skysight-inc/HackerNews huggingface dataset:
Is there a prescribed SW development methodology at large technology companies? (e.g. Google). Google in particular seems to be heavy on tooling but, perhaps intentionally discards SCRUM et al from the outset.
How good is Gekko for an amateur like me? Should I spend some money playing around with it?
And here is the pubmed link (only abstract available):
https://www.ncbi.nlm.nih.gov/pubmed/29808008
Look for the cirrus vision jet, it's about $2million.
Should I ever get involved with automated trading, I don't want to use any software aimed at "beginners".

Anyway, this article is a trash "pros and cons" listicle for three arbitrary systems.
It seems like a necessary thing to do, rather than relying on car's CV algorithms to (1) detect traffic lights and then (2) identify red/yellow/green. But, it poses an easy vector for a malicious actor to cause chaos. I hope this system will be built as an universal open standard that can be tested for such vulnerabilities.

I can only think of the movie Italian Job, where the napster guy hacks into the traffic lights and get a free pass for their minis.
I can't tell if you're being serious...
What? I don't assume Scrum should or can fix bad management practices.

I'm saying adding Scrum to already-bad management practices is like throwing gas on the fire. Scrum doesn't help.

Also, if Scrum is only some kind of special snowflake process that only works when applied in sociologically perfect companies, well then it's useless.

I'd rather use custom, ad hoc, duct-taped together management practices that get the job done even in the midst of bad corporate sociology.
Misprint? Commonly available ground source systems can save upto 75%. That's way ahead of the article's claimed 20%. At 20% it's simply not worth the cost of installation.

Dandelion's website won't load to let me check.
>To me it's am example of what happens when software developers run the asylum.

Except if the rumors about turnover in the Tesla software team are true, the exact opposite is the case. The hot goss is that they're under pressure to meet unrealistic goals, not vomiting their own hubris into the product.
See also, this italian version that did the rounds a couple of weeks ago: https://twitter.com/koenfucius/status/997783004155187200
> Great that they're thinking about this, but I can't help but think many users will happily just copy-paste their CC details into random sites protected with a password of "password".

To be honest, we’re pretty much incentivised to by the fraud insurance structure. Any fraud is automatically covered through chargebacks. Eventually it’s the merchants that end up paying for this, big time, so they have the incentive to fix it. But since they are so far removed from the actual CC handling, usually (through PSPs, and the place a CC is stolen from is very far from the merchant who eventually is abused by it), there is very little they can actually do.

I don’t care two pence about where my CC ends up, to be honest. Beyond perhaps the very minimum I need to, to avoid being held liable for the chargebacks through neglect. Which is essentially never.

It’s not healthy for the overall system, but I pay for the privilege (through indirect fees), so I might as well use the comfort :/ tragedy of the commons.

CC fraud incentives are a tricky beast.
If that is happening, both "active" teams are now incentivized to attack the defensive team (because they are winning). So by being "boring" you essentially force the other teams into an alliance against you.
Wrong. The belief that DeBeers is a diamond monopoly and controls the market is outdated. In fact, DeBeers is now only the 2nd largest diamond miner, after Alrosa, a Russian mining company.
I’m so tired of this assumption that because you don’t want to deal with the costs of GDPR compliance you are obviously throwing around and selling data. I suspect this is actually a rare case and clearly you are not an engineer or work at a startup. If you did you’d understand that the potential compliance overhead is non-trivial including having a EU representative, legal review of your terms and conditions.
> 1. Hardware sandboxing (i.e., ring not-0) isn't much better, as seen by Meltdown.

Meltdown was a single Intel bug, it did not occur on other CPU architectures or on AMD chips. It was a result of asynchronous permission checking and it is a side-channel disclosure (a non-write bug). It is objectively not as bad as the tens of thousands of buffer overruns and memory write vulnerabilities in software.

> 2. Most production-ready UNIXish kernels have had support for running untrusted code (namely BPF bytecode) in the kernel for decades.

