skysight-inc/HackerNews huggingface dataset:
I find your anecdote a little difficult to balance with the stories of all the vets who need medical treatment but can't get it.
> The thing is, "somewhere in the backend" is generally accessible from the internet

If this is the case you have much bigger problems that a bug bounty won't fix.

> in my mind, just infinitely worse than gaining access to a computer of a person/uploading some ransomware/something similar

That depends heavily on what the backend server is. There are plenty of databases where a hack is irrelevant because the data is public and there are backups. Meanwhile most people have poor backups and a hack can be incredibly damaging.

>we both see the thing that touches us the most as the problem

I think you're heavily discounting the risk that all these code bases in general usage pose. I've fuzzed C++ binary parsing code on just a laptop and was amazed at how many crashing bugs I was able to find in a short amount of time. Many of those were probably easily exploitable.
Why Microsoft Windows network performance is bad during media playback
Young developers will work mindless hours and not demand proper compensation. That's why (poorly run) start-ups prefer 'em.

Also, wealth is the world's shittiest metric for success. I know a ton of people with incredible skills who work rather low-paying jobs because they want to improve the world, follow a particular passion, or whatever.
Does this also affect iOS? I imagine if the app is transmitting data to Facebook, then there's nothing stopping it on other platforms either.
The first step is to realize it is not about motivation, but discipline. Relying on motivation will never last because motivation ebbs and flows. Motivation doesn't help you do things that you don't want to do even though they need to get done.

Discipline is hard and requires daily practice. There really is no trick. Alarm goes off, get up. You know you should workout every day, so workout. That project you're pushing off, do it now. With that said, if there are any tricks, I find a routine and focusing on the long term helps.

IMHO, discipline is one of the purest expressions of free will that we have. Instead of letting our subconscious cause us to meander through life, we make decisions for what is best and act on them.
Does data stay on the client? If yes, how does sharing between different clients (owned by the same person) work? If not, where is data saved?
Planning isn't useful if you do not intend to take action based on it.
I was pretty early on the 4K train (mid 2014), of all the things to not adopt that fast, texture editing software was pretty unfortunate. Glad to hear things are better now.

On the platforms, my bigger issue is the complete lack of iOS for these apps more than the iffy Mac support. It would’ve been really good.

Heck, even the Surface Pro would’ve been great if they’d properly supported gestures in the graph view. They didn’t though, and I don’t have a Surface Pro anymore.
I've done this on mine, and I'm pretty sure when companies see this, it's a signal for an older person.
Thanks for mentioning Visio, it is now available on the browser as well for basic, business, flowcharts, network, and cross-functional flowcharts. $5/per user/per month (annual plan)
https://products.office.com/en-us/visio/visio-online-plan-1

Disclosure: I work for the Visio team, so if you have any feedback pls lmk.
Cabin 28 İzle (2017) Full HD
Even though the objectives are similar, it’s hard to tell apart from San Francisco, whilst roboto is quite clearly different.
Thanks for mentioning Visio, it is now available on the browser as well, for basic, business, flowcharts, network, and cross-functional flowcharts. $5/per user/per month (annual plan)
https://products.office.com/en-us/visio/visio-online-plan-1

Disclosure: I work for the Visio team, so if you have any feedback pls lmk.
This is probably the same guy from fuckinglevel3.com. We used level3 for years and sent each other that link almost daily. I guess he had to update after CL bought them :]

Don't expect a technical report from CL/L3. We had 60+ mpls/vpls circuits from them and all our reports were very high level.

Source: am neteng
I think I must be one of the younger people on this site because while I agree ageism is a bad thing in the sense that age should simply not be a factor when it comes to hiring/pay, and that experience is good, I also have direct experience working with older developers who didn’t know the new tools we were trying to use (in my case, AI and big data) very well and so weren’t any more productive / were less productive than younger people who were more experienced within that subject area.

That being said, by far the best engineers I’ve met were the people who usually pioneered these systems 20 years ago and were now domain experts. But what I mean by this post is that I also have met a bunch of people who basically only know basic crud, and just because they had a lot of experience in that area didn’t mean that transferred very well to other areas.

There’s a limit to how much your knowledge of SQL and Windows server from a decade ago will help you with Kafka and Cassandra
For men and women it tends to be equal and opposite. Young men are at their lowest social value when young, they're disposable, expected to destroy their bodies to make a living, etc. As they get older their social value goes up. It's the opposite for women whose social value peaks at 18 and declines over the years with a significant drop in the 30s when fertility wanes.
It probably has the most comprehensive set of apps out of any of the password managers.
Fatal Docker Gotcha's  – for new users
There are many people involved in influencing the process to hire someone, and as I'm sure you know, many people vote "no" for the most seemingly inconsequential reasons. As superstitious as "bad luck" is, like I stated in my earlier post, it's a placeholder/heuristic for abnormal amounts of failure without a clear cause.
Is there a blog post or outline that summarizes this talk? I care about privacy, but don't have an hour to watch the whole video.

