skysight-inc/HackerNews huggingface dataset:
I/we worry about hackers and malicious actors all the time. One of the reasons we're greatly expanding our infosec department and hired Joe Sullivan [1] is to help keep us safe. We're doing a lot of work with memory-safe languages (hello, Rust!) to help stop Cloudbleed from repeating itself. [2] We're doing stuff around physical location of private keys [3]. And so on and so on.

We're open about government requests [4] and we've been pretty robust with stuff like NSLs; we went to court to be able to release NSLs [5] and were able to release two. [6]

[1] https://blog.cloudflare.com/why-im-joining-cloudflare/
[2] https://blog.cloudflare.com/writing-complex-macros-in-rust-r...
[3] https://blog.cloudflare.com/geo-key-manager-how-it-works/
[4] https://www.cloudflare.com/transparency/
[5] https://blog.cloudflare.com/ninth-circuit-rules-on-nsl-gag-o...
[6] https://blog.cloudflare.com/cloudflares-transparency-report-...
I wonder how much empowered workers would bargain for wages vs other things they might want. For example, in the US, we public employees do bargain for higher wages, but we also go pretty hard for pensions, job security and lower health co-pays. Increasingly we are also bargaining for childcare help due to the insane increases in the cost of childcare (this is a genuine mystery to me: in the 80's early 90's my broke parents could easily afford to put me in full-time, quality childcare from like 3 months onward). In European countries with strong bargaining, workers demand more vacation time.

In short, I don't think it's right to imagine wages going up enormously with more bargaining power; I think it's more accurate to imagine benefits and terms of employment (job security, vacation, autonomy) going up. Not a normative point but more of a positive one.

I believe this happens because of how the union works. People who care a lot about some issue (e.g., parents caring about childcare) will push hard on the union to bargain for their particular benefit. Wage increases, by contrast, are spread over the whole union and thus expensive in total but not huge for any individual, so there is a sort of collective action inertia even within the union. A small wage increase would cost as much as a huge increase in childcare help, so the parents will be able to mobilize more easily. Personally, this arrangement me benefits me a lot as I care more about those benefits than salary.
Right, if you don't trust CloudFlare or you think there is a flaw in Tor. Let's say you didn't set this up, the exit node can lie about the DNS resolution. Granted, to your point, unless I was worried about exit nodes, I probably would want my resolution on the same circuit/session as my access.
When I looked at Gogs, the code was really messy, had trivial SQL injection vulnerabilities in the past and the maintainer actively resisted efforts to implement basic features like OAuth2.

Is Gitea any better?
There's some suggestion that the US system is more dangerous to the mother, although it's hard to compare the stats: https://www.economist.com/united-states/2017/08/05/is-pregna...

Again, if you've got great health cover you can probably do better in the US. If you haven't, then you might not.
I was thinking, watching the video "Ryan should fork it, or start over"... until he revealed it: https://github.com/ry/deno :)
Clone your voice in five minutes
How the Alt-Right Manipulates the Internet’s Biggest Commenting Platform
can somebody downvoting the comment above kindly explain why?
Im not a fan of blockchain for most applications, but couldnt this be one?

People that want to host code on the internet just need to pay the fee to put it on the internet. Once its there, anyone can download it.

Hopefully the fee is trivial, I'm guessing this wouldnt be a problem since it would be less popular than Bitcoin.
You're right, I think I was misreading you.

Indeed (as you edited), the national inflation figure can 'capture' it in the statistic sense, but cannot capture it in the sense that the number expresses individual paint points that different subsections of the population experiences, like rent in a HCOL urban area, or the inability for wages to catch up with an ever increasing downpayment requirement.
When the math doesn't work
The inclusion of ASUS and D-Link adds a ton here. It looks like their lower-end models have made it on the list, likely due to volume, but I would assume the higher end models are probably similarly vulnerable, since the firmware between them is usually pretty common/parallel. The added Netgear devices are among some of the most common devices I've seen in homes as well.
Speeding Development with Artifacotry and Bit
How do any of those things impact the maternal mortality rate?
10 Major Websites You Can Build with WordPress
That only shows that regulations may create monopolies, not that they're the only reason for their existence.
Unhealthy food is only cheaper if you can't be bothered to take 30 minutes to cook. It has been a long time, but the last time I went to McD's it was ~$5 for a meal. The expensive grocery store up the street sells chicken breast on a permanent sale for $1.99/pound.

