skysight-inc/HackerNews huggingface dataset:
Brute forcing weak passwords? Someone is doing something horribly wrong here on several levels. At the very least anything online of any importance should have rate limits if not locking for repeated password attempts. For servers themselves allowing password logins is inexcusably bad.

It is considered a bit overzealous by most but I believe that passwords should have been done away with a long time ago in favor of cryptographic keypair logins - we have already found the "2FA" in practice like emails and cellphone text messages not an adequate replacement. I'm aware there are other problems with storing your keys and loss but I believe that is a better approach for anything that needs security. I wish I could get my bank accounts to use key based logins.
Anecdote: Yeah I was a bit surprised that a kernel/filesystem bug I logged back in November complete with a reproducer didn't even get acknowledged. I hope they'll eventually get to it, as it causes spurious build farm failures for PostgreSQL. My hypothesis was that the lack of appropriate category might have doomed my report to the random/other/who-cares pile.

http://www.openradar.me/radar?id=4970461708419072
Noting the obvious: if you're backing up customer data, an append-only backup is not GDPR-compliant.
> If I build a website in Canada, host it in Canada and primarily target it toward Canadians, don't complain when I have zero interest in learning about EU laws.

You don't need to learn about EU laws, your product isn't covered by GDPR and all that will happen if your product somehow does fall under GDPR AND if it's non-compliant is that a bureaucrat will write a letter to you to either asking for more information or explaining how it's not compliant with suggestions about how to bring it back into compliance.
I'm not making a judgement on the clinical validity of experimental treatments. That was a direct quote from the article.
Tool to bypass captive portals and get free WiFi easy
a leader would ask for clarification, so there's always that.
I don’t know how to you advise you in a precise and concise manner, and I’m still learning and hope to do more. Let me try.

I’ve worked at massive service companies, including Razorfish, where I excelled at allocating the right people at the right time, with optimization for the best profit to the company. I’ve also worked on many products (for my own Startups and for other Founders), and I’ve begun to realize the best way to be a leader is to assume that 'everyone else is as good as you were, perhaps even much better than you.'

I used to research ahead, prototype, and articulate solutions and ask the team to make it better, execute it. Now, I just poke the tip of the problem and let the team get involved early on, handle the problems and the solutions. I try to acknowledge their accomplishments, let everyone know the awesome things they did, the sacrifices they made and help them connect to one another. Give enough warnings to non-performers and try to help them in private. Of course, if even after a few tries, they are let go.

Earlier, I used to say that I’m good with designs, development, and business too. These days, I believe I’m just a designer - I design opportunities, careers, teams, products, and organizations.

That is my current method of leadership - talk less, let others be doers, make others the hero of their stories. “Do now what you wish (or have) to be doing 1 year from now.”

You might have seen and heard many inspiring videos. Here is one I recently saw and it strikes deep, Patty McCord’s 8 lessons on building a company people enjoy working for https://youtu.be/iBa9EoEbb38?t=18
Also, they aren’t technically criminals if the attackers are state-sponsored and conducting an act of war. “Threat-actor” seems exactly like the type of legalese a government relies on when crafting the story around its own retaliation or justification for future aggression. I think it’s just entered the lexicon when talking about these types of incidents.
Interestingly enough, at a hackathon I was at two weekends ago someone built exactly this: https://devpost.com/software/eddie-k7b3yf
You just ask for the user's location. A dropdown box with countries.

That's not unusual, American companies do that, too, in order to calculate sales tax.

You probably need it anyway to calculate shipping.
Its a quote from the article.
I've worked as a marketer for 10 years, but don't like working on marketing luxury products. It has entirely different rules and goals then your usual direct to consumer stuff.
Cool story bro.

To me it just sounds like your colleagues were a little nuts. You don't need metaprogramming to write a large application, and reaching for Devel::Declare should be reserved for last resorts and "hold my beer" moments. You're right that the conferences have a lot of this kind of stuff, but most of us know better than to actually use it, and read Perl Best Practices.

Most of these issues are solved in Perl 6. Any language changes are scoped lexically by default (e.g. declaring sub infix:<==>). Emphasis on threads instead of forking for concurrency, with await and first class Promises. If you want to write see, just write normal C and use NativeCall, instead of writing in the bizarre XS dialect of C. But it's kind of a different language... yeah.
Who stops you from buying insulin outside the US and re-selling it in the domestic market?
No, it's very different.

