skysight-inc/HackerNews huggingface dataset:
Even if the suburb doesn't have "bums", the area around your job still does, no? So now you also e.g. have to bring lunches rather than taking advantage of the restaurants nearby to work. Kind of constraining.

Also, even if you aren't "living in terror", it still makes you feel instinctually guilty to see people less-advantaged than you, doesn't it? And I would posit that that feeling makes you less productive. (Just like e.g. feeling guilty that you did something bad to your SO makes you less likely to engage in fun activities with them, which decreases the total experienced quality of the relationship for both parties.)

So, even for someone who lived entirely in the safety of suburbia, ending homelessness might have positive knock-on effects for the productivity of non-homeless people due to decreased guilt (and fear), and thereby positive effects on the local economy, and thereby the local tax base, and thereby would improve local civic infrastructure et al. (Oh, and also, people that didn't want to move into the city—like you!—would now move into the city, also increasing the local tax base.)

Or, to put that another way: moving municipal funding from sidewalks to homeless shelters, may increase the total municipal budget, thereby allowing the city to provide both sidewalks and homeless shelters. "The entire world's burdens" never enters into the equation.
I'm a senior in high school and some of this is relevant to me. I'm a self-taught programmer since the beginning of high-school (although I was pretty bad at the time, and still am), but after just a few weeks of playing around with arbitrary code, I was able to pick up the filesystem pretty easily. I took AP Computer Science last year and the basics of the filesystem were briefly taught in class, however not very in-depth and most of my classmates still don't understand it to this day.

As for typing, I'm a touch typer and have been since around 5th grade. When we started using computers at school (a new phenomenon, I know) everyone had to be able to type fast. In first grade we also had to learn how to type in the "computer lab" and for homework on our home computers, which I'm very grateful for now. I can type at around ~119 WPM now.
Anti viruses are broken and no longer work these days. Don't believe me? You don't have to take my word. You can take the word of John McAfee who developed the McAfee antivirus:

Well anti-virus software no longer works. That paradigm that I invented does not work in the modern world of the internet and hackers and social engineering. New hacking techniques have obviated virus scanning software, it's simply, it's non-functional yet everyone continues to buy it because that's all that they know - John McAfee ( https://youtu.be/WBgFGwJA1D0?t=9m28s )

Lessons to learn here: Anti viruses are full of garbage heuristics with tons of false positives. The only good thing about anti viruses is that if a file is known to be malicious, that exact file can be recognized with its hash. However all the heuristics are nonsense.
> So the story is, as it is for nearly every physical artifact in my life, "Because people are easily lured by bright objects and catchy marketing into associating quality with anything but the quality of the goods."

Bright? According to the article, the pencils were painted yellow to symbolize China, because their graphite was sourced from Siberia. (Seems like a stretch, but that's what it says...)

What does brightness have to do with it?
Do you have a better solution for differentiating yourself as an actual user from a robot spammer?
Switching email providers is reasonably painless, fwiw. Set up forwarding, migrate mail when you can.

Even better if you set up the majority of your non-security-essential mail to be at your own domain, hosted by Fastmail/etc. Then you can easily change your email provider and your contacts don't even care. I've yet to implement this is in my own life, I just switched to fast mail - so I can't speak from personal experience on the domain portion of it.

NOTE: I mentioned non-security-essential email in reference to things like, your bank login or things that could threaten your life essentials. I say this because theoretically (and has happened before), using your own domain increases the attack surface area. My personal plan is to setup custom domain email with Fastmail, but still use the plain me@fastmail.com for my security focused emails. The majority of my email will still be based on my custom domain for easy portability, but I plan to avoid that for my bank, for example... assuming fast mail lets me.
Not OP, but I got one of these for free from a colleague 5 years ago and it's still going strong: https://www.amazon.com/dp/B002HWS9FW/ref=cm_sw_r_cp_awdb_t1_...

