skysight-inc/HackerNews huggingface dataset:
Mr. Kaplan’s surprise appearance prompted anger and shock among many Facebook employees, some of whom said they took his action as a tacit show of support for Judge Kavanaugh — as if it were an endorsement from Facebook itself.

This is about as far removed as I can possibly take myself from casting value judgement in one direction or another wrt Kavanaugh and the allegations against him but there's something weird in the air when one can't even be seen in the same vicinity as someone accused of {thing_goes_here} without someome somewhere connecting all sorts of dots that have no business being connected and being one reflexive twitch away from having their character assassinated in the worst possible ways.
Funny, people used to say exactly this about Japanese cars. We all know how that turned out.
> IANAL but what's to prevent the litigating party from immediately filing a Daubert motion against an employer who tries to say they used the polygraph to 'scientifically' disqualify a prospective job seeker-since you can't just hand a polygraph machine to any on-staff HR rep and go "No go see if Bob here really graduated from MIT like he says", and the wealth of research telling us how problematic results can be?

Under what circumstances would a case like this even come to pass? From what I gathered from the article, these administrative hearings where applicants may plead their cases are not court proceedings but administrative hearings conducted by law enforcement officials.

Relief would likely come only under another course of action, like a civil rights case brought against the hearing committee (as mentioned in the article).

Unless you are referring to an action brought against the hearing committee on the basis that the test was improper because the person administering the test was untrained. At that point, I would imagine the court would not want to prescribe the hiring practices of local law enforcement and would defer to them (unless those practices could be shown to be discriminatory against some protected class).

Also, I didn't get the sense that these tests are administered by untrained HR reps, but I may have missed something in the article.
> Trickery and deception when it comes to medicine and personal health are never fair game.

What about when it is known to work?

https://www.health.harvard.edu/mind-and-mood/putting-the-pla...
Ansible 2.7 Released
Probably their "personal meeting room" -- Zoom makes it very easy to just use that for all of one's meetings. For intracompany use, I've used it, but I prefer to not use it for intercompany discussions, too much chance of leakage.
What I'd love for every voice conference was an online screen with a list of everyone dialled in (caller Id based). It would be good for security but even better would be a little noise level meter on each line so you can see which %%%%er is heavy breathing all the time.

(also a choice of on hold music would be nice but that is just dreaming)
I'm very grateful to be working at a little company that makes a technically interesting but politically boring product. Work is, for me, not a place to get feather-white about politics, I just fix bugs and talk to customers and troubleshoot problems and develop some features and go home. Talk to the coworkers about our kids and what we're doing over the weekend. It's a very laid-back atmosphere that prioritizes what's right in front of you and doesn't demand a lot of idealism, just competence and bringing in enough profit that we do alright.
I would say yes, but you have to add in the resolvers. I've built these resolvers once and they are dynamically added to the GraphQL schema for all types that support them (different number types etc), and aren't explicitly disabled or enabled.
www.dribbble.com/imthiagocarvalho
Home Closings
Free Software Supporter – Issue 126, October 2018
Damn, the outrage culture is just so uncomfortable. How could this be contained?
So I'll say up front, you're right to say I don't have 15 years of experience to back this up. And if your takeaway is, "this idiot doesn't know what they're talking about", fine, I'll take that. That's a completely reasonable reaction.

But, you're wrong.

The top rated post on Hackernews right now is a bunch of people gushing about how cool it is to see the source code for the Apple II LOGO language[0]. Your code has value beyond whether or not someone is going to pick up a new game-dev trick for their next title. It's a window into how games used to be built. It is a tiny composite piece of gaming history, and history is not just about how Mario was built, it's also about how small games were built, and what trends across the entire industry looked like.

