skysight-inc/HackerNews huggingface dataset:
I suspect some places still only use passwords for server logins because they can simply use active directory for user management and then have servers use ad/ldap for credential checking.

I think businesses with critical infrastructure should use hardware keys (e.g. yubikeys) to provide at least one of the factors needed to log in to a server. Using a yubikey as an authentication key for ssh is not that difficult and I do it for my own hobby stuff.

For web based stuff one can now use webauthn to provide key based authentication (in addition to whatever other factors one would like). This requires the enterprise to run up to date browser however.
I’m squarely in the field but as an entrepreneur, not a data scientist.
> or get consent before they use them

The only effect the gdpr have is creating endless popups on all sites to accept cookies.

This does not make any sense, because browsers already have setting to block cookies, and users that had even a slightest in cookies had opportunity to use one of many browser extensions to further control the way cookies were stored.

I see gdpr as an effect of beurocrats not understanding the field they are trying to regulate, and trying to implement the wish of a vocal minority.

To address comments of the type "It is difficult to get a man to understand something, when his salary depends upon his not understanding it." I have never worked for a company that uses adds or tracking cookies in any way.
T-Mobile pledges to change ‘cableopoly’ with in-home broadband service
The Coder’s Axiom
Which might very well be true, at least in part. I still don't see how this relates to my or your comments. Hard work and a disregard for human lifes can go hand in hand. Just because someone works hard for a cause that doesn't make that cause right; and acknowledging the hard work isn't the same as condoning the terrible things achieved through that work.
This sounds similar to lamenting the difficulty of systems optimizations versus micro optimizations. Similar frustrations exist everywhere I guess. Interesting to see similar issues in the luxury/non-luxury goods space.
Do you know Strumia personally well enough to say what you said, or have you just bought into a smear campaign against him?
> programming languages

> HTML

I argued with people over this.
Unsecured directory listing of a common php cms that shows uploads, and one of them them is a full DB dump made with phpmyadmin. The only thing missing is execution rights in that directory.

This is either an insider joke or a jump back to 2004.
Yeah, that's out of scope.
No it won't, that's a really odd take. Perhaps if you want a job in very specific sub-section of cyber-espionage stuff, you might have a problem with existing on social media (although I doubt it)

But the idea that general IT security companies have a reduced chance of hiring someone based on their information being on social media is... not the case.
> collects location data and associates it with your Apple ID

What is your source?
Have you looked at the WARC format? It's ridiculously simple, basically concatenated raw HTTP requests and responses, with some extra HTTP metadata headers mixed in (a la extra JSON metadata keys). You can open it with a text editor. Very simple and efficient to manipulate, and very efficient to iterate over or generate.

https://iipc.github.io/warc-specifications/specifications/wa...

Arguably the biggest problem is that it isn't complex enough: there is no index of contents built-in (the standard .csv-like index format of URL/timestamp/hash/offset is called CDX).

There aren't a ton of tools in the web archiving space in general, but almost all of the ones that do exist work with WARC. Existing tools (for interchange) include bulk indexing (for search, graph analysis, etc) and "replay" via web interface or browser-like application. Apart from specific centralized web archiving services that use WARC, there are several large public datasets, like Common Crawl, that are released in WARC format.
Yeah, that's pretty much how bugs seem to be handled at most large software companies/projects, though they all do it a bit differently. Google is famous for making it next to impossible to speak to a human, instead sending obtuse automated replies. Apple does "radar to /dev/null." Linux? I wouldn't even consider wading into the cesspit of toxicity and petty dictatorship that is LKML.

On a positive note, I have had some great experiences interacting with the maintainers of smaller projects, and even some larger ones like Emacs. But massive companies and projects? Not worth the effort.
Fame doesn't equal trust, but if someone with no public background starts claiming to have been in the NSA/MI6/FSB/whatever, why would you believe them?
Where do you get the "10x people"?
There was a initial 'its named after somebody?'. Then 'what else is named after him??' So it was a double whammy.

Yes my internal voice pronounces it rhyming with ruler.

But then most open source projects have strange pronunciations that I don't pronounce properly (to myself) anyway.
They better advertise the higher residual price of a car after N years ownership. That's where the savings are! Or better yet, not advertise, but partner with banks to launch the lease program taking in account these savings. 3-yr lease of a $35K model 3 will be comparable to a typical $25-$28K car.
Probably would have no effect on the boy's parents as they seem to be ok with takin the financial hit and further risk the child's life.
There's another way to use computers to help with voting.

Have Ballots with a unique identifier. People come to a polling station, get a ballot, fill in their vote.

The ballot goes through a scanner to tally the vote, and then goes into a standard vote bin.

