skysight-inc/HackerNews huggingface dataset:
What you just said isn't said often enough.

If someone works 12 hour days, and then implements the, and it hurts me to even type it out, "lifestyle hacks" to further squeeze the sponge of productive hours, the sacrifice they make to their own personal lives is a big toll. 12 hour days, plus commute, plus 8 hours of sleep leaves little time for socializing, hobbies and let alone exercise.

But the bigger tragedy is, on a team where there might be competition (eg., a bonus), the guy pissing his life into his work is going to get the accolades and bonuses, or at least it looks that way, which takes a morale toll on the other members of the group. It leads to a race to the bottom.

This might be okay when you're junior, first starting out, or a partner, or someone with significant equity (read: in a few years they won't need to work), but for everyone else, there is a very high risk of a toxic work situation.

To the person above who said that we're highly paid and so forth and expected to perform - well we're not paid because we're expected to perform highly, we're paid because laws supply and demand at present benefit us. If a situation should arise where the balance of the scales reverts, I assure you you'd still be completing your beloved 12 hour days with a much smaller salary.
It's an exaggerated satirical version of real life history of practice of washing hands.

> Despite various publications of results where hand washing reduced mortality to below 1%, Semmelweis's observations conflicted with the established scientific and medical opinions of the time and his ideas were rejected by the medical community. Semmelweis could offer no acceptable scientific explanation for his findings, and some doctors were offended at the suggestion that they should wash their hands.

https://en.wikipedia.org/wiki/Ignaz_Semmelweis
What to look for when applying for a remote job?
Martha Stewart insider traded with a far much less amount and went to jail afterward. These Equifax people need to go to jail.
But then if you follow this line of thought you can deliver the bulk and go only to the grocer for the smaller, easy to carry purchases. So, maybe, there is no need for the car anymore?
Breaking down Amazon’s mega dropdown
Happy to answer, although this is a bit of a funny forum for it:

From a work perspective, it's pretty simple. I quit, and then was rehired to the same position a year later.

But The Times' Graphics Desk was super nice about it. We had a handshake agreement that I'd come back when I got back, and they even lent me a laptop to maybe file some travel-ish bits and bobs from along the road. So in that sense, it was partially justified.

In the end I didn't end up writing anything for them for a few reasons: I didn't want to turn the ride into work; I wasn't on my best NYT-standards behavior (booze, bribes, women) — well, one spectacular woman, and we're married now; and finally, I personally hew somewhat to the Janet Malcolm attitude:

“Every journalist who is not too stupid or full of himself to notice what is going on knows that what he does is morally indefensible. He is a kind of confidence man, preying on people's vanity, ignorance, or loneliness, gaining their trust and betraying them without remorse.”

Especially with respect to travel writing. You can do it right, but you really have to take the time and be invested and involved. And I was riding to follow the seasons and wasn't.

Ultimately, even though the industry as a whole is in decline, the NYT and other world-class news sources are still strong, and in some ways, getting stronger. In particular, the visual journalism The Times publishes every year keeps pushing the state of the art.
Was windows 2000 open-sourced?
If they became best friends on the job that's one thing (but a long term problem)

If they became friends before and then hired each other it's a red flag

Cronyism is the practice of partiality in awarding jobs
and other advantages to friends or trusted colleagues,
especially in politics and between politicians and
supportive organizations. For instance, this includes
appointing "cronies" to positions of authority,
regardless of their qualifications.

https://en.wikipedia.org/wiki/Cronyism

( essentially a variation of https://en.wikipedia.org/wiki/Nepotism )
Traveling with Beacons: Checked Luggage Made Easy
Storing lightning in thunder: Researchers turning optical data into soundwaves
Nix package definitions sit in a Git (or other VCS) repo, which you can access-control through your usual means.

The binary artifacts are behind an HTTP server, which you can access control through whatever normal access control mechanisms, or leave uncontrolled and rely on the fact that it's not possible to retrieve artifacts from the server without having access to all the build inputs so you can hash them.
> To parent post, why should we settle for "good enough"?

Because it's an actual standard and benefits from wider mindshare and support.
10x times better than the US? Maybe yes - but not cheap and fast enough for micropayments.
About ten years ago I moved from New York State to Washington State. I wanted a bank account that would follow me and Chase had not yet bought WaMu so I went to BoA in NY, opened an account, moved my money into it.