Paired with a good charger and an extra set of rechargeable batteries it's a joy to use. Best health "investment" I've done in recent years.
Does anyone know if there have been notable changes since the v2 rewrite[1], or have thoughts on how it compares to alternatives?

[1] https://goldfirestudios.com/blog/143/Howler.js-v2.0-Released
Does this require an extension on the file? One of my pet peeves with Sublime is that every package for beautification, syntax highlighting, and code-folding requires whatever I'm working on to be saved to a file using a specific extension to enable those features. Sometimes, I just need to copy and paste a few blocks of code and format, re-indent or any number of things but I don't necessarily want it saved to disk. I know this is a really niche situation but Atom is looking more and more promising to me and this edge case would help make that switch totally justifiable.
Lode's Computer Graphics Tutorial
We talk about "internet witch hunts", but I hadn't really considered that it might be useful to compare the situation with actual historical witch trials:

Ferguson said that the phenomenon of polarization was predictable, when one considers similar historical events.

To understand our time, he said, you must go back 500 years to the early 16th century, when the printing press became widely available. It allowed a greater volume of content to be produced and disseminated with a lower cost of communication.

The Mark Zuckerberg figure of that time was Martin Luther, the leader of the Reformation. Luther’s axiom, he said, was that if you could read the Bible and have a direct relationship with God, everything would be awesome. But what ensued was 130 years of conflict due to polarization. Half of the population wanted to reform the church, the other half didn’t, he said.

The most insidious manifestation of this polarization was in the persecution of those considered to be witches. The “witchcraft mania,” Ferguson said, was not just in Salem, Massachusetts; it swept across Europe.

Today we see a similar manifestation in the context of fake news that spreads faster than true news, which undermines our confidence in the media.

As an aside, in the unlikely event that you are passing through the small Arctic town of Vardø, Norway, there's a stunningly understated monument to the "witches" killed there in the 17th century. The main museum is a long raised hallway, with dangling light bulbs illuminating excerpts from the court records of each person that was executed. It's in historical order, so one reads of one person who accuses another of witchcraft leading to their execution, who then in turn is denounced and executed, who then in turn is denounced and executed, layer after layer after layer. It's really quite a chilling museum, and a testament to a legal process gone awry: https://www.iconeye.com/architecture/features/item/9674-pete...
Files, directories and paths are such a fundamental concept, yet I am surprised how few computer users are actually familiar with them. To me it seems that most computer classes at the high school level can be divided in two groups: One which is basically a class for typists, where you learn how to type fast and how to edit documents. And then another one which directly (and often exclusively) teaches coding.

However what's often missing is a class which teaches basic computing concepts. Files and directories are just some of them. The basic von Neumann architecture (a CPU changing ram), what a program is, how the internet protocol and the domain name system work, different parts of a URL, how a frame buffer determines what is shown on the screen, how colors are encoded with RGB values, etc. These are all very interesting concepts that could be taught at the high school level. There's a lot to be learned even without going into the technical details and I am confident that these students would then find (desktop) computers much more accessible. Smartphones and their touch interfaces have been a runaway success and I think this is in part because most people never got comfortable with traditional desktop computers (and their GUIs) due to decades of misguided computer classes.
Even when I ran noscript Google domains were allowed. It's extra step for a small number of technical users.
I don't think this was any different ten or fifteen years ago when I was in high school.

We even had actual keyboarding classes and Mavis Beacon and everything, and I wasn't able to consistently touch type until about a year and a half into my first job as a software engineer. This was coincidentally about when I started using IBM-layout mechanical keyboards almost exclusively; I'm still regularly thrown for a loop when I switch to keyboards with other layouts, so I probably am still not actually touch typing properly, I just have built up enough muscle memory that I get by on the particular hardware I spend 8-12 hours a day hammering.

