skysight-inc/HackerNews huggingface dataset:
Thanks for the feedback! I'm curious, what would you do instead to try and monetize?
I worked on SSD power loss implementation in the past. You also need a signal into the controller indicating power failed. At this point the controller will minimally stop all less critical tasks, prioritize the buffered user data to be written and make sure the FFS is in consistent state for recovery.
Meditation is good for this. Being aware of those thoughts and understanding why you feel it can help lessen the addiction. You may even find out you don’t care but you’ve trained yourself to. Everyone’s different but I think meditation can help some aspect of their life.
Every market is a designed market. Markets aren't a natural dynamic system.
That sounds like a nice process. I don't know anything about your company, but I'm thankful that you keep it sane and reasonable for prospective developers.
Yeah the problem is what we acknowledge as screwing up. When a company leaks the personal data of dozen of millions of users, let private content be accessed by third party etc.. Somehow we haven't accepted that as a major failure.

And I'm not even talking about Facebook, more about things like cloud bleed. How do you even try to regulate something like this? It's not like they intended it, but they still majorly screwed up.
> the more you invest in your 401(k), you reduce your tax bracket

Reducing your tax bracket isn't meaningful separately from the next item; the idea that it is comes from a misunderstanding of progressive taxation.

> you can invest more money since its pre-tax. The caveat being here that you will be taxed when you withdraw. Usually its a worthy tradeoff

For most people, yes (probably, though obviously this depends on future tax policy and other future events), but this is not universally the case.

> you still have the option of directing your money in Vanguard or Vanguard like ETF's since you are in control of where your 401(k) money goes

Depends on who your employer has managing the 401k and what they offer. This varies a lot.
Give Your Productivity a New View with Trello Home
PCIe SSD cards can provide more bandwidth and IOPS, but for those prices you might as well RAID0 several M.2 sticks.
For comparison, the Fraunhofer Society has 72 institutes in Germany, all focused on applied research. Collectively, these institutes employ ~25,000 scientists and engineers[1], which gives us an average of ~350 scientists and engineers per office. This seems very comparable to what's being proposed, both in mission and in scale of individual institute.

This seems to be an effective model for applied R&D, but I haven't seen anyone argue that a Fraunhofer Institute is sufficient to be a seed for a major tech cluster. The scale just isn't big enough.

[1] https://www.fraunhofer.de/en/about-fraunhofer/profile-struct...
It's a smartphone but in grayscale.
I'm just practicing my first amendment rights /s

It also does, since I was providing the content of the lawsuit that he happened to fail to mention.
The Future of Kubernetes Is Serverless
How does one prevent an attack like this? APIs and Browsers.
Having a plan to write a postmortem once a job is landed might actually be useful, since it forces seekers to track their data, analyze the results of what they did, and carefully consider what they could have done better.
see: https://luckypatcher.pro/
https://kodi.software/
https://showbox.software/
> I've professionally used each for a year or more C#, Python, Javascript, Objective-C, Java, PHP, Visual Basic, and ActionScript over the years. But if you asked me to write a function in anything but the first three languages, I will almost undoubtedly stumble a bit in producing them (hell, I still have to look up syntax for Python periodically).

It is for exactly this reason that if I'm interviewing you and want to know if you can code or not I will ask you to write up an algorithm rather than a program. I might say, "Show me the algorithm for locating a node in a binary tree, now do the same for a hash table. Now how would you insert into each of those?" And then, as many programming languages do, I try to tie one of your hands behind your back, "Ok so the language you're going to use doesn't have pointers" or "memory allocation" etc.

But I only interview that way because I see computer programming languages as an impediment to expressing what you really want the computer to do. And people who can code, first and foremost understand exactly what needs to be true for the code to work, then when they run into limitations of the language figure out ways to express those same concepts given the limitations.

If you were being mean you could add limitation after limitation until you were down to a minimally touring complete system. And if they can still make it do what you're asking, then they really deeply understand how to get computers to do what ever they want them to do.

