skysight-inc/HackerNews huggingface dataset:
> There is no substitute for the Lion King.

Kimba: https://en.m.wikipedia.org/wiki/Kimba_the_White_Lion
I totally emphatically understand, that for DMD authors, reporting their binary to a truckload indifferent AV vendors is the worst kind of kafka-esque, soul-draining, burnout-inducing, and quixotic chore imaginable. While at the same time they're certainly trying to manage a lot of hard chores already, where at least they have a bit more agency over the eventual result. There's only so much they can do with limited resources. They must pick their battles, and it's fully and only their choice to make, no one can force them otherwise.

Then, they're actually still patient enough to be polite and trying to suggest to the user what he/she can do to help the project (or actually himself/herself), in order to resolve the issue he/she has. And in response, the user is only trying to deflect any responsibility and work/effort, and aggressively trying to push it back on them, using some weird, illogical, and generally absurd arguments (that they also are politely trying to explain as being invalid). Instead of actually trying to do what they suggested, and what could actually help resolve the issue.

That's how it would look like from the authors/maintainers' side of the fence.
So... is that all of them?
Worked with static typing for about a decade primarily with Java in the enterprise. However, I've also used Haskell and Scala which have advanced type systems. I moved to work with Clojure about 8 years ago, and I don't miss types. If I did, I would've gone back to a typed language a long time ago.

My experience is that dynamic typing is problematic in imperative/OO languages. One problem is that the data is mutable, and you pass things around by reference. Even if you knew the shape of the data originally, there's no way to tell whether it's been changed elsewhere via side effects. Keeping track of that quickly gets out of hand.

What I find to be of highest importance is the ability to reason about parts of the application in isolation, and types don't provide much help in that regard. When you have shared mutable state, it becomes impossible to track it in your head as application size grows. Knowing the types of the data does not reduce the complexity of understanding how different parts of the application affect its overall state.

My experience is that immutability plays a far bigger role than types in addressing this problem. Immutability as the default makes it natural to structure applications using independent components. This indirectly helps with the problem of tracking types in large applications as well. You don't need to track types across your entire application, and you're able to do local reasoning within the scope of each component. Meanwhile, you make bigger components by composing smaller ones together, and you only need to know the types at the level of composition which is the public API for the components.

REPL driven development [1] also plays a big role in the workflow. Any code I write, I evaluate in the REPL straight from the editor. The REPL has the full application state, so I have access to things like database connections, queues, etc. I can even connect to the REPL in production. So, say I'm writing a function to get some data from the database, I'll write the code, and run it to see exactly the shape of the data that I have. Then I might write a function to transform it, and so on. At each step I know exactly what my data is and what my code is doing.

Where I typically care about having a formalism is at component boundaries. Spec [2] provides a much better way to do that than types. The main reason being that it focuses on ensuring semantic correctness. For example, consider a sort function. The types can tell me that I passed in a collection of a particular type and I got a collection of the same type back. However, what I really want to know is that the collection contains the same elements, and that they're in order. This is difficult to express using most type systems out there, while trivial to do using Spec.

[1] https://vvvvalvalval.github.io/posts/what-makes-a-good-repl....
[2] http://danboykis.com/?p=2293
There are cases where the difference is huge; particularly when you have very long runs between the preamp and the amp. This is on reason why you usually see XLR inputs to monitors. Any noise induced is amplified and a long unbalanced wire is a big antenna.

I've heard of cases where you could receive AM radio stations from such a setup; I lean towards "urban legend" for that though. While it seems theoretically possible (since many amplifier topologies can have resonance when fed signals outside their expected operating range), it seems a bit farfetched to actually end up with intelligible audio.
Name is a little confusing - I thought this had something to do with leaflet.js at first.
>Combine that with the very limited bits provided by CDs, preventing any possibility of good playback

16 bits gives you 96dB SNR (and subjectively more with dithering), which is plenty at non-deafening listening volumes. It's more than even the highest quality vinyl ever had. High bit depth is mostly useful so you've got some headroom during editing.
I don't believe anything really impresses developers. Developers look at something and think, wow how did they do that followed by I can do that so this can be ignored.
Hearing the ODAC name is quite a throw back! I remember reading NwAvGuy's blog when I first started getting into headphones. I always wondered what happened to him.
Would be nice to see data science in here as well.
Who is sending passwords in cleartext on the wire?
What happened in the past when the climate changed?
ITT: people dramatically under-estimating the risk to their accounts from credential stuffing and dramatically over-estimating their security benefits from not running JS.

