skysight-inc/HackerNews huggingface dataset:
Oh come on man. Are we really saying that Android has no security issues?

I'm gonna do you a favor and just not talk about how naive and fanboy-like that statement was man.

And google cloud's security, I assume you mean the AWS competitor, is being compared to iCloud social engineering hacks? Uh, yeah, I mean, since iCloud is consumer level, no surprises there. As far as consumer level offerings, hey, Google already has the location or whatever other data, so they can already use it to try to sell you cheap plastic Oklahoma City Thunder dart boards or whatever. Your privacy and security are violated every time it happens.

Maybe I'm just being too fundamentalist in my view? But that's just how I see it. Every time an entity uses my data for something I did not intend, it is a security and privacy violation. Google's entire business model is literally built on violating both, which is why I avoid their products like the Plague.
A government site I have to use for work asks "If you were a tree, what kind of tree would you be?"
A slightly frivolous question but I'd like to hear your opinion.

If you were to design an immigration system from the ground up, how would you do it? How would you decide who gets work visas etc?

I deal with immigration to Japan a fair amount and while I feel the system is relatively favourable for workers it can be extremely capricious and opaque.
Python is eating the world: How one dev's side project became hottest language
When I finished engineering school the prof said :
"The most important knowledge imparted to you here is how to look things up, how to verify your thoughts and get inspiration for new ones to make products faster , better and more efficient."
That was at a time when the latest slide-rule model was state of the art in calculatory equipment. So, yes, do google something before you reinvent the wheel .
The more interesting question is, how low can interest rates go? We’re still in an economic expansion and interest rates are already the lowest they’ve been in history. How far negative can we push them when the expansion finally ends? (Seriously asking, I’m not an economist).

I mean it looks for all I can see like something is really, really screwy about the whole world economy right now. Banks are charging for storing people’s money and paying to give it away in Denmark. That does not sound like a solvent financial system. It’s like when you’re trying to get sound out of your stereo and you can’t hear anything, so you turn every knob up all the way, then you notice, oh, this cable is unplugged, and you jiggle it and blam, blow the speakers out. Or in Chernobyl, where they backed the control rods way out but then turned up a bunch of other stuff, getting a very slow reaction but in an extremely unstable state that suddenly went exponential when they tried to shut it down. It just feels like the system is, in some sense, upside down. But, I am not an expert.
Show HN: Zero-fees global currency wallet, Magno
This seems to vary from family to family / child to child.

I wouldn’t describe anything (after maybe the birth itself, which I can’t answer about) related to our 6 month old so far as “difficult”. It is only “physically taxing” insofar as it takes a lot of time every day, and alongside other obligations (in particular, the 3-year-old) that leaves everyone a bit sleep deprived. I would say the 3-year-old takes at least twice as much time and 5x as much effort. (The work is stuff like reading books together, building block towers, running around the playground, preparing food, etc. Nothing especially challenging by itself.)

My wife gets burned out pretty quickly when I leave her with both kids on the weekend for most of a day. She’s generally relieved to get back to the office on Monday and leave them to me. :-)
Judging from this thread a pretty straightforward approach would be to start by getting their hackernews name, searching for them in this thread, and if they’re found promptly ending the interview. This community is incredibly entitled and insufferable when discussing the hiring process.
If you add up the average consumption of alcohol for an American in a year, the difference between 100 calories per unit and 145 calories per unit amounts to something like an additional 45-60 minutes of exercise per week to offset. There’s a lot of variables there, so it could potentially be more or less, but it’s non-trivial.
It blows my mind how HN which can discuss many issues in a nuanced and skeptical way is so reactionary and treats government press releases with so much credulity when a mind altering substance is involved.
The candle is infinitely luminous, and yet, the mirrors won't melt
This is basically just the contents of the “Top Grading” interview questionnaire [1] spiced up with some unnecessary prose.