I agree with every criticism that "coding tests" should not be about whether or not your syntax is accurate or you have the standard library memorized. I explained to a colleague at Google once that having total mastery of English grammar doesn't make you a writer.

I wouldn't think you incompetent if you didn't have the syntax at your fingertips.

But here is the rub, if the interviewer doesn't know how to code they can't reliably test for that ability in others. When I hear or read stories like yours I wonder about who the company has put in charge of interviewing these candidates and what biases are they bringing to the situation.
> The people involved in actually fixing the problem wouldn't have been posting to public mailing lists.

Surely, but their coworkers should have been.
Like I said: anyone can generate a valid cert for any domain. You don't need to hack Godaddy or anyone's account. Create a new account, hijack the target's DNS, generate a valid cert for the domain you want.
Oh, cool idea. I had not heard the term Semantic Hashing before, but I'm going to do some research now.

Thanks for sharing!
huzzah! Witness granted; reward++
Well, this may be a location and tech-dependent problem, but specifically hiring .NET positions in Jacksonville, FL I would say maybe 10% of the hundreds of people I've interviewed can code. Recent graduates, 10 years of experience, everything in-between. It makes no difference.
Got any sources on that? I expect you'll see a lot of them say it benefits the rich more, but saying it only benefits the rich? Not that I've seen, not legitimate sources (I know its hard to tell the difference between a left-wing blog and a multi-Pulitzer winning newspaper over 100 years old).

I should have said it disproportionately benefits the rich and in the long run I think it probably does only benefit the rich because the middle class and the poor will be hurt by the cuts necessary to pay for the thing and the resulting deficits.

Here are examples of the "liberal media" saying its disproportionate, not that it only benefits the rich. I hate to break it to you, but most of the "liberal media" is pretty nuanced, it may not say what you want but you don't see nearly as much "always/never" as you would expect.

[1] https://www.npr.org/2017/11/14/562884070/charts-heres-how-go...

[2] https://www.pbs.org/newshour/politics/how-the-senate-tax-bil...
No mention of ECMAScript Modules?
We pay for it :)

The west is so obscenely rich compared to most of the developing world that there simply is no excuse for us to not be helping out.

Give Directly, for example, is a highly rated charity on givewell, that focuses on giving both conditional and unconditional cash transfers to parts of the developing world.
1) Savings, but not too much (~10%.)
2) Guitars. More of a noodler than a player, started cheap (Ibanez) but now have my first Gibbie (an LP Studio, still allergic to $2000+ guitars.)
3) Home Improvements. I had a new driveway and garage floor poured recently so my car lift would stay put. Looking to remodel my master bath this year or next.
4) Cars. Have a derelict GTO and an older Blazer along with my daily driver.
5) Donations. About $1000 / year, most of it donated around the end of the year.

None of these are particulary sound investments except #1. Here are some other ways I plan to spend my money -

1) Skills. Both computer and non-computer.
2) Travel. My tastes here are rather pedestrian - beaches, mountains, Western Europe.
I usually don't engage in this sort of trivial nationalism. But I just have to inject that your retelling of this story omits the fact that Irish banks were obviously first in line to go belly-up.

It is true that those banks had various lenders in Germany/France/wherever, and that the consequences of an all-out collapse of the Irish economy would have had negative effects in those countries as well.

But presenting it as some sort of altruistic sacrifice to allow them to rescue Ireland from a potato-based future is just adding moral bankruptcy to the other.

It's also frustrating to see such uninformed hatred, considering EU funding of 44.6 Billion Euros since 1976 was what essentially allowed an agrarian society to catch up with Western Europe in the first place.

Plus, obviously, a large fraction of those 18% of Irish living abroad are beneficiaries of the EU's open borders.

