skysight-inc/HackerNews huggingface dataset:
1. The official man page.

The /dev/random interface is considered a legacy interface, and /dev/urandom is preferred and sufficient in all use cases, with the exception of applications which require randomness during early boot time; for these applications, getrandom(2) must be used instead, because it will block until the entropy pool is initialized.

2. https://www.2uo.de/myths-about-urandom/
Pretty cool. Looks like it would work great with flat-edged phones (like the iPhone 4-SE), and could work on the back of curved phones. How do you use it?
The biggest issue is that the same info needed to push money into your account can be used to pull money out.

Why both actions require the same credentials is byond me.
Looks valid on my machine (win10, chrome)
Curious - how do devs develop on a 2.5 year old OS. Aren’t there risks that things won’t work in recent releases?
Lots of people (including me) say they want a thicker iPhone, but when Apple released the XR, one of the first complaints was that it's too thick.
Could you elaborate on how LinkedIn has helped you find contract work?
Patio11 is a full-time employee at Stripe.

Please take his [no doubt interesting] recommendations about how to do consulting -- with a grain of salt.
I think this is something that is timeless and universal. At least now we have experience to back up our valuation. When we were young what did we have? Some basic logic that we spent a small amount of time thinking through?
The accesskey feature is usually discouraged because it can break screen readers and other accessibility tools.
Because someone is always trying to monetize nice things which ruins it in the process. Sad, monetized world we live in.
> /dev/random found on other BSDs is equivalent to Linux's /dev/urandom.

This isn't quite true. The BSDs random (and urandom) block until initially seeded, unlike Linux's urandom. Then they don't block. (Like the getrandom/getentropy behavior.)

> The current recommended practice is to call getrandom() system call (and arc4random() on BSDs) when it's available, instead of reading from raw /dev/random or /dev/urandom. It blocks when the CSPRNG is initialized, but otherwise it always outputs something.

+1 (I'd phrase that as "blocks until the CSPRNG is initialized," which for non-embedded systems will always be before userland programs can even run, and for embedded should not take long after system start either).
It's the medium style bar at the bottom that follows you around. If you are on chrome/chromium, it says "get outline for google chrome"
TribalFitness Mobile App Testers
Hi All!

I've been working with a few partners to build a fitness app called TribalFitness. It's a geo-location based social network for fitness users. We link people to fitness events based on profile similarities and location so they always have people to workout with. People within the app can forms groups called "fitness tribes" where they can coordinate fitness events.

Some of the key features in our current release include:
- Creating a fitness tribe with your current fitness circle
- Schedule fitness events with tribe members to coordinate workouts
- Search for other fitness tribes and tribe events of interest to join

We just launched closed alpha on Android only and are looking for testers. If you have an Android and are interested in becoming a tester, comment with your email and I can send an invite. Looking forwarded to hearing your feedback about the app and ways for improvement!

Thanks!
Thanks for the correction, fixed. It was a bit difficult for me to paraphrase it...
Well cautious legal advice against is not the same thing as being illegal to do.
Does this support obfuscation now?
2019 Python Steering Council Election Results
https://sockpuppet.org/blog/2014/02/25/safely-generate-rando...

(Note, that's from 2014; today I would recommend getrandom() instead.)
Sure. I am obviously not qualified to judge legality of anything. IANAL etc etc etc
It's a shared system and I'm not going to prohibit the free exercise of other people's religions even though mine is clearly better.
Agree, couldn't this be done with a bind mount or something?
The Starbucks app in Edge is _miles_ faster than Amazon.com or eBay.com for me on my slow satellite connection. I think this is one often underlooked feature of SPAs. SSR stuff is a blank white screen about 50% of the time for people on slow connections, SPAs have a slower initial load and then from then on are either faster or _feel_ faster because they don't go completely blank for 5+ seconds every time you click something. Even a slowly-loading SPA feels better than any SSR site for that reason, IMO.
TLDR: A DJ/sound engineer had the idea to sample 4 old violins from the Violin Museum in Cremona.

