skysight-inc/HackerNews huggingface dataset:
A bit out of topic and not really an answer to your question.

Once in an interview for a startup company(~10 people), when I got into the office they had an uncompleted coat hunger from IKEA and there was a person trying to assemble it. They intentionally let me wait for a bit next to him and he started to look confused with the manual so naturally, I offered to help him and got on my knees and started to read the manual.

They told me much later that that was a test and I had successfully passed it.

I am not sure about the validity of such a test and maybe someone else can verify it.
Yup. That's the point of a physical switch.
I've downloaded a couple of hundreds of euros last year to various open source and Internet advocacy projects, and I've always used PayPal to do so.

I love the projects I've donated to, but not enough to trust them all not to fuck up storing my banking info. This way, I have all my donations easily available via one interface that I don't use for much else.
I got into crypto trading only because I saw these kids getting into it en masse, and realizing that my competition was no longer that same formidable institutional hive mind I would expect to find elsewhere.
Most competitive games go well above 10Hz ticks, OW does it, CSGO does it (I don't really know the tick-rates of other games but when it matters, so no comment there, but there is an important area for it).

OW just has a restricted rate option for low bandwidth connections (added when they went from 23 -> 61 Hz).
That was the first wtf I hit when learning go that made me think that it possibly wasn't all it was cracked up to be.
I much like Keybase.io
It's really exciting to be a member of the Rust community, right now. I'd encourage every programmer who still enjoys the magic to try it out for at least a hobby project. It's completely rekindled my love for programming.
MAG somehow managed to be a competitive FPS with 256 players back in 2008ish, its not an impossible battle.
I hate to be blunt, but the moral of this story is that you should not trade good operational practice for some personal preferences. Distros generally don't matter, until they do. Choices made at the distro level, like, hey lets build world! don't mesh well into providing stable and reliable service.

You can run any distro you want, safely, with best practices. Which means you aim to not make upstream changes which have a high probability of breaking things ... like glibc ... and you focus upon maintaining a stable platform for your service. You can do that with any distro. Any unix(-like) thing really. There's no magic, just common sense.

The flip side is that some practices encouraged by various distros range between glacial change (read as stability), or near relativistic change (read as here be dragons). Gentoo encourages the latter, and Debian/CentOS encourage the former. This does not mean one is better than the other, just that you have to pay more attention with some distros, to maintaining operational discipline.
Sure, but I have a hard time imagining that "what happened to Levandowski and Kalanick", as individuals, is going to weaken Uber in the marketplace. If anything, going from Kalanick to Khosrowshahi might have actually helped Uber in the long run.
On Monolithic Repositories (2014)
Yes, thanks for the correction.

I was mostly thinking about the narrow problem of widespread use of very old software, and for example Microsoft's visualization of IE6 market share by country after the company got involved in trying to get people to stop using it.

Edit: also, for example, on the Let's Encrypt forums it's somewhat more common for people from developing countries to insist that they have to keep using server software in production that officially went EOL 2 years ago or something. But developing countries absolutely don't have a monopoly on this issue, and I've certainly seen it regularly from users in the United States.
And my project is a GUI app, which is among the weakest stories remaining for Rust!
It doesn't necessarily imply surveillance or a flaw in the message channel - a plausible (and IMHO more likely) scenario is that they simply have seen the messages for one of the recipients.

It takes two to keep a conversation secret, and if one of them is unable to do so (e.g. has their papers and devices seized/searched), then no channel can be secure. OTR algorithms won't help you if one endpoint is compromised and its message history revealed, so switching to another app will help for some threats but not this (quite common) one.
Thanks for this. I have a late 2011 and was curious if I should update.
The security facepalm is the fact that you're pulling source code without signature verification. It's not github's responsibility to manage usernames. The blame and responsibility is on Go and whoever thought it's a good idea to pull in code this way.

There are so many scenarios were you can end up cloning malicious code when you're simply relying on cloning alone. What if someone hacked the author's github account and committed malicious code? And why do you trust that the author has no plans in the future to inject malicious code?
I have an interest in home automation and smart lighting but it looks like all the current systems need to be hooked up to wifi/cloud to do anything.

Are there any systems out there that you can hook up via ethernet and hook up to your own server?

