skysight-inc/HackerNews huggingface dataset:
Is 15 years to prepare still not long enough to migrate your code incrementally? You can get Py2 into a nearly-ready-for-Py3 state with just a little effort stretched over whatever horizon you desire. Beating a dead horse doesn't do anything about your stagnant code base.
That's right. Its about domain and specialization. I'm 48 and have a really good remote gig b/c I've got about 10+ years in one specific enterprise software domain. Interviewing for mainstream technology generalist job is where you get hammered with the Google-style interviews.
So we've seen several VPN services that have proven to be malicious, insofar as selling your browsing history to advertisers (see Hola Better Internet[0]), but have we actually seen a VPN provider being a 'honeypot' yet?

I guess we should qualify the term. In my mind, that would be a hostile government who sets up a VPN service for the purpose of attracting citizens who wish to avoid their censorship, and then arresting the users.

[0]https://lifehacker.com/hola-better-internet-sells-your-bandw...
Actually the release date was 2010 not 2012: "Standards were released for mathematics and English language arts on June 2, 2010, with a majority of states adopting the standards in the subsequent months." [1] It was adopted by Washington State in 2011. [2]

Are you implying that his children were subjected to Common Core, or that they couldn't have? by 2011, they were age 9, 12, and 15.

[1] https://en.wikipedia.org/wiki/Common_Core_State_Standards_In...

[2] https://www.seattleschools.org/academics/curriculum/common_c...
Ask HN: How to build an sass app on h1b
I am currently building a sass app for businesses. I am planning to launch it very soon.

I am currently on H1B visa in US. Has anyone faced a similar issue before?
How did you monetize and get payments without landing into any trouble?

PS : I am aware that one is not supposed to do any work outside the employer on H1b visa. Please don't write the same thing in the reply. I am looking for some innovative ways to bypass this and move out of this slave visa.
I use it to produce 50-minute radio shows for my country's public broadcasting. I work with a Thinkpad T42 from circa 2004. Swapped the PATA HDD for a Compact Flash card -- prior to this, everything was just surprisingly snappy thanks to Tiny Core Linux's RAM boot; now the machine is also wonderfully quiet.

Granted, this is pushing it, but I've been using this setup every day for almost two years. (I just like to use old hardware until it dies -- or, is this what old IPS-screened Thinkpads generally turn people into?)

Sure, you probably should be a "computational minimalist" by nature (e.g. there is an older version of Chromium, but I suppose your main browser will be Dillo -- which, actually, is just wonderful once you get used to it). But if you are a minimalist, I'd say it's a really solid system.

Also, it's fun for me to think that I bought this Thinkpad T42 three years ago for €20. And now I use it as my main workhorse in a field where typical setups consist of new-ish MacBooks with high-end SSDs and an up to date version of Pro Tools. (And where people occasionally still think that "duh, you can probably only edit a text file in Linux".)

So it's an awesome, clean, fairly easy to maintain distro (e.g. in case of a typical install you have a pristine system after every reboot). And the community is very friendly and responsive.
Heh... https://daserste.ndr.de/panorama/xkeyscorerules100.txt

Context: https://daserste.ndr.de/panorama/aktuell/nsa230_page-2.html
This is a good article but unfortunately there's evidence of voting collusion and, worse, booster comments in the thread. We ban accounts and sites that do these things, so please make sure not to do them. It's not in your interest anyhow, since if the article gets attention, HN readers are good at sniffing out the collusion and then they go mad with ire.
What happened to my brain? I just bought the idea that the surveillance state is overall more effective in suppressing criminality.
Sure this is true if we just let the market do as it wills.