Your code has value beyond just publicly releasing the source. Maybe you would never revisit it in a million years for a million dollars, but the overall gaming industry is interested in remakes and remasters right now, and if you've ever worked for a publisher or sold the IP rights to one of your titles, it is not out of the question that the publisher might want to do a remake without you. That's the entire premise of this article, and if you have the source code, even if it's not portable, even if it's using hardware-specific hacks, even if it's written in an obscure language, your publisher will be in a better position than if you didn't.

To be kind of blunt, this attitude is exactly what I was getting at above. Game devs don't understand why they should even care about history. If your takeaway is, "I don't care about old games unless they make my new PS4 game run faster" you have missed the point. If your takeaway is, "archival only matters if my game is successful, and I don't know if it'll be successful yet", you have missed the point.

I completely, 100% understand that game dev is stressful. Zoom out a bit from that; working in the games industry in general is kind of hellish right now. If you're putting 80 hours a week into building a game for (on average) less pay than you'd get as a general software dev, and you're not doing it because you genuinely care about what you're making... that's a stupid career choice. And if you do genuinely care about what you're making, then try to make sure it lives longer than you do.

Bear in mind, what I'm asking for doesn't have to take much work. You don't have to go crazy building out your source-code in a special way if you don't have time. Change nothing at all about your dev process -- just take 3 minutes when your game ships, stick your raw source code, assets, and a DRM free binary on a flash drive, and then mail it to Jason Scott.

That's it. Just by doing that, you're now ahead of most other companies in the games industry right now.

[0]: https://news.ycombinator.com/item?id=18142287
> I’ll still wake up sweating once a year, worrying that we’ve just gotten lucky forever

You have to appreciate his candor.
And the conservative underbelly of SV once again peeks out from beneath its plaid flannel facade. Tuck it back in there, Zuck, and all will be fine again for a little while longer! This is another byproduct of the startup lottery culture: we idolize the people who made it big, ignoring the realities of classism in the fight to the top.
It’s a subjective interrogation with a prop. You tingled his spidey sense.

And was he wrong?

You pumped gas without paying. Did you acknowledge it as a criminal act or as good fortune or not at all? Look at it from the interrogators perspective.
If your original data is flat and your app can consume it flat, no worries. But SQL is a worse fit for structured data, so you end up with an ORM on top, which is what GraphQL sort of is. Typically web apps are written with web technologies that work with structured objects, and you want something like {title: "Stapler", price: 1230, category: {id: "123", name: "Office supplies"}, mainPhoto: {url: "https://...", width: 600, height: 300}} back to feed directly in the UI.

Some databases (Postgres comes to mind) are better at letting you express this as a query which builds the structure using JSON functions in the SELECT part of the query. But it's not even close to ideal.
Maybe there's a big list I'm ignorant of but it's somewhat interesting that it doesn't happen more often. e.g. my favorite PC arena FPS as a teen was Tremulous; it was originally a mod but after Quake 3's engine was released under the GPL they turned the mod into a standalone game with it. Totally free, too, but I bet it could have had some financial success if the store model was as popular and accessible back then. Natural Selection is a similar game that did enjoy commercial success... But for better or worse the GPL seems to increase the likelihood of free as in beer releases, too. Maybe any potential revenue sharing model is just too hard for a lot of projects to set up (or was back then) since the GPL also can attract a wide set of contributors.
Especially if that person being dismissed was themselves a survivor.

Sounds like FB had a major own-goal moment.
"Ryan Dahl is fixing his Node.js design regrets with Deno"

https://jaxenter.com/ryan-dahl-fixing-node-deno-146190.html
It's been shown that telling someone you're giving them a placebo can still bring benefit, in which case I'm okay with it. But giving someone a placebo or homeopathy pill (same thing) and failing to disclose it contains no active ingredient is pure deception, unless the patient has given consent that they may receive a placebo, like if they're in an experimental trial. Even if someone does show improvement after receiving the placebo, it's never justifiable to outright lie to them.
I'm pretty sure FISA has no relation to any of this.
I just tested this since we use google meet. You can open an existing calendar event and remove the google meet details and recreate them. Seems to give you all new PIN and meet address.
How does GMA.html send the creds back to their server?

