skysight-inc/HackerNews huggingface dataset:
> Another lesson is: never run any unsecured webserver/service on the public Internet, never ever, not even for debugging, period. Don't listen 0.0.0.0:80 [...].

This is why Ubuntu's "ease of setup" policy of listening on interfaces with things running on installation is such a poor choice. It may not be terrible on a workstation[1], but it's awful on servers.

[1] Actually, it is.
1. Elixir/Erlang
2. Binary exploitation/Reverse engineering
3. Danish
4. Miniature painting (brush and airbrush)

Things that haven't made me a better developer: Kubernetes, GCP.
Physics — always wanted to understand how quantum mechanics works. I have a masters degree in CS, but it included almost no modern physics. After a year of fiddling with the Griffiths book and spending about $500 on other textbooks (less useful, though entertaining), I am definitely no expert, but I am starting to learn some things.

Erlang — because I love the actor model, but I only tried it with Scala/Akka. Time to try the original.
This is straight bulllshit. This is the first source:

> a toxic worker is defined as a worker that engages in behavior that is harmful to an organization, including either its property or people.

By that definition, you become toxic when you introduce a bug. You become toxic when you make a mistake.
The phpCE 2019 conference in Dresden has been cancelled and won't be continued
Not a dev but I have been learning python more. I did a lot of things in the past with 2.7,now learning 3.x.

That aside,malware analysis. I've tried using Ghidra a bit but I've mostly been learning how to use procmon for dynamic analysis in windows and IDA to unpack and figure out your run of the mill windows malware.
Is that a bad thing, though? I mean, it is for people who like to drive, but I think the benefits to everyone else outweigh the preferences of car owners.
Isn’t it different though? A lot of people are reading your comment on an OS developed by Google, and mostly everyone they know is a user of Facebook, a company working on creating its own currency. Altavista, MySpace, and Friendster were never so powerful. They felt less like companies and more just like websites, if you know what I mean.
Get either:

The Dell Precision 5520 (or whatever the latest verison of that is) with Ubuntu pre-installed (you can easily wipe and reinstall with distro of your choice, but this guarantees maximum compatibility.

Pros:

- Premium hardware (better than Apple IMHO, and I love Apple's hardware)

- Nice trackpad

- Good compatibility with Linux (except the Nvidia Optimus stuff, so avoid that if you can)

- Good warranty

- Touch screen compatible (which works great with Gnome)

Cons:

- Price is better than Apple but definitely on the high end

- Compatibility isn't perfect (tho it is really close)

The Lenovo T{4,5}80

Pros:

- More hardware for the buck (excellent value)

- Super easy to self service (basically anything)

- Highly compatible with Linux

- Can get Nvidia card for higher-end graphics/gaming

Cons:

- Body is a little plasticky and looks cheap-ish

- Bezels on the screen are kind of big

- Intel graphics won't let you do gaming or video editing (although I do use Kdenlive on mine. It takes forever to render but I can edit just fine)

I've had both and they are awesome. My current setup is Lenovo T580 32 GB RAM, 1 TB SSD running Fedora 30. It's flawless and worked out of the box (after running the Fedora installer).
I agree. I'm using a T480s with no GPU and Ubuntu 18.04 and have no regrets since switching. If you really need a GPU, consider the P1 and X1E series.
it is important that Kazakhstan's government lied about the purpose of certificate: it said it was necessary to access government sites and for connection security. But actually connection security was compromised.