The conference does provide a useful link to a privacy-centric page which catalogs some known facebook abuses:

https://privacyinternational.org/types-abuse/facebook

but there is no outline of this talk which summarizes the methods that facebook uses to spy on their users and the public.
Dealing with shit in life
Thanks for mentioning Visio. I work for the Visio team, so if you have any feedback pls lmk.
Is it really common to retire at 35? I'd think it would be just a few could afford that. Around here property taxes plus health insurance for a family is $50k/yr. So from 35->65 that is $1.5m. Not including cost of living of course.

Maybe the stock market has been way too successful in the last few decades. Ask a European or Japanese person about retiring early and living off the market.

(of course many 35 year olds are struggling to save for a house deposit let alone thinking about retiring)
How does a single network card emitting bad packets effect other sites?

> investigations into the logs, including packet captures, was occurring in tandem, which ultimately identified a suspected card issue in Denver, CO. Field Operations were dispatched to remove the card. Once removed, it did not appear there had been significant improvement; however, the logs were further scrutinized .. to identify that the source packet did originate from this card.

> Support shifted focus to the application of strategic polling filters along with the continued efforts to remove the secondary communication channels between select nodes.

And then

> By 2:30 GMT on December 29, it was confirmed that the impacted IP, Voice, and Ethernet Access services were once again operational. Point-to-point Transport Waves as well as Ethernet Private Lines were still experiencing issues as multiple Optical Carrier Groups (OCG) were still out of service.

And finally

> The CenturyLink network is not at risk of reoccurrence due to the placement of the poling filters and the removal of the secondary communication routes between select nodes.

Looks like the root cause analysis has a way to go. Addendum says:

> The CenturyLink network continued to rebroadcast the invalid packets through the redundant (secondary) communication routes.. These invalid frame packets did not have a source, destination, or expiration and were cleared out of the network via the application of the polling filters and removal of the secondary communication paths between specific nodes. The management card has been sent to the equipment vendor where extensive forensic analysis will occur regarding the underlying cause, how the packets were introduced in this particular manner. The card has not been replaced and will not be until the vendor review is supplied. There is no increased network risk with leaving it unseated. At this time, there is no indication that there was maintenance work on the card, software, or adjacent equipment. The CenturyLink network is not at risk of reoccurrence due to the placement of the poling filters and the removal of the secondary communication routes between select nodes.
For me, the biggest advantage of big country programs is the ease of reporting something. Not every software has a direct security report procedure documented.

For those who wish to get credit for them, those bug country sites help too.
>If you are 40+ you kinda expected to have a network

Every job I've had in computer-related tech since the first one out of school came from people I knew and had worked with.
Besides using Apple or MSFT product suites which can get you out of pretty much everything from Google. There are the following

1. Search: bing, Duck Duck Go.

2. Android: Lineage OS

3. Drive: Dropbox

4. Cloud Services: AWS

5. Email: yahoo,yandex,gmx, tutanota,protonmail, etc.

6. Maps: HereMaps, NavMii, OpenStreetMap, Waze
Since it's free, even for commercial use, I'm wondering what their business model is.
>>Young developers will work mindless hours and not demand proper compensation. That's why (poorly run) start-ups prefer 'em.

Well, there are other reasons. People you hire straight out of college tend to feel grateful, and also feel like they need to prove themselves (which is true). So they are usually willing to work extra hard. This can be a good quality, if nurtured properly with guidance and training.
I'm considering doing the same. My rational is that it's a developer(ment) focused framework.

Are there other open source projects that are trying to be the same? Could you become the defacto open source option? How easy would it be to replace your product vs. tool? Can you keep some closed source for Enterprise / on-prem?
My perception is that in the US ibuprofen is used like candy, while it's not the same in other countries, where, for example, aspirin has that role.
> It is still possible the older person is going to become a wizard later, but the question is: if they have it in them, why aren’t they a wizard already?

The vast majority of coders are not and will never be a "wizard". And that's OK. You can still be valuable to a company if you aren't a recent college graduate or a wizard.

Edit: also, be ready to pay through the nose for any actual wizard you want to hire. They can demand bucketloads of money.
An alternative explanation is that some people are just good explainers.

I've had profs in college who were brilliant but couldn't teach, and profs who could teach but weren't brilliant (didn't produce much original research).

