skysight-inc/HackerNews huggingface dataset:
The five combined have a total headcount of roughly 660k, meaning they would need to be hiring annually roughly 7.5% of their total just in software engineers. At that level I don't buy it.

Since the number is dominated by Amazon, who has a huge logistics contingent, I'm not sure specifically about engineers. I'd say roughly half of that total is engineers that have something to do with software (not necessarily software engineers). That bumps your number to over 15% of the total engineering headcount. I'll be conservative and say 25% of the engineers are not software (with most being in Apple and Amazon). Now we're looking at 50k being 19% of the total software engineers.

You seem to be talking about hired at all levels, while I was talking about only senior hires. In that case, I am closer to you than I indicated. My (possibly wrong) impression is that the majority of hiring by these companies is new grads and juniors, since that is what their interview processes are heavily biased towards. I put the total number of senior hires at 10k - 15k.

As for total hires overall, I'll buy either your total hires or your retention rate, but not both. These companies are not growing headcount fast enough to be doing that much hiring at that retention rate in software engineers alone.
I was thinking the same about Jupiter - the space around Jupiter is horrifyingly radioactive because of charged particles. I wonder if a manned spacecraft could be protected from these particles with a VLF radio field?
Parsing RSS and Atom feeds is a solved problem, no?
Etsy first started losing their appeal when they gave up even pretending to not allow Alibaba resellers, and lost the "hand-made" distinction that made their site unique.

Currently they're going through a round of "let's alienate all the small unique sellers that are still using our service" by changing their payment policies. Sellers are being required to accept Etsy's payment processing, where before accepting Paypal was sufficient. Signing up for Etsy's payment processing requires giving Etsy a whole bunch of private information that a lot of sellers (at least in the internet circles I run in) are not comfortable giving out to Etsy, especially sellers that do not live in the US.

Etsy is quickly losing the sellers that make their site worth visiting to Storenvy.
The article is missing the similarities between Swift Optionals and Kotlin Nullables.

Swift code:

var name: String?

name? ///returns a safe value
name! ///returns an unsafe value and throws an exception in case of a nil value

if name != nil {
///Now we can use name! forcing unwrap because we know it's not nil
}

if let unwrapedName = name {
/// Here we can use unwrapedName without forcing the unwrap
}

The null checks are almost the same in Kotlin: https://kotlinlang.org/docs/reference/null-safety.html
Restore from backup.
HP Unveils 160TB RAM HPC Cluster
Yes, and it may also screenshoting the pixels around where mouse clicks, so I don't think it can prevent keylooger. OTP is better solution.
Some types of Maglev use permanent magnets: https://en.wikipedia.org/wiki/Inductrack
As irritating as this is my bank's app which implements its own soft keyboard, so not only can I not paste my (complex) banking password, the password manager doesn't recognise it as an input.

Since I can't have the password visible in the password manager on the phone at the same time as the login prompt in the app, this means that I can only use the bank app if I'm 1) next to another device I can get that password on or 2) if I write the password down on something.
I know that Battle.net does this :( I went to change my password and I couldn't paste the new one I had generated. Motivated me to install a simple Greasemonkey script to override that.
Passwords were already almost universal even before ANY encryption, during the early days of the WWW and before that too.
The Bus Stop (2010)
Some old discussion here:
https://news.ycombinator.com/item?id=6732110
This whole discussion is a good example for everything that's​ wrong with computer security. Instead of coming up with solutions that make it easy for people to follow good practices the "experts" make it even more cumbersome. Most people just want to use the computer and not think about security.
Fooling Fintech AIs Part 2: How to Fool the Machines
A $5 instance on DO has significantly more resources than on the equivalent cost box on EC2

https://uncrunched.com/2013/08/07/digital-ocean-v-aws-10x-pe... for an old comparison.