At the end of voting, you cross-check a random sample (both ways) and check the total number of votes matches between the scanner and bin.

If all goes well, scanner results get electronically combined. If the sampling shows an error, count by hand.

One extra addition. Your ballot is filled out by a separate printer. This ensures proper readability at the scanner, and allows placing the unique ID after someone gave you the ballot (to keep your vote secret). Any tampering with non-unique IDs is detectable by the random sampling.
It appears that vertical speed was really unstable after take-off and that it did not gain much altitude. Possibly a result of flaps and slats misconfiguration?

https://twitter.com/flightradar24/status/1104676048317362177...
In Finland they vaccinated us at school without asking anybody. And without any pre-announcement. Acute polio epidemic as I recall. So it is totally possible to organize mass-vaccinations without much ado.
I see, you are merely unfamiliar with terminology.

The word "static" refers to compile-time; a static analysis reports errors or warnings based only on the source code of the program.

Sanitizers are dynamic analysis based on instrumentation. https://github.com/google/sanitizers/wiki/AddressSanitizer

The tool consists of a compiler instrumentation module
(currently, an LLVM pass) and a run-time library which
replaces the malloc function.

In order to detect bugs with sanitizers, you have to find a test input that actually moves program execution towards UB. This is best done with a fuzzing setup like clusterfuzz, and lots and lots of CPUs, which Google fortunately has no shortage of.

https://github.com/google/clusterfuzz

As Dijkstra said, Program testing can be used to show the presence of bugs, but never to show their absence.
So you've decided he's an asshole? On what grounds? The mere willingness to challenge the political status quo and call out discrimination against men where he sees it?
Actually they have some foundations, componentN functions serve similar role to unapply, so theoretically it should be possible to build good enough pattern matching. But, unfortunately, they seem to slow down language development a lot since release.
Borg stores all data as plain files in 500MB segments. Every segment has a checksum, which you can validate using the `borg check` command.

The actual data lies on a plain vanilla RAID array.
I'm not sure you can rely on tax refunds either.

For example, if you buy the car in your name and then you lose your source of income (whatever reason, e.g. health, maternity/childcare) and for example you rely only on your spouse's income, I know at least one country where you can't pass the tax benefits to the other person (not even by transferring ownership of the car)
That doesn't work either. Paywall.
Hard work and a disregard for human lifes can go hand in hand.

They can, but one of these things endlessly colours the way we morally judge them. No amount of hard work makes up for a disregard for human life.
Write-once backup media, like DVDs were even better. But they are getting out of fashion.
What sets the most effective innovators apart
Dupe of https://news.ycombinator.com/item?id=19350571
So many times have we thought that a technology will prevail or disappear based on its validaty or adequatecy, and so many times have we seen the most popular survive.

JavaScript comes to mind. If it’s widespread and easy to learn, it might not matter how much technically better other alternatives might be.

We’ll see
And the other great part is the democracy sausage at the event!

Although my local polling booth didn't have a bbq going which was kind of disappointing.
Closing Central Madrid to Cars Resulted in 9.5% Boost to Retail Spending
From the article:

> The full titles of the awards were:

- Best Personality Supporting Gender Balance

- Best Federal & Institutional Authority Supporting Gender Balance

- Best Gender Balance Initiative

I'm not sure what the writer is trying to say here as 2 out of these 3 titles are for people who 'support gender balance.' Wouldn't it make sense for males to do so if that's the agenda of these awards?
It's fair to say that in the hype cycle Docker (the technology) has passed its peak, but I don't think the conclusion that as a technology, it's finished, is warranted.

Containerization is still on the rise and Docker is part of that. The toolset is still a good, fairly easy to use, place for individual developers to use containers on the client-side whilst creating containerized applications.

For smaller deployments (without orchestration) a single Docker engine with things like compose, can still work well.

Obviously on the orchestration side, Kubernetes has won, although it too will face the inevitable trough of disillusionment when people realise that all technologies have downsides.

Personally, for simpler workloads, I think Docker swarm can still be a good answer, as it's a lot less complex than Kubernetes to set-up and maintain.

The idea that the Redhat container stack (podman, CRI-O, et al) necessarily mean the end of Docker, doesn't really follow at all to me.

If anything the increased use of containerd directly is a bigger threat to Docker's market share.
But still, apart from really mechanical yes/no aspects like spelling, I wouldn't want to have anything I write graded by something with which I can't have a normal conversation (a human or strong AI). Would you?
Yes this is obviously the case. Feels like the NY times is trying to fit a square peg in a round hole. The work she describes is nothing surprising and is quite benign compared to various facebook scandals we've seen. More than anything, what the article highlights is modus operandi of mainstream media: rather than reporting news objectively, they package stories into narratives popular with their target market. Great for creating politcal polarization..
What if this service had been set up that you pay for it and when you do so you get an virtual server instance automatically set up. From a security perspective you are running a own virtual private server isolated from the company that provides the software. From a usability point of view everything is spun up via some clever scripts, so you don't have to go through the hazzle of configuring the VPS.

