skysight-inc/HackerNews huggingface dataset:
> Education is lower in the list of preferred attributes for women than you think, at least for dating.

The data does not agree (as it relates to college-educated women).

https://www.theguardian.com/lifeandstyle/2015/nov/10/dating-...

https://www.thedailybeast.com/why-college-educated-women-can...

https://www.washingtonpost.com/news/soloish/wp/2017/07/20/ho...

The TLDR is that men date down, women prefer not to.
I suspect copyright craziness has hindered this as well. Even if you have a separate VLAN for your open WiFi, I can torrent a movie and get the RIAA/MPAA chasing you.
I'm happier and healthier that these conversations are happening; I'm not alone.

Facebook is clearly problematic, and I've been suspicious of the negative effects of Instagram and Hinge (dating app). The former would make me jealous/depressed/frustrated as I compare myself to glimpses of my peers supposedly winning at life. The latter would make me less outgoing in real life, b/c somehow flipping through dating profiles satisfied an underlying desire to meet new people.

I highly recommend Johann Hari's work: "Lost Connections" book [1], Sam Harris and Ezra Klein podcast episodes [2, 3], TED talk [4].

[1] https://thelostconnections.com/

[2] https://samharris.org/podcasts/142-addiction-depression-mean...

[3] https://www.stitcher.com/podcast/vox/the-ezra-klein-show/e/5...

[4] https://www.ted.com/talks/johann_hari_everything_you_think_y...
I'm a security guy but like to develop as well. I'd apply for a job in Perl any day, despite not knowing it very well and Python being my main language. But I guess it's easy to say when I just read that you're having trouble hiring, as my expectations of entry requirements are now different. Anyway, it's a shame you have to make such a big change for what shouldn't be a big deal. The language is a tool -- I've even written C# in Visual Studio on Windows 8 for a year in two different companies, which is about as Microsoft-oriented as you can get (I'd rather use something Linux-based). Unless there are major deficiencies and the team is looking to move away already, it shouldn't be a problem to adapt to the team's standards.
Weird to see "better privacy and security" listed when the notes say that it's not safe to use it with Tor. I assume it's just a compatibility issue with extensions or something, but still...

Bummer that the performance for videos and stuff is apparently worse. I assume it's because the developer doesn't have access to the PGO/LTCG resources that are used for official Firefox builds, but maybe hardware video playback has to be disabled for privacy reasons? The readme doesn't seem to say why it's slow.
There's a reason it was passed during the lame duck session of the Senate, just before change of control. That's when urgent matters that are guaranteed to be ignored by the next Congress are handled.

I'm surprised this needs explaining.
I had a mentally ill roommate - I can definitely confirm this phenomenon is possible. Especially when a close housemate isn’t willing to acknowledge their condition and allows it to progress in severity.
Why exactly do you consider it an old technology? The language is evolving the same way others do, with improvements and additions. In fact it recently got a shorter release cycle with new versions every six months.
You're absolutely right. City police are often a completely different organization from the county sheriff's office which is undoubtedly different from the state police.

Serial predators like the Golden State Killer[0] have leveraged this to their advantage and avoided capture for decades using this ONE CRAZY HACK. (exploit the jurisdictional morass by just moving around a bit)

[0]https://en.wikipedia.org/wiki/Golden_State_Killer
Not op but I think one difference between scripts and programs is some level of formal verification, as opposed to simple interpretation.
> derivatives or multiply two matrices

> college math

Those should be high school on most places
Published in 2018? I liked The Outsider by Stephen King
Yep. I’ve used FAI in the past as well (I think that was the name).

I just really like the CoreOS ecosystem and I hope that it keeps following the direction that they set in the beginning.
"...Disconnects Mobile Data" or the like would've made for a less obfuscatory headline.
>this uses the excellent rayon crate, which makes data parallelism awesome and easy.