Browsers and OS vendors must provide clear explanations, when adding a third-party certificate. For example, Android shows a notification that traffic can be intercepted and allows to disable third-party root certificates.
Why do you want a laptop ?
Building your own computer have never been easier. Just buy the parts and plug them in. (and make sure there are drivers for Linux). First pick a mother-board, probably a server grade MB from Supermicro, because many HDD, controlled fan connectors, memory slots, and possible also dual CPU, and many PCI:e if you are into machine learning. Then read the manual to see known working modules. Just an example of what you can't do on a laptop is having 6 disks in mirror/stripe mode using ZFS. Instead of taking the computer with you, you can SSH into it, maybe use X-server to run the apps on the work machine. Just leave it on when you go home or travel, so you can run lab on it. You can give shell accounts to your jealous colleges, run the git server on it. Use it instead of "cloud" computing and save thousands of dollar, etc.
how on earth would more competition decrease the environmental impact of modern capitalism?
Debt is usually paid off by inflation. As in: If you have a non-zero inflation, your GDP grows accordingly (all other things being equal), so you can take on new debt and still have your debt-as-percentage-of-GDP stay the same.
I absolutely love The Little Prince, and it's very short, so it makes a good first book. I think that would be my top recommendation.
Just to toss in my two cents about testing:

Unit tests are for refactoring and declaring behaviour. Additionally, a lot of people have made the same observation: Code that is easy to unit test tends to be more modular and have better architecture. If you are struggling to test a function, think about how you can change your design to make testing easier. It will probably improve your code quality.

Integration tests are for finding bugs and exceptions and should be a part of CI/CD.

You want both. The more testing the better.

Comments: I find comments, outside of docstrings, a smell. Even then: Docstrings often become a substitution for a decent type system, so maybe think about what is happing there as well.

Documentation should be generated from your codebase. Otherwise, it will inevitably become out of date as people forget to update it. If you need to comment on what something is doing, usually you can move that behaviour into a function and test that function.
>Further, even if you invest in broad market ETFs you're still picking winners.

What you're not doing is provide capital to companies or contribute to the information processing that makes markets efficient (at least not very much).

Crucially, bank loans (as well as IPOs, rights issues and bond issues) provide capital. Trading existing stocks doesn't.

So when it comes to capital allocation, you're not picking winners and losers by buying an index ETF, because no capital is created at all.
This is why I set most services to listen only on localhost. When I need to expose them externally, I put them behind nginx with http basic auth. It's not top security by any means, but it does the job and provides enough security to stop stuff like this. It's like the old saying about outrunning a bear: you don't have to be the fastest guy, you just have to be faster than the slowest guy.
Freshermeat – Open-Source Security Software
Yeah Burke Gilman should get even better whenever the missing link is completed.
I'd be interested in knowing which part of the comment you don't agree with and why.
Seeds is a folk horror tale older Book of Genesis pagans agains the Church
You're right; the criteria was incomplete.

Damore was fired because his proposal was contrary to the majority and it became widespread knowledge.

Were Damore's part of the discussion never leaked, then I assume it would have been a slap on the wrist or just a shrug.
> Taxes are already pretty high and unpopular.

Taxes on income, yes. Taxes on spending, yes. Taxes on capital gains, not really. And taxes on property are virtually nonexistent. And where's that financial transaction tax people were talking about 10 years ago?
I also switched from a Macbook Pro to a Thinkpad T480 running Ubuntu 18.04. Everything except the fingerprint reader worked out of the box, I haven't had any hardware compatibility issues so far, been running for 2 months so far. I picked the T480 because it was the last one with a removable battery.

Initially I installed dualboot w/ the existing windows install, but after a week I found there was no reason to flip back to windows and I formatted the whole thing and re-installed Ubuntu.

I've been using Macs for development for so long that I'd forgotten what using a non-mac keyboard was like. Took a couple days to get used to it, but now there's no way I'm ever going back.
You've just written a load of crap!
Oh yeah, the "infected before you can install patches" time
Oh, sure, I'm not arguing that Europe was less tumultuous than China. There were many, many schisms, and wars however. Had some of these civil wars or invasions from Mongolia, Japan, etc within China had gone a different way, they could have ended up as fractured as ancient Rome.

Here's a few hundred wars that occurred during the past couple millennia: https://en.wikipedia.org/wiki/List_of_Chinese_wars_and_battl...
Meh. TypeScript is the real successor here and JavaScript will seem like programming in C with all its weak typing and its lack of advanced language features.

