skysight-inc/HackerNews huggingface dataset:
Building a “Simple” Distributed System – Formal Verification
If I were Apple, I would be implementing a server side migration right now:

- if someone adds their own email or phone number again to a group chat, immediately terminate the call

As far as I know, this would mitigate the vulnerability.

Alternatively, disable Group FaceTime calls altogether.
Yes because it’s not reality that I’m 45 and find jobs quickly. When I was looking for a job at 42, I submitted my resume to 8 companies through recruiters and had no rejections and three offers in the course of three weeks. Two years later it took one or two weeks. My former manager is in his 50s, decided he was tired of managing after his kids retired and now is a full stack React/C# developer working with Azure.

All of the people he hired in his department who I still keep in touch with are over 40 and all found jobs shortly after he quit as either full stack JavaScript developers or back end .Net developers.
CSS positioning woes are brutal- until you have the knowledge from previous struggles.

Full disclosure, I am artistic, but imo css is a different skillset.

You'll have knowledge on when to use flex, floats, or the new css grid, be able to center <pictures> behind text, and all the other traditionally tricky things.

Honestly, just practice, don't give up!For layout specifically, Flexbox can solve almost any problem. Once I "got" flexbox I was having an easier time. And CSS-Grid can solve almost everything else!
I don't want to be harsh, but Apple really should walk the talk regarding privacy. It has its heart in the right place but bugs like this show how careless they are.
$65k is probably with how much lithography and work has gone into the wafer.
Languages can be deciphered by statistical techniques not because they are "logical" or have a "system" (well uhm you're sort of right, actually). In natural languages there is a certain distribution of each phoneme and syllable (let's say due to an unknown reason, but this is observed in all languages[1]), which makes this distribution to somewhat correlate with certain letters and symbols if we're lucky. E.g. suppose we know /i/ phoneme is 90% of vowels in a language and we see that the letter <e> is used about 70% of the time in a large corpus of this language. Our best guess is /i/ is transcribed as <e>. If this phoneme to symbol correlation is too noisy (e.g. in the case of Voynich Script or in this case) then we'll have harder time using statistical techniques.

[1] There are certain universal phonological "Universals" that applies to 99.99% of languages. https://en.wikipedia.org/wiki/Linguistic_universal But still these don't let us find the entire structure of a language, and we have to use other techniques. Such as comparative study to other languages, finding loan words we know (e.g. finding the word "computer" or "Jesus" in a text of unknown language with unknown alphabet)
One of the headlining features of the latest iOS release was performance.
My singular focus right now as a “Millennial” is to save enough before 40 to retire if I choose to and, at the same time, figure out how to become self sufficient so that I am not reliant on someone else for income by 35.

Effectively I want to “retire” from having a “job” working for someone else long before I “retire” from earning income.
"I'll make my graceful exit" is an option far too many people are taking out there. Our industry is in the top 10 industries where workers commit suicide. There is no discussion in this country about how our economy forces many working people to actually commit suicide because we have prematurely aged them out. Often to be replaced by a kid who doesn't even have 1% of the skills and knowledge of the person judged "too old" but still too young to qualify for social security.
These made CSS click for me:

- https://flexboxfroggy.com/

- http://cssgridgarden.com/
Thats a non answer. I don't have metal working tools sitting around in my shed that would let me whip up a replacement part for things. As a society we throw away so many things because they contain patented parts and the original company wont sell replacements or they sell them at enormous prices.

Hopefully in the future metal 3D printing becomes common and cheap so we will be able to source replacement parts from torrent websites.
And add the National Archaeological Museum to that list. All within walking distance.
Last Week in Kubernetes Development: Week Ending January 27, 2019
Employers absolutely love young people. They are cheap and exploitable! Of course if you replace “young” with “inexperienced” that’s different. They will discriminate against people who are inexperienced.
How many hours have you spent writing CSS versus the programming languages you mention?

