skysight-inc/HackerNews huggingface dataset:
If I was a CEO, and wanted to create a way for me to analyze data and I don't know much about efficiencies of SQL for ad-hoc analysis If instead I did have an issue where I did create this issue while doing my ad-hoc analysis I would try to search for solutions that would solve the problem. If this occurs then you probably want a data lake or even a local version/snapshot of production if possible.
Sony Digital Paper DPT-RP1
They've always been this way. There was a short period of time with Mac clones, but there was still a license that said you could only run macOS on Apple hardware, or Apple licencee hardware.

I totally understand not liking the license, but if you click the agree button when installing the software on non-Apple hardware, you're basically lying.
Middlebury College Students Disciplined in Charles Murray Protest
Your Data Is Way More Exposed Than You Realize
it might not be, and it's an inappropriate question for a job interview, but it's not that weird to ask about in casual circumstances.

have you spent time around any new parents, recently? they're basically mono-maniacally focused on kids and it's nearly the only thing they ever talk about. I can easily imagine that the guy asking the question might be a new parent himself and it was just where his mind went to automatically while trying to do smalltalk.

or maybe not. maybe it is exactly what it seems to be. could go either way.
No it's not: Wake up. You've been taken in. It's just "the sky is falling", or "Oh we've got trouble, right here in River City. Trouble starts with a T and that rhymes with a G and that stands for gravel." It's just a scare headline and story to get eyeballs for ad revenue.

The good news about such nonsense grabbing people by the heart, the gut, below the belt, always below the shoulders, never between the ears, is that it really is the most scary story they can find. So, all other stories they can find are less scary than their story which is not scary at all which means that all is well. Good.

Maybe if there is some serious problem, then they will write about that, too.
I think the problem with pharma is not the profit margins, as much as the stupid amount of money that gets poured into marketing.

There is no indication that direct-to-consumer advertising of drugs improves health outcomes. It does, however, greatly increase the cost of medication. Since the marginal cost of producing more drugs is low, advertising, even at a positive RoI, leads to increased prices.
Classified Senate briefing expands to include Russian cyber firm
Resiliency: Centralized proxies can suffer from shared failure domain issues (especially when large number of configs, etc., are deployed).

Performance: Side-loaded proxies tend to perform better, in part because they deal with a subset of config.

Our choice of sidecar deployment was informed by on our (Google, Lyft) experiences with both centralized and sidecar models. However, that being said, Istio is not predicated on per-pod deployment.
Where is the software?

I think you just answered your own question about whether it is really an Amiga. If you really want to relive the Amiga glory days, isn't that part of the experience?

When I bought my Microbiotics 8-Up! card from the local Amiga dealer, they rang my order up on an IBM PC that they used for accounting and inventory tracking and such. I asked if they couldn't do that on an Amiga, and they enthusiastically said they were looking forward to that "just as soon as the software is available".
Unity Technologies, Whose Engine Is Behind Pokémon Go, Agrees to Funding
Note that Android O now clearly shows a warning when an app is rendering an overlay - probably the reason why the issues were marked wontfix.

As usual, getting the fix on the older versions is a whole different story.

The other Google failing here is the whole permission thing - since 6.0 Android apps need to ask for permissions for drawing over other app. However, for some really baffling reason Google still lets us publish APKs that target API below 6.0, which automatically triggers fallback mode which grants permissions at install time. Why I have no idea.
World's leading Clueless JS Fanboi here: I have literally no idea how you justify anything you just said with facts. If your statements actually had any basis in reality, you should do a write up, because I'm sure this information would be useful.
I second this. Rough sketch: detect a text input I'm tying in, add a little button that says "sign and send", which when clicked adds a signature to the message and submits. If the extension sees this on a forum, verify the sig in the background and inject a little check mark next to the username if it checks out.
Do you understand that there is a distinction between saying "this is how many companies think" and "this is how companies should think"?

I agree that companies shouldn't demand side projects. However, if you're having trouble getting noticed, it can help.
You can have it run Visual Studio Code and open a specific directory with the Advanced button.
China Can’t Sustain Its Debt-Fueled Binge, Moody’s Says
Cool. Absorb sounds very nice. But even if bookmarks now work flawlessly such that I need never again deal with Mercurial's awful heavy-weight branching model, for me it's too late. This is what happens when you don't mind the store: someone else takes your business. Mercurial people spent years screaming about the evils of re-writing history only to now aim to provide a better rebase experience -- fantastic, but too late, the world has moved on.

Also, don't forget the index! I adore the index in git.
I'm not sure if you're trolling or genuinely don't understand, so I think I can help you a little bit.

Microservices are services that are generally containerized and are easily distributable through some form of a network to be easily replaceable parts. These services are defined by a specification where they do a single task, expose some endpoint or API and are composable with other microservices.