I do see TypeScript slowing becoming C# like, which I can only say it is a good thing.
> When people talk about simplicity in software, they don’t necessarily refer to ease of use or number of lines of code, but instead it’s about how understandable a solution is given their shared knowledge.

Rich Hickey gave a great talk on the topic of "simple" vs "easy": https://www.youtube.com/watch?v=rI8tNMsozo0
These posts keep repeating the same things.

"There are two hard things in computer science: cache invalidation, naming things, and off-by-one errors. - Jeff Atwood"

This is not novel, nor insightful.

"Premature Optimization Is the Root of All Evil". I've reached a point where every time I hear someone say this, I legitimately ignore everything else they say.
I think that Rapportive started as a Chrome extension. I don't know much about the business but I believe the founder went on to start Superhuman.
If the reduction in stigma got more people involved who did produce quality work, then they've improved the field of physics - so in a way, yes.

You may reject the label 'physicist', I'd understand that, but results are results. (Edit: in which case, does the label matter?)
Interesting. I love the idea of generating documentation from code - it does a lot of things right: Single source of truth (right now we have 3), easier to update when changing code as it's right there.

But I'm not sure everything fits in there. Where do you document processes like how to test stuff that isn't possible to test in a local-dev environment?

Or .. what the IDs that have some business meaning, mean.
Right, but the process of going from no trees to enough trees that can change climate enough to sustain themselves is very hard, and one bad year in the process can reset many year worth of progress.

The linked article made me think that perhaps it is possible to create a new species of a tree that would bootstrap this change naturally. With new gene editing methods, it should be possible to combine features of different plants to do this.
I think you're badly overestimating the speed of development in defense tech. The F-35, a comparatively conventional aircraft, started development 20 years ago and look where it's at. We'd be incredibly lucky to have an even slightly functional one-off prototype of an unmanned fighter 20 years from now.
Indeed. Instagram was (is) just a place where people congregate on-line, with particular focus on the visual aspect. It's marketing that infected it, just like it does everything in our lives. If Instagram is to be blamed, it can only be blamed for not fighting back. Unfortunately, it's in their interest for this infection to take hold.
The check on corporations is competition. Don't like what they do, take your business elsewhere.

The huge problem is that this check isn't really working, because the FTC is asleep at the wheel. We have anti-monopoly laws on the books; they exist to ensure that consumers have adequate degrees of choice and companies have a check on blatantly abusive behavior. It's time to start enforcing them.

Break up giant corporations and prevent them from gaining a stranglehold on the market and much of the need for government regulation goes away.
I think you can. The whole point of being open source and using a project like cough git (since we're here), is that if you don't like it you can fork it. If you don't allow forks then I agree you aren't open source
To an extent this does exist in the form of the listing requirements for NYSE, NASDAQ etc. Matt Levine has talked previously about how the coupling between "higher standards of operating", "selling your shares to the public" and "being listed on a specific exchange" are kind of weirdly conflated at the moment and there's no particular reason they all need to be linked in such a manner.
You're right about puts. I guess I am just used to avoiding both.
I was initially very cynical about Arch, assuming that it was basically a form of role play for people who didn't actually need to get anything done with their machines but wanted to feel clever. And while that's 100% true, I did eventually realise that I could stop trying to install it on my laptop, and instead put it on a tiny meaningless server instead. Now I get all the hard-won lessons without actually having to think about X config again for the first time in 10 years.

Now, don't put Arch on your servers either because there's no real security story for Arch, but in that time I have learned tons about systemd, and you can't put a price on that.
This is especially true. In fact, a "perfect competition" actually specifies homogeneous goods. Technically, differentiation (i.e. no longer just powder in a cardboard box) is what enables all the screwiness being discussed.
Yea that machine looks nice. USB-C charge and I/O. Great for travel (1 charger for phone (android) and laptop). Looks like a slightly heavier X1 Carbon. Otherwise everything seems the same!
There is a design space betwen VTOL and having to build airstrips every 50km. Sweden has done it:

[1] https://en.wikipedia.org/wiki/Saab_37_Viggen

[2] https://www.youtube.com/watch?v=fBE41A9VT3Q

[3] https://en.wikipedia.org/wiki/Saab_JAS_39_Gripen

Just use some streets and prepared sheds :-)
I think the costs of fission were well understood in 1999. The critics he was responding to were all taking the position that fusion would not be competitive with fission.

