skysight-inc/HackerNews huggingface dataset:
Ridiculous guide.

> Care should be taken when installing new software. Always prefer free and open source software (which macOS is not)

“Free” doesn’t have anything g to do with security and there are plenty of profound security flaws with all software — open source doesn’t make it inherently more safe.

One of the most serious security issues of the past few years came from OpenSSL/Heartbleed. Equifax was from unpatched Apache Struts — while the cause was negligence on the part of Equifax, happened due to a vulnerability in open source software. I am definitely not arguing that closed source is more secure, but I am arguing that open and closed source can have significant vulnerabilities. One is not inherently safer than another; it depends on how it is used. Apache Struts has a significant vulnerability before it was patched — which means that it was unsafe at some point. How many years was OpenSSL vulnerable before the exploit was discovered? Closed source certainly doesn’t fare much better, however implying that open source is always safer is just incorrect. I use “always” here because the author said to “always” prefer free and open source over closed source. His qualifier, not mine. Always is a very strong word. Many open source projects are often at the level of a hobby, with part time, occasionally unprofessional management and processes. Of course many closed source software also has unprofessional management and processes as well. I am simply disputing the implication that open source is always better: it’s not. Often and perhaps generally, but not always. I would trust Apple closed source more than some rubygem created and maintained by a single developer as a side project, with dependencies created by other hobbyists as a side project. A rubygem, for example, is dependent on the security competency of the weakest dependency. Often the projects are well secured — but definitely not always.

I am a big supporter of open source, but arguing that open source is always more secure is just factually incorrect. And the “free” aspect is a political benefit, not a security one.

The author also has a clear lack of understanding of how FileVault works as an example, which calls into question any other recommendations made in this guide.
Could you please stop creating new accounts for every few comments you post? We ban accounts that do this, and it's in the site guidelines: https://news.ycombinator.com/newsguidelines.html.

HN is a community. You don't have to use your real name, but users need to have some consistent identity for others to relate to. Otherwise we may as well have no usernames and no community at all. That would be a different kind of forum. Anonymity is fine, and throwaways for a specific purpose are ok, just not routinely.

https://hn.algolia.com/?sort=byDate&dateRange=all&type=comme...
You always need something on which to run your program. If you compile your program on openbsd, then you need another openbsd machine to run it, you can't run it on windows. How is something like the jvm different from an os?
TimescaleDB | New York City, Stockholm, Remote

Time-series data is everywhere, and Timescale is helping developers and companies make sense of it. We build an open-source time-series database, engineered up from PostgreSQL, that supports full SQL.

* Core database engineer

* R&D engineer

* Solutions engineer

https://careers.timescale.com/

Businesses worldwide trust TimescaleDB for mission-critical applications from industries as varied as manufacturing, finance, utilities, telecom, mining, ad tech, oil & gas, and the smart home. Applications built on TimescaleDB include complex monitoring systems, industrial machine data analysis, geospatial asset tracking, operational data warehousing, and financial risk management; via the edge, on premise, and cloud deployments.

Timescale is a highly-technical team, backed by Benchmark, NEA, and Two Sigma Ventures.
It's $5/month just for the HTTP header interception/injection. The hosting cost isn't listed.
The feedback loop and why everyone should try working in a startup
Datawire | Systems Engineer | Boston / Remote OK | Full-time | https://www.datawire.io

We build open source tools for Kubernetes, including Ambassador (API Gateway built on Envoy Proxy) and Telepresence (CNCF Sandbox project for developers). We're looking for systems engineers who are comfortable coding and troubleshooting features at all areas of the systems and network stack. Do you know how to override DNS on Linux so that it points to the DNS in your Kubernetes cluster? Then this is a role for you. We code in C++, Golang, Kotlin, and Python. Past experience with Kubernetes, Envoy/NGINX/HAProxy, and/or open source projects a big plus.