There is a need for these services to talk to each other, and to external services and to do this they use some form of a meshing network. These networks right now are done through container networks, such as the Docker Overlay Network, the Kubernetes "POD" system, linkerd, serf, and a multitude of other systems like istio. It is a space or area of concern, because there is no singular approach to all these differing container services right now. So all of them are vying to be the one that wins.

The issue that I find here is that you're looking in an English dictionary while these are technical networking / operating system terminologies and that dictionary will not help you in this namespace.

This page might help you a little more: https://en.wikipedia.org/wiki/Microservices

Also: Service being, a backend or software that performs some action based on an input / output
And? By your logic, if a lawyer tells you how to handle some unfair legal situation, that lawyer is doing something wrong. Because they're profiting from something that's unfair.

When I talk to a company about how to create a hiring process, I tell them that it's unfair to expect side projects from candidates.
Is it a custom vector format? Are the vectors rendered on the gpu?
Mesothelioma lawyer
> Why doesn't the US foster that kind of environment more?

More than...what, exactly? Vastly more people do what the startup scene dismisses as "lifestyle" small businesses than VC-funded startups.
Getting Started with Unit Testing in .NET Core with XUnit and Docker
Personally, I don't care about "efficiency". I care about usability. Having a tool designed to edit text let's me focus on everything else. Sure, there is a learning curve, but you don't need to be an expert to find the tool useful.
Why do they need a specific target in-this case, it appears from the video like they can overlay the keyboard and simply grab all keyboard input?

> that's something that should be straightforward for app stores to screen for.

Also wouldn't it be relatively viable to gain update access to a popular existing application or to provide an innocuous application at first and then push a patch enabling this vulnerability?
Lots of people get offers with little to no prep.
There is a medical condition for a certain type of hair (no idea if that's what your hair is like): https://en.wikipedia.org/wiki/Uncombable_hair_syndrome

No idea how that's diagnosed, but presumably HR would back off if you had an actual doctor's note.
One thing that is kind of unique about this vulnerability is that users can actually prevent attacks from happening by checking the permissions on an untrustworthy app because google has permissions controls built in for the features that are being abused here.

The heart of this vulnerability is more in that these settings aren't clear on their implications and there are bad defaults. Disclosing to users seems to be a responsible thing to do since users can prevent an attack on their own device (especially given google's response of "working as intended").
God, that sounds hellish.
So can you with D.

With D, in addition, you can link against C shared libraries (dynamic linking) AND you can write standalone libraries in D that even C can link against (see Mir/betterC).

AFAIK, you can do neither of these in Go.
I just tried it out, and you can specify a folder to open with VSCode. You pick the application (VSCode), then tap advanced and pick your project folder.
Happy to give you my thoughts, but I'm not sure what you're suggesting.

I do agree that lots of companies create bad interview processes -- for coding interviews and other interviews. Those issues should be addressed.
The problem this app is working on is a real pain point for me. My current solution is to use multi user accounts on my mac (roughly one for each use context I have), leave everything open, and fast user switch between the accounts. This works well enough and has the advantage of lots of isolation between contexts, but the overhead of creating and setting up a new user account is too much to have more than a couple of these (I'd love to have one per project). One advantage of the example of this level of isolation -- I setup my mail program in each account to only be setup for the mail accounts relevant to that context so I only get mail notifications for the context I'm focused on.

I'm strongly in favor of some innovation in this space, but this app's solution (and other, window management type solutions) I don't think has enough isolation between contexts for me.
I actually agree. This is probably all it was.

But the other interviewer still handled it appropriately.
That is precisely my point. To devote any effort at all optimizing this is to go after the wrong optimization target. Just buy or use a good IDE that helps you with tasks beyond text entry and move on. There is no value to be gained doing anything else.
Inversion of control worksheet for framework adoption
I long for the day where we no longer need a server at all.
When are people most likely to Netflix and chill with comedies?
You are confused. This is a popular pattern that prevents shaving hairy bovids.
With git rebase you can in fact build and test each commit. That's what the 'exec' directive is for (among other things) in rebase scripts!

Basically, if you pick a commit, and in the next line exec make && make check (or whatever) then that build & test command will run with the workspace HEAD at that commit. Add such an exec after every pick/squash/fixup and you'll build and test every commit.
Are you saying this because you have actual evidence?

The place where evidence is needed is in support of the hypothesis that these questions actually work (in favor of achieving their stated ends). That is, the question to ask should be:

"Do any of these companies asking these questions have actual evidence that they actually work?"

