skysight-inc/HackerNews huggingface dataset:
What about Stack Overflow's yearly survey? That's got a lot of people and has data for salaries by job and geography. It won't tell you where they're working, though. https://insights.stackoverflow.com/survey/2017#salary

ETA: 5yrs exp, Dev III in logistics; $95K/year, ~$6k in stock, insurance fully paid by company.
According to the official One China Policy the island of Taiwan is a province of China. So yeah, maybe it all depends what your definition of "China" is...
There's a whole radiolab series about this called the Future of Fake News
http://futureoffakenews.com/
I found this piece the most interesting --

>Or imagine you're male and gay, and the "God Hates Fags" crowd has invented a 100% reliable Gaydar app

For mobs to act, it doesn't need to be 100% reliable, or even 25%, so long as the mob gets their kicks.

Just as likely, given the average political outlook of the app dev community, is a "Payback the NRA" app that lets users target gun owners for liquidation. Something tells me the author wouldn't mind that app so much.
There are two paragraphs dedicated to performance impact in the linked PR.
RabbitMQ Best Practice – CloudAMQP Webinar
If you classify say 50% of people as AI's and 50% of AI's as people then those AI's passed the Turing test.

So, you are limited to questions that most people will answer correctly. Further, if you find some unusual question that works today someone can just add it to the program for next time.
VIA bought Centaur, so you can argue that, tenuously. VIA is a Taiwanese company. Some people insist that being Taiwanese is being Chinese.
AmazonPrime’s most played list has more than a few oldies in it, especially around Christmas. The non-young crowd is also much less into new music and crave the older stuff actually. A streaming service can totally survive on those users alone, probably. If I could get it at some discount, I would totally pay for a streaming service that didn’t have any songs made within the last ten years. I could live on songs made in the 60s alone (and that’s way before my time).
Emacs is a programming language with it's own text editor built in. Like every other programming language on the planet, it benefits from dependency management and source code management.

Getting all of our tools into similar management forms ultimately makes all of coding more accessible.
And I fear there's little reason to think that the "three variants" from project zero's announcement are the full scope of the problem. They were just the variants that the few people in on this found time to develop exploits for. There can now be security bugs in things your program doesn't do; it seems like there is room for nearly unlimited creativity in finding them.

From the spectre paper:

"A minor variant of this could be to instead use an out-of-bounds read to a function pointer to gain control of execution in the mis-speculated path. We did not investigate this variant further."
Build a Life Instead of Settling for One
I guess all it takes is one request to a non-https site?
>"Zhaoxin's home-grown x86 CPU is completely designed from the ground up within China"

Yes, just not that China, another one
RISC-V impact? With all the reports of these attacks, I have not seen mention of risc-v. Since they are in the process of finalizing a lot of specs including memory model and privileged instructions, I wonder if there will be last minute changes to mitigate these vulnerabilities.
I'm not sure about GCE but in Azure often the largest node size in a particular family (i.e. D15_v2, G5, M128, etc.) is isolated / dedicated to a single customer.
I have implemented JWT on my app but the library I used (Guardian, written in Elixir), only allows you to use HMAC-SHA512 by default. And I've left it that way.

Should I still be worried? I get that JWT's algorithm flexibility is overall a bad thing, but if I only allow one, should I continue to worry?
Sessions doesn't want to lose one tool in his belt to use against black people. The root of this is refer madness from the last century, where white men thought marijuana would make white women sleep with black men.
That's a rather closed view of history. Vector processors were the norm in supercomputers until the early 2000s, when they were killed off by general purpose CPUs like SPARC and POWER. Intel itself has made two big bets on alternative architectures--Itanium (essentially VLIW) and Xeon Phi (CMP gone insane), the former of which failed miserably, and the latter of which appears to be quietly dying.