We love people who are (or want to be) members of the Kubernetes/cloud-native open source community, and virtually all of our engineers have given talks at conferences such as KubeCon, Velocity, ApacheCon, DevOpsDays, and such.

Email careers@datawire.io.
It's ridiculous to blame climate change on couples who have more than one child.
Security-wise very good (comparable, maybe a bit better, because more locked-down). Of course, if you root the Chromebook all bets are off.

Privacy-wise, I'd pick Apple any day.
I dislike this commie more every time this bs article gets posted
So you want to build a TCR?
How to Push Xcode to the Next Level: Xcode Source Editor Extension Tutorial
That’s s bold claim that our only option is a massive reduction in population and energy use. Do you have any data or models to back that up?
And derivable.
Historically, it has been the opposite. Polygamy has usually coincided with extreme inequality.
Local hidden variable theories were disproved by violations of Bell's inequality, not by a thought experiment.

https://en.wikipedia.org/wiki/Bell_test_experiments

Are you saying that all of these experiments were flawed in some way?
So let's say I have a web assembly binary squirreled away in a web worker or AudioWorklet.

If that binary is supposed to have its own event loop, how do I achieve that? Seems like I'd have to hook back into the JS event loop, at which point my poor binary becomes subject to all the DOM blockers I was trying to avoid in the first place... :(
I suggest you check out JavaFX. It is a mature, modern, flexible UI library that is now considered the standard.

But of course, bad programmers make bad apps, no matter how good the ecosystem is.
Graeber's recent book on the topic has had half a dozen threads on HN, including one where he showed up and rather convincingly flamed Brad Delong (looking that up is an exercise for the reader). So I think we can safely call this one a dupe.
Sandbox, repl, and a testing platform to unit test my Jenkins files are amazing suggestions. Basically an environment I can actually test in, as opposed to write-run-fix
I'm jealous of people who have such an elaborate workspace with so many toys and access to reagents. Still, it's super interesting to see all the engineering challenges that go into taking something from "works" into "work reliably"
https://www.hntrends.com/ has some trends.

https://whoishiring.io/ is a searchable interface, although I think they scrape jobs from places other than the HN "who's hiring" now.
Modern CPUs execute micro ops, RISC-like instructions (e.g. load from memory address to register, add two registers, store from register to memory address). The CPU's "decode" stage translates x86 instructions into micro-ops (often 1-to-1, but x86 compare followed by x86 jump are translated into a single micro-op, while some x86 instructions are translated into multiple micro-ops).

On one CPU model a x86 operation like "256bit add" might translate into "256bit add" micro-op, and on another model the same x86 operation might be translated into a series of micro-ops like "128bit add, wait a cycle for the 1st add to finish, pass the carry bit into a 2nd 128 bit add", because that model doesn't have a real 256bit adder. So the latency of the operation is 2 cycles, but nothing else is changed.

Some x86 instructions might be very complicated and cannot be translated into a fixed-length series of micro-ops using a template. For example, the integer division, square root or the string compare machine instructions might be loops with conditionals in them and don't run the same amount of micro-ops every time. They can be implemented by Intel using a program written in micro-ops. Intel stores this program in flash on the CPU and the decoder knows to run that program when encountering the instruction. The OS doesn't need to help here, this is not emulation or software-floating point, it's just that the single instruction takes 200 clock cycles. What this does to the out-of-order engine is another story. These "programs", called microcode, can have bugs and newer versions of microcode updates, sent to the CPU at boot by the BIOS/UEFI and/or by the OS, update them.

https://en.wikichip.org/wiki/macro-operation

https://en.wikichip.org/wiki/micro-operation

https://en.wikipedia.org/wiki/Microcode
Surfly | Amsterdam, NL | VISA, ONSITE https://www.surfly.com

Join us on our adventure to make the web personal and pluggable.

