skysight-inc/HackerNews huggingface dataset:
Too bad nowadays frontend dev is more about state management than layout and boxes. Designers have tons of tools turning mockups to interactable prototype. Non-technical people have drag and drop tools.
If you kill everything but the root in his url you get here https://www.pega.com.vn/

Which lists scooters for up to 15,700,000 Vietnamese dong = 675 USD.

I don't speak any Vietnamese, but looking at the specs listed at the bottom of https://www.pega.com.vn/pega-trans.html I'm guessing top speed 50 km/h range 100km.
I haven't had trouble finding salaries above this as a mid level devops engineer. As a senior, I would expect to see 120-140k.

And my cost of living was approximately 30k/year. That's the part I really miss.
it's not that hard (and there is no "the index", just various approximations of a market portfolio). vanguard is well known for low-fee, no-frills index investing (among other things). invest in one of their funds and you'll likely net over 5% over the long run.
If you don't mind, I would love to know how "changing human mindsets and behaviour" and "Dev and ops skills ... technical success" go together for you!

Is your goal creating a development process that leads to a secure system, or securing a system made by an existing process? How much code do you write? Maybe some tasks you've enjoyed or a typical day would be great.

I say this because, while I've never had or wanted a title that included security, as a dev I often find myself looking at "holistic defense of data flowing" and attempting to improve the situation. A role based on that concept is interesting.
Fascinating to see the difference between English and Chinese wikipedia content on this species.
Gmail Vulnerability Allows Anonymous Emails
"Is it using protocol buffers? Do you care?"

This is exactly why "RPC" solutions have always failed in the past.

The abstraction is too leaky. They quickly become almost impossible to debug, because the underlying implementation is needlessly opaque and complex (cough SOAP).

For the foreseeable future, there will always be more and better tools for analyzing and debugging HTTP and making ad hoc HTTP requests.
In 1999 we were working a very long shift waiting for the batch process on the AS/400 to go through and our FTP "edi" trNsfers to Sun to complete (an ftp script written for us by these four hacks, who founded linuxcare after this episode) (sifry, dibona, etc)

We decided to go grab a beer and play pool while we waited for this new thing to execute based on this new language sun was having us convert everything to, XML...

While at the pool place these girls in lingerie were walking about selling raffle tickets.

We asked what they were for.

"We are putting ourselves through school and we are selling raffle tickets for the lingerie we are wearing, for $5 a ticket."

"I see, where are you ladies going to school"

"Oh, we go to silicone valley college..."

----

I wish this was a scene in Silicon Valley... it was ridiculously funny.
Looking throught the list of http://www.jsfuck.com a lot of the 'basics' can be created in your environment too.

For example a string can be created like this:

(x=>0)+0

If arbitrary code can be constructed in your environment ... hard to say. But as jaybosamiya has shown, it is at least possible to escape your error handling.
We are actually spend two weeks rewriting our code from SQL to FoundationDB (we have built our own simple ORM).

One of the huge problems is a lack of consistency constraints. Since during development data make became broken in various ways (and we have done several times). And right now there are no way to implement simplest constraints on database level.
> For anything low latency, the cost of encoding/decoding starts to become extremely difficult to avoid.

Whether this is an argument against JSON and in favor of Protobuf or vice-versa depends on which language you're operating in. Most benchmarks I've seen show that Protobuf is faster to encode and decode for Java and Golang while JSON is faster for Python and Javascript.

IMO, if you're worried about low latency, you're also likely using a compiled language where Protobuf will be faster anyway.
> Isn't copyright implicit, not requiring any kind of notice to "exist"?

Yes, but notices matter for purposes beyond whether copyright exists, and therefore falsifying, removing, or modifying them also matters.

This wasn't about infringement (oddly enough) but about falsified or removed “copyright management information”, specifically the copyright notices.