Interesting question of who has culpability:

- Server receiving creds seems clearly in wrong

- OneDrive hosting the html file which can be used to exfiltrate creds is a bit murkier

- Hosting a link to the onedrive url on IPFS is murkier still.
No, because nobody really depends on DNSSEC, so nothing will break:

- https://ianix.com/pub/dnssec-outages.html

- https://twitter.com/tqbf/status/772103926258671618
How to Turn a Script into a +$110,000/Month Site
I've done it before. Some day I'll blog about it, but in the meantime here are a few places I've brought it up in HN comments:

https://news.ycombinator.com/item?id=14464929

https://news.ycombinator.com/item?id=15335915

https://news.ycombinator.com/item?id=17820410

I agree with the concern about schema flexibility, although since you'd be exposing only a derived, flattened, OLAP-oriented database, you can still change your OLTP schema without breaking compatibility. You just have to maintain the mapping from OLTP->OLAP. You could even version the OLAP schemas so that you have a controlled way of getting customers onto newer structures. If I were taking that approach I'd consider what Stripe has said about how they build "mappings" from one API version to another.

My email is in my profile if you'd like to talk more about this! SQL-as-an-API is a big interest of mine.
This is correct, but they quickly pivoted to targeting the Python codebases. Rob Pike has a talk where he talks about how Google used C++ and C to rewrite hot Python paths and how they wanted Go to be able to completely replace that whole pattern. Russ also has a blog post (maybe? it also could have been a comment in a github issue, tbh I can't remember) where he mentions converting python programmers was orders of magnitude easier within Google, as the C++ programmers often had rose colored glasses about their own abilities and the tradeoffs of C++.

It's interesting, as I don't think Go would have been successful without the pivot, but I also don't think it would have been as successful if they had started off trying to replace Python.
I did a security audit on a company that had a setup similar to this.

After popping an internet facing web server, I was able to compromise the IPMI system and use the management network to bounce around to any server in the enterprise completely bypassing all the firewalls and segmentation on the production network.

Management networks need rack level isolation.
By hiring adults?
Note that the link to the OneDrive URL does not come from IPFS. It comes from the URL fragment, which makes it even more murky as to whether the IPFS hash should even be blocked! Perfectly legitimate sites could be using exactly the same content with no knowledge of the phishing attack. It is just copy and pasted from https://itty.bitty.site/

I didn't look into how GMA.html works, but a quick look just now shows that it posts to https://searchurl.bid/joyceesther0101/finish1.php
Yes that's correct, it was a personal meeting room for a salesperson. But don't you think it's odd that I can call into to any meeting for months on end? Or that someone could do that to you? We were talking to them about a partnership deal, and would of needed to sign a contract which included certain non-disclosures etc. Yet someone could just call in and listen?
When the senate majority leader is speaking on the floor of the senate and complains about Americans using their constitutional rights to free assembly and ability to petition their representatives, then frankly, our Republic has jumped the shark. It's over. Forget pretending any of this is working, because it's obviously not. The only question is how it will crumble from here.
Considering the implications of a widely available unhackable computer on real security, crime and politics, and that many powerful people/organizations are working to prevent distribution of this technology, do you really think it would become available ? how ?
I'm pretty sure the FBI (if they even would) would only say you are required to do that when deposed, not in voluntary statements to the press...
Google needs growth. They are a public company, investors want growth. You won't grow without more revenue, you won't get Google kind growth in revenue on their home turf, over-saturated markets. This all leads to abolishing moral constraints, moving into new markets.
Sounds like you don't work with a lot of millenials, that might be another factor.
Shutdown Facebook?
Never have query APIs on your operational databases. Either use a read-only slave, or another database filled through an ETL process. This allows you to refactor your main database, without impacting your API. Also you avoid the performance impact of the APIs on your main database.

