skysight-inc/HackerNews huggingface dataset:
Ask HN: Things to Keep in Mind Reporting Direct to CISO?
I just got offered a new job.

I will report directly to the CISO (2 steps from CEO). I've never reported to someone like this before, and have primarily reported to a mid level manager.

What things should I keep in mind?

Thanks!
How We Built a Database from Thousands of Police Reports
When did Norway become part of the European Union?
I guess so?

My father has it too (and my grandfather had shit hearing), so I think it's in part hereditary. Years of construction work with power tools and target shooting (often without hearing protection) hasn't helped though.

I've had tinnitus since as long as I can remember. It doesn't bother me, I usually don't even notice it unless I'm specifically thinking about it. I've had it so long that I don't actually have a baseline of what true silence is, my brain usually just filters it out (although depressive episodes and drinking often bring it out).

I've read stories about people who've been driven mad by their tinnitus. Thankfully it barely affects my life. Like, now that I'm thinking about it, I can hear it above everything, but when I wake up in the morning I'll forget I have it.
NIST Git repo
I read that license line as that you can't make it available for the benefit of others, not that you can't use it for the benefit of others. But of course that's the logical interpretation and the only one that matters is the worst possible interpretation. I'm not a native English speaker nor lawyer, would be interesting to see another opinion on this.
> Unless you have existing ties to the place, it seems hard to believe that people will move in droves; although I can understand a few people moving.

The opposite is also true. You can grow so bored of western culture that Japan become interesting with its different way of life. It is however quite a bit "western" in some ways (compared to China, some of the middle east, etc.) so moving there can sound like a challenge without being scary.
Hey, as someone who is just observing this and doesn't have a dog in the fight -- thanks. (I am assuming that -- although you didn't say it -- this is a full disclosure of ALL your conflicts of interest.)

I am not quite sure what I believe about when it is appropriate to accuse someone of having undisclosed conflicts of interest. But I am certain that the best way to respond to such an accusation is with a full disclosure of all conflicts of interest. Regardless of whether the accusation was appropriate, the disclosure ends the issue. And conflicts of interest (to one degree or another) are perfectly normal and do not invalidate a person's opinions or eliminate them as a useful contributor to the discussion.
FWIW, "the padlock is enough" is quite the opposite of Google's position:

https://blog.chromium.org/2018/05/evolving-chromes-security-...

and in fact one of the main reasons is that use of HTTPS is far too little information for the browser to affirmatively indicate "This site is secure and trustworthy." So they are planning to get rid of the padlock. (Use of HTTP is enough for the browser to affirmatively say it's insecure, though.)

So I think Google understands that one of the consequences of pervasive HTTPS is that the padlock is at best meaningless and at worst misleading, as we saw here.
You may be right that targeting the producers is a more-effective strategy than targeting individuals, but you claim too much. The consumers are only in power because individuals keep giving them money. And targeting the producers often works by making their clients aware of the suffering (college campuses went cage-free when enough students complained to their college that they didn't want their tuition money purchasing suffering).

In the end -- why not both? As an individual, over the course of your lifetime, if an American eats even 50% less meat than typical, they would produce a lot less pollution and a lot less suffering in the world. Meanwhile, they'd still be eating more meat than historically normal. Win-win-win?
It's funny, I posted this same thing on the 1/0 = 1 thread the other day. It seemed to me that the logic was linked.

https://news.ycombinator.com/item?id=17737175
"These findings suggested that damage to the corneal epithelium was not induced by corneal dryness alone, but by exposure of dried corneas to MMW-induced heat to above body temperature."

So as long as I don't microwave my corneas with my phone, I should be alright. Thanks!

edit: hell, even the researchers say this themselves:

"It is an important finding that corneal epithelial damage is induced by MMW exposure, accompanying very strong pain, although it is cured within 1–2 days after injury. Since humans blink more frequently than rabbits, exposure to these levels of MMW is unlikely to induce corneal epithelial damage in humans."
I pick at my facial hair whenever I'm reading or thinking, it's a big problem for me since I like having a beard. I have to shave it every so often because it gets scraggly with bald patches of plucked hair. Thankfully growing facial hair is my super power so I typical have a full beard again soon enough.. only to start the cycle all over again. When I shave it off I'll pluck at my eyebrows instead which take longer to grow back and patchy eyebrows look more weird (to me) than a patchy beard.

I've tried all sorts of ways to stop but the activity is sub conscious and by the time I'm aware of it its too late.
1: Cleaner and more concise. Perhaps safer, as the less code there is going to performing a task, the fewer places I can make a mistake. More importantly, it directs me to think about my problem from a higher level of abstraction.

