skysight-inc/HackerNews huggingface dataset:
His arguments are also legitimately absurd. He says "if Google succeeds, it will make a lot of the web's history inaccessible", which is patently false given the fact you can always still access HTTP websites, not to mention that services like archive.org and Google's own cache exist.

He then makes the argument that HTTPS will make it such that only "super nerds" will be able to create websites. But right now I can host my own blog on services like Netlify and get an HTTPS certificate for multiple domains with one click. If I want my own server it literally takes two seconds for me to set up certbot and get certificates for free. Then he makes a odd and somewhat rambling comparison to the Grand Canyon.

He then argues that Google labeling HTTP as not secure is the first step down a path which leads to "blocking the pages outright", which is a prime example of the slippery slope fallacy.

In another blog post he argues that by applying Occam's razor, it's clear that Google just wants to protect their ad revenue (because HTTPS would allow ISPs to replace Google's ads with their own). Which honestly sounds insane.

I'm really surprised that this person is a software developer. I'm even more surprised that he still believes this stuff after working for 24 years.
Displaying a warning to users doesn't make sites "inaccessible".
A bus with 50 people is 49 cars taken off the road.

Even with a self driving carpool option the bus still takes off 9 other vehicles (assuming 5 passengers in a vehicle).
> First, the OED is primarily a work of historical scholarship. Anyone in the market for a dictionary so that they can look up the meanings of words would be better off getting something else, like Merriam-Webster or really anything. The OED is not a good choice for this purpose

The OED is excellent for this purpose, due to its completeness, and other, even “unabridged” dictionaries fall far short of it in this use.

Of course, you have to a pretty particular needs in words to look up to be frequently hitting the space where the OED is needed for this.
This would appear to have been refuted by the latest release:

https://www.politico.com/story/2018/02/24/democratic-memo-go...
> If they're talking to themselves, they need more than that. They probably need to be cared for in a mental institution.

Bullshit. There are many people capable of losing touch with reality who live normal lives thanks to medication.
Amazon just slashed 25% off its popular Fire TV Stick in a surprise sale
Yup. Obfusticating using a tool like http://www.jsfuck.com would get around the lack of quotations.

If the result was too verbose, you can always handroll your own JS:

{{constructor.constructor(constructor.name.constructor.fromCharCode(97,108,101,114,116,40,39,120,115,115,39,41))()}}
Not that there are no worries, but the worst case scenarios being put forward are almost certainly not accurate. In fact it has been acknowledged that the worst case models submitted to the Paris Climate Accord talks were misleading in their assumptions.
Sure, if APIs existed within a vacuum. In the real world we have to worry about ease of packaging, ease of maintenance, and various other practical costs.
The answer to this is ultimately ratcheting down cert validity duration. As more people automate renewals we can get to the point where certs are valid for maybe days at a time.
I came up through sysadmin, networking, infrastructure type work. I always assumed that programmers knew everything I knew PLUS how to write programs.

First project where I spent any appreciable amount of time with programmers was eye opening. I was perplexed that not a single one of them had ever run a network sniffer or strace or had the faintest clue about HTTP or how browsers maintained state with their application. I squatted in a room with them for 4-5 weeks and acted a bit like an xray machine for any problems they were encountering. I didn't know anything about programming, so they would tell me what the code was supposed to do and I would show them what was actually happening on the wire or filesystem or whatever. It was a lot of fun and we all left the exercise having learned a lot more than expected. This was nearly 20 years ago, tooling has improved a good bit since then but it still helps to be able to get into the weeds.
Quartz is quickly becoming a glossy version of a clickbait farm
I read it as: somewhere in the $25k-$30k range. If they (the reporter) know it's >=$25M, then why wouldn't they say that? It makes for a better story the more money is involved...
Honestly, I have no idea about ad campaigns. However, I've felt that the ad itself wasn't good enough.

And, when you say "a typical YouTube ad is 30 seconds" doesn't mean you have to make one so long, you could have considered it more as an upper limit instead of a goal. Your message was simple, and i've felt the ad was unnecessarily slow and long. Being more specific, you lost me exactly after the first 8 seconds.

On the other hand, the ad taught me that it's possible to buy japaneses candies easily and where i could get them. If someday I, or one of my friends, want japanese candies, I could simply point to your website. (And in fact, I already made a friend interested about it before reading your post).

Lastly, the ad itself is boring, maybe with some background music or even a voice more like "Hatsune Miku" could been a little more fun to see entirely.
Nice work!

I wonder if it would be possible to use this infrastructure to write a trace command that I've always wanted, which is one that records internal function calls in the binary.

When I'm feeling overwhelmed with a new codebase, one of the things I like to do to get a handle on the code is to just run some representative command (or make a connection, if it's a server) and see a log of every function that's called with its arguments.