Is that somewhat similar to D's std.parallelism module? A simple example of its use here:

https://jugad2.blogspot.com/2016/12/simple-parallel-processi...
Tcl.
If you'd like to meet someone new, call me on DECT 5169 once you're there. (If you don't have a DECT phone, ask an angel if you can use theirs.) I'm not a first-timer though. This will be my sixth or seventh congress.
1996 – eGold – the first successfully adopted digital payment system
The Encyclopedia Galactica defines a robot as a mechanical apparatus designed to do the work of a man. The marketing division of the Sirius Cybernetics Corporation defines a robot as "Your Plastic Pal Who's Fun to Be With. The Hitchhiker's Guide to the Galaxy defines the marketing devision of the Sirius Cybernetic Corporation as "a bunch of mindless jerks who'll be the first against the wall when the revolution comes".
Yeah, but that was in Mexican... noone cared about reading that.

/sarcasm.
It's quite interesting to me to see something like this here. A few years back (turn of the decade) I discovered a similar problem in the equipment of a fairly large ISP, albeit a little bit more serious (think root access). Their fix was to put that port behind a whitelist, with the only IP address able to access it remotely belonging to the ISP.

The problem is, this is one of those ISPs that have an extra SSID on their CPEs for "free" internet, think Xfinity, but this wasn't Comcast, and this vulnerability stems from an HTTPd misconfiguration, so if you can access the equipment's HTTPd (all you need to do is a single, unauthenticated request, so, really any access will do), you've got full access.

I went through some trouble to contact, via third parties, an insider at this ISP with the power to get things fixed - they did fix the remote part (via the aforementioned firewall whitelisting), but I was told, in no uncertain terms, that they didn't care enough to fix the root of the issue, as long as it wasn't massively exploitable, and it wasn't public.

I like my freedom/money too much to publicize details, and so it's still there, all these years later. I wonder how many vulnerabilities like this are out there, fully known by the vendors/providers, but nothing gets done about them because people are too scared to disclose, until eventually someone comes along and blows the whistle, or the equipment is obsoleted?
Many people working on compilers will have a PhD in the subject. It's an area where it definitely takes many years to get up to speed. As you said yourself it's deeply studied, and studying all that work takes ages.

Compilers are also definitely not well documented. I think they're rather notoriously undocumented with much of our knowledge of the subject passed on orally and existing only in the knowledge of people working in the field.

For example a couple of years ago I went looking for details of a very common compiler technique, called safepoints, used in many major industrial compilers today, and found that there was essentially no written information on them at all. That's pretty extraordinary.
A script can’t execute itself?
Ya...I really think hard about it before I like anything on facebook. Even scrolling through the feed or something I'm always concious not to accidently like anything or press the wrong button. I actually prefer looking through things on the few private groups i'm part of and if I post anything it'll be to one of those for the most part. Your normal facebook friends don't see anything you do on those.

I think worse though is when people tag you in public posts. You have no control over it at all, it gets announced to, seemingly randomly, some or all of your other friends...i'm not sure who exactly but I know other people end up seeing this...and the only way to get rid of it is to ask the other person to remove it or find the post, click untag yourself, not remove post from feed...that leaves you tagged in the post still...it needs to be the right one because if you remove it before untagging yourself good luck finding that shit again.
> so rusty I couldn't even remember how to do simple derivatives or multiply two matrices.

I was never taught how to do either of those things. Am I missing out on something?
> Disk space is so cheap these days

And yet we always find new ways to waste it. 16 GB was once an unimaginable amount of space, and yet one of my coworkers now takes it for granted that 16 GB isn't enough storage for a smartphone.

We should do our best not to waste any more.
From LTE perspective:
+ https://github.com/srsLTE/srsLTE
+ https://github.com/acetcom/nextepc
+ https://github.com/tudo-cni/tinyLTE

srsLTE and tinyLTE whitepapers are worth looking into as well. The whitepapers describe the infrastructure and hardware to purchase. All in all, these are surprisingly simple to get working together. After that, it is up to you what to hack on. MEC paradigm is something specifically relevant to software engineers.
Ooh I like it - yet another reason to get excited about wasm, thanks Steve!
I linked the thread on ebay's site. Apparently, they report the listing as false, have it deleted and then you can't get your money back because the listing doesn't exist.

