skysight-inc/HackerNews huggingface dataset:
> Authentication is a stronger notion in security than integrity because it simultaneously guarantees and requires integrity - there is no point in having integrity without authentication

the "Authentication" in "Message Authentication Code" really is a term of the past that we now use to mean cryptographic integrity.

Another way to see this: integrity is not a security provided by hash functions in the cryptography sense of it.
GitHub marketplace
Accountability Among Peers Is What Makes a Great Development Organization
The main lesson of aircraft safety culture should be that you can have an enquiry to establish what happened, or an enquiry to find out who's to blame - but not both, since once you start assigning blame there's a motive to conceal or destroy evidence.

> no secrecy

This is a nightmare for the person who's percieved underperforming due to unavoidable health issues that they've discussed with their manager/HR but would prefer to keep secret.

> social pressure to confess errors

This turns into bullying very quickly.
Good morning, have you used machine learning?
Thanks for detailed reply with references. Knowledge enhanced. :)

Yes, I suppose it's incorrect to think of the charger as pushing current; but with a resistive load, with LEDs, with raw lithium cells, most batteries, and with most loads in general, the current can be expected to increase as the voltage increases. And some power supplies regulate output by current rather than voltage. I didn't know that about lab power supplies, very interesting!
The invaluable role of programmatic in campaign optimization
My experience has been that for a sanity check a discussion with a trusted colleague in a different department is worth a lot. If XY is genuinely concerning then that person will say "yeah, I've found that, too, and it's really concerning". What's with the need for a formal shame list and for establishing an Akashic record?
Reminds me of "Worse Is Better" by Richard P. Gabriel: https://www.dreamsongs.com/WorseIsBetter.html
Not sure... "PRO" should probably be a label for "PRO" versions of something, and 16GB should probably be a minimum in that case. Lots of people doing heavy image work or video may be better served by more than that as well. Which is well within that segment.
Aventus: A touting and counterfeit solution for the event ticketing industry
Maybe if I had stricter auditing requirements, which I don't currently have to worry about.
Congrats on the release. I use GNU Guix ontop of Fedora to use some extra packages as well as commands like `guix environment` to set up a dev environment to work on projects.
Honestly this is the number one reason i quit using my SP. I know a lot of people here love them, but it was just too obnoxious to use on my legs, soft surfaces, and lots of other places.

I will agree it was awesome on plane tray tables, but that was about the only "oh cool! obvious advantage!" location.

i found myself wanting a normal laptop that could hold itself up repeatedly, and kept switching back to my macbook pro
We live in a time were everything gets "community reviewed", jr devs like to post everything they do on github/bitbucket/etc, fork someone else code and comment on issues aka "Social Coding" just to get people to "praise them" and to score "internet points" but historically coding has been an a "alone skill", despite years of people advocating "pair programming" or some "agile" shit, the most useful codebases come from devs that isolate themselves on a topic, solve the problem and came with a solution. In the old days i used to code "things for me" not for everyone but since the era of "Social Coding", everyone pressure you to code for everyone and i have been only disappointed with people bashing "my code" because it's not "unit tested", made in "go" or "rust", etc... my advice for everyone that feels the same, is to stop "contributing" on github and start doing things for themselves, stop listening to the crowd and start living outside "the grid".
Disagreed (reasonably politely but persistently with lots of data) with upper management about what became a key technology to Google a year after I left. Got told to shut up about that technology or leave. Chose the latter and made a successful career out of being an expert in that technology. Found out later through my contacts that HR slammed the door behind me.
Maybe he'll help make Java more performant on AWS Lambda and cut down the initial startup times for the JVM!
I had to look up paraphrase again because I had only ever seen it in the context of taking a larger work and making it smaller whereas your very clear example is larger than the original work. Thanks
People don't leave perfect moldae prints everywhere.

AFAIK CCC never had a proof of concept of a real world usage of this. They needed access the original finger.

