skysight-inc/HackerNews huggingface dataset:
I put together a REST API for COBOL a while back:

https://www.bencollier.info/cobol/programming/projects/fun/r...

The blogpost describes how to get the web stuff done, then moves on to API routing. This post has reminded me that I need to write part two of the article which covers parameter handling and so on...
Interesting. My company was evaluating a company that "secured" Segment and this was one of the items they said they would be helping with. It was a YC company that started with a Vanted or something. Sounds like a fail. Glad we did not go with them.
> Eventually you either reach Bitcoin-level congestion

Bitcoin's problems are bitcoin's problems because they are intent on shooting themselves in the foot at every opportunity they can.

Other networks hopefully are run by less hard-headed people that know a bit more about incentives and the importance of liquidity. Dash and BCH are better in this sense.
Switzerland has such laws.
Or the government has a word with the Tabloids who would love to run headlines "CELEB X'S KINKY SEX TAPES..."
>Why choose to carve out this added support for a single family

> of algorithms rather than add in some more general

> metaprogramming abilities that enable better EDSLs?

It is The Swift Way™

The answer is always to add something to the language and the compiler, the question seems to be largely irrelevant.

Of course, that's a consequence of not heeding Alan Kay's advice from 1998, that when you design a new
language, you need to focus on the metasystem first, the rest will follow.

http://wiki.c2.com/?AlanKayOnMessaging

When you don't do that, every new requirement comes as a surprise that you need to hack into the compiler somehow. Objective-C compatibility: hack the language; Python integration: hack the language; SwiftUI: hack the language; Differentiable Programming: hack the language.

And of course, each additional hack makes the already not-to-elegant base language even more difficult for implementing stuff without hacking the language.

What kind of a metasystem would we need in order to not have to hack the language for all of these features? That, detective, is the right question!

https://www.youtube.com/watch?v=ZKxr0wyIic4
Cobol is 60. Let's give it a REST Framework for its birthday (Pt. 1)
Same here. Using a base password and adding the month in which I changed it the last time. If somebody feels happy about that, so be it.
It is not the same as the city essentially is put in the situation were they need to choose between losing data and paying both a ransom and a fine (unless you want a federal agency to freeze ALL city controlled funds).

If you want to stop city from paying the the law need to state that even if they get their data back they need to delete it.
Which is exactly why Square got into it as well: https://squareup.com/us/en/capital
It shouldn't be that hard to set up a dating site with aligned incentives - I had the idea of a site which requires a lot of personal data on signup, and deletes it for a fee at account deactivation . People pay huge premiums for matchmaking agencies, building an algorithm with similar incentives shouldn't be that infeasible...
> Some saying it's conservative, and some saying it's an exaggeration.

Screaming and shouting never changes facts: https://medium.com/@worstonlinedater/tinder-experiments-ii-g...
Why relatives of a victim didn't stopped informing police about the kidnaping? If government didn't know, then bank accounts wouldn't be blocked. Now a victim has a reason to not inform government, and now it is possible to kidnappings to continue without any government record, and we may come to a situation when it is all nice on the paper, while it becomes even worse than was before law-maker's intervention.

Was those bank accounts blocks where a successful move, or kidnappings stopped due to other measures government made?
According to the Buzzfeed investigation, Amazon set it up so as to not require a more stringent commercial driver’s license, and Amazon was exerting such pressure on their contracted startup delivery companies that the companies were telling their drivers not to wear seatbelts and the culture was to pee in bottles. There were even examples of dispatchers telling drivers to flee the scene of accidents to make sure they made their deliveries.

Stressing and driving untrained people that hard has a lot more with the sad frequency of vehicular delivery crashes. If Amazon used established companies with trained drivers instead like Fedex, USPS, and UPS, which take safety much more seriously, we wouldn't be talking about this.
I've also heard it in relation to not eating meat, not eating candy and not eating various other categories of food. Never have I heard it in a meaning of not consuming anything at all, however.
If you want to have a good system of passwords, you have to let users put what they want? Not a big security risk for these? I understand that too many rules are stupid, but even if it is a minimum of characters and then freedom to choose the character composition that one wants is the best instead of forcing a rare combination.