They are allowed to advertise "price X, but remember you also save Y per year". But not "price X minus Y".
If you want to have controversial discussions with intelligent people of good will in a highly moderated tone policed environment go to r/TheMotte.
I don't have a LinkedIn page, or any other social media for this matter. Does that make me a non-trusrworthy person now? This is horrible.
(I don't disagree with your other points).
U.S. charges leaders behind OneCoin, a multibillion-dollar crypto pyramid scheme
You are completely right. And it's a vicious circle which, alas, I recognize myself getting sucked into time and time again: Certain opinions and certain mindsets are practiacally guranteed to garner silent downvotes en masse if posted here. So we learn self-censor and shut up. And then occasionally some commenter says something just too outrageous, and we fall into the selfsame trap, clicking the downbutton because it's free, whereas an actual comment will most likely score minus-points until it greys out.
Flagging and downvoting probably ought to carry some karma-cost.
1. Keep your discussions high level.

2. A leader’s job is to make sure the ship reaches its destination. A real leader assumes responsibility for taking the entire team where it needs to go.

3. Don’t be petty. Leadership is tough. You’re going to have to tolerate a lot more and give a lot more than the others. Make sure your communications reflect that.

4. Dive into details only as needed, and better in a one on one where you’re only speaking the parties its relevant to. Everyone doesn’t need to hear everything.

5. Other leaders in your same rank don’t have as much visibility into your day to day as you do. All details won’t be relevant to them. Keep it high level. Develop the skill of having a normal conversation, keep a few appropriate jokes in your back pocket, and use a story or two to illustrate your point instead of numbers and statistics. People remember how you make them feel.

6. Be observant, develop your skills on reading and displaying appropriate body language, communication is more than just the words that come out of our mouths.

7. Know yourself, your pitfalls and strengths. Are you glass half full or half empty. How does that impact your communication and your team. Find complentary people and try to take insight from them.

8. Make an effort to find a mentor if you haven’t already, these are excellent conversations to have with them.

9. PhD interview. Explain your research to a layman (doesn’t have to be research and you don’t have to be a PhD)

10. Celebrate wins, learn from losses, build some positive momentum around your team and project.

All the best!
Is there some tool that would allow one to make a copy of a modern SPA?

If the interesting content is inside a database at the backend, copying the interface is not enough. You also want the database.
Why don’t you ask him/the company to pay for some management training for you - he’s identified a weakness and has given you this role, it’s his problem to develop you.
The downvoters of that post have been community members for years. I think it's more that this subject is off-topic and has come up so many times that it is now tedious (even though the underlying concern is unfortunately real).
I agree, there are no criminals at the nation-state level, only other actors.
That's the best case scenario!
This scenario doesn't get enough attention and sympathy. Things have been going downhill with internet freedoms for a long while, with tech giants usurping content and the way we navigate the web etc. But, living in Sweden, I had not felt such a blow to my freedoms as when these signs started popping up, pretty much over night.

Europeans especially seem to be quite alright with this law since it supposedly only protects them. But a regulation is always, by priciple, a resitriction on some freedom. The GDPR may in fact be quite benign, but to me it's an obvious slippery slope where it is not hard to see this thing indeed evolve into something like the firewall of China. The EU is transparently considering protectionism with things like railways and telecom where foreign nations want to invest in the EU infrastructure. It's naive to think anything else of the internet. The GDPR was the innocent first baby step towards the European Wide Web.
It doesn't seem too complicated. Recital 23:

> In order to determine whether such a controller or processor is offering goods or services to data subjects who are in the Union, it should be ascertained whether it is apparent that the controller or processor envisages offering services to data subjects in one or more Member States in the Union. 3Whereas the mere accessibility of the controller’s, processor’s or an intermediary’s website in the Union, of an email address or of other contact details, or the use of a language generally used in the third country where the controller is established, is insufficient to ascertain such intention, factors such as the use of a language or a currency generally used in one or more Member States with the possibility of ordering goods and services in that other language, or the mentioning of customers or users who are in the Union, may make it apparent that the controller envisages offering goods or services to data subjects in the Union.

If this local newspaper isn't offering translations in French or German, and isn't offering subscriptions in Euro or GBP, then they're not ofering services to Europe.
I would assume you're giving too many details. People higher up the chain don't have time for details: that's why they hire you, so you can make decisions at that level.

