skysight-inc/HackerNews huggingface dataset:
sorry, but this article is breathless crazy hyperbole. I am a cybersecurity expert that actually reverse engineered a nontrivial part of Stuxnet at one point, and I have reverse engineered other government-built worms and persistence mechanisms.

Driver signing keys are not nearly as difficult to steal as the answer implies; not only are they shoddily managed in most hardware vendors, they could also be purchased on the black market for about 50k$ at the time. They are still not very difficult to come by.

Zero-days (e.g. security vulnerabilities and their corresponding exploits) can be purchased on the grey market, and some are developed by government-internal teams. These are little marvels of strange engineering, but they are also a relatively common occurrence. The total market prices of the exploits in Stuxnet will have amounted to perhaps a few million $ at the time.

The Stuxnet worm’s code showed all the artifacts you would have in a large software project - including but not limited to “handwriting” where you could see that a small team of engineers and architects were excellent developers who delegated the implementation of less-important parts to engineers of lesser ability.

There have been leaner, more elegant, and similarly powerful / crazy pieces of malware.

In general, though, these things are not made of magic, and they are not the most brilliant software ever made. They are usually well-engineered by decent engineers, built by a motivated team with decent funding. Even then, mistakes creep in (Stuxnet had an infamously broken mechanism to limit propagation), multiple versions need to be rolled out, and problems & bugs plague any software system.

Now, comparing something like Stuxnet — a relatively small, well-engineered but ultimatively not terribly innovative assembly of known methods — to something like Google’s data center infrastructure (Borg/Flume/Mapreduce/Bigtable/Spanner), the Windows or Linux Kernel etc. and concluding Stuxnet is somehow superior or more sophisticated is simply false.

Stuxnet was cool etc., but I can assure you the level of sophistication is less than the Windows Kernel, the Linux Kernel, or Google’s data processing infrastructure, by far.

This is unsurprising: Stuxnet is a much smaller operation. Building Windows has probably cost many billion dollars by now. Stuxnet, on the other hand, was likely running on a shoestring budget in comparison.

Assembling a highly impactful worm is much cheaper and simpler than people think; most of our IT infrastructure is not very robust.
The burden of proof is on the person making the absurd claim, not one that is well accepted in the scientific community. I love how HN is super critical about anything tech related but is basically the flat earthers of hygiene.
Well - there _is_ a bit of Student's Paradox involved in requirements-gathering for machine learning or analytics, and it's not always apparent that you're using the right algorithm for the problem or what specific metrics you actually need to be optimizing. Most of the time when I've gone through User Story collection processes, the actual end-state users describe is vague, not based on hypothesis testing, and not supportable by the data available onhand. A big part of this process is discovering what the data _can_ tell you, and if necessary to rewrite the technical requirements entirely to align with the actual business need.

Even when a customer's given me a "clean" dataset, I've had to write 400+ lines of code to do the feature engineering on a relatively straightforward logistic regression. Then there's all the other times when a customer asks me to deploy one type of algorithm, and their business problem is actually solved by an entirely different class of algorithm entirely.

Zayd over at Stanford has a nice blog post [1] describing why machine learning is several more dimensions of complexity compared to traditional software development. There _is_ a specific set of Data-first skills that is complemented by dev and CS experience, but a fundamental reason why ML projects fail is due to lack of appreciation for the many different skillsets needed to succeed.

[1] http://ai.stanford.edu/~zayd/why-is-machine-learning-hard.ht...
youre right. upvoted
Zero office deposit
Both of these have huge disadvantages for interviewing:

- When working in front of a computer, people get worse at communicating. Even if they try to speak out their thougts, it usually doesn't work well, as thinking and operating an IDE (or whatever at hand) already occupies a lot of brain capacity.

- Take-home exercises are hard to control: You don't know how long a candidate worked on it. Even if there's a target like 4 hours, some might work all night on it - either because they couldn't do it in the allocated time, or because they fear some disadvantage. Apart of that, they might pay someone to solve it for them.
Proxies are a basic feature that should be a part of any OO language. Their usefulness ranges from "save yourself a lot of repetitive work" to "impossible to implement without".