[1] http://www.jamesgwee.com/uploaded/file/Topgrading.pdf
Wrote a whole post about that:

http://www.mooreds.com/wordpress/archives/2812

Short answer is it is different for each job. I would ask for rubrics from interesting companies (interesting to you) rather than hn at large.
Thank you for this. Been a software engineer/Sysadmin for over ten years. It’s always nice to see something like this to remind myself (and others) that using google does not make you any less of a developer.
But the design discipline has little bearing on the impact those companies are having - designers are not responsible for setting business direction, and there is no hint of how exactly anthropocentrism in design assists exploitation. You could make the case that it helps achieve scale, and hence enhance the effects - but 1) the impact would be there even with shitty UI, 2) this would apply to almost every other discipline, and I feel that's not where his argument was headed.
WSL 2 is the real game changer.

I'm on an issue for WSL 1 where there's a nasty bug when dealing with a lot of files. The only way you can free up the file system is to restart. https://github.com/microsoft/WSL/issues/2882

WSL 2 alleviates this file issue. There are some issues where daemons like postgres, mongo, etc. aren't started by default and sysctl.conf isn't respected. A manual command has to be ran.

Windows 10 is fast. It has amazing support for high resolution displays and multi-monitor that a light year ahead of anything Linux has unfortunately.

WSL also gives choice of distro. You get to use the stable packages instead of being stuck with a brew package that's broken.
We have a bunch of upcoming actual tech IPOs coming ahead, like Cloudflare, that provide a useful and valuable service. 'We' is just the left over husk that the VCs are trying to get sold off because the founder took the value out already.
Did they not deserve consideration?
Yet other people also pay for health insurance... I don't see how your situation is unique.

The thing that the system does, continuously, for decades, is not a "big breakdown". It is obviously the purpose of the system, intended by those who control the system. The system is not waiting for a good person to come along. That candidates lie about everything all the time has been a commonplace assumption throughout my lifetime. Yet still they are elected...

Since I am an anarchist, I often argue against arbitrary authority and its capricious and unjust actions. I contrast my position with those of people like yourself who believe that their own economic decisions entitle them to subvert the autonomy of others.
I think there should be 3 different roles.

Computer Scientists - Come up with the foundational algorithms etc.

Software Engineers - Translate and map those foundational algorithms into more readily available tooling, occasionally directly building a complex system using engineering principles.

Software Developers - Use the tooling created by software engineers to create user friendly solutions for the masses, aka developing apps or websites.
This seems like a very 'pick and choose' definition of discrimination. I don't think it holds up — professional courtesy within one particular job and an outward political attempt, using his vast wealth and influence, to prevent a certain group of people from having certain rights, these don't have any relation to each other.
When I was a Google SRE, during one trip to Zurich I complained that I hated the lack of my standard vice, Diet Coke, in Europe (they have "Coke Light" instead). My boss didn't believe me that I could tell the difference... so he brought some back to the States and we ran a blind test. (I think we also added Pepsi and some other things.) My recollection is that I got every sample correct, but we definitely didn't have that many! I wonder what the probability of a false positive was in that case. (I no longer drink Diet Coke, but I still maintain that Coke Light -- and Coke Zero which I believe to be the same formula -- is gross.)
Damned if you do, damned if you don't?

They "only" have about 2.1k locations in the US - one outlet per 163k people in the country. This doesn't seem to me like a "mom & pop"-killer. (Subways has 24k locations, as a point of comparison.)
If you're looking at the first graph, the explanation is right above - the overhead of synchronization.
No thanks. There are already too many DNS lookups and TCP connections a user-agent has to make in 2019:

- OCSP if not stapled.

- IPv4/IPv6 racing/Happy Eyeballs.

- Encrypted SNI (DNS lookup).

- Certificate Transparency: some Chrome builds are now querying logs to confirm embedded SCTs (if I understood correctly).

and now:

- Related Domains by DNS (draft-brotman-rdbd-02), or whatever replaces the PSL.