You need to communicate:

- status of the project
- external blockers
- progress on OKRs or KPIs
- important personnel issues (e.g. people leaving, big HR issues, things that eventually will affect your deliverables)

The key is not to overwhelm with noise and learn to communicate what they want to know.
Where Have All the Men Without College Degrees Gone?
Yeah, one of my favorite comics of 10-15 years back. Too bad he seemingly gave up on his main series. Was always very well written and drawn.
Given the information that this AI now has and the ability it's displayed, should WotC/Hasbro consider actively banning players from using AI to build standard-format Constructed decks? After all, if the author actually is correct and draftbot here picks better than humans, wouldn't it stand to reason that it could build optimal decks if given a "draft" which included multiple iterations of the program working in tandem over an entire set?
An aspect of it that I've been taught is, rather than explaining why something can't or shouldn't be done, explain what it will take to get something done. E.g. don't say "we can't do X because it's too expensive, requires too many people, is too risky, ..." Instead say "doing X would require raising additional funding or diverting funding, we'd need to pull people from other teams and/or hire additional headcount, will require some risk reduction investigation for two weeks before we can give a complete assessment, etc." Then let your CEO, board, whatever decide or help decide if the costs are too high.
That's why I called it a hack and not proper implementation. While what you described is true - patients are hit with "real costs" instead of $10 co-pays and rising premiums. ideally - yes, most minor stuff would be paid out of pocket - market forces would immediately put things in a right place. And for emergencies - leave that to insurances.
> Another Taiwanese factory audit found that 82% of workers had their passports withheld.

Bad reporting?

How many clothing workers have passports?
What your manager is implying but won't say is, "talk like me". So do that. Think of how he rephrases your reports, how he puts things - and talk like him. That's what he wants to hear.
Do you mean the CTO position?
An append-only backup is not by definition non-compliant with GDPR. It's important that the individual can be assured that their personal data will not be restored back to production systems (except in certain rare instances, e.g., the need to recover from a natural disaster or serious security breach). In such cases, the user’s personal data may be restored from backups, but the controller will take the necessary steps to honor the initial request and erase the primary instance of the data again.

For example: https://www.acronis.com/en-us/blog/posts/backups-and-gdpr-ri...
It's a sad truth of the state of C/C++ build systems that header-only and single-file libraries (which take very long to compile) are so sought after.
With luxury goods, the brand is the product and the value is from the brand, so you can't easily iterate with one off sales.

If I'm selling a new type of toothbrush, or a software that helps teachers grade homework with AI, I can make some ads, see how close they get to the needed ROI and tweak it. I can test marketing different aspects or selling points of the product and getting results iteratively.

If I'm selling a new luxury handbag, I will never, ever sell it at a reasonable ROI from just a set of ads. You have to build the whole eco system at once (kind of a chicken and egg problem). People have to see influencers using it, celebrities having them, the right kind of feeling in the ads, the right news articles, being sold in the right stores, etc. My first marketing job was at a start-up denim brand trying to become big and I observed and researched a lot there about how it works.
I use Chromium style[1], worked out well. Have to check my notes on PC why I picked that.

[1]: https://github.com/dmsurti/AssimpKit/blob/master/.clang-form...
Something I was taught during manager training in an unrelated field was the mantra “clear and concise”.

Details are important but there is a time and place. Most of the time people asking questions will ask for more info if they want it.
Talk about strategy, and when anyone asks for detail say "well, that's a bit operational but I'll get someone to put together a report for you", then wait for a day, then tell them what you would have told them anyway. But with the addition of SPC charts and references to a (potentially mythical) Gantt chart.
They were, to put it bluntly, fudging their numbers [1]. (From what I can tell, they were releasing timely statements to investors.) This was disclosed by the Office of Federal Housing Enterprise Oversight and rectified well before the financial crisis. Taken together, it is a bad analogy for the systemic mid-reporting of economic data by China.

[1] http://online.wsj.com/public/resources/documents/ofheo200605...
http://soundcloud.com/dez_blanchfield
Totally agree. My guess — and it’s obviously nothing more than that — is that they don’t fully know yet, but it might seem better and easier to solve than the alternative that there’s very little organizations in this position can ever actually do to prevent sophisticated attacks.
I took a look at some of Lyft's metrics [1,2,3], but would be interested in seeing a more nuanced breakdown of their expenditures. You mention driver signup bonuses are a major expense, and is "The only reason they aren't" profitable today. Is this a fact?

[1] https://craft.co/lyft/metrics

[2] https://dashboards.trefis.com/no-login-required/zrRBRShU

[3] https://www.forbes.com/sites/greatspeculations/2018/10/10/a-...
I work with digitisation in the public sector of Denmark. We’ve digitised our elections, but we’ve digitised the part that makes sense, the registration you do before you’re handed you ballot.

In the old days, we used to have big books where you’d get crossed off after you were identified. This naturally takes a lot of time, so today we print a little bar code on the piece of paper that we mail every adult citizen at every election. This means that we can scan you instead of manually crossing you off in a book.

We still have queues at prime time, but they are 10-15 minutes instead of two hours.

The actual voting is done with paper, so that there is a paper trail.

