skysight-inc/HackerNews huggingface dataset:
Why isn't "computer security" or "infosec" good enough?
Higher frequencies will get filtered out. They don't have the power to vibrate the glass unless it's very loud.
the OP is the person who wrote the blog.
or zulgan on HN
I’d damn near take that 90 over the 2 stroke. The father in law just got one on his McLay boat and it’s quiet with none of that 2 stroke smell. I’ve lost count of the number of times we’ve been idling out at sea idling and asked each other “is that thing still running?”
Sometimes I wonder how much money is out there waiting for the Magical HN Unicorn that is anti-cloud, anti-network, pro-RDBMS, pro-POSIX, old-school Dirty-Grandpa-Fighter[0] ultraconservative about computer security. My gut tells me $LOTS.

[0]: https://youtu.be/Civy151wAH4

(sorry, youtube and B-movie but hey... analogy!)
I am in Europe and a reputable local online shop shows that i can get it after a week for 690$ but that is including VAT (575$ without VAT).
No. Boot camps are for beginners, not people with 20 years experience. Their existence is a direct response to a lack of qualified candidates and their sole purpose is to increase the labor supply.

It is a negative to go back to boot camp for you just like it would be a negative if a research professor went back to junior high.

However, if you could find a position TEACHING at a bootcamp that would be better.
Most normal car loans are for four or five years and leave you about even three years in so If you trade it in you don’t owe anything.
Isn't Patreon a direct donation?
>>> Do cyclists pay for their road usage?

Yes, definitely. Granted, this may vary from state to state, and I don't know the situation in California. Most of the roads that I travel on are city and county roads that are paid for out of my property taxes. Ironically, our property taxes are higher because living in a bike friendly zone with good access to public transit increases our property value.

I'm not allowed to ride my bike on the freeways, and I avoid the major federal / state highways. I suspect that those are what suck up the most money.

I pay income tax.

Most cyclists still own cars. My family pays for registration of two cars that we drive less because of our bikes. We pay gas taxes when we drive, plus license fees, and state-mandated insurance.

Our bikes do negligible damage to the roads, and we reduce the need for both road construction and parking space.

I'd be willing to bet that if we analyzed all of the numbers carefully, we'd find the net effect is that motorists and cyclists both pay -- to subsidize the trucking industry.
Tribal societies not having a word for blue is fascinating. How do they describe the colour of the open sky??

Blue pigments are quite rare in nature, but seeing the open sky has to be a universal human experience.
I don't understand why you are saying that.
Decently interesting article (more of an interesting subject than the article itself), but I hate these current trends in article titles. There's absolutely nothing in this article about how they built it.
Thanks for the comments.

I don't see that using HTTP/2 is realistic.

(a) Are you saying that using HTTP/2 from the browser makes headers in your infrastructure secure?

(b) Some of our enterprise clients use security proxies (e.g. Cisco WSA) which do not support HTTP/2 and force connections from the browser to use HTTP1.1. Aside: Cisco WSA is super crappy: we have recorded a repeatable corruption that passed information between HTTPS sessions (It was a obsolete device so we didn't report it to Cisco or the client - but I would bet good money there are plentiful major security flaws with Cisco WSA).

(c) If you are suggesting using HTTP/2 between frontend and backend, that seems unrealistic to implement.

From other thread:

> If you have a front-end and a back-end, and they talk to eachother using HTTPS, that's exploitable

I couldn't understand how - surely packets would be completely broken (how can you append a valid packet to an HTTPS request, or get a valid HTTPS reply to an another connection?)

Perhaps a spiffy name, an icon, and a cool website would give this more visibility HAHA!

PS: I am surprised this isn't getting more attention on HN - it seems like a really fatal security issue that will affect heaps of sites - oh well.
The main benefit of purely functional systems is function composition. The ability to build entire programs through the composition of function primitives. Composition without dependencies.