Very simple real-life use case: factor out logging and move it outside of normal logic of the object.
And if you haven't read jwz's classic, you are in for a treat (text formatting, possible HN custom diatribe aside)

https://www.jwz.org/blog/2002/11/engineering-pornography/
Flow vs. TypeScript in React – my two cents
My hands + Google Drawing (: (blog post co-author here)
Does anyone have audio of the different sounds of drives he describes? Such a fascinating article.
I don't think it's unconventional. Almost nobody outside certain circles cares about the "public domain." It's a romantic idea that has little relevance.

And why do you think that description of copyright law is inaccurate? Copyright protects concrete expression, not abstract ideas, and independent creation is a defense to copyright infringement. How many sci-fi books are basically identical and rehash the same tropes? That's not copyright infringement. It's only infringement if you actually copy someone else's work.
I'm currently pursuing my data science degree after my last burnout as a senior sysadmin. I'm hoping my practical experience will be a perfect augmentation of the "data science" stuff so that I can be more confident when bringing the board or the execs proposals about how to fix things.

Let me tell ya'll all a little secret. Execs have been mismanaging infrastructure... and it's all so close to crumbling at the first puf-o-wind.
My personal experience in hiring is that people should be able to explain concepts in a clear why. So usually I ask to explain an pattern that they say they have experience in. I let him/her choose how they want to explain it whiteboard / pen and paper / words only, sitting or standing. I don't care as long as the person is good in explaining and has a firm grasp of the subject. Both are needed to do a proper job. There are lots of people that are unable to explain MVC in a clear let alone correctly even if they used .NET MVC or spring MVC (or whatever)for 10+ years. After that is seldom useful to ask anything else.. this approach had never failed me.
I recently read about an open router connected to CZ.NIC (who operate the .cz domain): https://omnia.turris.cz/en/

Might be worth checking out to see if it fits any of our needs
> I must buy Bitcoin through GDAX.

Or many other outlets including decentralized exchanges or localbitcoins.

> Then my transaction must be confirmed by Bitmain.

Or by the other miners.

> And they're all running software by Blockstream.

Or you could use Bitcoin Cash which have several development teams or use another cryptocurrency if Blockstream is your worry.

Also Bitcoin Core was mostly written before Blockstream came to be. It's also open source and you can bet that faults will be abused if they exist.

> That's 3 third parties that were trusted for my purchase.

No 3rd party is trusted when you send coins to someone else. That's the point.

> 0-conf transactions are very risky for recipients, hence why exchanges require confirmations.

They are actually quite safe if done on sane networks like Bitcoin Cash, not Bitcoin.

That's why several merchants accept 0-conf for small to medium purchases. See xmr.to as an example.

> Can you please provide an equivalent article showing how businesses are suffering due to chargebacks?

Just google "credit card chargeback fraud" or "friendly fraud" for tons of examples.
That's the holy grail of management: To create systems that are immune to mismanagement. The Agile Manifesto tried to make clear that such systems don't exist but instead it got made into another system that's supposed to be immune from clueless people.
The Linux edition of Q3A also — remarkably — came in a collector's tin, which I severely regret not buying at the time.
The negatives are over exaggerated, just like the positives. Its ridiculous to reduce someones entire career 20 incidents out of the hundreds of daily interactions over a few decades amounting to > 1million.

Ironically, your approach is no different than the persons you're criticizing. You're also basing your opinion on 1% of the dataset, just a different 1%.
Not necessarily. It would be bound to be have found at some point in time. The article mentions it took at least a year before anyone knew about it.

And perhaps there is an even more technical worm out there still hidden and stuxnet was merely a first draft.
If anything this seems like an argument for even less philosophy in physics.
I mean some of those are bad examples, like the UK's government isn't great w.r.t. privacy (Investigatory Powers Act). Shocker that they might disagree with EU regulators.