I've been toying with this configuration and think it might be usable for some opensource projects.
Some old C code was written on monochrome 80x25 ttys. Or written by mathematicians who will be confused why you haven't simplified "position" down to "-p(o2)stn", because clearly "position" is multiplying 8 variables together. Or typed on a broken keyboard, hence "creat" I assume. Or written on programmers who remember, or were still using, punchcards. And maybe have some RSI and no IDE autocompletion to help.

And of coure any new C code would look out of place if it didn't follow these old shibboleths... better make new C code an unreadable mess too, no? ;)
An interactive version of the periodic table powered by WebGL
That's an excellent point that reminds me of the article that was recently on Hacker News: Our Culture of Contempt.

https://www.nytimes.com/2019/03/02/opinion/sunday/political-...

He could have handled this more professionally. But at the risk of committing a "motive attribution error" myself, it seems clear that that standard is being selectively applied; even the CERN staff who filmed a fake human sacrifice and released the video to the public were never publicly outted.

If Strumia were wrong, he would be no threat. He'd just be ignored or disproven. He's dangerous because he's speaking an inconvenient truth, and thus a real threat to certain people's agenda, and so he must be silenced and publicly excoriated, pour encourager les autres.
Best Way You Could Re-Purpose Your Old Android
I'm a poor historian, but my understanding was that Lenin was the Marxism-oriented one, while Stalin, who murdered Lenin, by slowly poisoning him by putting heavy metals in his hat, highjacked the revolution and went on a mass-murderous power-grabbing rampage. Reading back the end of my last sentence, I'm obviously skewing this against Stalin, reducing his legacy to murder and egomania, but my main point is that he is seen by some (many?) to have highjacked the revolution.
this is "wordpress-normal" - the funny/sad part is its the wordpress blog of a security company investigating a huge breach...
A shame, really, but not a huge surprise that products like Swarm fell by the wayside. I feel it could've occupied a nice middleground for teams that didn't need the full capabilities (or overhead of supporting) Kubernetes, even though I think K8s is an exceptional project.

I chose Swarm as a pragmatic choice in an enterprise environment that didn't have any prior experience with Docker at all, really, at the operational level. We had to support financial models, often many different versions of the code at the same time, on top of the usual stack of applications to go with that. The choice was a "success", albeit one muted by the wacky networking layer they use. Compound that with RHEL's older kernels, and we had to deal with oddball issues like iptables/arp table getting out of sync with what's actually running, resulting in connectivity issues. And don't get me started on removing and redeploying a stack; that would occasionally wedge things so badly we had to cycle the docker daemon.

Still, a shame. The gap between "Look, I wrote a compose file" and running something on a small cluster is tiny, and that was its main strength, even if it did suffer from some serious heisenbugs. Why they decided to add and remove features between versions and do their damndest not to make a compose file 100% "forwards compatible" with Swarm is another mystery.
Exactly, and nobody in this thread ever claimed otherwise.
Uber for X
Thing is, it still is. Haute couture doesn't have any labels and yet it does whole lot of wealth signaling. It's just... it takes some real wealth.
I imagine this leading to situations where you say things like, “pursuing option X would require a research project of indeterminate cost and time, likely longer than 7 years for a 10-person team”
For me Docker's value is to be able to easily run some Linux services with Windows. They got a lot of ready to use recipes on their website, so it's really easy to run e.g. wordpress with mysql. I would spend at least hour to manually setup VM with Ubuntu, install that stuff there. Also I'm using it to run postgresql for development. While technically I can do it just from Windows, I feel safer concentrating all that stuff inside disposable VM, also it's easy to share onboarding scripts with colleagues. I don't see how RHEL's tools would help me with that. Actually I could replace all my Docker usage with few shell scripts, but they have to be written and with Docker they are already written, many by experienced software maintainers. Docker will die when popular software will discontinue their docker images.
I was born two years after my older sibling, and one year before my younger one.

What is this three year rule you're talking about?
I pay no attention this stuff so it's all unfamiliar to me, hence my curiosity I guess...

But how do you know that the people you're interacting with on FB aren't trolls having a joke at your expense?

I get that there are some people who take it seriously, but I'm not sure it'd be easy to tell the difference between a believer and a troll in an online forum.
Agreed.

> Avoid picking favorite solutions and presenting them as the clear winner or only option.

