skysight-inc/HackerNews huggingface dataset:
Not really, not at all. Software architecture is a lot about wisdom - how to anticipate future changes. Often user interfaces need to be carefully and gently designed so that the user has no surprises. Diligence from the user should not be assumed, the user interface must emphasize tricky parts and make choices less onerous, etc. Scalability is preferrably achieved by simple code + hardware/vms rather than overoptimized code which depends on "irreplaceable" programmers - what if they fall sick, or leave the company? etc. I think all of this is experience accrued over many years, and with facing many failures.

I have found that the data structures that you need are often simple trees and hashes. Database design is probably more important. I often shake my head at students doing hours of dynamic programming to crack interviews. In the past year, how many problems in your company have you solved through dynamic programming? I suspect, not many.
As someone who is interviewing for internships, I view all of these algorithms interviews as a necessary evil. While they may not reflect the day to day job demands of programming, they are certainly easier to measure and serve as a benchmark for candidates.

Not all of them are bad though; I had an interview that had me implement a basic data structure in accordance to the specifications given. It didn’t require memorization, practice, or any “Leetcode grinding” — only fundamentals in communication and programming. The time I had was about an hour so this is definitely a plausible substitute.
If the service doesn't care about security at all then you could just not have a password, log on using your email.

If it cares a little bit then you have to characterize exactly how bad it would be if the account was compromised. The right solution might be to just accept any non-blank password that's less than 32 chars or something.
The existence of password breach databases means that attackers are already attempting other people's passwords against your accounts.

We should honestly move to the world where typical consumers are using password managers that generate passwords randomly. I think it is pretty reasonable to expect the typical consumer to install and use a password manager; I think it's pretty unreasonable to expect the typical consumer to generate memorable, strong, and unique passwords for each website and store them in their head.
>if I could go back I would choose to pursue a more "stable" highly-paid field (e.g. medicine)

I'm fine with the first part of that sentence. But medicine is an awful awful example.
>If even a modest amount of the supernatural claims in the Christian Bible are true then at least one of them should be reliably repeatable

If it were reliably repeatable, it wouldn't be supernatural. That's tautological.
this shouldn't be used on all sites, only ones where security matters.
Except lifting weight has a DIRECT affect on increasing muscle mass. Doing pointless algorithms don't have any direct affect on your coding skills. I know plenty of college grads that can memorize all sorts of algorithms, but are shit at real world code. If I'm a company hiring to do REAL WORLD CODE, I'm going to ask questions pertaining to the position I'm willing to fill. The problem with these companies, is that they are hiring more than they need, therefore they aren't asking questions pertaining to any REAL job they're looking to fill.
I'm in a similar situation.

I think the counterargument might be that at our age, you should have a network of people who will hire you just based on your stellar performance on previous jobs, if you're that experienced and sophisticated.

If you somehow don't, well, maybe you need to brush up on your tree balancing skills...
Am I the only one that thinks Slack's new logo looks like a Swastica?
Seriously. If you look at the top green piece, and the little blue dot next to it, imagine that dot being green. Now you see one of the L's in the swastica. Now repeat. It looks like a damned swastica!
I understand your point of view, but honestly, this type of comparison makes no sense. Cigarettes are not good in any way.
It would taste like crap and no one would eat it.
Most people don't know how to make a good password. So don't let them make a bad password, and make that easy by providing a button that generates good ones.

"It has to be new" is about as elegant as you can get for password rules. You can use any secure method you want. Whatever characters you want, just don't do it wrong. If you want it to be easier, press the button.

Even with a one-off account, a complex password you don't bother to remember is better than a weak password, because the service won't have to deal with tons of misused accounts.
Do you remember when the world wasn't consumed with ads?

Pepperidge Farm remembers.
It is also a form of “proof of work”. If you are willing to go to the lengths of learning these things, maybe you’ll be able to learn other things that are harder to assess during an interview.
The forecast package in R is probably the best in class. And I say that as a data scientist who hates R and prefers Python. (In our production systems we sometimes call R through Python, because the things in forecast just don't exist in Python).

Having said that, if you for some reason don't want to use R, sklearn/statsmodels have some forecasting stuff.
Look in the mirror, running around calling people juvenile is juvenile.

I understand addiction just fine, addictions can be broken: that is a fact; you can break your body of any such dependency and that you can, means it's your responsibility to do so and thus your fault if you remain addicted. I understand addiction, you don't understand that we don't all then conclude from that that one has no culpability. Other people have different moral reasoning than you do, that they disagree with you about something does not mean it's because they don't understand it.
Beans and lentils aren't low carb.
Well there is one important factor about these 20 trillion passwords: are they associated with real user accounts?

