skysight-inc/HackerNews huggingface dataset:
Ask HN: Career Help needed
Been a dev for about 8 years, spent the last 4 years in cyber security.

One thing I've noticed throughout my career so far is I tend to get ancy after about a year or year and a half - and get pissed off at something in the workplace. A few of those things are:
* horrible mgmt
* pay
* not learning anything

I'm now back in the same position, except all three of these reasons are the problem for me wanting to jump to a new company.

Has anyone ever experienced this? What did you do?

Thanks.
Can you elaborate on the WSJ's agenda against Google ?
Except it is INSECURE:
> However, insecure downgrades are called insecure for a reason. Client downgrades are triggered by a specific type of network failure, one that can be easily spoofed. From the client’s perspective, there’s no way to tell if this failure was caused by a faulty server or by an attacker who happens to be on the path of the connection network. This means that network attackers can inject fake network failures and trick a client into connecting to a server with SSLv3, even if both support a newer protocol. At this point, there were no severe publicly-known vulnerabilities in SSLv3, so this didn’t seem like a big problem. Then POODLE happened.
Same experience when I did my military service in France.

A typical day : we had to hurry to be ready at 6 in the morning then wait till 10 that the trucks pick us up ...
Even 250ms latency to boot is significant. Especially if you're processing thousands of requests per second.
DRM does not do that. Plain old public key cryptography does.
Allianz also has the Global Digital Factory. A startup like place to develop IT ideas in Munich. Looks just as fancy as your example.

https://globaldigitalfactory.allianz.com
I read the OP in a different way. In IT - as in pretty much every other field - there are many more low-level jobs than high-level ones. It's also much easier, and much less risky from a strategic point of view, to outsource the low-level ones than the high-level ones, so, most of those which were outsourced were the low-level jobs; we're talking about hundreds of thousands of jobs (millions?) here.

Many of those low-level jobs can be automated, while the high-level ones can't. As the cost of even low-level outsourced jobs goes up, and the cost of automation goes down, it's normal that lots of the most automated jobs get cut. Jobs of which India has a very high relative proportion, not because there aren't high-level programmers there, but because India has the strongest IT outsourcing industry in the World.
Wow the word-per-author ratio is close to 1. What's behind this padding?
How to Insert MKV into PowerPoint for Presentation
Maybe HN needs something like the old slashdot comment adjectives (e.g. -1, Redundant).
Or if you are processing more than 4 per core per second.
You could also just leave the degree off your resume. If you have recent experience, you can even omit some of your early experience. Degrees don't count for a lot (unless you have zero experience) in silicon valley or tech companies in general, unless you're going for a research spot.
Tech Bros Bought Sex Trafficking Victims by Using Amazon and Microsoft Work Emails
Ancient hobo signs makes a lot of sense, wonder which one says "Tell pitiful story for food."
thank you for introducing this idea to HN even if this is not provable at this moment.

the percentage of people who take stories at face value is way too high.

i'll keep my words kind and limit this comment to just that....
Here you go:

http://www.mpc.berkeley.edu/research/analog-optimization
> Medicine is vastly more complex than say CPU design, but it still operates on well understood chemistry.

I'm not sure a researcher enjoys the same freedom to put together medical experiments as physicists and chemists do.

Moreover you comment sounds very disingenuous. It's like claiming that electronics is a realtively simple research domain because it still operates on well understood electromagnetics.

Meanwhile do keep in perspective that even today's state of the art in medicine involves various forms of mutilation.
Flagged as duplicate.

Hasn’t happened to me, but nothing is more frustrating that having someone else ask my exact question then it gets flagged.
Just curious -- were the two team (Romania vs India) working on the same project? Were you paying them the same money? Did the team members have the same number of years in experience (in absence of a better comparitive metric)?
Esperanto arose at a particular time and place where linguistic and ethnic divisions fractured communities and even families. We all know that English, German, and French were long used--and are still used--to project power. But where Zamenhof lived this aspect of language played out in a much more complex, violent, and personal manner. While the late 19th century was an unprecedented period of peace and prosperity for Western Europe, it was exceptionally violent for the lower-classes in much of Central and Eastern Europe.

