skysight-inc/HackerNews huggingface dataset:
It often seems like the biggest con that physical pen testers pull on their clients is convincing them to hire them in the first place. What's the threat, exactly?

Let's say you do something like BeyondCorp. Gaining "network access" doesn't mean anything any more, because you can "gain" "network access" from anywhere in the world since it's all on the internet. Physical access shouldn't be the perimeter, identity should be.

Is that a tall bar? Sure, but it's basically the bar. Instead of wasting money on fancy pen-tests, put that money into the IT budget to get identity management up to that point.

Next, is the risk really that someone will gamble a physical snoop into a secure compound, where the possible negative outcomes are police custody and prison time, for a score of a few thousand dollars, as Sophie mentions in the article? Sure, that's a risk, hobos would cruise in and swipe a laptop off someones desk to sell it on ebay for booze money. Do you need to pay a pentesting shop $80k to know that? No. And, the risk is basically the same as if an employee takes home a laptop and their car is broken into. The fix is the same too: encrypt everything at rest.

These are all basic lessons that you can learn by downloading a CISSP study guide.

However, I think that there will always be failure points because what you want to defend against this is a culture of security, and it's difficult to instill that even when you work in an environment that is rightfully charged with maintaining high security. It's boring and generates friction. If someone shows up for an important meeting at a high security building and they forgot their ID, the guards will not accept any amount of "do you know who I am" because they know that when their supervisor is called in, they'll be backed up. Everyone else knows this too, on some level, so there's much more of a culture of "why didn't X happen?" "oh, there was a paperwork SNAFU somewhere and security stopped us at the front door" "lol! typical! we'll try again next week." That just wouldn't fly in the private sector: because the risk doesn't weigh anywhere near as much as the reward for just cutting the corner and doing it without the I's dotted and T's crossed.

So, sure. You can fast-talk your way past the rent-a-cop at the front desk of the offices of an aluminum siding manufacturing plant and swipe some coffee cups and staplers out of the supply closet, and you'll always be able to do this...
Definitely both true. I hadn't looked into enabling http2 on this site, I'll check it out.
Thanks for the feedback and for sharing your personal experiences. I think your comment about value being created in other ways (and in sometimes incredibly simple, non-techy ways) is something important to not lose sight of. Also, just in that example alone, future enhancement of a service like that could be automating the newsletter into multiple formats, for viewing on the go (such as a kindle format, PDF, etc.), instead of leaving it email only.

But yea, like I said in my OP, I don't even have a business idea yet. Whatever it is, it will need to have a real value prop to be worth doing.
> Why is it that you can save your int64s as strings but not as numbers? It's a stupid leak on the part of the language if you have to use this workaround.

Javascript, for example, has this problem because everything is just a "number" and the number data type is a IEEE-754 double precision float. A double precision float can't represent all int64 values, so transmitting an int64 via JSON to Javascript and using the standard JSON parser is lossy. You could say that Javascript screwed up by making number have a specific precision, and you might be right. Python, for example, gives you seamless arbitrary precision arithmetic.

But the decision to use an arbitrary precision type for all numbers in every language is definitely not appropriate. Arbitrary precision has trade offs, and sometimes it's important to work with machine integers.
I'd like to see his data on that. I find it difficult to believe that there are twice as many programmers now than there were in 2012. At least, not in the United States.
As a native English speaker, I agree that "unknown" is better than "none".
Ahh! Understood :)

It looks like some of CP's stretched DC-8s lived on into the 90s, albeit with other airlines.
I don't find them super distracting, but I do miss the days when you could hit the ESC key and stop the animation loop.

That ability seems to have disappeared from browsers sometime between when the spinning skulls and under-construction gifs stopped being popular and these 12-frame silent movies appeared.
From the download page:

> The AVA dataset contains 192 videos split into 154 training and 38 test videos. Each video has 15 minutes annotated in 3 second intervals, resulting in 300 annotated segments.

So basically this is a couple of CSV files annotating 192 videos, which are hosted on YouTube. ava_train_v1.0.csv is about 7 MB.
I think the one that pays the manager believes its more valuable, and that if the value wasn't there, the ones that doesn't pay managers will make a killing and soon infect the rest with that idea.

In general I see people getting what people are willing to give them, even when its an 'unfair' situation (i.e. the son of the business man getting preferred treament).

The opposite, people getting what they have by taking it from people unwillingly, which I find aberrant, is seldom what happens in this scenario, and more what happens with proposed solutions around income inequality.
Just find some photos of places in the countryside of Maine, New Hampshire, Vermont, or Massachusetts from 1900 and compare to the same places today.