The problem with javascript is that this concept is entirely lost on react developers. Due to the untyped nature of javascript and it's close linkage with html. HTML is made up of dependent components and this essentially puts dependency injection into javascript leading to JAVA like issues that the functional paradigm was suppose to solve.
Sileo 1.3.2, bundles both Cydia and Sileo as default package managers
Atrocious is a pretty strong word in my opinion. That said, I don’t disagree :)
They do take a cut, that's their business model.
They absolutely can and will say it's all of those things - and for the most part the client will be none the wiser. It's practically the first step in relationship building for most agency pipelines.
Minus the Patreon fees.
8chan was shut down in an attempt to disrupt the QAnon movements' communications.
Why would the movie chains need MoviePass? AMC already had its own online system for payments, reservations, had mobile apps and website and had handheld system to allow e-tickets. They had the free AMC Stubs program already where people could register. Adding the subscription plan wasn’t that heavy of a lift.

I’m sure Regal had something similar.
Since each email you send requires a login through your outgoing client (e.g. SMTP), your emailer has to know the server address, security type (e.g. TLS), etc.

Most clients configure this the first time you try to send vis that server and store the credentials for future use. You only need change these settings if your server credentials change..
I used to be a loyal subscriber to Linux Journal and would await every issue. Then I started getting junk mail from (if memory serves me) ACM. When I pressed them about it they revealed that they'd gotten my physical address from Linux Journal.

I cancelled my subscription and never picked up another copy.

I can't help wonder how many other people got annoyed at that kind of behaviour given the cross over between Linux and Privacy.

Note: I'll still mourn it's loss because it had a huge impact on my teenage years.
Damn you, Millenials!
Are we working hard enough?
I don't necessarily disagree with you but I have to push back on the naming. There has never been a time, before or now, when Iran was called Persia. Persian is a western xenonym and a modern one. Iranians have always been called Iranians. From the Zayandeh River Culture to the early Kura Araxes culture to the Achaemenid Empire to the Sassanid period to today. So the admitted pedantic quibble about "Perisa" is way off.
Are you sure you need a bootcamp? It sounds like you are selling yourself short and/or not getting job prospects in the right fields. As someone who recently was reviewing resumes bootcamps are so variable in quality that they are in the same boat to me as no-name certifications. A bootcamp is just making the time to spend dedicated effort for you to learn something and it's only going to give you as much as you put in. If you've spoken to people and heard success stories it's likely not because they went to the bootcamp but they used that time effectively- this is the common advice for any of these short-term career shift sort of programs for any industry.

Are you sure that AI or large scale systems actually exists in the markets you are looking for? Not all markets support the same industries and as you would probably know the number of times it's just lip service and held together in the back with cellotape is still amazingly high. To really get into this sorts of things you would probably be having to pursue a role labeled as architect if it wasn't a market where these things were relevant. The kind of job you are looking for probably isn't being posted in a place you can find it, and I have found that recruiters are the gatekeepers not any public posting. I haven't tried cold messaging recruiters of companies I am interested in on LinkedIn but I think that's probably what I would do, you could also cold message engineers working in something you find exceptionally interesting.

Try some of the alternative sites like hired.com where it just isn't blindly submitting resumes.

Are you just interviewing poorly? Is your resume even relevant? I remember reviewing someone's resume last year that still had Windows 98 as a skill. As just a general resume trend listing every version of a thing you know is less popular than listing the types of skills you have and if they want further details be ready to provide it.

From the salary side are you just capped out for the market? There are definitely some places where 150k is the ceiling that's very hard to break without some sort of exceptional relationship with you as an individual and the employer, or an industry that just happens to command higher salaries. If you want to get into say 250k town in a 150k market you've got to be doing something differently than just being a tech lead and trying to climb the ladder.