That isn't to say it's not possible but it is a pretty major asterisk.
It's a common abuse tactic: establish the behaviour you want as "normal" and gaslight people who object. Often it works. It's also the sort of thing that people can very easily explain away as "joke", "hazing", etc.
I've been using a Surface Pro 3 as my one-and-only for almost 3 years, and it really feels like time to upgrade, so I've been looking forward to this one.

My workload is probably something like 40% reading, 30% writing, 25% coding, and 5% running code, and the Surface has been a nearly ideal form factor for this.

The new "Surface Pro" ticks a lot of boxes for me:

- Supports my existing keyboard, pen, dock, and power adapter

- Improves battery life substantially

- Offers improved keyboard and pen for when I get around to it

- Fanless options

- Improved performance (not that I need much more)

Unfortunately, the configurations are weird. My ideal machine is an i5/256GB/16GB. The closest I can get is i7/512GB/16GB, which nearly doubles the cost, and requires a fan. I just don't get how they can make the floor for 16GB RAM $2200. Is there any professional workload where 8GB isn't constricting today, let alone in another 3 years? My only thought here is that maybe the RAM increases the thermal envelope enough to require the fan, but that seems unlikely, and I would still happily make that sacrifice if I didn't have to also pay for the processor and disk upgrades.

I'm going to harangue them on Twitter, and also look into clearance SP4s with 16GB.
Another obnoxious one: Employee purchased devices will be denied warranty if you aren't that employee. I'm assuming this is to prevent people from "trading" devices or something. I got one from a friend who worked there, and they refused to even provide with an OS image much less do any repairs. The serial number was just blocked.

This is categorically not true of apple or several other brands i've gotten gear this way from.
Rather superficial attempt at wit. Anywhere "in the real world" that operates on feedback - which in a corporatized world is many things - also has that "interpretation by the system" - see the MSM as the most obvious example.
> I only read informative comments

Um.

How do you know that they are informative before you've read them?
> Being rated as someone who meets expectations is not a punishment.

On a scale of 1, 2, and 3, where each of these confers different privileges, when I knock you down from a 3 to a 2 specifically because of X, I am punishing you for X.

The corporate words tied to the ratings are not magical.
3 OpenStack Monitoring Challenges and How AI Can Overcome Them
In 2017, with Spark's Catalyst engine and DataFrames data structure (allowing SQLesque operations instead of requiring writing code in map-reduce paradigms), you can have the best of both worlds in terms of big data performance and high usability. Running Spark in a non-distributed manner may sound counterintuitive, but it works well and makes good utilization of all CPU, RAM, and HDD.

Spark is orders of magnitude faster than Hadoop, too.
I mean there should be a zero expectation policy if you are on paternity leave. Then if you actually get something done, then you're by definition "exceeds". That's the logical approach. Or you just don't have a performance review for that period.
I'd say the Pixel is the best Android phone for sure.

But that should be expected, as it's from Google
I Agree with your general point, however Poland nominated the land for UNESCO natural world heritage site status, not the UN, or the EU, and such things are protected by international treaties (ie the Geneva Convention).
But how does this work in practice? I could (theoretically) create 5000 github accounts and have full control over the repo in one month [1].

This means I could create a pull requests which gives my main account absolute voting rights unless other real people try to organize over 5000 accounts to vote no. While this can happen in the real world as well (just look at Turkey), it is quite hard to achieve (you first need enough people to support you that you can gain such power).

In the internet, creating accounts is pretty easy and unless github flags my accounts (which can always be circumvented), there is no real democracy just like with Bitcoin when the most determined/resourceful person has the most power. That's because they either managed to create enough accounts, or in bitcoins case, have custom hardware to control the creation of bitcoins as well as (almost) all transactions.