One of the major problems with developing alternative highly-parallel architectures is that most algorithms, particularly as they are written in source code today, simply aren't parallelizable. There's only so much ILP that can be extracted, and data parallelism isn't achievable without very heavy annotation of source code. Getting high data parallelism (as GPGPU does) is sometimes possible with algorithmic rewrites, but you're talking about rewriting several portions of your code to make that happen. That's the reason NVidia is successful--they've got an offload model, so you only need to rewrite the kernels that need parallelism, and they've got the proprietary lock-in on CUDA since no one wants to rewrite that code several times. But even then, there are classes of code that can't be run on GPGPUs very well because you just don't have the necessary data parallelism.
There's a very, very fine line between an elegant solution and an ugly hack.
Note for a true fix to the BTB poisoning attack you would additionally have to disable SMT/HT.

See here: https://news.ycombinator.com/item?id=16070304
While I understand your shared-memory argument, Electron in this example, is using twice what Firefox is using for 3 webapps and another dozen tabs.
Just to clarify, the earth does not rise on the moon (just wobbles). The earth appears to rise because the orbiter circling the moon.
> In particular: the whole protocol is versioned, rather than serving as a metaprotocol that negotiates the underlying cryptography.

In my view, that's one of the big takeaways from early cryptographic protocols: complex handshake negotiations just won't be secure, so just don't. The other is that crypto code should ideally not contain any parsing at all.

e: Well that and the whole debacle on the level of primitives and operation modes of course.
Since we won't get https everywhere soon, is WPA2 on a public Wifi with a publicly known key a workaround? Should prevent plain MITM?
The argument of national security goes a long way.
lower, but not proportionately lower

Edinburgh vs. SF (~1.8x) :

https://www.numbeo.com/cost-of-living/compare_cities.jsp?cou...

Edinburgh vs. Seattle (~1.3x) :

https://www.numbeo.com/cost-of-living/compare_cities.jsp?cou...
Show HN: Conclave, a decentralized, real-time, collaborative text editor
Just not a Google form, lest they know which employees are discussing salaries
Flying blind: not setting or measuring product metric goals
Except that 1st. Sparks' stuff only cost a fraction of that to develop (closer to the $200M), and 2nd lot of the early expenses were fronted with tax payer's money.
I use Firefox as my main browser at home. I have yet to run into an "Only works in Chrome" site or message, personally.
You're absolutely correct - not being a native English speaker, I read "expected value" as a common phrase, not a probability theory term. Thanks
I believe this concept was where the term "meme" came from (coined by Richard Dawkins in "The Selfish Gene" https://en.m.wikipedia.org/wiki/The_Selfish_Gene)
I doubt that prosecutors in liberal states with legal markets (Oregon, Washington, California, Nevada) will clamp down on the industry, in fact under certain conditions I could see them clarifying their stance and perhaps clearing confusion as to how federal law will be enforced.

However, I do think that this may halt the spread of the industry into midwest and north east markets.
I see - so this is more accessible? We're all fucked, then?
Because governments don't back FOSS like they should.
Before the reaearch endeavor, the company had x more dollars in cash. They bore the cost with the expectation that it would generate cash flows in the future (to hopefully more than offset the cost). The dollar cost was likely quite large. So the company certainly would not be in the same position had they not decided to develop the drug. There was no cost the affected genetically blind, however. They only now have the option of potentially being able to get a new treatment.
Mill can't come soon enough.
If this is how you deal with having lots of work, you might want to instead quit your job, or better yet re-negotiate your terms of employment

Sleep deprivation destroys your productivity. It's equivalent to being drunk. E.g. "Chronic restriction of sleep periods to 4 h or 6 h per night over 14 consecutive days resulted in significant cumulative, dose-dependent deficits in cognitive performance on all tasks." (https://academic.oup.com/sleep/article/26/2/117/2709164).

The idea that "oh I can just can stay awake longer" might have merit. I doubt it. But the whole premise is flawed, even if it is workable.

The premise is that working longer is better. It's not. Productivity is about achieving your goals with minimal wasted effort. If you're spending your time thinking about "how can I have more hours to work" you're not thinking about the important thing: "what work am I doing that is unnecessary."