The only thing I hate from passwords is lenght. Most of the websites don't allow me to do +40 char passwords. I generate everything with 1Password and I have to limit on most websites to under 20 characters.
I worked with routing in a logistics company in India. The whole last mile delivery had so many special cases that we stopped trying to model them all. Drivers would take routes to avoid cops, or go toward a cop they knew (they had paid off in the past). Drivers would not go into each others' territories (so 2 drivers working for the same company would not deliver if their areas overlapped). For delivery people on 2-wheelers, all road rules were optional. They would go down wrong way on one-way roads etc. (we could track them, we called them 'dirty routes'). Drivers would prefer their own routes even when we gave better routes. Sometimes better was vaguely defined, since we might think this route save 10% time so is better, and he might think my favorite paan shop is on that route, so the other route is better.
Interesting to get a glimpse at Google's usage of Typescript and the problems they encounter when upgrading.

I imagine scenarios like these can happen more often in Google's monorepo when upgrading a widely used tool, library or language? Does Google use this approach (one set of flags, etc. for a compiler for the entire repo) for other languages too?
In this case, wouldn't you use some kind of permission/security groups/roles at the db level or firewalls that would block such intents?

Wouldn't it be possible to add an automatic linter pass that does "grep DROP" on the source code? Even unusually things such as code obfuscation can be automatically detected to some extent.

An automated way sounds more fair, robust and scalable. To me, there is something in human code review that is not engineering, it's all about judging people (unless the code review is fully anonymous for both side)
Is asking for an [editorial] to be included in the title, similar to how we tend to ask for "year published" data unreasonable?
Sure, why not? In your mind, you can choose not to engage with them, yes.

I get that reading is involuntary for literate adults, but I believe it is possible to not engage with the words beyond that.
I fail to see racism in the quote, it seems to be describing demographic shift of the mall as it fell out of popularity.

> Then just as Harding Mall thought it was the end, it was not. Due to the high levels of foreign people and foreign languages, a local enteprenuer saw hope in the old mall cinema. He leased the space and ran movies that cost about 50% less than what other theaters charge today and they were all foreign speaking films.
Am I the only one who finds 1-3 to be utterly boring and 4-6 to be absolutely brilliant? (4 is my favourite.)
Yes. The problem with FB is that it already has a ton of data about you, trusting it for dating means giving it even more.

Additionally FB has a track record of being extremely reckless with your data and being dishonest about what data it actually gathers, how it is being used and who it is being shared with.
Precisely. I'm reading the article and not grasping the technical point.

Mainly because the point is non-technical; while I'm not sure that Google is exactly a saintly organization, things like the Summer of Code and giving K8s away have procured some goodwill for them.

The whole article is over the head of Joe User (me) who is competent to use Docker but nowhere near deep enough to contribute code to it.
My small company pays for private image storage there.

We actually used Google Cloud Platform's Docker Image hosting service, and that was expensive.

Yay!?

What else can we pay them for? All the stuff we need are available from them for free, except private storage. If they had a container hosting solution, we'd pay for it.
I really hate it when a site will allow you create a password with more than 20 characters, but then silently truncates it on the server. I wish I could remember an example, but it slips my mind.

So if you ever find yourself having trouble logging in with your 1pwd auto-generated password, try again with the first 20 characters. You just might get in!
Facebook, tech firms meet with U.S. intelligence on 2020 election security
I always thought baseband referred to the processor and firmware/software that responsible for the radio modem?

Do Android and baseband firmware run on one and the same processor(s)? Or are we calling ARM Secure World / TrustZone baseband these days?
That's a good point. The linked page even has Opinion prior to the title.