But fair enough, nobody should be trusted blindly. This is why we have appeals and legal avenues to create checks and balances. So in the context of this discussion, it's pointless. We don't have to trust them. If a fine looks disproportional, there are legal remedies. Up to the ECHR which is generally quite careful in it's decisions.

If you don't trust the EU's legal system, that's a different problem. One that rings a bit hollow, and doesn't really further the GDPR discussion.
Warning, NSFW!
Yeah, it feels more heavy to me as well.
I've been told that within an anechoic chamber, it's so quiet that some people start to hear the quiet high-pitched chatter of their nervous system screeching out a tune not unlike that of a 90s telephone modem.

But if you know what to listen for, you can hear it without an anechoic chamber.
Because he was asleep :)

The data set was of businesses not personal so this concern didn't occur. I would guess if it would've been PII potential then we would've wiped out the numbers first , it's not needed for city-state-country anyways.
HOW I FIXED MY CREDIT
Hi! While surfing through the internet, I read testimony of one Shelly Lucas about HACKWEST on reddit. We have semilar expereince on credit report and she testified her HACKWEST wiped away her negative reports and replaced them with good trade lines; my days of fury came to an end. I am overwhelmed with the solution I got. How possible is that that my credit score was 430 and 7days after reaching an agreement and gave my information, I logged into Experian to find out my credit score has gone up to 820+ ( first time I ever saw this in my life and now I have a green color in my credit score). If you desire to up your credit score and wipe all negative collections such as repossession, charge offs, late payments and others kindly contact this HACKWEST via there email and cell HACKWEST@WRITEME.COM, +1 424 307 2638. To be honest it still feels like a dream getting my credits fixed. If you wish to be saved like I and others reach out to HackWest for your hacking services. You will definitely thank me later!
Apple pays Ireland first tranche of disputed taxes
I am fully aware of the meaning of the word "parallax". See my response to your other comment. I am just answering why a variation in brightness would have been expected.
feynman died 30 years ago. it's plausible the culture of the field has changed (nm that feynman wasn't the arbiter of culture to begin with)
Parallax does come in separately, in the part about the relative size of the earth's orbit compared to the distance to the stars.
It was confirmed at TGIF yesterday that the system is just playing pre-recorded audio in response to what the person on the phone says. The "Uh Huh" and "Hmmm" is just hardcoded.
The Terms of Service page is blank (https://whiteboardfree.com/terms)
As others have pointed out there is an important distinction to be made between determinism and predictability.

However, "Norton's dome" is a good example of a situation in which Newtonian mechanics might arguably be non-deterministic:

https://www.pitt.edu/~jdnorton/papers/DomePSA2006_final.pdf

https://en.wikipedia.org/wiki/Norton%27s_dome
I was hired as a "technical game data scientist" and all I do is fix stuff with python, celery, redis, and if I'm lucky Redshift. To be fair, they know this isn't really "data science" but it's always what needs to happen in the next sprint so anything interesting is shoved out.

I think a lot of companies are hiring "data engineers" but don't know it. The guy who started making Superset (https://github.com/apache/incubator-superset) wrote this and I think it's apt.

https://medium.freecodecamp.org/the-rise-of-the-data-enginee...
That may be the larger factor, but I also believe that if you control for the media perspective on the perpetrator and targets of separate incidents, something like Stuxnet and its sophistication will be given less emphasis, because its sophistication is beyond the public's technology literacy, and would be considered too "inside baseball".
Unfortunately IE doesn't Proxies them at all and you can't even shim support for them on IE.
A circular array type, love it! It looks like an excellent use case of proxies.
And for long term issues like this you can wait around years until you have a favorable Congress to pass these kinds of legislation.
I don't have audio recordings but 30 years later I can still hear the sound of my Apple ][ floppy drive re-homing itself, which was a scary sound.

The track-to-track sound he's describing was very pleasant though.
Canadian here. You are making assumption about decisions you don't know about,- like "Do theses companies had too much anxiety for our regulation? None at all, they were some multi billions companies that did this. It was just not worth it."