You can get order of magnitude reduction in effort by having the right idea, or the right shortcut, or the right set of priorities. Staying awake more might give you 25% more hours at the cost of massive cognitive deficit, and a completely broken set of priorities.

More on productivity and sleep:

- Productivity: https://codewithoutrules.com/2016/08/25/the-01x-programmer/

- Why your startup has you working long hours: https://codewithoutrules.com/2017/06/21/why-company-want-lon...

- References to research on long working hours and sleep deprivation: http://www.igda.org/?page=crunchsixlessons
The point is, although your example is possible, the probability of this happening is pretty close to zero.
And because other nations have socialized health care and don't have "death panels." And I'm not aware of any plan that would preclude a person from purchasing their own insurance to cover any care deemed of insufficient value by the national system.
Python exercises with tests
The entire car part of Tesla’s business could disappear and it would still have a story for shareholders in stationary storage alone. They’ve said half of their battery production will go there. Think about what that means for revenue.

The Semi is a huge market.

And even if Model 3 didn’t exist and Tesla pushed itself as developing Model S as the number one car for self driving mobility services, they’d still have a claim at the lions share of the automotive market. Vehicle cost is a much smaller concern in the post-self-driving world.

Let’s imagine Model 3 only pulls Model S numbers, and their annual production only goes to 200k by 2020. I don’t think that’s enough to see a total collapse of the stock the way you seem to be suggesting.

I think Elon has many more cards in play than you let on.
Gurgaon realty bounces back from slowdown
I have a hunch that the era of side-channel attacks is only now dawning, and that we should expect many more painful exploits and cumbersome mitigations in the coming years.

What do people more knowledgeable in the field think about this?
We use public-key JWTs so that the verifying servers do not have a copy of the secret key, just the authorisation server's public key. That prevents a compromise of the verifying servers from also compromising the entire system (yes, a compromised verifying server can be made to do anything it's allowed to do — but that's still less than everything).
Food additive boosts C. difficile infections
That's one of those things that seems better suited to being a native App.

I realize there's a whole group of people who want to make the web browser as powerful as native Apps but I for one do not.
Somewhat off topic, but I have often wondered if this sort of phenomenon could also occur within 'timelines' (as in the multiverse concept):

As the article mentions, initially our ancestry is basically linear -- one mother and father, two grandparents per parent, etc. But the further back we go, the more our lineage begins to resemble a mesh web with certain ancestors reappearing at other points.

Could the same happen with the flow of time? Say we were to go back 10 years, maybe there is only a single possible 'timeline' between now and then. But is it possible that the further we go back, there are multiple 'nodes' which cross over, much like ancestry?

Is it possible there were two, or more, say, 1900ADs, which then every e.g. 1915 was descended from, splitting again into different timelines before recombining, in much the same manner as biological descent?

Largely off topic, but an interesting thought experiment.
I surprised most cpu chips don't have government back-doors in them.
How is this allowed on HN?
Statist nonsense
That package is with what firm?
That's bad. A single 5% hit might not be the end of the world, but 5% here and 10% there and another 5% over there in the common case adds up badly enough. Doubly-pathological cases (indirect calling-heavy code calling lots of syscalls)... a 50% slowdown and a 30% slowdown combines to a 60% total slowdown. Yeowch.

Will be intrigued to see how processor manufacturers respond to this. If they were even slightly relaxed about it prior to disclosure I expect there's going to be some very hurried attempts to engineer some solutions pronto. This is the sort of thing where it might even be worth throwing away all of your future roadmap plans and just getting a revision of the current chips out there ASAP, whatever that may do to the rest of your roadmap.
For someone not working in tech, what is the difference between an engineer and a principal engineer?
(OT: petteralexander's name shows a different color than other usernames. Why?)
And once one knows the technical background, one is better positioned to consider the response of Linus Torvalds to the idea that the entire Linux kernel be recompiled for all x86 CPUs with a compiler that implements this.