Things like having bedroom lights change color temp on time of day. perhaps stepper motor control of blinds.
I really don't know why my lights need to be hooked up to the cloud via wifi for things like that.
I've also received a month extension on my prime. I indicated $10 which was approximate value for month extension.
you don't have to look far on reddit or 4chan to find "boomer hate" threads, with comments about how they sold out younger generations. stocks and 5% gains are definitely not considered cool either.

interestingly, i think this crypto stuff is bringing a lot of financial literacy to people.
I love the idea of George Soros using the term “excessive profits” http://www.telegraph.co.uk/finance/2773265/Billionaire-who-b...
> Programmers have to remember a vast amount of domain knowledge

And that is only half the job. You also have to practice, a lot.

I think "Teach Yourself Programming in Ten Years" is about right http://norvig.com/21-days.html

You can learn academic computer science, or know a lot of trivia about programming and computers, but without years of dedicated practice it doesn't translate into actual productivity.
If the people permit the government to be run by corporations, and the corporations rebel against the Andersen decision, who is the source of the backlash?
Takes 5 minutes via chat, I do it while watching tv or checking email.
Same here, but I expect it's the wrong law for magnetism. People's magnetism is roughly proportional to the logarithm of their cuteness, isn't it?
I don't know. Is it having to learn new things, or is it having to do the same things over and over, with the names changed?

Once you get the principles, there isn't much difference in languages, etc. But if you are a senior developer after 5 years, or 3 years, there isn't much room to go up.
I've only done this via chat, I don't have time to sit on hold or deal with phone.
Honestly, I don't much notice emacs being slow, esp. given how much it's doing for me under the hood.

One key thing is to always always always use emacs in dæmon mode, rather than starting up a new emacs for each file (as would be done with vi). With an always-running emacs instance, start-up time is no longer a factor, and the editor itself is plenty fast enough once it's running.
Not ever here, at least.
> It's conceptually the same, but keys and locks are not globally secure. They're only locally secure

Criminals in Hong Kong can’t teleport to my door. Local security for locks is fine because the threat is always local.
Yep, I haven't worked in a HPC/big data environment but neither are the people who wrote the original article. They have three OSDs and only two(?) servers accessing them.
Places other than USPS can deliver to places on military bases provided you have a “physical” address vs a AFO/FPO. However, the delivery company and driver needs to be registered to deliver on that particular base. AFO/FPO addresses are USPS only as they are more of a CNAME/pointer for the persons physical address and can involve going to combat zones or ships at sea.
FOSDEM 2018 – Markus Feilner: Security Theatre the (mostly) Unknown OSI Layer 8
Even then, if you ever update your dependencies the problem could strike.
So what I'm taking away from that video is that sacred things which give people a sense of meaing causes them to do irrational things as stupid as suicide bombing. Seems to support my perspective that nihilism is a great way of life that helps people lead rational lives free from that mindfuck that's religion (& by inclusion of children coddling in sacredness, that too)

But I can see why he has to say we should be using idealism to sway those taken in by idealism: nihilism doesn't generally push itself through fanatics, it lives on by being a simple rational idea that one has to personally consider & then realize. Gets into ideas of "The Selfish Gene" & needing some way to inoculate against these ideas which press on because they are self serving rather than rationally founded
> The security facepalm is the fact that you're pulling source code without signature verification.

> And why do you trust that the author has no plans in the future to inject malicious code?

Signature verification is used to protect against malicious authors now?
Did you just say it's not github's responsibility to manage usernames on their own site? You're aware that attacks on similar names (not even exact ones) are a very common form of security attack, right?

What signature verification would one have when accessing a public repo? If I tell somebody there's a really great tool at fakename/faketool, they are screwed.
No real programmer would propose an O(N) solution like that.

Here's O(1):

elephant.invisible = true;
See https://news.ycombinator.com/item?id=16341265 - basically, many top-tier journals won't accept papers that are also published in open access journals.
If you are dirt poor in a dirt poor country it is actually not a bad investment.
There should be a way to verify that the repo you're depending on has activated strong 2FA and opted in to a minimum waiting period for name reuse.
Ah so that's why that has been happening lately. Makes sense.
I wonder how much shady side-betting these financial advisors do. It's easy to make a few hundred thousand, if you get to decide where your client invests a few million.

Reminds me of the good old Goldman Sachs, who made a killing betting _against_ their clients. https://www.theguardian.com/world/2010/apr/25/goldman-sachs-...
“Fast” is really a meaningless and vague word. What specific part of emacs lisp is faster than javascript in what regard?

For what it’s worth, V8 among with some other JITs are some of the fastest engines in the world: https://arewefastyet.com/#machine=29&view=breakdown&suite=as...
I think MAG was using clever tricks. There were multiple “zones” per battle, and I think each of those zones was a separate instance with some coordination between.
Putting it on a bus strip with a power switch is definitely Plan B, but it's inconvenient.

