skysight-inc/HackerNews huggingface dataset:
The vendor tried to hide the vulnerability from the public, its customers and its future business partners and to delay disclosure until after a favourable business deal. What the hackers did wrong here is failing to recognize that immediate full and public disclosure is the only ethical course of action in such a situation.
FWIW, I use Restbed for this type of work. https://github.com/Corvusoft/restbed
One problem is that business-focused people seem to think of tech debt as an easily determined quantity, when it behaves more like a complex derivative than a simple financial instruments like a loan
It would be really interesting to learn more about the technical details of the "UDP-based protocol" Warp uses
> was not to go full nationalism and pretend that thanks to this god-like institution our language is the best in the world

I personally did not take it that way. I'm glad that you took my post in the self-effacing way it was meant.
And there are fun ones like the etymology of aluminum which went through spellings like a ping pong.
>People aren't downvoting this within 7 minutes of you posting.

Obviously they are, or OP wouldn't have added that edit. You can see your comment scores (as you know.)

Interestingly, I just read that China employs people to influence social media. (Which Hacker News would fall under, I guess.) What I read was this, I'll quote it in full:

>China does this with its 50
>Cent Party: people hired by the government to
>post comments on social networking sites
>supporting, and to challenge comments
>opposing, party positions.

This is from a book on privacy by a famous author. It would be interesting to know if the people mentioned post to HN.
ha ha the original blog post seems to have been removed from cdc.gov
> What we really need is automated administration and billings to really move the needle

Right, because every other developed countries gets similar outcomes at lower costs (poor capita, per GDP, or on any other reasonable basis for comparison) because they are far ahead of us on automated administration and billing.

There might be countries where that's what's needed, but in the US there's clearly a lot of lower hanging fruit that doesn't require any new technology.
I don’t see that the union is a particularly important part of what you describe. The same things could happen without a union. The misaligned incentives are the same either way.
Oof, I remember those days when my cousin and I would switch every few minutes to complete those races.
>Much more encouragingly... Natural-gas consumption in the United States increased by 10% last year...

So, I wouldn't say that statement is absolutely encouraging since any unburned Natural Gas releases methane (i.e. "methane slip"), which is 80-times more potent than CO2 in terms of planetary greenhouse effects. (1)

Though, at least there's a solution: completely burn your natural gas. But is this to much to ask of the consumer? It's not necessarily in their control. I imagine it will take a healthy amount of regulation of gas consuming products, but I know that every time I turn my crappy gas Kenmore (""elite"" - don't buy one) range, the gas runs for 3-4 seconds without burning, and my gas heater pilot has a few second delay before the flame catches, and god only knows how efficient these actually are burning the gas when operating. Multiply that by several million (2), and I cringe at the prospects.

The further we go, the more attractive Nuclear becomes to me. Looking at the plot, I think the U.S. should work (invest - even at a loss) directly with India to establish Nuclear plants ASAP as their hunger for energy grows with an already massive population. It's going to get ugly if we don't.

1.) https://www.edf.org/media/new-study-finds-us-oil-and-gas-met...

2.) https://www.statista.com/statistics/221447/gas-range-and-ove...
There are open source C compilers that work on Windows, yes.
Silicon Valley Bubbles to a Boil
I see. Thanks :-)
You’re placing faaaar too much weight in accreditation
It's incredibly easy to use, I'm a fan.
It doesn't change the fact we are down the same road, and the user UI/UX of getting a web page that is nothing more than WebAssembly + WebGL will be hardly different than Flash used to be, open source or not.

I don't care, I used to enjoy playing with Flash, gave some sanity to the div/CSS soup pretending to be native UI controls.
Microsoft wrote the Basic implementations for most of the early consumer microcomputers. Commodore's microcomputers, Apple II, IBM PC, and others all had a Microsoft Basic implementation built into ROM.
Facebook’s News Feed is starting to explain itself
Is the disposal rate of garbage bags 100%? Should we also ban them?
Lmprtfy – Let Me PR That for You
How to self-publish your novel
Yes, your understanding is correct.