* https://lkml.org/lkml/2018/1/3/797 (https://news.ycombinator.com/item?id=16066968)
I guess he means the retpoline. On the 6502 there is no indirect jump instruction, so you need such tricks just to achieve an indirect jump at all.
I think it may already be too established in the midwest for anything like this to threaten the spread of the legal pot industry.

I suspect this is a tactic to justify Federally taxing marijuana, and would be consistent with Trump's broader approach of making tax policy tweaks that hit the bluest states and regions the hardest.
"Senior Fullstack Dev" in NY at a non-tech company.

Currently 100k + 5k (bonuses, i've gotten 20k bonuses here in the past but those days are gone). Roughly 35-40 hrs/week with only two week-long crunch times in about 3 years.

I currently have offers for 135k + worthless equity (startup) and 110k (non tech company). Waiting to hear back about a Systems Engineer role offering in the 100-125k range (hot tech company).

Part of changing gigs at the moment is to plan to take on additional work on the side to increase my compensation. Not possible in my current role.

I started off making 60k as a developer and not even that long ago...proving value added 40k on to my salary quickly, but honestly I negotiated poorly. I left at least 25k on the table starting.
> ApplThwaway100

Apple, probably
That's fair. I definitely should have addressed the paper more directly. Thanks for the feedback.
I've been using emacs for over a decade now and I have yet to reach this state of nirvana. I do want to understand every line of elisp and I've been doing a lot of elisp recently. But then again, I also have work to do, and I realize all I've been trying to achieve with my emacs config in the past 10 years is to make it work like a modern IDE. Which is perfect, because the reason I switched to Emacs in the first place is I just needed an IDE that I could fix.

However, ever since Sublime and now VS Code came about, I've been having this internal debate of whether I should just switch to a text editor that I can fix, but come configured sensibly OOTB, and let sunk time costs be. This used to be a tall order but VS Code seems to be really close to this ideal now.
I think humans are a bad example - we use our own relatively highly developed intelligence to solve problems, and that means we had to feel safe enough from the environment long enough to develop that. But if we look at older organisms, like the tardigrade, there are some incredibly robust creatures out there.
Ahh ... The Verge, the epitome of tech analysis. Why isn't this submission flagged?
Yeah yeah lets abandon perfectly usable piece of technology because some john smith from the internet hates oracle.
So much for « states rights »

> Sessions, who has assailed marijuana as comparable to heroin and has blamed it for spikes in violence

Pot smokers aren’t violent people because it tends to chill you out. The growers and dealers can belong to criminal organizations and cause problems. So naturally, keeping the gangs in business by keeping pot illegal is top priority.
If you contract in an Investment Bank in London, those day rates would be on the low side.
> Also why does HN not support basic formatting?

It does, for a suitable basic definition of “basic” (it supports italics and preformatted monospace code blocks).

I think it's largely an aesthetic preference to focus on text content rather than distracting formatting that results in not supporting more. Aside from a decent formatting option for distinguishing block quotes, I don't really see any more formatting as being desirable, and even that is more to avoid people being tempted into using code blocks for blockquotes than because there aren't tolerable ways to present them without special formatting.
Clang has a new code generation option, too.

* https://reviews.llvm.org/D41723

* https://news.ycombinator.com/item?id=16070050

* https://news.ycombinator.com/item?id=16070356
Everyone needs to quit complaining about the sample size and the like and bringing up things like Glassdoor and just answer the prompt. The lack of transparency in salaries keeps us all at a disadvantage
while not directly related to meltdown and Spectre it's not just the web. Almost all code really shoud be considered untrusted. Every game on steam. every app on the app store. many apps use ad or analytics libraries the app devs don't know the innards of. there are plenty of apps that are just skinned web browsers effectively downloading new code all the time and while I might trust Facebook or maybe Slack to check all the 3rd party libraries and updates they import I doubt your average app dev team does any of that.
For the interim, may it be a wise idea to include an inlined script at the very top of any page which includes untrusted 3rd party code, in order to overwrite the Performance tools by a wrapper? By adding some random to the real numbers this may help mitigating effects ...