They're probably right that not running JS is privacy accretive, but only if you consider their individual privacy, and not the net increase in privacy for all users by being able to defend accounts against cred stuffing using JS. The privacy loss of one account being popped is likely far greater than the privacy loss of thousands of users' browsing patterns being correlated.

tl; dr: Good luck detecting and preventing automation of sign in pages at scale without robust JS based defenses. I think there's a shortsightedness and self-centeredness to a lot of these comments.
99.8% of users don't know what javascript is.
It's not that women are a problem. It's that in some places, women are treated badly.
I swear by B&W PX. I prefer them to the more expensive B&O H9i, which are also not bad at all.
The opt-in vs opt-out nature is definitely key. As an example, if you write a small function to operate on a non-empty list and use it on a non-empty list in exactly one place, everything is fine in either language. But in Haskell if someone else tries to use the function passing in an empty list, it won't compile, they will encounter the problem right away. In Clojure if someone sees the function and says "oh good, someone's already written this function, I'll just use it" and doesn't realize that it expects a non-empty list, then you now have another situation where something is going to explode when data that contains an empty list arrives. And the error is again going to be far (in the code and in time) from the source of the problem. The difference between the experience of "I have good tools that I can use effectively to arrange to avoid bugs" and "I have tools that simply will not allow entire (large) classes of bugs at all" is what I'm really trying to get at. This is just an area where Clojure shines compared to most dynamic languages but Haskell shines compared to nearly all languages.
I couldn’t find any either. Maybe we’ll hit the right pages by searching in a few weeks.
I can agree with almost everything the OP states except the dig at tablets. My first PC in university didn’t use local storage. So I get cloud computing. At the end of the day it’s all just NFS storage and chrooted apps. You don’t need a PC or laptop for that.
The common law already recognises unincorporated associations and there is a rich body of caselaw and legislation built around them.

But the point is not whether there is an adversarial relationship with the law. The basic concept of the judicial system is that it is an impartial mechanism for settling disputes and punishing crimes.

The impartiality has no bearing on smart contracts except so far as they will be considered to resemble existing principles of contract, unincorporated associations and the like. The common law typically upholds private agreements and typically defers to private rulemaking where it does not have an overriding principle that must be applied.

But ultimately there will be disputes about what the smart contract was meant to be, or about whether a vote was legitimate, whether the principles of natural justice have been observed and so on and so forth. One or more parties to the scheme will ask the justice system to settle the dispute and there will be times where the justice system will in fact do so.

And it will be able to enforce its decisions against someone's will and without any need to follow the code.
Can someone explain to me, did I miss the description of the actual bug here? I get there’s a copy, but why is there an under-allocation to start with? Or is that alloc somehow attacker-controlled? Was part of the copy func args controllable? Or was this just an ad?
Am I really missing something here or this thing is a complete nonsense with no actual use cases what's so ever in practice?

There are a number of off-the-shelf models that would give you image/sentence embedding easily. Anyone with sufficient understanding of embedding/word2vec would have no trouble train an embedding that is catered to the specific application, with much better quality.

For NLP applications, the corpus quality dictates the quality of embedding if you use simple W2V. Word2Vec trained on Google News corpus is not gonna be useful for chatbot, for instance. Different models also give different quality of embedding. As an example, if you use Google BERT (bi-directional LSTM) then you would get world-class performance in many NLP applications.

The embedding is so model/application specific that I don't see how could a generic embedding would be useful in serious applications. Training a model these days is so easy to do. Calling TensorFlow API is probably easier then calling Basilica API 99% of the case.

I'd be curious if the embedding is "aligned", in the sense that an embedding of the word "cat" is close to the embedding of a picture of cat. I think that would be interesting and useful. I don't see how Basilica solve that problem by taking the top layers off ResNet though.

I appreciate the developer API etc, but as an ML practitioner this feels like a troll.
I've been struggling with a similar question lately (only Poland instead of the UK and... the UK instead of the US) and here's what I've come up with:

It's not about being paid poorly/well - it's about serving a specific market segment.

To give an example: I work for a company based in Poland so I get to do "Tier 3" stuff, namely churn out apps with a Java back-end and an Angular/React/Vue/whatever front-end. I make considerably less than your junior salary. 90% of job opportunities here look like this.

What about the other 10%? Sure, they're more interesting, but they're usually paid less. And I'm not even talking about startups - just regular companies who happened to gain the trust of an overseas client.
Yes, but if you are capable of getting to senior levels at Google, COL in the Bay area is much less of a concern.
The Ping of Death rides again!

Ok, yeah, not exactly the same, but humor me. It's a Halloween undead miracle!
We're working on ability to filter by location more easily. More of a UX challenge than data challenge since we have data for other regions already. Still need to think through how to present this cleanly without over cluttering the site. Thanks for the feedback!
I found London -> Sydney that rents were cheaper with more value for money in Sydney.