Software engineering at it's best here :)
I’d be interested in the USB data capture mentioned in the future work section. What pieces would be needed to enable that?

I was looking for a good system to directly forward usb data, especially if it could monitor a stream between an existing application without requiring a hardware USB analysis device in between.
@anon0938 Always take the option that pushes you away from a "comfort zone".

The best heuristic you can follow for career is: Do what you are most curious about and meets your current & projected financial needs and still allows you to spend time with loved ones (where applicable).

I have consistently selected jobs/work where I'm most likely to learn in the areas I'm curious. Pen-testing (one of your options) is a great area that is only going to grow in demand. As Marc Andreessen is often quoted as saying: "Software is eating the world". The problem is that the vast majority of the code that is written is insecure!

If you are able to do the 6-12 month learning program and it results in a certification, that certificate is a "safety net" that you get to keep for the rest of your career whatever you do next!

I did something similar and have no regrets. It opens doors and being the "security expert" on a software project means you always get consulted when something mission critical has to be built.

Once you have enough cash, invest it in cashflow-producing assets so you have an additional stream of income (if you don't already...). Then you can afford to re-think what you do with your time and do exactly what you want with your life.

If you feel "insecure" write down why you feel that way.
If you don't already keep a journal, start today.
Write down your thoughts on why this decision is difficult.
And refer back to your writings on a regular basis to "check-in" with yourself.

Bottom line: invest in yourself. keep your learning curve steep and switch jobs (upgrade) whenever you feel that you are no longer learning. This might feel like a "lack of loyalty" to your employer, but the fact is that you will be more valuable as a team member the more you learn, and if you can impart your knowledge on a given project in 3 months, why would you stay there for a year?!

I started contracting 6 years ago and have never looked back.
The money is much better than "full time" and it's also way more flexible. If you develop the skills/credibility, you will never be without work. And if you cannot handle the "uncertainty" of contracting, you can always get a full-time job again.
Continued developing my skills in

- Haskell
- Yesod
- Nix
- Postgres
- SQL

Nothing new.
That version of the headline wasn't upvoted, https://news.ycombinator.com/item?id=18743963
That's not the window.open() call, which doesn't stop the browser window from closing. It's (I believe) a window.confirm call: https://developer.mozilla.org/en-US/docs/Web/API/Window/conf...
Google is unable to scale its ability to moderate its platforms with its level of growth, and we're seeing the effects of its implementation of "zero tolerance" in this uncontestable, absolutist decision making that customers can only have addressed by stirring up a potential PR stink.

Just like in many governments, it's significantly easier to address the immediate concerns of a few powerful entities and just the outcome of elections of the masses, except when they organize.

Google, for good or I'll, has truly become a model virtual nation.
Similar process is not similar outcomes. The stakes in pewdiepie vs vox are far less serious than an actual war. This really should not require explanation.
Isn't there an extensive QA with all sorts of automatic and manual flows before they push out a release? Not sure this is the first time they've pushed out something with problems.

Not saying it's easy, either, I'm sure there's a lot of things to think about. But it's the world's most valuable public company.
- Developed bias detection apps using Google Machine Learning Natural Language Processing

- Launched services built with Python

- Learned more about computer science principles including data structures and algorithms to clean up/speed up code

- Built social media apps that leveraged REST APIs and RSS
I used UML to do this very thing 15+ years ago !
Now they will just show the popup when your mouse leaves the page close to the exit button
But as the public is typically entitled to that "other stuff" information as well, you're just obstructing.
Though when that mature codebase and the spec come with solid test suites you can run against it seems a lot less concerning.
Is/are the child(ren) still with said ex-roommate?
You could implement a 'script' that implements an interpreter and then run that script on itself.
2018 was a fantastic year for me. Changing jobs allowed me to get away from C++/MFC programming, which I absolutely hated. Now I'm working with fresh and exciting technologies, such as Go on the backend and Angular/PrimeNG on the frontend. I've also dug deeper into distributed systems and played with Firebase and Flutter as well as various Go messaging technologies (Mangos, Nats).
I also just got started with Erlang, Elixir and OTP. Although I'm not very far in my journey yet, Erlang/OTP is my favorite tech in 2018.
slavik81 showed a simpler for_each in a comment;

auto for_each = [](R&& r, Fun fun) {
return r | view::transform(fun) | view::join;
};

similarly, it seems that yield_if can also be radically simplified

auto yield_if = []<Semiregular T>(bool b, T x) {
return b ? view::single(x)
: view::empty<T>;
};

But if you actually read the blog post... for_each and yield_if are a part of the range_v3 library and are proposed additions to the language.

