellectually lazy decisions / not serving the financial goals / creating weird preference structures trying to raise money at scale from funds >> public market shareholders killing a geese for next quarters egg.
I'm not sure why that's the relevant part, but the part of the Obama administration responsible was CIA director Brennan, who was doing similar stuff during the G.W. Bush administration and just happened to give it an official name while Obama was around.

It's nowhere near the first kill list the US has had, it's just the first one called "Disposition Matrix". Previous administrations had other names. For example: https://en.m.wikipedia.org/wiki/Executive_actions_of_the_CIA
What I thought was more interesting was the ability to send money to Telegram bots. Maybe they are trying to take on WeChat as the "everything" app.
Work with mission-driven businesses. B Corps[0] are a good place to start. There's nothing quite like coming to work every day with a group of like-minded folks who want to make a dent in the universe.

My company, www.grove.co, strives to help families making it easy to buy sustainable products vs. conventional CPG. It seemed a bit crazy when we started, but now literally thousands of families get sustainable products from us every single day. It's hard to make a big impact on your own, but organizations and companies can do great things.

[0] https://www.bcorporation.net/
"Hi again Boost. So I've been working at my job now for about 8 months and don't think I'm getting paid enough as a Lead Designer -- barely making rent in SF isn't fun. Is it too early to ask for a raise?"

Would someone really want to confide that much of personal glimpse into their working life to community they barely even know, or even for their current employer or future employer to possibly see one day.

Not for me.
If you're on HN you're probably also conscious of your philanthropy being used for the maximal good, in which case you may be interested in projects like https://www.effectivealtruism.org/
The Earth at Night – NASA's Visible Earth Superb Interactive Map
What's the typical validity period for OCSP responses with Let's Encrypt? Shouldn't the stapled responses continue working for at least a couple hours even after Let's Encrypt goes down?
Not true. The policy was that you could work from home at manager's discretion, but full time work-from-home-employees were sort of rare.

Plus, they are ditching that as we speak.
> Or Uber.

There are plenty of companies 10x worse than Uber. Hivemind.
what's digital permaculture?
"I just struggle with understanding what's wrong with people these days."

On one hand, it is fundamental human nature (see https://en.wikipedia.org/wiki/Brave_New_World#Comparisons_wi...).

On the other hand, it is a trade off. Your post to HN can be mined, aggregated in a similar manner. Even a level before that, your access to the internet can be mined, aggregated and a profile built of you by your ISP. You are voluntarily cooperating with that are you not?
Warning - strong opinions ahead: Provide services and tools without the strings attached.

That is to say, provide email services that don't mine data for profit. Provide a social interaction space that doesn't attempt to manipulate moods, opinions, or sell its user's eyeballs. Provide an aggregation service with strong filtering tools in place of strong moderation. Provide a code repository with great tooling that doesn't include value judgements. Provide anonymous, secure communication between parties. Make mobile applications that provide wanted services without the in-app purchases, ads, or profiling.

The downside is that you're unlikely to get paid for it. You'll probably even lose money on it. In some cases, you'll even face legal pressure to stop or change.
Another thing with Chinese is that even though the writing system is universal the dialects very so much that someone from Hong Kong might not be able to understand someone from Beijing, Shenzhen, or Shanghai(not familiar with what dialects are spoken where). That said they're all fairly similar and can be picked up more easily once you already know one.
Godzilla Sequel: Sally Hawkins Returning, Charles Dance Join the Cast
This seems like a modern version of the old claim "Inuit have 100+ words for snow".
I've found that's true for most of the claims of "X language has Y words for concept Z!!!" Inevitably it comes down to one of two things:
-language X has a slightly different concept of 'word' than English does (such as allowing for conjugations to refer to past or future states)
-The english word is question has a variety of context specific meanings or applications (such as 'love'), and each one of those meanings, even though their context-specific meaning would never be misinterpreted by an english speaker, has a different word in language X.
I like working from home sometimes. A line is crossed for me when a company goes 100% remote.

I would go crazy working from home day in and day out. I actually did have a borderline nervous breakdown years ago because I couldn't take being alone so much of the day. In fact if I have to work from home full time again I would pay to have a membership in a co-working space just to be around other humans.

I think work from home full time reinforces the idea that programmers and anti-social and not creative. The opposite is true for many (most?) of us. And for people who are social and creative you need other humans around.

I say let people work from home but make sure they have the option of an office.
Ummmmmm but Uber made the world a better place? (for me anyway)
A quick search shows there are such things, there's one on Wikipedia for instance [1]. But it's hard to assess everything in a single catalog.