If you're thinking the unhealthy food in the grocery store is cheap, that's also not true. Chips are $3-$5/bag while 3 pounds of onions is $2. I could go on.
I imagine you're referring to Austrian economics here, but much more mainstream economists believe inflation to be fundamentally about money supply as well. Here's (nobel prize winner) Milton Friedman, from Wikiquote:

"Inflation is always and everywhere a monetary phenomenon in the sense that it is and can be produced only by a more rapid increase in the quantity of money than in output. … A steady rate of monetary growth at a moderate level can provide a framework under which a country can have little inflation and much growth. It will not produce perfect stability; it will not produce heaven on earth; but it can make an important contribution to a stable economic society."

That's not so say that many don't hold the belief you have (i.e. that inflation should be understood primarily as price inflation, and monetary inflation is a secondary consideration). But it's not the only mainstream opinion.
That is the previous design which changed significantly from what's been committed today (see other comments).

Github mirror, for easier review: https://github.com/openbsd/src/commit/e688c2b0648a80551cf735...
Gitlab is nowadays also almost entirely written in Go – every part that’s slightly slow has been rewritten in Go over the past years.

Still, that doesn’t help much. Gitea just does a lot less than Gitlab behind the scenes.
How does a project like this relate to Mozilla's core mission?

I understand that it may be useful but this is far outside of what I would expect Mozilla to spend its funds on.
useful + scarce == intrinsic value, no?
Depends on who your supervisor is. Some labs suck.
Do you have Software vacancies in London? I don't see any in the link you provided.
SQLite 3.24 Released with UPSERT Support – Phoronix
How is your second paragraph not the very definition of slippery slope argument?
Dangerous fake electric goods sold on Amazon and eBay, research says
TL;DR, from quickly browsing through it:

He mostly regrets the way Promises work (edit: that the async programming APIs don't work with them), security/sandboxing, and the module system.

Then he introduces "Deno", a successor which is under construction and which will fix all these problems. It exposes a language based on TypeScript. Internally, some parts of Deno are written in GoLang.
Weird, I must have missed all those $20m broken leg treatment bills Europeans get from their universal healthcare programs...
Vocabulary question here:

Is this "embezzlement"? I'm not sure because the use of funds were for legitimate services even if they are owned by James and his family.

Is there a different word to describe the siphoning of company funds by directing business to self-affiliated parties? Is this covered by "nepotism"?

(Thanks, in advance, for any clarifications.)
How Medium became a leading blogging platform
Hi forapurpose. I don't want to minimize the problems with Facebook and its practices around data. On the contrary I'm quite critical and skeptical of them. However, right now I'm trying to get to the bottom of this particular issue which has just come up in the news.

This issue seems to be about particular APIs that Facebook gave to certain partners. As I understand it, the partners don't get any data until a user gives them their username and password, for instance by typing it into that third party's app.

Now in my opinion, if a user is already trusting that third party with their entire Facebook account, then everything else is a secondary issue. It is primarily a trust relationship that the user themself has established with that third party.

Again, I'm just focusing on this issue at hand. I'm not saying this is a more important issue than Facebook's general data practices or anything like that.
Thanks for confirming, suspicion is a must when it comes to onions. I'm already testing it, works like a charm.

