skysight-inc/HackerNews huggingface dataset:
The author seems to base his argument on:

1) assuming the reasons a project owner might want to mandate an agreement; and then

2) demonstrating why those assumed reasons are not fulfilled by an agreement.

However there exist other good reasons a project may want to mandate a contributor agreement or assignment. If I can demonstrate just one, then his entire claim is moot.

Here is one reason. A project owner may want to relicense the project in the future. This would require them to either contact every copyright holder (some of whom may be unreachable in the future), or to require a copyright assignment for all contributions, or to require an agreement permitting such relicensing in the future.

I'm sure some contributors explicitly do not want such relicensing to be possible in the future. That's fine - but the author has not argued that this makes such agreements or assignments a bad thing.

Here's a legitimate example: what if your project is licensed under the GPL but later you want to add SSL functionality by linking with OpenSSL? You'll need an "OpenSSL linking exception" from all copyright holders which can be extremely difficult to obtain. If you had a contributor agreement or assignment in place, then you wouldn't.

What about other things like this that would generally be accepted by the community in the future, but you haven't thought of today? A copyright assignment or suitable contributor agreement derisks you from these.

On his "work for hire" point, the same argument applies to any contribution whatsoever, since if the contributor doesn't have permission to assign copyright, that contributor may also not have the permission to license their work.

I'm not trying to argue for or against these agreements here; I'm just saying that it seems like the author's arguments are moot because of the very narrow scope of the assumptions that he's made.
Software Engineers Don't Scale
Yes. But the swiss one has it and uses similar dimensions.
Fair point. And thanks for the clarification.
Given that 'RSA' is derived from real people's initials, the title seems even more unnecessarily unsavoury than it anyway is.

Can we change it at least here? 'RSA is easy to get wrong; stop using it' seems harmless, and better describes the content anyway.
I think the spirit of these is applicable to any situation where multiple parties need to come to consensus - i.e. try to focus on positive, respectful, inclusive, and objective modes of communication.
The near-invisibility of the attack to a layman's (human) eye. I would think this kind of attack would take a non-negligible time to discover, unlike simply replacing a sign which is obvious to any random passerby.
Yes Japan is a perfect example. Having low rates for a long time has given rise to a lot of companies that are frankly non-competitive and would fail immediately if interest rates were raised. Consumers do not win because the quality of these companies are low.

https://asia.nikkei.com/Economy/Loose-lending-keeps-Japan-s-...
No, either you want to become a cryptographer and you’ll need to learn, implement toy algorithm, toy with libraries, etc. But you’ll need some level of proficiency before putting anything to production.

The real code contribution of cryptographers anyways tend to add some very specific details to libraries (like adding their latest invention).

Now the general advice is that if you want to skip the 15 years it take to become a cryptographer and you want to send a message, there are ways.
It's crazy in era of letsencrypt that people still have SSL issues
Man, I wish I knew what I was doing back then. Major service providers allowing unsanitized inputs like that? Sounds like a lot of low hanging fruit! And this was before blogging was popular so communicating advanced techniques wasn't as easy back then either.

Those must've been some scary code bases.
Many thanks for this.

I think the telling point is that his most troubling proclamations aren't un-sourced comments he uttered at a bar or off-mic at a conference: they're from his freaking blog. He is completely unapologetic about them.
I smell bullshit. He can't explain how the secret key would be exchanged. "Agreeing on a key" isn't a problem any cryptographer needs to solve. You can tell this guy understands very little except how to sell something.
Great, another obnoxious Firefox feature I have to disable - and that's assuming they deign to allow me to do this once it hits mainstream.

I'd like it if there were less of those.
Is there an optimal window of time-restricted feeding?
Thanks for sharing.

Also, this[1] article helped me visualize how ECC works. It's a great read.

[1]: https://arstechnica.com/information-technology/2013/10/a-rel...
And the NSA is recommending that we not use ECC anymore, either: https://threatpost.com/nsas-divorce-from-ecc-causing-crypto-...
The documentation may do but many of the official images run as root and provide little to no documentation on how to change that, the Bitnami images in comparison are light years ahead.
Hungarian government takes control of research institutes despite outcry
Exactly. I seems like most of these are jumping off points for starting a conversation.

I may be wrong but I read the article as a senior reviewing a junior's code, in which case the big win is not just getting better code in now, but getting a better developer. Starting the conversation instead of jumping all over them is important.

Even when reviewing a peer, while more terse we tend to phrase things in questions, "Shouldn't this be in a lib instead?" Frequently it's oversight on their part, but sometimes they have their reasons and I learn something in return.
The idea is to express the intent without the emotion. I don't see any watering down there; in fact, it's likely the criticism will be clearer, more direct and more palatable.
Elixir is a language that compiles down to bytecode that runs on the BEAM VM.
Mobile phone bills cannot be used as a proof of address.
This seems like a pretty good list, I managed a team previously where they would make these mistakes in pretty much every code review - and the result of one engineer being nasty during a code review was very quickly a culture where code reviews were an opportunity to settle scores and showboat rather than an actual functional process.