But we have many tools to deal with this problem in our historical toolbox that we have mostly left behind as we hard embrace neoliberal ideology: regulation with fines, regulatory bodies (that can make judgements on unethical behavior not explicitly written into law and mete out serious punishment), a criminal justice system that could be applied to executives, a troubling but powerful system of asset forfeiture designed to seize "ill-gotten gains" (and what is money gained from unethical business practices but ill-gotten?), nationalizing or breaking up companies to prevent concentration of power that can be abused, organized labor and collective bargaining. If e.g. CEOs who ran unethical enterprises were afraid of their assets being seized and being jailed the fairly accurate picture you paint of our current reality -- the unethical businessman who crushes anyone with an ounce of human dignity, worker and competitor alike -- looks a little different.

I think it's pretty clear that voting with your dollar will never and has never worked, but some of the above tools might. Though they all of course come with their downsides.

>I understand it, lots of people have dreamed big dreams of how great the world would be if everyone else was just like them too.

Actually nearly everyone already is like me in this way: nearly every human being has a sense of ethics and sees a pretty clear difference between right and wrong that transcends a profit motive. It's just that it's not so easy to turn that ethical and moral sense we all share into actual power to change things, especially when power is concentrated in the hands of the unethical (for exactly the reasons you describe above). But that's the task before us, and that's why universities are making computer scientists take ethics.
Yeah! Here is one example of a company working on that:

> The REX Neo architecture gains its performance and efficiency improvements with a reexamining of the on chip memory system, but retains general programmability with breakthrough software tools.

https://insidehpc.com/2017/02/rex-neo-energy-efficient-new-p... (check out the linked video)
A graph of profit from phone sales would be interesting. Even inflation adjusted, I bet Apple blows everyone out of the water.
As always the title is a bit of an overreach.

If you are going to attract the attention of governments (PSN and Sony hacks, etc), yes, don't expect a VPN to shield you.

If you're pirating a show that isn't available in your region, or checking up on an old workplace website, etc, a VPN is likely perfectly fine and will save you from legal scare letters, an old employer seeing your visit, etc.
There is a balance I guess. You don't need to do all the shooting yourself but you need to know where to point the gun, so to speak.
Not so. They specifically stated they'd force this out technology companies if they didn't volunteer. Typical right-wing fascism.
Tor was /targeted/ by the NSA, but I haven't read anything that makes me believe it (or onion routing in general) has been compromised. I get the feeling tor has proven so effective that the only reasonable attack against it is sowing mistrust.
Tree-sitter is impressive. When it's fully implemented, no other text editor in existence today will have the parsing capabilities of Atom.

Max Brunsfeld gave a talk about Tree-Sitter at FOSDEM 2018. You can check it out here.

https://ftp.osuosl.org/pub/fosdem/2018/UD2.119/code_tree_sit...
Rivalry (economics)
I sincerely hope that consequentialist ethics won't dominate those courses.
This isn't true at all. The state of the situation is tons of people are trying to switch over to web dev and given enough time and effort anyone can become competent at building large systems and solving hard problems. That huge gulf is huge but the gulf is shrinking at an incredible velocity.

The supply of human software developers is increasing at an incredible rate. You don't need a degree in software to do software. I would say roughly 40% of software devs now have an actual software engineering degree. Heck, I'm working with a guy who has a degree accounting and went to a freaking bootcamp for six months. He got lucky and was able to pass the hiring managers' little software puzzle (DFS problem) and he's now a full-time developer.
Just hit df -lh on the EBI login nodes and see a 22PB filesystem at 93% full. I suspect if I dig deeper I will find a bigger one as they had 120PB of storage last year[1].

[1]https://academic.oup.com/nar/article/46/D1/D21/4658830
No, the reality is that on desktop, where window decorations should be drawn, the compositor usually has a toolkit for buttons and stuff at hand, since it's closely related to the whole DE being used - like in GNOME, Plasma or Enlightenment. What's more, this relation in Wayland world is even tighter than it was in X11, since under X you could easily replace the window manager and still be able to configure stuff like screens and input with tools from your DE. With Wayland, unless DEs agree on standard way to configure their compositors (there's no sign of it yet), you can't and that's by design. Those compositors who don't have a toolkit at hand usually aren't targeted for desktop at all. On mobile, embedded, automobile etc. you don't usually need a toolkit, cause you won't draw decorations anyway. Wayland is supposed to go deeper than desktop, you know, and now with popular compositor being CSD-only you need to adjust all the toolkits and apps to not draw them if you want to launch them there, instead of doing it once in the compositor. And yes, while for majority of them it doesn't make sense, there are plenty of desktop apps or games that can run just fine on mobile without any modification, I've used bunch of them on my Openmoko and Maemo phones.