I grant that many people who ask (overdrawn, larger-than-life) questions like these probably believe that they help identify good engineers. Whether these questions actually achieve that goal is an entirely different matter.
Law Enforcement Access to Data Stored Across Borders
This is insightful, thanks. In this specific case, you're absolutely right that users themselves can take steps to mitigate the risk. If users come to understand the real meaning of granting permissions as a result of this disclosure, that's better for everyone.

Definitely a factor to take into account, particularly when deciding how the information will be publicized.
No, it is related to diversity. I agree that it's unfair to expect all candidates to work on a side project. Some companies expect this out of all candidates (which is bad). Others see it as a plus (probably okay).
Typically it's "feature pitch", or an overall scale of the various features involved in producing a transistor like width and height.

You can see more on the breakdown on pages like this: https://en.wikipedia.org/wiki/10_nanometer

It's more a marketing term since no particular component is exactly 10nm, but it's based on a composite of the features involved.
U.S. Sues Fiat Chrysler, Accusing It of Using Software to Pass Emissions Tests
Boeing is building DARPA's new hypersonic space plane
For those too young to remember Netscape, this means he was the guy who made the first two web browsers that made it outside of academia and into widespread use. As a result, there are web tags we use because he (or his employees) put them in. JavaScript was created at Netscape, too.
Not sure why companies don't develop great merge tools, looks like there is a big market for them.
I'm using it with nuxtjs to achieve server side rendering, the benefits of that being faster pageloads on first arrival and faster pageloads for SEO ranking.
vi wasn't designed to efficiently edit text. It was designed to deal with shitty keyboards of the time. And now it is a cult.

I challenge anyone to prove that a non-trivial project, say, a year of work for a team of five developers, would get done any faster, better and with less bugs because of the single act of adopting vim vs. a top grade IDE.
I'll have to orchestrate it again but the idea that it has to "phone home" at all should be alarming. I shouldn't have to create (or be suggested to) an account with the service it should just be agent's coordinating with each other.
Yes! Reviewing huge merges is infeasible. Besides, most CR tools are awful at capturing history, especially in multi-repo systems. So rebasing and keeping history clean and linear is a huge win there.

Though, of course, rebasing is a win in general, even if you happen to have an awesome CR tool (a unicorn I've yet to run into).
I think the most damning thing to come out of the replication crisis was when they asked a bunch of scientists to place bets on whether a given paper (with p < 0.05) would replicate, and it turned out these bets were right quite often (https://fivethirtyeight.com/features/how-to-tell-good-studie...).

That shouldn't be possible! Science is supposed to be the best possible epistemological methodology, and here it is being beaten in "success rate of determining true from false" by guessing. What's immensely frustrating is that it's not a question of whether we're just not smart enough to tell true from false, we clearly have the power (since the guesses were often right) but we're not using it. Whatever "truth compass" the guessers were using should be part of the scientific process somehow. That's what is "broken".
I was hoping that this would be an implementation of readable lisp (aka sweet expressions) for clojure.

http://readable.sourceforge.net/
wait... you're literally living next door to him yet you think he's operating on some next-level of success compared to you? do you rent his guest house or something?
I've had luck redirecting this type of question into "why did the process let this happen" where it becomes less my fault vs your fault and more "i did what you said, you did what the business person told you to prioritize, something broke" from a blame-agnostic point of view.

In certain cases I've also overridden the "ignore that for now" in favor of at least some minimal fix because part of my job is to give you what you don't know you need to ask for, not just exactly what you ask for. And there's the value add because compared to people who don't consider that part of their job, my stuff / my team's stuff works better out the door.

Another similar question that I've noticed others not always asking are things like "how often would this be used again, is it just a temporary one-off" which, of course, has an answer that's subject to change, but at least guides the initial design. And when it changes it gets revisited.
I don't think ""bare metal"" means what you think it means.
What a fantastic idea, maybe someone should get on that? Of course I'm being sarcastic since there are many people doing that and I would provide some resources if I thought any measurement would be up to your high (perfect) standards.
Show HN: Rudo – A toy sudo clone written in Rust
Rather than worry about getting `status` under 10 seconds, just focus on `diff --stat` and `diff --cached --stat`. Those two replace most uses for `status`.
Yes. There are 2 subsystems involved:

(1). Load a shared library module and execute it.

This has many uses inside Samba.

(2). Allow a client request on an RPC pipe to be routed to an external process or library.

This allows Samba to be built without embedding all the named pipe services inside it, which makes it a smaller binary for embedded vendors.

Unfortunately an old commit connected the two subsystems together, re-using the shared library module existing code to find and load the service the client was asking for. There was insufficient sanitization of the requesting name which caused the problem. That's what the fix now does.

A memory safe language would not have saved us here.
When I was six, I was friends with a boy called Luke.

I visited his house dozens of times, knew all the family, shared toys, they belonged to the same religion as my parents you see.