RDBD would have to be in the critical path (in order to understand the cookie scope), it's just going to make things slow and complex.

Are we also gonna give the same treatment to the HSTS preload list?
Why not use the CLI and do s3 sync instead of using the web interface?
see also, bumwine:

http://www.bumwine.com/
That's fair to say. Rational angles happen to make things easy and result in a problem which has connections with lots of well-developed areas of mathematics.

This paper https://www.math.brown.edu/~res/Papers/intel.pdf is mentioned in one of the Numberphile videos on the topic and it basically says this in the introduction.
One quibble about the title: How would we know if these are the CIA's darkest secrets?
in the us, we also have 'good liquor stores' and 'regular ones', the market is lucrative enough to support such things without a mandated government monopoly. same should go for UK as well I presume..
Cant you just create a web scraper?
Rochester, Buffalo and Hartford Least at Risk of Housing Downturn in Recession
Amen to this... 3.5 yr old and twin infants here... I haven't been able to concentrate in years. When I have attempted to produce anything of value (in job or hobby), it's been at the expense of my family...
This is more of a risk in places where red light running is endemic. Sadly here in Auckland is rapidly becoming one of those places.
It should be societies preference to create the individual property rights for the individual. If a company is profiting off peoples likeness then peoples likenesses are a personal property. Blows my mind that a capitalist society doesn’t get this instinctively and demand it.
Palm: A Hybrid Parser and Language Model
Charismatic Technologies
Book Review: The Uninhabitable Earth – David Wells
David does a good job of surveying the various thought streams about climate change. He reviews problems by topic (heat death, hunger, drowning, wildfire, dying oceans, etc), looking at how these might play out.

His view doesn't give much hope, so be prepared. Having spent a century creating this crisis, it seems unlikely that we will switch off carbon release today and reverse a century of generation in the next 30 years. The political inertia alone makes it unlikely.

A large portion of the book (about 1/3) involve notes listing his various sources. He has clearly done his homework.

I found his discussion of the Mann/Wainwright theory (Climate Leviathan) very interesting. I suggest reading the original source also. Are you in "team leviathan, team behemoth, team Mao, or team X?
The problem space of space is infinitely large. Outsourcing some parts mean that you can focus on others. Every space agency and company on Earth do not need to work on the exact same problems, that’s all.
It's been ages since I read that book, but there is more to it that just the tag line you mention. It is very common to take a plan for work and to say, "This would take 10 people 1 year to developer, but we need it in 1-2 months. So let's put 100 programmers on the team". This is very much more obvious in Enterprise space and government contracting, but you see the reasoning everywhere.

Here's quite a famous example: https://www.statista.com/statistics/272140/employees-of-twit... It shows a graph of the number of employees at Twitter over time. In Jan '08, there are 8. In Jan '09 there are 29. In Jan '10 there are 130. In Jan '11 there are 350. In Dec '13 there are 2712.

Although a lot of that staff are going to be sales and marketing (and probably the growth is justified), the development team is also growing exponentially during that time. The Mythical Man Month would say that probably they are spending a lot more money than they need to to get the growth they needed.

I used to work for a manufacturer of telephony equipment. On one of the products I worked on they had 5000 developers! (A single piece of code!!!). The average amount of code deployed was 1 line of code per day per developer. As much as we can argue that KLOC is a bad measure of productivity, if your average developer is only producing considerably less than 1 KLOC in an entire year, you know you have really, terrible, terrible problems. One of the questions you might want to ask is, if you want to write about 5000 lines of code a day, where is the sweet spot, actually? I think we can agree it's not at 5000 programmers. However, it's often really, really difficult to talk to non-technical management and get them to understand that more programmers does not usually equal more productivity.

