skysight-inc/HackerNews huggingface dataset:
In my experience it's mostly the same.

Since the demand exceeds the supply by far, most consultancies take on less experienced candidates, then train them and/or pair them with a more experienced colleague.

I've worked for several smaller consultancies focusing on different domains and technology stacks and always learned it on the job.
Which would be consistent with most messaging apps that use notifications. Although I'm sure there is an exception to the rule most only use notifications to indicate to the client that a new message is available on the server.
It seems to me, time and time again, India, ( actually pretty much all the other BRIC ) are trying to copy China without actually understanding how and why China got there in the first place.

10 to 15 years ago one would have thought India to be better in programming, largely due to English for Chinese are not as common. Turns out with a whole Ecosystem, China has been able to adopt and produce some very decent engineers.

There is nothing wrong with throwing people at the problem. You create jobs and employment, there are still industries and area in China continue to do this. But you must also acknowledge how this is a temporary solution and what needs to be done afterwards.
sort of tangental, but i wonder how a drop in/drop out system like teamspeak/vent/discord/etc. would work in a professional setting. you have direct calls still, but if you just want to be available to coordinate through voice you could. similar to leaving your door open and letting people stop by.
I can't argue with you, but "most of the time" it works. Not that I have a choice (unless I stop being a frontend developer), but the time we spend with node/npm debugging is not critical in the timesheet/log.
I was talking about the compromise, if node is slower it provides better productivity.
Please tell me why?
The "Bethesda artwork" that's a commonly used TV test pattern, in the public domain, designed in the 30s?
No, GDPR only applies if (i) you're in the EU or (ii) the org with the personal data is in the EU.

(i) might be enforible against a US corp if they have something in the EU to do business
Cooling fan spindles are subject to the same forces; and they had a large array of cooling fans.
I'm agreed with everyone who's pointing out that self-control is a fine solution to the same problem. But this is a great-looking phone that's small. Skinny pants are still pretty in, and even smaller smartphones are too big for the pockets. You're using it for going out at night anywhere that stays warm in the evening.

It needs to have that "ride home" feature, and probably "rides anywhere." If that works I might spend $300 on it just for the 12ish nights a year I would use it--it's a small cost compared to babysitter, restaurant, show, Lyfts, etc.
I wonder what the account requirements are for a BD. Will they have to deny services to foreigners and kids?
Well spotted, thanks. Changed it to pirate.
I try to explain better that last point.

Client applications should not migrate the database. That's up to the database, with any tool for for the purpose. I'm ignorant in this matter.

Then there is code generation to keep the models up to date. The generation tool should know all the ORMs or whatever used by the clients and modify their models. Saying that this is not mainstream is an understatement. I know some reverse engineering gems for Rails but nothing like that.
I've heard about this multiple times and there was even a Reply All podcast about it.

If it were true, there are plenty of security researchers and bug bounty hunters that install their own CAs on phones and pull packet dumps. You'd think we'd see reports of this by now.

Facebook/Google and others have some pretty advanced learning algorithms, and a whole shit ton of data on you. What if, via some predictive analysis based on browsing history, messages, photos and other sources, their algorithms guessed the author would be thinking about Tokyo before the conversation happened?

If true, it's kinda sad such a powerful system is simply used to sell shit to us. And if true, it could also provide some crazy insights into determinism and human predictability.

The post is shit though. The author needed to team up with a researcher, pull apart the Messenger/Facebook/Instagram apks (or whatever iPhone packages are) and find real evidence the apps passively listens to conversations and transmits that data.
SoK: Science, Security, and the Elusive Goal of Security as a Scientific Pursuit [pdf]
The other example would be the Kin phone. A feature complete working phone that Microsoft decided needed to be rewritten from scratch to use the Windows Mobile / Phone stack

It took 18 months and nearly $1B to rewrite only to find the market had moved on. Canned and written off

I can imagine a situation where Microsoft thinks that GitHub would benefit from being re-implemented using Microsoft tech. Rewriting in APS.net, using Microsoft Login, integration with Office 365. The whole enchilada :)

It would take years, cost billions and, at best, deliver exactly the same experience as GitHub today

Worse case would be that GitHub stagnates during the rewrite as the alternatives spend their time and money developing new features
Speaking of which, a few hours ago Futures were added to the standard library, so the next nightly will have them in. We're quite close to that standardization!
8 cups?! You should drink that much water - but coffee..

2-4 still seems like a lot - this is coming from someone who doesn't drink at all anymore, but before 1, maybe 2. Now I only drink if I know I need the alertness. More effective for me considering the caffeine tolerance is gone and even a little has full effect.