I arrived in Seattle and at the BoA branch there they said they didn't recognize BoA of New York. I couldn't deposit into the WA branch. I could write myself a check and it would be processed with the reduced speed of a check from an out of state bank.
The reason for the churn is not lack of a standard for components. It's that the ecosystem is both new and large, so many experiments are going on, some of which become popular until the next best thing comes along. This won't be solved by components. It will be solved slowly over time as innovation levels off.
There are even "illegal" numbers.
The Kerbal-Factorio Business School: How sim games teach mental models
Since I enjoyed using this bookmarklet on this site, I thought I'd recommend it to others as well:

https://alisdair.mcdiarmid.org/kill-sticky-headers/
I am pretty sure every US state attaches photos to drivers licenses, too. Also, most of not all states require a birth certificate not just a ss card.
Mail – outlook_48FB5599F930C60Foutlook.com
And now to something completely different.
Coffeescript's => binds this.
Javascript's => also binds this (more or less)

Seems to map fairly well conceptually.
"I think you'll find that pushing back on the four hours of usual distractions per day will be more productive than working long hours."

Pretty much this. When you are explaing long hours by on the job ineffectively, then you need to deal with on the job ineffectivity - especially if you are in any kind of leadership position. Otherwise you end up rewarding innefective workers and punish workers with better organizational skill.

General feeling that it is ok to work ineffectively because we stay late anyway was one of the things I resented the most in previous job. And people who caused interruptions and wasted everybody time were seen as "hard workers" because they stayed late.
I took the class earlier this year. Like others have said, it’s a multi-hundred people affair, not very intimate.

Having read the books, the lecture provided no value whatsoever for me besides the “cool” factor of seeing ET in flesh (and a sneak peek at his next book). At best I would say that the lecture is a good crash course for people who haven’t read his books yet (the fact that you get the books as part of the fee supports that theory), at worst it’s mostly self promotion (he spent a solid 10 minutes showing us his twitter timeline and pointing out his favorite tweets that he had retweeted o_O).

I would be more interested in the course he puts together with other designers, if he ever does that again.
> They've (sadly) done almost nothing towards the goal of truly improving the update situation until now.

That's not entirely true. They attempted previously to do this via policy (Android Update Alliance), but that failed because it's too expensive for OEMs to update, which is what Treble is attempting to fix. And in the meantime over the past several years Google had taken a policy of backporting security fixes, which many OEMs are on board with and do roll out security fixes.
Imagine that. They had a lot less staff and funding two years ago.
Loftium will help you buy a house if you Airbnb a bedroom and split the profits
That's what I don't get. Publishers have all the incentive to get behind a solution like this, but somehow I never see a "send a tip" or Flattr button anywhere (maybe I'm not looking?).

I just wish a bunch of well-known publishers would get together and agree on _one_ solution that they'd all add to their site.

It's just a matter of adding a widget on their article pages. They already have large readership. It could kick things off and maybe get over that network effect cold-start issue.

They could add a nice bounty like "make a first payment and don't see ads on our site for a month". Or similar.

A solution like this could be a good candidate because it's neutral. With Flattr or similar you're encouraging that particular middleman. However I think to inspire confidence in publishers they'd need to prove that this solution will have strong support for years to come (which is always unsure with open source projects).

EDIT: To be clear I'm mostly thinking of micropayments to news sites. The strategy is less clear when talking about electronic commerce in general.
Screens just became un-rectangular
Show HN: Doogie – A Chromium-Based Browser with Tree-Style Pages
The delay seems like it's caused by the people who update the database just not having the time to get it done. Or alternatively, just not prioritising it for the time they have.

Either way of looking at it, delaying release of vuln info to wait for the above to happen seems like it would let vulns keep in-the-wild-and-unknown for much longer.

That being said, if you're able to assist with or fix the not-enough-time-to-get-things-done problem, it wouldn't hurt. :)
When Chicago’s Yellow Line was the future of urban transportation
The ABA claims ownership of all banks' routing numbers, but that has yet to be validated in any meaningful capacity.

http://www.gregthatcher.com/Financial/LawyerProblems.aspx
The nature of the Javascript language makes it possible to sandbox an entire library, ensure that two versions of the same library can run side-by-side without conflicts (because they are both in a different sandbox).

The way sandboxing works is actually not specified by the package manager (npm) nor the language itself (Javascript); each consumer of npm packages can roll their own sandboxing mechanism (webpack, browserify, nodejs, etc.).

There isn't even a common specification for the way packages should export public symbols. You have a choice of CommonJS, AMD, Ecmascript 2015, etc.
RealClearPolitics hit by surprise layoffs
I never understood why Google's Nexus/Pixel security updates are staggered over weeks, leaving a lot of people vulnerable.

https://security.stackexchange.com/questions/123401/are-stag...
Inside the store that only accepts personal data as currency
I experienced this first hand recently. It became an issue I pretty much had to leave the company. Not much you can do if your not in the clique.
What’s even more disgusting is that behind the public’s back all of these guys brag about this sort of behavior.

I was reading a book published in 2008 called “Zero Day Threat: The Shocking Truth of How Banks and Credit Bureaus Help Cyber Crooks Steal Your Money and Identity”.