Or go walking through the forest, and count how many stone walls you have to clamber over. Every one used to mark the edges of a field or a pasture that was hacked out of the forest, and then was allowed to grow back up when farming the cold, rocky soil of New England was no longer cost-effective.
Javascript, x86, MySQL, DOS.... the market victors in this industry are often just "good enough" technologically speaking and sometimes even kinda suck.

Add MongoDB to the list. Its "good enough", and marketed well.
I always get skeptical when people discuss raw numbers instead of purchasing power. Even within US, 100k USD is not very meaningful unless you specify the state.
Have you been involved in responding to rape and sexual assault? I have.

There are worlds of difference between jurisdictions in this regard. And also substantial differences in the specifics of a case.

In the (rare) case of a rapist jumping out of the bushes and tackling someone, and then running away in hot pursuit, then sure, a law-enforcement-first response makes sense.

In the far more frequent date rape / party rape situation, where the victim is left to piece together the episode the next morning, then no, I think that there are far, far better responses than LEO-first.
For scenario "a", here's how a person such as myself might react as one who doesn't pay much attention to rumor mills (er, sorry, "entertainment news"): "huh? Boy, that came out of left field." Two days later: "oh, that's why they were apologizing seemingly unprompted. I do believe my cynicism increased about 0.4%." It is highly unlikely that I will be convinced that the apology was sincere.

Option "b": do it right, and I might believe you. Don't hide behind "I apologize if anyone was offended", at least try to sound sincere. "In these recent days it has come to light that I'm a scum bag. I'm sorry. Now, some will say that I'm only sorry that I got caught. Those people would have been absolutely correct two days ago. But as I spent the last 48 hours reflecting on the the charges brought against me, for the first time I realize the genuine pain that I have caused...yada, yada, yada."

Shed a tear, say it in the right tone of voice, you might pull it off. And, as you mention, you might not ever need deploy option b if you're lucky.
i personally think "Big Tech companies can no longer skate by on faith in their fundamental benevolence" is a very good thing that deserves to be embraced. its kind of insane its taken this long, really. while being able to trust companies is ideal, i think there have been enough real examples now that its worth being much more skeptical of tech companies. i wonder if the crazy faith we used to have was a byproduct of some combination of big tech's interests being mostly aligned with the public, and the public being unaware of the activities big tech was up to that weren't.
Police often have training in first aid. In addition, they might be much closer than an ambulance, so might be sent to help out in that case. It's not a problem in the least.
I've actually used Netlify numerous times and love it. The simple answer to why I chose to manage my own server was mostly to learn how and have full control.
I'm a regular Google+ user and I find it incredibly valuable. The fact that there are fewer people on there is actually an asset - the people that do use it do so because they have some topic they're interested in that they're discussing with other interested parties. There's a lot of mathematicians, scientists, and authors. In general, the average g+ user is much more knowledgeable than on any other site.

Also, the actual features are super valuable. You can create collections with varying levels of privacy for your posts. I use some private collections to take notes, and post more well thought out content in the public versions of those collections. The collections help me organize my thoughts, and I can see different ideas emerging over time. I have a collection to talk about software engineering practices, for example.

Also, being able to create private communities is nice. My wife and I have a private community where we share things about our daughter - photos, things we want to remember, things she's learning.

Overall, g+ has enriched my life.
I moved to France back in 2011 with very basic French (read: virtually none). I couldn't order, I couldn't say anything well.

My technique:
- I started with children's books with audio, but ensured I read for at least 1 hour every day
- I did Anki religiously every day
- I changed my smartphone, laptop, etc to French
- I only tried to make French friends
- I only listened to French music
- I only listened to French (tech) podcasts
- I bought a book on how to pronounce all the French sounds

I have to say that the first 3 months were very lonely. After that, I could talk, interview, and eventually joke in French.

I'm now fluent.

What could I have done better? I should have focused more on listening and speaking than reading. I love fantasy novels, and hence had a brilliant vocabulary on esoteric words (like different types of swords, etc) that were practically useless day to day.
This sounds like a good use case for cold storage like AWS glacier. If you assume 1000 hours of footage would be ~600GB, 1 day of footage would cost ~2.4 cents per month on glacier until you go to retrieve it. Or, 75 cents per month for each month of footage. Most footage would never be watched and eventually purged.

I'm not sure how chain of custody would work...perhaps digitally signing the uploads and keeping those signature records locally at the station. But the USG uses AWS, so I'm sure some solution could be found.
Complainers always make more noise. I personally find it cute, a bit like listening in person to a very expressive story teller.