I could regale you with literally hundreds more examples, but I think it's sufficient to say that, yes, the Mythical Man Month is still really relevant these days.
Well certainly. But behind that guy is a lot of compentent and professional engineers and techs doing the actual work.
I would have declared bankruptcy in a heartbeat for my wife’s loans & it would have been rational. I a) make good money b) have good credit and c) don’t have financial hardships.
As an Oregonian, I'm not bothered by this.

As it is, grocers typically have to have a single person at the helm of each bank of four to six machines. The machines are prone to requiring manual overrides, and often the single machine-herder is overwhelmed trying to keep up; I hear their grumbles. I find myself examining my basket while heading towards checkout and considering whether I think that a human cashier would give a smoother experience.

Moreover, whether grocers have these machines is usually a function of their size. Smaller grocers in Oregon, like Green Zebra, don't have the machines, while larger grocers do, like Safeway and Walmart. I have had conversations with employees at the latter stores. The machines were ordained, installed, and configured by corporate order, with only a small amount of local training.

Oregonian voters have immense power to alter the law, and so many independent groups aim to refer decisions directly to the voters, rather than trying to work within the bipartisan legislature. In this case, the group will have to successfully convince tens of thousands of us to petition the State to put it on the ballot. I will probably sign the petition.

I read the text. It's not bad. There's an exemption for stores which sell only alcohol or only cannabis; liquor stores and dispensaries are a thing in Oregon, but I haven't seen any which have automated checkout robots. Indeed, I'm pretty sure that the liquor law requires humans in that checkout process. While a union is lobbying for this, the union does not stand to directly benefit; its members certainly will, but there's nothing that privileges the union, and both anti-union Walmart and employee-owned Winco will have to obey this law.
You are inches away from a sudden lightbulb moment that people's ability to have a positive impact is not that closely related to their intentions.

It isn't cynical to claim they are being opportunistic as much as it is myopic. If you want all recovery efforts to be done by gloomy stoics who are clawing back at a lifestyle stolen from them by cruel nature while telling heartbreaking stories about how hard it is to rebuild ... that will miss the opportunity that the situation will be quickly and dispassionately sorted out by some faceless corporation exasperated that its profits are down.

People like to think of capitalism as some sort of siphon system moving comfort from poor to rich, but it is a very powerful stabilising force. If there was an economic equilibrium and a disaster breaks it, letting capitalism happen will restore most of the status quo extremely quickly.

Saying that that is opportunistic is simply framing a positive thing negatively. If people are happy to do something out of their own self interest that is better than them doing it out of a sense of charity; and much more sustainable.
We shouldn't lose sight of #3.

3. This is a toy we're talking about here.
Since you appreciate my assumptions, then I assume what I said applied to who you were interacting with.

It’s very hard on an online forum to know if two people engaging in a debate have a shared intention in their communication. I trust dang to have a holistic view of good and bad behavior on HN.
There's a small list of companies I'd do a, "Take home test," for. In my experience, most companies that ask for it are looking for free labor.
Door blows off Boeing 777X during stress test
I have some tremendously bad news if you thought that publicly accessible services on the Internet are secret.

Several distinct outfits sell what they call "passive DNS" which is a feed of snooped DNS queries and their answers, minus any identifying information. So you don't need a certificate, if anybody, anywhere, looks up the name and it has an answer then these systems will tell you what it is.

The records come through roughly like this:

name: 'news.ycombinator.com'

type: 'A'

value: '209.216.230.240'
We use Terraform to automate the actual generation of the certificates (it checks the expiration date and does a renewal request when you're 30 days away), but the basic approach we use is to generate the certificate with DNS validation, store it in a known location in S3, and then have the machines download the certificate on startup and refresh as a cronjob.
We used to do this in a giant church. One time the police came due to an alarm that went off and the youth leader was in the bathroom with a bunch of kids LOL
>> I don't actually care about not being able to use a different browser engine, but I do care about not being able to set a third-party mail client as my default.

Has anyone actually noticed that if you use Gmail on iPhone and you’ve got Chrome installed it will use Chrome by default?