The point of Esperanto wasn't just to be a shared language. Much more importantly to Zamenhof and early Esperantists, the point was a language that wasn't bound to provincial, ethnic, or religious identity. This backfired in the early 20th century as Esperanto became associated with, e.g., Jewish and Anarchist groups. But it seems like in the latter 20th century Esperanto reverted to an internationalist language without association to any distinct political movement. And in that sense it's once again a reprieve from and perhaps an antidote to provincial power dynamics, notwithstanding its European language bias.
Ofcourse CL should never downgrade to non-secure versions. SSLv3 is discouraged so CL wont try this. But 1.2 still ok.
Aside from overuse in that example you gave, what's the issue you have with "going forward"?

I use language along these lines, often after talking about an issue, as a way of steering the conversation onto solutions. In my experience, it can be a useful phrase.
It appears that they don't want any sacrifices..just a system to run existing code on top of. But yes, you are correct.
Does this offer any visibility or insight into the rate limiting of undesirable accounts such as mine?

Do all undesirable accounts get the same rate limit?

Do rate limits expire?

Is there a way to tell if an account is muzzled without trial and error?

(Site is currently down otherwise I would check myself.)
Automating High-Level Economic Thinking Using Deep Learning
Jerry Couvaras United States – Jerry Couvaras GA
I have the Pixel 2 XL and think it is a terrible phone. The screen quality is absolutely garrish and it doesn't even dim to an appreciable level when using it at night.
> but they were also toxic to be working in a team

What do you mean?
It's not as hard to organize people along ideological boundaries as you might think. Look at the power of the US political parties, the NRA, unions, etc.

If we want to stop regulatory capture, stop that. Don't worry if it's one person or 1000 behind a movement.
The screen quality is quite garrish though, wouldn't you say?
A combination of what the community has liked in the past and what moderators, plus a small number of story reviewers, think it might find intellectually interesting.

> it seems that his submissions are not highly upvoted

This ebbs and flows. But see
https://hn.algolia.com/?query=by:pmoriarty%20points%3E10&sor...
Economics and Deep Learning : a unique approach
I’ve been in a WeWork co-working space in London and, from my experience, don’t move there if you want to do deep work. It was quite noisy and mostly geared towards sales-y people, with events at 3-4PM (way too early) for “networking”.
That applies to a fair few other countries with far more interfering governments, yet they don’t have laws like this that I am aware of.

Do the rules even apply on home turf?
Here's a review of one of the studies in the Wikipedia article I wrote some time ago: https://news.ycombinator.com/item?id=14848019

It appears that a certain jcranmer was also in that thread. Hi!

To summarize: low sample size, confounding factors and mixed results mean that there's no strong evidence to suggest learning Esperanto helps more with learning another foreign language than directly starting to learn that language.
Social network profile to become official ID in China
It seems to me that is a problem that should be solved by anti-lobbying/political donation laws.
Yes: https://www.darktable.org/install/#macos
I have the Pixel 2 XL and can concur that the screen quality is terrible. The screen is too reflective and the actual color is quite garrish. The backlight also does not dim enough when using it at night. Overall, the build quality is significantly worse than the Pixel 1 XL. Go with a different brand, Google screwed the 2nd rendition up badly...
What is the chance that this is indicative of a larger trend in IT? i.e. That the "golden age" is coming to an end, and that with the downturn in startup investment, demand for IT professionals - even skilled ones - will rapidly shrink over the next two years, even in the Bay Area.

Fuck, I don't want to make only $60k again....
Would you please stop using uppercase for emphasis in HN comments? This is basically yelling, and it's against the site guidelines:

https://news.ycombinator.com/newsguidelines.html
If you reproach VBA to support GOTO you should do the same for C#.

