skysight-inc/HackerNews huggingface dataset:
One of my big problems with security-related topics is that sometimes it's hard to find clear instructions on what you should be doing. We should really have something like a BCP [0] for non-security people. I think the closest thing we have is the Computer Security Resource Center [1], which isn't very approachable and friendly.

One recent example I encountered: if I'm generating an ed25519 ssh key, how many KDF rounds should I use? I've seen some guides drop the flag completely, which apparently defaults to 16. But in other places I've seen people saying it should be 100. Is the default value sane or not?

[0] https://en.wikipedia.org/wiki/Best_current_practice

[1] https://beta.csrc.nist.gov
London is not much better. E.g. from Hammersmith (a posh, well connected area) to Old Street (aka “Tech City”), this 14km journey is 46 mins from underground station to underground station, both are north to the river. https://tfl.gov.uk/plan-a-journey/results?IsAsync=true&JpTyp... Sure, you can move around to carve down 10 mins, but then you give up to live in realitvely nice, convenient area populated middle class people and yet not as expensive as Chelsea or Chiswick. If you live further, your journey time from station to station is not much longer, but only if you are lucky and there is no delay in the service, which happens almost daily.
The FAQ is arguably correct. Kubernetes doesn't come with overlay networking. It can work with different clouds, but if you're on, say, DigitalOcean, you will have to run Flannel or Calico or something similar.

Kubernetes doesn't have DNS built in, but it comes with an add-on you can install, KubeDNS, which allows internal DNS queries to resolve service names.

Kubernetes doesn't aggregate logs, either. Kubelet knows how to get at Docker logs, but they're still just sitting in /var/lib/containers somewhere. To aggregate them, you need to run Fluent or Logspout or similar. If you run Kubernetes via Google Container Engine, Fluent set up for you (though it will collect everything into StackDriver Logging, which is not great) through a daemonset, but it's not built in.

Kubernetes doesn't really have load balancing. You can have it allocate a cloud LB if you're on GCP or AWS, or you can set up your own Nginx ingress controller, or some other LB such as Traefik, which integrates nicely with K8s. For services you get a poor man's load balancing through iptables and kube-proxy, but it's purely round-robin.
Or maybe just

(take 8 (phil-hagelberg)) `(2010)

should compile.
Ask HN: $200k in savings – SaaS or ETFs or stocks?
I have around $200k dollars in savings. I plan spending the money on the following but not sure how much on what:

1) Founding some SaaS or ebook and throwing money at marketing - $30k

2) ETFs - $120k

3) Stocks $50k

4) Any other ideas?

The goal is to generate passive income but also be able to earn more once I decide to have a family etc.
I track calories with my fitbit app and i eat well, within reason. That is - i stay away from most crap food, but don't obsess over every thing i eat. i use things like high protein bars, a v8, or a soylent to fill in gaps when i'm pressed for time. some days i eat a perfect balance of fruit, veggies and high quality protein. other days i'll have 8 beers, half a bottle of wine, and rail some yayo.
i get exercise in some form 6/7 days per week. sometimes it a simple mid day walk and some flights of stairs, some times it's yoga or a run, but most of the time it's the gym.
I made this comment elsewhere[0], but repeat it here:

FWIW, I recently took a flight from Belgrade via Istanbul to Birmingham (UK). Hand luggage only, no checked luggage.

At Istanbul they took my laptop from me, gave me a receipt, packed it in bubble-wrap, put that in a suitcase, and put it in the hold.

Yes, I got it back in the baggage reclaim area, but it was cold - seriously cold - I didn't dare turn it on for several hours to let the disk warm up slowly.

This is making international travel a complete crap-shoot.

Take precautions people.

[0] https://news.ycombinator.com/item?id=14436259
Have you forgotten about the Articles of Confederation? They were created with the specific goal of maintaining state sovereignty.
If want someone to give you permission to leave, you don't need that. The question you are asking is its own answer. What you are looking for is not advice but for someone to indirectly assure you that you aren't crazy in feeling this way. I know it sounds harsh for me to point that out, but it's something you should bring into full awareness.