I don't think there's any art to writing CSS or having an easier time with it. It's just putting in the hours to know what works and the energy to understand the foundations (box model, cascading, etc. which are concepts you only need to commit to memory once).

Maybe CSS clicks better with some people, but the others can offset it with time. When I started writing CSS 15+ years ago I never thought I'd be able to do anything useful with JavaScript. But then you put in the hours…
OP is referring to the ability to tap into any Alexa device, a feature Amazon calls Drop In (https://www.amazon.com/gp/help/customer/display.html?nodeId=...).
Same with me, I'm in Edinburgh as well. :)
The distribution of finite resources on this planet is a near zero sum question.
I would put regex shell and vim all in the same bucket as being esoteric and hard to learn since they don’t replicate any of the normal syntax and patterns you are used to. Actually, they are arguably even weirder than CSS.
Compare "Bartleby the Scrivener" (1853):

My chambers were up stairs at No. — Wall-street. At one end they looked upon the white wall of the interior of a spacious sky-light shaft, penetrating the building from top to bottom. This view might have been considered rather tame than otherwise, deficient in what landscape painters call “life.” But if so, the view from the other end of my chambers offered, at least, a contrast, if nothing more. In that direction my windows commanded an unobstructed view of a lofty brick wall, black by age and everlasting shade; which wall required no spy-glass to bring out its lurking beauties, but for the benefit of all near-sighted spectators, was pushed up to within ten feet of my window panes. Owing to the great height of the surrounding buildings, and my chambers being on the second floor, the interval between this wall and mine not a little resembled a huge square cistern.

One of the office spaces I'm in frequently is of this sort, and "I would prefer not to" is a recurring phrase in my head...
We use Teletraan [1], if you look just at the first pic in the repo you can see a "Deploy History".

Internally it tracks: timestamp, type of deploy (regular, rollback), state (succeeded, aborted, running), success (% on the fleet), build (git commit), user who did the deploy.

There's also a button to list all commits from the past deploy which is often useful to debug issues when a deploy fails (in our case, most of the time who deploys is not who authored the commits).

[1] https://github.com/pinterest/teletraan
Heck one of friends only puts the last 3 jobs he had on his resume, keeps it approachable.
iTunes has always felt robust and well-architected, but it's UI has been a dumpster fire since whenever.
Not an issue as long as you shower regularly. I arrive at work sweaty but dry off within about 10 minutes in the air conditioned office.
Their bug bounty program seems to mostly be aimed at jailbreakers, rather than bugs like these.
https://www.youtube.com/watch?v=4_nI9ok7iQg
Let me tell you a story about sulfuric acid. When I was working process integration at a fab, I had a long series of meetings about qualifying a new source of sulfuric acid. Not a new supplier even, nothing that risky. Just a new source, meaning the iso (tanker truck) full of sulfuric comes from a different plant owned by the same chemical company.

What it comes down to is that it's basically impossible from a process integration perspective. Sure, you can take assays, and you do. But what about the things you aren't looking for in your assays? All you can do is plug it in, cross your fingers, and look at the yield trends. Not only does sulfuric mix in the supply lines, it gets used throughout the entire process. So if you do have some kind of strange contaminant that you didn't test for, maybe it only actually hurts you pre-gate. And the damage ramps up slowly and unevenly. But if your yield tanks, then you have to scramble to figure out what happened, and sulfuric isn't even your first suspect. (Because there are thousands of things like this that can tank your yields.)

What's worse, you're literally over a barrel. Sometimes Plant A has to shut down and can't send you another iso. Do you take an iso from (unqualified) Plant B? Do you crack open a barrel of sulfuric? You have a stock of qualified sulfuric in barrels, for situations like this, but in practice barrels are worse than isos. Metal everywhere.

I'm not saying it's sulfuric in this case. Lots of chemicals have a story like this one, but it would also not surprise me one little bit.
Yes, this. So much this.
>I would say at least several days for the obvious QA which needs to be done.