As an alternative for SQL you can consider oData, it's standardized REST compatible generic query language, similar to graphql, but supported in BI tooling like PowerBI, tableau and excel.
Worth watching "10 Things I Regret About Node.js": https://www.youtube.com/watch?v=M3BM9TB-8yA
The thing humans seem to fear most is that our existence is just as ephemeral as that of the mayfly or some other being that is not troubled by self awareness. How far will we go in avoidance of that idea?

This is the point of Buddhism, the work of Alan Watts, etc. It's nothing new.
While some folks here are joking about mirroring text, there's a sane point behind that.

There's an ancient Greeks' way to read text more effectively called Boustrophedon. The idea is that the text lines are interleaved with x-axis mirrored lines, so your eyes move not by Z-shape trajectory, but like meander. There're demo texts to learn to use it [1].

As for my experience, I can't say I'd been understanding or remembering more or less while reading boustro, especially when I'd begun to get used to it.

[1] https://boustro.com/app/
Rifts breaks because a reporter wants it to be real so it can be reported, magnifying the response from some extremely vocal employees, and ignoring the rest

Sounds about right
The Machines Can Do the Work
This is an excellent hindsight-2020 project, and the concept is overall an improvement on Node, but I'm afraid the ship has sailed and Node's momentum is too high to stop. Not that mainstream usage was ever its goal, it was basically a proof of concept for Ryan Dahl to demonstrate how he would do things differently if he could start over, and that yes, it would be demonstrably better than Node. On one hand I wish TypeScript got more love, but on the other hand its inherent unsoundness kind of makes me want something like ReasonML[1] to win out in the long term instead.

[1] https://reasonml.github.io/
Spend time with the code before you ask for help. Try different things, break things locally and understand how the code stands in a bigger system level picture. If you are in a good organization, they will support you breaking things in staging as it will provide them a better picture of code reviews etc. So break things and learn fast.

Most importantly, junior software engineers and interns often complain that the work they do is not impactful - it may seem that those around you are doing impactful work (and it might actually be true in a very few cases), but don't let this effect your peace of mind and not let you give your best. Every work you do must show a characteristic of your quality. Engineers must be able to provide anything in their field, at all levels of their stack, regardless of how important they feel their work might be. Always respect your work and be grateful for getting an opportunity for working on it because someone did not get that chance.
Couldn't it be the case that a lot of the scientists investigating this hypothesis are very philosophically-minded and are aware of all of these things and know it's probably non-falsifiable and futile? Even if you believe that, it still can't hurt to try. Science is all about testing things. If there are some things we can check, why not check them, just in case? And even if we don't get any closer to knowing whether or not we're in a simulation (which we probably won't), we could still learn other things in the process.
The original game would remain under the same license, but you can distribute any separate additions (i.e. no modifications of the source code) without "infecting" them with GPL.

It's equivalent to selling an Android phone with proprietary apps preinstalled.
Obligatory link to http://antipolygraph.org, which provides detailed research on why the polygraph is ineffective, details on how to defeat the polygraph, manuals used to train polygraph investigators, and many other juicy tidbits.
I had a weird experience where I was offered an interview at a company I respected, but who used ruby a lot. I explained that to everyone in the chain that I'd want to try and work to change that, and eventually got rejected because I didn't like ruby.

It was a weird experience. But I got a nice lunch out of it. I'm still not sure what they got out of it.
I'm with you. Whichever side you're on, Facebook's products and services now have a role in society where their decisions will inevitably have a deep impact. In some cases, like the Rohingya crisis, lives are literally at stake.

It's not just Facebook, either. I got tired of getting a sick feeling every time I woke up to see my employer in another controversy, which is a large part of the reason I'm an indie game developer now.
And the slides: http://tinyclouds.org/jsconf2018.pdf
«Ζέσταμα» με τα πρωταθλήματα της Παρασκευής
I think UberConference does all of that.
Official response is up here: https://www.supermicro.com/newsroom/pressreleases/2018/press...
This seems like an odd reaction from employees. There are many places you can go to work where the institution has clear values and a mission. Fb isn’t one of those places, that should be abundantly clear by now.

