skysight-inc/HackerNews huggingface dataset:
I am so torn on this. I agree about the network. At the same time, I know how lucky I am when it comes to living arrangements.

I have a hard time recommending that someone who is trying to have a family live here. If they are single, and willing to have roommates - sure.

I am hoping that the California High-Speed Rail project opens up housing arrangements that change the equation.

A 2.4 hour round trip commute to Fresno doesn't sound bad if it is on a train. (https://www.hsr.ca.gov/Newsroom/Multimedia/maps.html)

What is also interesting is that Facebook is willingly paying for reactivating the Dumbarton rail bridge. ( https://www.sfchronicle.com/business/article/Fast-growing-Fa... )
This makes me wonder if someone could somehow silently inject helium in a room to kill all phones (iPhone only?) for malicious purposes
Zebra mussels are a big problem where I grew up. The bay of Green Bay is very unfriendly to the barefoot swimmer because of them (they leave sharp little shells behind). I can't really think of a way to get rid of them short of making some sort of robotic fleet to go and kill them all.

Even worse, the DNR doesn't really want to get involved for fear of upsetting the ecosystem. Someone went as far as to make a machine that makes faux sand from zebra mussel shells (which pile up everywhere along the shore), but he got shutdown because of the unknown environmental impact.
Perhaps, but that's five years old and there's been no serious refutation I've heard of.

It's not like there aren't legitimate reasons to back a study that might reveal something you've long suspected, e.g. that your competitors are frauds...
You don't give enough information, "security" is meaningless as a solo term. You need to go into specifics at to what exactly you see yourself doing.

If we are talking threat intelligence/analytics then I would say that you're taking on a huge gambit that will most probably not pay off. These jobs will be amongst the first that will go away / automated and do not require deep skills. Certifications are a complete waste of money.

The jobs in security that have a future and pay well are research-related: vulnerability research, reverse-engineering, exploit development, toolset r&d. Certifications are (again) entirely useless. All you gotta do is prove that you have the skills necessary, which take years to acquire and even more years to master.

Personally, I would say don't bother. You are too old and too far behind.
There's actually not too much to it:

Websockets and HTTP/2 have not much to do with each other. Both are established on top of a TCP connection (which might have been used to speak HTTP/1.1 before, until an upgrade occurred). Websockets allow sending unsolicited websocket frames in both directions, HTTP/2 multiplexes several HTTP streams on top of a single TCP stream.

There is no websockets over HTTP/2 specification- at least the last time I had looked. It wouldn't really yield much benefit, one would just have the 2 layers of framing (web socket framing on top of HTTP/2 framing). With the current approach one would typically just have 2 TCP connections established from a browser to servers, if websockets are needed: One for websockets, and one for HTTP[/2].

Regarding SSE: Use it when single directional communication is good enough, when HTTP based authentication is required, for integration with other HTTP infrastructure (load balancing, proxies, etc), or when no websocket library is available. Websockets might be mostly preferable when stateful "realtime" communication in both directions is required.
Built the site after the below thread blew up with amazing real personal stories from founders and makers on HN:

https://news.ycombinator.com/item?id=18400020
I've never worked in SF and it hasn't hindered my career. There are thriving tech markets all over the United States. If your goal is to maximize your income over expenses, DFW is a fantastic place to work, for example.

As far as networks go, my network is spread all over the country. I have former coworkers in Seattle, San Fransisco, Portland, Austin, Dallas, New York. It hardly matters where you live when you've worked with remote teams for half of your career.
I think anyone that understands how computers and networks work can make a good security engineer. The mindset for breaking things can be taught.

It isn't too late to do something that interests you, it may be painful taking lower pay or having to learn something that isn't directly related to your job.

Try it as a hobby first, attend some security related conferences, like most industries the security folks are kind and happy to share knowledge.
I come from a similar background as you and I've done CISSP from (ISC)2. I always thought it would be useless as I thought that I can't learn new stuff because I am sysadmin/SRE/shitty dev.