I wouldn't say the former group "didn't know their material well", but they didn't build up the material systematically. Pedagogy was neglected. Explaining things is an art that not every has the inclination to master (but they should).
On the general theme, as I type I have a gap in my team that on paper is for a more junior, inexperienced developer; I have deliberately not starting looking for someone to fill that post, and told HR to consider it simply frozen for the moment, because right now I simply don't have the spare capacity within the team to take on an inexperienced developer. Another vacancy, for a more experienced developer, I am hiring for.
Yeah, when I ran the same tests a little later and with the Spectre/Meltdown patches (+APFS, which also didn't help), the mkfile I/O rate had a further precipitous drop to ~80MB/s.
Bring Visio online to feature parity with Visio desktop! Demonstrated progress/goals toward this would go a long way too.
> Humans have a dark side and seem completely unaware that their believes are driven by self-interest, envy and hate rather than making systems that work.

There have been a few flawed but widely successful attempts at this style of system. Namely USA style governance systems. I’d even say modern ML comes from a similar, humble insight.
I agree with you but if a startup really wants people working 80 hours a week, then a family man who wants to work 40 hrs isn't a good match for the firm.
Average age on my engineering team is about 55. Until recently, the eldest was still coding at 73.

When I look across the team, the more productive ones are those who keep their skills and tools up to date. Find a 30 year vet who can code the same routine in both Go and Python and you'll usually find a productive, dependable engineer who steers you around many gopher holes.
It's impossible for me to know how long the engines thought on each move, so I just analyzed the games at a variety of times and depths. Stockfish 8 at two minutes per move on a machine that is slower than that used in the match finds plenty of issues. If we know the amount of time AZ thought (or indeed... had access to AZ) it'd be possible to more closely reproduce the games.

This is all either of us would have done if we were peer reviewing the paper, don't really understand the hostility about trying to reproduce a published paper.
We're spoiled in the desktop browser by being able to clear history, cookies, local storage etc, or use a private browser session. There's also the importance of the "same origin policy".

The Android platform API should simply never allow apps to obtain global system identifiers (serial numbers, "advertising IDs", MACs, Wifi network info, EMEIs etc) in the first place. Perhaps even going as far as not providing a shared filesystem.

Mobile apps, despite platform API permission, and having some ability to protect their own data, are a lot closer to desktop programs than web apps in many regards.
This kind of scam is actually a minor issue and also a pretty moronic thing to do.

You're destined to be doomed once you fake your parent's death.
Arial (and Segoe UI now) should be readily available to windows users, and sans-serif should cover the rest I think.
Awesome work! And lovely to see Nomad List on the to do :D
The Kindle app on iOS gets blocked attempting to connect to Facebook every time I open it.
Imagine a Chess game, Trello, a multiuser ToDo list app.

If you are familiar with state management libraries such a Redux, Mobx, etc. Dop is more or less the same. With the difference that the initial state of your app can be initialized in the server.

I have to work better explaining this.
I mostly use web sequence diagrams, and commit the text.

https://www.websequencediagrams.com

Otherwise I just draw on a white board and take a photo
Then finally Visio if needed.
Ask HN: What should I learn in 2019 – Elm, PureScript or ReasonML?
I want to start the year by making an effort to better understand FP. I also want to try something different on the frontend for personal projects. So which one of these would you personally choose and why? Also if you are already using one of these, why?

PS: I have seen people not recommending PureScript unless you have experience with Haskell. I won't say I am experienced with it (which I guess is evident because I do want to get better in FP) but I am a bit familiar with it.
Adventures in Scalable WordPress Hosting – Part I
> According to dw.com, the European Commission estimates that tech firms pay an estimated 9% on profits, as compared to 23% for traditional companies.

Why not figure out why that is and close whatever loopholes currently exist instead of introducing a targeted tax meant to close that gap?
Working with multi-tenancy in Kubernetes
Ok,couple tidbits that were new to me. I didn't know about all the tube amps they used, that probably sounded really nice when they started pushing things, especially on the low end. I didn't know how they solved the problem of a line array being behind the band WRT feedback on the vocals, that's worth the read alone.

Most interesting takeaway for me was that the Wall time period basically overlapped w the period that they'd booted Mickey from the band. Those two things together - no wonder those are my favorite shows.
"My company tried to sell "cheap" (as in ~1000/1500 USD) VIS/NIR spectrometers, but it was very hard to actually find some viable market."

You'd have done well with the mining market if you had your resolution down to 5nm precision. 15nm is just a bit too much of a drift range to allow for reasonably accurate mineral identification.
Taxing foreign tech companies is protectionism [1], not envy or jealousy.

[1] https://en.wikipedia.org/wiki/Protectionism
Federation Testsuite
Yes and I think programming can be seen as a kind of teaching (where you teach a computer instead of a person).
The hard thing about all of this is that, as you pointed out, studies are hard to do. Even if they were funded to the same level as pharmaceuticals, it would be much harder to make conclusive findings. But in the absence of huge companies with profit motives or government bodies with political motives, there's not much funding around for thorough studies.