If not then it really doesn't matter that they got published. They're useless to hackers without knowing what email to type in. The attack model is that the attacker actually has to log into a website and you don't get 20 trillion attempts.
Salts do not need to be previously unknown. This goes back to what I was saying - they're either securely protected with a key derivation function, or they're not.
Every time the interview story of the guy behind Homebrew gets brought up, there’s the reminder that he interviewed for a software engineering position while he would’ve been better suited for a product manager position — he also mentions this as such.
Adam is pretty late on this topic.
interestingly, Texas keeps a record of the last statements made by death row inmates uttered before execution. I'm not sure if other states do this.

https://www.tdcj.texas.gov/death_row/dr_executed_offenders.h...
The thing that has always been terrifying to me about those CAFOs are the fact that there can be 5,000 head of dairy cattle and you'd _literally_ never know it unless you were told.
- Sublime Text

- Sublime Merge

- Alfred

- Daisy Disk

- Github

- Office

- AWS
Well, who is making decisions and how are they being made. What metrics matter? How can we judge them better? How can we improve them in people?

Or, to go even further, have you ever seen Star Trek where they use the holodeck for Training? They have many real-world scenarios so that they can build experience. Couldn't the same be done in many other domains.
I work at a fab lab. We love Inkscape and I train many people to use it each week. Our workshops are exclusively Inkscape focused. Illustrator takes a back seat.

On Mac, xQuartz is a bad sticking point. The unusual ctrl/cmd key swap is difficult to remember. The XQuartz preferences are difficult to parse and must be changed upon install — even I refer to the instructions on the Mac download page every time. A first class Mac app would make it a much easier sell.

We still use v 0.91 as 0.92 moved from 90 dpi svg to 96 dpi svg, to conform to web svg. This can cause problems with our laser cutter software. More important, opening files authored in 0.92 in 0.91 can change the physical size of the drawings. I believe the sizes remain correct if defined in a physical measurement (ie anything but pixels), but some extensions generate svgs whose dimensions are nevertheless affected when opened in the older software. This issue, and the occasional crashing on windows when pasting an image copied from elsewhere, are the only problems I face with this excellent software. Bravo!
64? How much entropy is in the passwords you're pasting? While holistically I like to see maximum lengths of 200+, personally I'm satisfied with 20 characters holding 119 bits of entropy.
I find funny that people say Facebook is evil because of this quote:

"Give people just the right amount of dopamine and fiddle with their psyche in all the right ways in order to maximize the amount of time they spend staring at their phones."

And yet, that's basically what every entertainment driven person/business wants to do. Every app, TV show, news media, magazine or even the guy playing the guitar in the subway, all they want is the money that comes from constant attention.
I should have clarified: by stable I didn't mean "reasonable work life balance" or other definitions, I meant the knowledge in the discipline you're practicing is itself stable.

Several of my high school friends are not physicians and, while they have to generally keep up with the latest best practices in their specialty, most of the knowledge they acquired in school never changes for the entirety of their career (so ageism doesn't basically exist), which isn't even remotely true in software engineering and it's a constant source of stress like I initially described.
No way. Organic free range tastes way better.
So you did 750 thousand lines of code in 90 days? impressive.
If the damage is done, I’m having a hard time understanding what did the damage. If I’m parsing the vague outline of what hasn’t been said directly, the sensitive details being danced around come across as strangely uncontroversial to a Western outsider, which seems to be a key part of the argument.

At first I thought maybe the mentions of gender and implants, and the doubt that a twenty something girl could accomplish such things, might be a nod to status as a transexual?

It seems that she’s fraternizing with a white boyfriend, and has implants that she flaunts scandalously, which is frowned upon by authoritarian government officials in China? That she’s accessing foreign platforms unlawfully is the only pretense these officials need to cause her problems, granted the dim view of her attention seeking to begin with?
I wonder if there would be a market for cereals in plain plastic bags kinda like rice and beans...

Just the same bag as the inside of that cheerios box in 3oz increments with a plain label.
Compared with what? Not being a doctor or a lawyer or finance or idk.
Even putting online attacks aside, breached password lists make fantastic dictionaries for cracking hashes.
Q2VKPT: Fully path traced Quake 2
Wonder if the author is Greek since φρένο (which would be ‘freno’ in greeklish) means ‘break’ as in deaccelerator
Matlab and Octave are both easier to do some basic numeric work for people (frequently engineering and science students) with only rudimentary programming experience. In undergrad you write very little code, but do a lot of plotting and it is helpful that the Matlab IDE has all of that natively builtin. I prefer Python & Julia now, but getting something like Matplotlib working with Python would've been more difficult for me in college. Also, Matlab has native support for matrices and numeric operations (inversion, transpose, solve) that students need without having to learn how to use something like Numpy. My preference depends a lot on whether I'm doing exploratory work or trying to craft high quality software to run in production.
I suspect there's a relatively small window of folks who have a universal weak password. There are lots of folks who have a universal password for everything; there are some folks who have a unique password for everything, because once you use a password manager or even a password scheme you might as well customize your password for every site.