What I observed from a sysadmin/SRE perspective vs pure security team is that we speak 2 different languages. We often clashed with them and it brought frustrations on both sides.

The material cover in CISSP is very broad and not deep. I've done it on my own and I saved $6K. The book costs 80$ and it takes 3 to 6 months to complete. The exam is a real bitch though! Be sure to be very prepared.

In the end, it's the best moved that I've done in my career and I can now speak with the Security mafia.
Python uses/used eval for namedtuple at least in part for performance.
I will chime in here and say that I found an inexpensive standing desk implementation here: http://iamnotaprogrammer.com/Ikea-Standing-desk-for-22-dolla...
Yes, I really hate that FUD. It makes people decide to use less safe filesystem because they don't have ECC RAM thinking ZFS somehow will corrupt their data, when in reality ZFS is still safe (and safer than other filesystems). ZFS claims to keep your data safe, but it can't prevent data being corrupted in RAM. If your RAM is corrupted your data might be as well no matter what filesystem you use. ECC RAM makes sure that memory is also safe and that ZFS can deliver its promises.
Original author here. Funny you should mention that. I once made an attempt to do the same. You can find it at http://web.sonoma.edu/users/l/luvisi/scheme/prog.scm

One fun thing about this implementation is that labels can be passed to other functions, or returned from functions, and even used to jump back into functions that have already exited, since they are based on continuations.

Good luck!
Umm, sitting kills. The idea is that a standing desk can let you live longer whatever your body formation.
This article reminded me of the (poorly named) "Feynman Machine":

https://arxiv.org/abs/1609.03971

> Efforts at understanding the computational processes in the brain have met with limited success, despite their importance and potential uses in building intelligent machines. We propose a simple new model which draws on recent findings in Neuroscience and the Applied Mathematics of interacting Dynamical Systems. The Feynman Machine is a Universal Computer for Dynamical Systems, analogous to the Turing Machine for symbolic computing, but with several important differences. We demonstrate that networks and hierarchies of simple interacting Dynamical Systems, each adaptively learning to forecast its evolution, are capable of automatically building sensorimotor models of the external and internal world. We identify such networks in mammalian neocortex, and show how existing theories of cortical computation combine with our model to explain the power and flexibility of mammalian intelligence. These findings lead directly to new architectures for machine intelligence. A suite of software implementations has been built based on these principles, and applied to a number of spatiotemporal learning tasks.

YMMV
I mean, if I wasn't here, I'd be in Belgravia or Mayfair. London is an amazing place and now about 10% cheaper than SF. It has 2 out of the 5 FAANG companies, but the tech scene is still not in the top 5 IMO compared to NYC, SF, SEA, Singapore and Tokyo. I'd love for that to change...
Businesses can't seem to admit that they're spending money based on employee preference. There has to be a metrics-driven productivity or healthcare spending argument to justify the budget.
Here is Nissan’s full press release regarding Ghosn in which they implicate Greg Kelly, Representative Director, as also being involved in this scheme.

One thing is for certain: they’re hanging Ghosn out to dry.

>Nissan has been providing information to the Japanese Public Prosecutors Office and has been fully cooperating with their investigation. We will continue to do so.

[0] https://newsroom.nissan-global.com/releases/release-860852d7...
Because of GDPR, or because they do not respect people's basic rights to privacy?
People in the 'smaller ponds' don't really care about your prestige, we care about your character, which you have shown none. We live in these areas because we can about our families, the people around us and our communities not working on the latest tech in SF to reach some arbitrary goal.
I Just Launched WordPress and MySQL on Kubernetes in 7 Easy Steps
Compare to UK and American corporations:

* The corporation investigated its own chairman (and CEO of its larger alliance), based on a whistleblower's report.

* A corporate chairman/CEO was arrested by the government, and the accusation is not massive fraud but under-reporting his own compensation and making personal use of corporate assets.