As far as pathing goes, and specifically the use of the particular convention we have around . and .. meaning present directory and parent directory, I'm not sure I was even exposed to that until I took a C/Unix programming course in college and had to get used to navigating a Linux file system in a terminal. The first computer I ever had started out with some type of Curses-style DOS shell that abstracted most of the nitty gritty details, and from there went to Windows 95->98->XP->Vista->7. As a regular PC user on Windows, you don't deal with the command prompt, you deal with the file explorer and the save/open file dialogs. When I started programming in high school, it was QBasic, then VB6, then basic C++ with Visual C++ 6 and Bloodshed, then Java working out of an IDE (JCreator or Netbeans?), and again, pathing was not particularly emphasized. Building out student-level projects, I think I just dumped whatever files I needed in the cwd, or in paths under that tree, or popped open file picker GUIs.

You really have to live and breathe this stuff day in and day out for a while to internalize it, and I wouldn't say I was really comfortable until maybe a year or so into being a "professional" programmer.
and yet I always hear the argument, "but it's open source, just like Linux".
Yep. Proper password hashing requires per-credential salt, pepper (for all credentials) and a strong algorithm (IV, iterations etc.) Revealing all those information is a leak and arguably making client side hashing less secure (by giving away a lot of parameters for attackers to attack)
...and speed, and decreasing the amount of arbitrary code execution on your machine.

Most people don't disable JS entirely, but use something like uMatrix or noscript. It takes more work, but you can turn off a significant number of things that just don't need to be executed and get around a lot of annoying modals and paywalls (or see a lot of blank pages; that happens a lot too).
> (Wrapped in a TLS connection of course.)

So, not cleartext over the wire then.
Sure, "cuckold" (as applied to hats, not in general).

But I doubt that's what they're going for with the pencils.
You mean like nit-picking?
I’m one of those people high THC weed changes perception of reality for me. It opens doors and way of thinking that should be locked or shouldn’t exist. CBD in the other hand, improve reasoning. It helped me a lot on many human relations.
If the client hashes the password then the hash itself is the password. Meaning stealing the hashes passwords is the same as stealing the plain text password for which they're based, since you can post them direct.

Blizzard entertainment does half client half server hashing which is rather clever, one of the few examples where client hashing makes sense.
You can absolutely use stand-alone "hi-fi" amplifiers for guitar; that's what I do. You just can't plug
your guitar straight into that; you need some pre-amplifier gear. My gear is old-school in a big rack, described below.

Nowadays, there exist units that provide complete signal processing for guitar: simulating guitar pre-amplifiers, amplifiers and speaker cabinets digitally. You plug your guitar into this, and then it can go straight into a PA system, or your recording console. Something like that can be used with an amplifier like the one being built here.

My rig consists of a 6U portable rack case with a few pieces of gear. The guitar goes into an ADA MP-1 MIDI-programmable tube pre-amp (built in 1987, revamped by me). This goes into a splitter-mixer (called the SMF-1 that I built myself) which bifurcates the signal through a digital effect unit that provides reverb, and then mixes it again. The dry signal remains analog. Then it goes into a 31 band equalizer, and from there to the power amplifier, an Alesis RA-100, which feeds a guitar "4x12" speaker cabinet (four 12" speakers). I could take out the amplifier and drop-in replace it with any rack-mountable amp, provided it doesn't require more than 3U spaces. QSC, Yamaha, Yorkville, whatever.

There also exist dedicated rack-mounted power amplifiers intended for guitar, like the Rocktron Velocity or Marshall Valvestate 8008 (both of these examples are stereo). Many of these kinds of ampls have been produced. These are just power amps; they can't produce any overdrive tones and have only minimal tone control or none at all. The 8008 has a switch on the back for "tube like" behavior, which just means current feedback. That will give it more of a mid-scooped frequency response, induced by the reactive speaker load. I can do something like that with my equalizer.