socat TCP4-LISTEN:853,bind=localhost,reuseaddr,fork SOCKS4A:localhost:dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion:853,socksport=9050

openssl s_client -showcerts -crlf -connect localhost:853

getdns_query 1dot1dot1dot1.cloudflare-dns.com 127.0.0.1@853

forward-addr: 127.0.0.1@853#tor.cloudflare-dns.com
Totally. It's the difficulties of putting lots of computing resources in space (heat, power, serviceability, radiation) that actually makes it attractive for selling compute time. Only one company needs to solve those problems and others can leverage that work for a fee. If it was easy, there wouldn't be a business opportunity.
Venture fund NEA buys Davita's direct primary care biz for $100M
Explain please? It seems rather backwards to me, and with some unpleasant societal implications, that a pro sports player (so a subset of entertainment) is more highly compensated than someone who holds an even rarer skill set (in a subset of science).
It can be. Just move to GitLab and all is good.
I actually wasn't clear at all. To me, it's more about code browseability, and I've found it much easier to splunk through codebases for fun in a GitHub-like interface. (Not much to do with the developers' workflows, I suppose)

That's really where it's coming from, wasn't really trying to be snarky or anything.
> social media

We've had pamphlets for hundreds of years. I suppose they did cause some revolutions, which killed people. So, net negative?
This is how I've seen it done in very small companies:

1. Greet the new person and ask them what they are doing there? Are they a vendor? client? someone who accidentally walked in? Oh, they're a new employee.

2. Ask them if they know what their job is supposed to be. If not, find them a spot to sit down while you ask around.

3. Ask IT to get them a laptop. If they don't have one, send out to get one from best buy. When they ask what type say "good, but not too expensive"

4. Ask them how their day is, if they want coffee

5. Get back to work, forget about them.

6. Go back and realize that no one knows what they are supposed to do.

7. Randomly assign them various tasks.

Whatever best practices are must surely be the opposite of this.

At large companies I have seen:

1. 12 binders full of details about healthcare, policies, what happens if you pass away and other remote events

2. Orientation that feels like an abstract business school course

3. On day 1, you are asked to do something really simple to get your bearings.

4. Day 2, you are asked to do something really massive because by now you must surely know your way around.
Mozilla releases massive crawl data dump and announces data challenge
>HFT reduces transaction costs for market participants. You can see this in the narrowing of bid/ask spreads

If HFT were a net positive for market participants then those same participants wouldn't be fleeing to dark pools in an attempt to avoid them.
The "contest" repo where the data can be accessed is here: https://github.com/mozilla/Overscripted-Data-Analysis-Challe...
I can definitely remember writing some crappy GWBasic "programs" when I was 7 or 8 - basically PRINT and GOTOs, and they even had some logic! I was very, very bored (no TV for instance) and I only had the GWBASIC manual and access to an 8088.

And my stepfather helped me write a calculator program in C when I was 10 or so (but I didn't really understand C).

I wouldn't call that a "developer" by any stretch of the imagination, I guess Nat was exaggerating.
One stop all to track you cryptos, investments and finances
I'm sure it is too, but IMO Humble Bundle should refuse to carry books with those restrictions.
Just as your Tor browsing experience was becoming faster, it was becoming a more and more viable tool for DoS attackers. Someone has to protect the sites enough that they can stay up for traffic, Tor or otherwise.
its great to see comments that dont contribute anything useful get downvoted -- it keeps the signal:noise raio high.

but lately im seeing comments downvoted seemingly because users just dont agree with the author or their point of view. thats not helpful. meaningful discussion and debate must embrace alternative points of view. please dont downvote to censor.
Yes. Clearly my comment relates to the article which I believe is talking about pay and conditions in the West.
You must be a hell of a lot smarter than me: I’ve been hacking rust on the side and it’s taking me like 10x as long at least to do fairly simple things. It’s like the crushing burden of choice of C++ paired with the strictness of Haskell. And I’m not sure it’s that much safer than C for low level stuff that requires you to use unsafe anyhow. I’m going to take my kernel project through to programming the MMU, and re-evaluate but it’s slow going man. None of my coworkers would have the patience for this slog.
Dang. Now THAT is a helpful resource. Thank you for pointing me to this.
What makes you think they don't understand that? What is 'urbanism' anyway?
Don't forget to treat them all as human
beings and not assets (and follow @picardtips on Twitter for other good management/random insights, it's totally been worth my time).
One-line jokes are generally not well-received on HN unless they are so exceptionally amusing and original that they are beyond reproach. The standard rationale for this - which can make HN seem very dry and humourless at times - is that people want to avoid HN becoming like Reddit.
First supervisor I had in my 2nd job out of school had a mantra: get the data model right and everything else falls into place.