"The Violin Museum, which was already concerned about preserving these sounds for future generations, agreed. It enlisted Lorenzi and four other world-class musicians from Italy and the Netherlands to play four prized instruments for posterity — the 1700 Antonio Stradivari "Stauffer" cello, the 1727 Antonio Stradivari "Vesuvius" violin, a 1615 "Stauffer" viola by Girolamo Amati, and the 1734 "Prince Doria" violin by Guarneri del Gesù."

The mayor asked residents to keep the noise down, and blocked traffic around the recording hall.
There are some trade offs when you go into management (from experience):

Upsides:

+ Your reports will treat you with respect

+ You will get more opportunities to travel

+ You will likely get much more visibility in the organization

+ You will get the opportunity to engage in team building activities and have fun

+ You can set the standards and direction of the group

Downsides:

- You will have to learn the art of politics to deal with your peers

- You need to be much more cautious about your communication and actions

- You have a target on your back and so you need to learn how to block

- You will likely have to spend more money on corporate travel & activities than your used to

- You have to have the maturity to deal with 'wasteful' activities that are part of management

One of the biggest problems with people being asked to be a manager is whether or not the organization is asking for a real "manager" or a "leader". This is a particular problem with technical staff being promoted to management.

Managers by definition are there to set everyone straight. Define the rules. Make the process repeatable. Make sure no one is out of line.

However, many companies are not really seeking this from technical staff. What they really want are "leaders". If people are asking you as a manager to set the technical direction or lead and train the engineers or give presentations at conferences, they're not asking for a traditional "manager". Ultimately, if you seek to be a traditional manager (in this type of environment) you're doomed to fail.

Great people managers are really a type of coach. They give pep talks, they throw events, they motivate, recruit the best talent, etc. Think of your high school football coach.

In this style of management you're going to be graded on retention, motivation, drive, energy, etc. etc. If this isn't you, you better think twice about moving from engineering.

If this organization is really looking for an Architect or Principal Engineer that will dive the direction and strategy for their technology, they let them know that.
That's great news, thank you.
And some more in the French speaking side of the internet, which they apparently belong to.
In Ruby world a lot of people use LD_PRELOAD to change the default malloc to jemalloc (or tcmalloc): https://github.com/jemalloc/jemalloc
Check it out: https://data.zx2c4.com/network-extension-is-mac-app-store-on...
There was indeed a moment few years ago when front-end frameworks/libs were changing at warp speed, but last year or so I think the situation crystalized a lot. You now have React and Vue as major players and Angular competing for the 3rd place against some fresh libs... and I don't see that changing anytime soon.
The iPhone 8 was good enough for Steven Soderbergh to make a feature length movie: https://www.youtube.com/watch?v=VzVAdUIBBSk
"Senior" in this industry typically means "not a beginner". You should not be right out of school if you are applying for these positions. And "experience required" is certainly a useful concept.

But "senior" isn't really a good name for it, because people with only a few years of experience are not trusted to make big decisions and build (or lead) big things, which is what "senior" tends to mean in other contexts. The title is therefore a bit deceptive. But I'm not sure what to replace it with.

And finally, to be fair, there are a few places where "senior" is fairly senior. At Google, it's two promotions up from entry level, and I seem to recall Amazon listing it with seven years of required experience, which is getting up there.
The catch is old programs that depend on the blocking behavior of /dev/random during early boot could be an issue. Unlikely to be a problem on a server, though...
A better orbit is retrograde solar, just inside or outside the Earth's orbit. With 183 of them in orbit, one would pass by the Earth every day. With a week or so advance notice, aiming would be easy.
I did Startup School and they definitely tried to upsell you to YC.

It’s more than likely true.
It's not documented, but most features here are not documented. The most similar part of the guidelines is: https://news.ycombinator.com/newsguidelines.html

> If the original title includes the name of the site, please take it out, because the site name will be displayed after the link.