Would it be reasonable to assume the title Don't Trust Facebook with Your Love Life could possibly only be opinion? Would a reasonable person expect to see data-driven research after clicking through?
Why does everyone (including the big tech companies) pretend that security questions are secure and should even be mandatory?

It's mind-boggling to me.
Same here, I guess it's a complex function of hardware and what you're trying to do. Personally I ended up writing my own autodiffing tensor library in C++, because all existing solutions had abysmal performance on my problem (lots of local updates in large tensors). The speedup is >50x compared to TF, pytorch, julia, jax.
Ask HN: What is your 10 year plan?
I never faced that, but that truncate would be silly: you kill all passwords and customers have to recover it and keeping creating new ones.
That would be relevant if the distribution was in any way proportional to the general population...
That's pretty cool, I listen to a lot of podcast about startups and struggle to find new ones! How does Feedcast compare with Apple Podcast or Spotify regarding recommendations?
Conducting Effective Code Reviews
Manga Rock shutting down next week
You do not want any kind of cleartext alerts on read receipts or typing notifications. Most people also don't want apple to know what type of data is transmitted to your app.
This works fine until it doesn't. See this paper (and the discussion) on why we need better tools: https://news.ycombinator.com/item?id=20301619

In short, you don't want to spend weeks on hand-optimized kernels, every time you want to implement a new type of layer for a large-scale network, or on an experimental target hardware.
I've heard that knights a few centuries ago were sleeping in chairs. Only slaves were sleeping in horizontal position. I'm not sure whether it's true or not, but this is what a tour guide told me.
After doing intermittant fasting for half a year I think you shouldn't generalize too much from your own experience. Yes, it gets easier but it stays painful and requires a lot of willpower ime.
You can also implement that by just bruteforcing the previous hash with variants of the new password. IIRC Windows since 2000 implement these kinds of checks in exactly this way.
> considering the order of magnitude of place that do not receive a ransom compared to places that get ransomed, the cost is probably on the security side.

And if ransoming is profitable, what does that do to the market? Does it a) inhibit more ransoming or b) encourage more ransoming?

> but you apparently define due diligence as "not getting cracked,"

Don't misrepresent me - here's what I actually said: "The process of potentially hammering them legally would involve them being taken to court where their level of culpability would be decided (and it may be they did do enough so get let off..."

So they can be let off. It says clearly.
The good response is rooted in good planning. They're not out to scam you.
This is linux-specific though. Non-glibc mallocs have different tuning and many have completely foresworn brk/sbrk (openbsd and dragonflybsd mallocs haven't used brk in more than a decade[0]). In fact brk/sbrk is deprecated in every BSD:

On OpenBSD, DragonflyBSD, NetBSD and OSX:

> The brk and sbrk functions are historical curiosities left over from earlier days before the advent of virtual memory management.

On FreeBSD:

> The brk() and sbrk() functions are legacy interfaces from before the advent of modern virtual memory management. They are deprecated and not present on the arm64 or riscv architectures.

It's also somewhat discouraged on Solaris:

> The behavior of brk() and sbrk() is unspecified if an application also uses any other memory functions (such as malloc(3C), mmap(2), free(3C)).

[0] https://bugs.dragonflybsd.org/issues/84
Americans have been dismantling and weakening their regulatory bodies for quite a while now. The idea is that this will unshackle big corporations and allow them to innovate faster. This sounds like a great idea, until you realize that this “innovation” is most often about increasing profits. And the quality of the product is often sacrificed to increase profits. Just look at what is happening to telecommunication services, with big corporations growing their profits while Americans get stuck with slow and expensive service that becomes relatively worse comparing to other western countries.