[1] https://en.wikipedia.org/wiki/Comparison_of_relational_datab...
That there are worse companies than Uber doesn't make Uber good, or even worth working for.
Kotlin examples on the site are not much different from Java ones. They're almost identical in length. Why bother to use it and add one more step for translation to a compiler chain that is already very slow.

Same with Scala. I once ported a Scala program to Java one and ended up with much shorter and concise code.
The Heroin Business Is Booming in America
I'd say that depends on which languages you already know. Go is a smaller language in terms of syntax. No generics, not OO in the sense that it doesn't have classes and inheritance etc. But if you're familiar with the Java ecosystem and languages like Scala, or something like Swift or Rust, Kotlin should be easy to pick up.
Open Beauty Facts – A free cosmetic products database
So in case this helps anyone, I had people complaining about strange OCSP errors all over the morning coming from my server (using apache httpd).

It turns out apache does practically everything to behave as dumb as possible in case of OCSP downtimes.

If the OCSP sends an error it will send the error as a stapled OCSP reply (instead of using an old, still valid OCSP reply). You can't make it behave sane here, but you can at least tell it to not return the error with SSLStaplingReturnResponderErrors set to off.

However if the OCSP isn't available at all apache will fake its own OCSP error (sic!) and send it. This is controlled by the option SSLStaplingFakeTryLater, which defaults to on. So if your firefox users get strange OCSP errors, it's most likely this. The doc for SSLStaplingFakeTryLater claims that this option is only effective if SSLStaplingFakeTryLater is set to on, however that's wrong.

tl;dr set both of these options to "off", then at least apache won't staple any garbage in your TLS connection, firefox will try to reach the ocsp on its own and fail and still accept the connection. Yes, that's all pretty fucked up.
Careful what you wish for. If your company works out a system where everyone can reliably work 100% remotely, you become a very replaceable cog. Replaceable from a much cheaper labor pool.
Anything is possible but I believe both parties have stated they're happy with their current relationship and no one is looking for acquisition.
TypeScript compatible (type-safe) Twitter API client
In principle, you could translate your code -- or even the generated machine code -- back to TLA+ and check it there. This has been done as research projects for C[1] and Java bytecode[2].

But the reality of formal verification is that we simply do not yet have the capability -- with any tool -- to formally specify and verify a large, complex software system end-to-end (namely, from high-level global correctness properties and all the way down to machine code). There are two options: either use tools that can do end-to-end verification like Coq and Isabelle and limit yourself to small software, and even then expend an inordinate amount of effort (like seL4 or CompCert, small programs that have been verified end-to-end, taking years), or use any verification tool (be it Coq or TLA+) for a high-level specification and verification without extending it end-to-end, for a lowered confidence. If you like, you can augment that with code-level specification -- like JML (Java), ACSL (C), SPARK (Ada) etc..

[1]: https://link.springer.com/chapter/10.1007/978-3-319-17581-2_...

[2]: http://ieeexplore.ieee.org/document/6042069/
OK. I'll just fire up my VPN to route around the 'problem-solving'. I'll use crytocurrency when I can to mitigate the 'good'.

> Which is why people have not and will never "learn" that lesson you are hoping they will

I don't think anyone will learn anything. We don't walk down the current path because people are learning. I avoid the shitshow the best I can. Money, tech, metathinking. You all can do what you want.
You don't.

The idea you can _do anything_ to _help_. Is mostly a myth people repeat so they don't constantly feel like shit for doing nothing in the face of mass social injustice by which they are (partially) the benefactors.

If you want social change, you need social action. Anything short is just rationalizing your guilt.
As a cycle campaigner I am using my programming/data/design/socialmedia skills to present information to decision in better ways.

1) https://cyclebath.org.uk/map/ This one has gone national and is up for a Creative Bath Innovation Award.

2) Using Census 2011 Data I've created a healthy cities and towns league index as well as spatial analysis on commuter behaviour. (6M people drive to work, of which 3.5M live within a 20 minute cycle ride) https://drive.google.com/open?id=0B4YARJgso6IxRjd1ZlNDZklGaX...

3) Worked with Bath Hacked and Strava to deliver a year of cycling in the city of Bath strava.bathhacked.org

4) Get involved in your local tech4good meetup.

Do not start from a "hey where can I use my skills for good?". Start with "I am passionate about X, what can I do to help X in anyway?"
Redundancy yeah! But does it have to be one of those 4? I'm getting slightly worried and very bored by their dominance in infrastructure.
Agreed, I should have included that.