2: I do mix both paradigms, so I’m not stuck without imperative features. That being said, there are times where I feel like my attempts to move a concept into FP forces me to make some less than ideal choices to fit it into the paradigm. If those are in inner loops, I forgo functional programming to do precisely what I need. (For example, managing exceptional cases or heterogeneous actions can be awkward.)

3: I would have used them more. I’ve always been a fan of comprehensions and map c/o Python, but my code would have been more efficient and concise had I started earlier.
The additions of cppitertools, range-v3, <algorithm> and <functional> make functional programming both easy and efficient in C++ in ways it was not prior to C++1[147]. I think Python made fp accessible by putting it in an imperative language which is concise and readable.
More Effective Transfer Learning for NLP
From the guideline: https://news.ycombinator.com/newsguidelines.html

> In Submissions

> Please don't do things to make titles stand out, like using uppercase or exclamation points, or adding a parenthetical remark saying how great an article is. It's implicit in submitting something that you think it's important.
I mean, the biggest failure of prediction is that women seem to laugh at salad rather than champagne.

It always seems as if we're just 50 - 100 years from "the future".

Lost in Space takes place in 1997 when we were about to colonize space. Or as we know it, 21 years ago.

The original Blade Runner takes place next year. When we'll have space colonies and humanoid androids to work them.

And according to Star Trek, we've weathered the Eugenics War and have 31 years before World War III and the post-atomic horror. But in just 45 years, Zefram Cochrane will invent the warp drive.

Not to mention the countless flying cars we'll have as we go eat all of our meals in pill form.
What Drove Sigmund Freud to Write a Scandalous Biography of Woodrow Wilson?
I wish lawmakers would tackle these kind of ridiculous provisions in EULAs. When you purchase something, you own it, and you should be able to do what you want with it.

You shouldn't have to jump through absurd legal hurdles to use and talk about something you legally purchased. These aren't national security secrets for god's sake.
Attempted Hacking of Voter Database Was a False Alarm, Democratic Party Says
I got in just by pinging someone and asking for a job, leading to a 9 year stint at MS China. If you have talent/experience, you should be able to find something in China, trying foreign companies (google, Microsoft, IBM, SAP) is an effective strategy for getting your foot in the door, Chinese companies are less approachable.
Well, that makes you a colleague who I would not want to have around. Someone who only cherry picks his duties and cannot work beyond greenfield projects.

I agree that work should produce happiness. And I agree there are places where the work is not everyone's fit (e.g. bureaucratic customizations). But being not able to cope with bad code is a no go in my opinion.
I'm still skeptical. I have one pair of shoes for day to day usage, one nice pair for dress up, on pair of snow boots, and one pair of slippers. Each has lasted me many years, and I live in Wisconsin which isn't known for having anything like California's weather.

Climbing shoes on the other hand I need to have resoled every 6 months or so.
That sounds like top-down improvement such as 'agile' development, not bottom-up improvement like hacker culture. That said, I'm sure there are plenty of Japanese who are curious and self-motivated, and there are plenty of non-Japanese who don't want to put in any individual effort. It's just that the cultural narrative told by each society highlights different things.
Hahah yes, for years I saw these pictures (https://en.wikipedia.org/wiki/L5_Society) and developed unrealistic expectations of human space exploration.
I think you'll find that a lot of people on this site—from lots of political leanings—believe there's a wide gulf between "This behavior is a bad idea and we should use social mechanisms like debate to discourage it" and "This behavior should be illegal and we should point the government's monopoly on violence in your face to make you stop."

The flip side of the defend-to-the-death quote is that caring about someone's right to speak, even caring about that position being well-represented, doesn't mean you have to agree with what they say.
Not really, though. About 2X as many Americans live in Canada as Canadians living in America, accounting for a much larger share of the Canadian population than v.v.

According to the Canada 2006 Census, 316,350 Canadians reported American as being their ethnicity, at least partially. There are also between 900,000 and 2 million Americans living in Canada, either as full-time or part-time residents. [1]

According to U.S. Census estimates the number of Canadian residents was around 640,000 in 2000. [2]

According to Stats Canada, the trend has reversed over time as the absolute number of Canadians living in the US peaked in 1930 at 1.3MM, which would be about 12% of the Canadian population at the time, down to a current 1.8% [3] On the other hand, Americans in Canada acount for 0.66%. At most it's a 3X discrepancy, not 10X, and it's largely due to the draw of the US economy. What would be more interesting to me, IMO, would be how many return home.

By all means, have at them windmills though, at least you've got a good view from on top that high horse ;)

[1] https://en.wikipedia.org/wiki/American_Canadians

[2] https://en.wikipedia.org/wiki/Canadian_Americans

[3] https://www150.statcan.gc.ca/n1/pub/11-008-x/2010002/article...
"I have this incredibly tasty beef and noodle casserole that we've been making in my family for generations."

(... reaches into pantry for box of Hamburger Helper ...)
Why not just embracing simplicity?