While the idea is pretty interesting to do that automatically, a better approach IMO is to have humans decide what to implement and what not because humans tend to be able to spot fake votes when there is no meaningful discussion why something should be changed. And thanks to the wonderful nature of free software, if a maintainer starts to prioritize their own agenda over the community, the community tends to just fork the repo and do their own thing. This is the best example of democracy I have seen so far. People are able to discuses what they want to do and if they fell their interests are no longer supported, they can just do their own and bring other over if they feel the same way.

[1]: the current minimum age is 1 month according to https://github.com/chaosbot/chaos/blob/master/settings.py#L3...
Ahhh...so basically, this is a system where you inherently trust the integrity only of your own computer. Yes, sorry about that I misunderstood what you meant when you used "connection"...in my head I'm thinking of stateful networks, not a filesystem.
Also in a more abstract sense, such as voter blocs and political strongholds...
More and more I reach for pyspark for medium sized tasks because I like the API and if I need to scale it I can. I don't think this is as black and white as it used to be now that big data framework interfaces are getting as good or better than small data interfaces.
The way it usually happens is by developing relationships over the years. Often, the right person is right due to capabilities rather than responsibility. What matters more is who gets the job done rather than who to blame for it not being done.

Which might imply building a software system to detail responsibilities or even just entering the data may often or even the disruption of notifying the responsible party may be less efficient than just doing the task oneself.

Good luck.
Most obviously, the system should not tolerate a constant-size pupil, ever. The pupil has micro-dilations around twice per second, and your system is really terrible if you don't verify that changing diameter.

What if one of the subject's eyes is a glass eye? What if they're wearing colored contact lenses? Wouldn't both of those situations complicate that?
Relevant:
https://www.apple.com/uk/legal/statutory-warranty/
http://europa.eu/youreurope/citizens/consumers/shopping/guar...

I still don't understand how these make sense together...
Linux support will be limited.

I'm running Ubuntu 16.04 and Win10 on a Surface Book
- no pen input, can't use dedicated GPU, wifi signal occasionally dies, can't wake up from sleep

Other then that, Linux actually runs pretty well and is very usable.
You miss the point. "10x" doesn't mean working 2-3x longer than everyone else. If that's necessary, bad news, you're not a 10x coder. You're just an above average workaholic.
What about the ETH blockchain is needed to fulfill this requirement? Bitcoin's blockchain can be used in the exact same way.
A lot of frequency has recently been reallocated in the US, a large part being the old analog TV frequencies, which have just been auctioned off.
I think it is because HN does not have "features" like being able to follow other users. I'm thankful of this I don't get Twitter like emails saying "ebbv" liked a post on HN!
I'm not sure how valid the last point is (my Data is 5TB or bigger) when you can create a 2TB (memory) x1 instance https://aws.amazon.com/ec2/instance-types/#memory-optimized . Also someone else mentioned using Spark's Catalyst engine and DataFrames data structure. My previous experience with Spark it would automatically swap the data so it would be feasible to work with 5tb of data.
They do it because customers find it simpler, and because it makes it easier to keep all the models in stock.
Ask HN: What difficulties did you overcome in last 10 years?
Difficulty can be personal / professional / physical / psychological
That's it, yes.
Twitch Plays Github
I work in government. Hard-coded passwords, sharing production passwords by email, etc., is the norm.
I think that gnus & magit are pretty good.

Gnus is a full-featured news, email & RSS reader (and others too maybe?). I've used it for most of my life.

Magit is a full-featured git UI, good enough that I don't bother using git from the command line anymore.
There's a really good paper that somewhat formalizes this: https://www.usenix.org/system/files/conference/hotos15/hotos...
If someone's wearing a colored contact lens I would expect iris recognition to not work. That's like trying to use a fingerprint reader with gloves on.
Excellent! Where can I get my copy?
It's subjective, but since Sean Connery starred in many other high profile movies and thus diluted his image a bit, Roger Moore's may be the one true James Bond. His James Bond movies were epic, e.g. Moonraker (launching several Space Shuttles at once anyone?).
Of course, and hopefully he does. Working double the hours in a job you don't like would be awful.

