skysight-inc/HackerNews huggingface dataset:
Very good points. Just to add a few more details on the LSP and VS Code side of things:

- VS Code implements syntax-aware code folding using the LSP. This means that folding is super flexible but it is also makes computing folds fairly expensive. And every time the document changes, the language server has to re-compute and update the folds. In almost all cases, language servers is just generating folds based on the document's syntax anyways.

Tree-sitter is interesting because it lets folding and other syntax based language features be calculated accurately and quickly on the client, freeing up the language server to do more interesting things (or just go to sleep for a moment). Document outlines are similar; VS Code uses the LSP for this but in many cases the same syntax derived outline could be generated by tree-sitter.

- The LSP probably isn't well suited to general syntax highlighting due to computation cost and communication chattiness concerns, but the LSP may eventually support semantic syntax highlighting [1]. This could, for example, allow an editor to color all singletons hotpink, which requires a semantic understanding of the code. Semantic highlighting would augment the base highlighting provided by tree-sitter or by a TextMate grammar.

I'm the developer of VS Code's JavaScript/TypeScript and Markdown support, and am interested in tree-sitter if only in the hope the it will free us from TextMate grammars. If you want to see just how far regular expressions can be pushed, just go browsing through some of these bad boys; TypeScript's is a classic [2].

Keep up the great work Max!

[1]: https://github.com/Microsoft/language-server-protocol/issues...

[2]: https://github.com/Microsoft/TypeScript-TmLanguage/blob/16c5...
China Telecom does something weird with NAT, not sure what exactly but I've seen it mentioned here before
Amazon is fat and lazy now. They grew by offering the lowest prices on products you know, with fast shipping. Now, you don't know what you're buying or that you're getting the best price, and shipping isn't as fast.
JavaScript is fast becoming, if it hasn't already, the next rich GUI framework... It was supposed to be just touch up on HTML, now you can't sign in anymore w/out JS enabled. What if I wanted to do a rich client in C# or Qt? Do I need a JavaScript engine to sign in?
Wait, so in his book, Bill Bryson casually overstated the natural CO2 output by a factor of a thousand? I have to wonder how such a massive mistake got through the editing process. It's not even a simple typo, it's the lynchpin of Bryson's argument that humans contribute a negligible fraction of total atmospheric CO2.
Use a password manager and don't reuse passwords. If your randomly generated, unique password has good enough entropy then why go through all of the trouble of the rest of the client side hashing?

There's nothing stopping you from hashing your own passwords client side and sending your bcrypt hash up to the server except some sites still truncate the passwords to 32/16 chars etc.

When you have the need for the level of security, client side hashing will not be as good as dedicated HSMs that many services now use on authentication.

Writing your own crypto flows can be extremely dangerous as you open yourself to all kinds of side channel attacks.
The easiest way: Buy a Chinese phone
> For instance, a Google recruiter once told me to spend a few months becoming a Python expert, and then they'd interview me (in Python);

Most SWE hires are generalists at Google, not tied to a specific language.

Unless you're being hired for a specialist role, you should absolutely be able to interview in the language of your choice. It's sometimes harder to put together an interview slate for a less popular language, but that definitely shouldn't make your recruiter force Python.

> Also, I imagine it's that much worse for people outside the Bay Area.

Actually, FAANG companies are some of the only ones with strong compensation in offices all over the country and globe.
see the peer comment though. The thing I had asked about, was less than what is actually being done! It sounds like the project will actually result in a net reduction of two telescopes.

