skysight-inc/HackerNews huggingface dataset:
Welcome to Hacker News.

1. To directly submit a link, leave the |text| field empty on the submit page.

2. Often there is little need to explain why a link was submitted because it is assumed that the person submitting it thought it was helpful or interesting.

3. But it is ok to add a regular comment after the story appears on the |new| page.

Good luck.
No, people who get offended are "particularly touchy" because they lack the well-adjusted skills of an adult and act like children.

No one is arguing at your right to be offended, what people hate is that not only can this person clearly not talk this out with someone - they need to go to a public shaming list. IMO it's a form of virtue signaling. I doubt this person is actually offended, but the local SJW group told them they need to be to be seen as progressive.
> What's wrong with simply firing people who are implicated in harassment

You'd get sued for wrongful termination if you go around firing people based on mere implication.
Good point, however this whole device line is an experiment itself. Realistically, I decline to entertain Microsoft is risking building these devices in a declining market to make a buck. Their approach, especially with the marketing, imagery, the counterpoints to Mac (pretty much imitating Apple) all points to constructing an image, instilling consumer confidence (and displaying a lot of ego). The deeper purpose of these devices prevail, even if they don't sell, what they bet on returns value.

They could've started a low cost evolution on a single device instead of handicapping the whole Surface line. Now it has this whole funk of "no USB-C" all over it and it increases the cost of when they upgrade the whole line. And seeing as Surface is experimental (not core to MS, they would shutter it rather defend if it goes south), I doubt that they bought an overwhelming amount of cables, connectors, etc., I think it has more to do with a slower product development cycle due to politics.
That's correct, but to provide some color to the comment since it doesn't really explain why it's correct:

Hash functions can provide integrity against accidental errors or very simple manipulations related to XORing the message or digest. This might not be useful against an active attacker, but technically speaking it is a (weak) form of integrity, which is why we use checksums.

Message authentication codes (MACs) are required to assure integrity against active attackers because you need to elevate to authentication, and hash functions cannot provide authentication (at least not on their own). Authentication is a stronger notion in security than integrity because it simultaneously guarantees and requires integrity - there is no point in having integrity without authentication, because you'd be assuring data integrity without assuring the data origin, which short circuits the integrity problem for an attacker. Conversely, you can't have authentication without data integrity because an attacker could simply forge the data origin.
When your goal is combating boredom, that could be a feature.
His what is what? You're not making any sense.
> They did ask for information on the source of the bitcoins, but I had evidence of this.

What kind of evidence was required? Who asked you to provide the evidence?
Once this list has enough reach, someone may weaponize it. I've seen it happen.
Do you know since when it's two-years? Apple's warranty has been (still is?) only one year in Germany IIRC.
I don't understand your statement that AlphaGo doesn't have strategic considerations. Its neural networks evaluate positions for strength, including long-term (strategic) potential.
Yes, but this "laptops" are set to use cpu in burst mode. So if you run servers like docker and VMs etc (like I do on my SP4) you often hit the burst limit and the cpu throttle's right back down.

I've taken to using an external usb fan to get extra speed.
The pen is amazing for what it does. You can annotate things on the same machine where you're doing everything else. It's also a wonderful machine for flying.

But you pay up for those things. So for you, definitely just get the solid laptop. Surface pros can be maddening, and often feel finicky enough that they can't be primary machines.
At the time scales we are talking about, our cities can ooze away from the sea slowly just by abandoning property that is currently flooding. The sea is rising at around 3mm / year, which is about a foot a century. Even if we multiplied this ten-fold, that's still only about an inch and a quarter a year we'd have to cope with. We'd have to raise some levies, abandon some property, and maybe update some other infrastructure. Not great, but not the end of the world.
So the Chinese governments gets the privacy and security controls we want, but we don't get to turn any of this off?