I have a golden rule for my systems. After booting into X and opening one terminal with htop and hiding kernel threads, everything should fit very comfortably in one screen. This constraint forces yourself to have a very simple setup. A few daemons, a window manager and a terminal. I do the rest of my computing in Emacs and Firefox.

I have several Arch or NixOS setups that could work on a 128 MB RAM setup, excluding Firefox. Plus, if something breaks, I know how to fix it.
Scala Up North 2018
Hurry up ! Standar tickets sales end on Aug 29
Thank you for sharing this. I feel uneasy about having used the word "schizophrenic", especially after reading what you wrote. It was a bit of a nasty tactic on my part because it attracts attention (unfortunate that the internet implicitly incentivizes that).

In my regular in-person conversations I don't think I've ever used that word. I'll be more sensitive next time online too. Thank you.

As a substitute -- can you think of a word that would very swiftly capture the extreme cognitive dissonance people surely must have to engage in the behavior they currently do?
I'm guessing many others here sort in a similar fashion to myself.

I use a script to filter only Remote jobs with a tech I'm interested in.

I then filter first by those who include a salary.

This gives me a reasonable list.

Developers with experience who've made themselves available via LinkedIn & other sources get at least a request every couple days about a job. At that point, the question is which of these are interesting enough that I would consider the risk of leaving my current place & how much work does it take to apply?
2FA authorization needs JS if you want to use it conveniently, otherwise you would have to refresh all the time
Spent many years of my youth chasing loud hardcore shows. I remember distinctly the show that left me with ringing for two weeks, that mercifully subsided. From then on I wear plugs, even when doing things like mowing the lawn.

Protect your ears man.
They didn't invent Google and Facebook, but they're responsible for transistors, lasers, Unix, C and C++, CCD digital image sensors, long distance microwave radio relays, the first transatlantic phone cable, MOSFETs, communication satellites, and cell networks.

Not modern internet services no, but all of the infrastructure it's built on is grounded on theirs.
That's true, but it might also turn people off reading the application when other stuff is already not great.
violent aliens are much closer than you think ;-)
> On Intel's side you have features turned on and off for different i3/5/7/9, AVX speed difference etc I don't even want to bother looking it up.

Seriously, Intel has always been way too confusing with their processor lineup. AMD has always been straightforward: leave in the kitchen sink on nearly every CPU and performance scales with price. Not linearly of course, but it's much simpler to choose an AMD CPU.
I love this story and it underscores something I've come to believe very strongly as an engineer:

Complexity is evil.

The benefits of adding complexity rarely outweigh the downsides, especially when the "embodied energy" of both creating and maintaining that complexity and the follow-on complexity it adds to other systems is considered. Making things a lot more complex to save energy is usually a wash (or worse) because of the energy you spend creating and maintaining complexity.

Complexity usually creeps into systems as a result of piecemeal solutions to problems, marketing driven feature-itis, or attempts by engineers to be overly clever and show off. The latter is incredibly common in IT and programming.

http://www.ariel.com.au/jokes/The_Evolution_of_a_Programmer....

Complexity is evil for efficiency, but it's even more evil for security. The number of states a system can enter is an exponential function of the number of variables and linkages in a system. More complex systems are just exponentially more likely to have vulnerabilities for unavoidable combinatorial reasons. The motive for complexity addition doesn't matter, meaning that complexity increases to mitigate security can easily backfire. Furthermore as systems become more complex they become too big to be analyzed, making it much more likely that major security issues are hiding in plain sight and waiting to be discovered. Black hats always have the advantage here because when you attack a system you get instant feedback about whether your attack worked, while security auditing offers no feedback as to whether or not you've closed all the holes.

Complexity tends to accumulate until systems collapse. Getting rid of it is very hard, since users/customers start depending on every feature and nothing can be removed without breaking something.

The x64 architecture seems to be teetering on the brink. AMD's architecture seems better but we'll see.
I've been a long-time member of a smallish but active forum (I won't post the address, maybe several hundred regulars). We've had very rational discussions and good exchanges of views between (U.S.) left and right in the 15 years I've participated.

However, since the presidential election, things have devolved into sheer anger. On the right, it's defending indefensible behavior (IMO, obviously). On the left, it's grasping more and more ridiculous legal theories and overreacting to trivial culture-war provocations. On both sides, the tit-for-tat has increased exponentially.

This forum has some very rational people who (outside of the politics threads) are very intelligent and sane on many subjects. The fact that this group can't manage it tells me that right now, I don't think anyone can.
Google Japan is supposed to pay decent as well.
I have a raspberry pi where I installed Home Assistant a few months ago when I moved into my new home. I did a little bit of messing with it, but stopped while waiting to have more devices that could communicate with it.