* A chair/CEO of a global corporation wanted $8.5 million in salary, and that was considered too much (this was a response from European stakeholders too). He took less.

Perhaps some people with experience in Japanese business can provide context for what we are seeing.

EDIT: Corrected Ghosn's title

EDIT2: Corrected the allegations by the government. I had been reading the NY Times article, not the one linked above.

https://www.nytimes.com/2018/11/19/business/nissan-carlos-gh...
More past discussions that might be of interest:

* https://news.ycombinator.com/item?id=15060146

* https://news.ycombinator.com/item?id=15060193

* https://news.ycombinator.com/item?id=18425734

* https://news.ycombinator.com/item?id=15182585
It is called Bash, and that is just one example.

Besides any value greater than zero is already too much.

Sure there are plenty of memory safe languages, with bounds checking on vector and string data structures, proper length handling without missing null terminators, pointer null validation on use, where UB is not 200+ entries on the language standard and increasing...
In other news, all network issues with packet loss are going to be fixed.

In other other news http v4 will again use TCP once v3 turns out to have bad user experience because udp packets are being dropped by poorly configured networks.
This is the inevitable follow up to this:

https://www.reddit.com/r/sysadmin/comments/9mk2o7/mri_disabl...
The problem with that plan is that if Google were to release such a service in the EU, the EU would then fine Google for using their search monopoly to prop up a service in another industry (News). The EU did something similar when Google used their search monopoly to promote Google Shopping.

EU is gonna EU.
This got buried quickly but in case anyone is interested, I have a question.

From the article:

> Leaders — capable leaders — don’t do what Zuckerberg has done in the face of disaster that they themselves have presided over.

> They don’t hide and deny.

> They don’t blame-shift.

> And they don’t insist on speaking in the worst kind of fuzzy corporate cliches.

Is this just grandstanding or is this actually true? Is Zuck's behavior in this regard any different from the norm regarding large organizations?
In order of appearance of '?', here are my responses

1. Market is pretty hot and you will be get multiple choices to pick from the available offers
2. Certifications have very little to do with the job (Full Disclosure - I am currently maintaining CISSP, CCSP, GWAPT, GMOB certs ) That being said, sometimes HR/recruiter use these for filtering candidates. You can look at security+ certification to get a feel.
3. It will make sense even if its not from SANS because people who have done SANS know that a) SANS is very expensive b) its an open bool exam 3) Does not involve hands-on. For that matter, if you will go after coveted OSCP, then people will understand that you have hands-on skills.

4. You should get equivalent or more pay because the market is hot. Most of the earlier security professionals came from SysAdmin/Dev background. You have a better understanding of how systems/apps, so it will be easier to break them or identify vulnerabilities.

There are several blogs (e.g. https://tisiphone.net/category/security-education/) available to find a learning path for security, so check them out. Self learning is the biggest skill that you will need.

PS - Started my career in Information Security 9 years back, right after coming out of school
> what’s the incentive to work elsewhere if you get paid a fraction of what you’re worth?

Because you’re spouse wants to be close to family and there’s no tech where family is located?
I think this one won’t get you caught:

Explorer address bar (or start>run) > %logonserver%
First of all: what in particular do you find interesting of the security field? Are you more interesting in the offensive or defensive side?

I guess that given your background, the smoothest transition will be to something like application security engineer/devops security. There is a trend where companies are hiring developers who also know security, to be part of the dev team. So any bug that has an impact in security will be fixed by this role. Also, the new architectural landscape (cloud everything) is really changing the game, and having expertise in these solutions from a security perspective is a very valuable skill.

I don't know of particular certifications for application security or "DevSecOps" that will help you. I know that for example, in your situation; CISSP is not useful. CISSP jobs are mostly boring.

