skysight-inc/HackerNews huggingface dataset:
Bear in mind that this makes you an pretty expendable employee, if management decides they need to get rid of people, you are a prime candidate.

One of my past employers was a consulting firm that would have people "on the bench" for weeks to months at a time between clients. When the time comes to get leaner, those who have been "on the bench" the longest are the ideal ones to get rid of, because they're the ones who will hurt the least to let go (specifically because there's leftover responsibilities that need to be assigned elsewhere or silo'd knowledge that may be lost).

I'd be on the lookout for something else.
It depends on what subject area. Tenured or not, folk who depend for their salaries, pensions and grants on funds provided by the taxpayer might perhaps, understandably, be much in favor of big government and state, generally supported by the Left. Not many right wing academics around.
JWTs are good for a bunch of things, one example being when you do NOT want to hit the database on every request, to speed up latency.. eg. in high-throughput IoT setups where you want to validate or discard the request before touching any DB at all
Most people will be disappointed by the second edition of “Refactoring”
The article mentions 100k page views being ~24MB extra a month, which means we are talking about a token of ~240 bytes. So for a single user you are talking about several kilobytes if they are multiple views to the server, which is now several orders of magnitude less than your original estimate.
And yet, if you ask anyone in the street about what they think about "complex systems", I bet most of them would have a negative sentiment. (if anyone knows a study that goes in that direction, please share).

A smartphone is arguably a complex system, but there are thousands variants of them, and new evolutions appear every month globally.

To me, the whole military industry looks like an hoax (not solving any real modern world problem), and the citizen pays it with their taxes.
Subjective I suppose. In high school I had a school bus ride about 40 minutes long every day to a trade school-type place you could elect to go to instead of taking some classes at the high school. I liked using the time for either web browsing, games, sleeping, or homework. I would've surely found cycling less enjoyable.
Google provided identical Feitan keys for Advanced Protection as recently as a couple of months ago[0]. AP works with any FIDO key, but that isn't what we're discussing, we're discussing that these are re-badged Feitan keys. Which they most likely are.

[0] https://i.imgur.com/5EWh0jx.png
1/3rd a kilobyte to the user per page request. The MB and CPU time are to your server. Over the entire month. I'll pay that penny.
The primary information available on their website seems to be associated with holographic data storage. They had a prototype working in 2010 [1].

Anyone familiar with this technology, and how it may compare to, say, SSDs? A 2012 article seems pretty down on them [2].

Akonia also simply acquired the assets after InPhase filed for bankruptcy in 2011 [3]. If so, being purchased by Apple has to be a big win for the Akonia investors!

[1] http://akoniaholographics.com/holographic-data/index.html
[2] https://www.techradar.com/news/computing-components/storage/...
[3] https://en.wikipedia.org/wiki/InPhase_Technologies
I don't think there is a single malicious force making google products sucky on browsers other than Chrome. However, I'm sure they do poor testing (any at all?) in Firefox, and are quick to adopt extensions to HTML/CSS that they are trying to push as standards. 50k people not caring about a thing is a powerful force.
The Book of the Underdog will be SF Disrupt 2018 next week's conference
A free and open internet is a great equalizer. Powerful people don't like that because it can cause them to lose power. I think it is actually that simple.
This. Often I've had discussions about APIs that take 100ms or more to return a result where the person writing the API and even the product manager do not understand that this response time is likely too long. Going back to the 1960's and the PLATO system, engineers recognized that humans need a response in 500ms or less whether visual, audio, or haptic, to inform them that the system received the input. Therefore, to give a user that same 500ms response time today across the Internet, not just across the room to the mainframe, requires understand the entire latency chain. One approach is to consider that any interaction has a 500ms budget which cannot be exceeded and then start subtracting out the various latency components. Round trip time across the USA, 150ms. DNS, Connect, HTTPS negotiation, TCP setup, etc.. 25ms. Suddenly your down to to 300ms of remaining budget. Lets assume that 5 service API calls need to be made internally to provide the response, 300 / 5 = 60ms avg budget per API call. I'm going to tell you that with today's CPU/RAM/SSD speeds, 60ms is a huge amount of computing time for a reasonable request.

tl;dr, remember the 500ms overall budget for the humans at the end of the pipeline. No one anywhere said I want my response time slower.
Question for Advanced Protection and Mac users.