The amplifier project we see here could be turned into a guitar amp by adding a preamp circuit board into the chassis, fed by a guitar input jack, and exposing some tone and gain controls. The stereo function of the amp could be useful if we add jacks for an external effect loop and make it stereo (mono out, stereo in). Then we need a stereo guitar cabinet: minimally a 2x10 or 2x12 wired for stereo.
if you're in the position to or are developing an app use argon2!
Drugs do not just lead you to harm others. In fact, like alcohol, most drug users probably do not harm others. But both cause significant self-harm. And society ends up bearing the burden of helping people who aren't able to help themselves, be it on an individual level or a governmental level.
I am wary of making predictive generalizations, but I have been thinking about the effect of "just works" computers for roughly ten years. The robotics program in my highschool folded after I left, in part because no one was left who could write the programming. Watching my nephew grow up on iPads and iPhones: I learned how to use computers by breaking them, and then fixing them. iOS doesn't let you screw it up, and there are too many addicting games to suck up all his time anyway. I'm considering teaching him some things now and giving him a cheap laptop or rPi, but I doubt he'd choose to use that over the silly endless games on iOS, or the bottomless pit that is YouTube.
First off, the design Kimberly-Clark used on their toilet paper wasn't an exact ripoff. It must have repeated itself in some regular pattern, in order to have been mass-produced in 500-sheet rolls. Thus it couldn't be more than a kissing cousin to the Penrose original, which is noteworthy for never repeating itself.
Yes I meant sending the password cleartext inside the transport protocol*

pre-hashing doesn't prevent an attacker from stealing your account if it can read the communication, but it prevents it from having your password and using it everywhere else where you might re-use the password or a permutation of it
Books We've Read Since Starting Our Company
I average 35, if that. Work in fintech. Once or twice a year there's a week where in pushing 60+ but that's usually on my own volition.
The submission form [1] asks explicitly for what would appear on your W2 (ex. vested value). Part of the reason why comp packages have been so high in last 1-2 years is that stock grants that were given to employees 2-4 years ago have shot up in value via a bull run stock market. To attract these employees, companies have to outbid their current expected take-home pay. Thus the vested value is actually most relevant when you are comparing your current compensation and new offers.

[1] https://www.levels.fyi/addcomp.html
How is sending the password to the server over HTTPS bad? What would you do otherwise? Hash it on the client? So are you not using salted hashes for your password store? That's far worse. Or you're hashing twice, the first with no salt client-side, then again with salt on the server side, which is fine, but the client-generated hash must be unsalted so is basically just the password itself: steal the client-generated hash instead of the original password, just as good with only minor loss in value (might not be able to reuse it on other sites for the victim; but actually maybe still could if you can build a reverse index of common passwords hashed using whatever algo is in use.)

And if you don't trust HTTPS to protect sensitive information, why would you send the auth cookies over it that have virtually as much power the password that was given in exchange for them in the first place?
Yup, you can add your own here: https://www.levels.fyi/addcomp.html
Did Google have a lot of Python in the early 2000s?

In 2002, C++ had a plethora of non-standard hash-tables: http://www.drdobbs.com/the-standard-librarianhash-tables-for...
Today there are a plethora of standard hash tables.

Yet C++ isn't dying like Lisp.
I do sometimes. Mostly to read articles on sites with a poorly implemented paywall that simply doesn't work with JS disabled and shows the whole content. As a bonus often half of the ads are not served as well.
Mmap in Go considered harmful
Running untrusted code on your machine _is_ a bad thing though.
The hardware sale is usually a scam to yield fatter renewals.

EMC did something similar with avamar... you’d buy spray painted SuperMicro boxes runnding RHEL and pay for software as well. Come node end of life, you have to buy the software and hardware again, even after paying the 20-25% maintenance.
I had a good experience with Howler.js v1 a few years ago and built a library that joined musical pieces together in semi-random order for a game. The system is still running on eyewire.org today.