Which seems odd, because if the original notices were valid, then I can't see why actual infringement wasn't alleged. OTOH, if there was no infringement, how could the thing presented been the thing covered by the notices, such that either the removal or falsification claims had substance?
Ironic seeing this on IMO one of the worst and falling-out-of-fashion 'social networking' sites around. It would be like Digg hosting a page about the sure decline of Reddit.
I’m doing well in a small Midwest “pond” (150k population) and I agree with you. I will say that there are great opportunities in the Midwest if you are an above-average developer, communicate well and understand another domain like equipment manufacturing or logistics. Opportunities are available to me because I developed a combination of skills that stands out. But, in exchange I have to work hard to keep up with the software industry because no one is going to set up any new workflow, language or tool for me. I could go for a month without being challenged on what I know. That’s a risky situation to be in, long term. And yes, if I desired to move back into specializing in back-room software development, I’d be disadvantaged here.
Secops people have on-call rotations. Pretty much nobody else does.
I've worked in such places. Kissing on cheek etc is also a thing. It will be interesting to see where that leads in the long tail of the #metoo change. I've already seen a lot of people who I've known to overly hug and show affection at work stop doing so. At one workplace HR got all "scorched earth" policy and made it very clear it wasn't acceptable at all. Apparently the concern was women initiating contact then feeling uncomfortable later and complaining about the person they hugged. Two instances at that site alone. I wonder how frequent it is since I'd never heard of it as a thing before.
Vision Based Smart Hospitals – Stanford AI Lab Blog
you are correct about criminals favoring bypass/destructive entry vs. picking in general (I think this is mentioned in marc tobias' book RE: the uncommon nature of lock forensics) -- I pointed out the other methods because the anecdote references "pro" car thieves. when dealing with high value targets, minimizing damage (to, e.g., a rare/irreplaceable or expensive steering wheel) is more important than the average car theft where someone's just trying to get from point A to point B.
To me if you are in the bay, and have one office up in SF and another one down in PA, you are still "distributed" / "remote" or whatever you want to call it. Once you have two offices, it doesn't matter if its 50 miles or 500 miles.
~Same. I expect in the most charitable case it means about as much to infosec hiring managers as bootcamps do to developer hiring managers.
Your comment is pretty much what I get from bankers all the time. There is much more to just bitcoin, actually even off-side chains built on top of bitcoin which provide more than just transactions of money.
Could you give an example of what you mean? This is very relevant for my talk.
I didn't know about it, thanks!
You should try reading that essay. It seems quite insightful:

>I am arguably at my most intentional and mindful these days when I’m wearing away at the edges of an old iPhone–not because I’m returning the device to its granular natural state or because the phone has lost its use-value as a phone, but because it requires me to make space for thinking through what words like natural, functional, and reasonable mean when describing technical interfaces and environmental conditions.

https://thecreativeindependent.com/people/sand-in-the-gears/
Of course you still want the government to do some regulating. For instance government will be necessary to solve collective action and public good problems. So once we've entered that realm, the solution isn't to just back off and let collective action and public good problems run rampant, it's to restrict lobbying and corruption while continuing to regulate.
Variable length currying in JavaScript
I built a trello clone with, you guessed it, vanilla JavaScript (but mostly with HTML & CSS). I built a simple drag drop micro library to drag cards from one list to another. I even built my own custom scroll bar library. Fancy. https://www.github.com/datasilk/kandu

When you take a few hours to build and maintain your own micro-js libraries, you eventually get to a point where you no longer require using 3rd party js frameworks that are bloated and buggy. Why? Because you took the time to learn JavaScript! I would also argue that the only reason why those dev teams realized that they needed abstractions was because they were bad at maintaining & documenting their own micro-libraries. Also, once you build a micro-library for JavaScript, what's the point of maintaining it? Standards are here to stay, no modern web browser will significantly change the way things work, so once you build a JS library that works well, there is no need to maintain it unless you want to add new features or fix bugs.

The level of abstraction that cycle & react & angular and all these frameworks create is unnecessary because again, it leads programmers astray from writing HTML and utilizing JavaScript properly.