Grammatical accord overrides physical gender for pronoun choice in French.
Thank you for this tip. I'm eager to read this book.

While I'm a big fan of Richard D Wolff's efforts, he fails to examine the governance models of co-ops. What works, what doesn't. Models of incorporation. Case studies.

Governance is key.

--

Some years ago, I joined a non-profit OSS team, part of the Kuali Consortium, with the primary intent to see how it worked first hand.

Sadly, it didn't.

Even more sadly, I still have little clue what could work, what to advocate.

I am inspired by Pieter Hintjens' Social Architecture as model for successful OSS:

http://hintjens.com/books

But have yet to practice it myself.

--

Sorry, I always conflate ideas. My end goal is to figure out how to make useful, meaningful software while still paying my mortgage and feeding my family.
I've been responsible for hiring 10 or so engineers in my career and everyone of them turned out to be a good hire from the company's perspective. I was always able to smell the BS pretty quickly during interviews and it's always surprised me that this seems to be such a difficult thing for some interviewers to recognize. The BS is exposed when asking for more and more detail about prior work and projects. What was the last project you worked on? What was your role specifically? Were you responsible for selecting any portions of the tech stack? If so, how did you make those decisions? What were the determining factors? And on and on. As an interviewer, if I could not get a good read on one's abilities in this way I'd question my qualifications to be conducting the interview.
Well, you didn't get to "cheat".

When we were kids, my cousin figured out a way to make Fallout 2 playthrough much easier. From the starting location, he would immediately head down to a particular late-game location in which you could acquire a Power Armor (the second-best armor in the game). He avoided getting killed by high-level random encounters by discovering that you could escape almost any of them if you mashed "A" key during loading screen - this would guarantee you started the turn-based combat before the random enemy could spot you, and 99% of the times would let you escape. After reaching the target location he'd acquire[0] the Power Armor, and start a quest chain that let you acquire Advanced Power Armor (the very best armor in the game). After that, the game was much easier.

Ah, videogames were so much more fun when we were kids, and didn't have that much time pressure.

--

[0] - I'm fuzzy on the details here; it probably involved attempting to steal it from the shop and reloading game on failure. I later improved this step by just buying it for money, after exploiting a "repeatedly steal merchandise from a guy and sell it back to him" infinite money generator bug that was available near the starting location.
The United States also needs to make real sacrifices to our standard of living. We are by far the most prodigious users of energy per capita in the world. During WWII we changed the way we lived in substantial ways. We should be prepared to make similar changes. The stakes are every bit as high. And just as in WWII, the sacrifices need to be made by the middle and upper class as much as, if not more than, by the lower class.
I just downloaded the 1.1.1.1 app on Android and don't see any options to pre-register for the VPN.
Building a city on a known lava field?
Direct link to the site: https://1.1.1.1/
Same reason as DoH (DNS Queries over HTTP), but with better:

1. performance: since the TCP+TLS handshake is only performed once and the connection is kept open forever

2. privacy: the resolver doesn't get the requesting party's IP address
The pseudo-official documentarians of the English language are the compilers of the Oxford English Dictionary (OED). They don't prescribe or authorize English language use but generally accept new words and uses into the lexicon ... [1] briefly discusses their process.

[1] https://www.oxforddictionaries.com/our-story/creating-dictio...
"It was a morally ambiguous stabbing!"
We felt like that economically too. Not working out.
Did all of that change because you got an offer from another company? Because that's the issue we're discussing here: whether it's the other offer that makes you more valuable, or the added responsibilities.
A team of equally skilled and motivated people is bad as it can not achieve more than any individual in the team, the less skilled and less motivated should be removed.

A team works best when its different people with different skills and different motivations as they can achieve more than the sum of their parts.

The developer feels they are the one making the product and brining in the money for the business, obviously they contribute more than the janitor.

The janitor feels they contribute more as they shove their hand down a toilet to unblock it while the developer sits in a comfy chair on facebook.