Have you managed to authenticate your Google account with your U2F keys on your Mac?

If you have, please help the rest of us out, I get an error:

> You can only use your Security Keys with Google Chrome.

Here's a StackExchange question for some karma: https://apple.stackexchange.com/questions/327491/how-do-i-us...
And they are also under EU law and jurisdiction.
From reading the title, I thought Mozilla were going to set telemetry, Cliqz spyware, Pocket ads, etc. as opt-in. Sad that I was wrong :(
I've got a favorite hobby horse which is an example of this dynamic: The competing administrative bureaucracies in the health care administration, and health insurance, industries.

Both of these classes of (so I claim) drones think they're doing good work: health care drones are trying to navigate the regulations and get care for their patients. Insurance drones are trying to navigate regulations and keep costs down.

But if you zoom out a bit, so your domain of analysis is "The Health Care System", you find that these so-called competing bureaucracies are a large organ whose function is to make it difficult to accurately assign costs to services. As long as those prices are hard to know, they are impossible to optimize, and so the prices stay exorbitant.
I decided a while back to shift my "news" consumption to reading print journals -- I have 2 or 3 quarterlies that I go pick up at Barnes and Noble. It keeps me up to date on current affairs, but provides well thought out commentary that "up to the minute" journalism lacks. At least well thought out enough to merit putting on real paper.
If you mean the airlines when you say customers, I would say you are correct. Planes are flying slower these days because it saves fuel and one can offer a lower fare. If you mean the people who fly, when you say customers, I would say that is incorrect. People have no idea that flights can have different lengths and the only way to search for fares is by destination, number of stops, and price. It would be great if airline ticket buyers had search parameters for leg room and flight time so that those very important parameters could be selected for. Otherwise evolution will continue to force slow flights and smaller seats.
New York Times Sunday edition? The paper version is $5/week delivered.

Or NPR's Weekend Edition Sunday: https://www.npr.org/programs/weekend-edition-sunday/
Available in most radio markets or online.
Ya bro and once they get acquired you'll be one of the first that gets to congratulate the newly rich founders.

Next day your out of a job.
State and municipal taxes are much higher than a significant number of USA states and municipalities. Federal taxes are progressively based on income, which is higher in the Bay Area but for this reason its contribution to overall welfare is not that much higher.
There are borderline content that’s hard to judge, but also tons of content that’s undoubtedly fake. For years there have been tons of articles floating around WeChat (Chinese social network) that’s completely made up stories and yet causing bad influence. As an example, there was a very popular article claiming seaweeds sold on the market are often made of plastics. Eventually the author of was identified and basically said that was what he felt like, but the impact of this article was real.

The government is in the best position to stop this by establishing laws against creating and spreading such misinformation.
I've been working with ScriptEd in San Francisco and it's also been awesome! It's really special to be a part of their program and see the impact they're having on local kids and community.
Precisely - since mammography is the standard "counterintuitive Bayes rule" primer, I remembered those numbers don't support wider screening.

I'm not discounting the possibility of a useful role for Watson in wider screening, but it's not clear to me where it would be. If it happens after any kind of extensive examination, doctor-hours are being committed regardless and there's little gain. If it happens at a population-level screen like mammograms and colonoscopies, "almost as good as oncologists" isn't enough to add any value.
I use Firefox on Windows as my main browser. I haven't noticed any Youtube issues. I believe I did run into them running Firefox on Linux, but it's been a while.
Study reveals majority of Indians accept evolution
If you have your tokens take more than an hour to expire, you're doing it wrong.
He -does- indicate "For storing a simple user session, that is a ~51x size inflation on every single page request in exchange for cryptographic signing (as well as some header metadata)."