My (so-called absolutist) perspective is a coming from a culmination of 18+ years of development time, building VB desktop apps, ASP web app, ASP.NET Web Forms & MVC web app, ASP.NET Core web apps, C# desktop + windows service apps, Magento ecommerce sites, Concrete5 sites, old-school Flash/PHP web apps, a React Native mobile app, and many static websites. I've built a jQuery clone library in under 5kb in size, bootstrap clones with theme support, various drag & drop CMS platforms, and everything in between. I've used failed technologies throughout my career and I've received funding for my projects in the past, I've had to develop sites that support IE 5.5, 6, 7, 8, 9, 10, 11... and from all of my experience, I can say without a doubt that HTML, CSS3, and hand-written JavaScript along with REST APIs is by far the best way to develop a web application, period.

People create front-end frameworks for various reasons. Maybe so they desire fame, maybe because their company had a need for it, maybe because they don't like HTML & "vanilla" JavaScript. Whatever the reason, it doesn't matter. Every framework has its benefits and its drawbacks, and none of them are worth investing time into learning because they all hide behind a layer of JavaScript that doesn't need to exist, period. It's just another thing that every single user will have to download & cache when they visit your site, and if the framework is poorly developed, it'll become another list of things every single user will have to download & cache when they visit your site.

It's really unacceptable, especially to see nearly every major website require visitors to download over 1 MB of unnecessary resources whenever visiting their website. Why? Because of JavaScript bloat.
You should be aware that you just described three very different roles --- "offensive security" (scanner jockey -> netpen -> appsec -> vuln research / red team), defensive security (secops -> seceng -> security management), and malware analysis (malware analysis -> malware analysis -> still more malware analysis).

For you, the most important question might be how much you enjoy coding.
It's way, WAY better than the yhat port
That was a good one!
You're citing the European Parliament language; the current ongoing trilogue negotiation is between this and the original council text. The SME exemption is seen as a controversial addition by some of the Council negotiators, and may go away or be watered down.

The current proposed Presidency compromise text has been leaked, and you can read it here: https://www.politico.eu/wp-content/uploads/2018/11/SPOLITICO... , pg 22 onwards. (The EU Presidency is seen as the independent negotiator in the discussions.)

A couple of things to note -- this "compromise" text moves Article 13 into being a blanket liability, which means that intermediaries can be sued unless they get prior authorisation from all rightsholders. Given that anyone is a rightsholder for their own material, that seems... unlikely. The only conceivable alternative under the rest of the proposal is some sort of copyright filter — but even then, it has to be effectively perfect, so that's potentially not enough.

The other point is to note that under this language, being an SME is one of seven factors that may or may not make you liable; thus injecting even more uncertainty into whether you will be liable for the actions of your users.

(Disclosure: I work at EFF, and have been tracking this for some time.)
here you go: https://www.nytimes.com/interactive/2018/10/02/us/politics/d...

and sorry, i misremembered the numbers. he got over $400 million (at least) from dad, and that would be worth about $2 billion if simply invested in an index fund (according to the article).
Inside the British Army's Secret Information Warfare Machine
Do You Even Bake, Bro? How Silicon Valley Fell in Love with Sourdough
تسليك مجاري الكويت 50749114
"If you use HTTP, you must accept its warts, like being stateless."

Being stateless is one of the best things about HTTP, I wouldn't consider it a wart at all.

State should be very, very isolated. Ideally, stored in a database somewhere.

"Why make 4 separate requests (PUT this, GET that, munge it, POST a result, GET to confirm) when you know exactly what you want to do?"

At that point, you are implementing a database with transactions. So expose it over a SQL interface and be done with it (see Cockroach DB). This is solving a very different problem from most REST APIs. Exposing the ability for external customers to run arbitrary transactions against your servers is very dangerous in terms of provisioning, latency, and availability requirements.

Unless your business is providing a database as a service.
Scraping public web content is a really confusing situation.