Lack of proper regulation (or enforcement) might lead to short-term gains in some economic indicators, but in the long term will lead to worse quality, relative decline of America comparing to other countries, and sometimes -like in this case- avoidable deaths of hundreds of innocent people.
Why are you watching anime dubbed? I tried once and it's horrible, ruined all the atmosphere. Much better with subtitles.
Those videos have a very interesting aesthetic, it kind of reminds me of what happens when someone who doesn't know how to make videos (and thus doesn't know the current trends) starts making them, in the process inventing their own, totally new style.
That would be nice, but America is unusually rural for a developed country, and that affects the culture even in the cities in a big way.
Solar and Wind are free and widely availabe primary energy sources. No infrastructure is needed to dig it/pump it up, transport it and process it befor it is usable, as with fossile fuels and nuclear power.
Moreover, entropy can be defined using either thermodynamics or statistical mechanics. In the first case (which was the first to be developed, historically) the entropy exists for any isolated system in thermal equilibrium, even though the system can be subdivided into parts or not.
I’m gonna save this link for when my dev friends complain about their jobs
Innovation versus Preservation
One of the most important skills for a junior developer is the ability to ask good questions. As a lead, you're never going to be able to perfectly set them up with all the context they need for a task, so they're going to need to be able to get the bits that they're missing.

The best guide I've seen so far on how to do this is by Julia Evans: https://jvns.ca/blog/good-questions/
Tangentially, this appears to be the general (and usually, only) troubleshooting step you can do with Apple products.

Yes, creating a new user resolves the problem. Yes, resetting my device to factory settings without restoring from backup resolves the problem.

How do I resolve the problem without deleting my entire history?
Premature optimization rarely helps, but well though out flexibility/decoupling in core system components has had a significant positive effect on velocity down the line, and lack of the latter has all been shown to be disastrous.

I do believe though that's really hard to discuss effectively as there seems to be no good, and common definition on what over engineering actually is, except in retrospect.

I've seen teams where they were so "good" at avoiding over engineering and "architecture astronauts" that thousand line functions with a Byzantine labyrinth of conditional was preferred to even the most basic of design.

With that said, what would you consider over engineering of the kind that never works, and in what kind of systems?
In OpenBSD, brk/sbrk still exist but they removed its use from malloc something like 15 years ago.
Pay off house mortgage, scale my salary up to 40%
I once tried Password1 scheme as a form of protestation for a client corp account I'd connect every 2 month or so but that had a 1 month rotation policy (so that I actually had to change my password every time I connected to them). It worked... Obviously I changed it to something else but regularly tried if still worked.

The big payout was when we had an on-site formation from a third party and the teacher needed to create a corp account. He miserably failed to validate various secure combinations against policy (like 16+ length 5 words xkdc style). Being the only consultant associated, I just yelled across the room full of in-house IT guys "Just try Password1 it's gonna make it!"

Obviously it worked out ¯\_(ツ)_/¯

PS: Oh and nobody reported me for this "incident" I still don't know if it's out of shame, dumbness or because nobody wanted to actually get to work to change that policy.
I read it long time ago, good book!
https://devblogs.microsoft.com/oldnewthing/20181221-00/?p=10...

Third parties may have your back.
To do this on whatsapp, you'd need to click "play" on the individual messages. You can do this on public transport.

But you should not do this while you are driving or while walking through an area like London where phone theft is common.
there is competition from a customer perspective, but not really from an "employee" perspective. the people working in these cannot unionise and effectively negotiate their wage
EDIT: if anything these competitors make it worse by suppressing wages even further
I like Tesla more than most, I have one myself… however you can't be suggesting that three factories will outproduce 50? That would be some massive gains in efficiency! It seems unlikely that the factories are currently operating at about 10% efficiency.
I regularly run into situations where my password on sign up is silently truncated (without being given a maximum char count) so at login I can’t just edit a field, I’ve got to guess how many characters of my password they actually use or reset it (and still guess).
> The point of the article is that some people want more than that, and can't figure out why they aren't getting it.

Actually, the article found out pretty well why they aren't getting it: "And yet while only 15 percent of the male population is at least six feet tall, 58 percent of all corporate CEOs are."