Has worked for me for 30+ years.
"Charlie and the Chocolate Factory Factory"
1UP Nutrition – 1UP for Men/Women, Supplements,
Personally I'd like to see the full list of those 60 companies.
Bloomberg calls Google's decision a defeat for U.S. national security, patriotism ...

This raises a couple of questions:

What does it even mean for a US company to be "patriotic"?

In today's globalized economy, how "patriotic" does an "American" company have to be?
"... to help art and advocacy projects ..."

Why not (serious) social science projects? Don't have today's sociologists have anything to say about this or do they need a few more decades for warm up.
The distribution comes naturally when the majority has to live off the land.
For an in-depth look on surveillance in the States, I recommend @War[0]. It delves into the rise of the NSA and the role of digital surveillance in modern warfare, along with the NSA's relationship with large corporations to achieve these goals.

[0] https://www.amazon.com/War-Rise-Military-Internet-Complex/dp...
"While Microsoft talks a nice game now with regard to Linux and FOSS, it hasn't really backed it up with significant actions that merit our trust,"

https://hub.docker.com/r/microsoft/mssql-server-linux/

https://github.com/Microsoft/dotnet

https://github.com/Microsoft/vscode

https://github.com/Microsoft/ChakraCore

https://www.zdnet.com/article/top-five-linux-contributor-mic...

https://www.networkworld.com/article/3120774/open-source-too...

https://azure.microsoft.com/en-us/blog/powershell-is-open-so...

What the heck more does this person want? I mean I understand that old feelings die hard but come on!

Look, I'm not a Microsoft fan and was around for evil Microsoft, but I have to roll my eyes at a lot of the reaction and panic for this whole Github purchase.
Looking at the recent purchase of LinkedIn, the product hasn't changed much from the original purchase, and I don't expect Github to change that much either. That can be a good thing or a bad thing depending on how you look at it, but I think that's a stronger argument for leaving Github than "Micro$oft is going to kill FOSS!"
Hackers don't like fun. They are serious and important people.
This is really the question that throw’s people for loops in my experience. Not contextually what you were addressing but in comparison to my parents in the US.

Many things are much more inexpensive jeans, shoes (functional not trendiest), entry-level tools, computers, media, etc.

Whats not more inexpensive and what imho really actually matters are things like education, housing, and the barrier to entry to careers (require licensing, certfications etc.)
Interesting that this shows up on HN today because I was just reading a thread[1] on reddit where a user was forced to install spyware on their android phone when crossing into this region of China

Also I had no idea what was happening in that region. This[2] is from one of the commenters in that thread:

> As someone from Xinjiang and migrated with my family to somewhere else, This is only a small part of the whole oppression and violation of human rights going on in North Western China. Now a days, Uyghurs students are not allowed to speak their mother tongue in schools, fasting during Ramadan is considered "politically incorrect"(let alone praying etc), and you will end up in "re-educational camp"(aka prisons). Uyghur females are forced to marry Chinese mans, as part of CCP's assimilation process, almost one million Uyghurs has been locked up in prisons, EVERY SINGLE successful Uyghur businessmans has been locked up, influencial figures like artists, scholar,, singers has gone into "political re-educational camps" too, many getting their organs harvested, and CCP sell them in the black market. Many healthy teenagers dies after being released from those camps, due to being some essential part of their body organs being harvested. The international community knows very little about everything happening in Xinjiang because Uyghurs don't have an vocal enough exiled leader like Dali Lama, and also because NO media is allowed inside Xinjiang, especially foreign media, if you have friends and family that have interests in Chinese culture or China as a country, I hope you guys can spread the message and things happening in Xinjiang, China, towards Uyghur people. Its comparable to the Holocaust, just done very low profile, I really mean it. It has past the point of making me angry, I just feel extremely depressed when I read things happening back home, and talking about them. Im just glad myself and all my family members are in a safe and free country now. If you wanna learn more, you can visit Radio Free Asia's website, and they have section reporting on Uyghurs.