That is a sweeping generalization and if you dilute and guess what the most probable reason for excluding Quebec was,- it's probably for the best. It was a shady contest to begin with.

The Canadian sweepstakes law and corresponding province laws are not that hard and costly to comply with as well. Look at the countless valid and non-scam contests present and available to our citizens. You, I and rest of us should be glad that rules like these exist since a there are people companies out there willing to part you with your hard earned money.

As an example, you just need to store my skill testing answer and if I get awarded a price, reset a flag that I need to fill out a new answer. In Quebec, you need to give monetary guarantees to make sure you pay out and give contest rules out to the bureau ahead of time. That is not a tall task. It's for the better if those shady contests did not want to participate
Sorry, I was hoping the reference to Baby Rudin would be ok. I had forgotten that the theorem had a name.

A jump discontinuity is a discontinuity where intermediate values are not attained, such as in the heaviside or signum functions. If a derivative exists at a point x, then it cannot have a jump discontinuity at x. However, it can have a discontinuity like the one exemplified by f(x) = 2x sin(1/x) - cos(1/x), with f(0) = 0, as that's the derivative of g(x) = x^2 sin (1/x)
Aside: With about 40 job postings, each at 300$/month, they're probably making $144k with little to no operational or infrastructure costs. They should be on https://www.indiehackers.com/products.
That's absolutely the plan now that v1 has landed, along with Material Design v2 components and themes.

Material-UI has been designed with customisability in mind, so you can get the functionality of the components without necessarily having to look like Material Design.
Caves.
But for compliance many interpretations say it's EU /citizens/; I don't think there are 3 simple steps to block any EU citizen...

I'm sure many Governments would love to be able to so simply identify what their citizens do online though.
Wouldn't the people who know the physical things just write requirements for those farther on down the chain?

The threat analysts say, we need to destroy Iran's ability to make nuclear weapons. The nuclear weapons specialists say, the part where we can best do that is by somehow breaking their centrifuges. The centrifuge technician they call up says, "well, x RPMs will really ruin those things. And it would be hard to tell if they did it like this..." Then the software guys make the code that ruins the centrifuge, and the red team incorporates it into their fancy worm, with specs on what exactly to look for.

Ultimately, it was kind of a failure in that anyone found out about it. Maybe there were better programs, and because they were better we never heard about them at all. But still it's pretty amazing :)
Cuts and jumpers (on a different scale) (2002)
There should be much more like this. They show how good engineers really think and solve problems. Instead we have all this hero worship about geniuses and their magic where we can learn nothing from.
In real life, problems are hard and require theoretical investigation to do well.

That's the actual job! The theoretical investigation. Not the programming. The programming is really easy. which is part of why having 15 years in software doesn't have so much weight.
As someone who has finished classes (and was firmly in the STEM camp while taking them), I do wish I had had something of the formal liberal arts that was taught historically. Does anyone have any recommendations for ways of self-teaching the trivium and quadrivium?

I've heard good things about "The Trivium: The Liberal Arts of Logic, Grammar, and Rhetoric" [0] but I haven't gone through it yet.

[0] https://www.amazon.com/Trivium-Liberal-Logic-Grammar-Rhetori...
>Could you define "got anything out of it" for me?

Retained any information that gave them skills or enrichment. Skills we can measure as an increase in human capital. Enrichment is tougher, but for enrichment to take place the information has to be retained, and we have plenty of data on the abysmal state of retention.

> And what is a universal item that literally everyone will use in their life? We could probably stop general education after grade 3 if that was the goal of education.

That was not a requirement I implied needing to set. Literacy and basic mathematics are useful far beyond grade 3 (though their pedagogy and targeting could be drastically improved), but as a rule, most knowledge doesn't need to be taught to everyone. We can come up with selection mechanisms that are better than the crudest imaginable: teaching everyone and hoping that a minuscule fraction get something out of it. Extending/adding recess would be far better than that.
React-bookstore
Streisand at DO using Wireguard.
i'm sorry but i don't quite follow what you're trying to say.
Yeaaah! Lets all use googles and facebooks libraries and give them lot's of respect. Then they we can be happy to say "I am a follower"
But they are different systems. For example contracts in the EU tend to be way shorter, as long as you get the gist. Contracts in the US are painfully long, listing things out explicitly, etc.