The main bad guy lobbyist of that book, Eric Ellman, who is now the head of the credit reporting lobbyist group (http://www.cdiaonline.org), PROUDLY DISPLAYS his portrayal in that book on his LinkedIn.

http://linkedin.com/in/eric-j-ellman-0a33857

He basically doxxed himself.
In the timeline of events that Equifax released [1] it says that they took the web app down on July 30 and contacted an external cybersecurity firm on August 2nd. The managers unloaded their stock from 7/31 to 8/2.

It doesn't sound believable to me that the managers could be unaware of the hiring of an external security firm, or that the company had shut down one of their major web applications.

[1] https://investor.equifax.com/news-and-events/news/2017/09-15...
Didn't Rubinstein humbly then revisit technique and practise religiously in his 40s? (Not to detract from your point, which I think has value).

I think that the middle way is key. I've met people who think work for the sake of work is valuable. Others who wouldn't touch hard work with a barge pole. If you cherish success, both are required.

Having met virtuoso pianists, I'd say the context which Rubinstein talks from is open to misinterpretation:

Reaching the level of mastery where one can sightread any of the Beethoven concerti or a Liszt etude requires a lifetime of years/decades of dedicated practice, but it is true that once you're at that level, you can find diminishing returns on hard work which encroach upon your creativity.
Oh, yeah that's the real crime. Give them 6 months in jail.

(USA can chew gum and walk at the same time, but where is the probe for the breach...? 143 million people terrorized and most likely thousands will have their life turned upside down because of it.)
Why no expiration date on social media posts?
Disclosure, i work at containership.

We have a SaaS based product that can stand up a Kubernetes cluster for you, and it really does only take 10-15 minutes from signup to being live. https://containership.io
Definitely - the "very suspicious circumstances" part makes sure of that.
Praising results regardless of effort is similar to praising innate ability. So it's in line with the gist of the article.

In any case I’m totally unsurprised by this. Praising innate ability represents an entirely different value system from praising effort.
Why speculate? If you're unsure but still curious, ask for a short term contract to make sure you're a good fit for each other. That gives you an easy out in the end (and for them as well) if things don't work out.
Invalidate golden parachutes due to proven incompetence/negligence?
I'll take that :)

Though, I don't know if it's even gonna be an option on the table.
Yeah the aspect ratio ended up being one of my favorite things about the Surface Book (surprisingly enough, to me)
I don't think Obama was that great but the economic crisis was already under way when Obama came in.
It's easy for the Fed to subpoena all emails, communications, and meetings of these people. It'll be easy to show the breach notice email sent to them, their replies, meeting agenda/attendees, and conference calls with their numbers.

In these days of electronic work environment, there are so many digital footprint one left in the trail.
That's why tumblers exist.
So, er, are mongeese an effective deterrent against these things?
Martha Stewart did not go to jail for insider trading.
John Carmack and friends were working for their own company, mind. That's not the same as a startup employee, even with options.
I'm always perplexed by people's motivations for advancing that argument. The notion that the criminality of your actions depends on whether or not you're already wealthy (other facts not being in dispute) seems like the essence of corruption.
This is always why the pleading to make me sit through my alloted dose of ads for the good of capitalism always sounds so weird to me. You're trying to make me feel guilty about not wanting to allow my mind to be distracted and polluted by a third party that's trying to get me to buy something neither you nor I actually care about?
> There was one player Sammy Sosa who had for years conducted interviews in English who suddenly could not speak English when questioned by congress.

Do you know how stressful it is being questioned? I was waiting to pick someone up from a train station in Spain when security approached to tell me the station had closed, and why was I still there. All the Spanish went out my head. I imagine being questioned by congressional investigators is probably even more stressful.
Lots of reasons. First of all, it is fast and reliable. The choice of MPMs allow for sys-admins to choose exactly how they want httpd to scale. Unparalleled RFC compliance. Load balancing with dynamic, runtime configuration. Failover. .htaccess file. Full support for FPM/FastCGI. Fully Open Source and community driven (not Open Core). mod_rewrite capability. Hundreds of modules for almost every and all situation. Most people simply take the "lazy" route and not even investigate httpd, instead relying on the FUD about much older versions (you still get, for example, the screed that "Apache forks off a new process for each request")... Apache httpd 2.4 is just as fast and reliable as any other web-server out there, nginx included. It's just not seen as the "cool and hip" web-server. I guess some people are more concerned about marketing.
does it work with all plugins too?
Anne Frank Museum Amsterdam – The Official Anne Frank House Website
You can also see on the "Contributors" graph a major increase in CoffeeScript contributions in the past year or so: https://github.com/jashkenas/coffeescript/graphs/contributor...

A bunch of people helped out: https://github.com/jashkenas/coffeescript/wiki/CoffeeScript-...

And GeoffreyBooth coordinated the effort, posting regular status updates & calls for help, handling bugs / feature requests, etc. I didn't realize he was also writing most of the code!