EC2 is, and always have been slow and expensive. its the other bits that make it compelling.
My company tried to migrate to Gitlab.com and had to migrate back off after just a few days because of how awfully slow it is. It has soured our view even of the self-hosted option, and since we would probably need some of the EE features we don't really have a desire to try it out.
Mono Garbage Collector Update – Concurrent GC
The idea of passwords being something you remembered, died out when we started to see a proliferation of systems needing passwords for authentication.

Humans (in general there are some exceptions) aren't very good at remembering large numbers of arbitrary long random strings.

So using a password safe and then copy/pasting into the relevant dialog is likely to be a better option than relying on human memory (which inevitably means for most people using the same password in many places)
Keep in mind Digital Ocean doesn't offer managed database instances or services. So all the OS patching, security updates, deployment management, web server + DB configuration nuts and bolts and scaling will be on you, taking more time. You may save some cash but you will lose time.

If you're very comfortable managing servers and your goal is to keep costs very low then it go for it. If time is more important (likely) then stick to what you have, then migrate only when required and you have a real business case for the move.
For comparison, the invoice provided by Azure is inherently itemized. "X hours of Compute at Y rate", "X units of storage on PREMIUM/STANDARD storage type", etc.

Edit: Sample invoice: https://www.microsoft.com/en-us/download/details.aspx?id=388...
Ah, blame everything on the white men. What an unexpected conclusion.
> Back in the 1990s MS was a good company.

It really wasn't.
First, the person above you didn't say anything about caring about the underlying ideology; they said that they cared that the project seemed to them to be an art project designed for ideological purposes and unlikely to succeed as a result.

Second, people definitely do choose their linux distributions based on ideology. The Debian project, in particular, has a very well established ideology. They also choose which distributions they spend money on or donate money to (the relevant comparison to purchasing stars as discussed here) based on ideology.

Third, Urbit is a different category of thing from a Linux distribution. Urbit is a network. A network designed and organized based on a particular principle can impose that principle on the way that people on the network act, interact, and relate on the network in ways that a Linux distribution cannot. I am not certain whether this accurately describes Urbit. Statements from the project and its developers have suggested to me that this has been a goal, but they may have retreated from that since.
This would never fly in the US. Determining career paths based on exams at ~age 10 based on exam scores would almost certainly result in a disparity between inner-city kids and their pre-school educated, suburban counterparts. People would not tolerate the likely racial inequality in outcomes.
Switched jobs 6 months ago into using Kotlin + Spring boot and so far everything has been enjoyable and productive. While I'm not a fan of Kotlin doubling-down on null, I still enjoy using the language and came up to speed within a week. Hardest part has been deciphering the word salad that Spring uses.
I'm not even sure what you're implying.

EDIT: Is it that we should build it ourselves, and not trust the binaries?

EDIT 2: Well, whatever it is, I moved away the binaries and just built it again myself. It was trivial; just type `make` and it's instantly there. (I guess you need gcc and stuff)
But will it be available outside emerging markets? AFAIK Android One was not available in Europe. Screenshots of YouTube Go app suggest India as main market.

It's sad, because I wanted Android One, now I would like Android Go. However I fear that it will be "unavailable in your country".
Reefill wants you to subscribe to drink New York City tap water
Yes. There's a link to that blog on http://www.baesystems.com/en/cybersecurity/home
Digital Ocean's internal support infrastructure has caused us a couple headaches over the years. They appear to have fixed some of these organizational shortcomings over the last 2 years. Still, you should not expect the level of support you'd get from an expensive managed provider from a self-serve more-automated startup.

About 3 years ago, our instance got shut down over the weekend because a spammer in Germany reported it for serving an 'infected' file while attempting to advertise their MX scanning service. Said file had a false positive in ClamAV (common for Windows EXEs) and only ClamAV. Digital Ocean shut down the production instance with no warning and then told us about it via ticket. It took hours to get a response and when we finally did, the instance could not be restarted (DO at the time had a bug where the kernel indicated in their admin had to match the kernel in the image or it could fail to start). Total downtime was 2 days if I recall correctly. The security spammer took out our instance 1 or 2 more times before DO finally either blacklisted them or correctly noted that it was a likely false positive. I got a few months credit for this issue at the time.