That depends how stupid the management is. I remember when an ex-colleague of mine was designing a big complex thing (a mixed signal ASIC, if you care). He was a mere engineer. All the big decisions had to have management approval. But the management didn't understand much about how the complex thing worked. He tried the, "we must do this and that" approach, without success. He eventually figured out that he needed to present options. But it didn't seem to matter if all but one of the options were stupid. As long as there was a graph showing one option being better than the others, then the management could chose the option with the big score and feel like they were in control.

Moral - Figuring out how to control your boss is a good strategy but probably only works if you are cleverer than they are. I prefer having a boss who is clever than me and when I say, "we must do this", they explain why that's a stupid idea.
This is a similar discussion to vinyl vs cassette vs cd vs streaming. All will keep existing in some form or another. Admittedly, some will die out completely (DCC, Minidisc) I’m pretty skeptical this going to be Docker though.

Even more, the argument that because Redhat RHEL 8 no longer has a Yum repo for it Docker is dead in the water is a bit far fetched. According to Wiki RHEl is a fairly small % of the server market compared to Ubuntu, Debian and Windows for that matter. https://en.m.wikipedia.org/wiki/Usage_share_of_operating_sys...
Looks eerily similar to Lion's Air. Seems like the whole freet should be grounded for a while.
What's a better metric or way of measuring it?
Swarm was a pretty big mistake. I think based on just relative resource investment compared to Kube, it ought to have been obvious that it’d never be relevant if it wasn’t extremely specialised.
Through, the definition of soldier on Wehrmacht part was quite loose. Oftentimes it was pretty much anyone living in the area on Easter Front. Don't forget about that when looking at 2000 soldiers vs one German stats.
This thing looks gross ...
Yes but if it requires the latter you end up with an uncontrollable mess of regular expressions which can accidentally parse the language needed to summon the great elder ones.

The media wiki parser is a perfect example of what can go wrong with simple solutions.
Another idea that struck me is how all the Soviet top brass were absolute workhorses who squeezed every living hour out of the day, to the point of mental and physical exhaustion. Stalin himself seemed to sleep from 4am to the late morning, which I found curious. Overall there are clear insights on how they won the war and lifted the Soviet empire, other than through despicable actions.

Maybe I'm misinterpreting it but this reads to me like 'the soviet leadership worked really hard and that won the war'.
Location Intelligence: Why is it gaining so much traction?
Introduction to Wikipedia's article for "Socialism in one country" [0]:

> Socialism in one country was a theory put forth by Joseph Stalin and Nikolai Bukharin in 1924 which was eventually adopted by the Soviet Union as state policy. The theory held that given the defeat of all the communist revolutions in Europe in 1917–1923 except Russia, the Soviet Union should begin to strengthen itself internally.

> This turn toward national communism was a shift from the previously held position by classical Marxism that socialism must be established globally. However, proponents of the theory argue that it contradicts neither world revolution nor world communism. The theory was in opposition to Leon Trotsky's theory of permanent revolution.

[0] https://en.wikipedia.org/wiki/Socialism_in_One_Country
I'm doing a lot of rather JS-calculation heavy projects. Then again a lot of this is leveraging canvases, how well would this approach with that sort of dynamic content.

I'd try for myself, but as I take it you are not doing this on a production scale the HN effect produces a lot of out error messages so I can't really see for my self.
It's just normalized as any other technology, it doesn't mean company is not ready for it but that's up to how much they've been partying since.
YouTubers Can Now Collaborate with Instagrammers via Video-Replies
Not Just Fridays: More Companies Embrace Casual Dress Codes
This article contains really no good reasons and spends many words to say that unnamed alternatives exists.

One argument is that there are no new big features. But that is completely normal when things become stable.
My theory is that a lot of software engineering (I'm assuming this is what you're referring to by "IT"?) really comes down to basic CRUD operations between a front-end UI and a database. The real challenge is to architect software systems so that they are maintainable and flexible enough to develop features later on so you don't end up with spaghetti code mess. The issue is, however, that the "architect" skills that come with experience (i.e. 10+ years in development) are much less visible to management.

So management will only see a developer with 3 years experience and one with 15 years doing pretty much exactly the same job - this has the effect of making the less experienced developer look much more talented i.e. "Wow hes only been doing this for 3 years but is pushing out features at the same rate as a far more experienced dev!".

The best way around this is to specialise - for example in IT security, cloud computing, computer graphics, computer vision, machine learning, data science etc. Otherwise if you have been a developer for say 20 years but you are still making the same basic CRUD apps that 22 years old are coding - it looks like you have no drive or motivation - which is fine if you just want a 9-5 job but be aware that you may not be very impressive when it comes to find a new job.

EDIT: Sorry this is not about the Indian IT industry in specific since I don't have any experience working there but I think the pattern is pretty common in all countries.