skysight-inc/HackerNews huggingface dataset:
This has been true for the last 4 decades. Most news is designed to make you angry, afraid or sometimes happy. Mostly manipulation and deception. Even the news cycle is nonsense. You probably won’t remember what happened 2 years ago on a random Wednesday.
Zero-copy deserialization in Julia
I don't understand how this is a bullshit job.

A manager foresaw a problem. Right or wrong, that manager didn't have the time or inclination to do a grad-level research project on back pain diagnosis and foolproof verification systems. Instead, they delegate to people who are trained in medicine and make a process by which someone else receives and stores the doctor's note.

This solves the perceived "cowboy" chair problem where everyone brings a custom chair and ends up tearing up the carpet or whatever. Pretty much nobody wants to risk their job by outright forging a note. So few people risk the higher levels of cheating-- like the psychiatrist example-- that the manager can just assume those people have back pain. And, in the event that one of these assumptions are broken by a bad faith actor, someone can go back and read some or all of the doctors' notes.

I would think the bar for "bullshit job" is the 2nd and 3rd boss Peter has in Office Space who parrot the criticism that the first boss gave him. Unless you invoke magic those jobs have no value whatsoever.

In other words, bullshit jobs should be the ones that add no value but cannot be removed because the structure of the organization suppresses the tools necessary to officially measure the employee as ineffective. It's like the king's idiot son-- everyone just has to pretend he isn't an idiot.

Edit: clarification
I would prefer one from Apple. I don't trust Google as much as I do Apple, simply because I know they don't make money from my data. The fact that the FBI couldn't get into an iPhone makes me trust Apple much more. If I start using this Google key, I'm not sure how far in bed they are with the government and if they can crack my accounts.
In every major historical engagement the US has fought it went in woefully under-equipped, under-manned, and out-gunned. It prevailed because it can tool up quickly and out-produce.

You can't tell me that if the entire US fleet was sunk, every tank blown up, that the US couldn't rebuild in a year or two if the public was all-in on support.

Instead the US has this enormous force that, by virtue of merely existing, it feels compelled to use now and then.
And it looks like you only need 3 mappings for the entire space. It's not like you need one per object in memory. Unless I misunderstood the gist of the article.
Webauthn is coming to browsers. It has a much easier UI than traditional client certs.
I've been fond of [1] and [2] for a more focused argument against JWT for sessions.

The JOSE standards (of which JWT is a member) are error-prone and have had numerous critical security-affecting bugs due to how they were designed. [3]

To remedy that, I proposed PASETO. [4]

I still don't recommend PASETO for sessions, because of the arguments laid out in [1] and [2].

[1] http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-fo...

[2] http://cryto.net/%7Ejoepie91/blog/2016/06/19/stop-using-jwt-...

[3] https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-ba...

[4] https://paseto.io
Don't forget that ISPs have been known (at least in the past) to slow traffic down to certain sites. You shouldn't assume your bandwidth is necessarily routed fairly or anonymously.

As a personal story, a few years ago I was having trouble accessing youtube videos, buffering, timeouts, etc. I couldn't figure out why, tried upgrading my hardware, software, router, everything. But eventually I started suspecting my ISP[1].

I eventually tried using a proxy service to access the youtube videos. I think I routed my traffic through Iceland or something. Low-and-behold, perfect video streams _through_ a proxy routing traffic from another country. I had plenty of bandwidth. My ISP was just throttling my traffic.

Try a VPN, see if your ISP is messing with your traffic.

I don't trust Google either, and they already own me. But I fear my ISP more and don't believe that Google would be intentionally slowing you down. It's probably more of a function that Google optimizes for Chrome, less that they are trying to force you to change browsers.