We have strace to do that for system calls, and ltrace to do it for libraries, but nothing that just.. traces. It's shocking to me to think about how many person-years have been lost to debugging by such a command not existing in the C world!

I've seen some hacky and unstable scripts that use gdb to set tracepoints on "*" to get this done, but having a native binary that could do it would be amazing.
that requires a very specific topographic configuration (nearby tall mountains with warm moist air flowing over them from one side, and the other side in their rain shadow).

It is by no means a widespread phenomena, and absolutely does not explain events in the arctic.
That shows that pure free market solutions won’t fix it, but that seems pretty obvious already.
Probably, but the ones you'd want to live in would notify you first.
Gihosoft Releases Free Android Data Recovery Software to Global Markets
Y Combinator CEO AMA: “I Got Kicked Out of Yale Then Sold My Startup for $1B”
>All three are preferable to being stuck in traffic.

Other people's preferences don't bend to this kind of declaration. If they were preferable, people would choose them.

I'm all for building out better transit infrastructure, but there is simply no contest in the midcentury suburban sprawl that dominates American life. Maybe park-n-ride. We're going to have to figure out how to build attractive, livable, and politically credible compact urban environments at scale to really address car dependence.
you'll find that HTTPS is THE biggest centralization force of the web

This, very much this. Plaintext doesn't require what is essentially authorisation from a central authority in order to communicate.
> But standard legal practice is to have another zero there at the end, isn't it?

No, standard legal practice is to take the facts you are arguing, run the computations in the law, and ask for what the law allows. If that computation has no firm upper bound based on the facts you have but do have a lower bound, then you say present a minimum and no maximum.
This is very true. Even after CoL adjustments, high-tech jobs in the midwest don't typically pay as well as the coasts. Especially in senior roles. Notice that this is especially true for the vast number of coastal-state cities that aren't SFBA [1].

However, this apt observation is not what the article is actually about. Mid-tech jobs are things like "...computer systems analyst, computer network architects, and support specialist...", which are very different jobs from software engineering.

[1] As an aside, CoL adjustments between the Midwest and coastal-state cities are extremely favorable to the Midwest in cases where you can actually afford to buy a house (read: not SFBA). If you buy a house in the midwest, you usually have to be okay with treating it as "not an investment". Whereas a house in Portland, Seattle etc. function as both a place to live as well as an investment likely to appreciate handsomely. Personally, I'm OK treating CoL as a sunk cost and not engaging in real estate speculation during my non-work hours. But from an objective perspective, the CoL pay cut suffered in MW cities is often unjustified given the opportunity cost of not living in an area with more and more predictable real estate appreciation. Selfishly, I wish folks in the Midwest had more success convincing their employers that "cheap land" is not a good justification for severely underpaying their labor force.
Yep. Just be sure to sell them in black.

An inflated purchase price thanks to 25% tariffs just makes them more attractive to buyers who don't care about price.
You're leaving out the option where the market is changing and requiring more education from people at the bottom.
Are you referring to Nemtsov? Because he was definitely more useful alive, being a vestige of the old failure of a "pro-western" regime and all...

Or are you referring to his other opposition, which are paid by the US to commit crimes, and still barely get a slap on the wrist?
Yep

Keeping minimum wage low is $153B/year "corporate welfare" check.

https://www.washingtonpost.com/news/morning-mix/wp/2015/04/1...
I can see both points for immigrants it's hard to understand because generally people who immigrate are more enterprising risk taking and willing to find creative ways to change their circumstances.
goddammit HN, you always fall for the most obvious baits
Why shouldn't cars be a premium product? Buses and subways are so much more efficient, and if Europe or Hong Kong is anything to go by, they can be nice, clean and faster than driving. If people want to spend the extra money to drive by themselves that is a luxury not a right, and we should be open to charging it accordingly. I feel ridesharing services have a place, but less so than then Zipcar.

Lastly, I don't think that it's fair to call this a step forward for equality, as free parking throughout town is a tax on everyone who doesn't own a vehicle, or takes public transit, paid out to those wealthy enough to afford cars and their own parking spots at home.
As titles they are often used interchangeably, but the BLS categorizes them separately based on kind of an old-fashioned idea of how software is developed. The distinction is that software developers[1] plan out how software will work and the computer programmers[2] write the code to make it work.

The idea that these are separate roles is rapidly going out of fashion in the industry and is already pretty outdated. Only 300k workers are categorized as computer programmers while 1.3 million are categorized as software developers and on top of that the number of software developers is projected to grow by 24% over the next decade while the number of computer programmers is projected to decline by 7%.

[1] https://www.bls.gov/ooh/computer-and-information-technology/...

[2] https://www.bls.gov/ooh/computer-and-information-technology/...
Thank you for sharing! I ABSOLUTELY know what it's like to have people believe that you deserve poverty. Sometimes when I get really depressed, I feel that way toward myself. The idea of reduced inherent personal value seeps into everything.