A lot of this advice could be boiled down to "Would you make this comment on reddit, or would you say it to your colleague's face?"

The only thing I would add is:

>If a submission is too large to be reasonably reviewed, it is okay to let the submitter know right away. Keep moving forward.

Doesn't seem right to me - or atleast the focus really should be making sure that no one submits code for review that's too big for review, and that means early feedback about a feature getting too complex and breaking it down. It's much easier to go into a problem saying "I'm going to do X, it's going to be huge, so I'll do A then B then C and submit them separately". If a submission is too big to reivew it's probably non-trivial to go back and break up so that can be quite annoying.
Using Videogames to Treat Obsessive Compulsive Disorders
I use to hate receiving comments like this (the bad ones) yet I use to give them myself almost without realising it. Obviously, I was right to give them and wrong to receive them ;->

It took me a while to realise that the same message can be delivered in a far nicer manner, which generally leads to a lot less conflict.

Now it almost comes naturally to write nice comments that deliver the same message, namely: the code could be improved
> your political views all fit neatly within a single party’s mainstream

That wasn't the claim I was addressing.
Chaos Design
The cost jumped to 37,99$ and the coupon had no effect.
At this price it costs too much. I should have bought it yesterday.
A review of the official Dockerfile best practices: good, bad, and insecure
The first comment actually means a strong opinion. Impossible usually really means impossible from technical standpoint and is not used for things that are heavily inconsiderate or inconveniencing future development. The suggested option is Machiavellian and patronizing at the same time, and pushing burden of proof on the author of the code instead of reviewer. Puts them on defensive. Both are evil, but first is clearly an opinion, second is also a personal attack.

Proper review really must have "X because Y" form with perhaps exception for trivial syntax fixes. Like form 5.

Part two also forces additional burden of proof on the author. Generally for performance changes documentation requirement is the only thing. Preferably runtime numbers or profiles rather than abstract notions. We've seen people going for algorithmic gold plating where it actually list performance to constant factors.

Doing 6 in excess is viewed as patronizing. There is no good way around it.

And finally, presuming you know the teammates making the review as bland as possible without a bit of color can be the worst thing as reviews will be felt as a chore. They are one still but humor can help. Some people like their reviews to be ultimately super boring instead, and you have to be careful.
Generally "factory overclock" refers to board partners shipping GPUs at higher clocks than specified by the GPU vendor. i.e. I have a Vega 56 card which AMD specs at 1474Mhz but the default boost clock on mine was 1596Mhz.

The term is rather silly when the card is coming directly from AMD though.
The article you linked is very specifically talking about quantum computing.

The NSA seemed to be suggesting that practical quantum computers were coming so soon that people who had not yet upgraded from RSA to ECC should not bother to do so, and instead should save their money for the future upgrade to post-quantum protocols.
Shortly thereafter, the NSA released a revised version in response to numerous queries and requests for clarification. The new wording was even more explicit in its negative tone on the continuing use of ECC: “...elliptic curve cryptography is not the long term solution many once hoped it would be. Thus, we have been obligated to update our strategy.” Although other parts of the statement assured the public that ECC was still recommended during the time before the advent of practical quantum computers, the overall impression was inescapable that the NSA was distancing itself from ECC.
Fully agreed, (alive or not!) and commented to the same effect before I saw yours.

'RSA is easy to get wrong, stop using it' would be better. More descriptive too.

https://news.ycombinator.com/item?id=20382895
Back from a couple days without internet; the one thing I'd add in this conversation is that while on the road I do sometimes want to change AC settings other than the temperature (fan power, AC on/off, vent selection, recirculate).

Those are all touchscreen items here that I wouldn't want to do while driving.

In my own car I know by feel that my knobs left to right are vent, fan, temperature, and the button row below is AC, rear defog, and recirculate. I can change any of these without looking down.

With a device like a smartphone I'm sympathetic to Steve Job's argument that a reconfigurable software keyboard that can pop in and out is great because it can be text input in one app or a fullscreen calculator in another, and you can add more features later via software.