Why did you hate it?
I'm not an expert on the iOS security model so I'm happy to be corrected about this, but as far as I understand this (enabling the mic without the alert banner or fetching data from wherever Siri might cache requests) would mean that either Apple is secretly colluding with Facebook or that Facebook is using an iOS exploit and sneaking it past app review. Thats an extraordinary claim that needs more then yet another anecdote and a vague technical expert to back it up, especially since it would not be unreasonably hard to provide some technical proof for this.
No its NOT, you don't understand basics, than be a stay at home dad.

You think I care about the down votes. I am just angry with how foolish people are here.
If you dont mind me asking, how do you think this helped or hurt your career?
Love the analogy with the squirrels
If all you need is a Go library for connecting to a Tor daemon and adding/removing hidden services: https://godoc.org/github.com/wybiral/torgo
I personally don't find the "bits"y explanation of entropy/cross-entropy/KL etc. to be all that intuitive; as fundamental as it may be, I don't think about compression/encodings all that often. I've always preferred the "surprise" interpretation: http://charlesfrye.github.io/stats/2016/03/29/info-theory-su...

In short: given some event of probability p, -log p = log 1/p is its "surprise". (If p = 1, log 1/1 = 0, so zero surprise; as p -> 0, the surprise gets bigger and bigger; and the surprise for two independent events, p = p1 * p2, is the sum of their individual surprises: log 1/(p1*p2) = log 1/p1 + log 1/p2.)

The entropy of a distribution is its average surprise: Sum/Integral of p log 1/p.

KL(p || q) is your excess surprise if you think something's distribution is q but it's actually p: Sum/Integral p (log 1/q - log 1/p). The KL divergence is always non-negative because surely if you think the distribution is q but it's actually p, on average you're going to be more surprised than someone who knows it's p.
What are the naive about
Playoffs
Oh yeah, I guess we agree.
Continuous speech recognition is difficult. There are technical reasons why this entire supposition is wrong, at least in the phone case.

The reason for the "Hey device..." preamble to most conversations with the device is that, in most battery powered devices at least, the always-on mic and processing unit that handles this is a separate, very low power unit that recognizes only the preamble, then fires up the rest of the system (usually along with buffering a bit of audio) to handle the rest of the query which can be more complex.

I could imagine that it's always listening/recording for non-catchphrase data on the power unlimited always-on pucks though, but a network traffic analysis would probably reveal that as well.
Haxe: Cross-Platform Development's Best-Kept Secret
The head bobble just means that they hear you. It does not mean yes or no or anything else really.
I’m not an expert either, but I’ve played one on TV, and I agree, it’s utter BS this was happening on an iPhone.
How different are the various frameworks here?

Are they all running with SSL? Do they keep track of session cookies? Do they have Content Security Policy headers? etc.. There's probably a million different feature configuration differences between each framework.
The temperature of your house at certain times can be used to figure out when you were at home, what rooms you were in, when you went to bed, if you're just at home alone, or someone else was at home when you were there too.

Sounds like PII!
Yeah, I can't speak to its use for long periods, but for a one off I just felt in the zone and able to concentrate, and then when straight to sleep when finished. I don't think I took a particularly high dose.

The second time I took it was for an athletic competition to give me focus. It worked well, but I don't think it lasted the whole day.
What about the crazy eyes?! The first time I saw a picture of Holmes I thought, "That's got crazy bad written all over it. Stay...away..."
Anecdotally, water and sugar directly affect my alertness while using caffeine. If I don't have enough water I get headaches and can't think straight. If my blood sugar is low due to not eating enough, or eating too much sugar and "crashing" then I might as well be asleep, even though I can't from the caffeine.

I may have missed it, but I don't see where they account for the diet of their test subjects.
Confirmation bias is a more probable cause.
>You can buy a Tesla car today, strip it down, and confirm it works and isn’t a giant Potemkin village?

What about "Full self driving hardware"? I am pretty sure you are not going to find it there.

And people have bought them thinking that it (full self driving functionality) is just one update away...
I can't believe this is on Hacker News.

The only source here is a random cybersecurity guy with no factual basis for making the claim. That and a poorly thought-out "experiment" that seems to be about as sophisticated as "I talked about shirts and I see shirt ads."

And what the hell is this referring to? "Seeing Google are open about it...” What exactly is Google open about in regards to sending random audio from phones to any app that wants it? How can this writer just throw that out there with no explanation?