This looks like the most dystopian cyberpunk global corporate state-- mass surveillance for the masses, privacy and security opt-outs for the elite and governments.
That's ridiculous. Leave is leave; it's an employee's right that's offered in law or in their contract, and they should not be punished in any way for taking advantage of it.

If the employee would otherwise exceed expectations and took paternity leave, then they still exceed expectations. If they were hired in March and worked for 40 weeks, they would not be penalized for failing to work in January or February. Leave should be handled the same way.

If the employee was not professional about taking leave (didn't give any notice, did not work with colleagues to organize coverage of his tasks, etc.) then things are different. Similarly, if they promised to do something while on leave and didn't, then that would be an issue.
Worked an average of 74 hours per week with no vacations;

Why would someone who's 10* better than their peers need to work double the hours?
How the new Google AI is going to help you to sell more this year
Isn't exceeds like getting a bonus? You still want bonus while on paternity? I thought only legal requirement is base rate and expected payments - which a bonus is not?
I have good news: if we get smarter people, it seems that we may get better ethics too.

https://papers.ssrn.com/sol3/Delivery.cfm/SSRN_ID2741266_cod...
He already has another job. :)
Buying in to Java is also buying in to the JVM -- you can interop easily with languages like Clojure, Kotlin, or Scala, which lets you write some of your code in sexy languages while other parts are holding down the fort using boring, but battle tested ecosystem. (C# and F# are a similar combo.)

There are also some high profile pieces of technology written in Java, so if you want to leverage them, having JVM expertise is a bonus. You may even get better bindings for JVM languages than others and since many are open source, having Java expertise allows you to work on them.

I find it a little odd you'd buy in to the CLR family (C#, F#, etc), but say the JVM family has nothing to offer. They're not really substantially different in my experience -- both are sort of staid enterprise-y ecosystems. (But maybe I'm missing something really cool in CLR land besides good MS product support -- please let me know! It's one of my language blindspots.)
HR is not really intended to be the employee's friend or advocate. They work for the interests of the shareholders and management. It can be like reporting police corruption to the police -- not always a very effective course of action.
review should be done only for the time that employee was not on leave. makes sense.
How to Build a Web App Like Uber – Real Time Driving Service
Phone diets will be the next health fad IMO. Can't happen fast enough for me.
> "Worked an average of 74 hours per week with no vacations"

So.. am I supposed to envy this or what?
Perhaps he just likes his job?
If you call your project "the most secure X" and you're doing something related to X in a very sub-optimal way (i.e. not using AEAD modes), what happens if someone uses your code as a reference point for writing their own crypto for a protocol that doesn't use IPFS? What if, instead of a specific instance of copying code out of context, people learn bad habits from your code and then defend their choices until they're blue in the face because they copied it off of "the most secure" reference implementation?

A lot of problems, many unforeseeable, are easily prevented by using authenticated encryption.

> You're just not presenting a convincing argument for why it's OK to trust the code but not the data when they're both served out of the same place. Do you understand that they're both served from the same place? If somebody can modify the data, they can just as easily modify the code and make it do whatever they want. Do you understand that?

Yes, and this has been covered to death to the point that I'm sick of hearing it: https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...

One could easily build a Chrome extension that still uses your IPFS gateway for shipping ciphertext. Now you've got the code at rest (so transport-layer integrity doesn't undermine the code being executed), but the data is still reliant on IPFS.

Let's do a thought experiment.

First, move your code to a Chrome extension (which makes the code immutable), then give the attacker an enormous amount of power. For a moment, assume that an attacker can totally defeat IPFS. It doesn't matter how they do it. Is your application-layer cryptography protocol still secure?
I don't know what kind of laps other people have, but I'm decidedly average in every way, physically, and I use my SP3 on my lap every day.

Usually it's on a table or desk, but it's fine on my lap too.
But that is probably not the usecase most people who will buy a Surface Pro for. It's a very portable device and 32GB would consume more power and probably be only bought by a very small amount of users.
Also, if VW can figure out when their cars are out for test, I can't convince myself that google couldn't do a damn good job of hiding the network traffic, if they wanted to.