I don't buy that argument for a car where the hardware exists, is basically single purpose, and isn't going to get a 7th air vent option in a software update next month. The vents are the vents and I'd like a knob for them please.
Unemployed people are, in current society, often dependent on the state to survive, which means taxation to support them, which many people don't like and often implement policies to deny them that support.
Obviously doctors need to know neither Latin nor Greek, nor any language other than English and the local language. (BTW, Fun fact: All international airline pilots world wide speak English.)
I might be misreading, but it seems like you advise against IES. If so, does that extend to ECIES? I ask because the actual article actually suggests ECIES.
Running ads was totally worth it.
Could you give examples of megaprojects happening outside of the west?
I wish there was something as simple to use as Discord but selfhosted. The closest thing I've found so far was rocket.chat which is only halfway done or Matrix which has close to no admin tools available.
Technically we could simply stop all of this IT stuff, re-allocate the world so everyone gets an acre and dissolve the government. No one would work more than a few hours per day (tending the garden, etc..) The problem is trust. We can't trust someone else because there will be stealing. Those thieves will meet others like them that steal, rape, pillage. Cycle of mis-trust starts all over again and societies form to do something about it. Then things go from there. Now that I think about what I write, we have Facebook because of thievery (just a joke).
I do get your point of not starting over, but just listing the case why we get complexity. Some of it is likely not necessary but it's usually because of something.
The hard part about getting Alice's key is making sure that it's actually Alice's.
When I was at Apple back before Steve came back (when they lost a billion or so) we knew there would be layoffs because the rent-a-guards were standing at the doors.
Seems to be advocating more for thoughtful criticism (and meaningful discussion) than anything. Is it going to make things better? To what degree, I don't know, but I'd imagine it helps with people creating pull requests and then disappearing from the project (which I've seen multiple complaints of this behavior over the years). It'd make them feel more of a stake in it I'd imagine if they're not receiving blowback from the maintainer for daring to create a pull request (based on the "bads" in the examples).

I've personally never seen anything as bad as the examples given (I've read stuff from Linus that are there, but seems like he's trying to change the atmosphere there now), but if the communication is that prickly, I can't imagine it is going to receive a ton of outside help in the form of pull requests (that could be intentional though).
تحميل برنامج إنترنت داونلود مانجر IDM 6.33 Build 3 للكمبيوتر مجاناً
You can't do that in Android on the S9+, nor on any variants that i know of on Android 8 or 9. All you can do is restrict it to a long press. If you have a link to reassignment, I'd like to see it.
Also, people aren't generally fooled by bad road lines.
In summary, and just because you asked, Eric S Raymond is a mediocre programmer who has made a career of trying to pose as a hacker, define what a hacker is, tell people how to become a hacker, all while viciously, personally, professionally, and unfairly attacking actual successful influential hackers like Richard Stallman, including his philosophy and his life's work, by hijacking and distorting the definition of Free Software and the very definitions of words in the hacker's dictionary, to reflect his own extremist narcissistic racist political ideology, which most certainly does not align with the non-bigoted ideology in the Hacker's Manifesto: "We exist without skin color, without nationality, without religious bias."

https://archive.org/stream/The_Conscience_of_a_Hacker/hacker...
I feel like someone could corner the market just by making tab complete that works as well as IRC did and adding a full dark theme to the desktop client.
Elon Musk says free self-driving chip upgrade could come to older Teslas Q4
The scene releases are usually the highest quality possible released in exclusively closed private trackers - sometimes only paid accounts are accepted as a member (if at all).

Everything else probably 95% you see in the wild are transcoded to lower bitrate and stripped out of all the extra files in the container (sub/multiple audio stream/highbitrate audio) to smalled files - because thats what most people want:

Small Video easily playable on a regular screen.
I think that GDP (and therefore inflation) don't actually measure what they used to.

You can measure the number of cars being produced and houses built. It doesn't really matter how you quantity value the value of a 1999 vw golf relative to the 2019 model. Once iphones, Google, Spotify & such get thrown into the mix... GDP just doesn't tell us much about how economic output has changed over the last 20 years.

For the average person, I think we need to think in different terms. Housing, education, transport, consumables and manufactured goods & services.

Generally I feel the trend (in Europe, at least) has been to big gains in the latter categories and stagnation/negative growth in the former. Housing affordability has gotten worse. Transport has gotten more expensive. Education has gotten more expensive (both for students and in total) and is "worse" in terms of leading to predictable career/income outcomes... a key decision-driver of education choices.

Meanwhile consumables (food, washing detergent) have gotten cheaper. Manufactured goods (furniture/iphones) have gotten way better/cheaper. Services are a mixed bag (financial services dragging the whole category down).

These categories are generally not fungible. No reductions in the price of food or iPhones (not even free) will help make housing more affordable.

GDP... I'm not sure what it really measures anymore. It's become totally abstract. Meaningful within models but not indicative of anything about the world.

I think it had meaning 40 years ago, but the etherealization of the economy ate it.

All that said... Uniquely low GDP growth relative to high S&P returns. Picketty is probably going nuts.. in soft spoken French.
I think its wrong to think of jobs as either "necessary" or "unnecessary". It's more useful to consider them either "useful" or "useless".