25 years later I discovered Luke's father had been buggering his son the whole time. Still in prison, I think. I remember nothing strange or sexual happening despite visiting so frequently.

Same thing with that Carl guy on Reddit who was giving programming classes. It's always hard to believe, it was a shock for the community.

Point is, don't take normalcy for normal.

I don't think people, even pedophiles, are evil just for having their thoughts (because a hunt for thought criminals is something that spirals out of control so easily), but Jesus Christ they should keep those thoughts and reality very separated or it'll cause a lot of suffering for everybody.

If there are people reading this who have those urges, I suggest thinking going to the doctor, there exist drugs which deplete sexual desire. Taking a step like that shows strength, not a weakness.
> If you just recite problems from Cracking the Coding Interview, you have pretty limited insight into the candidate's abilities.

I agree with this. I tell companies to not ask questions from Cracking the Coding Interview. But that doesn't mean those style of interviews are fundamentally broken. It's just stupid to ask questions that candidates are likely to know.
Malicious actors may find the vulnerability just like researchers did, so if the issue is not being fixed, the only responsible thing is to inform everyone of the potential danger they _already_ are in, and let them decide.

The bells & whistles of giving it a fancy name, domain, etc suggest an additional layer of intent with the disclosure, but that's a separate issue because they have followed reasonable procedures beforehand.
The good news is that you can blame someone else!

PS> Joking, but not really.
That screenshot in the repo... such a familiar collection of channels :D
Another thing is that keeping your unpushed commits "on top" is a great aid in general (e.g., it makes it trivial to answer what haven't I pushed here yet?"), but also is the source of rebasing's conflict resolution power.

Because you're unpushed commits are on top, it's easy to isolate each set of merge conflicts (since you're going commit by commit) and to find the source of the conflicts upstream (with log/blame tools, without having to chase branch and merge histories).
Integer Factorization with Code
How do blind cavefish find their way? The answer could be in their bones
Whiteboard interviews don't have to be ineffective. But empirical evidence suggests that companies greatly overestimate their ability to conduct them properly.
I would really like this if I felt that the software could be trusted to work well. I'd only buy this from a company with a good record of creating usable interfaces.

For instance, when I clicked on the "Where to Buy" button it took me to a screen that did not list places to buy this. Nor did it ask me for information about where I live. I had to click a link called "Where to Buy" on the "Where to Buy" page.
yup, Automator is a good way to create simple apps.
Total facepalm to this comment.

Does modern ASLR increase costs (time, difficulty, money, skill, etc.) necessary for exploitation and decrease benefits (privs, chances of success, etc.)? If yes, then it's a protection. Any security engineer will tell you unequivocally ASLR is a protection. And one of the most successful ones to date.
quite sensible advice, will probably start minimising my use of refer. I don't agree with all of it, but that's the nature of style guides.
I see that Windows engineering uses a merge workflow. I wonder why. See other comments in this thread about rebasing.
That "truth compass" they used was reading the method section, which is far from guessing and very close to the scientific process.
As one might expect, these sort of oversimplifications are make great headlines, but aren't usually actionable. Data and metrics which validate hypotheses like this should be the standard we strive to meet.

See also: The only thing that matters is oxygen - unless, of course, you are anaerobic.
seems to be apples and oranges. Ad hoc query vs. a modification/new feature of a product. Depending on the product and dev process around it, it may take a month even for the minor among minor modifications/features.

>Why does my engineer say it will take a month?

if you don't know the answer to that, you're a bad manager. Either you hired bad engineers or you have no idea how your dev process works.
I agree. Once you've got the malicious app, it's already too late. As they point out, Facebook could arguably tap jack all your passwords too. Known issue, so pretending it's a new issue by giving it a new name is silly.
Does this imply that adblocking is also free speech
This article "How Many Nanometers" discusses this http://semiengineering.com/how-many-nanometers/
bad handwriting is not an issue for interviewer, but it could seriously ruin thought process for interviewee. It ruins it for me, for sure. You know, good code "looks" good, and that feeling is a major part of programmer intuition for me.
"There is one high-profile, highly successful software entrepreneur right now who is burning through something like $80 million in venture funding in his latest startup and has practically nothing to show for it except for some great press clippings and a couple of beta customers -- because there is virtually no market for what he is building."

Anyone know who this was now?! hehe
Rebuilding Slack's emoji picker in React
Generally speaking, yes, it would. Micropython runs on both esp8266 (a couple of dollars for a board) and micro:bit (designed for education); so cost isn't a factor. Uploading/flashing code is annoying on the esp8266 (though decent tooling would assist with that). I think for students real hardware is much more useful - this is probably going to be more useful for people actually trying to build something (not that students should be excluded from that, but the target is different)