Like most in this thread, I am not _actively_ paranoid about this, but a constant low-grade paranoid.
> one trade with <5% slippage

5% slippage is huge. That is $50k on this $1m trade.
Is the author is suffering from depression?

Don't get me wrong-- most of his sections would sound familiar to any maintainer having to deal with growing technical debt. But the section headings "Communication" and "Resigned" are certainly red flags. And I've furrowed by brow four times now trying to grasp the connection between the author's astute observations about code maintenance and assertion, "I've become worse, not better, at programming."

Anyone know the author? If so it's worth sending a message to check in.
I question this study's sample size and diversity.

Git was made by and made for kernel hackers to support the Linux kernel. It has an expectation that the user understands how their computer works and wants a tool catered to that knowledge. The average web developer writing Ruby or Node in Atom on their Macbook Pro isn't in the target audienece. For someone in git's target audienece, it's a great tool with far better UX than any other VCS - because it gets out of your way and gives you powerful tools for mucking with the VCS to suit your needs precisely. THIS is what makes for a good UX. A tool that's easy to learn is great, but if it can't be mastered and bent to the user's will then I'd rather take one that's hard to learn but accomodating of the master.
Sorry, I didn't see this post. Thanks Github for detailing the traffic infos, which I just looked at today.

Sure, you can! Or if you want to do it quickly, just share the links you think of here or in an issue, I can add them myself if you want.
I don't think such meetings ought to aim at individuals, in fact this is what I wanted to avoid, rather it would be good to talk about processes in general, and to admit faults like that; I think this would be a much clearer way of making progress than to start a blame game or criticise people covertly, which usually ends up festering and turning into hate. I think people should be open about themselves, and constructively criticise. And again, I don't see why that ought to necessitate meanness.

Criticising in abstract I think leads to a passive-aggressive culture, which I don't think it's right at all. The point of the meetings would be that everyone is involved, there's no secrecy, and that the meetings are perhaps optional, or at least participation in them is optional. I think a social pressure to confess errors may be a good thing at times, though I admit there's a lot of variation in how it could go.

It's strange that I've been downvoted three times on my comment, but only have one reply. Such is the way of HN.
Just google "volunteer abroad scams".
https://holeinthedonut.com/2011/02/21/scam-volunteer-charity...
M-Pesa
It's not a bad language, it's just alternatives are vastly better for a typical startup. Java is the language that's "Good at everything", while these days we have languages that are "Great at some things", and often, whatever the use case, there's simply a better language for it.

What makes Java powerful is that it's good at everything. That's incredibly valuable for Amazon and Google, because they have an insane amount of code. So whether they need concurrency, or tooling, or whatever they can throw any 4-5 engineers at the problem and they'll be able to get it done.

For a startup, they aren't going to need the greatest General Purpose language ever made. They generally have specific problems. And there are simply better languages out there for almost all of them.
Did I miss something or was that title not supported by the article in anyway? There is nothing about Uber not being in Pittsburgh anymore. Flagged.
I realize by "too hot" you were mainly talking about how it affects battery life. But I thought I'd add that I have a 15" Macbook Pro (work) and a Surface Book (home) and at times I find the MBP's keyboard almost unusable as it generates so much heat I can barely touch the keys. I've resorted to using third party apps to run the fans at higher speeds earlier to try and mitigate this. One of the features I love about the Surface devices is that the CPU is in the display and thus the keyboard never gets hot.

This new Surface Pro supposedly has longer battery life and the core i5 is fanless. We'll see how it translates to actual real world usage in future reviews hopefully.
I'm on Chrome and definitely having the same issue.

Pretty ironic that an article decrying the act of being a "10x Programmer" had such a sloppy developer working on the front end.
Git-configured email SaaS developermail.io now available without invites
Allowed freedom of choice, I'll start as follows.