[1] I will refrain from naming directly, but whose name starts with a 'C' and ends with an 'omcast'
As someone who's spent a good amount of time in both GDB and Visual Studio don't be so quick to knock the dev tools on Windows, they're really quite good.
Conquering North America was not a goal of Nazi Germany nor of the Soviet Union.
I am a research support programmer at the University of Michigan. My job is to help research labs solve programming problems that they can't handle internally. I write interactive Psych experiments, create data processing scripts based on a professors notes, assist with computer controls for new research hardware, ... If I were at Stanford I would fall into that "Admin Staff" bucket. Am I an example of wasteful growth in university administration? Maybe, but I would like to think that despite contributing to the "Admin" headcount you despise I am doing valuable work facilitating scientific research.

Universities have two roles: Teaching and Research. You are welcome to your own thoughts about whether or not they should be grouped together the way they are, but that is the current situation, and it turns out that Stanford is a big research university.
I think the top speed of a car is a very weak factor in its likelyhood of being wrapped around a lamppost, as I suspect most people in the US have never driven their car at its top speed.

As a note, I have driven a car at its top speed once. I had a mid 90s Geo Metro with the I3 engine in a 70MPH zone and it had a top speed of about 72 on level ground.
So, this totally reminds me of the gabocorp.com Flash website UI/UX from like 1998ish.
Nothing wrong with that, sounds very healthy, but does it also mean you're not engaging in one of the most influential public forums of our time?

Why do you think it won't last?
So you invalidate all tokens? Or it is per user ID salt. If the latter where do you keep the salts and why not simply having a server side session ID, instead of the salt
> people in grey suits are patting themselves on the back

There are no people in black suits patting themselves on the back. They have bullshit jobs by The Book too. It's The Book all the way to the CEO, who just performs procedures from Another Book to appease the anonymous crowd of stakeholders.

And your favourite *coin will make it even easier for there to be even more ruthless anonymous crowd of stakeholders, yay, progress. I don't even care what's your company named or of it hurts their employees or makes weapons, my blockchain AI owns a stake and I demand the next quarter profits to raise.

No malice. Just ignorance and inability to escape incentives everywhere.
War breaks out.

Divide by zero error.

Air supremacy handed to enemy.
Having had a 7 for a year now, I honestly didn’t take any notice. The new connector is better when running that’s the only difference I ever really noticed. Though I have never charged my phone while listening to music, even before. I charge it while I sleep.
> And what would you suggest as alternative

https://duckduckgo.com/ -- The search engine that doesn't track you.

> make what the majority wants the default

No. That amounts to choosing the default for the majority and diverting majority to a particular search engine.
Though you would say Amoureux des langues and not de langues in French.
Flow, the first. Correctness, the latter.

/This/ should be italics, _this_ should be underlined.

Does it matter how fast it is if it isn't right?
I have trouble understanding why session invalidation with JWT's is challenging. The JWT itself contains an IAT (issued at time) describing when the token was created. To invalidate all sessions, you can store (in your DB, or other persistence service) a 'invalidated at' date. Any request with a JWT that was issued before this 'invalidated at' date can be considered to be invalid.
What are the optional services and what’s the pricing? Are they available now or is it just something not yet finalized?

I really have a strong dislike for any service that doesn’t have a pricing link on the homepage.
I volunteered for one of the summer Dev Lab sessions in NYC and had a great time! I highly recommend
x86 caches uses virtual address for indexing (physical bits for tag), so this'll increase cache pressure too.
I'm curious to see how the blocking of slow-loading trackers will affect browsing ability. I put a pi-hole on my network and have found that some sites become extraordinarily slow to load (like more than 20x as slow as without the pi-hole), presumably because there's something being blocked that prevents the rest of the site from being loaded. Needless to say, this makes the pi-hole a win-some-lose-some proposition.