Your point about the difference between being on a couch after a high value MBA vs being on the couch --full stop, end of sentence-- being a total chasm is totally correct.

I think that it is interesting that another poster posited that poverty is truly informed by hopelessness, with the implication that HN readers can't be hopeless. The idea that the concept of poverty is definable only by those far enough away from it to say "That is another group of people than I am in." is problematic in my view.
What is a 50-person bus with 1 passenger aboard? That is a very common sight in my town. There are a few routes that are heavily used, but the rest of them are just huge vehicles very inefficiently transporting a couple of people and blocking lanes of traffic and frustrating drivers at the same time.
We have a little in common, though the events of my own life occurred a little differently.

We moved to a small rural town when I was young out of fears that my father’s work for an oil company’s union (refinery construction and maintenance) would place him out of jurisdiction where we were.

He is and was a very talented fitter/welder and has even taught courses in college. He did however spend most of the best years of his life after his athletic career with some ugly-souled people who seemed to have it out for mankind in general. Somehow he endured decades of that to look after us. I wish he could have been more enlightened to the world as it would have helped my siblings and I out when we were young. Ultimately we were on our own financially and otherwise even though my parents offered whatever support they could.

I’ve spent time living on $5 a week for food. Some flour, sugar, water, butter, salt, baking soda, and on good weeks milk, can go a long way if you need them too. I forget how many times I had to live on homemade soda bread for weeks at a time, but it wasn’t fun—maybe that’s why I can’t remember it too well.

Im doing so much better than a lot of people who have never had a chance. I’m lucky I was a little bright. I’ve also been to school and worked alongside people who have no idea what it is to have no such luck, money, or otherwise—it’s enlightening and sometimes disheartening to speak to people in those positions about that.

I couldn’t agree more with what you’ve said. I think if most people took a moment to imagine how bad their own life could be, and compound that by a few orders of magnitude, you might get close to just how it feels to be in such a position and how hard it is to ‘pull yourself up by your bootstraps’— so to speak. Your points on dignity are a topic too large to address in this forum. But you’re right.
None of these statements convince me that http sites should be default flagged as insecure. Take this site, for instance: http://wilsonminesco.com/6502primer/65tutor_intro.html. It is a great resource, but is not available over https. yeah, it's possible that someone could MITM it to provide me with incorrect info on the 6502, but I don't see the disregard for my privacy. I'm never going to put in any of my own information, even if someone uses MITM to ask for my credit card or something.

Could you explain why browsers should flag sites like this? It's possible that I'm too naive to realize the issue, and I would appreciate some education on it.

EDIT: changed "blocked" to "flagged"
This is a very weird submission in which to be posting a comment like that. Those foundational institutions should be held to high standards, and it's good that there are people who will call them to account when they fail to "product the common people," especially when the failure is systematic.
I'm curious, what do you think is better in iOS? I use both, and for the most part one really isn't better than the other. But there are a few things I prefer Android over iOS.
How is HTTPS a centralization force? Just because large, centralized tech companies like Google are pushing for HTTPS doesn't make HTTPS itself inherently centralized -- apart from certificate authorities, but that's because DNS and the domain name system itself are already inherently centralized. And Let's Encrypt does exist, an organization which has published an open protocol for certificate negotiation (ACME) as well as an open implementation whose root certificate is accepted by all major browser vendors.

Saying HTTPS is centralized is like saying PGP is centralized. If it is, it's only because the underlying technologies (HTTP itself and DNS) are centralized, not an encryption and document-signing protocol layered on top of it.

Even if you can argue that HTTPS is a centralization force, it's almost certainly hyperbole to argue that it's the biggest centralization force on the web today. Surely network effects (Facebook, Amazon), huge amounts of capital, and control over a huge amount of information (Google) are far bigger factors?
There is a rather large difference between the monthly EBT run and buying quantity when something is on sale. Having one vehicle, often in poor condition, tends to make people do a once a month large grocery purchase. It is so common that some unscrupulous police officers will have a checkpoint on a known route to write some easy tickets.

It doesn’t matter what’s on sale, the big purchase happens anyway. They aren’t shopping the sales.
You won't find the brogrammer hipster startups. What you'll find are small companies in vanilla office and industrial parks. The whole "startup" is asinine. In the old'n days it was callled "starting a business". Things such as medical devices, specialized aerospace parts, etc.
I'm really surprised that this person is a software developer. I'm even more surprised that he still believes this stuff after working for 24 years.

I'm really surprised that you think everyone has/should have(?) the same beliefs about such things.

He then argues that Google labeling HTTP as not secure is the first step down a path which leads to "blocking the pages outright", which is a prime example of the slippery slope fallacy.