We're looking for:

- Developers that can help us build the core co-browsing technology
- A PM that can lead a team to build integrations with marketplaces
- A customer success manager that can grow existing accounts and make sure they are sucesful

We offer:

- Relaxed working environment
- Tax benefits for migrants
- Developer focused (sitting/standing desk, multiple screens, good hardware)
- Nice office located in the centre of Amsterdam
- Reimbursement for conferences etc.
- We'll help with VISA and relocation

About Surfly

Surfly allows you to surf the web together with others. Unlike traditional screen sharing it requires no installation or browser plugins. By using a smart content-rewriting proxy we allow any website to be shared, without website owners having to change them in any way.

About Us

We're a small team (< 15), have a great product and are getting some good traction with revenue. We are focussed but try to stay pragmatic. We are driven but have a relaxed and healthy work atmosphere. The coming few years are going to be great for Surfly, come join us! Please apply at jobs.surfly.com or send me an email. nicholas@surfly.com
Ingenious method!
Password managers seem to have the essential flaw of using the clipboard.

What prevents a random npm/rubygems/... dependency from running `pbcopy` every second, storing interesting-looking results and relaying them to some server once in a while?
Whether conservative treatment is equivalent to surgery varies with underlying cause of stenosis and what disks are involved. The blanket statement that conservative treatment is as effective as surgery over 10 years is highly false.
Hm, okay. I missed that.
Religious flamewar is not allowed on HN. Please don't post like this again. I'm sure you didn't mean to start a flamewar, but that's the effect comments like this have in practice.

https://news.ycombinator.com/newsguidelines.html
I would guess that is an extremely low difference compared to historic norms. 8,000 years ago, women were 17 times as likely to have children[1], your example would be about 1.13 times as likely.

[1] https://psmag.com/environment/17-to-1-reproductive-success
It seems that while New York changes over the years, New Yorkers do not.
For all practical purposes we have that - they’re called FPGAs. For digital logic, the performance you can get out of an FPGA is as good as any low cost effort to actually fabricate a chip would ever be. Websites like opencores.org even sort of have what you’re talking about, but in general, logic design takes a lot of effort to be better than a general purpose chip that has had an insane amount of effort put into it. Also, no one wants to spend the effort the verify that the designs are actually right. Opencores is mostly full of half finished student projects, and has been as long as it’s existed.
I think you are not paying enough attention to the fact that we simply don't really know the consequences of plastic in our environment.

We don't know if longer consumption of microplastic has serious health threats, we don't even know the deep sea so we do also not know how plastic affects it.

But what we do currently already know about the effect of plastic in our environment is already shocking enough and with such an ongoing development of plastic we are gonna have more plastic than fish in our sea by the year of 2050:

https://www.theguardian.com/business/2016/jan/19/more-plasti...
Excellent look into this by user "The Stilt" can be found here: https://forums.anandtech.com/threads/ryzen-strictly-technica...

It looks something like this: 4GHz 120W, 3.8 90W, 3.6 65W, 3.4 50W, 32 42W, 3.0 33W, 2.0 13W. This excludes the SOC.
Your comments in this thread were borderline to start with but this is gross and nasty. Please don't do this on HN again.
This assumes the machine is already pwned - at which point why wouldn't they just use a keylogger? In that case, typing the password in without the use of a password manager instead of copy/pasting from a password manager wouldn't be any more secure.
NASA's public CO2 challenge could help astronauts endure on Mars
There are good and bad recruiters in every age. Back in the day they would ask you if you knew MVS or OS/390, and if you said no to that, they'd proceed to ask if you knew TSO.
District M | Multiple Positions | Montreal, Quebec, Canada | FULLTIME | ONSITE

We are an ad-tech company offering solutions to publishers and advertisers world-wide in an open and transparent manner.

* PHP Developer

* Front End Javascript Developer

* Full Stack Developer

* Systems Engineer (Golang)

Work within a tight, autonomous team in the heart of one of the most livable neighbourhoods in North America, competitive salary, quarterly performance based bonus, 3 weeks min time off.