If you're interested in the offensive side, then the OSCP certification is a good bet; it shows that you understand and are able to execute a simple pentest. It is a well regarded certification and It will mostly make up for your lack of professional experience in the subject.

In conclusion, you're making good money right now; unless you're really bored and unchallenged, I'll start getting into security as a hobbie, and see how can you apply what you learn on your current job. Maybe you can even change roles where you're at. But try to use your current experience and give it a security twist, so you can then build on your experience instead of trying to make up for the lack of it with bogus certifications.
Don’t do that.
It's Time to Change the Narrative About Clean Energy
Maybe because they think cookie warnings are ridiculous.
Does nuclear power have a negative learning curve?
I bet there's a lot of things going on:

* children are smaller, so holds in general are proportionally larger

* children may have a different lower and upper body ratio (they've got shorter legs than adults), making them better suited for climbing.

* Better flexibility/mobility

* don't have to be (re)taught how to play

* perchance better strength/weight ratio

* relatively fearless

* usually can find a enthusiastic peer group that isn't so centered around competition/jealousy (similar to, "knows how to play")

* A lot of kids I see at the gym have parents that have been climbing half their own lives, so they've got incredible coaching from a trusted source, and an amazing cheerleading section. They'll be climbing most of their lives, if they decided to keep it up.

The only real detriment may be that problems in a gym setting aren't always made for their sized bodies, so some of the moves may be a bit reachy. A children's general creativity could allow them to solve such issues though.
There's a decent film [1] documenting their origin and architect Mike Reynolds.

[1] https://en.wikipedia.org/wiki/Garbage_Warrior
People use "stones" for weight of humans. As if 14 pounds is a convenient amount.
Can't speak for anyone else... but will say I'm far more productive with full-stack JS. My second most familiar language is C#, followed by Ruby, VB, Java and several other languages. Most of the productivity outside the browser is because of Node + NPM though. Also the browser gives you a much more rich rendering target than pretty much any common UI platform out there. Including some very nice abstractions.

In the end, it isn't the best choice for many things, but it's good enough for most things. As such, it's what I tend to reach for first, since getting something working takes less time, and gets in my way so much less. Windows, Mac, Linux via Node, Electron, Carlo (node + installed chrome), not to mention Cordova (iOS/Android) and React Native. Best of all, I don't have to deal with a lot of issues seen in other platform specific tools.

It's so much closer to write once, run everywhere with less friction than anything else that has been done in computing. Aside from trivial projects.
I mean... with all due respect, man, you can't argue against what you haven't experienced.

I've worked in tech hubs around the world. I still go back to SF a few times a year and keep connections fresh, because they can make or break things sometimes.
I did some research on hugging and self-hugging for a presentation at a Chaos Computer Club event. Mainly trying to find out why self-hugs don't seem to work as well, despite many attempts to replicate a hug through technological solutions:

https://rybakov.com/essay/how_to_hug_yourself/
Transforming atmospheric CO2 to carbon fiber with Algae
I respectfully disagree. Just update your resume on Dice, Monster etc. and you will have recruiters calling 2 - 3 times a day. Now you may not get the specific job in the specific industry you are partial too but you can definitely get a good job. I have no where close to SF experience or probably their top of the mountain skill-sets but I have no problem getting job interviews if I want them. My network pretty much consists of me and whatever nameless recruiters call me.

The last time I wanted a new job I just updated my resume on Monster and had 3 interviews a week later and started a great new job two weeks after that.

Sorry you had a negative experience from your move, hope things turn around for you.
Security has a large number of unfilled positions currently:

https://cybersecurityventures.com/jobs/

https://www.forbes.com/sites/jeffkauflin/2017/03/16/the-fast...

https://www.ziprecruiter.com/blog/cybersecurity-jobs-are-sky...

and security jobs tend to be slightly higher paying than other IT positions. With some certifications and a few years of experience you have a good chance to be making a comparable salary to your current one.