I haven't been in quite the same spot, but I did work for a company that really didn't know what it wanted, so there were long period of either no work or short periods of sudden enthusiasm behind X idea followed by an immediate "no, that's costing us money. kill the project immediately." While it would have done me a disservice to have left the company too soon, I was there for a year before I decided to leave, and even that was too long in retrospect. As others have said, it's soul-sucking and just a waste of time even when you're contently complacent. You have a limited life time and a small supply of creative energy, neither of which your company may deserve. That's just my perspective.
Ask HN: Why does Reddit search suck so much?
I'm just curious what the technical challenge is there and was hoping someone here who is an expert in that space could ELI5 it to me.
Slight note about Dan Wang picking 2005: That was the peak of CS degrees awarded because it's 4/5 years after the height of the dot-com bubble. So the upward bump in the mid-2000's is somewhat explainable as an anomaly.

I think his point 1 is underrated. CS degrees are flat because aptitude is flat.

You can compare CS degrees to other degrees over time at nsf.gov:

https://www.nsf.gov/statistics/2016/nsb20161/#/report/chapte...

We have more grads than ever, but they are dumber than ever (we have the data to prove this), getting less difficult degrees.

I have a bad feeling that we are running up against some diminishing returns on education and hiding it with numbers like the total number of grads. The number of grads for difficult degrees and the quality of grads seems to be another story.

> In 1970s 1-in-2 college grads aced Wordsum test. Today 1-in-6 do. Using that as a proxy for IQ of the median college grad, in the 70’s it was ~112, now its ~100.

More stats: https://medium.com/@simon.sarris/why-is-computer-science-enr...
I think the market is just way over saturated. Hiring practices for developers point to just that.

I mentioned in a different thread how simole it is for my travel-nurse of a sister to get a new job (her stints around the Bay Area paid ~100k and she only has 2 years of experience).

Developers jump through hoop after hoop for employment, this wouldn't happen if they were in demand like a nurse. The market is just responding appropriately, though maybe not how the masters would prefer it.
-Red orchestra 2, Rising storm 2: Vietnam beta.
- Kerbal Space Program
- Lunar flight

Just to get my mind somewhere else.
If we're trying to get people to "upgrade", why not steer them to LaTeX?

Yes, it is harder to use than markdown, and it is mostly geared toward academia, but LaTeX is also orders of magnitude more powerful.
> One would hope that the machine actually uses that information in real time. Specifically to check for missing or duplicated cards.

They do it's a very heavily used feature of the iDeal shuffler the One2Six model shuffler doesn't have a camera. That was a big problem you often get missing cards that aren't really missing. Sometimes (many times) moisture would cause the card to curl pulling the card corner with its number and suit away from the area the camera views.

The main problem was a deck that wasn't in the database but I had to find one close enough to tune in. It was OK but many prompts of missing cards when there were there.

Other problems are table felt fibers sucked in, makeup, hair around rollers, card dust all get on the lens and around the rollers.
Flatmate bought a switch and we've been playing quite a bit of Mario Kart 8. It's just nice to play a game that you don't need to get 'in the zone' to enjoy. The switch controller setup is really good too.
the 10th amendment would beg to differ
As i have said in another comment: I'm thinking on switching to Soylent (or Joylent).

Do you have any thoughts, advice to start?
I have a few ideas, but the main one is that: independent of the language/semantics, languages only really take off because of a "killer app" use case where they are required. Once that's in place, tooling is built to make it much easier to complete projects in.

As a few examples: Objective-C was only popular for years because it was required to write iOS apps. Ditto JavaScript being the only way to write for web. Ruby only got popular after Rails. C++ was the blessed way to write for Windows in the 90's. Java had a giant marketing budget, "write once, run everywhere," and was looking to be the best way to write for the web (lol applets). This isn't a perfect explanation, but in many of these cases, it wasn't about eager-vs-lazy, control flow constructs, variations in type systems, or anything related to what the language offered you, it was primarily necessity to be on the platform of your choice.