About 2 years ago, DO had an issue where they shutdown networking to our production instance because they detected a "Brute Force attack" originating from that instance. The detection was due to an increase in downloads because we'd released a new version of our software coupled with, yet again, a false positive in ClamAV (and only in ClamAV)... though in a separate copy of software on the same server that had been released a month prior. This also happened on a weekend and took hours and then a couple days to resolve due to the aforementioned bug at the time of DO instances failing to start due to the kernel in use within the Droplet not matching the kernel indicated in the admin.

In both of the above instances, a single support person killed the instance without pinging the customer first. This is to be expected from any mostly-automated lower cost provider. Contrast this to a Rackspace managed cloud instance where they will first contact the customer when a detection occurs or a false positive shows up in an antivirus scan. Of course, that's comparing our managed cloud instance at Rackspace to a self-serve low-end droplet at Digital Ocean. Why the difference? Likely because you'll pay between 3 and 5 times as much for the same level of server between the two providers.

As a result of the above, I kept our production servers at Rackspace but continued to use Digital Ocean for secondary services. We have backups for those services on DO and the ability for our product to fail-over to the backups automatically should an issue like this occur again. We have been considering moving more services to Digital Ocean as they appear to have ironed out the kinks of their first few years of operation now.
Google Android Go Announced with New Set of Features
link gives a 404
Going by the tech industry/politics favorite "This time we really got it right". May be this time Spring is really good.
Not sure why you were downvoted. Some types of MRI use permanent magnets:
https://en.wikipedia.org/wiki/Physics_of_magnetic_resonance_...
> whether inmates are forced to provide cheap labor still makes a lot of difference

What is 'force' though? "Do this or I hit you with a stick"? "Do this and you go back to your cage"? "Do this or there will be nothing positive in your life"?

The prison gets cheap labour. Slavery is just a border on a map of human exploitation, I think some distinctions need far more qualification to be relevant.
You can also paste it somewhere on the browser or site, then select and drag it to the password field in a lot of cases.
There are two main reasons:

1) In the beginning the whole X.509/PKCS PKI mechanism was seen as something that came out of X.500 and other telco stuff, is centralized, complex and expensive (all of these things are in fact true for the originally envisioned usage) and thus irrelevant for decentralized internet. (for example, the L for "Lightweight" in "LDAP" essentially means that it uses passwords instead of client side certificates)

2) The UX in early SSL capable browsers for client-side certificates was horrible (In Netscape the whole SSL configuration was in completely separate dialog from browser settings, which was incredibly complex. IE uses SSL implementation from windows which is also used for lots of other things and has centralized configuration and also even today creates confusing dialogs when site requests client certificate). It's somewhat ironic that various ActiveX/Java based replacements of this horrible UX are in fact often even more unusable.
Yes it does. (both ... and ..< can be used with expressions that return an int)
Only argument I can think of for preventing it in is maybe it makes it harder for bots in some cases.

The QQ messenger blocks pasting passwords on iOS I suspect for this reason, perhaps there are teams of people guessing passwords and manually typing them in like gold farming.
Yep. Great phones. As far as 3rd party shit doing stuff... that's the price of using non-Google phones I guess. Plus the battery lasts longer than Google's flagship phones (I've gotta charge a Nexus 5 2 or 3 times a day, it's stupid what tiny batteries the big players ship.)
painful maintenance - most users don't want to manage certificates and crypto keys especially in a multi-device world. that's likely the main one