My company, Datastreamer, has been in business for ten years indexing public web content (news + blogs). We focus primarily on "live" content. Content that publishes often.

The main challenge we've always had is that just because the content CAN be indexed doesn't necessarily mean you MAY index it.

A recent situation was around Craigslist vs 3taps:

https://en.wikipedia.org/wiki/Craigslist_Inc._v._3Taps_Inc.

Basically the issue doesn't evolve around WHO has copyright but who has copyaccess to the content.

So if you create an account on Acme.com... You still own the copyright to the content you post but Acme controls access. Not only that but the ToS that you sign gives them rights to your content including bulk sales.

This means that Acme can monetize the content that YOU create while actively preventing people from indexing it even that may be your intention.

This means that in 2018 a company like Google COULD NOT get started because websites would just not allow them to access your content.

I believe that when most people post public content on the Internet they intend it to be public including accessed by other search engines crawlers, etc.

Now we're in a horrible situation where just a few companies essentially own the Internet.

This is why Google can't index Facebook content or Twitter content even though it's public - they can't access it.
I see well I learned by reading and a lot of trial and error not innate socialization. Extroversion means you get what's going on with social games and you care enough to play them. Also, you are energized by socializing with others. I get the games...mostly but most of the time I avoid playing them (stay quiet) or I simply am not present to be a participant. So when you say "hang up" us non-extroverts think (and im trying not to speak for everyone here) "Sure, but I bet you can't be alone by default."
Typing this in a slight rush so not sure if my point comes across.
Ask HN: Where to write a tutorial series?
I've been doing some learning-by-doing in my free time and found that following a good tutorial project helps a lot with learning stuff.
So I decided to try and write a tutorial of my own as I continue learning. However, I bumped into a question - where should I post it so that it's easy to find for people who would want to follow it? Medium? Personal blog?

Any suggestions?
Your comment reminds me of starting work in the Research Laboratories of a once iconic company almost 40 years ago. The lab had a chair with stick-on labels on the back which read, "SARTUN". I was puzzled and after I got to know my office mate (a man in his late 50s) I asked him about it.

Turns out that the company had a policy for the type of desk and chairs people could have. Senior scientists (mostly PhDs) got nice chairs and large desks. The technicians called them the "tunas". The technicians in the lab often had to share desks and had inexpensive chairs. They referred to themselves as "sardines". The BS/MS folks had medium size desks and and so were called "sartun". Mystery solved.

The good news is that after a few years management discovered that ergonomic/repetitive stress injuries increased medical problems and absences. Management instituted individual ergonomic assessments and provided desk/chairs matched to the individual's needs and it made work much better and reduced repetitive stress injuries.
Alphabet, the owner of alphabet.com appears to be some sort of fleet (as in company car) management service, unrelated to Alphabet the owner of Google.
Neat concept, I wonder it'll scale to complex regexs
yeah, I've never been a big emacs user outside of org-mode, so it was silly for me to be using it for one feature.

The VS one covers the basics and has treated me well. For more advanced org-mode folks, I don't think the VS org-mode would be enough.
Just wanted to say this is very interesting...thx!
https://en.wikipedia.org/wiki/Marx_Brothers

e: Oh shit I just realized who I'm replying to. Serious answer time. Socialism will be a disruptive new paradigm for start-ups and other businesses where (following the idea of a meritocracy) workers, and not stuffy old capitalists, each own an equal number of shares at their place of work. And even more innovative in structure than Zappos and Valve, it allows for capital investment decisions to be voted on by individual contributors, throwing away traditional management structures you see at crufty old firms. Pretty cool stuff! According to some dusty old theories it's the "Exit Strategy" for our largest firms.
Are there any guides on extracting the electronics, or batteries out for personal uses?
> Should you use HTTP calls to communicate between services

Yes, it's mostly fine for that. Not always ideal, sure.

> let's say, to poll a resource every second and know if a worker has finished

No, you generally shouldn't poll every second. You should POST a subscription and then the other end should POST you a notification.