And you would unfortunately, not get the job.
This bug only applied to grub authentication, which isn't a widely used feature. And you could achieve the same result with boot from disk/USB if that is enabled.

The vuln doesn't give you access to the actual accounts on the computer.
Given a choice, I’ll go straight W2 contracting or work for a consulting company after I leave my current job whenever that is.
I assume you’ve read the essay the term comes from

https://www.worldcat.org/title/rise-of-the-meritocracy/oclc/...

If not; it’s pretty fun.
Snapchat ‘16’s UI is much different than Snapchat ‘18.

Snapchat ‘16 was “confusing” because it didn’t hand hold you and a lot of features weee behind invisible swipes. The features were there, it was just hard to realize that they existed.

Snapchat ‘18 isn’t confusing. It’s bad because they de-emphasized everything about why people used the app and instead heavily pushed their own content. It’s practically a different app with a different purpose - it’s a tabloid rag rather than a social network.

Snapchat felt more personal than FB/IG, and I guess Spiegal saw all the celebs using the app and killed the goose trying to monetize that.
What a great step in the right direction!

The $40k+ you could owe in taxes is still a problem. Perhaps the company could give you an open-ended loan of the $100k (that you paid back if you returned the stock, or after a good exit).
In the mid-90‘s the web wasn’t that bad, people used normal buttons, unstyled links and basic tables. The downward spiral started when corporations came and wanted their “CI” styling, then designers came and wanted to be “creative” and turned web pages into minigames where you have to guess what color or text style denotes a link, what the icons mean and how to trick the infinitely-scrolling website into displaying the footer. ;-)
Amazon just screwed over the indie filmmakers that made Prime Video great
Do "A Standard And Clean Employee Equity Offer" next!

Seriously.
you don't need to subscribe to an agregator. You can subscribe to the content-creator directly.

Yes. My point is that, say, the New York Times is not an 'aggregator'. They are the content creator.

Would be nice to explain why it must be a visiting journalist.

My claim is that you fundamentally misunderstand and/or misrepresent how journalism works. I don't think you can rebut that claim by asking me to derive journalism for you via the axiomatic method. I'm happy to try the Socratic one, though - can you think of a reason why it must always be 'visiting diplomat'?
Most of iOS is still written using Objective-C, including FaceTime. Swift has nothing to do with this.
How did I access the personal data of 140,000 employees of a transport company?
Thanks for the link! I'm still going to claim that 1 micromort/10 miles is nowhere near "super lethal", but we can all decide that for ourselves, I suppose.
I don’t think the shutdowns are quite that bad yet (unless you’re a contractor). Everyone—except contractors—got back pay when the government re-opened.

A vouple months delayed pay can absolutely be devistating to someone at a certain income level, and I don’t want to discount the hardship the recent shutdown has caused. But, I imagine most people well-off enough to have a programming job wouldn’t have too many cash flow issues, given proper financial planning.
We did something similar. Needed e-signatures in our SaaS HR app but when considering all players in the market, including HelloSign, it was really cost prohibitive. We ended up rolling our own e-signature functionality which our users are totally happy with.
https://www.zdnet.com/article/ios-mac-flaw-exposes-your-pass...

Where sending somebody a .tiff file via iMessage, web page, or email would give the attacker RCE on the device.
No, I mean a finished wafer is $4K.
Back in the days of CRT monitors and DOS, graphic hardware didnt generate vsync interrupts.
Absolutely not. This sets a dangerous precedent. Students aren’t just trusting their data to your institution, but also all the other entities in between. It is foolish to punish privacy-conscious students. We do not want to create a world where advancement is only possible by giving up one’s privacy.
I'm retired and I think my money situation is good but STILL when I read the article and comments I feel a spike of anxiety, PTSD-like.
My biggest problem with the buses is frequency. My gf lives just off Glenoaks in Burbank/Glendale, there's a bus that comes right by, but it's so infrequent that it rarely makes sense. "If I head out now, I might make it to the bus stop in time, if I don't I can walk to my destination quicker than the next bus will come. Am I willing to take that risk?" (The answer is almost always no.)