Product side we currently leverage Symfony 3 and React + Redux, delivering on realistic deadlines and report to technical persons only.

On infrastructure side, a hybrid cloud with some services in AWS, Azure and GCP (k8s)

Small, profitable company with opportunities for meaningful growth and impact.

Prior ad-tech experience not a requirement.

Contact: mo <at> districtm.net with CV / Github etc.

Website: https://www.districtm.net
It's not pure cost. The knowledge and experience gained from chasing the bug all the way down is worth something.
too bad we can't get the top secret stuff using the same method...
I have not disabled JS, no console errors and all privacy extensions are turned off.

edit: it's loaded now just fine, odd.
What's even more interesting is that this is pretty accessible. Given fairly common equipment, at least in a hackerspace, you can make ~8 mil traces on plastic or FR4. Not only that, but you can make them in 3D and with plated vias.

This dude has some absolutely jaw dropping (sputtering, scanning electron microscope, waterjet etc) videos on his channel; it's definitely worth checking out the rest of his back catalogue.
It’s a research paper so most probably there won’t be any software delivered. Sadly it’s not the norm for researchers to release the code or an user-fronting application when doing computing research (or any research). Open source exist but is even rarer.

There’s dozens of very useful and advanced creation tools created in labs that never turned into usable application. In some domains big players pick up on the research and include it as a feature, but many advances just stay in labs for ever.

The rare one that are released as usable applications by the authors are most of the time not supported and end up abandoned—quite similar from many non-research software in that respect, but a little more sad as they are often more unique, like for example the free-form plush creation tool from a Japanese lab I remember from several years back.

The most irritating is when tax-money funded labs don’t incentivize their researchers to open source their code, and we end up with a innovative software tool, closed source and with proprietary licenses, that is effectively only the research playground of one researcher, mimicking a product but never really turning into a product.
The common sense gap: Why we do not prepare for earthquakes
I haven't benched it in a while but as far as I know setTimeout and setInterval can have an extra delay depending on [what I call] browser pain.

I measure this delay to set the pace of computationally heavy tasks.

I also consider it a proof of concept why browsers should expose more of the performance and capability stats to the web page. Maybe I don't want translucent layers of css animations if it freezes the gui? At least, I think I don't.

Also funny:

Because callbacks can trigger computationally heavy tasks that may trigger at the same time I've morphed into the habit of just slapping the data into an array and parsing it with a setTimeout used as a setInterval.

So, basically I went back to polling because of superior performance. (ha-ha)
Hello, I like what you guys are doing and it's a very useful service but this page made a a bit angry.

https://www.secfi.com/option-tax-planning/

You ask a lot of personal data to in the end tell me that my country is not supported. This is some nasty little "Design" feature.
I think I made this comment on this thread instead of another. However, groking the code, you'd likely simply need to assume windows users have Python or use something like PyInstaller.
I recently discovered Erik Dietrich (daedtech.com) and it’s induced the same kind of splurge reading as when I discovered Joel on Software. Lots of stuff on what’s broken about developers’ place in the corporate world and what to do about it.
Crossing into incivility like this will get you banned on HN regardless of how good your points are or you feel they are. Please review https://news.ycombinator.com/newsguidelines.html and follow the rules from now on.
I soon as I saw the word concourse, I look at the username, sure enough it was you.

You bring up Concourse comparision every single jenkins thread.

I've considered it the past but looked like there is almost no adoption outside pivotal. would you say the adoption increasing in 2018, I would like to give it another spin if possible.
I guess the promise of remote work is a lot about the promise of not having to pay premium for space. I can't help thinking though that once remote work become more common the same thing would happen to nice places in smaller towns as have happened to nice places in cities.
There is a "white man can't dance" joke inthere but I cant think of it right now.
Understandable, but caution doesn't validate his own alternative claims. I was already in s skeptical mod from the mention by another person in the article of the 'alpha wolf', a ethological concept which has been discredited for a while now but which refuses to die.

https://io9.gizmodo.com/why-everything-you-know-about-wolf-p... has a good summary of the rise and fall of this animal behavior theory.