But I can add another minus: ads as a monetization scheme are unnecessarily restrictive, since the only way for an organization to increase their prices is to jump from an ad-based scheme to a paid scheme, and this jump is too big in many cases. Instead, if we paid for everything with money (not with data), then pricing would be more clear and there would not be any threshold in changing prices.
Tink: new crypto library by Google engineers
Fair point: "predominantly" would imply >50% adoption. My argument was only one of timescales. But still ambitious.

I would still say that being truly autonomous is quite different to a "help you park" feature and having "assisted braking". Its all the gaps in between these tasks.

In the UK and I haven't yet seen a demo of a car driving down rural roads, let alone on UK motorways or in congested London. But with segregation I could totally see autonomous vehicles being swiftly adopted within a matter of months.

[edit] yes I know the study is about the US.
It works well. The resulting code often won't compile without manual changes on the Java side, but they're simple changes, and it does automate 90-95% of it. I've never yet introduced bugs this way. It doesn't produce idiomatic Kotlin, of course.

It's also a nice Rosetta stone while learning Kotlin.
Which actually is way better than C.
As individuals, we benefit from being in control of our computers. To maintain that control, good security is essential. So I'd say work on that, specifically on sandboxing and limiting the damage untrusted or compromised programs can do, re-writing crucial programs in languages immune to as many exploitable bugs as possible, maybe even try formal verification (for small but essential code, like OS kernels or filesystems), if you're feeling ambitious.
Hm, yeah I hope so too :/ Been using Caddy in prod for a year now, this issue, rare as it may be, could single-handedly get me back on nginx.

Having the server be unable to start through circumstances outside of the system's control is just such a huge no.
It's crudely phrased, but the quantity of posts which show up in opposition to anything that helps society at large at the cost of profits is remarkably high, and getting higher as time goes on.

All anecdotal, of course.
I am in depression so sometimes I get very cynical and very sick I go on FB to vent. I wrote multiple status posts the other day, some mentioning suicidal tenancy. In one of the posts I said I hate my life, my life suck. Well, the next day FB deleted that particular post, but left the rest untouched despite the survivors clearly are more serious mentioning suicide. I don't mind they deleted it I was going to anyway, but it's odd they would consider my own cynical comment about my life being suck as a violation of their community rule, but the rest aren't.
> By default, this feature is turned off. This closes a nasty open relay loophole where a backup MX host can be tricked into forwarding junk mail to a primary MX host which then spams it out to the world.

http://www.postfix.org/postconf.5.html#allow_untrusted_routi...
Sorry, I said Uber a bit provocative. I meant companies doing unethical things and asking you to do unethical things.
So now we have competing official React starter kits?
Or do work for those places if you don't find them morally questionable.
How a printer named with an emoji took down all Chrome instances on a LAN
Find a local nonprofit or other organization you like and ask them what tech help they need. Many small nonprofits are starving for IT resources, either for financial or cultural reasons.

It's not glamorous, but if you're willing to volunteer your time helping with an org's Wordpress site or making sure everyone is educated about phishing and 2FA, you can make a meaningful impact in your community.
RethinkDB transfer tool for MongoDB database
To The Author:

Please show us some numbers to back up the claims? The few numbers that you do provide either fail to support your argument or can be construed to contradict it. (I am thinking of: everybody wants to the option to work from home followed by 35% would change jobs for the option to work from home, even if it is part-time.)

Also, anecdotes don't cut it. You can find counter examples to almost anything that is based upon human nature, particularly when it involves self-assessment or personal opinions. Businesses will care more about the quantifiable. The bigger the business, the more likely they are to care about the average over a large group of workers (rather than individual cases).

I am sorry, but most of the debate over working from home is based upon what people want rather than what businesses or even their employees need. Your article does nothing to change that. If you want to change people's opinions, please be more persuasive by dealing with the quantifiable rather than the subjective.
Any simple reason why it's delayed for Android? Do the devs prefer the ios development environment? Do they have more iphones to test on? Are iphone users prioritized because they have a higher median income?
Did it make your world a better place, or just add a bit of convenience whose cost was distributed to people you don't know?
Don't forget: If you think ETSY is going to die, then short it, for FREE MONEY. Free except the risk that you're wrong, that is. So not really free at all.
>So first of all, this isn't a bot. I don't think a bot would be able to help with complex political situations very well.

Phew! That's actually a big relief. For the record, I wasn't just going off the commenter above who called this a "chatbot"; I also skimmed the site and saw a bunch of stuff about "advanced AI and Machine Learning", an IM interface that looks like the other new-wavey AI talk stuff, etc., so it all seemed to comport. You should definitely make it abundantly clear on the landing page that this is subscription access to real, human career counselors.

Now I have all the same questions about the backgrounds of these career counselors. :P What kind of vetting or training is done?