I think most of us would accomplish 3 or 4 times more than we do given an additional 30+ hours of peace and quiet without distractions or external commitments, so I'm really asking if he's actually accomplishing more than any normal 1X developer would in his circumstances. I strongly suspect he's very fortunate to have a job and a family who support his choice to spend large amounts of time doing what he wants to do.
The gains on increases in productivity have gone to workers, just not the workers being replaced. The gains are going to the workers implementing the automation that has increased productivity. The gains are also going to the consumers in the form of cheaper goods and services. Why would those not responsible for the productivity gains be entitled to those gains?
In between he was at Google and Liquid robotics. He also hated Google quite a bit due to usage of Java in Android without license from SUN/Oracle.

With all due credit to him, I am not too sure the enormous success of Java was due to language excellence or massive marketing expense by Sun and Oracle.
I'm not so sure. Wouldn't a person on paternity leave be expected to perform less, if not zero work? By doing that, didn't he "meet" expectations? That seems, technically speaking, the accurate description.

Of course, if paternity leave really means "we expect you to work at a similar rate", then it's quite obviously not a "paternity leave" in anything other than name.
i think we're pretty much done with USB-A given any form factor besides desktop(-replacement?) these days. I'd rather not sacrifice the space for the next 3+ years when its basically relegated to phone charging duties - and barely that given this generation of battery life.
I thought a "timesuji" was a move that took advantage of the 30-seconds-per-move rule by having an obvious response and not affecting the overall board state. Like, playing inside a bamboo joint.
The new surface pro is not a huge update from SP4 in terms of processing power. SP4 is still in the game, just without the extra pen sensitivity and battery life. That's my guess.
Managing Code Change with Impact Analysis
That struck me as well, but thinking about it a bit more, I could see there being a set of correct decisions in trading, which could be taken as assumptions. I'm not sure such a set exists, but after playing a good deal of Catan, I think they might. In a game where everyone knows what they're doing, the trades are very predictable, and it's pretty clear when someone has made a dumb trade. It seems like there are still too many unknowns to consider it "solvable", but it seems less open ended than poker, for instance.
The Hitchhiker's Video Guide to AWS ECS and Docker
Now, I'm sure Gosling is a much smarter man than me, and I couldn't be a 10th the language designer he was, but I'm going to say something terrible:

Java was badly designed, as a language. The things that made it good came far, far too late in its lifetime. The thing that made it successful was not a good design, but big corporate backing, a free compiler, a batteries-included approach to libraries, good marketing, and good platform support.

But the language itself was bad. No custom copy-by-value objects, static typing without generics or macros to make reusable collections, a GUI library that was widely considered a bad joke, a null hole big enough to drive a truck through, checked exceptions, the frustrating inconsistency between .Equals and ==...

So many bad decisions. Many of these were mitigated over time, but it took a long time to get there. It's hard to say that "designed Java" is really a good feather in the cap.
Take a good look at any new stuff to determine what it is good for (if there's any). Keep your results in mind, and go back to your old stuff.

Then, if you have a problem that can be solved by the new stuff, go and learn it, otherwise why bother?

Honestly I don't see that huge influx of novelty people keep claiming is here. Yes, specialized knowledge is advancing rapidly, but mainstream tools are quite stagnant. (E.g. I'm avoiding learning how to script Docker for near a decade already.) It may be a matter of changing your focus from products into technologies (what does require deeply learning a few techs).
My understanding from the article was that it doesn't name the offenders. (The one exception being the Alphabet CEO from a public meeting.) To me, that precludes it from being a "shame list."
At least they did not ask him to implement unsigned integers in Java.
It is possible that it could be three years old but they had purchased it new and owned it less than 2 years. Just means that particular one sat in inventory for awhile.
back to naming hell I see.

Surface Pro > Surface Pro 4 > Surface Pro 3 etc...