Keeping that in mind, and the physics of the situation regarding elevation and atmosphere etcetera, it's tough to side with the protesters on this specific dispute.
I was at the IBM LTC from 2001--2009 as an STSM, and my understanding was that DE's could absolutely get promoted to Fellows. So assuming that Fellows are "just" the highest rank of the research rank is not really accurate. Perhaps that's what you mean by "diluting the merit of the title", but that sounds like you're coming from the Research side of IBM. :-)

Yes, it's rare for a DE to get promoted to be a Fellow, but that's because there are very few Fellows at IBM. And there's no reason why a Fellow would want to become a DE, since that would mean taking a pay cut. (See below)

From a salary band perspective, STSM is actually the highest rank of the engineering track (aka Band 10). A DE is paid on the bottom rung of the executive track (Band D), while a Fellow is paid as an Executive Band C. Which means a Fellow may be the highest rank of the "research track" but a Fellow is still going to rank below an SVP or GM from a salary perspective. :-)
Using just bib number can we estimate the total number of entrants in the race?
BUG: Level 66 salary for Microsoft is more than level 67!
This is why server side HSMs (hardware security modules) are a thing.
Deprecate Triple-DES (3DES) and RC4 in Kerberos
I'm inclined to think a combination of 3) and 1). For example the jump in base salary for Google from T5 (171k) to T6 (260k) seemed suspiciously high. So I looked at the page for T6, and it has 15 entries, most around 200k-220k, but one 550k. That's probably wrong. I think the reporter switched salary and stock (which shows 200k).
That number thrown out at the end is pretty mind-blowing: Google pays almost a tenth of their total revenue just to stay as the default search browser on Safari on iOS and MacOS. And Apple gets nearly 5% of its total revenue from this one deal.
American Finance loves debt because thats the most powerful instrument they have in business of wealth creation out of thin Air.

i.e Government Issues some Bonds -> Bank buys the bonds with bonds at interest, Federal Reserve print more green paper using the instrument of debt and we all(world) stupidly buy American green paper(Dollar) thinking it has value.

Few cycles, a economic crisis and a purge later they print more notes and cycle continues.
Make Money Online Forex Trading – How Good Is Forex Trading?
Which is a better career choice – Machine Learning or Distributed Systems?
I am in need of a career advise, I hope this forum will help me make the most difficult career decision of my life.

My background - I have 12+ years of experience of working as a systems programmer (Linux userspace & kernel). I am currently working
for a reputed MNC in India, Bangalore.

Recently I somehow landed up into a situation wherein, I got a job opportunity NLP, Machine learning - this is completely different
from what I hve been doing until now (which is systems work).

Also, just week before I got this job opportunity, when I was totally confused about my career goals,
my friend who is also working in systems advised me to work on a open source distributed file systems project to advance my career.

My question is simple -- which would be a better choice to go for in long run ?
Wildly successful after $6b in debt was written off, and only in a small (but profitable) niche, not the originally envisioned mass market. I know it sounds ridiculous now, but the original plan for Iridium was to replace that traveling exec's GSM phone, with the expectation that handset size & pricing would drop as the service grew.
At least no email. Imagine that.
Danish physicists claim to cast doubt on detection of gravitational waves
Damage to the stock market is much, much worse than anyone is talking about
Fully Reworked Versions of Java SDK and New Paragraph Format APIs in Cloud Apps
I am on a bus, but I want to point out here that CO2 is a powerful greenhouse gas because of its volume and its residence time. Its half-life in the atmosphere is far far longer than the H2O molecule, so its corresponding contribution to the greenhouse effect is also greater over time.
> Having a bunch of employees standing around being unproductive hits them right in the wallet.

Google can quickly fire them and have replacements onboarded by the end of this week.
But the vast majority are memory corruption and sandbox escape issues.

...which require JS to exploit. (What is a "sandbox escape" if there isn't code to... escape it?)

I went through the 50 vulnerabilities on that page and looked at the nature of them and inspected any PoC code if any. This is the results:

PDF,JS,JS,WebGL(JS),JS,CSS,JS,JS,extension,HTML(but PoC needs JS),JS,PDF,PDF,MIDI(JS),AppCache(JS),PDF,JS,UI,WebRTC(JS),JS,JS(speech recognition!?),JS,JS,JS,JS,JS,JS,JPEG(rendering uninitialised memory --- not exploitable without JS to read that data),JS(WebWorker),HTTP/SSL(!),SVG+JS,UI,JS,XML(!),SVG+JS,JS(audio),Fonts(actually Windows font renderer bug),UI,??(no details available),IndexedDB(JS),WebGL(JS),UI,JS(WebSockets),NaCl(extension),extension,PNG,WebGL(JS),?,JS,WebGL(JS)

That's 32/50 confirmed to require JS to exploit, and only 3/50 stood out as being "visit a page with all plugins/JS/extensions disabled, and still get pwned", of which 1 is actually a Windows bug.