This exactly what rules-based regulation (US) and principles-based (EU) regulation means, and why the GDPR is written the way it is.
From https://en.wikipedia.org/wiki/Sophistication

> Sophistication has come to mean a few things, but its original definition was "to denature, or simplify". Today it is common as a measure of refinement

So no, it can in many cases even be the precise opposite of complexity.

It actually originally comes from "sophistry", which is an ancient greek discipline of wisdom and excellence. I would generally associate the word with a high level of complexity that has been expertly reduced and refined to an elegant quality.
https://youtu.be/lGWON5TtS04 so cool
JWZ hates HN. Here’s a derefered link:

http://www.dereferer.org/?https%3A%2F%2Fwww%2Ejwz%2Eorg%2Fbl...
Yep. Our (global) civilization carries within it the seeds of its own destruction.

https://en.wikipedia.org/wiki/Civilization_and_Its_Disconten...

Corollary: It is vital (no pun intended) that we learn to live in harmony with Nature or we will destroy ourselves.
I had the same experience in my last job search. I only did a bachelors. Even with many projects on my resume that were completely data science focused, my response rate was almost zero for those types of positions. My response rate was very good otherwise. It's frustrating. Based on my conversations at data science/analytics meetups, my knowledge is greater than that of the average employed data scientist.

My suggestion is to get a job somewhere with a data science team, do a data science side project with company data, and demo it to the data scientists. That is probably your best bet to get a foot in the door.
I don't think it's sensible to refer to all ownership of land as monopolistic. In most cases land is fungible. There are many landowners in my town of plots of land which are largely interchangeable. Saying someone has a monopoly on their specific plot of land is about as relevant as saying someone has a monopoly on a specific cheeseburger. If one party were to own all the land in a particular region, like a feudal lord, that may be considered monopolistic.

The case with copyright is that copyrighted works are by definition not fungible; if you create a trivially similar work, you violate the copyright.
Here's the other bottom line: A company wants to use your industry and creativity to make more money than it will give to you. You don't owe the company jack. shit.

I agree with your bottom line as well. Both are true! It's a negotiation, and it isn't zero-sum. Working is good for both the employee and the company. Neither is in a universally stronger negotiating position.

I'm not annoyed by bad interview processes and strong preference for false-negatives, I'm annoyed by that in conjunction with the claim that there is a shortage of competent workers. There is some lower-hanging fruit to take care of before that claim makes sense, and improving recruiting processes is among the lowest hanging (along with raising wages, obviously).
To me the primary difference is the software you mention performs their tasks in the open with cooperative users.

Stuxnet installed itself without cooperation, hid itself perfectly and still completed its objective flawlessly against a hostile user base.
this is most commonly diagnosed as depression
Thanks for checking it out and your feedback! I can make some changes to hopefully clear up some confusion.

On Jobiki, we don't have job postings. Just companies and data about them. So the "minimum salary" and "developer" searches are more job related, while we are more company related. Either way, helpful feedback.

-----------------

As for the "proper walls and a proper door" aspect, are there developer/traditional employee jobs in Europe that can have a real office? In the US, unless you are a manager, executive, very experienced employee, you don't usually get an actual office. Maybe its more common in Europe?
Data Janitoring is America’s Hottest Job

FTFY.
webassembly has vastly improved performance in a variety of situations.
What’s Your Open Source Strategy?
Searchable GDPR from Algolia = https://gdpr.algolia.com/
It's not only historical. Stories like this show how good engineers work through a problem. There is a lot to learn there.
Ask HN: Real life issues that can be turned in to apps?
What are some of your real life issues that you think could be solved with an app?