So what’s behind this overreaction? The dual need to get paid a fortune and be able to virtue signal about your employer’s political alignment at dinner parties?
Seems a shame that there wasn't a Portugol interpreter/compiler handy to at least see things running on a machine before moving to C. Probably would have been a good class assignment to more advanced students to build something like that.
To use calculus as an analogy, as the number of people in your meeting approaches infinity, the confidentiality of that meeting approaches 0 anyway. You may still verify everyone's identity, but someone is going to be leaking enough information that it's close enough to just having a lurker who shouldn't be there.
Terrapin Logo for the Apple ][ and C64 came with a 6502 assembler written in Logo by Leigh Klotz, that they used to write Logo primitives (for controlling the turtle, etc).

It would be ambitious to make a self hosting 6502 Logo meta assembler, by porting the entire 6502 assembly language Logo source code to the 6502 Logo Assembler!
Why not a secure runtime on Golang instead? just curious since I saw in another article here today that the author of Deno(also the creator of nodejs) prefers Go for server stuff.

Leveraging JS popularity is one reason I can think of.
Ah, I didn't catch that the Base64 string was part of the query param, not stored in IFPS. Yeah, seems like IFPS data isn't offending whatsoever in this case.

Interesting that it is 'facilitating' phishing (as in dependency in attack chain), but only to the extent that would apply to a number of general-purpose open source libraries, or the browser, or any OS or ISP.

Seems like DigitalOcean made the wrong choice, but the technical complexity of the situation is enough to not put too much blame on them. Unresponsive support is disappointing.
Not having the backbone to reveal it when you discover a fault is not what that comment was getting at
I should have been more clear. People left due to their unhappiness with the company merger, not the development team merger specifically.
Are the political moods and opinions of big tech employees now a matter of daily news reports?

For every event, there will be front page news stories alerting us to Facebook / Google / Amazon / Apple employees' reactions?

This is our news now?
If you're using channels "properly", then you only have one thread writing to the map at a time. In this case, "proper" use of channels is easy enough, but there are plenty of cases where "proper" use of channels is (in my opinion) a fair bit harder than proper use of mutexes, which is one of the problems Go's concurrency scheme was meant to solve.

I will say that even in spite of the above criticism, I've found that writing safe, concurrent Go is quite a lot easier (channels are still useful if not the panacea they were made out to be), but it still takes a bit of planning to minimize the risk of creating race conditions (minimizing the interaction points between goroutines, not throwing goroutines at every problem, etc). This takes experience which requires social controls instead of technical controls, which is a bummer, but on balance still better (IMHO) than the problems brought by other languages with technical controls for this particular problem.
Well, the answer depends to some degree on the kind of co-founder you're looking for, but I'd strongly suggest starting with LinkedIn and looking for people with previous startup experience, particularly in your area. Previous startup experience is the best predictor of success, even if their previous ventures failed (though it's always good to know why.) Also, make sure you get people who can think and communicate clearly - this is important even (or as often, especially) for the tech leaders. I get a few people a year approaching me for IoT startups - I'll almost always meet with them and point them to someone who might be able to help them if I'm not the guy. (I'm not interested in raw startups anymore - I've got plenty of great product ideas of my own if I've got to go flog funding...)
Not the Civil War or Yugoslav war, but you might find the Hardcore History podcast series "Countdown to Armageddon" enlightening. It's about World War I, including the run-up to the war. He has 20+ hours of material, and it's absolutely chilling.

If you're looking for an analogy to American politics as "second civil war", it won't help. But if you're looking for how two sides are willing to destroy themselves trying to destroy each other, it's amazing.