SANS tends to be on the high end of cost for certifications. Look into the following organizations for more options:

ISACA

ISC2

EC-Council

A background in IT and Dev is highly valuable for Security jobs. You will find that many of your current skills are applicable.

Look at job postings in Indeed, LinkedIn, etc. job sites for roles that interest you and look at the certifications and experience they ask for. That will help guide your investigation into what you need to qualify.

(I have been working in the security industry for the past 10 years in various capacities, caveat emptor etc.)
Apple can't stop being evil in any realm of it's business/existence!

- “Doing business with Apple is very risky as it often reverses what it has promised,” said an executive with a supplier

- "Apple tightly controls margins and asks many suppliers to make big investments in specialized machinery to make its products, suppliers say."

Apple wants the suppliers to take on undue risk for it's products, but doesn't part with any of the benefits! Typical
He did say what he was interested in:

I have always had an interest in security, especially the red/blue team side of things as well as the forensics area.

You should try replying to the actual post, not the one you constructed in your head.
Laws of gravity don't work in Italy either, Pope John XXI in 13th century had them declared null and void /heresy.

Smells like another internet-spread revisionist history rumor.

His Wikipedia article makes him sound like a scientist, himself:

"Wherever he studied, he concentrated on medicine, theology, logic, physics, metaphysics, and Aristotle's dialectic. He is traditionally and usually identified with the medical author Peter of Spain, an important figure in the development of logic and pharmacology."

"To secure the necessary quiet for his medical studies, he had an apartment added to the papal palace at Viterbo, to which he could retire when he wished to work undisturbed."

The Catholic Church, even in its early days, was/is loaded with scientists and scholars. The concept of the Church being anti-science is a more recent internet-fueled meme.
Original author here. This was a handout for a computer science colloquium talk that I gave many years ago.

It's fun to see this show up on Hacker News, and thank you all for not holding it to the same standard as a proper academic paper!
Maybe my first program in Pascal, my first programming course.

The school had never taught programming before (yeah, I'm that old), and it was a business teacher who didn't know how to program or use a Mac, and the incomplete syllabus was for a class from another school that used a Honeywell and punch cards.

The first Pascal program was to write a calculator that allowed a user to input arithmetic problems in words and get the correct answer.

>five plus seventeen

22

>two hundred fifty six divided by three

85 r 1

The professor hadn't taught us strings and the textbook Pascal was different from the Mac.

However, the school required me to maintain minimum credits to stay in a welding program I needed for a raise at work, so that by the time I realized how bad the class was, it was too late to drop.

I welded all day at school, programmed for 1-2 hours, went to class, then worked on the program all night at libraries at the UW. One of the UW students complained to a librarian about my smell from the welding; he knew I was junior college scum.

It seems ridiculous today, but it took me a week to pull it together. I sometimes cried from the frustration. I wrote everything out longhand on yellow legal pads at the UW libraries, welded 8 hours, then computer lab, and class, bus back to the UW. I was struggling in my arc welding class, too. I couldn't get the feel of striking an arc, and the men helped each other, but initially refused to help the only woman in the class.

My first solution was clumsy, but I got all the components to run, figured out reading strings, input/output, handling spelling errors. The text had a rigorous theoretical description of top down programming, and after I got the syntax and op system nailed, I used that to write an elegant and robust algorithm. I didn't realize until years later what I was doing, writing an algorithm.

Then late one night, library almost closing, I had it! Next day I entered the hand written program into a Mac at school, and it ran perfectly.

It was the solving, not the problem that was hard, and I bet most here can't imagine all the missing components I had to find for myself, but the lack of tools, prior knowledge, and information made solving it almost impossible. Today, I could Google all the help I needed for a zero-to-program in two hours, but I'd never feel the level of victory as I did that afternoon when all my classmates entered arithmetic problems into my calculator and got answers.
I too have an option to move to Seattle (and New York) that I haven’t taken. The COL differences don’t seem wide enough to be worthwhile.