Fusion is better in terms of proliferation issues, long-term radioactive waste, and fuel cost. Being in the same ball park in terms of the hard cost of electricity is probably a good enough target for now.
I built and published this 2D app in Unity with only prior web experience in a weekend: https://youtu.be/NTc6pf6OrI4

Haven’t touched Unity since... even though I’d love to make games. I’m partly afraid of future maintainability of my projects, but there is a potential future where 3D engines converge on a standard... maybe never.
A Rock and Roll Hall of Fame for Cybersecurity Books
I don't wish to associate this HN account with my github profile. But I think it makes a good project to help you learn a new language.
Are you sure you read their announcement blog? You seem to believe that they didn't say what they spent an entire blog post saying.

Here it is again.

https://openai.com/blog/better-language-models/

They said

"Due to concerns about large language models being used to generate deceptive, biased, or abusive language at scale, we are only releasing a much smaller version of GPT-2 along with sampling code."

And in case it wasn't clear what they mean by "abusive language", they clarified:

"Today, malicious actors—some of which are political in nature—have already begun to target the shared online commons, using things like “robotic tools, fake accounts and dedicated teams to troll individuals with hateful commentary or smears that make them afraid to speak, or difficult to be heard or believed”"

"These findings, combined with earlier results on synthetic imagery, audio, and video, imply that technologies are reducing the cost of generating fake content and waging disinformation campaigns. The public at large will need to become more skeptical of text they find online."

Or summarised:

• We think people believe things they read online today.

• We think there are political "disinformation campaigns" being waged, by the sort of people who would use AI to wage them more effectively.

• We think GPT-2 would let them create "deceptive, biased or abusive language" automatically, and this is too dangerous to release because people aren't skeptical enough of what they read online.

• We think the entire population needs to change its behaviour for GPT-2 to be safe to release.

I think that directly supports my arguments. Their whole worldview assumes the population is naive, easily manipulated by text and more importantly the volume of it ... they also draw a bogus analogy to DeepFakes. It's bogus because nothing stops anyone writing words today that OpenAI staff might find "biased" or "deceptive", literally anyone can do that. But substituting a celebrities face onto porn would require very advanced video editing skills most people don't have: DeepFakes is a truly new capability, whereas GPT-2 is merely a capability of scale.

To believe GPT-2 changes anything you must believe the majority of people make up their minds on political issues based purely on volumes of anonymous online comments. Hence my argument.
This is awesome (and lots of projects - I love it!)
Lenovo T4xxs
Lenovo X series

Lenovo T series works well with Linux, also quite many Linux developers use Lenovo laptops so driver support is good.

Detailed Reviews
https://www.notebookcheck.net/Notebookcheck-s-Top-10-Premium...

On Dell XPS I had some really weird BIOS sound hardware enumberation, where sound hardware would change hardware bus type during reboots which was annoying.
Yeah, there are still plenty of quality leather products out there, you just have to look for "full grain leather".
It’s more than just that too. Certain types of trees form forests near beaches and effectively act to pull water inland for other species of trees and plants. A lot of the things that need to be done (clean, maybe even desalinate?, water and carbon sequestration) may be done with trees.
So the GGP mistook 'bottom decile' as 'top decile', then?
Anyone who doesn't despise every piece of software on their machine from the OS up, whatever it is, is using it wrong.
Tech-Bankrolled Code.org Watching Every Coding Move Kids Make
If you have a critical need for memory safety then I think it's time to move on from C.