A couple weekends to get up to speed so you can talk to the interviewer at the same level will always do better than 'I can catch up' but in the conversation it is clear you are missing the big picture. Someone who is living and breathing the problem but just needs to switch gears to actually apply themselves to it will go to the top of the stack versus someone who is like 'teach me.' So many people show up to interviews and show only passing interest in the work to be done and the conversation. Don't be that person.
On the ageism - I feel for you man.

But I recommend not doing one. You are skilled enough that you could dedicate yourself to 3 to 6 months of serious study of the technologies you are interested in. Teach yourself by doing projects that interest you, and then use those projects as evidence of enthusiasm and experience.

Boot camps might be beneficial if you don’t feel capable of teaching yourself, but they will have so much training-wheels stuff that you are well past so it will be a mixed bag of value. Plus it costs a lot of money.

I don’t think the fact you did a bootcamp will increase your value much. Certainly not as much as self study and projects in a public git repo.
Government wants to use cyber so we use cyber.
Announcing the Obstacle Tower Challenge winners and open source release
My background is mainly frontend, but I'm well versed in backend as well. I've been actively advocating at my company to stop with this whole separate frontend and backend, and instead just return plain HTML and some basic JavaScript when needed.

In most of my personal projects I've been following this approach too, and I must say, I'm so much more productive. I don't find myself constantly switching between browser-, terminal and VS Code-windows. I don't have to do validation twice anymore, and know perfectly where all my data is coming from.
OSs are not most software and are not designed around the instruction set changing underneath them during normal operation. Why would they be? You can't physically swap out a processor while the system is booted and you can't swap a virtual processor either.

It works fine if you shut everything down and reboot the system, but that is often undesirable.

The whole point of the feature is that the VM can be migrated around different physical hardware without having to interrupt service. It just suddenly is running on a different host instance. But it has to be the same type of processor... or at least the same feature set. "Close" is not good enough, it needs to be a 1:1 match.

You can manually disable features until you have found the lowest common denominator between the feature sets of the different processors. But obviously the more types of processors you have in your cluster, the more problematic this is. In very few clusters will you find servers of mixed types, you buy 10,000 of the same server and operate them as a "unit". You don't just add in servers after the fact, sometimes you don't even replace failed servers.

And that hardware decision will have been made years ago, very often. The server market is hugely inertial, it's nothing like you putting together a build one evening and then going out and buying parts and putting it together.
We're pulling them into the Internet Archive now. Very sad to see this one go... lots of memories.
The population argument makes little sense. Chinese like Indians speak a multitude of languages and have very different cultures.

I don’t think there are 2 places in mainland US that have as distinct cultures as pretty much every region of China has from each other (primarily because everyone speaks English in the US, while people speak different languages in different regions of China).
I bought a new outboard for my fish-a-dinghy a few months ago, and I looked into getting an electric one. The prices are converging, but it seems like there are serious reliability issues with the (few) electric outboards currently on the market. I ended up getting a fuel-injected 4-stroke.
I've been working on a new scheme for decentralised encrypted (group) messaging bus over at https://xn--nma.com/ unlike many other schemes, forward secrecy is not a goal: When I invite a friend to a group chat, I want them to be able to obtain historical conversation messages.

For your normal end user (at least what I think of as common: see how facebook messenger works, as well as slack, discord and even how many irc chat rooms have public logs), how is this MLS scheme useful?
If there was zero slippage there would be zero acceleration.
Supercode me up a winders version!
the top.
I had a small sail boat with an electric inboard engine. The electric motor, through pulleys and a belt, turned a shaft to turn a prop. All of the machinery from the shaft to the prop would be the same whatever was used to drive the shaft. It was a joy to use. Absolutely quiet, always worked, instant power whenever wanted or needed. Basically zero motor maintenance, no pollution or oil anywhere. The shaft is effectively watertight through seals called packing glands. You get a drip but it is manageable and needed for lubrication.
Interesting, I actually wrote 'ȱ.com', hacker news seems to expand to punycode.
Show HN: Grateful Place, a community for growing resilience, peace, and joy
It is complicated. The share US theaters pay studios changes each week. So studios want films with up front popularity, studios want sleeper hits.
Oh yeah, excellent high level summary. I had seen it mentioned, but had never watched it, thanks!
"The problem with that argument is that there's no such thing as a "public square" on the internet."