If you don't use a hardware module certificates are easily stolen by malware and as revokation is often problematic, stolen certs can be quite bad news.
How chess saved a village
In the US they pretty much do have the same rights.
It would prevent physical keyloggers (small dongles in between keyboard and computer) and possibly even RF keylogging, but yeah, it's a false sense of security.
The 2017 State of the SaaS-Powered Workplace Report
If you're on Mac OS, there's a nice little app I use to bypass almost any mechanism of preventing pasting. It simply uses a virtual keyboard to type out the contents of your clipboard. http://dae.me/blog/1741/
It was not a great reference to clarify matters, its promotional language, but they state "Vestas’ current turbine range does not use rare earth elements in the generator. "
I use DO for several one or two box production sites (LEMP and RoR stacks), and have minimal complaints. I'm a big fan of scaling up the CPU without having to also increase HD size (which is a Linode requirement).

The biggest issue we've faced was their use of Google DNS. A couple of months back, Google DNS had an outage, and all our calls to external services semi-silently failed. Because this wasn't technically a DO service outage, it wasn't reported by them, and because we didn't know they used Google DNS we didn't trace the issue to the outage. We could have done more, but they could have also been more transparent.

Overall, we are starting to move more projects to DO from Linode, because I feel Linode's previously excellent support has slipped dramatically (customer for at least eight years). We also leverage a lot of AWS services (particularly S3 and SES).
But how many of these can you remember? I currently use almost fifty different passwords. I can't imagine committing fifty different pass phrases to memory.
I find the language off-putting. Calling people who don't understand technology "grunts", and then "facepalm"-ing repeatedly at their failure to understand what you are an expert at...I believe this is called "Outgroup derogation": https://en.wikipedia.org/wiki/Ingroups_and_outgroups#Outgrou...

Also see https://en.wikipedia.org/wiki/Out-group_homogeneity

Put yourself in the place of that "grunt": would you expect a toaster or a microwave to be carefully shut down first, or expect it to be just fine when you turn the power off?

IMHO, if their software is expected to be used in real-world, on-the-road situations by untrained generalists, then it is the failure of the software firm to have built resilience as a feature.

To suck at requirements elicitation, suck at UX and then blame the user is not appropriate, IMHO. Did the "grunt" ask you to choose Windows XP as the vehicle of choice for your implementation? Ironically, it is exactly this kind of disconnect with paying customers and fellow humans beings that causes management to view programmers as the "grunt"-workers.

Sorry for the screed. Summary: UX "R" compassion.
The right to food and shelter. It really is ridiculous that we don't guarantee access to basic human needs.
My password? Sure it's weak I guess. The keyfile? No.
I'm very glad to see this advice for the NCSC, they have been taking a good practical stance on many security issues and helping to provide weight to more pragmatic approaches.

I've never actually managed to find out where the idea of websites banning copy/paste came from. Presumably it's been as a result of security audits, but I can't find any security people who would argue that it's a good idea...
Fork the Don't Fuck with paste code and add that feature (or use it as an example to make your "Don't fuck with copy" extension).

https://github.com/jswanner/DontFuckWithPaste

I hate sites that do that (or prevent right-click as if that somehow secures their code).
Because when your run content in executables, in the case of Ransomware its usually Word macros or js files, those programs run with your user rights, which have read/write permissions for your files. Now you lose your files and you expect the IT department to fix everything for you, instead of doing what the IT department says or using common sense.

Funny how that works. You want all the power but none of the responsibility. This is like saying "Why can't I drink bleach, stop criticizing me doctors!"

>It's a friggin email and data transfer

and guns are just tubes which throw lead around, but I certainly don't want to be on the receiving end of one. What's your point? Its incredible to me how many people refuse to believe we live in a world of risk when it comes to information technology and its not all fun and games.
Python does this too, and I dislike it slightly. I'd prefer uniform syntax for collections, such as in Lua or golang.
It wasn't always this way. I had horrible password standards as I'm sure most of us did when we started out on computers.

- If it's a website I couldn't care about, I use a simple password, probably a remnant from growing up.