My bluray player spends a lot of time fruitlessly searching for an internet connection when I put a bluray in it, and eventually it gives up and just plays the disk. I see no reason to connect it to the internet so it can spy on me.
These examples mostly sound like they're about financial literacy, or at least the first thing you learn: if it sounds too good to be true, it probably is.

Individually:

Nothing is fail-proof.

People will say anything to get your money.

Business is cutthroat.

And shit happens.
I think a lot has to do with FOMO and their egos. Kids these days are constantly chasing what's new and trendy. Everybody wants to cash in on the 10, 20, 30 or 50x return. They want to tell their friends how much they made, and how "well" they are actually doing in life (when all they have is tokens/coins that may be worth nothing). You see this in social media, and this isn't that different from it.
No one is surprised that non-encrypted channels are being surveilled. What's interesting is how offhand it's becoming, that a police officer can casually peruse someone's private messages and apparently doesn't take much care to conceal this fact, even from a journalist.
I love this. I've been kicking around the idea of building an automated crypto index buyer that orchestrates purchases/transfers on exchanges, around metrics like commits as well as use metrics like the ratio of on-chain value transfers to speculative on-exchange trading.

Would be nice to couple this with a Linux distribution that made it easy to create an offline wallet for new cryptocurrencies that become interesting, so you could immediately shift your coins off of exchanges.

A lot of them will probably become worth very little/go to zero, but there's a reasonable chance that the Amazon, Apple, Microsoft, Google etc. of the crypto world already exists as a fledgeling project.
Keeping employees from straying too close to the line of 'sharing trade secrets with their next employer' makes money for shareholders. There's a chilling effect.

The next Levandowski will think twice before following in this one's footsteps - even if their actions would be 100% legal. The next Kalanick will think twice before hiring him.
I recently dropped my Galaxy S5 [with a case and glass protector] into the toilet (gross). It was probably submerged for a full 2 seconds. Absolutely no side effects what-so-ever. I even gave it a full rinse in the sink afterwards.

I'm holding tight onto this phone, it's awesome.
I actually tried to do that, but quickly realized there is no way I could follow the tree of forks. How is what you're saying practically possible?
No, who said anything about right or wrong here? What I said is responsibility. If you're naive/ignorant/otherwise unprepared then the answer is to ask for help and learn so you can be better prepared. That would be best for your future but it's ultimately up to you and nobody else really cares what you do.
Cool, are you using gtk-rs? I've been using that a bit.
Maybe I'm off, but I feel that as a desire to refuse to play a rigged game. I am "intrinsically digital" too, but just off by a few years so nobody talked about crypto at school even a year ago.

Still, it makes a hell of a lot more sense! I don't know about you, but I've noticed quite a few rigged games, and I took action on that.

For example, after my work tried one last shenanigan on me last year, I quit. I did not bother applying to another corporate job. I know I'd be paid 70 cents on the dollar and thrown a bone every now and then, so instead I just started my company. Come what may!

I don't even bother with pension stuff, because of the system dynamic. I see it as very unfair, and I would be happy to vote to bring it down -- even if it meant I would be 100% sure I would not see anything in return of the money I am forced to pay. But at least, I would not contribute an unfair situation and burden the next generations.

I wonder if the generation that daytrade crypto on their cellphone feel the same about money and banking? Maybe they believe that even if it is very far from ideal, crypto is preferable to the status quo?
> It's simply solvable by refering to a commit hash

Do you never update your dependencies?
> You can use tools like glide

Ah, the new hotness is dep (as opposed to godep, as opposed to govendor). I love Go, but man if it doesn't have a bit of JavaScript's reïmplement-the-world problem.

The funny thing to me is that this was always pointed to as a problem of Lisps: Lisp is so powerful that a student can implement an object system as homework, and the issue is that every student will. It looks like this problem isn't limited to Lisp: any sufficiently-powerful language enables programmers to reïnvent the wheel rather than forcing them to collaborate (e.g. as with C, where doing anything is so incredibly difficult that it's easier to pitch in with someone else's project than start your own).
Just wanted to say thanks for paperspace, it's been a great tool for my org to setup some windows build environments when we're all running linux/mac
It has no dependencies other than Python3. Most of those files are documentation, tests, etc. But, everyone has their own taste when it comes to proper sizing for their tools.
Call me paranoid, but I've always assumed urls are not permanent. Domains can change, usernames can change, and published things can be taken down.