Food is a lot more expensive - but I guess if you eat cheaply or take advantage of office perks it could get the cost down.

Alcohol / going out is a lot more expensive.

Fuel / public transport is cheaper (but public transport is not as good in Sydney).

Tax is slightly less with no National Insurance to pay, and the employer is not paying it an sticking that into your Superannuation (Pension) instead.
I'm confused. Are you posting the "meets expectations" descriptions for each level, or the "qualifies for promotion" level? L4 is mid-level and L5 is senior. I have never heard of mid-levels being expected to lead anything, or seniors being expected to lead cross-team projects. Maybe that is my non-Google experience talking, though.
You're acting like "running programs on your computer" is a bad thing. It's not.
There is something to be said for having at least one 30 meter class telescope in the Northern hemisphere. There are parts of the sky which are never visible from Chile.
With legalization comes regulation, which is extremely beneficial, so it's better than just decriminalization. Like other commenter posted, the law shouldn't be the stigma-ruler we use to measure things. And I'll further that by saying that education and information is more important than stigma.
check out the job market and how much entry-level grads who are good with computers can make: https://www.levels.fyi/SE/Google/Facebook/Microsoft/
Thank you for the correction. I see now that Google dropped the 'Don't be evil' clause from their code of conduct, but left in one instance of the phrase itself.
From SV elite to social media hate: The radicalization that led to Gab
There aren't any serious efforts to colonize Mars, and I don't think there's any special need for software developers. Your options to be involved even tangentially are pretty slim. If you want to be associated, your only serious options are a national space agency (NASA, ESA, or one of the few other spacefaring nations), or the few commercial space companies, with SpaceX being the only one that's expressed any interest in Mars.

I've indirectly worked for NASA a few times, through university-run, NASA-funded programs (Mars rovers and orbiters, and some other planetary missions). It's interesting work, and I felt like I was contributing in a small way. I'd encourage anyone with an interest to get involved in that way. I can't say I felt like I was important at all, but it was more rewarding than working on Wall Street (except financially).
Original title: "From Silicon Valley elite to social media hate: The radicalization that led to Gab" (2 characters too long).
Just a senior dev but contracting.
Thus only 0.1% of users know what javascript is and it's okay with it. That is an interesting random stats, seems pretty realistic. I at least liked it.
It's an interesting site, and it seems like a nice way to compare salary and the possibilities for advancement at the companies included.

However, am I the only one who kinda thought it'd give a bit of information about the responsibilities and required skillsets for each level? Personally, I've always found the hardest bit around shopping around for a job knowing exactly what they expect of a hire with X number of years of experience, or what they consider a junior/middleweight/expert engineer. It'd be interesting to see something like this which says say, Google expects a Senior Software Engineer to know these languages and have these skills, whereas Facebook expects them to know these languages and have these other skills or what not.
Please don't lump all audiophiles in with some sort of distorted (irony...) stereotype.

I don't have a $10k system, or anything close to it, but yes, my system that I put together for about $1000 is way way way way better than what you're listening onm because I care enough to have a good external DAC, and feed that into a good amp paired with either a set of decent used speakers or one of a couple of sets of good headphones.

No "cable lifters" in sight.
Behringer UCA-202 is the best thing for under $50 IMO. It does not have balanced outputs though.
I'm not so worried about the DRM since I rarely read a book twice, and I typically just donate paper books to a local book drive, so not being able to sell them doesn't bother me.

But what I don't like is that publishers have been jacking up the book prices to the point where they cost more than the cost of having a physical book shipped to me. When I see that, then I usually just buy a used book, to make sure the publisher gets no revenue from me at all.

I thought digital publishing would be a boon for publishers and readers alike -- reducing prics by eliminating the cost of printing and keeping inventory, yet the publishers are using the convenience of the eBook reader that I paid for to charge me even more money for that book.

2 years ago I was reading 75% ebooks, 25% paper books, now that's flipped the other direction.
Haskell REPL is a completely different animal from the one in Clojure, and it's a stretch to say that you can do REPL driven development in Haskell.

What people mean by REPL driven development in context of Clojure is that the REPL is running within the context of the application you're developing. The editor is connected to the REPL, and you can modify any part of the application at runtime. You can even connect the editor to a REPL on a remote machine such as a production server and inspect its state from your editor.
Lots. But even those that don’t tend to send the password to the server, which is still bad.
Years of experience don't matter as much as output.

If you are capable of outputting at t7 level after 10 years of experience, that would make you one of the best engineers (by Google ratings) in the world. And yes, you could be earning a million a year.
Almost any http site with a login form is sending your password in cleartext. Thankfully, initiatives like Let's Encrypt have made plain http sites much less common than they used to be.