- If it's a website I'm concerned about but knowingly won't use, I create a random password and clipboard it during initial creation/login, then every time I use the website I reset it (lazy man's password generator)

- If it's a website that I care about, like HN, I have a loose pattern that I follow that includes symbols and numbers (that's the 30ish character I was referencing). Every website is unique.

- Financial accounts have their own set of rules (unless it's stupid and has, say, an 8 character limit)

- My main email accounts get special treatment with an exceptionally long password.

- Use two-factor authentication wherever possible.

And yes, I could replace this with:

- Password manager

- Two-factor authentication

E: grammar.
The first login page allows you to choose from multiple accounts. But yes, this could just as easily have been done through browser auto complete, but doing it this way means Google can track/link your multiple accounts.
Yes, although there are some limitations there: medicine has a high barrier to entry and engineering requires an accredited degree and certification. Most of the tuition mill students get "information technology" or similar degrees that lack strong professional organizations.
The entitled employee comments at the bottom made me literally groan. Everyone bemoaning facts of life, it's not like what they did was a surprise or unjust. If your job title is "Senior internal paper waste management analysis director" then you shouldn't be surprised when you get canned.
This also looks like a meta-algorithm, an algorithmic way to generate domain specific compressors, potentially anything this thing creates would also be covered by patents.
If you think about it, it's actually safer, from a malware perspective, to use Windows Phone instead of Android. And for the same reason.
Encryption has been around longer than computers.
Gold sucks compared to aluminum and other metals for most uses. Aluminum used to be way more expensive than gold. And when science was "alchemy" aluminum metal wasn't even known. It wasn't produced until the 19th Century, and at first absurdly expensive.

And we can, of course, transmute lead into gold using science. It's expensive and pointless, of course. And gold itself is mostly valued for its rarity and shininess.

But we can transmute carbon into diamond for less than the market price for diamonds. Diamonds are more expensive than gold.
If you are pasting passwords, you are really using an ad hoc third-party SSO authentication provider (which may or may not also use the equivalent of 2FA) via a manual token-exhange mechanism. Better than allowing pasting passwords, just support OpenID or some similar federated authentication solution, which does the same thing without manual token exchange and the attendant opportunities for errors.

You might want to allow paste, too, but it's the clumsy solution.
I recently deployed a wordpress site, using Trellis[0], on to Digital Ocean. The site has a pretty low traffic volume, but so far it has been working great. Considering switching all future sites I work on to DO but I'll be interested in seeing how this first one turns out.

[0] https://roots.io/trellis/ - If you have to work with Wordpress at all I strongly recommend you give Trellis and the other Roots.io projects a try. Coming from more "sophisticated" tools to Wordpress was a real struggle until I found roots.
This exploit depended on the tools but unless the NSA keeps leaking tools it's not like there are going to keep being more so at a certain point the randomware people need their own exploits. That's not even counting it probably takes at least some amount of work to turn an exploit into a working ransomware and also set up the payments in a way that governments can't go after you
Use a password manager.
Luck is what happens when preparation meets opportunity.
> blog about things I only had cursory knowledge of

Also known as "blogging."
It probably ties into the whole tabs vs whitespace thread ...
Not specific to DO but here are some checklist might helpful to you.

1.1. Elastic IP - Allow you to remap IP to another instance, this is very important for HA where you can bring up another server and remap IP to new instance.

1.2. Alternative to elastic IP is load balancer

2. Bock storage - Allow you to use persistent storage with redundancy. Important to keep data safe when some instances down. You can bring up new instance and start using existing block storage.

DO support all of the above so DO is good enough for production usage. If you need latency sensitive services like RDS, maybe you can consider AWS. I know some people use RDS with compute on other provider like DO.
I work on video products which entails an enormous amount of very high bitrate mobile video. Maybe it's a unwarranted fear, but I always feel like I'm killing the onboard flash so using a disposable SD card is always just comforting.
Akamai has had SureRoute and Tiered distribution for probably over a decade.

It would be nice if the HN front page can stop serving as Ad space for CloudFlare.