For example, I may publish something as an online backup or a mirror of my real repositories, without any kind of guarantee whatsoever. ONLY sharing because I want people to be able to see how the things I do were made. I mean, even most FOSS licenses explicitly state that there are no guarantees of any kind.

IMHO I think people should stop with the "if it's on internet, it must retain compatibility" mindset, and instead switch to a "this will break or disappear at any time unless explicitly stated otherwise" mindset.
I think, for many of us, our only experience with offshore code is with the bottom dollar coding sweatshops, which are universally shitty.

I have no idea what % of offshore code work that represents compared to just a regular consulting firm that happens to be located overseas, or a branch office of a company located in another country.
There's a similar problem in the Kodi world where a popular repo was deactivated then re-registered by another party:

https://torrentfreak.com/metalkettle-after-github-takeover-1...
China Bankrolls Appalachian Petrochemical Hub
Has anyone used New Relic and switched to Skylight or vice versa? Been looking for some comparisons [1].

[1]: https://twitter.com/sunnyrjuneja/status/951973556170215424
That's crazy. I knew that one of my college friends had interviewed at Epic as a new grad, but he didn't go any further with it. Sounds like a really strange company.

It might be the case that salaries won't become truly bimodal. It seems like there might be "tiers" of compensation which are based on levels of competition between similar companies. SV startups tend to pay less than Google or FB, but their compensation packages are typically within the same ballpark of each other. Perhaps the bimodality is most notable for new grads, since they typically don't get hired at mid/small companies.
Are these characteristic papers, or the densest ones you could find? I submit that the vast majority of papers can be understood by people who have had about 4 years of university, and another 3-4 years of post-graduate education. Do you really believe that cobbling some portion of this study together over a lifetime is not even possible, or maybe even something that would be increasingly common, with access to the literature?

People have endless time to become experts on quackery and pop science; wouldn't it be nice to start seeing people who have taken up actual science as a hobby, and take it seriously enough to hold themselves to the same standards as professionals - or as seriously as the 20-somethings that are often writing these things?

Also, plenty of people get professional training, and end up working outside of the field. What if they want to continue learning? Is it somehow physically impossible for them to understand journal articles if they are not connected to an institution with journal subscriptions, even with training?
Had a conversation in 2015 with someone who was... a bit of an irritant. Future people tagging him in like 2017... ended up dragging in a completely innocent bystander. Because the guy in question had changed his account name, someone else has registered his old one, and GitHub, cluelessly, attached all of his comments to the new user.
Yes. And properly secured air-gapped devices don't get malware.
> Social media sites like Reddit, Google and even HN gave in to the elite. Facebook is holding out.

You're kidding, right? Facebook sells ad space to "the elite" at bargain basement prices. Never in history has micro-targeted propaganda been this cheap for someone looking to manipulate public opinion.
I use a nox emacs with minimum .emacs for quick editing in terminal. Its startup time is comparable to vi.
The simpler solution is to not run that code.

The imaginary user cited does not need that code in order to "browse memes".

The code is there for advertising, e.g., to attract advertisers as customers by gathering data about users.

Hence the push to HTTPS is for companies that aim to generate revenue from selling access to or information about users to advertisers.

I have no problem with HTTPS on the public web, to the extent that it is the concept of encrypted html pages, and perhaps these are authenticated pages (PGP-signed was an early suggestion).

Encrypt a page of information (file), sign it with a public key and then send it over the wire . The wire (network) does not necessarily need to be secure.

However I do have a problem with SSL/TLS.

I would like to leave open the option to not use it in favor of alternative encryption schemes that may exist now or in the future. It seems one allegedly "user-focused" company wants to remove this option. Comply with their choice or be penalized.

The issue I have with TLS is only to the extent TLS is the idea of setting up a "secure channel" to some "authenticated" endpoint (cf. page), with this authentication process firmly under the control of commercial third parties, using an overly complex protocol suite and partial implementation that is continually evolving (moving target) while people scramble to try to fix every flaw that arises out of this complexity.

To the extent it is not what I describe, I have no issue. (That is, I'm pro-TLS.)

We have one company aiming to replace HTTP with their own HTTP/2 protocol, which to no surprise has features that benefit web app developers and the advertisers they seek to attract far more than they benefit users.

Could we design a scheme to encrypt users web usage that would not benefit advertisers? I think yes. But this is not what is being developed. Encryption today is closely coupled with the "ad-supported web". If we are not careful, this sort of policy pushing by Google could cripple the non-ad-supported web that existed before the company was incorporated.

Encrypted "channels" are not the only way to protect information transferred via the web. TLS is not the only game in town.