If you are in a situation where you need to poll instead of subscribing and waiting, then, maybe use HTTP long polling, maybe poll less frequently than every second, maybe use something other than HTTP, but in any case you are in a suboptimal circumstance.

(Of course, whether you should use HTTP as a transport protocol is orthogonal to whether or not you should use a REST architectural style.)
Pied Piper has the Conjoined Triangles of Success. Asana has... https://wavelength.asana.com/pyramid-clarity-strategic-align...
you also feel more energy, less tired, less depression...I've lost 60 pounds on keto since September...
A Nation Divided? What We Learned by Talking to 3M American Voters
We ran into the same issue in Seattle, where much of the housing stock was built before 1950. Unfortunately, many people like the look of the original double hung windows, which have been repainted many times over the years, so you end up with single-pane lead dust generators throughout the house.
It's only condescending if being a designer is "lesser" than being a front end developer.
Withdrawal is a really crap thing to go through, but I also want to point out that sometimes it can be a fairly non-event, too. I tapered off of Zoloft for weeks, and I really didn’t feel much of a change. Going slow and deliberate (if you have the freedom to do so) will help, as well as having lucky genetics.

I just want to underline that you shouldn’t be turned off to this possible solution because you’re nervous about the side effects or withdrawal. Definitely talk with your doc about them and see if it makes sense to go on them, and if there are ways to mitigate some of the side effects. But meds — in my case, at least — definitely have been some of the best decisions I’ve made in my life.
This is shameless self promotion for the author's company.
After reading the article, the combination of REST APIs combined with durable, persistent queues (Kafka), covers most architectural needs. Queues for managing internal low latency and high throughput use cases. REST for external facing APIs with good documentation and well defined semantics.
Just write stuff on the calendar if something needs to be scheduled.
In 2007, Facebook made $153M. Zuckerberg announced Facebook Ads on November 6, 2007. Then they basically doubled their revenue the next year, and for several years after. They must have had something before Facebook Ads, because they couldn't have made the entire $153M in less than two months.
Information Attacks on Democracies
I use the GCal CLI and document my life every 30 minutes. I use it both retroactively and to plan the future. It helps me analyse my weeks, months and years and figure out where I wasted most of my time and try to optimize it.
Chuck Lorre? He’s utterly apologetic... all the way to the bank.
The on/off taper is the dumbest idea ever, but some psychiatrists don’t know this. It basically puts you on a constant serotonin rollercoaster, thus the awful brain zaps and other side effects.

Lowering the dose one-sixth at a time every four weeks is the right approach. It gives your neurons time to get accustomed to the lowered serotonin levels by slowly increasing the number of available receptors.
You should look into 8th wall, they are a startup that implemented really advanced AR on the browser!https://8thwall.com/products-web.html
Ad Spend Calculator LTV, CAC CPC, CPI and More
If you can find a way, try at least once to taste freshly pressed olive oil (by fresh I mean you are standing next to the oil press). This way you know for sure it hasn’t been blended or tampered with.

My grandparents would pick olives and press them. We would toast big loaves of bread on the coals and drench them in this fresh oil. It tastes totally different to what you can buy in the store (at least what I have had), or even how it tastes a week later. The peppery and acidic notes are surprisingly prominent, giving it a savoury quality that is very moreish. The texture is also quite different, it is thick and rich and heavy, but not greasy at all. It is kind of magic.
Big Oil Doesn’t Like EV Subsidies, Just Its Own Giant Subsidy
Those are still pretty sparse outside of California so the distance could be pretty far. Check out the list for NC there's 13 for the whole state at the moment.
"I feel there's still too much competition/innovation in the message queue space though."

Interesting, to me Kafka seems like the clear winner and the obvious choice for all of my queuing needs.

What am I missing out on from other queuing systems?
Why is this level of brevity desirable, and only with regular expressions?

Are you writing APL? Why not?