Also I don't know what the heck is up with that cout statement; we can use structured declarations to make that look more pythonic too. And there's also a proposal for string formatting [1]

#include "fmt/format.h"
#include <iostream>
#include <ranges>

using namespace std;
using namespace view;
using namespace fmt;
int main() {
auto triples =
for_each(iota(1), [](int z) {
return for_each(iota(1, z+1), [=](int x) {
return for_each(iota(x, z+1), [=](int y) {
return yield_if(x*x + y*y == z*z,
make_tuple(x, y, z));
});
});
});

for(auto [x,y,z] : triples | take(10))
cout << format("{}, {}, {}", a, b, c) << endl;
}

So despite all the protests about how ugly Eric's solution is... I don't think the above is significantly worse than your python & rust equivalents. Speaking as a python evangelist who uses C++ out of nece$$ity.

[1] https://github.com/fmtlib/fmt
I was working as a frontend developer and I learnt Vue 2 and Angular. Working with Angular is such a pleasure, it's a brilliant framework.
Google authenticator allows you to transfer all your codes to a new phone and that includes if you lost your old phone. So they must be backing up to your Google account.
In fact, the primary motivation of locking down an AP with a WPA password, from an infosec perspective, was NOT ABOUT stop people from using free Internet connection, BUT to harden against the technical limitation of WPA/WPA2 - the protocol, by design, CANNOT offer encryption on an open network, widespread usage of SSL/TLS was only a recently development, it used to be that you cannot run a open AP without COMPLETELY COMPROMISE EVERYONE's security and privacy on your network, INCLUDING YOUR OWN. The better way of doing it, is creating a separate AP, setting up a password and showing it publicly, then the attacker at least needs to intercept an individual handshake before being able to decrypt a portion of traffic. The even better way is WPA-Enterprise, but... In short, the Wi-Fi standard itself unnecessarily forces everyone to make a hard choice between security and openness.

Fortunately, and hopefully, the awakened situation is going to be solved, WPA3 supports encryption on an open AP. Also, WPA3 offers forward secrecy, the traffic cannot be decrypted by passive monitoring unless the attacker is also a Man-in-the-Middle.

BTW, as tyingq said, copyright is a factor, but I think laws in generally are a bigger problem. Under the laws of many jurisdictions, the Wi-Fi user may be responsible for all the legal consequences of other people who is using his/her Wi-Fi. Routing the guest AP over an anonymous VPN connected via Tor may be a solution to the legal challenge, but a legal issue needs a real legal solution.

If you are interested in sharing your Wi-Fi, read https://openwireless.org/
Even if the actual growing isn’t hard, you need to plan it months in advance and there’s work involved in setup and harvesting. That’s far more inconvenient than just opening an app or driving to the store. It can also be risky (there are still plenty of confusing rules around growing for personal use, and guerrila growing is illegal) and even meticulously attended plants have variable yields. The only way for it to substantially affect profits is if a non-trival portion of customers prefer the cost savings to inconvenience, and, imo, the evidence points strongly against this. Heck, at my local despensery pre-rolls far outsell flower and the only work involved there is grinding and rolling!

Also, I haven’t read that particular book, but the growing difficulty depends on the variety. I can personally attest that growing cherry tomatoes is extremely easy (they’re commonly recommended as a “beginner” plant.)
Primarily fiction meaning most of it didn't happen???