1. Build on my machine

2. Reproduce issues

3. Fix bugs -- even typos or refactors

4. See the fix code review/merging/deployment to qa/dev/whatever

When I start a new project I'm most concerned with reproducibility of the process of development. A lot of time other people are blind to the little tweaks that have occurred over the years that enable them to build, test, and deploy a system.

Those tweaks often give a lot of insight into what is going on. The ability to push-button deploy is also a bellwether of what is to come.
Perhaps he shared his dismay at Oracle and one of his Amazon connection came to him with an offer. He probably did have a few interviews to make sure his future manager and his peers are comfortable. More of a cultural fit.
But are they ultrabooks and 13" or lower ? I can't think of any ultrabook with those dimensions and 32GB RAM.
Okay I buy this, and say the thing about python. It's more the ecosystem than the language.

But java has so many great languages on the JVM. That inter op flawlessly with it. Kotlin is my favorite, and allows both java and kotlin files in the same project.

The language is palpable. But I feel that there are higher level features, that can ease development and improve readability. Yes, yes the IDE can generate boiler plate. But that shouldn't be necessary.
This is just an advertisement for a consulting firm...
> First, [completely change your application and its core security assumptions]. Is your application-layer cryptography protocol still secure?

No.
The idea of a super-human strong AI is really just anthropomorphizing computer programs. The only realistic way this could occur is by emulating or uploading a human mind.
The more I hear about Oracle the less respect I have for them. My company is already working hard at dropping all things Oracle. I really can't wait for the day when we can wash our hands of them completely. Its not that far off really.
>Why is confidential material for public consumption?

If a person voluntarily and freely posts to the mailing list, (s)he is deciding that this is not confidential. Of course, if it identifies other people who did not consent, then you have a problem.
It's a reference to https://news.ycombinator.com/item?id=9695102
The book "Founder's Dilemma" has some case studies around this, if I remember correctly.

summary : Be cautious as hell.
Also the Sten gun. And the same happened with aircraft; the Spitfire and Lancaster were "better", but the Hurricane and Wellington did a lot of vital work. Somewhere on youtube is the propaganda film of building a Wellington in 24 hours. Also the de Havilland Mosquito, made of wood rather than scarce aluminium, star of 633 Squadron's "trench run".

The "little ships" of the Dunkirk evacuation should probably count (do Americans learn about Dunkirk?)
Your 1 and 2 options are confused:

1. Even in the EEA, you may have to pay shipping and handling.

2. Where there's no representative of Apple (and I'm not saying there should be), can you really say "Apple service is available, you just have to pay shipping"? The reality is closer to "You will have to ship it internationally". Apple isn't "doing" anything here but accepting a package in a country where they have service locations.
Should SaaS Companies Publish Customers Lists?
the surface pro is more comparable to the XPS 13, which does not come with 32GB either.
Lyra: an ethical, nonprofit conversation service which cares about language
Fast Weight Loss – What Makes a Fast Weight Loss Plan Effective?
I feel like you're actually just supporting everything I've said. I'm not claiming that the "real world" and the "on-line world" are separate. I'm saying that things you say on-line can be spread far and wide, much further and wider than pre-internet, and hence become known to a wider audience. That audience is therefore more likely to have people in it who are unbalanced.

I never claimed that the internet is a separate place, but it is certainly true that you can reduce the likelihood that things you say in one place are connected with you personally. It's not 100% secure, but I never said that.

In short, you seem to be in agreement with me.
I would really love one but need to be able to use something on my lap when I'm on the couch.

Think I may go for an XPS 13.
https://www.youtube.com/watch?v=e_aSht_ssls
Ask HN: How do you study for a new job if work is 10+ hour days and have a family?
I definitely wish more software companies did take-home projects instead of memorizing algorithms I forgot 8 years ago.
Midnight Commander and its spiritual predecessors going all the way back to Norton Commander and Volkov Commander are marvellous examples of TUI.