Disabling JavaScript insulates you from a nontrivial - but nontheless minority - subset of browser vulnerabilities.

Looks more like a majority to me.
I didn't play with forced compression, so most of such files aren't compressed by btrfs. With forced compression, overall ratio will be higher.

But if you have raw video, I expect it to kick in more.

I.e. for my archive volume compression is quite low (99%). For example for games volume it's better (81%).
That's true, but it's also counterbalanced by strong equity growth over the past few years. A $100k/yr GOOG grant from 2014 is now almost $200k/yr (even ignoring refresh and raises).
Thanks. I was looking at the wrong number. The scale difference is in the "200" number.
Yes, plenty of apps allow you to sign in with Google -- they open up an embedded web browser for the sign-in dialog and oauth permission screen.
There is nothing wrong with computers. It's the current commercial internet landscape that's broken behind repair -- mostly the attention/advertisement economy.

I've had so much fun with my first Apple IIc about 25 years ago -- and I'm looking forward to a calmer future when I can tinker with whatever I feel like again.
40-45% is not extremely high for California for someone unmarried with a mid-6-figures income.

For lower income levels than that, or if you're married, or live in a state with lower state taxes, the numbers look much better.
What’s the Matter with Fiction Sales?
George Eliot?
I'm about to try qemu/kvm for a virtualized macOS solution. I have a 1050ti as my primary GPU on Linux (arguably a bad choice).

What card do you recommend for GPU passthrough?
This is true, I’ve recieved a number of offers in finance that were good but underwhelming.
How to Judge New Techs Like Blockchain, AI, and Serverless? A Methodology
> The puzzles are just badly done, it's not even a vision or knowledge thing.

Yeah. The puzzles are terrible now, and I have a strong suspicion that they're no longer testing to see if you behave like another human, but instead testing you to see if you act like their own machine vision bot.
It is not especially unusual for industry hires (even those with plenty of experience) to come in at T4 for Google. Being productive and effective within Google is an additional skill which is not identical to the outside, so it's a risk avoidance measure on both sides.

Assuming your experience translates well, people frequently go for promo within a year or two.
The human mind is susceptible to priming. When I read the SciAm article earlier this week I was sure I read "200 Billion" since that is what I was expecting. But upon reading the conclusion that number made no sense and I swear the B magically became an M.
I'm amazed how little coverage Starlink, OneWeb, etc get. It's the next revolution and the most important tech since the smart phone.

Think about the great firewall of China. It's dead after this. Having a cell provider and home internet provider. Gone. Poor bandwidth anywhere on Earth - a thing of the past. This is important and huge.

Buy rural property that is undeveloped. In 10 years time you'll be able to power it with solar and battery arrays and connect it with these satellites. A self driving carriage will deliver whatever goods you need the same day. Water is a well away and a septic tank isn't difficult to build.
Thanks for putting this site together! Two pieces of feedback:

1. It would be valuable to ask for years at company and years in industry along with the reported compensation.

2. When reporting my compensation, how should I account for additional bonuses/RSUs due to being promoted? (E.g. climbing a level). I historically receive an additional 100k grant when I’ve been promoted, but I don’t anticipate that 100k on non-promotion years.
Getting started with linear algebra
For a more general introduction to how materialized views fit into a larger ecosystem of derived data, I always recommend Martin Kleppmann's post/video on "Turning the Database Inside Out": https://www.confluent.io/blog/turning-the-database-inside-ou...
> You need at least six months to really understand a complex codebase.

This might depend on the definition of 'complex', but I don't agree in all cases.

I'm in a project right now with one other team member - we hit the ground running with 'new' (to us) code. It's been just over 10 weeks, and we have a pretty deep understanding of what's there. Honestly, it's not terribly huge, but there were 6(?) other developers before us over the course of 4 years, and each one left things progressively worse.