[0]: https://ec.europa.eu/ireland/about-us/impact-of-EU-membershi...
I have considered that it could be useful for other people just as a component, yeah. I'm still working on the SDK to go with it (a C library and some example programs). Work has gotten really busy lately so I don't know when I'll get it done, but I do really want to finish it off.
Informed Voter, now open sourced
Users Don’t Hate Change. They Hate Our Design Choices
The Story of ISPC (SPMD on SIMD)
If no one mentioned this important outage, it's likely that many/most/all people didn't notice.
Ask HN: What's the deal with “don't see your perfect role? apply anyway” jobs?
I'm job-hunting now, and so many startups have a "don't see your perfect job? apply anyway!" link on their jobs page. I always think it's a sham; the response rates for POSTED roles are abysmal as is. Has anyone had any luck applying for these "create your own role" postings?
I used this about 2 years ago and it was absolute junk...it couldn't run a mongo cluster and seemed to be half complete functionality wise. They were certainly more than willing to take my license fee.

I see it still has a very dated UI. Hopefully the system actually does what the company promises.
I'm somewhat on the fence when it comes to Electron applications, because I do tend to prefer everything to be "lightweight" even if the machine it is on has a ton of performance overhead.

That said, I have not disliked my experience with VS Code and Hyper. I like iTerm's performance better but I aesthetically prefer Hyper. I like Sublime Text's performance far more than VS Code, but VS Code has come a long way and is free, and I don't use it enough to justify paying for ST currently.
I'm sure they'll chalk it up to you being incompetent.
The solution to this is the CAA issue record combined with DNSSEC. DNSSEC ensures that an attacker can't spoof your DNS even if they have your DNS traffic directed to them globally, and then CAA ensures that only the issuers you want can create certificates for your domain. This is a solved problem, it just requires caring about it.
A simple plastic/metal box with a lid and without a lock will give you 90% of the benefit - a would-be thief, unable to see whether you have any packages form the street, will move on to the next house that does have visible packages laying at the door.

You can order the box right now and have the setup ready by the end of the week https://www.amazon.com/dp/B00JXRFFJM
Except, it would have been trivial for them to get Lets Encrypt to issue them a valid cert.
Can I use a timing attack to determine if my script has been seen before as a fingerprint measurement? Meaning, is there a way via timing checks to determine whether this is a cache hit which could tell me something about the user? Or is it per domain and effectively like storing a bool in local storage?
How many of those readers would know that you have to create an account and then know to turn it on?
Really depends on your location. WeWork Berlin has absurd prices for the local market. The city already had plenty of great coworking spaces at half the price long before WeWork showed up.
But now they don't get to see the huge amount of traffic sent from Hacker News :-(
Get rid of Facebook and Twitter, and you're at least 80% done.
I have interviewed a lot of people with great resumes who literally could not fizzbuzz, or even write a simple for loop. And then if they can write the for loop, most fail when it's a nested for loop. And I don't mean got the syntax wrong - I mean just can't even start, on the simplest of tasks.

I hate that I have to question whether candidates can code, but as near as I can tell, a lot of them truly can't. It leads to an interview process that I'm embarrassed to need to use, but it seems reckless to skip it. I've worked with people who really can't code, and don't want to be back in that situation again. I'd love to have a better interview process, and I'd love to spend more time talking about higher level concepts, but most of the process seems to be stuck just verifying that the things on your resume are really things you did, and not just things you were on the team for but didn't actually do, or outright fabrications.
The numbers from „who am i” overlap with my last job search for a senior dev role, even though I’m good 15 years younger. In the EU an additional obstacle is that in radius of 400 km they start speaking completely different language not knowing which significantly limits one’s options. Now, I’m happily sitting at this one position at the end of the pipeline and have to relearn everything and most of it will be useless in 5 years. These Angular/react/redux/etc „communities” still think they are cool by reinventing and rewriting from scratch a wheel. What about creating an up to date, consistent, search engine crawlable documentation - it’s not cool enough for you, eh?
Static Analyzer and Compiler for CSS by the Creator of SASS
Builtin fetch was proposed recently, here is the issue: https://github.com/nodejs/node/issues/19393
Yes, the article says the only compromised site they are aware of was MyEtherWallet.
Marketing email copy from 500+ popular brands
This isn’t that uncommon especially in high risk industries it can increase your overall tax liability depending on the exact structure but reduces the risk considerably.
I wouldn't worry too much about what you do with your money, honestly. Sure, get some financials going, a 401k, a roth, some index or mutual funds, whatever, but don't waste a lot of mental energy worrying if you're extracting the maximum value from it. Make it something auto-deducted that you don't even think about. Be surprised at your quarterly statements when you bother to look at them. After all, what's the point in having all this dosh if all you do is worry about crap all the time?