As non-computers, I think the situation is more complex; how can I ensure that one of the career counselors is not in league with a political enemy? If I spill my guts to this guy, what stops him from contacting my much richer, more powerful, more attractive boss and saying "Hey, Jim Bob just developed a crazy scheme to take you down, I'll give you the details for $DOLLARS_AMOUNT"? Just the belief that Boost is full of nice people who wouldn't want to do that?

Lawyers have to check to ensure that their firm doesn't also represent the opposing party before they can take a case because of the glaring conflict of interest. How can Boost ensure that myself and political opponent A are not artificially manipulated by Boost internal staff, sent into a feedback loop primarily designed to keep both of us subscribe to Boost as long as possible, instead of moving us up the power ladder to the point where we don't need it anymore? How do I ensure that my boss and myself don't end up being advised by the same career counselor, who would know both of our moves in advance, and who therefore couldn't possibly perform his functions in an effective manner for either of us?

While I think software-assisted politics is a much more interesting business model (not buzzwordy ML/AI BS, but a "political planner" or something to help evaluate and plan), I don't necessarily think that subscription access to human counselors is a bad idea. I just think that a lot goes into it, there are a lot of potential ramifications.

What's the typical use case/scenario for this? It seems like anything people would need advice on, it's risky to trust Boost. Everything else would be simplistic advice that everyone knows, but just doesn't want to do, like "Brush your hair better". Maybe they have specific grooming tips and point to a good hair gel?
You can see it in the many comments claiming that working at an ordinary day job or donating your income to charity is akin to the social good asked for by OP. It's a failure of imagination to assume that you can do more good for the world as programmer #9001 at Facebook who donates some of his income to effective altruism than as a programmer who adds all of her value to some other cause. A good programmer making 100k contributes far more than 100k value to the company she works at, so why not find a charity to which she can contribute similarly?
But pointing it out makes OP look like he just read some clickbait titles two weeks ago and is now some cringey Anti Uber SJW.
> Though I have to say that Xamarin has one big disadvantage - it adds another layer of sometimes leaky abstraction, and a whole new source of framework bugs to Android. So you spend a lot of time asking yourself "is this a Google bug, or a Xamarin bug, or my bug?"

This the main reason why while I dabble in all interesting technologies to get a taste of what they bring into the table, production code is always written 100% with official SDK languages for the system being targeted.
Real CPU's are formally verified for certain properties with rigorous tests. That's why they have only 100-300 errors in something with a billion transistors. That practice started after a recall. Now, for examples of full, mathematical verification of about every aspect you're looking at VAMP and AAMP7G.

http://www.spbguga.ru/files/Formal_Verification_of_a_Process...

http://www.ccs.neu.edu/home/pete/acl206/slides/hardin.pdf

VAMP is a pretty-complex, DLX-style CPU. I think they extended it to multicore or concurrency of some kind in another work. Original was single core, though. Passed all the FPGA tests. The AAMP7G combines a stack machine, over a hundred instructions, microcode engine, and separation kernel into one CPU. It was first in recent times in high-assurance security to use microcoding. I tell everyone to do that since it lets us easily change the behavior of the hardware without reverifying everything. Their tools also let you verify software semi-automatically against a model of the hardware ISA. Main stuff is paywalled but this is best free one I could get you. On availability side, they also run three units at once with a voter to reduce the odds the chip will fail. Truly high-assurance exemplar in availability and security.

The prover is ACL2. You can do a trusted checker for that in few lines of code. You might need a lot of RAM and CPU time, though. Even all that can be a few blocks verified by eye and hand that you just plaster over a bunch of silicon then verify correctness automatically. There's also techniques where a partial failure can be magnified into total, visible failure. Tandem/HP NonStop does stuff like that to catch and replace failed components before system downtime happens. So, you can be reasonably sure the components are working even if defects happen during fabrication.
The problem with work from home for companies is that they need managers that can actually evaluate someone's work. Most of the time this is not happening (either there are too many things to know or the manger never did any actual work for a very long time).

Also the problem is that companies want to hire the best and the brightest and then they quickly turn around and they don't trust their employees. Funny enough this is exactly how communist countries operated: they needed very smart people to fight the West but then they could not trust them because smart people had a tendency to like the West.
No need to use Ada, though. Similarly powerful options exist for Java and C. The code-level specification language is JML (Java) or ACSL (C), and there are many verification tools, from SMT solvers, through proof assistant obligations, to concolic or randomized test generation.

Nevertheless, you're never certain doing that, either, as you don't formally tie the code-level specification to the high-level specification. That's OK, though, because end-to-end specification is neither required for most software nor currently possible for anything other than small, relatively simple software.