> Edit: I'm sorry if this is getting political, I by no means saying that this has anything to do with average Chinese citizens and Chinese people, most of Chinese people I've seen and work with are all very humble really nice people, I'm only speaking out towards Chinese Communist Party, and please don't get too political under the comments,and I just want to give some background information of why CCP installating malware on people's phone is a common phenomenon in China (especially places like Xinjiang). Please be nice to each other, regardless of ethnicity or any differences.

1. https://www.reddit.com/r/security/comments/8ofiiw/chinese_bo...

2. https://www.reddit.com/r/security/comments/8ofiiw/chinese_bo...
(New-ish manager here.)

_Peopleware_ by Tom DeMarco and Timothy Lister is the best management resource I've encountered.

https://www.amazon.com/Peopleware-Productive-Projects-Tom-De...

It also helped to keep careful track of things I really valued (and hated) about people I've worked for.

Just one example:

Depending on team size and culture it can concerning if your manager schedules a 1:1 meeting with you out of the blue and outside of your normal cadence. I had a manager that did this, on a Friday, with the meeting scheduled for Monday. Worrying about it would have bugged me over the weekend. Not a ton, but some. He followed the invite up with a Slack (team chat app) message explaining what the meeting was and what he wanted to talk about, turns out it was nothing to worry about. Him taking the time to clarify made a difference in my morale and it stuck with me.

Super small thing, but it matters.
It doesn't depress wages in aggregate but it certainly does depress wages of low skilled workers (your article seems to think it causes a -5% hit).
>>The absolute improvement is great. The accelerated concentration of Wealth is not.

Yes, exactly. The reason actually is very simple: wealth inequality results in inequality in political (not to mention legal) representation, as the wealthy always carry more influence in society and use that influence to stack the odds in their own favor.
There is a consistent history of huge vulnerabilities in Wordpress, which is explained by the aforementioned code quality.

For maintenance, well if something breaks (especially plugins, etc), it’s much easier to fix it when the code is clean (like a proper Laravel-based project) than the mess that WP is.

Finally performance isn’t that good again compared to a bespoke Laravel app or a more modern platform (for blogging, Ghost comes to mind).
Interesting that he had promises in node that early. Maybe if he kept them, the community wouldn’t had standardized on two space indents

Edit: so two space indents weren’t a consequence of “callback hell” ?
In contexts like this Chinese is often short for Chinese communist. But if that was elaborated then you would accuse people of McCarthyism and being overly hysterical about communism.
These boards have a duty to understand the company holistically.

Agreed. This is a good argument for limiting participation on multiple boards. 'One director, one board' would encourage more board focus on the companies they direct, and also open up more board seats generally for greater diversity in corporate governance.
> If you own a company, or a TV station, or a news source, or a large number of shares in a company, your ability to influence the world is very much greater than someone who doesn't.

Taken to the extreme, the logical conclusion here is no one can own a company, therefore one cannot own a part of a company lest they be able to buy up the whole company, and therefore one cannot own property lest they collect it and have more than others (inequality). To your last sentence, what problems are caused by inequality that aren't simply because of envy?
Lets rephrase that shall we "Why would they acquire Nokia just to turn on it and run it into the ground?"

It doesn't need malice but Microsoft have a talent for this kind of thing
I have to say, I'm evaluating some of the .net technologies for building distributed systems, namely Akka.NET, Orleans and SF, and using any of them requires quite a lot of investment and therefore time to learn to use them right.

The last thing I want to experience is that after a year or two, the tech I pick is going to be abandoned or at least put into maintenance mode.

Therefore I'd appreciate all insights (if possible data-driven) on the future plans about SF and how does it stack against k8s investments by MS. It would be great if MS themselves made an official announcement.

Seeing that SF doesn build on Windows for several months, makes me doubt whether the momentum behind open sourcing SF is real.
don't think so. here's the reportage: https://www.bu.edu/today/2018/ban-ki-moon/