So he admits that the signed part is the tradeoff. But I totally agree with you, barely mentioning that, when that's the whole point (JWTs are used for authentication/authorization, not just easily faked identification), is incredibly disingenuous. Never identify users on the client side with something that isn't cryptographically secure. Somewhere, you or another developer will end up implicitly believing that ID is trustworthy, and you just introduced a critical security flaw.
My bet is on there being less friction at the onset. How quickly can you get a cross-platform prototype up as a web app vs Qt?

I'd also wager there are more C++ pitfalls than JS pitfalls (or at least the JS ones are less severe/obscure). A less experienced engineer would be able to better maintain the web app than the C++ one IMO. This increases the bus factor.

The people who make the decisions care more about those things than the layers and layers of expensive abstractions that prop up web technologies, and how much electricity/battery life that consumes in aggregate.

I'm working in game dev. Most of our tools are native UI or in-engine. The heaviness of web apps frustrates me a great deal, but I get why things exist the way they do.
> Firefox will strip cookies and block storage access from third-party tracking content.

I'm curious how this will work with things like Google Hosted Libraries[1] (for just one of countless examples)?

The site will stop working if you block the request, but the tracking will keep working if you don't block the request.

[1] https://developers.google.com/speed/libraries/
well, i was certain they wouldn't do that, but yes, i want to see how this car behaves in a real crash test.
If your using a salt, just change the salt and deploy. We frequently do this and it works great. All existing tokens are expired.
Yep, I switched and use that every day.
Becca you do amazing work! So impressed with you and ScriptEd's trajectory the last few years. Keep it up!
iOS app SwissTasks: unified task list, notes, goals, emails
I know it's impossible, but I legit hope the microphone jack comes back...

Not looking forward to handing my 7's over to my kids to use as iPods and having to deal with stupid dongles. I may have them just keep their 6's.
As a riot.im user, I hope it will become a bigger player in the open source space, I am a bit sick of slack for various reasons.
Deepfake Videos: How to Detect Them? Blink Rate?
My employer just started using Okta and I find it hard to take anything they say about security seriously after seeing some of the obvious bullshit in the immediate user-facing aspects of their product:

- allowing security questions to reset passwords

- allowing sms resets of passwords

- allowing sms 2-factor in combination with sms resets

I understand that my company is largely at fault for enabling these, but it's scary that they're even options. It's also pretty stupid that their password requirements are 8 characters, mixed case, and at least 1 number.
I concur with the author about session usage of JWT since it has little value (and if you did, just use it for it's signing feature and still have it just contain a random session identifier). The reasons for defending it in that use seem to be about what's not bad, but rarely about what's good.

But JWTs have value for API tokens as they can embed an expiration date for the caller in a known format. But the idea of stateless JWTs with a bunch of valid data for use on successive calls by the server is a bit much. You should contact your auth store of record per invocation for various reasons.

Like you said, be aware of the issues with chosen sig algorithms and be exact on what you choose and just leverage JWT as the format, not blindly following the generation libraries without investigation.
In this case the article is talking about 24 MB of additional bandwidth used by the server to serve 100k pageviews using JWTS
Those people aren't students or faculty, so unless there's another category, they are Administration.

Administration sounds silly, but remember that in the business world, we don't have Administration, we have General and Administrative. There's a lot of stuff in General. Schools apparently call that Admin for some reason.
I was sad to see Tuft and Needle get acquired by Serta. I bought 3 TN mattresses from their post here, and I love them. I vociferously recommended them to anyone I know. I really doubt their quality will continue to be maintained now that they are in the grips of Serta, but I guess next time I am in the need for a mattress in about 10 years, I'll check.
Howdy HN!