I also have a (I guess?) Slightly unpopular opinion, that C is actually really ugly. Subjective, but C code is usually prone to repeating itself a lot or abstracting in an unsafe manner
See my profile. We're hiring.
IMO, an unattributed quote (or attributed to "unknown", or you know, doing slightly more research than "the quickest reference you can find") is better than putting a known-wrong reference.
> Other than a click through and sale, it's hard for any advertising to prove effectiveness.

Advertising industry has a vested interest in keeping things this way, and only maintain perception of effectiveness to milk customers.
Government budgets of sovereign nations that own their own currency are not the same that households and can borrow endlessly, in fact they don't need to borrow at all.

The countries in the Eurozone don't own the Euro: for all effects is a foreign currency. Their finances work like a household.
Exactly what a traditional scientist's notebook is.
The first Starlink constellation tested this with a few sacrificial satellites deorbiting themselves
I have XPS 9560 with i7-7700HQ CPU, 16GB RAM, 512GB SDD, and 1080p 15' screen. I switched from MacBook Pro 2014 Retina, the highest specs back then. I had an azerty keyboard layout that was driving me crazy. (Gosh, how I hate the stupid azerty! I always forget how to write a freaking pipe "|".)

Windows works very well. I had issues with CPU overheating when playing Witcher 3, but I reduced the voltage on CPU a little without reducing clock with an Intel program and it succeeded in reducing temperatures without stability issues.

On Ubuntu (https://github.com/stockmind/dell-xps-9560-ubuntu-respin) there was some fun in making sure that Nvidia GPU is off during normal work in order to reduce battery usage. I can get GPU back on with single command if I need to do some simple machine learning. Right now during my normal working (Firefox with 200+ tabs, Chrome, VS Code running) with 100% battery, powertop gives me a discharge rate of 12.3 W and estimated remaining time of 7 hours, 31 minutes. It normally is about enough for a full workday.

The Bluetooth sometimes goes off after closing the computer (suspend) while being connected to headphones. In order to fix the issue, I need to restart the computer waiting for about 10 seconds downtime before starting again. Funny enough, right now Ubuntu is claiming that Bloototh is off but it is actually working. There are also very sporadic issues with video. For example, sometimes YouTube will just crash and I will need to restart the system to get it back working.

I'm happy with the build quality (beside mentioned thermal properties). I especially like the sturdy screen. Keyboard and trackpad, for me at least, are about as good as Mac. I liked Mac trackpad maybe a little bit more. IO in XPS is good. I'm certainly missing MagSafe plug (charger plug that disconnects while pulled). I should also mention that when the battery is full and I'm connected to the charger I can hear a very weak coil whine. Kind of like an HDD head working but possibly even less noisy, most time I don't even notice. When I do notice I just disconnect it from the charger and the whine is gone.

I never had to deal with Dell support, so I don't know how it looks like. But I like that a lot of technical people use XPS, so it's easy to Google issues.

Overall, I would recommend XPS. (My girlfriend has one and she is happy with it.)
> If you need to comment on what something is doing, usually you can move that behaviour into a function and test that function.

That's the usual argument, and the counter-argument is always the same: you shouldn't comment the what (though I'll argue there's always exceptions), you should comment the why.

Why are you doing this processing here rather than there? Why do you not apply the usual pattern in this specific case? Why does this code, that will make you want to refactor, has been written like this?
> how would building houses for no reason

Stable housing prices are good for an economy. Next to negative rates, that’s a win. That’s the point.
There are many effective DDoS resistance strategies. However, if you had to build those costs in to the core of the internet, then there is a fair argument that it may never have taken off as overheads would have been too high.

For the NDN concept, again the whole point of IP is that you can implement it on the same base: Upgrade cost of network complexity: The Internet has smart edges ... and a simple core. Adding an new Internet service is just a matter of distributing an application ... Compare this to voice, where one has to upgrade the entire core. - RFC3439 (2002)
Alternatively, run on your internal network and alert on every attempt....
The American Dream: From Rags to Riches, the Story of Chris Gardner