What are some of the more useful things people have found they are able to accomplish with this, and what was the best way to go about them?

Ideas I currently am toying with: presence sensors to turn lights on/off, somehow measuring the voltage used by appliances (washer/dryer, dishwasher, etc) to notify me when they finish running, a camera in my backyard that uses basic image processing to tell when my dog squats and I have to go pick it up.
5 Programming Languages Doomed to Extinction
Neural network will enable successive Alexa queries without repeating “Alexa”
Hmm. Using the site that was the first Google result[0] to test myself and I could never get anything below 220ms. Could you be misremembering by a factor of 10?

[0] https://www.humanbenchmark.com/tests/reactiontime/
In the meantime, use an issue tracker to keep a handle on all the stuff you actually need to do to bring this code up to speed. If a test needs creating, add an issue for it. I'd personally not keep this in a tracker that your manager uses to track metrics, but keep it separate and build it up.

If it's really a rewrite job, you'll end up with a lot of entries in there of varying size and complexity. You can start moving those issues across to whatever issue tracker your boss does keep an eye on as you get to them.

That way, you're not just walking in, announcing that the entire lot is garbage, and wasting time rewriting it all (which is what the business will think you're doing if the current implementation is at least vaguely functional), but you're gaining familiarity with the code and compiling a decent sized todo list that you can present at the appropriate time, as well as a list of fairly quick wins that you can get done when you have some downtime.
Are Files Appends Really Atomic?
considering all the downvotes maybe I haven't really explained the problem properly or maybe I deserved it idk. Here some points that I should probably have made clear instead of writing a snappy one-liner without substance.

Banning Huawei isn't going to increase the security or reduces the backdoors. I've been working many years for NEVs and later started a recruiting firm that did OSINT in this domain. First of all Lawful Interception is (as the name implies) legal. Despite the legality and the standardization in ETSI/3GPP the actual implementation of these black boxes is extremely shady & obscure. Siemens COM (now part of Nokia since some years already) for example has outsourced the implementation to their Milan site, where it has been further outsourced (using 2 intermediaries in a cascading supply chain) to a tiny Italian firm that does contracts mainly for the OEMs but other than that has zero vetting of their people (no security clearance etc). Code isn't reviewed and in fact the OEM didn't even have access to the code. I'm bringing this up because the problem isn't only because it's China and as I said has anyway no positive impact on increasing security (just because the company is European or US doesn't make it more trustworthy). Nevertheless if I get spied on (illegally) then I'd much rather have it done by my own jurisdiction which doesn't come after me and my family than by some thick-face black heart dictatorship in Asia.

How Huawei became so successful in EMEA?

#1) access to unlimited funding from Chinese gov. Huawei is financially backed by the state and able to cut out competitors with aggressive pricing in RFP/RFQs (even it doesn't financially make sense - "as long as it hurts the competitor it's a win")

#2) willingness to bid for projects in highly corrupt countries where a suitcase of cash changes hands using shady consultants, and ability to satisfy questionable requests from war-lords & repressive regimes (tailored Lawful Interception & DPI etc)

#3) bribing is illegal for companies located in US or EU (Nokia, Ericsson, ...) but pretty much a non-issue in China. It goes hand in hand with conducting business with the regime.

#4) Stealing the IP of competitors: Either by placing sleepers in other firms or (the easier way) by coercing and leaning on employees of Chinese origin working for competitors.

#5) employs workers under despicable conditions (complex outsourcing layers to ensure bad-PR never directly hits Huawei - questionable supply chain is also bad security)

Again I'm not anti China and I'm happy to rip into CISCO, Juniper, Nokia & Ericsson (and I have done so in the past on plenty occasions).
There are two major differences between OCaml and Haskell.

First: Haskell is a pure functional language, meaning that side effects, IO, keeping state, all that must be dealt with inside the type system, which while undoubtly clean and powerful, it makes it often cumbersome to do things that should be quick and simple. OCaml, on the other hand, is pragmatic. It promotes and facilitates functional programming but it also let's you easily "drop down" (so to speak) to an imperative way to write code. You have mutable variables, imperative loops, you can perform side effects anywhere, etc. As a rule of thumb, you can write fully functional code, yet sometimes when the best way to write a certain thing is imperatively, you can do so with no hassle.

Second: Haskell is lazy, and OCaml is strict. This makes it much easier to reason about performance and makes for much more predictable code. At the same time, it has first-class support for laziness when you do need it, but you have to explicitly "opt in", so to speak. Haskell also lets you force strict evaluation, but you will find it's much easier to build laziness in a strict language than the other way around.

There are also other important differences (like typeclasses vs functors) but I feel these two are the biggest ones.
I'm talking about full-time personal income. You are right that household income, which includes households that only have part-time income (and other sources of income, like pensions), comes in at around the same amount.