Actually it is a security vulnerability as well. In fact, the Project Zero proof of concept for Variant 1 of Spectre was an attack on the BPF interpreter, not even a JIT, it's even worse with a JIT.

> 3. Do you really trust all the code currently running in ring 0 on your computer? In particular, do you trust the executable loader. which handles complex untrusted input? What's the line between "code" and "not code"?

There are levels of trust, of course. I trust the Linux kernel a heck of a lot more than, e.g. V8. And I work on V8. On the WebAssembly implementation. I didn't want to mention it, but yeah, no, I would not put my own code into the kernel.

> 4. On most desktop machines, there's a single user

Again, levels of trust. I would not, e.g. run most userspace software in the kernel, just because it's so broken it will probably bring down the system. All the other things you mention are made easier, not harder by running in the kernel.

> 5. These same machines make a practice of running untrusted, JITted JavaScript and WebAssemy all the time inside the same sandbox you think is too dangerous, and the sandbox works.

I don't want to scare you, but please don't labor under the assumption that web browsers are 100% secure. We have tons of bugs. I mentioned above that the WebAssembly implementation in Chrome is a lot of my work. We've had security vulnerabilities.

> Not perfectly, of course, but also certainly much better than, say, the Linux kernel protects itself from local privilege escalations. Why is the same software sandbox too dangerous for use in kernelspace?

Objectively, no, it isn't better than the Linux kernel. And yes, it is too dangerous. This is based on the hundreds of security bugs that I've been involved with while working on Chrome, and the hundreds more that I wasn't involved with, and the probably hundreds more that are hiding in there. Yes, we take security seriously, and we are very sober about this.
hi try
https://community.cloud.databricks.com/
A lot of this is because there is a somewhat mis-informed (which we will be polite and not call 'gullible') class of investors out there, primarily in the VC world, that thinks that most AI is magic pixie dust and so 'we will use AI/DL' and 'we will do it on the blockchain' has become the most recent version of 'we will do it on the web' in terms of helping get funding. Most of these ventures will flame out in 6-12 months and the consequences of this are going to be the source of the upcoming AI winter OP was talking about.
>You're suggesting people pay $4,000 for a LV bag because LV is limiting their supply and they're difficult to find?

I'm really not
> Advanced transactional pooling
> Odyssey tracks current transaction state and in case of unexpected client disconnection can emit automatic Cancel connection and do Rollback

that's my biggest issue with pgbouncer, is there a docker image for it?
Yes I've also been in SCRUM projects that worked well; however, these projects would have worked well under any organization, because of the particular people on the project.
I LOL'd at this

"Valve is the other famous poster-child of radical freedom. And just as soon as they release Half Life Episode 3, I'll be happy to take lessons from them on getting software delivered."
Using Tcpdump to analyze HTTP won't always work. Unless I'm mistaken, Tcpdump doesn't decode packet fragments into a stream, so if the request is fragmented, your grep won't work. If there are multiple HTTP requests in one TCP stream, it's less likely they are aligned completely in one packet, also fragmenting the request. And if it's a request to Google it could be in QUIC rather than TCP. You may wonder what on your network is broken because you can't see the requests, but it's just the network fragmenting packets.

Tshark (nee Wireshark) I believe does decode packet fragments into streams, and allows you to use more advanced Wireshark protocol filters. My suggestion is to start a pcap capture, and at the same time replay it using Tshark with the filters you want. This way you can re-analyze the same live traffic both now and later.
If you buy at 10 and it goes to 20, sell half and play with house money if you are worried about it.
Show HN: WordGit – Git diff and merge on Word docs, using Word's native support
A warning from my own experience: do not use web technologies for any printing (including rendering to pdf) where positioning is critical (e.g. for filling out pre-printed forms). Fiddling with `@media print {…}` and `position: absolute` will work… until there's some minor change in the rendering engine that will throw all that careful work into disarray and leave you asking questions like, "why is this right-aligned bit of text in an 8.5-inch wide container being printed down the middle of my page?" (the preview looked great btw). Oh, and the vertical scale was only slightly short, so I couldn't just scale the page. The right answer in this case was a package that actually spoke pdf and would flow text into a fixed-size box at a fixed location. Oh, and once you've got the file, don't let the browser print it either -- somehow both Firefox and Chrome wouldn't render it to the printer correctly, and of course they would mess up in different ways.