CoffeeScript2 started with a manifesto at https://github.com/coffeescript6/discuss which turned into a cooperative effort with jashkenas to move CoffeeScript forward in a responsible way. An interesting story in its own right.
Implement Tcl in Tcl (2007)
Hmmm. If you're doing the compilation yourself, I'd imagine you could rely on what browsers provide these days, and compile to what you need. For the kinds of data transformations that templates tend to need, I wouldn't imagine that you'd really find a utility library to be necessary. Check out the Svelte output, for example.
> Graphical excellence is that which gives to the viewer the greatest number of ideas in the shortest time with the least ink in the smallest space.

I think that's good for web design too.
He also said this (which, scanning through this thread, appears to be a rare voice of reason):

> Also, though, I found it hard to imagine that those Equifax executives were consciously insider trading. It would just be too dumb. Equifax's press release reporting the breach says that it "discovered the unauthorized access on July 29 of this year and acted immediately to stop the intrusion," though it didn't announce it until yesterday because it was still investigating. The three executives filed Form 4s reporting sales on Aug. 1 and 2, days after the discovery. You could just about imagine them learning of the security breach, panicking, and selling everything -- except that they didn't sell everything. One sold about 4 percent of his stock holdings, another about 9 percent, another about 13 percent. Why do such comically obvious insider trading if you're only selling a small percentage of your stock? And indeed the company explained that these executives "had no knowledge that an intrusion had occurred at the time." I guess the time between "tech person discovers a security breach" and "top executives discover it's a huge embarrassing crisis" is more than a couple of days.
On the other hand, I found his one-day lecture banal and wildly over-priced.
Perhaps if these guys get nailed then companies will start to see the value of disclosing security breaches in a timely manner instead of sitting on them for months while they spin up the PR machine.
She went to jail for lying to Federal investigators about the stock sale. It's impressively difficult to convict and jail people for insider trading.
That website you linked says it’s goal is to “educate consumers”.

How can anyone believe this bullshit anymore. That website was out of date by 1996. It looks so bad. They don’t care at all.
I know it's about her lying to the Fed, and what are these people doing now with the Fed? Unless they taking the 5th, they are lying.
ok so one single extension. I'll give you that one. But also something I think should be built into privacy section of browser.
As important as your work on the above mentioned libraries were, your continued work at the NYTimes is even more important. So thanks!
UPDATE: I was helped out by a very nice person from PyPI, so kudos to them.
jashkenas is a graphics editor, not a developer. Your point still stands though.
If you look at both devices you'll notice that Android essentially looked and operated the same. The only changes were to add additional support for touch screen devices such as the virtual keyboard. I would hardly call this going back to the drawing board. There was no need as they already had all of the software pieces in place.
https://www.slideshare.net/AllThingsOpen/battle-of-the-stack...
I built a CMS with React and Firebase for a hackathon. How I did it in one day:
For those who come straight to the comments, it should be noted that most Apache installs won't be affected and this is a relatively low-impact vulnerability, although for those who are affected it could be pretty bad.

The flaw only occurs if you have a "Limit" configuration that specifies an invalid HTTP method. For some unknown reason, this causes the leak. A "Limit" with a valid method, or no "Limit" at all, will not provoke the bug. I have to imagine that most Apache setups either don't configure this or configure it only with valid methods.

The article points out that shared hosting setups which allow individual users to customize settings through .htaccess would be vulnerable, since anyone on the machine could set an invalid configuration and then use the vulnerability to potentially get data from other users.

Obviously you should patch it when you can, but it is probably not time for most of us to panic.
The OEMs are still the ones expected to push updates....
"the curse of the gifted" is a thing
Everyone I disagree with has been indoctrinated; only I can think for myself. Is that right?
Being surprised or upset that there are "illegal numbers" is like being upset that there are illegal configurations of matter and energy. "It's not murder, it's just a configuration of atoms!" doesn't fly.
Ask HN: Project planning books written by devs
Can anyone recommend project planning books written by/for developers? I specifically want to avoid any proprietary software (i.e. jira, microsoft, etc).

I'm agnostic to methodology (i.e. agile/scrum, waterfall, sdlc). My goal is to learn some new planning strategies for personal projects.
Taking a look at how often images are updated on Dockerhub
No, see the disclaimer: https://bellard.org/jslinux/disclaimer.html
There is only one person and you are not convincing the person much about security nor have to go through any kind of difficult vetting. Just formal stuff about packege naming, properly filled pom.xml and such.

However, you have to sign everything with pgp including updates and that is verified. You also have to own the domain with same path as your packages - meaning name space is larger and name clashes less likely. They actually check this and won't release unless you host project. Which explains why java open source tend to use packages like com.github.my_account.my_project
I wonder what exactly would be an issue? Windows tends to have the best drivers for... pretty much everything.
A new Replicant 6.0 release