I looked at taking the bus from BUR to her place. There's a great route, right from the airport to San Fernando Road, just down the block from her, maybe a 5 minute walk. Except the bus only stops at the airport HOURLY. Google maps was saying the ride would take over an hour, because the next bus wasn't coming for nearly an hour. If you set the "Leave by" time to when the next bus arrives though? The bus takes maybe 3-4 minutes longer than a lyft to that stop.
A few reviews mention this table wobbles when its raised - buyer beware
I'm sorry but this is bullshit
The Tao of Programming (1987)
> The result is you have tons of brilliant people who can quickly whip up a DFS algorithm, but don't understand that using 4MB of RAM for a JPEG is unnacceptable, or that whatever dynamic thing they are asking the runtime to do might not always work as intended.

I’m not sure where you’re getting this anecdote from, because I have not found it to be at all true in practice.
I planned on water cooling but I never made it that far. They were FE cards. I do miss blower style but I understand they're hitting limits with it.
>Simply put, Huawei's products have better quality and companies in the US can't compete with it.

>I'm now typing on a Huawei Matebook 13 and carrying a Huawei Mate 10 phone. Those things have amazing quality and it's a real pity customers can't have them in the States.

You have an interesting post history supporting Huawei for an account only a month old...
I'm sure celebrities can easily package their offerings as an LLC or the like. It's just that then you can't spend it however you like.

You want to spend your money however you like? That's income. "They can't play tax tricks to avoid income tax" is the system working, not a bug
Janitors are no longer directly hired, they come through a service. It's the service that's hired, and workers with anonymous faces just show up.

There is no "work your way up" from those positions. Not anymore.

https://www.nytimes.com/2017/09/03/upshot/to-understand-risi...
I find those bugs less puzzling because the timeline makes sense. You're not logged in, there's a prompt, you're logged in. Obvious bug in the prompt, but the A happens before B happens before C order is there. Call comes in, audio is recorded, call is accepted is not the expected order. I could imagine a bug where declining the call still accepts the call, because that still obeys the proper ordering, but this bug does not.
Agree.

Worth noting that the real separation of content from presentation is JSON-data + a CSS/HTML hybrid front-end, often implemented as an off-the-shelf display framework (Bootstrap etc).
The presumption about the junior level role is accurate but for reasons different than what you are thinking. It’s less about the work and more about the people.

Some junior developers have the potential to be great senior developers. They listen to mentorship and independently weigh decision criteria.

Many juniors don’t have this potential and some shouldn’t even be there in the first place. The need for recognition, entitlement, and fear of challenges are common behaviors that are anti-thetical to becoming a senior. In the extreme shitty juniors will become hostile when they feel threatened. It is easy to feel threatened when a good senior can output superior quality work in a fifth of the time.

Why would any competent person want to deal with that immaturity and insecurity? That kind of stupidity doesn’t just make me want to leave the job. It makes me want to abandon the career. You have to understand the senior person isn’t there to attack anybody or take anybodys job. They just don’t want to play the defensive survival games their peers may not realize they are playing.

If it weren’t for the people a junior role wouldn’t be so bad. A strong senior will find a way to shape it into something better, or will learn to manipulate things until large amounts of free time are exposed.
Not just L.A. when I lived in Chicago, I could have driven to work in 30 minutes. Instead I took a train and a bus 75 minutes each way and kept my sanity.
History of Self-Driving Cars YouTube Series
President Trump has toyed with a lot of stupid ideas that are dead on arrival.
All DOM update and layout algorithms are O(N) complex (at best). So as less DOM elements you have as more responsive your UI is.