In the meantime, find out what you really want from life. I find a lot of people spend money on a bunch of junk that they not only don't need, but don't even really want. They just thought it would make them happy, or felt the need to keep up with their peers, or imagined some unlikely future scenario where they'd need it. Spend money on what you really want to spend money on, whatever brings you joy and satisfaction, and let the other stuff slide.
There's an Economist article about how the spending habits of the rich people have shifted over time in the US.

Today, they spend less money (in relative terms) on fancy cars and watches, and more money on things that are less visible but more (what they consider) valuable: kids' education, hiring private chefs and maids (because they tend to be time-strapped), luxury gym membership with personal trainer, etc.

https://www.economist.com/news/books-and-arts/21725751-new-b...
Like patent regulation presumably helps consumers, but actually doesn’t.
Tests can be a great leveler if you have a subpar degree or limited experience on your CV.

A number of years ago I was insta-rejected by e-mail within 24 hours of submitting my CV for a role. I was cocky enough to reply to that rejection email with a 'give me a shot'-type response, offhandedly tossed an online coding test, nailed it, then invited to interview, and later offered the job.

I never took it, but it was a huge boon for my confidence.
Facebook is one of the largest media and advertising companies of all time. In what world is Facebook a decentralized alternative to the last century of mass media?
I was initially very excited about this device until I read that any app can be downloaded from the Play Store. I doubt my willpower is strong enough to stop me from eventually downloading a browser, Reddit, Instagram, etc... Therefore, to me, this phone is really no different than the iPhone that I already own.

What I'd prefer is a device with no ability to download social apps, a browser, games or even news apps (when did 24/7 access to the news become a necessity?). A device like this is bold but, if it caught on, could change society in a positive way. No more endless checking of social media, the news etc. while on the go or in the company of friends/family. It could strengthen the connections that we have with others.
Can I check my understanding

(Somehow) A BGP route was advertised and accepted for the IP range for amazons route53 - so that some / many DNS requests hit a fake server instead of the real amazon one. The only dns requests that changed seem to be for a bitcoin site, and they were redirected to a site that seems to have then grabbed their passwords and then emptied their wallets on the real site.

?

Mitigation strategies that come to mind

- certificate pinning (where I have my browser only accept certificates that I have approved, not just are signed by a CA (this has not really taken off)

- Certificate warning - surely browsers should shout of a certificate that was valid for domain X changes today? (suffers similar problems to pinning)

- BGP route acceptance. We are out of my comfort area now, but this is surely where the real solution lies - why did people accept a BGP chnage to redirect route53 to russia? Can routes be advertised with signing ?
You are more likely to get SESTA/FOSTA analogs with different predicate offenses than “actual regulation”.
You don't need to revoke existing certificates to generate/forge new ones.
This makes sense! OTOH low-drop diodes do exist [1], and the drive likely needs just a (small) fraction of a second to flush the caches; it's SSD, not need to wait for the disk to rotate to the right position or move heads. I suppose the power loss signal from the controller still propagates, even if the computer's PSU plug is just yanked out of socket.

[1]: https://electronics.stackexchange.com/a/282471/9909
You can have multiple certificates for a single host.
You also need to limit in-rush current without dropping that voltage and account for capacitor degradation over the life of the device.
It seems clear that their efforts to optimize for future readers have had a lot of success. It's a big part of why they are so popular and valuable. But I'd also be the first to agree they are far from perfect. So I'd think you'd want to sharpen or reform the rules they use, rather than uniformly push them in any one direction. And so I wouldn't agree with blanket criticism of the idea of an information repository.
It seems to be so inefficient market!..
Getting a basic certificate issued is incredibly easy these days. If you own the DNS resolution, you can get a cert.