Certainly over-anthropomorphization can lead people to make foolish assumptions, but the notion that animal behavior is fundamentally different from our own rather than existing on some spectrum of cognitive complexity is not really scientific either.
> :O

I get the same icky feeling when I look at some of the things they've shoehorned into JavaScript over the years, though, like regex.
Let me guess: the Netherlands?
[citation needed] (unless it is written purely ironically)
Short form and generalized: when one subsystem of a larger system is not your bottleneck, it's often possible to lower the resources for that part of the system without impacting overall performance.
Building a Master Data Catalog Using Machine Learning (Interview)
I love this niche type of project, sounds like it would be such a fun project to work on.
I like Reeder[0] and I use it since some time without problems.

[0]http://reederapp.com
Don't get me wrong, I'm fine with yearly subscriptions. I happily pay for newsblur for example.
In practice the "split path" scenario is only a problem when topology changes. Routers typically use a hash of source and destination port, source and destination IP address, and sometimes ingress port id to pick which of N equal paths to take.

This is done not just to preserve end destination, but so every sequential packet in a flow follows the same path, thus must arrive in the same order. (Different paths have different latencies because of distance and buffer depth on the routers.) Many tcp implementations will back way off as soon as they see out of order packets, so network providers must do this.
How could I track if the PS4 in my company is being used?
I work at a company that have a PS4 so that us employees play on our free time. The problem is, it is just one console and if you work on another floor, is very frustrating to take the elevator and go there just to find that somebody else is already playing.

I was wandering if there's a way to remotely track if the console is turned on/off. I've checked about the PSN API, but we don't have PSN here, its just a local account. Its a policy that when you stop playing you turn the console off.

Maybe some kind of hardware at the power plug?

I've searched a lot around the web and i'm out of ideas. Can anyone help me? :)
Streetbees | Junior / Senior Data Scientists and Data Engineers | Full-time, ONSITE, London
https://streetbees.workable.com/j/B0BC66BE9E

Come join our amazing data science team and help build the world’s intelligence platform.

If building a brand new ML stack from scratch, researching and developing state-of-the-art NLP and changing an established market with a well-funded company sounds like your cup of tea, then we would love to hear from you :-)

Streetbees is building the world's first real-time platform for market data insights. We connect our clients with real time data on the behaviours and opinions of their customers. Using the Streetbees app, we broadcast our clients' requests to our thousands of "bees" on the ground in over 150 countries. Our bees reply with in the moment behavioural data, often in the form of text, images or video.

From this we extract deep insights into customer behaviour as captured at the moment of consumption, purchase etc. Our clients include some of the largest FMCG companies in the world and with the success of our product the company is growing rapidly.

Therefore, we are now looking to further expand our data science team with all levels of experience. This is a unique opportunity to be part of a growing, talented team that are building and inventing novel data science. As part of the team, you will be instrumental in shaping what Streetbees become, working alongside our engineers, product and business teams to architect and develop our innovative platform.

We are looking for Data Scientists and Data Engineers at all levels.

If you are interested ping me on erik@streetbees.com or follow either or these links:
https://streetbees.workable.com/j/8888AE8BD1
https://streetbees.workable.com/j/8888AE8BD1
Counterpoint:

If the money you pay for electric power ends up paying for the operation of green electricity generation, that's enough.

It's enough because anyone who wants to operate a coal-fired plant without income has a problem and will stop soon enough. You don't have to make that coal-fired plan your problem or split hairs about kinds of greenery, because the beancounters will take care of it.
Firefighters also risk their lives on their job and face health risks that relatively few people are willing to take on, to protect their communities.

I think it is not right at all to treat this like just another job. The social value of firefighters is unquestionably high and vital. Not sure this can be said about everybody else who takes home cozy pensions.