The conspiracy theory here is that Facebook built the most sophisticated ad product ever invented and is using it secretly for their advertisers to improve advertisers' results without telling them about it.
Perhaps the nomenclature of "protocol specification" is ambiguous as it seems you're referring to wire protocols. I was thinking more along the idea of defining contracts for "What are the required data attributes for a merge?" or "What are the required attributes -- both in terms of defining the changeset and the user info for the user proposing the PR -- for a pull request?" The reference to "Making Linus happy" is from an interview where he explained that he won't take kernel PRs via GitHub because the user info metadata is different. I don't see why this cannot all be standardized and the various communities can write contract-compliant servers and clients for an agreed-upon distributed version control system.
Connect to PostgreSQL Over SSL/TLS on Debian/Ubuntu
Self-Hosting Your Git Repositories – Memset
What do you think is different about working with Russians? The culture is the same thing. We had two off-shore teams, one from Ukraine and one from Bosnia and Herzegovina. There was zero difference in professional discourse when compared to American consultants.
Perfect. Bookmarked and will get back to you when I'll purchase a boat. Would be a nasty surprise to the buccaneers.
If it had a "The Matrix" spring-loaded bit, I'd buy it in a heartbeat. But no spring, no sale.
I really don't understand this conspiracy theory.

These devices don't run on magic but on technology that's well understood by a very large number of engineers and scientists all around the world, even in countries that are not exactly friendly enough to maintain the conspiracy of the American corporations or whomever else you believe is behind this.

Because these devices run on technology and not on magic we can also observe their behaviour and reverse engineer them. We can see when and what is transmitted from these devices, we can observe individual components, we can observe apps.

I find it very unlikely that such a privacy violation and grand lie can survive the scrutiny of mortal enemies of the corporations that are allegedly behind this.

What's more likely is that your unscientific observations are flawed and you are biased to confirm your "theory" and write an article to make some ad money and fame.
Well, exactly, that is in another way, what I am stating: rational self interest is inherently unmeasurable because "rationality" is not something that can be objectively counted. So at any time one should assume that people act in their "self-interest": what at the time they deem "better" (in whatever their will decides is "better" at that point). I am not arguing that people never change or never act wrongly or never do things harmful to themselves. I am arguing that if one wants to "objectivize" their actions then one should assume that their decisions show their interests and their values at each time.
If you're working in a largely co-located company, where video conferences are an uncommon occurrence then this probably fits.

In the context of this conversation around remote only companies though, everyone is going to be set up to be able to properly participate in a video call - that means making sure everyone has a decent internet connection, microphone, and camera at home. When people aren't at home tools like Zoom have the ability for them to dial in to conferences on a regular phone which deals with the remaining problems.
We have a kettle that can be set to temperatures between 60°C and 100°C. I cannot recommend this enough.
Hi Ruphin, Frits from Qeys here. I highly appreciate your comment and I totally agree with what you're saying. Not being able to reach our servers should not break your app.

The small piece of code is designed to only invalidate and deny access when a valid response is returned from our servers.

That means that if our service is unreachable you won't be notified about invalid use, of course, but the app assumes the positive and allows everyone access until a valid "denied" response.

Did you experience the contrary, or was this simply not clear from what you read? In that case, I'll try and add that to the FAQ section.
Continuous Security Delivery
Honestly for resource efficient Git service people should use (and I've seen it shared places lately) Gitea or Gogs. Gitea is a fork of Gogs but picked up pace and has multiple maintainers who care a lot for it. It uses minimal resources and looks good. $2.50 server on Vultr with 512MB RAM should cover it.
Of course: that is why Adam Smith speaks of people and not corporations. And I was speaking of people as well.

Corporations are a different subject matter.
How many days at a time? I used to drink a lot of coffee on weekdays but none on weekends and didn't notice it making any difference. Stopped drinking coffee altogether and after a few days I was really noticing the difference, and it took about two weeks for the withdrawals to wear off.
Very true. I was not really on the tech side, but often found myself correcting the code of some very expensive developers. Simple things, like not realising when things have been passed by value or by reference etc. Most developers lack the passion to be truly great at their work, because they consider it just a job. It's fair enough, but every so often you see a developer write effortless technical poetry with their code - they are a rare breed with innovation in their blood.
> are NOT listening and recording everything

Yes, I can definitively say they do not record everything. Listening however is hard to prove conclusively.
That one specifically is just a Photoshop'd Fallout "Please Stand By" test card:

Bethesda 'original': https://www.theworkprint.com/wp-content/uploads/2015/06/plea...

EFF 'version': https://www.eff.org/files/2017/08/01/no-downtime-1.jpg
If you don't understand the broad idea of my statement, then sorry to say this my friend, you are a fool.
After looking at this it appears that you are just using this thread to promote a library that doesn't really fill the same problem space but does have a couple of buzzwords in common.
Or a CSP header server side. But still something the average client will miss, at least at first, and trip the alert.
> The case likely will not result in significant monetary penalties for the companies in question; even if fines and damages totaled tens of millions it would be a drop in the bucket for the tech giants.

> But deliberately skirting laws governing political spending and public disclosure is rather a bad look for companies under especial scrutiny for systematic dishonesty — primarily Facebook.

So they'll lose face, but not the books ...