After that, tooling evolved, and they became easier to write major projects in. Why write a web app in Erlang when the JVM has every major templating system, an implementation of CommonMark, several high-performance JSON libraries, model validation, several mature build systems, and thousands of Stack Overflow answers?

This makes it hard for languages like Crystal or Nim to take off, but ON TOP OF THAT Prolog is asking its devs to completely change how they approach programming.

What would it take to make Prolog take off? A killer app. Which, in the 80's, looked like it was AI :-p
Alternatively, they might have received their item file from a system which bungled the encoding. Source: POS system developer
I would argue the American attitude is: Money is everything because with enough money you can have anything.

It's just a different perspective on life.
Cool. I've watched videos, but I haven't yet tried that method. It does appear to be ultra low budget. Since the roast happens so quickly, is it difficult to control roast levels if you want a light roast at the end?
>Why is the marginal student not drawn to study CS at a top school, and why would a top student not want to study CS at a non-top school, especially if he or she can find boot camps and MOOCs to bolster learning?

Because I'm not smart enough to get into MIT/Stanford/UCB/CMU?
HS1-SIV is out of the running for CAESAR now, but you can get a list of CAESAR round 3 candidates, many of which have NMR properties, here:

https://competitions.cr.yp.to/caesar-submissions.html
+ The difference in long term vs short term capital gains could be a factor - depending how long you held exercised shares (83b election etc). If those are held longer than one year it would fall into long term capital gains which is a large tax benefit [short term capital gains is calculated as regular INCOME]. E.g. if you have held shares for 10 months I would see if you could wait to sell your options for 2 months - your shares will probably time align with the other founders so it could be an easy sell.
I agree with the gist, but note that even with strings, "00122" is less than "00200" :)
Is this an alternative to the cpython interpreter, or is it just a bundle with numpy-backed MKL? Not that it wouldn't be handy, but anaconda python does provide this too.
Any other text-based games you'd care to recommend? I'm a fan of Counterfeit Monkey, Spider and Web, and a few particularly good Choice of Games games, like Lost Heir and Choice of the Deathless.
If you're actually using Houdini for custom layouts (including SVG—SVG doesn't really have any layout at all), then I don't have a problem with it. My issue is more with the performance-oriented Houdini specs, for example Animation Worklet.
(Swe) Dike = ditch

(Eng) Dyke = dam/sexual slur
A better question is "why do we care".

Software is about the only career I can think of where there are movements created to inject social status into it so that people get into it who are only interested so long as it comes with social status/trendiness.

The major also doesn't fix the thought process. You either have it or you don't.
I listen to the Mixergy podcast and Andrew always quotes Similarweb to the interviewees. It always goes "According to Similarweb you get 90% of your traffic from X site?" And the interviewee is usually like "I've never heard of that site." I don't really trust the data coming out of similarweb.
> Free speed up of code

Well... your paying for the hardware.
As someone who's been in a similar situation - being paid to support software that had two minor issues in two long years - I'd say: leave.

You are absolutely right about your career stagnating. Unless you are working on some kick-ass side-project that is making a difference (whether as extra revenue or a useful piece of open source software), you'll probably grow bored and restless. The longer you stay in that state, the longer it'll take you to go back to being functional in a day-to-day team environment. It's not fun.

And always keep in mind: you don't need to make the jump in a vacuum. Use your current situation to your advantage: take your time to find the perfect company for you, with similar compensation and challenging work that'll keep you engage. You won't regret it.
Mathematics of shuffling by smooshing
CRISPR gene editing can cause hundreds of unintended mutations
People.ai (YC S16) Is Hiring Senior Front-End and Back-End Engineers
A Remote Worker's Survival Guide
JS web frameworks benchmark – Round 6
Pro tip, write your name as it is in your passport on the <<<<<<< line
~9. Would not have gained an interest in CS or politics otherwise.
Hehe my wife would disown me if I ever tried to do this in the kitchen :) I stick to the back porch.
No: you can't use SIV "online".
How to stand out as a Junior Developer to get your first job?
It also may be explicitly disallowed. I'm in a deadwood position on a company that's still private and the shares have a restriction that they can only be sold to the company or via a deal that the company brokers.