They're intuitive, interactive, come with embedded help, and use text mode to present a sophisticated, productive interface.
Apparently while '10x'ing' for 74 hours a week there was no time to develop some modesty.
> The abstract on the Nature article focuses on the 15 new SNPs found that affect intelligence, in addition to the 336 already known

It's a little ambiguous, but that's not how I read the abstract. The relevant sentence:

> We identify 336 associated SNPs in 18 genomic loci, of which 15 are new.

That seems to be saying that 15 of the 18 genomic loci are new, not that 15 of the 336 SNPs are new. Given that they "identified" 336 SNPs, presumably they all are new?
From what I gather this found only some correlation, not causation. So I might as well postulate that people with mental health problems are more likely to be on social media. That's not too difficult to believe.
Why 5G and Why Not 10G?
Why mobile networks are developed in phases like 1G after 2 years 2G and then like wise every 2 years next G? What is stopping us from deploying 10G right now?
FAM stack; firebase + angular + material design. Get anything up and running in hours. With cloud functions you can set up server side code with minimal effort.
Because they, too, know better? I get your reasoning, but with equal position one could argue that in the clear retrospective light of our failures, theirs would be a larger one, by both proportion, and foreknowledge of its effects. Its a sticky wicket because nobody has good economic incentive to save it right now.
Some companies purposely have a laid-back culture. Not a 'bro' culture, but a friendly, social one - that includes jabbing and jiving.

I love those beanbag-chair, not corp environments. Not everything that isn't corporate is 'unprofessional'. Wearing trainers to work was unprofessional, until it became established; now tech CEOs compete on who has the most expensive sneakers.

> If HR was involved, it's because someone was out of line or just doesn't understand how adults manage boundaries, in which case he should be warned and, if the case merits, punished.

I assume you mean the person who said it? It's also possible the person who reported it doesn't know how to manage relationships, or had some other motive in reporting this to HR - you can speculate either way.
After Charter/TWC Marriage, No Honeymoon for Customers
Consider it as a ratio WQ:T where "WQ" is the Work x Quality product and T is the Time of employment. You're saying that T should be a constant and include time an employee isn't expected to be working, but WQ is fair to vary. Essentially you're adding to T even when the employee is expected explicitly to not add to WQ.

So in my opinion it's not fair game.
haha... you're right. How do you call something you cannot use on your lap (even with the keyboard attachment) a laptop?
> Leave is leave; it's an employee's right that's offered in law or in their contract, and they should not be punished in any way for taking advantage of it.

Being rated as someone who meets expectations is not a punishment.

Certainly, one has the right to exercise one's rights, but one also has a duty to acknowledge that they impact others. Someone who takes paternity leave will, mutatis mutandis, achieve less than someone who does not; someone who is on leave for an entire review period and does nothing related to work cannot fairly be said to exceed expectations.
I'm aware of that. I'm also aware of the troubles in counting and evaluation of it's strange/bad moves.
It's not impressive at all to go away with only 0.5 after such a large lead. Think about your confirmation bias a bit.

Ke Jie knows that he will probably loose, but this will give him confidence. And confidence is what they need at most, much more than in chess. Otherwise Ke Jie will probably have to end his lucrative career. It not over yet.
How DNA-testing kits are becoming big business
But even if Microsoft put 64GB of RAM in the surface pro, it still wouldn't be the right machine for the job you're describing.
I like how submissions are anonymous. Back in USSR an anonymous tip was a good way of getting rid of your annoying neighbours or rivals.

Another convenient thing was that with an anonymous complaint the burden of proof lay solely on the accused, who had to protest his innocence without even being able to face the accuser. But we are half-way there anyway, aren't we?
If your application-layer cryptography protocol is not secure in isolation, what argument do you have against making it secure in isolation?
The dbcli suite (pgcli, mycli) provide a great user experience on the command line that even some gui database tools don't match up to.

https://github.com/dbcli