I sympathize with the critics, by the way - I have gripes with plenty of online content, even if not with this one. A button to enable the GIFs would probably be best for everyone.
I'm sure a civilization can exist without destroying the rest of the universe -- but it will rely on the rest of the universe pushing back a bit.
It's probably easier to get an entry-level job with the company, or the facilities contractor, a vendor etc. The turn-around is longer though and you have to supply an id and SSN that could be bought, but you'll have more access and potentially be undetected.
Very cool. A little while ago we created Winds, an open source RSS reader that uses machine learning to figure out what you're interested in. It's leveraging React/Redux, Stream and Algolia. An updated version is in the works: http://github.com/getstream/winds

And the Hnews discussion:
https://news.ycombinator.com/item?id=12932429
There's also "ARM9" in the "fake amazon" pic from the article: http://mntmn.com/reform/photos/fakeamazon.png
But that's the whole point. It's completely irrational to regret not buying a winning lottery ticket, because it might as well not win. The only question is, what were the odds?
I guess when you want to control everything and position yourself as the controller of all things, then people expect you to do that.

Google's problem is that it's too big and some of their core values are starting to become mutually exclusive of each other; you can't be a "you"tube where anyone can upload anything but also pull in TV-level advertising dollars.
I think its possible to replicate the college experience outside of academia, but I think its a good way to take the risk out.

In college, you are in a cohort of peers who are prioritizing growing/learning over most other things. In the workforce, that is not a guarantee.

Sure you may be lucky enough to join an organization that is willing to take risks for the sake of learning, but I would argue that this is incredibly rare as companies are motivated to make profits and the ROI is not always clear.

This doesn't mean that college will automatically make you adaptable and intellectually curious. You will only get back what you put into it.
This happens if you don't log in for a while, the server stops updating your timeline for you, and it will be empty when you first log in. If you wait a few minutes it should populate again.
A lot of large orgs have a very distributed decision making process where decisions are made far outside of a specific chain of command. Frequently it's unclear who you are even supposed to call to verify the identity of someone that just shows up. It may take awhile to even reach the right person and while you are making those calls you aren't doing your work and you are delaying the service this unknown person is theoretically there to provide. What if this person is there legitimately, you piss them off or deny them access, and then you get an angry call from someone several levels of hierarchy above you blaming you for slowing down their project? No bueno

You also can easily end up with a version of the bystander effect; if someone is here than SOMEONE in the company must have validated them etc. In orgs I have worked for in the past it would have been trivial for me to show up with tools, claim to be from IT, and be given access to whatever I wanted immediately.
It’s not a meme. I just interviewed at FB (3 onsites) and the one interview that sunk me was a CS-algo question. I’ve never had to do that my entire career and I even though I got the answer in the end, I was told afterwards that my answer was too slow. The other tech interviews focused on real web dev experience I destroyed. Still got rejected even though I answered every question correctly, just not fast (or optimal?) enough. The recruiter said I was a “great culture fit” afterwards so that wasn’t the issue. You wouldn’t consider the question “trivia” because it was something you might do once or twice in an entire web dev career. But it’s still a question that will favor new grads who have been trained to pattern match algos and share questions amongst each other.

So even if there’s not explicit bias against older devs there is implicit bias by favoring quick whiteboard speed (memorization/practice) over the practiced thoughtfulness of older devs. And a one-off interview focused heavily on algos can sink anyone. It only takes one.

This isn’t limited to FB. The $Elite companies I got offers from are the ones where I lucked through that one tricky interview by knowing it offhand.

I worry as I get older, even as I become a stronger developer, I will become less and less able to marathon through these interviews. No wonder so many older devs switch to management.
> 6. Completely anecdotal, but Allah answers my prayers. I pray for money, I receive quite a lot of money. I pray to meet people for guidance, I get to meet people who give guidance. I pray for parking, a parking spot opens up. I pray for a banana in the desert, someone gives me a banana the next morning.

This is another popular proof of God I have heard from many people, Muslims, Christians, Hindus, almost everyone. It sounds very selfish and ignorant of the world proof.

There is some sort of selection bias because these people survived and some of their prayers were answered.

It makes me wonder what about other people whose prayers were not answered? What about children whose prayers were not answered. History is full of really evil things happening to people of all religions. It seems at least on group of people should be praying to right God, why didn't God help them?
I recall post 9/11 there was a great story where someone noticed once they finally got into the server room, "this was the wrong company."

Clearly, that was a more chaotic situation than normal, but physical security fails more often than you might think.
I'd like to see some evidence of that. No sarcasm, I'd be interested if someone could provide some. But the article kindly provided evidence that coconut water does not hydrate better, and I found it particularly interesting that it hydrated exactly as well, which to me strongly suggests that the primary driver in how hydrating something is, unsurprisingly, the water in it. I find the science part of my mind is not all that discomfited by taking coconut water as a first-order approximation of energy drinks in general. (It of course is yelling "test it! test it!", but honestly, that's just background noise to this query. It's always yammering on about that with no thought as to how expensive the testing is. That's its job, of course.)
The documentation thing exists, I just find it distracting, so I don't use it.