As an ultimate solution - to remove DOM at all and replace it by <canvas>. Minimization of updates is developer's business in this case. Presumably he/she will be able to do it better other than to walk through all DOM elements while handling, say this:

html:hover span { color:red; }
This is due to the very poor QA efforts Apple has, coupled with junior developers who lack a security-aware mindset. This is, sadly, the case with most companies these days. Zero secure coding training, zero push for security reviews, zero push for security QA, zero accountability.
Also failing to see the connection between this bug and using 4MB for a JPEG.
The Art of Insight in Science and Engineering: Mastering Complexity [pdf]
did not know this feature existed clicked on it and facebook algorithms has a surpassingly large number of videos tailored to my tastes ended up watching a British musician explain the 2 necked string instrument she plays that is between a ukele and lute. sold.
Curious to hear what the consequences of the CS push were.
I think you misunderstood me here.

I was advocating for more diversity and equality in the workplace if you read my grandparent post, which got the absurd response of "if you want diversity go and talk to a homeless person", I responded to as ridiculous.

I'm in favour of any increasing in workplace diversity and am thankful the UK workplace is very different to the HN zeitgeist that's more akin to UK attitudes of late 70s or 80s when these discussions crop up. I'm also in favour of the root post's idea of getting more women speaking at conferences. So as ever those views were downvoted here.
Who mentioned Colorado? Monument Valley is Arizona.
The article slug is misleading, and suggests a fundamental misunderstanding of the scope of the bug. A RCE in Messages does not allow attackers to steal your passwords.
It's not just you. Treating the web like a native UI framework, where you can set pixel positions directly to get the perfect layout, isn't going to work. The trick to using CSS effectively is to give up on achieving whatever design goal you have. Instead, you should settle for what CSS actually lets you do. Don't try to align text to the pixel; change your design so it doesn't require precise alignment. Ideally your designers should also work in CSS so they can understand why nothing looks exactly like the images they produce.
most governments in the world don't have shutdowns like the US though. The US doesn't need to have them either.
They forgot to turn the NSA flag off in production
This is certainly a problem, but I think examples like video game microtransactions and HQ Trivia payouts prove it's not unsolvable. $1 transactions at a 30% cut sound harsh, but are clearly capable of supporting companies. Or, if a trusted intermediary is available, micropayments can be batched into a few larger charges. This is definitely harder if you're going to leave money with consumers, who can cancel before a batched payment with little downside. But it could probably be managed, or people could be persuaded to pay a larger sum into a clearinghouse in advance.

The easiest approach might be to partner such a service with an existing alternate payment processor. Lots of people are already content to leave a few lunches worth of money in Venmo, which would both reduce payment fees and streamline the mental effort of buying articles. And cynically, an auto-refill setup would also reduce people's awareness of how much they were paying.

There are still major hurdles for this model - do you serve content and then hope you get paid? Do you offer refunds on articles people dislike? But I think the actual transactions can be managed, and I think the clearinghouse model could potentially resolve a lot of the other issues besides. As a quick example: 'refunds' for bad articles become vastly easier when haven't paid a transaction fee and can blacklist people who abuse the mechanic.
"Sure, they may not have as many life's luxuries, but I think most people will take a free-er life than a gilded prison."

I'd bet you have never starved in your life or found yourself sick without adequate medical help.
TIL a new word, abjad, "a type of writing system where each symbol or glyph stands for a consonant, leaving the reader to supply the appropriate vowel." Thanks!

https://en.wikipedia.org/wiki/Abjad
I was just thinking about this while reading about a (the?) company that produces extreme ultraviolet lithography scanners. Intel, Samsung, and TSMC all buy EUL scanners from this one company, ASML, to make their ~7nm chips. Only 31 of these machines exist in the world, with another 30 orders projected for this year.

https://www.anandtech.com/show/13904/asml-to-ship-30-euv-sca...
> There is no question that half of the students in that grade 11 class could pass the Google interview process.

I am quite sure this is not an average case. He likely visited a high school olympiad team. Tbh, CS in Vietnam educational system is still treated like "third class citizen."

(I am Vietnamese, went to a gifted high school and had exposure with competitive programming)
Quality concerns aside, any bug in iOS instantly affects a billion people by virtue of the number of active users it has.