Admittedly I have yet to find a use case for GOTO in C#, maybe to break out of deeply nested loops but since the advent of Linq, nested loops became rare in my code.
It is quite a downer to walk around a coworking space at 6 or 7pm and find it totally empty. Whenever I did coworking, I was often the last one to leave at night.
Uncovering British spies’ web of sockpuppet social media personas [video]
I was talking about the Galaxy series. The note is an excellent phone. I used both the Note 4 and 5 in the past. Much better than the Pixel 2 in terms of build quality. The Pixel was great but the Pixel 2 is garrish (screen quality and build quality.) I have no opinions on and have never used the Nexus seres.
Npm private modules outage on December 12th
دوره فشرده آیلتس شیراز – تدریس خصوصی ایلتس در شیراز – مدرس آیلتس در شیراز
I don’t necessarily believe that managers need hard skills relevant to the business (and I say this as an engineer).
However, they need to be crystal clear on what they manage (wether it’s just a team, department or entire company) is supposed to deliver and how it will be evaluated. If they don’t know this they can’t prioritize and they can’t ask the relevant questions to the experts to help them with that.

This brings me to the second thing Managers really need; they need to be able to listen. The manager is there to manage, he or she is not there to build stuff and thus he or she has to acknowledge that they don’t know as mych about the problems facing the project as the experts. A manager needs the experts’ opinions to guide them towards the best decision.

Plenty of managers can talk (that’s one of the readons they were noticed by their superiors) but few can listen and are thus oblivious to what should be prioritized above what (I work mainly on the backend, I had to basically force the issue of load testing before launch into meeting after meeting but my manager was very interested in the colors of the GUI) and which problems will take a lot of work and which could be fixed in 15 minutes.

If you want a manager with hard skills as good as yours, wouldn’t you rather have them as a member of the team instead?
The reason for this apparent discrepancy is found in the difference between strong and weak NP-completeness.

The fully polynomial-time approximation scheme (FPTAS) for the knapsack problem only runs in so-called pseudo-polynomial time:

https://en.wikipedia.org/wiki/Pseudo-polynomial_time

This means that the runtime is polynomial in the numeric value of the knapsack. Since the encoding of that numeric value only takes logarithmic space (unless you are using unary encoding), the runtime is in fact again exponential in the size of the input.

For this reason, the knapsack problem is called weakly NP-complete:

https://en.wikipedia.org/wiki/Weak_NP-completeness

One can show that, unless P=NP, a so-called strongly NP-hard optimization problem with polynomially bounded objective function cannot have a fully polynomial-time approximation scheme:

https://en.wikipedia.org/wiki/Polynomial-time_approximation_...

SAT, Hamiltonian circuit etc. are strongly NP-complete:

https://en.wikipedia.org/wiki/Strong_NP-completeness

Thus, an FPTAS for these problems would indeed imply P=NP.
> Basically who would be attacking them and for what reason? ... Aboriginal Australians somehow?

kek'd hard
i suspect the aborigines of peace
Charles Dickens Had Serious Beef with America and Its Bad Manners
The article calls this "insecure downgrade" - which is not just the performance penalty you say it is, it's also a security penalty that's been previously (ab)used via POODLE. It's also code that's been removed and would need re-implementing, re-testing, etc.

The only crisis the article mentions - in passing at that - is when they tried to roll out 1.3 initially and things broke outright at alarmingly high rates. Whoever wrote the article appears to be a fan of discussing things before they turn into crisises.
Wow, I'm very interested to read more from you. A lot of what you say seems to be the same in many companies I know. Do you write a blog or have considered it?
#drone #technology #dubai, #WIRIS2 is a #thermal #imaging #solution – Skystance
Nationalistic flamewars have no place on HN, regardless of which nations are at issue. We've banned this account. If you don't want to be banned on HN, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future.

https://news.ycombinator.com/newsguidelines.html
> HN is trying to "well actually"

HN is as much your comment as any other. More, in fact, because yours has been upvoted to the top.
Exactly for that reason, to make it appealing to Windows devs, that would otherwise only consider F#.
I am not associated with the site below, but I find it useful to book itineraries that show up in Matrix (but you cannot book from them).

https://bookwithmatrix.com/

Also the original WSJ article is written by its Editorial Board (as opposed to their reporting arm). Editorial board can and does operate with its the owner's mandate, in most newspapers.
> to make sure a random employee isn't uploading credit card data to Box.

or the PDF they clicked on
Would you please stop posting unsubstantive comments to HN? They're not what this site is for, and we eventually ban accounts that do it.
And yet Flash allows this and it hasn't been a problem for years?
> The downside of hosting things all in the same domain is that cookies are shared between them, so a vulnerability in one site (e.g. XSS) leads to compromise of all sites. Choosing different domains means they are sandboxed and safe from each other.