Humorously enough, while I was reading this thread, I got an email from the CFO of that company, who I haven't heard from in a couple of years now. My heart skipped a beat. :) Alas, it was not an heads up about a liquidity event...
lol, it is.

for the record, i'd probably do it if i was offered $500k.
The reason is that they can hire from a massive pool of developers and target Mac, Windows, and Linux all with a single application and UX.

I always found writing Cocoa-based code to be surprisingly elegant. The only thing that ever felt weird was having to switch back and forth between Project Builder and Interface Builder.

In any case, there are a lot of things that are hard to build and also have great, coherent sets of tools to build them. Erlang comes to mind.
If the OP reads this, this fragment makes no sense:

> Even thought the GPU is the MVP in deep learning

Also: if you ever do another build: do not take the parts out of their protective packaging until you need them. A nice little bolt of static from your fingertips to the motherboard, memory sticks or GPU terminals could ruin the part. Those bags and the foam are conductive and help to disperse static energy so better to use them until the last moment.
If you are skeptical of the company's future, just take the $100k and move on with life.
How 17 Lines of Code Improved Shopify.com Loading by 50%
GCE allows custom VPC setup, subnets, routing tables, and VPN's. They also have easy to setup cross project VPC connects and their firewall rules with tagging is superior to security groups.

I also find your comment arrogant and misguided as I also run a US based ops and DevOps consulting company:

> but if you actually understand the complexities of VPC networking AWS allows a lot more flexibility with routing and (potentially) network level security than GCE
Which didn't pass the 3rd round of the CAESAR competition.

But the same idea can still be applied to ChaCha. See https://github.com/jedisct1/libhydrogen/wiki and https://github.com/codahale/xsalsa20poly1305 for example.
Nice game, but there's nothing intrinsically quantum about anything that happens. Everything is perfectly describable with classical E&M.
Libre Office, Google Docs and AbiWord are fine.
In case anyone would like a mirror, I've tried to save the page as best I can here: http://mirror.xwl.me/why-so-few-computer-science-majors/peop...

I seem to have the only working mirror which includes his graph, though the link to the original on his site is: http://i2.wp.com/danwang.co/wp-content/uploads/2017/05/bache...
Another problem with GCM is that GHASH is hard to compute safely without hardware support. Modern Intel CPUs have a CLMUL instruction that makes it straightforward and fast to compute without needing table lookups, but IOT devices might not have PCLMULQDQ or an equivalent available.
Right. I found this dissonance a really unexpected ending to the story.
Ugmonk
Alpine with Xorg plus your Electron app, on a Pi.
It's the same stack, but compiled with Intels compilers against Intel math libraries (mkl and teh others). If you use standard algorithms it's a good choice.
I think it is also the only career which people try to inject diversity just for the sake of it.

Maybe I just live in developer bubble and don't know any better, but I've never seen a movement like "Girls do Plumbing!", "Black girls construction bootcamp" or "Mining for equality!".
I'm not suggesting universal health care drives innovation. I'm suggesting that introducing it to an already innovative culture would serve as a multiplier of some kind.
We don't know whether that's pre- or post-money (I'm not sure the OP is even clear on the difference). What we need here is the pre-money valuation, which could be quite low.
I've written frontend apps in C++ with Qt. Please don't take my hate of frontend Javascript personally -- I really do hate it though.

It sounds like that you have not much experience outside of Javascript and somehow think that what I see as a massive mess is somehow acceptable in 2017. It really isn't.
Primarily, because computer programming is low-status.

(also, this is one of the main reasons why females are deterred from joining)
Extracting LastPass Site Credentials from Memory (2016)
How do you protect against correlated failures - i.e. does separate hosts rule out the same person operating multiple servers? Any geographic requirements so the same power outage, hurricane, etc. doesn't take out multiple copies? That latter point seems especially relevant if you're promising protection against legal threats: say someone uploads banned data and this becomes known. Does the system allow those specific encrypted blocks to be removed or does that turn into legal action against every host subject to that legal authority, potentially taking large portions of the network offline at the same time?