Is it bad to have higher numbers in product titles? I don't see a problem with "Surface Pro 5" but maybe "normal" people do?
M: 007!
Gen. Golgol: Triple X!
Sir Gray: Bond! What do you think you're doing?
Bond: Keeping the British end up, sir.

RIP
How many XML files have to be configured for this "easy to setup" backend?

Node is "simple" but today you need 3 package managers to install the dozens of small libraries needed for even a simple project

Really. When I found out express.js needs an extra library to read POST data I was stumped
I would like to point out one thing. There are 3 or 4 people in cryptography that are respected for their amazing talents in the field AND actually take the time to comment around here on articles.

For some reason you got lucky, and all of them are in this thread talking to you, attempting to give advice. Advice that some people pay a LOT of money for, to these specific people.

Most of your responses to them have read very defensively and argumentative. Out of everything said so far, this is the thing that scares me about possibly using this system.
You're right on most accounts but (and it's a big but) there is a world between SUNW lush-y experience, events, "primadonnas" and Oracle's "it's just extorting money from customers locked-in in any case so fk off the people working for us". (disclaimer: I've been in both).
How Do You Count Without Numbers?
What about this are you describing as copying Apple's strategy?
Some programmers might code 10x faster, but lack the experience and wisdom to know they shouldn't be writing a piece of code at all. If your metric is lines of code, then the 10x programmer looks really impressive. They might truly be able to reinvent some wheel 10x faster than someone else.

By another metric, someone with the experience and wisdom to solve the problem by integrating existing solutions and writing less code may hypothetically complete a task 10x faster than the former 10x programmer - effectively becoming a 100x programmer in comparison.

But it's very likely some managers won't recognize what the "100x" programmer has accomplished. He just made the task look "easy", and now he's going to have to fill his time with more tasks, and at review time might look mediocre in comparison to the fast but naive 10x programmer.
In the context of mass marketing, though, it is again very old. PR is basically propaganda, where these emotional manipulation techniques are very important.
From Software Restarts 'Souls' Engine
He lost his job because he said some incredibly ignorant racist things and treats women like objects. He deserves all the shit he gets. Yes, it is "dangerous" to have opinions like that black people aren't as smart as Britons. Here's an "offhanded remark" -

>He says that he is “inherently gloomy about the prospect of Africa” because “all our social policies are based on the fact that their intelligence is the same as ours – whereas all the testing says not really”, and I know that this “hot potato” is going to be difficult to address. His hope is that everyone is equal, but he counters that “people who have to deal with black employees find this not true”
Hello! Sorry, I accidentally linked to Reddit instead of Medium - really didn't mean to do that. I am hiding and reporting and will repost with the correct link.
I know this is a joke but an Amazon recruiter sent me prep info for an interview last month ( I declined ) but it says no one does whiteboard coding. They give you a laptop for those portions of the interview. They only use a whiteboard for systems design questions for software developer interviews. (not that James Gosling would get the standard interview, either)
Have you read George Orwell's "Politics and the English Language"? If not you should give it a read, it's short. This comment reminded me of his criticism related to Latin usage.
I don't use Java much but out of the languages you named none of them are better at much and with the exception of C# all of them have far, far worse tooling.

Go is hardly a "modern language" from a language design perspective so you're not gaining much over Java here. It has horrendous package management and the IDEs, debuggers, profilers and live monitoring tools are probably a decade or more behind the tools available for Java and the JVM. It's also much harder to find Go programmers than it is Java programmers.

Python is a very slow dynamically typed language with a horrible deployment and concurrency story. A lot of big companies justifiably won't even consider a dynamically typed language. Again all the tooling from package management to profilers to debuggers is way behind what's available for Java and the JVM.

C# is a real competitor but for the most part it's still tied to Windows. This is slowly changing but the vast majority of C# libraries still require the full .NET runtime on Windows and the open source community around C# is a small fraction of the size of the community around JVM languages.