How do you quantify the contribution of two different jobs? Salary is often used to justify contribution but generally based on supply vs demand it has little to do with contribution.
I imagine at some point we'll blog about it, but we've been working with the Neumob technology we acquired and QUIC for some time.

Also, this post is relevant: https://blog.cloudflare.com/boringtun-userspace-wireguard-ru...
I think with labelers you just need intent "the right way" which is more consistency regardless since you can correct "always wrong" to "always right" for binary inputs or othervtricks for larger numbers.

There was the talking banana story where the sheer determination to make the robot racist provided intense testing.
https://www.google.com/amp/s/kotaku.com/racist-twitch-trolls...

Really so long as you know how to handle it they can be useful. If you want your system to be robust you need to see how it handles "abuse".
Do those exist in France? I have always thought it was an American (or Anglo-Saxon) cultural phenomenon.
It's an April fools.

Their product "Warp" (was and now is) Argo.

They also took the word gullible out of the dictionary, everytime you search for the word via cloudflare they remove it from the results that you see
It's WireGuard [1] coupled with tech from our Mobile SDK [2] and (in the case of Warp+) Argo [3]

1- https://github.com/cloudflare/boringtun

2- https://blog.cloudflare.com/mobile-sdk-acceleration/

3- https://www.cloudflare.com/products/argo-smart-routing/
A parser for the TLS data description language used in the IETF RFCs
As long as skilled, unemployed remote workers exist in cheap areas, I’d expect the salary to be lower than that of non-remote workers in expensive areas, and I’d expect remote workers in expensive areas to be unable to compete. Once you run out of remote workers in cheap areas, I’d expect salaries to rise enough to start attracting the ones in more expensive areas. But salaries would naturally rise for all of them, because they’re all ultimately in the same market.
The post isn't on the official rust site but copies its design and claims to be from the core team, to start with...
We've released but the Google Play Store and the Apple AppStore have some latency...
The Tech Behind the 2019 Lamborghini Aventador SVJ
I'm amused by the tone. It's like the author doesn't realize that 99% of software development and deployment is done like this, or much much worse. Welcome to the real world.

We work in an incredibly immature industry. And trying to enforce better practices rarely works out as intended. To give one example: we rolled out mandatory code reviews on all changes. Now we have thousands of rubber-stamped "looks good to me" code reviews without any remarks.

Managers care about speed of implementation, not quality. At retrospectives, I hear unironic boasts about how many bugs were solved last sprint, instead of reflection on how those bugs were introduced in the first place.
Australia proposes jail for social media execs who do not remove violent content
> Contrary to commonsense belief, attempts to measure productivity through performance metrics discourage initiative, innovation and risk-taking.

Is this really contrary to commonsense belief? I think most business leaders are very aware of this, however, the alternative is chaos. That's why certain specialist teams are given leeway.
Is there any reason to think that people are worse at gaming qualitative evaluations than they are at metrics, in general? Things like making friends with one's boss, appearing to work hard, and so forth.
Ask HN: What Is New Today?
Machine learning was gaining traction years ago.
Cryptocurrencies were gaining traction years ago.

But what is new today?
This was literally a plot point in _The Dark Knight_: https://www.youtube.com/watch?v=K4GAQtGtd_0
Recursion Schemes: The High-School Introduction
It seems like there is all the money in the world to hire new people but almost nothing for anything other than a cost of living raise.
There are different uses of the word 'trust'.

Portions of the U.S. do, in fact, trust prisoners of for-profit institutions to fight fires. They have no choice in the matter. (A related definition of 'trusted' used in security is people who cannot be denied access to information.)
Even cowboys don't herd cattle by themselves...
using the term "holocaust" is a comparison? Nobody has a monopoly on that term.
On the other hand pretending that people who go to prison are usually righteous is really unbelievable.
I like the idea of "isolated, fully separable" assemblies, but there's very little explicit advice on this topic and the tools themselves (visual studio and msbuild) are agnostic about that.