20 years ago people thought buying computers on which you can't install software some central authority didn't approve of was preposterous, and yet here we are today with walled gardens and the like. This is a rise of authoritarianism, all in the name of "security". The frog boils slowly.
After building some electronics [1] I kind of think it's a pain. It took me seven tries to get the switching power supply working right. Can't do that on a prototyping board; layout matters, and all the parts are surface mount. LTSpice simulations get you close, but not quite there. Then I had to learn to surface mount solder, which means working with tweezers under a microscope. I'm not that good at it.

People like that design. Others have built more of them. Someone in Australia plans to manufacture a hundred or so. There's enough interest for hobbyists to build it, but not enough for a real production run.

[1] https://github.com/John-Nagle/ttyloopdriver
(USB interface for old Teletype machines, models from 1910 to 1960).
Your comment is good. The relevant question is what can I do right now to make money? Maybe Mechanical Turk? (can you make $1 in 2 hours?). The abundance of human potential sitting idle agonizes me.
Apple will release a new MacBook with no screen, keyboard, trackpad or ports. Conversing with it will be like a scene from 2001. - This is the only one I'm certain about. :)
Those are really valuable skills too. There is a slant for engineering here since the site is for, by, of engineers. I recently joined a new team and we have a totally kick-ass technical product manager we work with pretty heavily. He is an absolute boon to the team when it comes to interfacing with different parts of management and being able to walk to the talk of the specifics of certain technologies.

For your last point, I'd be cognizant of being able to measure your value objectively somehow. It can be easy to get left behind if the value you provided didn't get tracked because people were only paying attention to lines of code.
When Parisian subways show up in NYC, then make your argument about shafting the poor because you’re currently not one of them.
Sentiments like these are why I can't Fuck with libertarians. Even though I never experienced as much, I know there but through the grace of God go I. And I don't believe in god.
1. What is your background?

2. What is your disability?

3. Do you have access to the internet?

4. Are you on disability?

5. You say you're self taught, in what?

6. What careers have you tried?

7. Do you have family or friends?

7. Are you depressed?
> If they were preferable, people would choose them.

Balivernes. That’s just a tautology. I’m sure if you ask any American if they think the electoral college system is fair,
99/100 will tell you it isn’t. Yet it persists. Why? Many reasons, among them being institutional inertia. Institutions are big and slow, especially ones involving concrete and steel.

There are also power amplification issues. That is to say, certain groups of people might have more power to effect change than others. A majority can seemingly want something, but not know how or not be able to effectively get that change accomplished.

In other words, I think it’s a bit more complicated than “if people wanted public transit we would have public transit”.
You may be disappointed if you choose the amazon link. I had a hard time finding any candy in that box. It seems to be made up of mostly senbei (rice crackers) and Umaibou (think Cheetos in a stick). The seaweed makes a lot more sense when you realise that it's savoury, not sweet. For some reason, quite a lot of Japanese children do not like sweets. I don't think any of my friends kids like sweets. Korean style flavoured nori seaweed is a really popular snack (especially with really young children -- 1-4 years of age).

But, getting a bit more on topic, that amazon link is "dagashi", which is just inexpensive snack food. It can contain candy (in that box I notice "Milky" which is a hard candy), but things on the same level of potato chips would be in that category. I don't know for sure, but I think CandyJapan sells only candy. The "It'sugar" link seems to be much more similar.

I'm going to guess that his target market is people who have an interested in Japan (possibly through anime) and would like to try an assortment of Japanese candy. I think his home page does a lot better job of explaining the product than the ad did, so possibly it's something to think about in the future.
If you mark something as 'Not Secure' you're effectively telling users not to access it. It doesn't matter in practice if the content is still accessible when the browser tells people that accessing it is dangerous.

A lot of content that exists on the unmaintained web is going to effectively be lost, and maybe that's okay because the benefits are worth it, but that's the argument that needs to be made.
This is what I see when I look at lambda:

Lambda is just nodejs but different. It's an ec2 server running nodejs at a discount if you preform a special AWS dance.

What use is that to me over just writing nodejs? Nodejs as it is can run unmodified on Azure, AWS, digitalocean and a ton of other providers.

lambda invites a work moat to migration. Maybe you use it in a way that doesn't entangle you. Guaranteeing that takes more discipline than I can ascribe to your average team that's willing to use AWS Lambda.

If AWS tripled its prices tomorrow, how long would it take you to migrate? Is it instantaneous? Does lambda linearly correlate with increased migration times? What if aws-sdk dropped support for all non lambda applications. Are you screwed?

Even if you don't subscribe to it, the aversion should be obvious.
I understand the distinction you're making between black boxes and magic. However, in my vernacular they're the same thing. I can describe something as magic to one group and describe the internals to another group without issue.

If magic wasn't a black box it wouldn't be magic.