Hopefully Firefox's implementation will avoid this pitfall!
Tip: People who claim to be masters of anything rarely are. True mastery is not common, and those that do achieve mastery often suffer badly from impostor syndrome or realize they have so much more to learn, so stay humble.
A friend and coworker committed suicide last night.
Physical Security Key That Keeps Google Staff from Getting Phished Now Available
Looks like https://www.openstreetmap.org/changeset/61555047 may have been the source of this. It's the only changeset in the history of OSM for the area that contains the offending term. It's from August 10, and was reverted on August 11 in https://www.openstreetmap.org/changeset/61556585
The explanation for BS jobs is that the economy is not nearly as "efficient" as we hope that it may be. Incumbents at the top, stay at the top, regardless of how inefficient they may become. A number of forces including government and regulation, and barriers to entry confound to reinforce the position of mega incumbents that simply stay at the top forever.

On the plus side, I'm hopeful that the rise of BS jobs will increase work life balance.
Human languages are harder because you are speaking and listening to humans. Do you get embarrassed typing in a line of code into your editor?

Also, for these polyglot programmers, are they truly writing code in, say Python, in the Pythonic way?
I am a very happy Riot/Matrix user. Commercial software has a place. I think for things like Photoshop it can make sense. It's a complicated and powerful system. I just can't justify closed source software for a chat application. They are fundamentally simple systems. We CAN build competitive open source alternatives. Eventually companies have to make money, and all the approaches I've seen for that go against the user.
Was always curious about that. Got any pictures of the build?
"about session usage of JWT since it has little value "

Two weeks ago, I stood in front of a room full of senior developers and architects and asked them "How will we avoid making a leading 'Does the user have permissions?' call or wrapping the request in a try catch in case the user doesn't have access without JWT claims.

They all got mad. Then they conceded that they don't have a solution. Do you have a solution? If not, you can't replace JWTs.
HN has a long history of censoring particular groups of people based on identity. That’s why it’s become such a monoculture (a monoculture of people generally convinced than HN is diverse, however.)

Down voting things you disagree with despite being well articulated (in fact because they are well articulated) is a form of censorship here.

But of course it goes much further when shadowbanning is deployed to enforce the narrow and rigid views of the moderation team.

Yes, I know pointing this out means it will now happen to me.

Nothing a censor hates more than thwarting the narrative they are trying to enforce.

But that’s why you think it doesn’t happen here. This is the most harshly and hypocritically cultivated walled garden on the Net. (Moderators violate their own rules regularly with impunity.)

Alas, I cannot abide not pointing out these abuses.
One of the funny things I've noticed about reading opinion columns in this format is how often you get these bombastic headlines on both sides of something. "X is bad! The end!" and right afterwards "X is goodness! A new age dawns!"

(X may be something like "local pickle farmers protest new holiday". The topic doesn't matter, oddly enough, it's audience size that counts)

If you scan the first column, it's very weak. There not much of an argument or factual substrate. Then scan the second. Completely different opinion. Same crappy argument quality. Sometimes you can go nine or ten columns like this.

I'm left with opinion on those days that not much of anything has happened regarding X. But folks still need views!

Consuming news in this fashion is a great way to disconnect emotional manipulation from actual news. When they're directly trying to manipulate you, you begin to learn the rules of the game.
> I have trouble understanding why session invalidation with JWT's is challenging.

Imagine you're connecting to a service that uses JWT for sessions so they don't have to store anything server-side.

Let's say you have a token with an IAT of yesterday and and EXP of, say, a month from now.

Further, your browser gets infected with malware and the attacker steals your token. You rebuild your computer from a fresh install.

How does the service invalidate the token while still being stateless? It has 30 days left.

Your next move is:

> _
Sure, but then you’re calling your DB to validate the JWT every time anyway. You’ve just removed the whole “JWTs are cool because they’re stateless” benefit.
I think you mean the block market!

(I'll get my coat.)
If we'd have much money to spend, I'd say it's a feature. We don't however so I'd say it's a bug. Also due to the persons involved, there might me some unknown motivation behind it.
For signout we use token and user revocation lists represented as bloomfilters that services can poll or query directly if they need more consistency. This actually does work well in practice at very large scales efficiently we found.
The browser may not be tracking you, but it does default to a search engine that tracks and profiles you. It can't get any worse.
You are right about the analogy, I guess I should have said raising kids.