Yet it is based on the testimony of the 200 people he interviewed as well as his own first hand experience. And was so well documented the KGB couldn't discredit it. Try as you might.
There are always trolls out there for everything. Maybe their own lives aren't going well and they get some sort of consolation in attacking others etc.
>However, it needs to be not only "open", which typically means stashed away in some corner as a spreadsheet or database file, but accessible and useful to people

True, I guess HGTG applies well here:

“But the plans were on display…”
“On display? I eventually had to go down to the cellar to find them.”
“That’s the display department.”
“With a flashlight.”
“Ah, well, the lights had probably gone.”
“So had the stairs.”
“But look, you found the notice, didn’t you?”
“Yes,” said Arthur, “yes I did. It was on display in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying ‘Beware of the Leopard.”
Can you be more specific as to what you do? Power transmission or distribution?
What It's Like to Go from Maker to Manager
This is perfect for a raspberry pi WiFi bridge.

Excellent work.
‘Seems fairly obvious’ is just about the most useless qualification you can make up for this. Nicotine is poisonous, it seems fairly obvious that ingesting it causes damage.

Unsurprisingly, even though e-cigarettes and friends haven’t been on the market for very long, the data already shows it’s harmful. It causes development issues in children, fertility problems in women, blood pressure and heart problems for everyone. And that’s what we know now.

It’s only less harmful if you compare it with smoking.
Three Body Problem (this one's probably going to get mentioned a lot, and it absolutely deserves it). The Collapsing Empire by John Scalzi. Red Rising (series) by Pierce Brown.

I almost gave up on Three Body Problem because it starts off a little slowly and it's difficult to see where the book is going. Absolutely worth it in the end, though. The second two are the kinds of books you can rip through quickly if you've got a little extra reading time over the holidays.
Like Pinochet? Supported by the US while he tortured the chileans who opposed him?
> Sure, but I don't think you can do that within a self-contained binary, the kernel doesn't really support that.

An executable binary can set up a mount namespace, mount /proc/self/exe or argv[0] (with some offset) as a loopback device within the namespace, and then execute a process within the mount.
Generalizing to a whole group is just dumb. Not everybody who works for a big company is the same not to mention the myriad of people who tend to not want to work for Amazon and Google etc.
Yes and No.

I don’t pay much credence on certification as proving competence. I take them as a slightly negative signal when I am interviewing someone.

Certifications for me are partially forcing functions to make me get a broad overview of a subject matter. At the level I’m at now, my “whiteboard interviews” are not about leetCode they are about how would I architect systems, meaning I don’t need to know the details of everything but I do need to know how to talk the talk.

When it’s actually time to implement the solutions, I’m either then going through the SDK and figuring out the details or assisting other developers in coming up with a proof of concept.

Except for the Architect Associate which I studied for just to get an overview of AWS, I’ve had practical experience on most of the other areas that the certifications covered before I took them. The other three are the developer, Devops and Architect Pro.

My company is paying for them, and even though my official title is “Senior Developer”, when talking to our clients (B2B) I am the “certified AWS infrastructure architect”, so yeah it helps give customers a little bit of confidence.

On the other hand, whenever the day comes that I decide to make my next career move, it will probably be as an overpriced “implementation consultant”. I found at my last job where I was the dev lead, that locally, that’s where the money is.

Amazon Certified Partners have to have a certain number of certified employees.

Two of the three certifications I am working on next year will take me way out of my comfort zone - advanced networking and Big Data.

I will have to really study for those two and do some side projects. Unlike the first four where I could learn on the job.
> The only new thing I’m seeing from this solution is the ability to create containers as an unprivileged user, which for most scenarios I tend to view as a non-issue. Or am I misunderstanding that?

I believe you're mislabeling it as a non-issue, it seems to be the core problem they're trying to solve:

From the blog[0]:

> Yes, we all know that containers run unprivileged processes; but creating and running the containers themselves requires root privileges at some point.

> What is the awesome sauce we all gain from this?

> Well judging by the original GitHub issue about unprivileged runc containers, the largest group of commenters is from the scientific community who are restricted to not run certain programs as root.

[0]: https://blog.jessfraz.com/post/getting-towards-real-sandbox-...