FUSE is exactly the situation like it is now on KDE Plasma, which I fully support - the compositor provides decorations for any app to use, but if the app is interested in doing them itself, it's free to. Just like the kernel which provides the filesystem support, but if you want to implement some fs by yourself in userspace, you're free to - there's little point in doing sshfs in kernel, after all, just like there's little point in doing browser tabs in compositor.

What GNOME is doing, however, is putting all filesystems into FUSE - no, it doesn't even provide common API to access them - and that's just a terrible idea.

Also, to use your own argument - last time I checked, majority of the apps don't customize their window decoration space.

Sorry, I've heard those pro-CSD-only arguments multiple times already, they just don't provide enough merit to be taken seriously (they're also often mixed with just pro-CSD, which I have absolutely nothing against). At times it starts to look like it's a conscious sabotage of the Linux desktop, but more realistically (I hope!) it's probably just bunch of influential people not having wide enough perspective to put things into proper context. I still fully stand behind my words on being irresponsible.

[edit]

Oh, just thought about it - on desktop, you probably need a toolkit in the compositor anyway if you want to provide good UX, cause when some app freezes, you need to have some way to signalize that to the user and give them a way to choose between closing the app, waiting for it to unfreeze, moving it away etc.

Plus, there's XWayland which won't go away anytime soon, where you obviously still need to draw decorations.
What to Do When Laptops and Silence Take Over Your Cafe?
I don't mind learning, definitely. I got into this field because I'm passionate about software and I enjoy programming a lot. But while I have a full time job and a large-ish family to support, it's hard to fit "3 years of professional React.js experience" into my spare time to put on my resume, so that when nobody's hiring iOS developers anymore, I can still get a job. That's what I'm talking about. A lot of the skills are very transferrable, but I've already been turned down for a few jobs simply because I just don't have the in-production experience with the exact technology they're hiring for, even though I could pick it up pretty quickly.
> Children being born today

If they even make it that far. We're not so civilized after all...
When a company like Gusto invests in and reaches equal gender representation, does it make it harder for smaller firms to do the same, or does it help more women enter the engineering workforce?
Google can't take an editorial position, they are forbidden (sort-of) from doing so by law: 47 U.S.C. § 230, Communication Decency Act (1996).

Per the recent Wired article on FB: "This is the section of US law that shelters internet intermediaries from liability for the content their users post. If Facebook were to start creating or editing content on its platform, it would risk losing that immunity"[0]

The EFF has a good piece on the importance that this law be upheld[1]. Basically, from ISPs to Craigslist, the internet can repost/report on potentially horrific stuff without being in trouble themselves as the 'host'.

If Google were to take an editorial position, they are afraid they will run afoul of this law and be held liable.

[0]https://www.wired.com/story/inside-facebook-mark-zuckerberg-...

[1]https://www.eff.org/issues/cda230
Both her, and Shane Missler, who won the Mega Millions in January should just disappear. I think her problem is that she wants her life to remain largely the same. Well it can't and it won't. But a few hundred million dollars gives you plenty of opportunities to start over, at any age, and take care of your inner circle from wherever in the world you want to live.
Github Commit history..
Well, funnily enough, quantum computing CAN help with factoring, and likely not with TSP. Factoring is one of those rare problems in NP that is not known to be NP-complete, but for which we also don't know a polynomial algorithm. In 1994, Peter Shor came up with a quantum algorithm that solves factoring in polynomial time [1].