The former criteria would mean eliminating most of the entertainment industry, because although it is useful, it isn't really necessary for life or an economy is it? But yet that's a terrible idea because entertainment is useful and people want it.
Are you younger or older?
Fantastic article; it paints a great picture of the journey taken & accomplished achieved.

My personal take is that the next major milestone for Erlang/Elixir will be a significantly more performance BEAM. Be it JIT or reworked Hipe.

Elixir (& Phoenix) brought a ton of interest from the Ruby community. The only remaining aspect that would keep a Ruby developer using Ruby is the perf vs Erlang. Today, for many raw perf task there isn’t a meaningful difference in speed (note I’m not taking scalability). As soon as the speed difference becomes meaningful, Erlang will get another wave of people.
Hey All,

I am iOS Software Engineer who currently works in one of the leader food-delivering app in Turkey, so I am highly experienced in technologies in SocketIO, Location Track etc. 2+ years iOS Development with Swift & ObjC & React-Native for Javascript languages and add to this, some side projects experiences in NodeJS with Postgres and ReactJS.

Location: Istanbul, Turkey
Remote: Yes
Willing to relocate: Yes
Technologies: iOS, Swift, ObjC, TVOS, React-Native, Node.js
Résumé/CV: Upon Request
Email: itsemrah@protonmail.com
You can post to Instagram from a desktop browser if you set per-site user agent to fake as mobile browser. Then you can use screen automation such as Selenium to integrate with the headless browser.
> "Management" sees unemployed people as a great asset.

> laborers who see them as competition

More like people getting their tax money through unemployment benefits.

No one thinks "God damn I love all these low skilled workers, they're such a good thing for our economy". Juts look at the US, lowest unemployment rate in decades because somehow it's the only metric that counts now, even if that means that the lower 5% has to work 2 full time jobs to make it work.
It seems they have reached a point where they just want to make a lot of money and they are trying to work their way backwards from that goal. But they don’t have a deeper business goal.
Slack `/remind` not good enough? Task Reminder can create tasks from anywhere
I built a similar setup back in April: https://chollinger.com/blog/2019/04/building-a-home-server/

Very happy thus far.
I use Electrum with just a passphrase. I don't actually have a digital file that once can steal, I simply have a written sequence of words that I keep in a safe place. I've actually memorised them but I'm too paranoid to destroy the paper copy. I write them in to reconstruct the private key only when I need it. I do this on an old laptop that is only used for this purpose.

For my personal convenience vs security threshold it's quite helpful but for those who trade daily it's probably too much effort.
It might be more intuitive if you think of the wires as the two sides of a battery. You can safely touch either the + or - side of a battery, even a high voltage one.
Nobody is telling you that you can’t play around with crypto in your personal projects; you’re attacking a strawman. What they mean is this:

> Yes certainly don't use homerolled crypto in production.
Honestly, in my opinion, the fact that this type of thing can even happen suggests the format of code-review has a problem. I propose it's better to:

1. Sit at the desk of the person and pair-code review. Helps avoid basic misunderstadnings, and also is more private that a permanent written record where people may feel defensive about their choices. Also it's easier for a lot of people to be rude through the internet.

2. Write in small notes if any must-address concerns arise and are agreed-upon (e.g. "Security?", "duplicates function x")

If your devs can't interact face-to-face, then I think you've got major cultural problems or hired the wrong devs.
Soundblaster and vga cards came out before windows 95 did. You had games like Wing Commander and Doom and such that came out well before windows gaming existed.
Totally depends on definition of "homeless". Some use a definition based on whether someone has a roof over their head most nights, the narrowest definition possible. I prefer a definition based on legal rights: Does the person have property rights (owners/renters/housing benefits etc) in a stable domicile. That means those couch surfing, in shelters and illegal residences are counted as homeless alongside the people literally sleeping in the open air.

Few would doubt the rise of the "working homeless" across the western world. The concept of someone having a fulltime job and still not able to afford rent is new. It is today's sharecropping imho.

And then there is the other modern phenomena: the legally mandated homeless. Every large city in the US now seems to have a bridge or overpass filled with people who are not legally allowed to live anywhere else. Stringent limitations on where certain convicts may live is also new.
I was sort of surprised that he wrote a whole blog post about what's wrong with RSA and never mentioned that it doesn't provide perfect forward secrecy - if the private key is ever compromised, every communication that was ever secured using that key can be decrypted after the fact (if we're nitpicking).
Easier way to boot a group of people off of Yahoo Games back in the day when you wanted to clear up a room...

Just post in the general chat area.

“Hey, to speed up Yahoo Games, press alt-f4.”
This is a great post, but I wasn't sure what title to put because the original is so long. If any mods can come up with something more suitable, please do.
I ended up expanding this into a blog post covering not the linked article (though it shares some of the same flaws), but the official docs: https://pythonspeed.com/articles/official-docker-best-practi...