And I think forcing people who are in a position to use unique passwords easily, but too lazy to do so, to get around to using unique passwords is a good thing to do. I include myself in this category - I was sloppy at password hygiene until very recently and I should have gotten on it a long time ago.

(Note that I'm not endorsing password schemes because they're very vulnerable to targeted attacks, but they are popular and arguably easier than password managers and they do technically count as letting you use a unique password on each site - if you use one, the HIBP API will not block you from logging in to any sites other than the one that got breached.)
Sadly that’s the trade off when you want a common benchmark to measure students, but then students optimize for that benchmark instead of something else — basically Goodhart’s law.

As a current student studying CS, I find all of this “leetcoding” disheartening since it unnecessarily takes away time and deprives some people of passion.
https://www.dirtybomb.com/news/the-design-of-dirty-bomb/
Here's a conjecture - "Sugar" is a product. There is an industry and a lobby for that. Fat is not really a single product (meat, edible oil, chocolate etc.), so probably there was no single lobby which could co-ordinate the effort. Now there is a lot of effort from the meat industry to promote particular diets, so that's perhaps a form of "pushback".
Isn't Rule #1 of logo design to not make a swastika?
Typescript has a standard library like clojure for manipulating data? like the lodash of the JS world.

I would be surprised (without golfing of course) if typescript can match clojure's conciseness.
I don’t have that impression at all. If someone is talking about something impressive, a few deeper questions generally poke holes in whatever inflation they are doing.

Of course there should be some coding question, but I definitely look at their resume and it’s discussion just as much.
Another good FB plug-in is FBPurity. You can disable all kinds of things including the newsfeed.
Never underestimate the ingenuity of the user. They might search for a list of good passwords, find it, and pick one.

> The attack model is that the attacker actually has to log into a website

Not to find the password. If it was then nobody would get upset about plaintext password storage.
Imagine how long he would have lives if he had NOT drunk a 5th of whiskey a day and smoked one cigar a day until the day he died. Age 102!!
4% is meaningless measurement for an OS kernel.

I worked with l4 and we had to throw it out because the microcernel overhead had a 2x performance hit on frames per second for animations on a 400mhz arm9.

Are you going to see a 2x hit for disk IOps, or network packets per second, or IO latency?
Show HN: Simple and header only C++14 asynchronous promises like a Promises/A+
After 25 Years Studying Innovation, Here Is What I Have Learned
And then we have things like this, where in Canada, a Liberal Party candidate used WeChat to post a racist campaign message: https://globalnews.ca/news/4853439/karen-wang-liberal-burnab...

How can any journalists learn about this story without a WeChat account or without having some insider (local Chinese person) who has access to a WeChat account?

Multiple Internets are already here, and we've got to work at bridging them all over again.
By exposing kernel memory Spectre diminishes the effectiveness of mitigations like kernel ASLR as well as makes it easier more generally to exploit kernel vulnerabilities. That's significant in the case of Linux as there's no shortage of Linux kernel bugs, not now nor for the foreseeable future. Even well written, bug free user space applications can't protect themselves from the kernel, AMD's and Intel's best efforts with SEV and SGX, respectively, notwithstanding.

By contrast seL4 is effectively bug free. (Literally bug free for the most the part, but AFAIU some gritty details like TLB management remain outside the scope of the formal verification.) That means you can build a reliable security model for your own application. The guarantees that model can make about confidentiality may be weaker because of Spectre, but you're still in an infinitely better position than on Linux, Windows, or most anywhere else.

seL4 is arguably even better than ARM's TrustZone. With TrustZone you're still stuck having to ensure you correctly manage transitions into and out of protected mode. Bugs in such code constitute a good chunk of kernel vulnerabilities more generally, so it's clearly not trivial. Doing this correctly is basically what seL4 is all about. Then consider the fact that people are trying to push so many tasks into the TrustZone (or secure enclaves in general) that it's common to run an OS in the TrustZone. People would do much better to run seL4 inside the enclaves than bug ridden TEE environments. And unless the enclave is a discrete processor rather than a protected mode as with TrustZone, you may as well just run seL4 as the only OS (or at least the host OS).

Interestingly, Apple's T1 and T2 chips run an L4-based microkernel. AFAIU it's something of a cousin to seL4 but predates it. If seL4 was as mature then as it is now perhaps Apple would have started with seL4.
> Many people on HN also complain about "I don't have time for pair programming

How does one not have time for pair programming? It's the exact same time commitment, from both the interviewer and interviewee, as a whiteboarding session. It's just a different format for the interview.
That's not what I or the user was referring to.

The user and I are referring to the difference in posting and discussing as a public post rather than talking through Messenger or email which is a more intimate service because its not broadcast publicly.