On the other hand, it is generally not believed that quantum computers would be able to solve NP-complete problems such as TSP in polynomial time.

[1] https://en.wikipedia.org/wiki/Shor%27s_algorithm
Read the other comments on the thread. It’s possible to sign it as a trust as they are legal entities. Also, she already signed so she can’t use the trust option otherwise the ticket becomes nullified.
What's DI?
Some Tor relays are absolutely honeypots
The industry only changes superficially. The fundamentals stay constant. Don't master languages; master the fundamentals.
As a teenager who's into tech, this is how I feel every time I read these comments. When I was first learning to program, I didn't get support. I had parents complaining about how I use the computer too much. Had they been any more assertive, I wouldn't have been able to continue down that path.

From the outside, people like to say "screen time" as if it's all one thing and all of it's bad. But we've seen studies showing that video games help people develop real-life skills. Talking to people online is just social interaction. Cyber bullying, on the other hand, isn't all that different from the real thing. What I'm getting at is that using a computer or cell phone isn't so different from doing stuff outside with your friends. There's a whole world of things online and not everyone uses it the same way. Lumping it all into some big box of evil and taking it away from your kid is really just the same as locking your kid inside and only giving them the internet.
One part of the solution is to introduce exceptions early. The whole thing is a more complicated business than a one-to-one sound-letter correspondence. But it is a problem that has been solved for a long time now[1]. Cognitive science is not required. The only mystery is how this is not more widely known.

[1] teach your child to read in 100 easy lessons, and associated school curricula from the same author
I'm sure the intended audience for enemies of the state are googling "should i use a vpn?" right now. What a silly article.

Understand vpn's, understand public VPN providers, evaluate the risk for whatever you're trying to do.
I don't take it as necessarily an implication of accumulated failure.

Career paths just tend to end, somewhere somehow. Might flame out. Might get a bad rep. Might be doing just fine but that tech & corp might just be leading to "going nowhere", coasting or the path vanishing. Be on a road long enough, you eventually discover it ends, be it accumulated choices or "just does".

At some point you need a change of direction. Might even be the same direction, you just have to get on a different road that actually continues that way. I'm still doing what I always liked doing, I just swapped out the technology & clients for something more modern.
Ask HN: Best tool for technical web crawler data (entire internet)
I am looking for tool or search engine for technical web crawler results. I want to know what sites are using certain products and/or plugins. I have seen nerdydata.com but I am looking for other options.
They have logs, they just don't keep them very long. (Allegedly.) So in theory, while they might not have logs for a past incident if it's been long enough, they most certainly have logs in very short term and/or can tell who's connected to what at the present time. So while many copyright actors will be too slow to get a hold of said logs, a government actor with significant interest will.

The biggest issue for me is that VPN providers have given me no particular reason to trust them. If I already have reasons to distrust large international corporations that say they care about my privacy, why would I go trust one I've never heard of on the Internet that says it cares about my privacy?
> If somebody wants to tap your connection, they can still do so - they just have to do so at a different point (ie. when your traffic leaves the VPN server).

I feel like this sets up false equivalency. Tapping VPN provider and tapping individuals last mile are very different things. Of course it is debatable which one is more secure etc, but the fact remains that they have very different characteristics. I'd say that for almost any single attacker moving the hypothetical tap will not be happening at a push of a button, more likely it will not happen at all.
> I’ve found it a real struggle to get our team to adopt writing tests.

I find this hard to believe. Do others CTOs / team leads find this to be the case?

I've been a CTO of two small startups with 3-7 developers. We've had resistance to tests at some points (myself included). We've solved it fairly simply. All pull requests (PRs) require tests. PRs are rejected immediately without tests. If a PR doesn't have tests and it is critical to get in, we open a new ticket to track adding tests. It isn't fool proof, but it does result in a high degree of test coverage.