PS: I’ve generally use Firefox though
Hey, we have just gotten a enormous phone directory for free! Why are you complaining?
Very impressive. Simple yet functional. Proof that a site does not have to have all kinds of bells to be useful. Nice...
Reality: revenue increase goals don't always align with revenue increase.
I always bring a laptop to interviews (haven't had one in a long time) and Google stuff during the interview and pull up my notes. If they say something I responded with "well I will always have a laptop at work anyways".
Aren't most concerns with companies who exploit open source software without contributing their changes back?

If we have source code and can determine it is derivative of open source but improperly licensed, does it matter? At that point we have the code and we know it's derivative and thus can infer the license. It's not like the publisher could come back at us for taking it back.

I don't see the value in such a tool other than to abuse people who shared incorrectly. And if I ever shared code incorrectly and got slapped on the wrist for it, that might just be incentive for me to never bother to share again.
I think it’s mostly land which inflated due to lack of consent...
Thanks a lot, mate :)
Much appreciated
It is like confusing a photo of a car with an actual car, except the person confused by it is themselves also part of the photo, and so has obvious reasons to consider themselves and the car three-dimensional.

A better analogy would be those magic portraits in Harry Potter: a non-static two-dimensional environment that carries all the information needed to fully emulate three-dimensional behavior.
I've been in the hurricane center at a large retailer (last week, in fact). Aside from freezing prices at before-storm levels, no one who volunteers for the 24/7 emergency staffing is thinking about the dollars. Sales take care of themselves.

They're doing it because it feels good to help people.

And because rerouting truckloads of supplies effectively at 2 AM means someone in the affected area will be able get to their nearest store and get the things they need.

I'm not sure why the comments here are so !%^&ing jaded, but sometimes you do the right thing... simply because it's right.
Sure, with time and determination, you can build a ladder up a mountain. But one path is as good as another if that's the case. All the 'opportunities' you're ignoring aren't opportunities, they're noise

A real opportunity compels you to take advantage of it, you really are losing something if you don't follow it up.

What's limiting you to a few tries to a lifetime is time. It takes 5-10 years to properly validate a business model, you can only do that so many times. And you might not be in the same place after an attempt that you were before, meaning it might take even more time.
Ethics and profit motive are easy to balance, justification takes a few paragraphs.
After you drop them off, but before you go to work - can you work from home at your kitchen table with your laptop and coffee?
No but the iPhone 5s from 2013 does. Apple’s mobile processor performance increased a lot during the first five years and went 64 bit.
I don't think so. Signing away your right to sue is pretty common.
> No; as the first sentence states, Project Zero found this independently:

Oops, my bad, I had in my head the opening of the first post talking about how they had come across the sites using these exploits.

I think we agree that this piece of code was not well tested. Where I think I set my expectations of Apple lower is that this code was never used, essentially forgotten about and that I've literally done this myself. And I simply don't believe you can tell simply from a bug whether "QA" happened or not.

Why I give the benefit of doubt to Apple here is that it's not in something that is called everyday in normal devices. It's not in part of the OS that sees constant use. If this error occurred (and yes I'm aware that the end result is the same) in say the network stack or media stack, then I'd start having my doubts, since they regularly process untrusted data, and Apple should have proactively checked, just like Android now does with Stagefright. But this was in an essentially undeclared api that was never even used by Apple themselves. I think this was more a fuck up rather than not doing their jobs.

As a side note, whilst I do have an iPhone, my 2015 MacBook runs Linux and i generally don't consider myself an "apple fanboy".
A Tribute to My Grandmother, Survivor of War and Pioneer Science Communicator
Reading through the article, it seemed as if the LTSE is more about norms than rules. Norms seem too much like marketing to me. If the exchange is toothless to enforce its norms, there will be hijinks.

I hope they are aiming for rules rather than norms and just aren't there yet.
economics is a virtue-centered value system, in fact it chooses the definition of value based on the politics of the economist.