I haven't studied v2's differences in depth, but in v1 I made a few customizations to add timers, chained cross fades, smooth muting, and perceptual volume control (i.e. takes into account the logarithmic response of hearing).

https://github.com/seung-lab/howler.js/commit/fe445afd12cc7b...

https://github.com/seung-lab/sonic-shuffle/blob/master/js/So...

https://github.com/seung-lab/sonic-shuffle/blob/master/js/Mu...

Anyways, thanks Howler team, you made one of my projects much easier to do!

EDIT: Removed an inaccuracy, it's been a while since I looked at the code.
How is this nonsense upvoted on hackernews..?
My experience is that static typing tends to lead to higher coupling and monolithic design, while you tend to break things up more aggressively in a dynamic language like Clojure.
I have a lot of issues with google apps for business.
Sometimes I have to refresh the browser 5-6 times before it will display any email in the primary inbox as well.

It's just horrible to use in firefox (in arch linux) and I'm currently looking for a new provider.

I might just go all in and use protonmail.
try https://gryd.us
Trump espouses the views I enumerated. He supports the dehumanization of, and in some cases violence against, women, LGBT+ people, and people who are not white.

Therefore, anyone supporting him also supports these things, and should not be welcomed.
> We spend a lot of our time reading long-form content online already

That's exactly the point. There are things I do on paper for no other reason than I'm tired of looking at a screen all day.
What’s your point?

Are you saying that it doesn’t matter that sovergty was taken violently from the Hawaiians because their ancestors conquered the original inhabitants hundreds of years ago?

Would it be fair if Russia came in and took Hawaii from the US because the “History of Hawaii is all about using force to take land from the population”?
“If people won’t consume less” - people will never consume less. With current population growth picture of the future becomes even more colorful.

And in some under-developed countries an average birth rate was 7 children per woman not so long ago. And we are currently de-funding Planned Parenthood. Awesome move! And due to the “selfish-gene”, human-farming is the life goal of almost every single individual. Is it sustainable? We can argue.

Kudos to Musk for looking at the Mars.

Maybe not so during our lifetime but shit will hit the fan realatively soon here on Earth.
Being allowed to pay for services with money, rather than being required to pay for services with your personal data. I browse the web via a proxy when I'm on public wifi, and Google is nigh unusable with how many captchas it forces you to solve to do a single Google search. Fortunately Bing and DDG still work, for now.
Salts are not meant to be secret, nor are the hashing functions. You gain little by hiding them
Presumably, internally to Apple, XNU is built mostly on build-servers. Maybe even the branches having CI build-on-push, and test machines able to PXE-boot directly to a given branch's tip build. In such a case, you'd never need XCode to successfully build a standalone XNU at all.
Thanks. I did try the book a few years ago, but I remember after the first couple of chapters I got bored and gave up. Seemed like there was no actionable advice, but maybe I should give it another shot. I have heard from a few other people that the book helped them quit for good.
Calling other people, or their opinions, shortsighed and self-centered is usually not the start of a good conversation.
Thanks for the feedback! We've been currently been heads down working on adding account functionality so that folks can start reviewing companies / teams within companies. As soon as that's out (next few weeks) we're hoping to work on more granular compensation information as well!
They are trying to detect state actor hacking and track individual devices and whether they are new or impersonations of devices.

Some states have mitm certs on all their domestic machines but (hopefully) not much competence except on whatever schedule they buy updates.

I would be implenting a u2f soft client in js if I were Google. IMO you need a private key a state would need to retrieve by tampering with js and that isn't being sent over the wire with every connection. (Just to give them their first level of headache, when it comes to transitioning from observing to impersonation.)
All of modern society is this way. Masters coerce with salaries. Societies can not be built or maintained through the power of inspirational charisma from leaders or good will from the people. Money talks. You need to pay me a salary.
‘MARUI’ Brings VR Support to Blender
> The privacy loss of one account being popped is likely far greater than the privacy loss of thousands of users' browsing patterns being correlated.

That's quite the hand-wave. How do you even measure privacy loss? And given that browsing history is not in your inbox, why are you so confident that one compromised email account is a bigger deal?