I believe this is incorrect. Cookies should only be shared (by default) if the domain matches exactly, which is why it's best practice to use a www subdomain instead of the domain alone. For example, www.example.com cookies will not be shared with test.example.com by default, though this can be enabled. See here for a fuller explanation: https://stackoverflow.com/a/23086139
Dude, You Broke the Future [video]
> During the course of an hour, I recorded 64 different nuggets of corporate claptrap. They included familiar favourites such as “doing a deep dive”, “reaching out”, and “thought leadership”

With 64 nuggets, you could've created some 8 x 8 grids and put one nugget in each square. Photocopy them, pass them around the office, and next time there's a meeting called by management, play "Bullshit Bingo". First person to hear a line of 8 nuggets spoken, either vertically, horizontally or diagonally on their grid, wins the pool.
How do you want to do 24/7 with 1 full-time ops eng? Even 2 is small, do they take any time off?
Yes, I wholly agree. Let's say we make an AI agent and it creates a hypothesis. How is it going to test it, to make sure it is causal and not a mere correlation? By devising an experiment. So the agent needs to work like a scientist: propose idea, test idea, iterate. Even children learn about the world like that - they interact with the world trying out their ideas and seeing what works and what doesn't.

But when the agent doesn't have access to a simulator or a world where it can play, how could it understand the causal relations, and thus, be able to reason? The most important thing for the agent is access to experimentation, and that's why supervised learning (fixed dataset) is fundamentally limited by comparison to RL (environment based learning).
for the fun of it, tested the boot time of a Nokia 130 (classic style feature phone), just under 10s if you cancel early at the greeting screen :)
The Best Writing Apps for Apple Fans
That's kind of funny--I belonged to a WeWork in Queens for about six months and my favorite time to work there was 5-10pm because I'd usually have the place almost to myself.

Overall I found it a decent place to work. It was definitely better than working from home all the time. The wantrepreneur vibe was indeed pretty strong and socially it was kind of cliquey and too-cool-for-you. The space and location were good though. For me as a solo founder/coder it served its purpose and felt worth the price in spite of there being plenty of room for improvement.
"Understandable" to you, based on where you live and what dialect of English you speak :)
A bunch of users flagged it and a bunch of other users vouched for it. These were legit users so I assume it is a legit difference of opinion about whether the articles belong on HN.

In case anyone is wondering, moderators didn't penalize either of the articles. We did ban the garden-variety trolls that showed up in this thread.
Here's another project that is working towards using boron-hydrogen fuel for nuclear fusion:

https://lppfusion.com/

Brief description of how the device works:

https://lppfusion.com/fusion-power/dpf-device/

To be clear, Dense Plasma Focus is the type of fusion device, and LPP Fusion is one of the teams researching them (there are others working with DPF devices).

The following quote should help in understanding why it's an important project:

http://m.digitaljournal.com/tech-and-science/technology/star...

"“In the critical measure of how much energy out, we get per unit energy in, we’re No. 2 among all the experiments in the world,” Lerner says. “And we’re only one-third behind the JET [Joint European Torus] experiment in the United Kingdom—which has almost a thousand times our resources. In terms of results per unit dollar, we’re clearly No. 1, by a long way.”"

They're running a crowdfunding campaign, if you're interested in investing in fusion energy:

https://wefunder.com/lppfusion
The U.S.A. Cannabis Legalization Bill Is a Step Closer to Becoming Law
I enjoyed your post, it made me think, could you do something similar with say the JVM?

