skysight-inc/HackerNews huggingface dataset:
Here's the broader security strategy post from Github, "Securing software, together": https://github.com/features/security

It looks like Github is making a definite play into the security space. The above post mentions vulnerability detection (a la SourceClear or r2c), collaboration between reporters and maintainers (a la HackerOne), automated dependency updating (a la PyUp and others), automated token scanning (a la TruffleHog), CVE creation and more.

This makes sense as Github is unique positioned to do a lot of this work better and more efficiently than the disparate set of tools and companies relying on their functionality. This feels like a page out of the AWS playbook as far as letting others build on top of your functionality, see what people like, then doing it yourself, but better.
Deliberately provocative conversation piece:

If you're concerned enough about performance, or message passing costs are enough of an overall performance bottleneck, that parsing your messages even 1.7x as fast is worth changing the way you code, you probably shouldn't be using JSON as your message format in the first place.
This is an embarrassing comment that lacks any understanding of what slavery was actually like.
I've noticed a similar pattern in my neighbourhood. No rubbish bins and plenty of littering. When I approached the city council about this, I was told they wouldn't install rubbish bins because -- I kid you not -- that would encourage people to put their waste in the bins...

It's not uncommon to see less well-off people walk around town, putting a little bit of rubbish into any bin they pass. It's risky, because fines for dumping household waste in public bins are steep.

Disposing of household waste is quite expensive here, only waste in "official" bin bags is collected, and they're over 1eur/ piece. It's a contributing factor to poverty, and, in my opinion, to fly tipping. After all, why pay for expensive bin bags when you can just chuck your litter anywhere with impunity?
Cancerlingus?

Preposterous.
One thing I see as potential issue is isolation. Unless you have great social life around where you live, this kind of remote work becomes too lonely. Another thing is that I just dont see how something that requires group discussion and white boarding can be done without any time commitment from other remote employees. For work that can be done in silos may benefit with this kind of approach. May be I am wrong.
if you're downloading stuff off the pirate bay it's either going to get you nailed pretty quickly for IP infringement

Peer blacklists aren't perfect, but they can cut your chances of getting busted by known IP cops quite a bit.
Goals. You work with management to define what needs to be done by when, then set your schedule to maximize your personal productivity to meet those goals. You generally can't really have that kind of flexible schedule without organized/effective management. But it can be a win for Management because the idea is that each employee is maximizing their own productivity, potentially letting the employee have more free time (while still meeting goals) which makes them happier, more well rested, and thus even more productive. In the long-term your more productive employee will get more done.
Prices vary from country to country on lots of things. How much does gas cost in France vs the USA?
Unless you're rich and regularly wipe your ass with $xx,xxx bills, you end up spending your time in the US system too: getting your insurance and care provider to agree with what is covered, what isn't, and how much you have to pay.

Sometimes it takes almost a year to resolve.

BTW, even basic surgeries in the US can have a price tag of close to $100k. I've had to fight off more than one ridiculous bill like this in the last 5 years. If you're talking about medical tourism coming into the US, I can't imagine you're talking about anything but very well off people.
It's because software services are built according to the infrastructure of their typical customer. If symmetrical connections were the standard in america, how would that change the software landscape today?
Older people are just less honest with their employer, they don't actually take off less time in my experience. Perhaps there's also a thing we younger folks could learn from their experience.
This is pretty dope
Yes, it's a pretty good book. Not sure what the siblings are on about.
503s in Spain
The parent comment seems to be criticizing the higher-level corporate trend to use this lingo, and isn't talking about Friedman or Github specifically.
I've used semmle's tools at Google, they seemed pretty powerful.
From Copenhagen. Looks like it
I suspect one of the key things missing in most people's understanding is that agile is part of the "continuous process improvement" camp. It is a set of principles, values, and practices which should be examined, in addition to the work being produced, and improved over time.

Sterman's book Business Dynamics has a great diagram that I think is relevant (I saw it there, but it's probably in other books on system dynamics and related fields). I'll attempt to ascii art it here:

Mental model -> Strategy/Structure/Decision Rules
|
v
Decisions
^ \
/ \
/ v
Information <----- Real World
Feedback

That is most people's and organization's view of the world. They have a model, they develop strategies (practices, methods), then they implement them. Feedback from the real world informs their next decision, but they don't go back and reevaluate the initial model and strategy.