Not the information and data privacy behind what Facebook might do or not do with that information behind the scenes.
I'm not sure what a social science study has to do with a biology study.

If you feed rats sugar and 50% of them die of heart attacks and you have a control group where it's 10% you have found something about sugar and rats.

I'm not sure what the number in this case were but the sugar lobby scientists did a meta study where they used the logic in your post to throw out the studies that made sugar look bad, while keeping all the ones where it looked good.

At any rate the people who I've seen use the "It's just incompetence not malice" defense were most often both.
No offense, but that’s because you lack perspective — and maybe that’s because of the bubble that entrapped HN and SV alike. There are tons of people who would take a six-figure job at FB, people who make less and people who others wouldn’t take chances on.
Right, there are exceptions, but let's be real. "I don't have time" usually means "It's not a priority over TV/games/social media".
I thought of another way of putting this - a 20-character alphanumeric password is a random 114-bit value. A UUIDv4 is a random 122-bit value (the remaining bits are specified by the UUID spec). If you generate UUIDs for your users, and you don't expect two users to end up with the same UUID, it would be confusing if you somehow expected two users with 20-character alphanumeric passwords to potentially collide. The probabilities are just a factor of 256 from each other.
You could? How much less could you care about Facebook?
> If we had that for engineers we wouldn't need to test their skills either.

We have that for "real" engineers. Doesn't stop many of them from being atrocious at their job. Doesn't stop doctors either, for that matter.
Right. That was just to give the most generous possible circumstances to a password when arguing that it's still too weak.
Well at least you see a `Safe for Work` swastica... a friend pointed out to me it looks like a `not safe for work` swastica and I can't unsee it...
> While there is no doubt that this happened, any one has any idea why there was no reverse push from the fat industry?

The "fat" industry is the animal agriculture industry and it has heavily swayed and influenced American dietary guidelines for decades.

Various food industries presented their side of the argument at a second senate hearing in 1977. This meeting resulted in a watered down version of the Dietary Goals, with less emphasis on reducing meat and dairy products. The American Medical Association also protested the McGovern Report, because it said that providing this basic knowledge on what we should eat might interfere with the medical doctor’s right to prescribe, even though doctors then, and now, know nothing about human nutrition. The effects of the McGovern Report were widespread, and as a result, the consumption of meat, eggs, and milk fell, temporarily.

Industries fought back successfully with every means at their disposal, including hiring lobbyists, purchasing medical and nutrition experts, launching huge advertising campaigns, driving the nutrition education of our children with their bias, and funding nutrition research that favored their products. Their success can be measured by the US food availability data, which documents an increase in mean daily total energy intake from 2,057 kcal in 1970, to 2,405 kcal in 1990, and 2,674 kcal in 2008. We eat more oil, meat, and dairy now than when the McGovern Report was published in 1977. The incidence of obesity and type-2 diabetes has both doubled in that same period of time. These figures are undeniable evidence that industry won and Americans lost.

https://www.drmcdougall.com/misc/2012nl/oct/mcgovern.htm
California’s crusade against receipts is pointless
This is why whenever you build software, you basically should encrypt any and all data and you should be extremely careful when it comes to permission checks. Especially if you are a company or startup, there's no excuse for not burning through a few thousand dollars more here and there to build more secure software that doesn't result in privacy blow-ups like this.

I wonder if GDPR affects Twitter in this case and what % of their revenue can be taken as a penalty for treating users like shit.
Oneof exists in proto3, so a tool that doesn't enforce it is likely to create messages that don't conform to the schema. The style guide also doesn't discourage it.

https://developers.google.com/protocol-buffers/docs/proto3#o...
This doesn't change the fact that the underlying mechanism of weight gain is a net caloric surplus over a given period of time, which is (hypothetically, at least) addressable without addiction ever coming into the discussion.

But if sugar/food addiction is relevant, there should be some data on its effects on non-obese, physically active individuals who maintain a lifestyle that allows them to burn enough calories to offset the caloric effects of sugar consumption. What you linked doesn't mention obesity, yet you're conflating addiction with obesity in your response.
>I'm a data scientist, and google asked me to sum all values of nodes at each height of a tree. I had to implement the tree, bfs, and the algo (which was easy once you have bfs) in a 25 minutes, minus any talky time.

THIS is the problem. The (unreasonably) timed nature of the exercise means that the only people that will do well are the people that prep heavily for this specific skill, in much the same way that people about to take the LSAT are likely to do better than it than actual fucking lawyers with proven experience.
If you go to China you need proper opsec, burner phone and laptop. Use nail polish on the laptop screws. Toss a little glitter on the case and take a photo of the pattern. Now you tell if someone tried anything while getting dinner.
Do most people have WiFi active on their phones? I usually leave WiFi off (nuisance factor), but maybe that’s just me.