There's also no public square in magazines, newspapers, radio, TV, libraries aren't required to stock your book, nor book stores, no one has to lease you space for a store, etc. You have the right to speak, no one has an obligation to listen or pay attention. No one has an obligation to help you speak, etc. That's what I mean when I said, "do not confuse public square with private property." Just because everyone watches TV and uses the internet does not mean anyone has a RIGHT to express themselves there.
There is longform.org

If you find any others, share the wealth.
The 2nd shot is detailed in Dune.
Raspberry Pi: Home Monitoring and Control
Stateful Serverless and Critical Sections
I recommend Udacity or any other type of structured learning. I personally have a difficult time learning something unless it's in a classroom-type environment or a virtual classroom.

When I was catching up to development trends bootcamps weren't around. I went to a ton of Meetups and I didn't understand a lot of what I heard. I'd note things and research them and hearing certain concepts over and over paid dividends when I was eventually able to make connections in my head.
But there are tons of laravel sites, so there is a substantial profit motive to look for vulnerabilities in them.

It's like, outdated Wordpress sites get hacked all the time, but if I just threw together my own shitty blog in PHP and MySQL there's almost no chance it would, as no one (generally) is going to take the time to figure out hacks for just one site (especially for SMB).
> ... the current alternative, Open Access journals: they charge authors fees in the high 3-digit range to cover their costs.

Not the current alternative, just one of many and not the best one: https://gitlab.com/publishing-reform/discussion/issues/96

Calling the APC "the OA model" and conveniently forgetting to mention other options has been precisely the common publishers' rhetoric feeding deliberate public confusion in trying to identify OA with APC, which needless to say, helps their business objectives.
I think you are not making enough of a distinction between short-term trading based on technical factors and long-term value investing, which is what Warren Buffet did/does.
Social Anxiety Forums to Join Today
https://www.businessinsider.com/wework-ark-fund-to-buy-comme...
(September 2015)
Try a minimal set up with create react app with typescript and react testing library. Go through the react and typescript docs. Try Formik for easier forms next. Axios for HTTP requests. You can then venture into client side routing with React Router and finally may be Redux for complex state management.
There's a beautiful essay by the late William Harris about exactly this: http://wayback.archive-it.org/6670/20161201175416/http://com...

The ancient Greek word purphureos, which comes into English as purple, meant something like "dark and shimmering", and described wine and blood and the sea as purphureos. Much like we describe many things as "iridescent" that aren't rainbow-y (Gk iris = rainbow)
Oh but then you add code splitting. And we've come full circle.
Here's a picture of the test apparatus. This barely resembles a typical wind tunnel. Anyone who know these things care to provide a illustrated guide to thing?

https://media.defense.gov/2019/Aug/05/2002166487/-1/-1/0/190...
drakeo the ruler was in court because of his lyrics
The Computer That Controlled the Saturn V – Smarter Every Day [video]
New Chrome update: no more HTTPS or www in address bar
in The spirit of HN camaraderie: can you share salary info and your transition process?
"Ever worried about those people who are reading their phone while walking around? Now you can randomly put this hat on their head."

The best thing about it is, the people who need and want the device aren't the ones walking around reading their phone, it's the ones who can't help but mind someone else's business - and this merely feeds their need rather than satisfies it. So there will be an never-ending market of unsatisfied busybodies.
That was only the last 20 years. Imagine what would have been possible last 50 years already.
You have too many roles. Why not two: eng and senior eng.
You are losing good eng to roles.

As tech move faster, an architect that stop coding due to management tasks, should not make technical decision.
I would be interested to know, which CI tool can check "that each concept has exactly one name throughout the codebase."