Tags just require you to have something like exuberant-ctags installed, then you can just run `!ctags -R .` from vim and you are golden (only needs to be done as you create more classes/functions/methods/whatever)

Most shit are just GUIs or wrappers for gdb. There are plenty to choose from if you so choose.

If your unit tests take super long that might be a sign they are bad. Also if you can run a single unit test in some way, you can do it with vim. Unless your IDE does some JIT magic on the side that for some reason can not be replicated in terminal.

>it’s UX is awful next to IdE Ux.

I don't like tomato soup, so you are wrong!

>Personally don’t want to cart around a whole folder of plugins on top of vimrc, sounds like a pain.

I have grand total of 3 plugins, none of which are required for me to do work. It depends on whatever you want, I've seen many people use ton of useless plugins which either reimplement something already present or just try to do things "the old way I'm used to" instead of just learning to do the thing in "vim way"
I tried gzipping my static site up front on maximal compression levels. Google the `gzip_static` directive.

It doesn't make a noticable difference, but it's fun.
Its less a technical issue, and more of a business/political thing. Its twitter's silo, so if they wish to block or severely limit outside systems from integrating with it, twitter will do so. Twitter can pick up their ball, kill the game, head home, and leave everyone without a game to play; philosophically speaking of course. That's the downside of such a centralized platform. So, i would guess - just my guess really - that it would explain why some rock star devs don't hurry and develop such an integration platform. Think about it: what if some devs build some awesome integration tool/platform, and then twitter sees all the outbound traffic (read: affecting their potential revenue)...well, twitter would just kill that access. And all the devs would get frustrated, etc. I would further guess that these devs probably thought, screw that, i'll just leave twitter for good, and simply post on mastodon (or some such/similar open platform), and just help build out this open platform.
I worked as a late-night valet in downtown Austin when I was in college. We would go into the bars to get water even though we were underage and eventually we got the idea to go in with our valet uniform on, take it off and order drinks.
Is the code open source? Would be cool to learn more.
So I do a similar kind of work, and I have a bit of an advantage since I am a transgender woman. You would never know from looking at me and I did extensive vocal therapy to reach a feminine speaking voice (but I can still use my deep voice as well). I can be John, Lisa, Mike, Amanda; whoever I want by doing just what you say here. I have a few accents I do; but thats more just for fun (it’s a job like any other). You could definitely get by without it though; everyone who does this kind of work has a slightly different methodology they like to use.

Generally this type of on-premise pen testing is a solo enterprise. People working together look suspicious and many of these secure environments require you to lock up your cell phone — so using a phone to communicate with a partner would raise red flags.

I mean, I work with other people on the overall assessment, but the site entry part is necessarily pretty sensitive so usually only the head of security at the client is in the know (that way if I get caught, I don’t get shot — though that is less of an issue now as a woman).
If people who didn't golf were considered subhuman and needing of "saving" then non golfers would develop a supportive community too.

Please don't confuse "community" with "religion." Bronies also have those things you mentioned but not a single person would classify being a Brony as a religion.

(If you aren't familiar with the term, a Brony is an adult or teenaged male fan of the children's show My Little Pony: Friendship Is Magic: https://en.wikipedia.org/wiki/My_Little_Pony:_Friendship_Is_... )

Same with ideology, not all ideologies are religions. Believe that the Earth is flat is an ideology but not a religion even though personally having that ideology may be based on religious beliefs. Same with veganism.
Why is that? Given two candidates, one is actively up on current technology and the other isn't, it can be argued the first one has an edge.
A website for annotating and discussing research papers. I am quite surprised that this project hadn't existed already. It seems to be an obvious use of collective mind of the Internet. Research papers can often be difficult to understand and I had always wanted a way where it was something was clarified in a simple language or platform where questions about it could be asked.
Everybody loves an underdog, and for decades the personal computer and internet industries were not dominant at a national scale. Now they are, so they don't get the built-in support of underdog status anymore.
Mostly true.

In my area, once you get passed a point south of me, those walls are fewer and fewer. There are areas where it was never farmed and old growth trees still exist.

What is great is you can walk out to places and stand there and be reasonably certain that you're the first human to have ever stood in that spot.
Alan Kay's Tribute to Ted Nelson at “Intertwingled” Fest
This https://bridge.joinmastodon.org/ let's you find your friends from Twitter on Mastodon
> This group generally tends to treat web technologies with an utter disregard and prefers to isolate themselves in Java.

I hear you. I dislike Javascript too (though not as intensely as some folks), but if it's the language of the platform you're targeting (web browsers), just suck it up and use it.

I was once forced to use GWT by a mindless engineering manager who thought standardizing all development on a single language would somehow reduce maintenance costs. It definitely did not :(