Seriously though, come on. I'm getting increasingly cynical about this. This is business as usual in the US. They're not going to self-regulate themselves a conscience.
Walmart, Visa Resume Lobbying Battle Over Credit-Card Standards
>You don't find Kubernetes needlessly complicated? Do you actually need Docker or Kubernetes?

They make life easier in my experience especially if you need something more than a simple self-enclosed application. For what I do we need Apache Spark, Airflow (which in turn uses RabbitMQ and Celery if you want to scale out), possibly JupyterHub (which also needs some way to spin up child servers), and then the application code itself.

I've wired some of it up myself in the past and it's a massive pain in the backside with lots of edge cases (Spark used to have a shitty massive python script for cloud deployments which always was missing something). Deploying it on Kubernetes with Docker on the other hand is rather simple. I basically trade the complexity of Kubernetes/Docker for the complexity of custom deployment/scaling/management code. In my experience, the code quality of the former is going to be much much higher than the code that an internal DevOps team outputs.
>different cultural definitions of "yes"

https://i.imgur.com/gByDqFX.png

There's no 100% accuracy in weather forecasts so a mistake is understandable. Asking you if you finished your task and getting a "yes" when you haven't finished it is outright lying.
The general assumption is someone probably would notice suspicious traffic from the device, or an unexplained power draw, or even undocumented parts.

But I don't know either, haven't checked myself!
Custom web design and development for $100 a month
I think most web developers have been very wary of Google and Chrome since 2010 or so.
Do you know of any books that take a different approach?
This kind of clause is usually known as a "DeWitt clause"[1], after a University of Wisconsin professor who benchmarked a couple databases, including Oracle (which performed poorly). Oracle/Larry Ellison didn't react well to that and decided to forbid benchmarks.

[1]: https://danluu.com/anon-benchmark/
I don't think it would go down very well with Spain, and perhaps Italy, either.
Isn't that only if you have a margin account but cash accounts aren't required?
Take a look at https://github.com/Feh/nocache. It works effectively for reads. I don't know about writes.
No amount of writing in my life prepared me for the amount of writing I do as a remote developer. I probably write 20+ "pages" a day if you count all of the documentation, emails, chat messages and GitHub discussions I write. Luckily for me, I love writing.
I've worked remotely for 10 years. This happens with new setups, but if you're doing it daily, it stops happening.

I don't do standups anymore, but at my last company, they often took about 5 minutes from dialing to hangup.
Great documentation!

I particularly like that you mentioned "NAT Traversal" as one of the benefits of hidden services.

I think that's an overlooked feature that would in many cases be enough of a reason for one to use them, even without caring for the added privacy.
Yeah, but if you have a personal goal of something like "implement some machine learning" and a year goes by where there's no applicable use case for machine learning, then you're SOL. It can be worthwhile to mention this as a personal goal, but if you make it a goal post for career advancement, you're likely to fail.
I worked with a team remotely for 3 years, solely relying on Google Hangouts for video and an occasional Zoom meeting. The video/mic/hardware problems are _incredibly_ rare.

Being late or grabbing coffee instead of starting a meeting are culture problems at a company, not problems with the medium.
Serverless service discovery
I absolutely agree,
plus asking "How much of task X could you already do?" is perceived as less aggressive than "Did you finish task X already?".
> your best bet is nested VPN chains

It is possible to set up an anonymous DigitalOcean account funded by a Visa gift card and associated with an anonymous email provider.

Perhaps the best privacy-preserving tool would be a pool of anonymous, public accounts to public and private VPN services, and a client app that dynamically builds and connects via nested VPN chains.
I think if it were true, someone would have leaked it by now.

I think what is happening is the effect where you discuss buying, say, a new Ford XX car and then when you go for a drive you see them everywhere.
You're totally right. However, in the few cases that my software was copied, the pirates were far from skilled enough to dig into compiled JS and find out what was happening. At least, they would start with a simple copy-paste and try to run the copy. If it were to happen again now, I would be notified at that very moment and I can take action accordingly.
What Product Managers Can Learn from Digital Analytics
Reminds me of a scenario which leads to "needless" abstractions being created in a project so the absolute on/off dependency on a third party becomes it's own micro-service that the rest of your app calls with an `if (server.isOnline) {do_stuff();}` which leads to massive confusion for developers later wondering if there was really a need for such abstraction or is a mid-level dev was engaged in resume-driven development...

Issues like what you've described -- whether real or perceived -- are the root cause of many code smells.
Nowadays every webpage downloads 2 megabytes of framework JS and css preprocessors and analytics trackers and then pegs the CPU for a few milliseconds to display a paragraph of text.

If the page actually does anything on top of that the problem grows quickly.
I can't speak for Datatomic Ions and Clojure specifically, but there's a bunch of tooling options around "running" AWS Lambda locally. The most popular last time I checked was Serverless (https://serverless.com/)
What’s new in Apache Spark 2.3?