Hashing the password before sending it doesn't really help you much - the naïve approach is vulnerable to "pass-the-hash" (where you basically send the hash instead of the password as the authentication token). The secure approach involves either some kind of challenge-response or a nonce salt, but these aren't as easy to implement correctly.
Show HN: Copy SVG Code – Adobe XD Plugin to Generate SVG Code from Selection
I second the other person's note regarding seeds.

A detailed illustration would be helpful.

Interesting project!
Apparently it was actually already fixed in ios 12.0 and macOS 10.14.0 but retroactively added to the security notes for those releases only just now.
Literally almost everyone. (Wrapped in a TLS connection of course.)
I think totony meant sending passwords without pre-hashing, but yeah it doesn't make sense to send any confidential information in clear text that should be sent via E2E encrypted TLS channels.

Furthermore, pre-hashing doesn't necessarily make transmitting confidential information safer, as one would argue that your client side javascript can be reverse-engineered and give the attacker more information about how you hash your data.
look at the dates
Have you heard of this new technique called HTTPS?
Where is the data sourced from? Is it all self-reported?
Indeed. And: who is hashing passwords on the client? As this would require either not using a salted hash, or sharing the server's salt with the client, in order to obtain identical hash values for comparison. In either case that system's entire password inventory would be a lot more vulnerable.

TLDR don't do that, send passwords over SSL and use a good password hashing algorithm on the server like BCrypt.
Thats the wrong take on the stats. It means among the ones who know, half of them dont want it. This is more telling that looking at the 0.1%.
On every networked game I worked on, there was one guy working on the in-game network code. Nobody else had the faintest idea how it worked, though it was typically fairly well known at least what not to do in order to make his life no more difficult.

(On two of those projects, I was the lead programmer, responsible, in theory, at some level, for all the code that went into the game. And I still couldn't have answered your question.)
Hosting Our Company's Website for Free
You couldn't, not without reengineering the circuit. Guitar output level is much lower than the line level a standard power amp will take.
Very interesting, thanks for putting this together.

One thing that I'd like to see - on compensation, can you clarify whether the stock grants are valued at time of grant or at time of vesting?

If they are valued at time of vesting then the numbers will be much harder to (a) compare against one another, and (b) extrapolate into the future.

Right now the submission form is ambiguous, which I worry is muddying your dataset. I highly recommend picking one and clarifying that on the submission form.
ProtonMail requires JavaScript for client-side encryption. You can use a non-web client, though.
Did you have strong competing offers? From the discussions on Blind most folks get strong offers from Google only if they have another really strong offer. Keep in mind most of our data presented right now is Bay Area-centric. We're working on filtering all views of data by location still.
Hashing passwords client side has no benefit if a site uses HTTPS.

If a site uses HTTP, then hashing the password client-side and sending it up to the server is equivalent to sending a clear text password. If an attacker can already read your traffic, what is stopping them from using your password's hash to log-in to your account?
Check Basecamp’s Bootstrapped Profitable & Proud
You need validation.

You don't need to develop the app to have a demo of it.

You can put together mockups that look and function the way the finished app is supposed to look and function. You can have someone to put together an animation based on the mockups.

If there's a problem it's addressing that people are trying to address, someone's going to want to be notified when the solution is brought into the world.
Read through "The lion King" controversy chapter
Yes, and fiber optic cables to the summit were cut.
Hundreds at Google Plan Walkout to Protest Handling of Sexual Harassment
What version of Firefox are you running? You are either exaggerating greatly or have other issues with your system. I run the latest stable release of Firefox and the performance of Gmail (particularly the features you mention) is fine. I’d be happy to upload a screen recording to verify.
Firefox on mobile or PC? I haven't experienced that on PC.
Puppy Cube: Touchscreen Ultra Short-Throw Projector
Ohh that is interesting. Anyone know why that is?
I don't think this is true at all. Legal judgements can be entered against anonymous individuals and groups. That person or persons is now liable to comply and by not doing so, is in contempt of court (and possibly breaking other laws).

All fine, you might argue, they are still an anonymous scofflaw. But the risk never goes away, especially since 100% perfect opsec is pretty close to impossible these days. It's a Sword of Damocles as well as a Sword of Justice.

Besides: coordinating activities requires identity. Either you have true anonymity, in which case trust is nigh impossible even with smart contracts (you think there won't be bugs? won't be side channel attacks? won't be plain old conmen?), or you have pseudonymity with stable identities to allow reputations to form, meaning that once the identity is pierced all of that person's actions are traceable.
Lode's Color Converter
It's actually pretty common on older guitar amps. I've got a Marshall TMB replica which has this issue when the guitar isn't plugged in. If you turn it up loud enough, you can make out sentences clearly. I thought I was going crazy when I first noticed it.