But some examples of where practices from TCM and CAM are achieving recognition are:

- The Nobel Prize awarded to Tu Youyou for finding artemisinin effective for treating malaria [1]

- A recent NIH review finding acupuncture, yoga and other non-drug therapies effective for common pain conditions [2]

- A study of a chiropractic technique to reduce the physiological effects of emotional stress/trauma [3]

But aside from these studies, surely the market is at least somewhat of an indicator of some level of benefit. Economists generally regard consumers of being capable of making rational decisions about how to spend their money in ways that most benefit them.

Of course it's not a water-tight rule, but nor is it completely false. Yet many people dismiss the entire CAM industry as being fuelled by nothing but stupidity, and dismiss the possibility that at least some of the industry's customers are capable of making rational spending decisions when it comes to their health.

[1] https://en.wikipedia.org/wiki/Tu_Youyou

[2] https://www.nih.gov/news-events/news-releases/nih-review-fin...

[3] https://www.ncbi.nlm.nih.gov/pubmed/28181091
Very nice! I've been using SVG Porn[1] (sfw) for the same purpose but I will definitely use this too now.

[1]: https://svgporn.com/
Then you show up for the interview and people still can't tell your age? Isn't that a waste of time?
Uncensored social media network
what comes to your mind when you think of an uncensored social media network? what limits if there should be?
Young Michael Jordan could leap high and perform dazzling feats in mid-air. Old Michael Jordan had tired legs, but could destroy the competition with an insanely tight post-up game, and a virtually undefeatable fade-away jump shot.

I’ve personally always felt incredibly fortunate to get to work with people who’ve been in the industry a long time; you can learn a lot from them. And while you sometimes can get a “step” on them with your youth, they’ll often school you with the fundamentals.

This is part of the diversity conversation — having a team composed of people from all walks of life is a competitive advantage. But it takes an enlightened “coach” to see it.
https://thenounproject.com/
Yeah. You hit the nail on the head. Lacking a standard package manager, no module system, need for incremental compilation, and semantically significant preprocessor symbols (among other things) make C and C++ require a lot of power tools for building at all correctly.

Even relatively cleaner languages like Java need fairly involved declarative config files like pom.xml.

> ...only the package maintainer needs to worry about these scripts...

Package maintenance is only one part of the puzzle. There are still analysis, code transformation, documentation generation, and other kinds of automation.

There's also packaging for different ecosystems. Each package manager, Conan, monorepo systems, and each company specific system out there (maybe the most common concern).

A language like python already has standard languages and formats to both keep the number of integration points small and to keep the remaining ones supported.

In other words, I expect project.json to mention Doxygen and clang-tidy and DPKG at some point. Otherwise there will need to be pretty flexible ways to expose bake-deduced data to those tools.
You didn't say anything about not smoking it either.
1.) Average stay in company is 2 years, so whether someone grows wizzard in 10 years is immaterial.

2.) If you are hiring for vague sense that person grows in 10 years, you are extremely likely to be biased for all kind if cultural and demographic signals that have zero with actual performance.

3.) Old are not wizards now, for dame reason why young are not wizards now. Nobody can know everything and wizardly is moving target - half composed of myths and half of smokescreen.

It is not to say that great people don't exist, they absolutely do. But they all have expertise in what they do now and when they change jobs, there is learning curve.
"This kid (i.e., recent grad) reminds me of me."

Ah, "culture fit". Looks like me, dresses like me, educated like me, thinks like me.
I use the Camuna Modeler (https://github.com/camunda/camunda-modeler) for business process models with my sideproject, that tries to describe a startup adventure as a business process to get the acceptance of the middle management of big corporates.
It is quite easy to use, well maintained, and comes with all the required features.
There exists no good match for a company that pays their employees for 40 hours but demands 80.
Slides here: https://fahrplan.events.ccc.de/congress/2018/Fahrplan/system...
The protocol has a versioning system:
https://github.com/DistributedObjectProtocol/protocol/blob/m...

Is the responsibility of the implementation to apply the patches/mutations in the correct order of the version.
Here are my recommendations for business tools (as opposed to development tools) including things like Grammarly, Calendly, and Inoreader:

https://docs.google.com/document/d/1cA11-1vm6xVljPm3hrnKk33y...
It's basically impossible to analyze without knowing how the writer is defining the various terms.

It's likely one factor is Medicaid expansion, which California participates in and Texas not. A significant percentage of those dollars are federal.
This is my first choice as well. Found it when I moved from windows (and therefore Visio) to Mac. Doesn’t have exhaustive feature parity, but everything I needed for UML drawings works great. Natively supports source control to Github which was also great to keep documentation with the code.
Yed is the "demo product" for their java library which you can integrate into products to get diagram drawing and editing functionality. I know of a few enterprise products that use it.
I have worked for the professor where yworks was started and we got to use the generous academic license for the library.