> If the original title begins with a number or number + gratuitous adjective, we'd appreciate it if you'd crop it. E.g. translate "10 Ways To Do X" to "How To Do X," and "14 Amazing Ys" to "Ys." Exception: when the number is meaningful, e.g. "The 5 Platonic Solids."

For an official reply you can contact the mods hn@ycombinator.com

My guess is that most articles with a title like "I ate a banana every day" are not just an assertion, but they have some kind of justification and are equivalent to "Why I ate a banana every day", and HN prefer the minimalist version.
'patio11 has been at Stripe for 2 1/2 years and was solo for many years preceding. I think his reputation is pretty solid, and have a hard time imagining how being fully employed at Stripe for the past couple of years should now make his past advice require seasoning. Have conditions changed so much recently? Would you care to expand on what you personally are concerned about (as opposed to vague aspersions)?
At least with Braintree (which my company uses), you can void a cc transaction any time until it settles at midnight, with the result that the money never actually leaves the account. A preauth of this magnitude could still cause big problems for a day or so, but it’d be better than locking the money away as a credit in a totally different account (which, among other problems, somehow smacks of money laundering).
TLDR: Plant trees with drones.
Citizenship isn't a protected class so I believe a company is in their right to discriminate if it chooses so. There are legal and timing issues associated with authorization to work.
A bind mount? Just open up the source code and add a "u" where necessary.
I couldn't disagree more. For anyone on a slower connection (I use a satellite connection that's 1 Mbps on a good day) a SPA is almost always a greatly superior user experience. A server-side rendered application is a blank white screen for roughly 50% of the time I'm using it. Even if a SPA takes longer to initially load, it's much nicer to keep the application actually onscreen while it's loading new content. Even if the SPA takes longer to load content it will often feel as if it's faster because you're looking at the application while it loads rather than staring at a blank screen for 5-10 seconds with every click. When people talk about SSR applications being a better user experience I always assume they're operating on first-world 10+ Mbps broadband connections or cellphones in developed cities, because the difference is night and day for those of us on slower.

I also disagree with the idea that SPAs are pushed by developers who have lost touch. Clients frequently push for them and ask questions like "Twitter/Instagram/YouTube don't show these blank white pages after every click, why does my site? Can't you make it like YouTube?" Clients want to have them more than developers want to make them.
In the age of AI is seeing still believing?
Look up Emsculpt. It's a fascinating/creepy new device that artificially stimulates core muscular contractions, with visibly more exercised and defined muscles after a few sessions with no changes in lifestyle.
Winter Is Coming [pdf]
Probably some combination of Pitchbook, Crunchbase, and other similar aggregators.
"by expressing credulity"

I began my very brief comment with "The science is out of my grasp".

It's a stretcher to characterize anything after that as "expressing credulity".
Thank you for the comparisons. I think the approach you've taken with the documentation and the support out of the box for libraries in Go, Python etc is excellent, the playground is definitely a winner!!
Learning to code and building it yourself is by far the easiest path forward. Building a social app like this is a multi-decade long project, so spending an extra couple years upfront developing the technical skills isn't going to set the project back by a meaningful amount.

If you hire other folks to work for you, count on spending at least 500k per year for, say, 5 years until you app starts bringing in revenue. Unless you can self-fund it at that level, you're probably just going to lose whatever money you put into it.
they probably feared that you may directly skip to the employer and they won't get paid for that.

Lots of recruiter I met are kind of these people, talking to them are pretty much waste of time. The best approach is to talk to them just by phone in a very short time, which won't cost too much if you eventually found it's waste of time.
But then the article states that they do non-standard/non-compliant things with HTTP/2 so they are using modified or new stacks...
I think the term "fire retardant" is also fairly common in some circumstances as well, though I'll admit to not being terribly familiar with brake retarders.
Scott Morrison says Australia’s political parties have been hit by a cyberattack
We're talking about adults, not kids.
We currently use one account for everything, including Stripe deposits from SaaS applications. But as soon as practical, I intend to move to a model where there is a separate "staging" account for any kind of 3rd party interfaces.
As far as I can tell, ci.debian.net doesn't support any of the ARM architectures and does not test suites other than testing and unstable:

https://ci.debian.net/data/
"Apple appears to be using the HTTP/2 protocol only as a mechanism to maintain persistent connections, passing empty HEADERS frames to open new streams. This breaks section 8.2.1 of the HTTP/2 specification. We work around this by modifying the h2 module to allow empty HEADERS frames.