This is the only thing that makes sense. Especially when you look at the business side of things. We reduce the hassle for citizens (our customers of sorts) and we maintain security. Sure we could provide results faster if we counted votes digitally, and you could frankly also provide a paper trail if the machine printed you vote, but does speed of counting really matter? Financially digital vote counting would be insanely more expensive, because public IT systems are insanely expensive and paying staff a little extra to count votes isn’t.

I mean, the registration system is really expensive as well, but at least it benefits the citizens, so that is a reasonable sacrifice to us. But digital voting? That’s as you put it, insane.

It’s not a democratic process if you don’t have the physical votes and a system which makes sure they aren’t tampered with.
Fair reply, and thank you for replying. While I agree the funding mechanisms you mentioned certainly must exist, I imagine things like unexpected delays for a given therapy or complications with a clinical trial (not with the medicine but with some procedural stuff) must happen. Times where existing room in revenue streams is vital for the development.

Secondly, if a publicly traded company already has a significant amount of equity in the hands of the public, issuing too much debt can mess with the balance sheet, right?

I hear you though, I still worry that price controls is attacking the issue in the wrong way. I don't know all the specifics, but I feel like protections to competition would be a better way to ensure the competitive market?

This is an area I'd really like to understand more from a non-partisan perspective, especially understanding the current nature of which countries actually do develop the most drugs. But every piece of information I find on this subject has a partisan bent. Anyone got a source they'd recommend?
HIBP isn't about pwned sites. It's about leaked credentials.
The source of leaked data on HIBP isn't verifiable in most cases.
While suggestions around self improvement are very important, please also evaluate the competence of your manager and then adapt. Self improvement is essential but not sufficient.

More than once I have encountered clueless executives who are happy only when you are a mirror. They are not interested in solving any issues from below unless something personal for them is at stake.
> I am a technical manager and currently in a leadership role. My manager who is an executive, keeps telling me“ don’t talk like an engineer, talk like a leader” when I go to him for any people or operational Issues.

What does your manager say that means? This strikes me as the 'critical thinking skills' of management -- nobody knows what the phrase really means, and if they did they wouldn't want it. It is every manager's job is to provide clarity to their directs, even executives.

At a first brush, your job is to speak like both a leader and an engineer. You lead engineers, after all. That means connecting the engineering, the "how", with the business results, the "why." One of your team's goals might be to reduce AWS costs, by tweaking Java GC parameters.

Going deeper, you might consider personality traits. The DISC model of personality divides humanity into four categories: Dominance, Influence, Steadiness, and Conscientious. To keep it brief, we generally perceive high D personalities as 'leaders' and high C personalities as 'engineers.' Talking like a leader in this context means demanding results, and making decisions under uncertainty, while an engineer is more likely to ask for more time or more data, obsess over quality beyond what the customer needs or expects, and avoid talking to people. High D communications tend to be brief, while high C communications may be overly detailed.

More pessimistically, perhaps your exec simply means to stop talking about technology they don't understand, and have no interest in understanding. If this is the case, you should consider whether an executive responsible for a technical team is sustainable. Certainly some amount of simplifying explanations can be expected of middle management, but this is a two way street and some efforts should be made to understand the tools used to solve your business problems.
Has anyone read Montefiore's Young Stalin and Court of the Red Tzar? Those books were an absolutely wild ride. Stalin really comes across as one of the more unusual characters of history. No one in his native Georgia liked him, so they were happy to dish dirt on his youth and give the full story free of obvious glorification.

I think the most unusual characteristics of his story was that everyone tried to control him. First, the priests at the seminary by disciplining him, then his father, who wanted him to be a shoe cobbler, then the czars by putting him in prison and exiling him, then his fellow party members by trying to out politic him, and absolutely nothing worked on him. The guy did not budge an inch from his mission or ever got discouraged no matter what happened. The guy, like a serial killer, was completely emotionally unmoved and undeterred by any obstacle or opinion of anyone.

They put him in prison, he started taking control of the prison. They sent him to Siberia he came back and dove right back into revolution after always seeming to father an illegitimate child while in exile. He remembered everyone who he ever met and punished them or rewarded them later accordingly. He seemingly did everything for the sole purpose of global Marxist revolution and he got rid of anyone, or group of people or thing that got in his way. He wasn't even vulnerable to flattery. He was just dead set and committed to his goal of global marxist revolution and brutal vengeance against all his enemies who tried to keep him from achieving that.
Why not use GlusterFS? Honest question. I actually still don't understand the difference between the two. Also I don't understand why Red Hat is offering both as distributed fs solutions. On OpenShift the supported distributed storage option is GlusterFS.