I built this jobs board for myself and my contractor buddies after getting tired of being offered below market rate.

The idea is simple - aggregate contract jobs and analyse their rates against the market so that it's easy to see if they're well paid or not.

It's very much an MVP, so all feedback/questions/ideas welcome.

Chris

---

Update, stack info:

- React, nextjs

- Firebase Cloud Firestore

- Algolia (with react-instantsearch <3)

- Heroku
I ceded my management opportunity to a lady 10 years my junior, and she became a spectacular manager, far more effective than I would have ever been.
What about sand? Or talcum powder. I think the concern is less about cleanliness or hazard, and more about finding a rational, normative basis for seeing something unusual on an X-ray.

Questionable items with no obvious cash value simply go away. Off the plane.

It probably is the smell, the charcoal and trace chemicals that mess with swabs and dogs.
I worked for a company where we had a 100-150 microseconds order latency. We had to tune jvm to extremes. But it is very doable to optimize Java gc for low gc pause times.
Always check the breakdown of where the money goes prior to donating to a charity. Try to find organizations with minimal admin overhead that spend the most of the money on the actual cause.

Charity Watch is a good place to check: https://www.charitywatch.org/home
What Airbnb really does to a neighbourhood
In case this statement sounds absurd, my mother grew up speaking five languages concurrently and learned her last, English, starting at 12. Even now in her 80s she retains and uses multiple languages. But she grew up in an environment, Malaya of the 1930s and 1940s where being such a polyglot was not only unremarkable but would not have been considered any sort of achievement worth mentioning. I have one uncle there whose FB posts always mix two or three languages (one he learned after marriage, in his late 20s), as do his friends when commenting.

What I find sad is that though over the years I have learned and used languages with reasonable fluency, nowadays I pick up a book or hear something on the radio and I struggle to understand it. I'm stuck to the same languages I use every day. Those languages have still influenced my view of the world and understanding of the languages I do use but it still feels like a loss.
This whole interaction is really reaffirming my faith in humanity. You guys are awesome!

Liam -- this response is just as impressive as the code that you wrote. You're obviously very smart, but that isn't good enough on its own. I've seen very-smart people who aren't open to critique, who get defensive rather than take the opportunity to learn new things. They don't get very far in life. On the other hand, the attitude you're showing here is tremendously valuable, and will serve you incredibly well throughout life. Never let yourself grow out of it!
The reason why you should limit cookie sizes is request round trip.

A typical GET request involves multiple headers, including cookies. Cookies are sent for every request for any resource for a given domain. The more cookies you have, and the bigger they are, the bigger your request. The bigger your request, the more likely it is to take longer to send and receive it. The more of them you send, the more latency accumulates.

When The Cookie Crumbles https://yuiblog.com/blog/2007/03/01/performance-research-par...

Reduce Cookie Size https://developer.yahoo.com/performance/rules.html#cookie_si...

Performance Limits https://stackoverflow.com/a/6963585
Buying politicians isn’t leadership.

Leadership is saying “I’m willing to lose some of my home price appreciation in the short term to keep the ecosystem thriving”
tldr; JWTs are a premature optimization (and are often a de-optimization) in the context of user sessions.

That's all the writer is saying, and I think he said it quite well.
>After declining for nearly one and a half centuries, the time spend per family on salaried employment post WWII has gone up back to around the level it was at the end of the 19th century. While per person average 'working' hours are down in large parts of what we call the Western world, woman were brought en mass into salaried employment, raising the time on the company clock for a family significantly.

>The cost-of-living has adapted to this situation, and a dual-salary income is now 'required' for many.

These two facts often make me ponder whether we are regressing as a society but simply blind to this fact because various quality of life things have become cheaper (e.g. going on holiday and electronics).