Apple’s use of the HTTP/2 protocol is also irregular for two other reasons. First, the HTTP/2 specification mandates that stream IDs must be created in a monotonically increasing order. However, Apple’s application endpoints appear to hardcode a handful of particular stream IDs for certain communications, which when opened do not conform to this monotonic ordering requirement. Second, client-server communication patterns often use multiple streams in unusual ways. For instance, heartbeat messages send requests over stream 1 and responses on stream 3."
> Two services that are sharing memory end up communicating over HTTP and I always found it silly.

why is that silly? It's be easy to migrate the services away from shared memory architecture when required, and http is well known and easy to use and debug.
Not that I disagree with you, but which are the official man pages for /dev/urandom? It's my recollection that the advice therein varies from OS to OS.
Something I liked about the IETF, no cost to get the standard, there was always a running code example. It changed as it go too dangerous.

There isn't any reason to have these big organizations as "standards bodies", all you really need is trademark protection and a test suite. And not even that some times.

I often point people to the Arduino "standard" which immortalized some poor sods PCB layout mistake in spacing the shield connectors.

Basically you define a standard (no consensus required, it just has to be useful). Give it a trademarked name. Offer to let anyone use it on their gear for a one time license fee. Then market/sell/advocate things with the trademarked name until you get people associating the name with the standard thing you have. And at that point you're done. If your licensing price is reasonable (say under $25,000), people will just license it and use it rather than try to compete with it.
Allow me to point you to SDRplay who have a line of USB receivers that are far more capable (more sensitive, less overwhelmed by strong signals, wider capture bandwidth, wider frequency range) than any of the RTL dongles, which only cover shortwave (<30MHz) with basically a hack. I like SDR Console as the software for this.

https://www.sdrplay.com/
I never knew Drupal did vape bands?
Is that from scratch? I'm using an i3 on a 1 Mbps satellite connection, and opening up Gmail now (having opened it earlier today), it was 0.27s until DOMContentLoaded and I could interact with it. It continued asynchronously loading stuff in the background but from my POV it loaded in 1/3 of a second, which in Chrome is faster than the app opens on my iPhone 7. I have disabled the Hangouts/Chat feature in settings which apparently makes a big difference.
Putting money on China
This page is part of release 4.16 of the Linux man-pages project. A description of the project, information about reporting bugs, and the latest version of this page, can be found at https://www.kernel.org/doc/man-pages/.

And only Linux has /dev/urandom.
Wow, I hadn't heard that NZ news about the Whanganui River, that's awesome.

The big mistake, it seems, was in ever making joint stock companies/corporations legally people.
The fall of the newspaper industry and the problems that come with that
The cost of companies staying private hits all of us
Also, I think something like LAVA is more suited to kernel/bootloader testing than debci:

https://wiki.debian.org/LAVA
I feel like that's just a weaker attempt at something like Maybe (Haskell) or Option (Rust).
To be honest, without getting the salary range up front or within the first email exchange, I typically end the interaction there. I've had way too many days and weeks wasted only to find out the company can barely pay 2/3 of my current salary. I don't care how great the perks are or job is, if you can't pay competitively, I'm not wasting my time. The rest is just details including tech stack etc. The right amount of money for the right job could easily make me overlook such unimportant details (pretty much never happens). You want to sell the position? Offer a ton of money and the position sells itself. Don't have that? Offer a competitive salary with remote work. Don't want to do that? Fuck you, no one will shed tears for your bankrupt business.
Every year this is said like burning man is dead.