I will point out that children who are exposed to two languages quite naturally learn both of them with only a slight delay over learning a single one.
Equivalent Bloomberg article [0] mentions that the ACLU has taken Harvard's side, and they state [1]:

While the DOJ’s brief does not challenge Supreme Court precedent granting universities the right to freely select their own student body—presumably because it cannot do so at this stage of the litigation—the Trump administration has advocated for “race-blind” policies, which Harvard and virtually all other universities have found are demonstrably insufficient to achieve meaningful diversity, given the reality of historic and continuing racial discrimination in this country.

[0] https://www.bloomberg.com/news/articles/2018-08-30/doj-backs...

[1] https://www.aclu.org/news/aclu-statement-department-justice-...
Most news is designed to sell you cars and laundry detergent.

More to the point, you're not the customer. You're the product. Advertisers are the customer. So the news isn't really meant to inform, but rather to encourage sticking around to see what happens next. Appeal to baser emotions works well for that.

Think of it that way, and people asking for cute kitten pics online because they're having a bad day is functionally the same thing as crazy talk radio.
Recently came across this nice guide on Git pull request workflow: https://github.com/susam/gitpr

All the important stuff is in the first 4 pages. I have the PDF version on my desktop. Also printed pages 3 and 4 and stuck it to my cubicle wall.
A football player scorres then he dies.?
I WOKE UP IN A NEW ... Bugatti?
Doesn't matter. Our legal system is such that Oracle can still burn you down, even if you are right.
Can someone please write DeepTiming (OCR) that turns timing diagrams back into code?
Doesn't really even have anything to do with "left" or "right". In reality "left" and "right" only serve to provide a convenient categorization method for sorting the groups and people that will tend to agree with a particular ideology. But all of those groups and people are not to be trusted, because they all have biases and agendas that lead to compromised integrity.

(In the case of people and groups on the "left" or the "right", the bias and agenda is clear. They are compromising in support of their ideologies.)
That's probably because in computer languages we invent our own dialects as the core is pretty feeble: "Jane get ball, ball is red. Red ball goes down hill." So that becomes "getBall()", "dropBall()" and so on where with a heavy helping of English, or whatever human language you prefer, you can slather on top a lot of semantic meaning that isn't there otherwise.

If you only had to learn basic grammar and fifty words you could be fluent in a hundred languages in a month.
I don't see a straw man in the GP comment. He was clearly comparing tracing GC vs refcounting, while you're conflating memory management with value semantics. Specifically, you're assigning the benefits of value semantics to the absence of a GC and vice versa. While GC'd languages more frequently omit value semantics, they're orthogonal and there are languages (e.g., Go) that profit from both a GC and value semantics.
Startup idea to app for 15k
That is true, but at the same time, Wikipedia wouldn't be possible without it. The CEO confirmed that their absuse-detection system immediately flagged the label, but apparently some human reviewer approved it. Which shows that even if your system is perfect, humans are always the weakest link.
Indeed. This requires a lot of buy-in and a lot of voter accountability.
Social media will last. The things said on social media won't last.

But a thousand years from now, people will still be reading Spinoza, because his philosophy will never become irrelevant.
it infuriated me that Google's style guides forbid this kind of formatting. Anytime someone else tried to get them to allow it it was shouted down as ASCII art
Found out about this from /r/longevity, a subreddit focused on extending the period of time in which people live healthy: Victor Bjoerk has been running a full month campaign for his birthday, where 100% of the proceedings go to the SENS Research Foundation. This is it: https://www.facebook.com/donate/240535473435753/

SENS is doing a lot of good in the world: https://www.sens.org
A related post from the late Aaron Swartz: http://www.aaronsw.com/weblog/hatethenews
Cost disease isn't really a disease, it's a side effect of increased productivity. As productivity increases (and comsumption increases), costs increase because labor costs can't decrease as fast as technology costs.