I thought code reviews are the only way and then you need to have every Dev aligned and on the same page on this topic... Which never happens. :/
The Trello Tech Stack (2016)
“I wouldn’t trust any article written in English...”

What if the article was written by someone from China?

“Zhang Jun is Dean of the School of Economics at Fudan University and Director of the China Center for Economic Studies, a Shanghai-based think-tank.”
This is great because it's so simple, and I always try and explain it but it takes way too long. You've managed to very clearly explain why it will never work to the extent they pretend it will.

It will work, but the market cap is much lower than everyone thinks, and competition will be fierce once the subsidies go away.

edit: typo /s/extend/extent
> every newsroom we showed immediately wanted to acquire the company :D

That's an amazing story. Where can I read more about this?
So they finally jazzed it up
I love this comment. So fucking dead-on in my experience.

Not to mention, saying any of those things would make you a "bad culture fit" and potentially break the "no assholes rule" if you argued the point.
Yep, currently around 200 patrons at $1153 per month total.

Compare that to, for example, the top 200 "adult" (porn) projects on Patreon: https://graphtreon.com/patreon-creators/adult-games

One example would be DarkCookie with "SummerTime saga", a "dating sim" at around $50,000 US.

Or another example at 769 patrons and $2,287 per month: "Porn Empire is a simulation/management with light RPG elements where you play as an amateur porn producer.
Start small, shoot amateur porn and as you progress, you earn more money, buy better equipment, pick up better girls and train them"

If people really cared they would have signed up. But the proof is in the pudding. What people really care about is totally different from what they say publicly. What they really care about, apparently, if you follow the money, is interactive cartoon porn.

I wonder if Patreon would consider diverting a small amount of the porn money to worthy causes like Linux Journal.
Wow. That makes me consider upgrading. I feel guilty just staring at or hearing my (2 stroke) motor idling!
Dismantling Free Markets Won't Solve Biodiversity Threat
Smart contract auditing = block chain? Are those jobs still around? I thought that had a 1 year shelf life
Peeking through stock option exercise windows – Robert Heaton
You don't have to refresh the page to rerender a part of it while still keeping the UI and all logic on the server. You don't need client side js view frameworks to make server side ajax apps.
But it is inarguable that there is a finite and ever decreasing amount of {helium,petroleum} in the earth. While we may not now be at peak [insert resource], and may not be in your lifetime or mine, such a point must exist and I would bet that the children of today’s newborns will be alive to grapple with the consequences of it.
It is public information, how can they not know it?
I know I could easily study up by myself. I have done this my whole life. I am just getting the impression that without being credentialed in some way nobody really would give me a chance. Especially in a new field.

My current job is pretty much repeating the same thing over and over again with ever tighter deadlines. I am at the same time stressed and bored out of my mind. There is no intellectual or technical challenge, just always more pressure. I used to be pretty cutting edge but the last 5 years it was pure stagnation.

Somehow I want to break out of this but between age and lack of the latest stuff on the resume it seems it's really difficult to get a foot in the door somewhere else.

Do people really look at GitHub repos? I have never had anybody ask and I have never looked myself.
The question is, are you auditing the final work being done by your "teams" and asking whether it could have been done more efficiently / simply?
The CEO apparently personally owns some properties and self deals them back to WeWork on lease terms. https://www.businessinsider.com/wework-ceo-adam-neumann-offi...
The Argument Against Quantum Computers by Gil Kalai [pdf]
Haunted by Data – Maciej Ceglowski (2015) [video]
Solid article, I’ve underestimated the liberalization of the Chinese economy, especially in regards to technology and advanced manufacturing. Anyone know what the proverb means?
I'd argue that if we prefer it so much, the free market would take care of it.
> Latency is more important than bandwidth when it comes to reading and writing data, except for specialized work loads.

It is also worth noting that there is pretty big delay between CPU and PCIe.
Should be possible to compile Java such that it runs very efficiently. Java is commonly used for Android after all.