I predict a bigger react ecosystem. The slide of vue but the raise of the Quasar framework for apps. The rise of Angular once again.
Don't tell Jonathan Blow about this unless you want to kill him.
There’s a couple things wrong with this article and I have a decent understanding of why Jug (RIP) did what he did. (I worked at Sunrun and created this fake account to hide identity; I worked in finance). Not to bash the sales reps or trainers, but they are so far removed from the financing of the product they don’t know what’s going on.

First, at the end the sales rep who provided the #s is bullshit. The sales reps are notorious for inputting whatever #s they want into the internal SFDC system so the average monthly bill isn’t accurate. This isn’t an exception, it’s their own rule to accelerate sales (management does not tell them to do this. To be specific)

The 2.9% escalator is an aggressive and risky product, but requires zero upfront and an incredibly low initial $/kWh. He more than likely was saving money and would have been for at least several years. I don’t know his intentions but you can read between the lines and I don’t want to talk about the dead.

Also, I forget if Conedison does tier pricing, but if it did with all his gadgets, his bill would have been through the roof.

Lastly, Sunrun does offer cash/loan/0%/1.9%/prepaid products, and if I were to go for a cash deal, I would use Sunrun/Vivint/SolarCity because it’s a huge headache to coordinate with developers and file all the correct paperwork.
https://lists.zx2c4.com/pipermail/wireguard/2019-February/00...
Docker dreams of being systemd (2016)
I agree for the most part, but the trick is knowing what the inputs are in the first place. A software consultant may miss a critical primary input such as WHO is actually signing the contract.

I've seen instances whereby a contract was signed between a colleague and his client, but the signature was between him and the signing agent, and not the company per se, so when the guy that contracted him suddenly left the company, the contract was declared null and void even though it was halfway through. He thought he signed with the company, but legally he only signed with the representative as laid out in the preliminary parties clause.

Lawyers are trained to spot those gotchas, much as developers can spot "off by one" errors in computer code instinctively.
Awesome post! `LD_PRELOAD` is a powerful tool for program instrumentation.

It's worth noting, though, that using `LD_PRELOAD` to intercept syscalls doesn't actually intercept the syscalls themselves -- it intercepts the (g)libc wrappers for those calls. As such, an `LD_PRELOAD`ed function for `open(3)` may actually end up wrapping `openat(2)`. This can produce annoying-to-debug situations where one function in the target program calls a wrapped libc function and another doesn't, leaving us to dig through `strace` for who used `exit(2)` vs. `exit_group(2)` or `fork(2)` vs. `clone(2)` vs. `vfork(2)`.

Similarly, there are myriad cases where `LD_PRELOAD` won't work: statically linked binaries aren't affected, and any program that uses `syscall(3)` or the `asm` compiler intrinsic to make direct syscalls will happily do so without any indication at the loader level. If these are cases that matter to you (and they might not be!), check out this recent blog post I did on intercepting all system calls from within a kernel module[1].

[1]: https://blog.trailofbits.com/2019/01/17/how-to-write-a-rootk...
Safari on iOS does not trust the certificate
Considering how much the death/injury rate from automobile collisions has fallen in the past few decades, you’re going to have a tough time convincing me that it’s comparatively bad that “people these days are terrible drivers” because controlling the car has gotten easier.

Anecdotally, several people who I rode with 20–25 years ago who were >50 at the time were aggressive and reckless drivers, much more than anyone I have ridden with recently. My general impression is that such aggressive driving used to be much more common than today. Even if they had fast reaction times and good control of steering, I would hardly call it “good driving” for public streets.

If you want to see this style of “good driving” try riding in taxis in China or some other developing country. Dudes with amazing steering and reaction times shaving every possible second off by pulling risky probably illegal stunts.
Do we know if intense weight training combined with cardio workout during childhood and adolescence works to build a life time of improved musculoskeletal outcomes?

Has anyone done a longitudinal study in this area?