Asians are not as tall as other ethnic groups, so are naturally at a disadvantage here. Only 3% of CEOs are 5'7" or less, which is the median height of an Asian-American male. 95th percentile height of Asian-Americans is 5'11.4" or thereabouts (source: https://www.cdc.gov/nchs/data/series/sr_03/sr03_039.pdf ).
I think the question then becomes if it's a life or death document why would you only have one copy and store it in a relatively insecure space?
Wow. Maybe I should have another look at it, thanks for the information.
There was a guy on imgur who used to post photos all inside dead Malls and it was very interesting. This website is very boring for me cos I see nothing. Seeing the demise over time of the mall is what’s interesting.

IMO the videos don’t work. I just wanna look at a clear still picture.
That's the solution we need, to replace Facebook and Twitter! :) I'm in.
Looked into the AR.wing yesterday and that seems to be a great model. I will totally look into this, thanks for all your information!
I wonder when ransomware will get smart enough to detect backups and insinuate themselves into them to foil the "just restore from backups" strategy.
Subscriptions were never the only revenue source for newspapers. They have always had ads.
Natwest has a really annoying password system where you have to enter certain characters of your password.
LLoyd's Has another system where you can create a password you like, and then you have to create another second password that they ask you to take certain characters from (e.g. 1st, 3rd, 9th character), oh, and it's alphanumeric too.
I don't even trust myself with my love life.
I plan on becoming financially independent within 3-5 years (FIRE movement). I love making things though, so then I might do one of these (or a combination):

- Continue working. I am very happy at my current company, and I know there are some other great companies where I wouldn't mind working.

- Make open source or projects. I've done many OSS projects and I can see myself doing more. However, the direction where web OSS is going is very dangerous, might not be worth it at all within 5 years https://github.com/franciscop/

- Make small but nice products, I have many things I like solving with software like https://core.cards/

- Create my own startup, who knows.
DROP TABLE
Real World Performance (Intel at IFA) [pdf]
Sure the FAA realizes that, but does the FAA, which has been hemorrhaging expertise as they started relying on Afompany experts, instead of their own, have the capability to find all issues?
It’s interesting the issues thread sees no upside to requiring a specific fingerprint from outside the device (together with the device and the password):

https://github.com/github/SoftU2F/pull/29

I would prefer a fingerprints change equates to loss of hardware key. I quit sessions, and would like the stronger mitigation of various password bypasses and priv escalations.
Nowadays most SSD failures happen in the SSD controller, not in the physical storage. I wouldn't trust SSD manufacturers to write reliable software. At least not without waiting 3 years to weed out the obviously bad brands.
To second point: do you have looked at D?
> comdirect even has a limit of 5 decimal digits

Hm, sure? My comdirect account uses a 6 digits pin. Never tried to use more than that. But 6 were still horrible enough when looking at the fact, that SEPA transfers of up to 30 Euros don't require entry of a TAN. A feature, which can't be disabled. Hate comdirect for that move.

EDIT: feature, not option. :)
For me containerization was always about deterministic environments and ease of deployment instead of performance and clustering. But even with these advantages I am currently not using any solution for that.

For cloud services this is probably a good idea, even for users to a degree if the provider doesn't already give you a fitting box.

But otherwise it is not a must have in my opinion. Maybe that is a mistake and the apps I develop today are not going to work in 10 years. Well, worst case: I have to be paid again.
It's funny that the web app performs better than the desktop app.
Yes, obviously.

So you choose something like 1024 bits as the length of the client hash. The client hash doesn't even need to be any good, even xor-ing blocks might work. It just needs to preserve a lot of entropy.
When we were looking at houses a couple of years ago in the UK one thing that I always noticed is that almost nobody seems to use their garage to hold cars - 1 house out of the 20 or so we looked at had a car in it - the rest were full of miscellaneous stuff.
I was under the impression this was because the ice sample was 40,000 years old?