Meanwhile, we are mostly collectively losing at the wealth game and I am quite convinced we are losing at the wealth game globally - despite many people's attempts to illustrate that global poverty is decreasing (I lack data and drive to prove this point sadly). As such, social mobility also seems to regressing as who your parents are seems to be more important now than it might have been 50-60 years ago - I need only to look to my parent's achievements (and their peers) to be reminded of this fact.
This is pretty on point. I tend to lean towards realclearpolitics.com for my news as it alternates liberal and conservative columns every other headline. The juxtaposition of the two slants is pretty telling about how each side sees current events.
Brave [1] uses Duckduckgo [2] as the default search engine.

[1] https://brave.com/

[2] https://duckduckgo.com/
I first heard about this in the 1970's. I tried to build a two-way communicator on this principle in high school, but never got the circuit to work.
Women joining the workforce increased the labor supply which decreased wages on the whole. This makes it so many women HAVE to work as opposed to GET to work. A double income for many families is required nowadays.
I don't personally know of anything that specifically. But I'd imagine that in most cases, things would unfold as they did here — with the creator pulling the extension rather than risk losing the lawsuit.
> The government has far too much vested interest to be trustworthy.

Yet they are the only entity that can make laws against it
For those who were not born with the linguistic equivalent of a "silver spoon in the mouth", which is immersion and exposure to several languages in early childhood, learning another language is achievable. No need to be a polyglot (6 languages) or hyperglot (11 languages). It just takes time and effort. Just throw away all concept of deadlines for progress and fluency and enjoy the failure and process. Ignore all "fluent in X time" charlatans, there is no magic process for the standard "I took Spanish for 4 years in school" adult language learner. Just get started.

I have heard some people carry on conversations in two or three languages simultaneously, and I am in awe of Mezzofanti.

> "On one occasion, Pope Gregory XVI (1765-1846), a friend of Mezzofanti, arranged for dozens of international students to surprise him. When the signal was given, the students knelt before Mezzofanti and then rose quickly, talking to him 'each in his own tongue, with such an abundance of words and such a volubility of tone, that, in the jargon of dialects, it was almost impossible to hear, much less to understand them.' Mezzofanti didn't flinch but 'took them up singly, and replied to each in his own language.' The pope declared the cardinal to be victorious. Mezzofanti could not be bested."

https://en.wikipedia.org/wiki/Mezzofanti
Love that!
Refreshing a specific token can not be blocked on the server side. If you do, it’s already stateful.
Thanks for the edits! I can't change the video, but did mention that both of those lines are a little clunky. I did update the gist though! Much cleaner.
This is actually super useful.

What made you guys just decide to give out this? What's in it for you I mean?
Tyranny, in all its shapes and sizes, comes wrapped in claims that it is for the common good.

In fact a good way to think critically about things you hear is to ask “how is the politician profiting from this law?” And noting what new powers the law gives government.

If government “needs” more power with the justification of “helping people”, it may be the case that helping people is just the excuse.

Government power is easy to monetize: threaten industry with worse regulations but forget the idea when you get campaign contributions, etc.
Apparently facts are "partisan flamebait". I would be happy to write an NLP bot that parses your moderation and exposes political bias on this website. Consider an experiment where I post biases from either side, recording your respective responses and A/B test this websites moderation.
If you take into consideration the near future of autonomous cars where people will be capable of working during their commute, which some people have up to 3+ hour commutes - absolutely this should count as working hours. Hopefully it also means less hours in the office.
True, but those are all marginally higher, not substantially higher. Rent is the only thing that is really high, taxes are kind of meh in California, heck I moved from LA to Seattle and saw my tax bill just shift around a bit.
The point is that local governments are making companies jump through hoops to get space.
I understand your problem and I agree it is hard. But consider for a moment the type of paintings that make people go "my 3 year old niece could do this".

If you don't know the artist, know nothing about their intents and method of work, really how do you tell the difference between certain styles and that of a child or amateur?

How do you tell the difference between a Mondriaan and somebody's first graphics coding exercise?