In 2 months we have a better understanding of how the code fits together than everyone else who came before - which you can mostly tell via the commit log (and scant comments).

Now... I may be out of line saying they didn't "understand" things - they may have understood and just been too lazy to bother to not break things.

But 6 months is a long time. What you can learn in 1-2 months is just how bad things are, and what the most effective triage techniques can be.

What's helped in this case is that... I've come in as a contractor, and there is no one else to answer to (except the client). There is no one refusing commits because of code style conflicts. No one arguing about db schema changes, or asking for my time in meetings that have nothing to do with this project. So, in that respect, the 10 weeks has been fairly productive.

It's come down to experience, autonomy, lack of politics, and a focus on getting some architecture and tooling in place to allow for repeatable builds, tests and sample data. Not been smooth sailing by any means, and we're still uncovering bugs (big bugs) that date back 16 months or more.

I've been in other situations where fixing the difficult problems would a) uncover bigger issues that b) cause other folks to nix the whole effort, because it rocked too many boats, and my work was rolled back. Disheartening, and if you can't get buy-in, or at least free reign to fix something, it's time to move on.
> Throttle based on what?

User Id?
GMOs have been consumed as a primary food source daily by hundreds of millions of people per year with no known health risks, even after extensive study. Cannabis has been used for a while, but it hasn’t received the same level of study and concerns have been raised (e.g., this article). I’ve got to give this one to the GMOs.

> Secondly, legalisation of recreational drugs is, I'd argue, only tangentially related to the harm they may cause by using them. Take alcohol as an example. The legalisation of recreational drugs is, I'd argue, more about a) personal-sovereignty, and b) the harm caused by the war on drugs.

How does “personal sovereignty” explain supporting prohibitions against GMOs? The opposition to the war on drugs but seems plausible.
I find WebStorm much more productive than VSCode. Drag and drop files, refactoring actions, extract exports to another file, etc.

I'd like to eventually use VSCode, but so far they just don't have the same refactoring capabilities.
This is only true when client-side hashing is under control of the client. In a web browser, it is not. The browser will happily run whatever JS the server sends it. So if the server is compromised, it can send compromised JS, and there goes your client-side hashing protections.

An example of where it might work is in an app, where you're getting the client code from a separate channel like an app store.
YSDA Course in Natural Language Processing
According to the WHATWG:

https://html.spec.whatwg.org/multipage/scripting.html

"Authors are encouraged to use declarative alternatives to scripting where possible, as declarative mechanisms are often more maintainable, and many users disable scripting."

"Authors are also encouraged to make their applications degrade gracefully in the absence of scripting support."
From Wikipedia: "The term "class D" is sometimes misunderstood as meaning a "digital" amplifier. While some class-D amps may indeed be controlled by digital circuits or include digital signal processing devices, the power stage deals with voltage and current as a function of non-quantized time."

So what's it called if it is time quantized? The simple open-loop design depicted on the Wikipedia page could have the analog comparator + triangle wave generator replaced with a digital delta-sigma modulator (1-bit DAC). Then the switching times of the power stage would be quantized to the sample rate multiplied by the oversampling ratio. (Although it seems this open-loop model is an oversimplification, and real class-D amplifiers have feedback, so it wouldn't be that simple in practice.)
This is completely wrong. HTTPS is what secures this, not client side password hashing. If you don't use HTTPS, you can just get MITM'd to disable any kind of client side hashing.
Assembly Language Macros (1991)
If you don't work at one of a small list of companies (I've said elsewhere that "Facebook" would be a decent approximation, but Amazon or MS could count in some cases), you'll be downleveled when joining Google.
Ok..and then after a while they’ll walk back in for the free food and their mid day massage, before returning to their desk for work.
Why bother colonizing Mars at all? The place is worse than a dump.

Even the moon would be a better choice, this century at least. The cloud tops of Venus are heavenly, by comparison. Even asteroids have more appeal.