I mean, there's nothing to prevent you from spreading out namespaces across multiple assemblies. You can specify namespace and assembly in the "properties" dialog for your project, and also in within the source for each cs file, etc. I've never understood this lack of "guard-rails" in the tooling to prevent these kinds of messes. It seems like that would be reasonable thing to expect?
Any IT dept with less than 5-10 DBAs will have to throw out the window any Segregation of Duties plans (keeping apart access on Prod-Dev-QA) or separating/dedicating DBAs to the three different environments.

But the backup, hell yeah, you NEED mitigating controls (preventive/corrective) for when you allow people to make changes in Prod that haven't been gone through all the testing phases.
Latin never died or was destroyed, it was indeed “allowed to grow organically” and the dialects it grew into (French, Spanish, Portuguese, Italian, Catalan, etc.) are now spoken by hundreds of millions of people around the world.
I don't have a crystal ball, but I think that a major war that kills enough wealthy people to more than offset its own carbon cost is relatively unlikely during the next ten years. Unfortunately the next ten years are what determines whether we will be able to limit global warming to two degrees or not.
Isolation just doesn't work though, as I pointed out it's made zero difference to North Korea's behaviour and China was doing all the same things back when it was isolated.

Arguably by making China more prosperous, we are empowering ordinary Chinese economically and eventually this could lead to broad demands for more political and social freedom. So it's quite possible sanctions would make the state more powerful with respect to individual citizens, not less.

I'm not saying that's necessarily true, but it's plausible. I can see a case for symbolic sanctions though, something that's eye-catching but not necessarily economically impactful, as a way to draw attention to the issue within China.
Why Hypotheses Beat Goals
No I totally agree, looking back on my actions, rm -rf'ing the production database was not a productive use of my time.
This may be the majority of the industry, true. But some devs filter out employers to not feel miserable. Whenever I find an employer like this, either I try to change the status quo, or I leave.
Just speculating, but could it be that your mind is grasping for an explanation, came up with the ego depletion idea, subjected it to a reasonable amount of questioning to ensure that it wasn't completely flimsy, and then you went with it? Kind of a "thinker thinks and prover proves" type mechanism?
Yawn. Everybody is beating it to internet porn. It's probably the main reason that being seated for long periods isn't killing more people.
> Suffering economically will likely lead to far more suffering for various Chinese people, and the end result has a good chance of being a civil war. Is this worth preventing their influence from growing? Who benefits from it?

All the future citizens of the world, but especially those people living in smaller, more liberal, neighboring countries. My biggest worry with authoritarianism is that is seems we may be reaching a technological tipping point that will make these regimes even harder to replace than in the past [1]. Whatever can be done to prevent that is good in my book, especially since I think it's unlikely that these regimes will be content to limit their influence to their borders.

[1] Nuclear weapons make them impossible to replace militarily, and digital surveillance + secret police may eventually make it impossible for internal change to replace them.
What is with people and thinking all libertarians are idiots? I’m liberatarian and I despise for profit prisons. They have perverse incentives
Top Adult Ad Networks to Make Money with Adult Tube Sites
Reading the title, I thought to myself, there’s a dining philosophers joke to be made, but I can’t seem to Sartre it out...
I mean, developers are building houses in flood plains as we speak and no one bats an eye.
Why Usability Testing? How to Perform in 5 Just Steps
That's a bold prediction when they are imprisoning so many people.

I'm not sure why a flimsy assumption of the future for something that can't reliably be quantified would be used as a rationalization to do nothing.
Alright, I’ll bite. Are you saying that most inmates are serving time for alleged violations of law that have not actually occurred?
Do not use a cold-spray to emulate this. Because when you have a part that is significantly colder than ambient temperature, condensation is very likely to occur.
How are you Celebrating World Backup Day?
Support for Linux would be nice.
Guns are a bit different because they are designed to kill. I fail to see how you can save lives with machine guns unless you are in a war zone
Some background info: https://blog.bitrise.io/asmr-mobile-technology-video-tutoria...
Is there any notable potential for people to use this for abuse? You guys tend to put up captchas for inbound Tor traffic, I assume for similar reasons.
So, we won't find a correlation between people who go to prison and propensity to immoral behavior? Or even intentionally mislabeling immoral behavior as moral.