Browsers are good at laying things out on the screen. On paper, not so much.
My experience is that a good team does a good job. A bad team doesn’t.

Of course that's your experience. If you judge teams based on outcomes, then you're going to conclude that teams that succeed are good, and teams that don't must be bad. Unfortunately that offers no guidance in how to become a good team. The goal of software management as a practice is to find patterns of positive behavior that make good teams. Agile, in general, is a collection of those patterns.
Can someone explain what this is actually useful for, if you're not a kernel developer? Would people in userland care about anything like this?
Quoting from my parent comment,

> "And Scrum is misapplied so often that this clearly applies ..."

It's not about always being misapplied. Just that it's misapplied so often that in the larger scale decision making, it's a problem with Scrum.

I don't deny there are isolated examples in which Scrum is applied well and works well. I also don't care, unless those examples represent the majority of cases in most average companies.
And you would be alive.
I've been advised to a write a preprocessor so that I can make a language that compiles to C. I'm mostly fine with C, except I want to make it more readable and with a 'sweeter' syntax.

Features I want are:
* pythonic indent
* no trailing semicolon
* vector, hashmap and map containers
* immutable strings
> Interestingly enough, this starts to bring up questions that have previously only been super active in science fiction circles, particularly, Star Trek: If you can perfectly recreate something down to the molecular level, what actually has value? (Assuming, someday, that synthetic versions are excessively cheap, in Star Trek's case.)

This is really getting at a core contradiction in how we analyze value. On the one hand, you have something's monetary value. This is the exchange value - the value you can get, denominated in a currency, via a sale. On the other hand, something you need has value because it fulfills a role when you use it. This is use value.

We don't consider use value at all when talking about the value of a good and consider the exchange value to be paramount. But this makes no sense. When you're starving, a loaf of bread is quite literally worth your entire world. When you have plenty of food, one more loaf of bread is worth almost nothing at all. When you need to get around, one car is extremely useful. Hundreds of cars together are essentially worthless, except perhaps to rent to others (literally rent-seeking).

If you can recreate something down to its molecular level, and produce arbitrarily many copies, then it's only value can be its use value. And use value is difficult to quantify as it's tied to the subjective experience of need.

> If you can replicate cooked food perfectly, will people still claim that "real" food, grown, slaughtered, and cooked, is "better" or tastes "more authentic", despite no technical difference?

I suspect that some amount of this comes from our attempts to justify the price we pay. It costs more, and so it must be worth more. We invent reasons in our minds to justify the dissonance. Though, if you experience something better, there isn't really any argument that can satisfactorily say that you don't, since experience is subjective, anyway.
And the scrum master needs to be empowered to do things. In my company the scrum master has pretty much no authority because the line managers are still pulling the strings.
So in roughly 1200 hours then. Check.

/folks up north
Thousands-of-years study by the Chinese confirms the results.
They could have posted that when the cookie law was introduced.
Does it impact hobbies as well as work? For example, something like practicing a musical instrument seems like it would hit all of your danger points.
I want to be the guy who talks to the rest of the employees, implements things and get direct feedback from them.

How exactly does agile prevent you from talking to your teammates and getting feedback from them?
The CASE motivated tooling got in the way.

My go to joke: RationalRose is like an 800lb angry gorilla sitting between you and your work.

Alistair Cockburn did a great post mortem about that era.

Characterizing people as non-linear, first-order components in software development [1999]
http://alistair.cockburn.us/Characterizing+people+as+non-lin...

During that time, I strongly preferred lo-fi paper prototyping for UI. And I'd scratch out UML diagrams. Worked fine for intra-team. But it just didn't fly with management. We had to make everything more formal and pretty.