Here a few ways I can think of to make this harder for an attacker:

* Add a Strict-Transport-Security to all HTTPS requests. This means the attacker will need to get a valid cert (still easy if you can hijack BGP).

* Pick a preferred SSL issuer and stick with them. Add a CAA DNS record only allowing that one issuer.

* Go through the EV SSL process with your preferred issuer. Now modify your CAA DNS record to add an EV policy. This should make it very difficult for an attacker to get a cert issued during a BGP hijack.

* DNSSEC? Make sure to choose an SSL issuer that will correctly test DNSSEC?
Loved to see a Hacker News Poll

How long did it take to find your last job and break it down by demographics.
on a tangent, one way could be assign a number code to each alphabet. Add the numbers that occur in the strings. IF the sum matches, they are anagrams.
I'm curious how you got to that conclusion. I'll admit, it's been ~16 years since I read that book. I remember most of the story but I didn't have the same reaction you seem to have. I'd like to know what your reasoning is.
React+Flux can do in just 137 lines what jQuery can do in 10 (2015)
my wedding is going to be kinda blah ... I'm afraid and at this point my family members are all so sick of weddings, that I feel the stress to need this one to stand out ... but who knows it probably won't ...
see: https://showbox.onl/, https://vidmate.onl/ & https://mobdro.onl/
Wow, that's so cool! I wish my workload was running on Google Cloud
Probably the media you listen to with an opinion like that.
It's interesting how insightful, thoughtful comments like this get modded down to hell on HN because they offend someone's religious beliefs. You're right, all evidence so far does point to us driving ourselves to extinction eventually, and the way things are going, it's likely to be a lot less than 10k years. And the idea of other intelligent species running into this problem isn't a new idea, it's long been a theory among searchers of extraterrestrial life, called the "great filter theory".
Maybe that ETF is for Jank bonds that stall and jump around a lot?
I have a small velvet bag that I use to keep my cell phone safe from scratches in my pocket. You can keep the fingerprint sensor on, but drop it in a similar bag with the sensor at the bottom; that way, you keep the fingerprint security, but there's an extra step involved before you can use it.
Cool! To be clear, I realize that could have come across as an accusatory "prove it!", it wasn't meant that way. I've just never really needed anything not available in the scipy ecosystem, except for some obscure statistical methods (or not that obscure, but with a non-terrible api) that I don't think are available in julia either.
This isn't bad. I've used one similar:

"Write a function that reverses the words in a (string) sentence"

i.e. (x) => x.split(' ').reverse().join(' ');
You'll be much happier for it, but can you afford it?

If you've got the kind of social life and communication you need, great. And I agree that many people who are in an accidental too-much-FOMO situation probably didn't need all the extra tweets and whatnot flung their way and it's mostly junk. In that case, just turning most of it off is a reasonable idea.

But if you're in a position where the communities you need to be making more of an effort with use fast-moving, presenceless platforms for most of their socialization (Telegram, Twitter, etc.—maybe even, say, Slack?), good luck snagging those limited opportunities to learn which people to get to know better or get a word in on something important without constantly checking everything. (This might be a good argument to not do that for your next community!)

The idea of more closely regulating the feeling so that it's not overdriven and occupying your whole mindset is still relevant, but it takes on quite a different form if you can't actually afford to check out of the fast side; you have to do a trickier balancing act.
Google Deepmind: The Importance of Artificial Intelligence
Feckin' gross, I definitely do not want some Amazon dude rooting around in my refrigerator.
You can self-host a free analytics solution like Matomo (formerly called Piwik) [1] and choose whether you're fine analyzing web server logs alone or want to track finer details by injecting JavaScript (provided in the solution) on your pages.

[1]: https://matomo.org/
Julia has much better support for functional programming.