And once developers understand how and where to write tests, they usually see the benefit quickly and want to write more tests.
I keep hearing that the GPL and CDDL are incompatible. But repeating something doesn't make it true. And I have read both licenses, and have come to the conclusion that they're unlikely to be incompatible in the first place. Unfortunately, every time this line of argument come up, it tends to get buried in discussion.

The basis of the incompatibility claim seems to be from 3 arguments:

1) Statements from the FSF website, but those have no legal bearing against the actual text of the licenses

2) Claims that the CDDL was engineered to be incompatible with the GPL, again, it's an interesting hypothesis but has little bearing against the actual text of the licenses

3) Derivative Work argument from the GPL. This seems to be the only one that could hold water; however, I doubt that a court would find ZFS to be derivative work of the Linux kernel.

Furthermore, even if you argue that the "derviative work" clause makes them incompatible, there’s no way actually to prosecute such a violation. Copyright law is something called a tort in law, which means you have to show that someone violated the rules AND also caused quantifiable harm. What would our theory of harm be? (https://blog.hansenpartnership.com/are-gplv2-and-cddl-incomp...)
Show HN: Badge Designer Tool
As a 18 year old starting my first year of college, this article has essentially pointed out every single fear and worry I have had in the last 5 months and given the direct cause of these thoughts. I had a hunch that the mindset of raising kids in the last decades where the cause of this, but it is quite releaving to see some facts behind it. I hope the upcoming generation of parents adapt these recommended parenting strategies, but I fear that the state of parenting is heading to more of an extreme in the opposite direction.
This, windows phone works well as a phone, but the lack of quality apps and crappy browser that chokes/crashes on avertising make the "smart" part a complete fail.
We made a free to use SVG badge designer. Would love to hear some feedback!
"Only hire when you feel you’re completely desperate for the role". Maybe for a tiny, extremely lean startup. But for anyone else if you wait until you are desperate you will end up hiring the first person that you think might do the job. That doesn't sound like the right way to go to me. But maybe "desperate" is relative.
Yes, absolutely. Just like, if women actually made only 77 cents for every dollar an equivalent man would make, then wouldn't it make sense to start labor intensive businesses and staff them with only women? Split the difference, pay them 89 cents on the dollar, and then have a competitive advantage because you are saving 11% on your labor costs.

Of course, no one has actually done this. Why is that? Perhaps we are starting from the wrong assumptions, and there is no appreciable pay gap between equivalently qualified applicants based on gender?
Sort of. The difference I guess is that you can still put javascript on your resume and it'll do something for you.
I'm willing to bet that Node/JS devs actually have an easier time staying current, since their workplace actually has a need to change technologies, so they're getting paid to keep rewriting their web app in $the_latest_framework, which they can then put on their resume.
It's been unfortunate to watch regulatory bodies accross the globe try to suppress p2p over the last few months by highlighting only its illicit uses.

Kudos to Italy for betting on the horse that will inevitably win.
I think you mean zk-SNARK
For me, https://en.m.wikipedia.org/wiki/Dependency_injection
Right. Reporting corruption over Tor makes you look suspicious, but they probably don't know what you're doing. Reporting corruption without using Tor means they know exactly what you're doing and will catch you.
If your engineers don‘t write tests you hired the wrong people. Testing is vital.
Make a rule: Every change needs to be tested (you can even set up a pre-commit hook for this. If a class has no test, one has to be written. If tests can not be written easily for a class, it has to be refactored.
If you access an http site, a government controlled exit node could inject js and eventually gather enough info through profiling mouse movements and browsing habits to ID you.

Even with https, if the feds are in cahoots with the certificate authorities, you would be just as vulnerable to this sort of injection right?

However, tor hidden services is another story. I think this is where a bad actor would hit a wall.
We've banned this account for breaking the site guidelines. If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future.

https://news.ycombinator.com/newsguidelines.html
Maybe you should care, since it's the other way around - VS Code is simpler and much faster, Atom is the heavy one.
New AWS AppSync features to run serverless GraphQL