Oh well.
Interesting, but what's to say we won't find older hominid bones in Africa next year? Is it wise to be so certain that Europe was the birthplace of mankind based on a single discovery? Really, the same goes for Africa. Why are we deducing that each oldest bone means _that_ is where humans came from?
Tencent to store its most valuable data in Guizhou
Apple Grows Self-Driving Car Fleet to 62 Vehicles in California
> It took hundreds of millions of years, possibly up to a billion years, for basic life to form on Earth.

This is a common popular misconception. See something like Simon Conway Morris's book Life's Solution. There is evidence that life existed on earth almost as soon (geologically speaking) as the early bombardment stopped repeatedly boiling away the entire oceans and atmosphere, within something like 10-20 million years. Thus, all the interpretation about the implications of that.
How I Built Gmail Message Finder ID
tcpdump + CloudShark is my go-to. Usually using cURL with their API or SCP via Couchdrop.
Safer Deployments with Kubernetes
> Perfect information problem solving is not interesting anymore.

I guess in the same way as lab chemistry isn't interesting anymore ? (Since it often happens in unrealistically clean equipment :-)

I think there is nothing preventing lab research from going on at the same time as industrialization of yesterday's results. Quite on the contrary: in the long run they often depend on each other.
Thanks - I've had that notion for a long time, but could never put it as succinctly. "You can't count events that didn't happen."

Had a lowball offer from a company once - had some friends working there. I could see from some earlier code that some really basic web knowledge was being overlooked. I won't go in to details, but... this was something I'd pointed out to one of the managers there (met at a local meetup). Fixing it then would have taken about 2-3 hours, scanning all the code to ensure it was in sync. Instead, the problem spread as they grew, and it's harder to fix when there are dozens of staff and thousands of files in use vs 5 staff and a dozen files. It became a 'this has to be fixed in order to close mega-deal X integration with company Y', and it took multiple devs several weeks of full-on effort to rectify everything.

How do you quantify that? "Please, take my advice, doing this 4 hours of work now now will save you >$50k and weeks of opportunity cost in 4 years". Generally people don't seem to care.
I'm not convinced that's a new phenomenon. Certainly I've seen no evidence that it is and a great deal that it isn't.
ESCORTS ALISA – ESCORT ATHENS – ESCORTS ATHENS – ESCORTS
In photos: a rare glimpse inside the heart of a quantum computer
Wow. Gnome Shell is written in javascript? How much of it is javascript? I find this a really odd decision.
You can land at executive airports and avoid any TSA hassles.
This is misleading & false. Genetic evidence has conclusively proven our roots are in Africa. While the bone finds are real; the entire interpretation and situating of those finds are incorrect. (I do human genomics for a living).

Their interpretation of geology is also incorrect. The saharan sand comes via winds & continues to do so; making the Mediterranean soil very fertile:

https://www.washingtonpost.com/news/capital-weather-gang/wp/...
"... I’m not sure that disabling user extensions actually disables the Javascript engine completely, but it definitely minimizes it to the least possible scope."
I was talking about diamonds and extravagence desired purely to display wealth and social status (women are particularly vulnerable to this folly), not dinner dates, flowers, and mechanical watches.

Like the two month salary rule for an engagement ring would be a ludicrous thing to expect of a man. Run from that woman.
Would be interesting to have a side by side comparison with PgBouncer
> I'm too optimistic

Have you ever thought much about why, though? When I was young, I was super optimistic - and I got burned by all of the surprises (including the underspecified or unstated requirements), so I started to estimate pessimistically based on experience. But then I got stuck in this loop: "How long will this take?" "Probably two weeks" "What? Why two weeks? Why not two days? We only have two days. Say it will only take two days, or tell me everything you're going to be doing on an hour-by-hour basis to justify this high estimate!" So now I've just gotten really good at figuring out how long they want me to say it will take, say it will take that long, and shrug my shoulders when it takes longer. Since everybody else is doing the same thing (as they don't have any choice), it doesn't surprise anybody.
> Estimating is my Achilles heel. Always has been. I'm way too optimistic.