HN should be wise enough to know that correlation is not causation, and that statistical differences in behaviour between groups do not necessarily describe an individual from the group. But that does not invalidate OP's point.
Gopher-over-HTTPS Web Client
I know of no party anywhere in the world that has a solid plan to limit global warming to below two degrees. Who should I vote for?
Are you also bosdev? I noticed an identical comment posted under that account before this one.
>which might in a worst case scenario rule them someday

Or, in a more realistic scenario, might learn how to discern between an article about a tech company and an article about an orchard.
The problem is, nothing is unequivocally evil. What you think of evil might not what I think evil.
Free armour trimming: The Communist revolution inside Runescape
Eh, that is strange. I do feel happy and energized from productive work (even "house work" or "a hard day's work" that's not inherently creative) but I've never felt like an entirely different person after having produced a nice piece of code, or stopped feeling physical pain, things like that. (And I do like feeling "energized" more than "high" in general so I'm definitely not knocking productive work here, but people who try to argue that doing something productive is some kind of transcendental euphoric experience need to stop smoking the ink of their Tim Ferriss books)
Ecuador legalized gangs. Murder rates plummeted
Back-End – Front-End Versioning
As sci-fi writers cottoned on to long ago, energy is the driver of progress. With energy, anything is possible, any lifestyle. With enough of it, you could build diamond space towers for a hobby. Without an artificial source, we're reduced to collecting it the old fashioned way - subsistence farming, with hand tools.

There is indeed no limit to how much energy a single person could use, if available.
Saudi Aramco world's most profitable company with net income of $111B in 2018
April fools day is a tough day to make this announcement.

But I'm genuinely thrilled to see this. Hopefully some non zero percentage of customers give this a try and reduce the amount of meat in their diet.

That said, I don't expect that non zero percentage to be very high without a lot of marketing.
Java has been used for many of the Finance IT or FinTech(in today's world)I think the java will continue to dominate over the many years to come.
Well, I don't foresee that causing any bugs.
The bug report describes how they reuse a flag for new code that triggered old code.

"CI" would generally help keeping things tidy and transparent. It would be easier to find out what branches or flags or parameters already exist, which ones are not relevant any more; someone could rename them with a prefix "OLD_" or otherwise clean up, so that you typically pick from a list of options instead of setting a flag by accidentially copying it from one script to the other.

It is also easier to have error visualization plugins, or to look around previous deployments or test runs and get a pretty good idea if any new errors have shown up, even if you haven't analyzed the old ones.
A work contract is a simple supplier-consumer relationship. You are the supplier, and you essentially set the rate at which you offer your work hours.

When someone suddenly offers you the double rate, you should not feel insulted, but you should realize that need to work on rate negotiation skills. Then, if both offers are equally fine with respect to non-compensation aspects, simply take the higher offer.

Suppose you are willing to pay $4 for a coffee, and the café around the corner sells it for $2. Would you voluntarily pay $4?
Tor is different. We don't put up CAPTCHAs by default for Tor. We totally changed how we handle Tor years ago. But, because Tor provides anonymity, there is _a lot_ of abuse through it. A lot.
OK so I started calculus at 15, IIRC, but I was in the advanced class at the young end for my year. Most people who are going to do it start it at 16-17, if doing maths at A-level.

Everyone else drops maths at 16, never having encountered calculus.
Have you tried pomodoro?
Shut down Bitcoin and regain all that lost solar capacity. Seriously, Bitcoin now eats more more power than all the PV on the planet can produce.
Unfortunately, the US is so economically dependent on China that we would just be shooting ourselves in the foot.
Summary of “The War on Normal People”