Medical care quality has vastly improved. The problem is that there is infinite demand for medical care. People think disease and dying are massive failures of medicine now. In the recent to ancient past, surviving and being healthy was a miracle.

K-12 education cost per capita has tripled in the past 50 years. Sounds bad?
GDP per capita has grown to 6X. If education costs as
a fraction of income is shrinking by half is a disease, I don't want the cure.
At the BBC we use mutual TLS extensively in our cloud-deployed applications, across a lot of developers and different teams, for both service-to-service and developer-to-service auth (all devs get a client cert).

It works well for a lot of use cases, not least because most things are doing a TLS handshake anyway when communicating. That means that adding client certs into the mix isn't much of an overhead and you can avoid another authentication/authorization step if your CA hierarchy is well managed and you can trust that a cert which says "Joe Bloggs" is actually Joe's cert. Also obviously it avoids any 3rd parties, like you said!

That said, it only really works for us because a lot of apps are deployed through a centralised tool which adds relatively short-lived certificates to deployments and then automatically redeploys things before their certs expire. That ensures that certs stay valid. We also have a solution to handle revocation in the event that a cert is compromised, which is a massive pain.

So if you spend the time to set everything up it's pretty great, but the cost of setting it up is quite high. You'll also run into problems where you want to use some tool X but it doesn't support mutual TLS and you're forced to either find a different tool or hack in support if that's an option.

A big example of missing support is things like the Application Load Balancer in AWS (or equivalents in other clouds) - they tend not to support mutual auth, which means that you can't really use them and you're forced to use a more traditional load balancer with TLS passthrough and then terminate TLS somewhere else.
I recall reading and saving (in my Instapaper) a super relevant essay[0] written by a Swiss entrepreneur/author -- Rolf Dobelli -- that talks about how news systematically alters your 'risk-map' of the world, thus making you worry about things that'll almost never affect you while distracting you from things that actually might; as an example, the author talks about how terrorism is overrated and chronic stress is underrated, as portrayed in the media.

He suggests going on a news diet by mindfully curating the news content one plans on consuming, and thinking about its relevance to everyday life.

Personally, I can attest to experiencing increased clarity of thought, creativity and productivity once I blocked all of the junky news sites and the ilk out. This combined with practicing mindfulness has had a massive impact on my state of well-being and lowering of stress. My overall happiness has increased as a result.

[0] http://www.dobelli.com/en/essays/news-diet/
Microsoft contractors to get 12 weeks of paid parental leave under new policy
SV has never been about quality of life. Since at least WW2, it's a region that eats its old, a place that welcomes new waves of migrants all hoping to strike it rich in the next gold rush.

From the literal gold rush in the 1850s to the Gilded Age inventions of the 1880s-1910s to the agricultural migration of the 20s and 30s to the WW2 construction boom to the post-war nukes & ballistic missile boom to the hippies & beatniks of the 60s to the integrated circuit to the microcomputer to the Internet to the mobile phone, the Bay Area's always been defined by its ability to impoverish the folks who found paradise in the last wave in favor of fully capitalizing on the next wave. It does this largely by attracting young immigrants from all over the world who are willing to put up with shitty conditions and work themselves to the bone for a few years so that they can sock away a few dollars. Those that succeed in this usually go elsewhere to retire or raise a family.

There's no evidence that this conveyor belt has stopped or slowed down - 2 of the 3 largest Bitcoin exchanges in the U.S. (Coinbase and Kraken) are in SF, I still meet plenty of starry-eyed 20-somethings who are working long hours thinking they're going to get rich, and I also know plenty of people who've made their low-millions working for a big tech company and are now moving to an area where that will let them retire at 35 rather than barely afford a small house.

News articles always seem to point out that the quality of life is shitty in San Francisco and the economic drivers are unsustainable. That's always been the case. The Bay Area's specialty is in making an industry out of unsustainability; the culture here has gotten very good at finding the next exploitable resource and exploiting it before the rest of the world realizes it's important, and then encouraging people to move on once it's no longer profitable.