E.g.,

(function() {
var global = (function() { return this; }).call(),
_Performance = global.Performance,
_performance = global.performance;
global.Performance = /* ... snip ... */;
global.performance = /* ... snip ... */;
})();

[Edit]: This could be injected by a browser-plugin on the user's side, as well.
£90k for a dev job isn't that low, even in London. Unless it's very senior, you'll be paid more than in most other sectors (probably same as in finance).
Intel ME?
The statement isn't saying that they're everyone's direct ancestors, just that if 20% of people alive 1000 years ago do not have any current ancestors, that means that the remaining 80% are the ancestors of everyone else alive today, including lines with single descendants.
SWE II [1], Google Cambridge, MA. I was hired in 2016 with a little under 2 years of professional experience, with total compensation of about $150k and a roughly 75/25 cash/equity split. The equity has risen in value significantly, the cash only slightly.

[1]: I believe this is a relatively normal entry point for people either just out of school or with 1-2 years experience.
really?
both Azure AD and AWS Cognito use RS256 as the only algorithm supported.
perhaps my sample size is small.
Did you mean "prescribed"? "Proscribed" means forbidden.
Did you check the link about the Winograd schema challenge? The questions test common sense reasoning, and are very easy for humans to answer. An example:

The trophy doesn't fit into the brown suitcase because it's too large. What is too large? A: The trophy B: The suitcase
The old NoScript. The new WebExtension compatible version just blocks, it has no way to disable js.
Good article and great tech. However, I don't know if I believe the results are as good as they claim. Many of the pictures look a bit off to me, like they all have dead eyes. Maybe celebrities generally look like that anyway, so it is being true to form. :)

In particular, I think this guy is missing a pretty significant part of his head: https://static01.nyt.com/newsgraphics/2017/12/26/ai-faces/8e...
Cannabis raped and murdered Jeff Sessions' family in the 50s. It's the only explanation.
I had a bad experience with glassdoor.

I wrote about my bad experience at one of the company I interned for. Some PR from the company comment on my review, I knew the PR guy cuz he goes around doing it to other reviews there and create fake reviews.

Anyway, I call him out on it said he's using ad hominem for one of his tactic in the comment. Other users comment and back my report up.

After a few week glassdoor deleted my comment and the comments that back me up, they left the PR guy comment up. I wish I could have screen shot it.

Eventually they did away with the comment system.

I don't trust them at all.

There are aggregate surveys from O'Reily and stackoverflow. I think it's pretty decent. O'Reily doesn't give raw data for their data science survey so I couldn't do any survey analysis to confirm it but they release their linear regression model.
The window.postMessage and related MessageChannel APIs. You have to set up a listener and then post a message across the "boundary" (like an iframe or webworker).
The cost of living where I live in Scotland is pretty small (IMO).

I make around £40k as a developer with 11 years experience, which seems about average for my city.

My total cost of living each month is around £930. That includes my mortgage.

The company where I was working before I made ~£29k as developer, some people in that company were on as low as £21k. The average was probably around £25k.

Contracting rates can be good, I regularly get calls about contracting jobs from recruiters with rates around £400-£450 a day for a 6 month contract. But then you have the hassle of looking for a new contract every 6 months or so. That hassle is just not worth it for me.

I get emails each day from a job place with jobs. Today the jobs are

C# .net developer - £30k - £45k

C# software developer - £28k - £35k

Senior python developer - £65k

PHP Developer - £35k - £42k

.NET Developer -£38,000 DOE

.NET full stack developer - £35 - £50k

Java Developer - Upto £65k

Javascript Developer - £30-£40k

These are all for positions with many years experience. I don't know where people are seeing £100k a year salaries?