> There's nothing illegal about price discrimination, it's a common buisiness practice and something companies strive for

We weren't talking about price discrimination, however, but anti-competitive practices which are illegal in many places. If AWS advertises storage for $0.02/GB/mo but tries to charge Netflix $0.05 or refuse service, they're going to hear from a state AG.
That last sentence is definitely good advice!

Working on open source during the time is a great idea, but make sure you clear it with your employer first. By default, they would have copyright claim on work you do during time and with facilities they are paying for.
Show HN: Minimal Node.js express based application for project kickstarting
"lump sum"
Nurse is licensed though. That's instant credibility.
I'm a freelancer/run-my-own small dev consultancy and I pretty much never jump through hoops. The level of demand doesn't create the hoops. Some combination of needing to create the appearance of "only hiring the best of the best of the best just like everyone else" & fear of a bad hire creates the hoops.

I don't have trouble finding work and often need to bring on additional help. The hoops are cultural.
I think you're over-simplifying things if you say that not understanding Prolog programs comes down to a "lack of ability for abstract thought". You can think abstractly all you want, that will not help you if you don't know by heart the sometimes arcane rules of setting choice points and binding variables. Those are not things that you can work out on your own, thinking abstractly; those are concrete rules chosen by people over a period of 40 years.

The converse is true, of course: A person that cannot write well structured and "nice" code in other languages won't be able to magically do that in Prolog either.
Extracting Chinese Hard Subs from a Video, Part 1
I think sometimes you don't even need the "killer app" when the language itself is "pure tooling" and there is a sufficient demand for tooling in a given market, see TypeScript that basically is "JavaScript with tooling".
I tried a European version of Soylent: 'Queal' I found the more of it I ate the more messed up my bowels were. I'd feel fine but I'd fart a lot and have weird soft poops. I think my own guts definitely need roughage.
I challenge the idea that it will be "probably bad in the long term." Because 1) there won't be a long term, and 2) what happens, is up to you.

1) No company can afford to keep you on the payroll indefinitely when you're not generating revenue for them. If (after some amount of time known only to them) they can't put you to work, they will have to let you go.

2) How you chose to spend this time, how well you took advantage of this opportunity currently presented to you, will determine the whole good/bad thing. If you play video games and wait for a phone call, it will be bad. If you do things that get your name out there/increase your visibility, or that increase your skills, or both, it will be good. Ways to accomplish that would include working on open-source projects, creating classes/tutorials for Udemy or the like, going to local networking events or better yet giving presentations at them, and so on. Basically I would act as though you are actively looking for something else, without actually leaving. It needn't be a bad faith thing... who knows, you might end up getting some company interested in you, and having them hire your employer to get your services, thereby getting a new client for your employer.
OnePlus Announces Referral Programme as the Launch Date of the OnePlus 5 Looms
I imagine that LibreOffice's Office binary format code is much different from MS Office's own and probably much more robust to invalid input. Of course, this comes at the cost of compatibility.
Questions like this highlight the practical character of the taxonomies/theories we construct. It seems like a very strange and maybe stupid question if you are thinking along the lines of, "is society really an organism after all?"—but if instead you just wonder if it would be useful to consider society as an organism, you may find it has enough shared properties to make the designation appropriate, which in turn allows you to borrow certain known things about other organisms and apply them to societies.

On this specific question, I think 'organism' comes with too many additional properties not possessed by societies. But, I would not be surprised to find that it's useful to class societies as being the same types of things as minds. For instance, minds and societies both do a kind of decision making (e.g., electing a president). There's a temptation to say that it was just the humans doing the decision making—but a more objective view is that decision making is something that happens in human minds (the human didn't do it—the neurons did! —no, the molecules did!). Of course all sorts of difficulties may arise, and we're already bumping up against claims on free will... Seems like a fruitful thing to think about though.