I know loading JVM based applications have horrific startup times on cold boot, but I was just wondering could you run the JVM directly on top of Xen?
Yeah, this seemed more like a bunch of guys at Akamai padding out their resumes. Their use cases seemed pretty weak, and with all the other information browsers leak, being able to get platform type "with increased confidence" seems like a tiny achievement.
Shutting them down right away achieves a number of things, such as significantly better isolation between requests, and more protection against resource leaks.

Whether that'll be worth the cost remains to be seen - 250ms is still far too long for most uses, but if it can come down enough, it's attractive.
Flash could do that, and yet I've never heard of it as a problem.
I was always of the impression that the 18%-22% commission charged to small hotels using an OTA most of it went back into PPC and other online marketing anyway, kind of like a slot machine winnings, hence you needed a lot of cash to bootstrap competition. In this instance paying out to Google meta search is probably no different than a PPC campaign for the OTA, you have to pay to get the eyes. Slightly off topic, I remember a hotel manager bitching about how much OTAs charge and then saying he was going to fund his own site and charge hotels only 5% and make a killing, I'm not sure how far that Joomla project got lol

Back on subject, I don't have too much sympathy if this is deemed unfair, as OTAs are quite anti-competitive too, they force hotels to sign agreements that disallow themselves from running their own promotions or advertising on other sites for anything less than the best rate given to the OTA, and yes this is enforced, in the old days via screen-scraping of competitors.

>Most hotel chains guarantee the lowest rates on their websites.

I've never seen this to be true, even though nearly all big chains litter their website with it, it's always marginally more expensive (with other surcharges etc..) and massively more annoying due to clumsy UI and harsher terms & conditions.
Wow those text to speech examples are amazing. The use in videogames could be huge. Exciting stuff.
> Developers need to stop making rookie mistakes

And how do you get them to do that?

You hire security engineers to do training, code reviews, internal pentesting...
34c3 Relive: The Ultimate Apollo Guidance Computer Talk
Skype contact leak
For a good part of my life it's been something I've fallen asleep to after the "Late Book". I suspect it's the same for many people who have a radio in their bedroom permenantly tuned to Radio 4. (A habit I picked up from my parents, and one I was pleased to discover that my wife shared). Given the popularity of Radio 4, I suspect that this is more common than you might think.

But I also suspect that you're correct in your assertion that few people (outside of those for whom it is actually relevant) actually listen to what is said.
You broke the site guidelines by taking this thread into a flamewar and grossly overposting. We're trying for quality, not quantity, in discussion here—you went far in the other direction. You also broke the HN guidelines in other ways, like personal attacks and going on about comment voting.

All of this is really bad. Please don't abuse the site like this again.

https://news.ycombinator.com/newsguidelines.html
is Zerg related to Ling? It seems like this project has (sadly) died out. Anyone know the current status?

https://github.com/cloudozer/ling/issues/141
Debt is basically taking VC money. There is no way of paying it back, unless they go IPO. Paying it back through profits is a dead end here. People in India are just too price conscious, offer them gracious discounts and they will come to you. The day you stop they go where ever those discounts are. On the other hand they have tried playing the 'exclusive store' game. Its just not scalable, and whoever is try to sell eventually realizes they need a broader audience reach, and bailout immediately.

Now even if they have to go IPO they can't do it with their current financials. No public investor is going to put their money in a company whose first $15 - $20 billion in collection will go all to bail out VCs and remainder will go to subsidize customers's purchases.

Snapdeal is already toast. The real deal is you can't make losses forever, you have to make profits at some point and you have to make a lot of that to make up for early investors.

Ola and Uber are a totally gone case as far as India is concerned. Almost every family here owns scooters, and those who don't will take Uber and Ola as long as they beat auto rickshaw fares.

So here is the dilemma. Whether its Flipkart, Ola or Snapdeal. You are competing with road side hawkers and their profit margins. You can see where this is going.

Its just that India's purchasing power among the common middle class masses has to go up, and they need to stop thinking in terms of 'price first' approach. That won't happen anytime soon.