That's kinda the whole point. Everyone sucks at estimating. Scrum proposes a way to do "what greybeards call project management" in a way that deals with this universal inability.
What is Software Engineering?
That's really cool and surprisingly cheap.
UX is great as well, very clear and I could find what I wanted to see very fast.
It's not a typo, it's called "humor".
It's not a novelty, but they aim to bring traditional costs down.

One of the founders is Bob Wyman, who was one of the most interesting characters at Google. He could talk for hours about prospective search (he had founded PubSub), his time at DEC working on All-in-1 or his advocacy to get rid of No. 6 fuel oil in NYC buildings.
Legality and ethics are very different things.
I just looked it up, and you're actually not way off about the hourly operating costs. I was surprised it's that low.

Also, there was no "big tax break" for private jet owners: https://www.huffingtonpost.com/entry/senate-tax-bill-break-p...
I'll 2nd the "state park wedding" thought. Our county maintains about a dozen historic buildings, all of which can be rented for a small fraction the cost of a commercial venue.

Our ceremony was held at a small 19th century chapel. The reception was at an 18th century mill house. Worked out great.
Actually, it does seem the author is unaware of the extent of JS usage in Gnome Shell:

> User extensions are a mechanism that allow users to write GNOME extensions in Javascript, similar to how Chrome and Firefox extensions work. In my opinion this idea has dubious merit, and my personal feeling is the less Javascript in my life the better. I felt somewhat vindicated about this decision during recent coverage of a memory leak in GNOME Shell. The underlying issue was related to the Javascript garbage collector in GNOME Shell not collecting object references in a timely manner. I’m not sure that disabling user extensions actually disables the Javascript engine completely, but it definitely minimizes it to the least possible scope.
What does it say? I haven't been able to access twitter since GDPR.
Building a brain, cell by cell: Researchers make a mini neuron network (of two)
NB: cachet vs. cache:

https://www.grammarbook.com/homonyms/cache-cash.asp
User authentication in R Shiny – shiny.users and shiny.admin packages
Comments: https://news.ycombinator.com/item?id=17183057

Dup: https://news.ycombinator.com/item?id=17183418
Ok I don't understand the reasoning behind why this is safe... The explanation is pretty sparse.
For somebody who consumes as much music as I do, this is one of the greatest things ever created to discover new music.

Especially...if you get a handful of like minded individuals in a room putting their minds together to make the best set ever.

I usually listen to about 8 hours of music a day on the application and have added around 4,000 songs to my Spotify Library. Most of the songs are songs that I have never heard before.

I also think that tying it to the Spotify Premium subscription is important so that the site can avoid any issues with labels.

In the past there was another site like this called turntable.fm while it was shut down I gained a bunch of friendships, and I could honestly say it is the reason why I became a developer.

In other words its awesome.
Confectioneries, too.
This completely misses the point, and it's telling that it gets votes. The GDPR does not regulate what you personally know, it is about collections of information outside of your brain.
best i ve read so far: https://writershq.co.uk/privacy-policy/
I guess we'll never "know" but rather wherever the oldest human bones/remains are is the most likely knowable starting place of humanity. If the evidence leads us to somewhere else we'll have to keep updating the theory.
Also who's to say someone didn't carry the bones to Europe as relics? Bones simply surviving for thousands of years is amazing but unless they're found deep inside a known burial ground we really have no idea if that was where they became bones.
Everyone tacitly assigns a time value to "points" anyway.
Is there only a limited set of cities available?
Weird reptile-like mammal species discovered amid ancient Utah dinosaur bones
You can run safely userland code in the kernel context. Makes it faster.

Does make Spectre rather more potent thought!
You said there's an artificial shortage of LV bags which is causing the inflated prices. I can't see any other way to interpret what you said.
> continents won't have fossils if they are under frequent bombardment.

Right, but if giant bombardments completely boil away the oceans and atmosphere to rain liquid rocks back down on the surface, there very very likely won't be life, either. So the claim is not just that "fossils only go back to X" but that X is so close to the end of the giant bombardments that there's almost no time left (geologically speaking - maybe 10-20MY) for "life but no fossils yet".