Antarctica or northern Greenland would be overwhelmingly more pleasant than any of those. Likewise the ocean floor, on any continental shelf. Texas.
We're thinking the same scope, just different titles. I'm more familiar with companies that level set as follows:

VP Engineering -> runs the 100 person org <L8 equiv>

Director -> manages managers (30 person org) <L7 equiv>
Did you consider writing the same reply to the comment I was answering to (that 0.2 is 35% lower than 0.27). Because the same argument about ranges and variations applies. Except that that comment was left at the firm conclusion that 0.2 is more conservative than 0.27, while my reply continued with the statement that I do not think the IPCC was wrong, but rather right.
Plus1 !

But I could see hosting and Paypal object to it. The domain registrar is totally out, they are tens of thousands of horrible domains out there, no one blames the registrar.

The problem is that this tactic will be used to take down everything that is today or becomes in 10-20 years "out of mainstream."
Yes, practical.
Google already controls exactly what you can do... on Google.

You're arguing against ubiquitous surveillance, when the OP is arguing for company surveillance of the way in which you interact with their login screen, on their site.
AI Beats 20 Lawyers in Legal Showdown
I think more interesting is the story of how a young woman did write Frankenstein.

I highly recommend Romantic Outlaws[1] a book which interleaves the lives of Mary Shelly and her mother Mary Wollstonecraft (mentioned in the article as well.) After learning more about her life, I felt authoring Frankenstein was pretty in character for Mary Shelley.

[1] https://www.amazon.com/Romantic-Outlaws-Extraordinary-Wollst...
yep.

First it was: it's not happening.

Then: but how much?

Now: but can we affect it?

Soon it'll be: are we sure it's a bad thing?

Then it'll be: it's bad but it's that other guy's fault.
You may wish to check out the MIT Pantheon project which ranks people not just by page views, but also by the log of birth year and number of languages that their biography has been translated into. With that metric, knowing Aristotle would be much more valuable than knowing Justin Bieber, whose name is likely to decline in importance well within one lifetime, and is perhaps hardly known at all outside certain countries.
Problems and consequences? Yes. Problems and consequences that affect non-homeless people who are just passing through and minding their own business? Doubtful.
Harlequin ebooks will no longer work on e-readers
Never liked webmail anyways.

Thunderbird might be superior, but I really like that App because it's so light and fast.
Okay, that's fair. I should not have included classical composition in that list.
Without a union, this is meaningless.
How would it do anything about the great firewall? All of these services will need their regulatory approval to operate there.

Also China has an anti-satellite missile program.

https://en.wikipedia.org/wiki/ASAT_program_of_China
Firmware updates on Linux & using data to influence procurement decisions
OT this content was posted by a user who registered just 3 days ago.

user:	chablent

created:	3 days ago

karma:	524
Automating issue triage with GitHub and Recast.AI
> It stops a compromised server from silently leaking unhashed passwords

If you trust the site to deploy correct JavaScript to do this, then that's the same level of trust that they implemented password salting and hashing server side. You don't gain any robustness by moving this to JavaScript.

Your scheme is just a weak salting technique. You'd be better off with just using a longer salt and hash function.
1. We actually do ask for this - it's toward the end of the form. :) Click the '+' on the left side of the row to show it.

2. The main Total Compensation field is per-year and the simplest way is to look at your W2. For RSUs / bonus we recommend taking the average amount you receive per year
I use Linux on my workstation, Windows at work, and Mac on my laptop. I don't get what's so terrible about the Finder. If anything, it makes you miss column view in other desktop environments (and space to preview!). [An aside, regarding Open/Save file dialogs: dragging a file into an open dialog is great, and neither Windows or Linux have been able to do copy that functionality. The best you can do is to copy and paste a path.]

I've asked this before and I've never received a list of grievances which led me to conclude that people are just not familiar with Finder.
I'm not at the max base pay ... though I have gotten to the point where the majority of my comp is in stock anyway. It's always a gamble, but I have enough confidence in Amazon for the long term that given a certain total comp target, I'd prefer as much of the comp as possible be in RSUs. Then again, I have enough financial security that I can also afford to lose that bet.