A learning organization, continuous improvement, agile, whatever you want adds an additional loop. The information feedback gets pushed back into the mental model:

Mental model -> Strategy/Structure/Decision Rules
^ |
| v
| Decisions
| ^ \
| / \
| / v
Information <------ Real World
Feedback

The Agile Manifesto, in the twelfth principle, emphasizes this aspect:

At regular intervals, the team reflects on how
to become more effective, then tunes and adjusts
its behavior accordingly.

This is not unique to agile, it is just emphasized in it. This is not a superfluous detail, this is actually critical, and commonly missed.
This is not something that Switzerland was happy to do; it took a lot of pressure to get them to stop being an asset haven for international tax avoiders.
Is there software to monitor company culture?
I am a consultant and I have a had a lot of companies hiring us to implement improvements to culture or highlight success at the company. Is there software that does this or aids in this process?
PTO is purely discretionary; I've never turned down a request.

Lately I've been dealing with a lot of "can I work remote while I go visit my girlfriend for a week" or "I need an entire sick day to go to the chiropractor"... it gets old because my more senior devs do not make life so painful.
We can't (won't) even stop robocalling (US)
I once wrote a memory resident keylogger back in high-school to catch the lonely sysadmin's network login. Not that I knew what to do with the login, I just wanted to prove to myself that I could.

I got plenty of logins, but not the one I wanted. Until a friend looked over the sysadmin's shoulder. I lost interest right there, but my friend went on to wreck the entire network by mistake and barely escaped paying for the whole mess.

Have to give some credit to the sysadmin for the catch. To figure out who was messing with his stuff, he put a program that emitted a high frequency tone through the PC-speaker in his login script and sat down next door to wait for my friend to take the bait.
Click the timestamp of the message, then click the [flag] entry.
It's being run frequently across the entire Windows OS repo. I have heard there is more work to be done to make it scale better, but it can scale.
"Human progress depends on the open source community."

What a way to begin an article.
Cultural Heritage –| Beautiful Bangladesh
I found semi-remote to be the best of both worlds. My office is a 35-minute commute (each way), so I work from home Monday through Thursday. I go into the office Friday mornings and leave after sharing lunch with coworkers to beat rush hour traffic. I have a membership to a coworking space if I need to get out of the house (which my company pays half of).
The cheapest plan (essentials) is $60 for the first line. The second line is $30.
Credit card companies will often honor recurring payments on a “real” card number reported stolen. This is for your convenience so a stolen card doesn’t mean a cessation of all services. You’re supposed to update these companies with your new number.

That’s not going to happen with a virtual card you canceled.
I get that some types of teams have to coordinate coverage. But, yeah, I’ve always tried to be aware of what looked to be better and worse times over the next 6-12 months and just made time off plans accordingly. This is over the course of about 40 years.
That is a great point. As a Gen 'X', it is still very hard for me to ask for anything. Young people don't seem to have that problem. We should definitely learn from them.
I don't believe the sites themselves make any stipulations about preferences regarding fonts. It's up to your browser.

In any case: Regarding the downvoting: Bring it, bitches.

...just trying to set something straight about established cultural norms around the word "hacker".
Parsing 1GB of flat JSON data is equal to 1.61 metric cow farts.
Edward Snowden: DOJ lawsuit over tell-all book is “good for Bitcoin”
> Farm kids are healthiest

Why can't we just buy some farm dirt in pill form?
The stain example is super interesting to me. Would a German person that spills red wine not acknowledge a resulting stain?

I don't know about Backpfeifengesicht, but both zeitgeist and schadenfreude are English words now.
Neither of those pages specify a font. If you are seeing a serif font that is because that is what is the default in your browser.
Listen to Tom Delonge on The Joe Rogan Experience to see just how crazy he and that organization are.

https://www.youtube.com/watch?v=5n_3mnJfHzY
Black projects by foreign powers?
Idk really, the flight specs (if believable) are insane.
So common sense says reading/sensory data error.
Akamai blogs about DDoS amplification this morning, Reddit down this afternoon? Ok this is probably more than a simple UDP flood but... the timing has me worried. If it is a DDoS, taking down Reddit is a hell of a flex. https://arstechnica.com/information-technology/2019/09/in-th...
> why do complex overengineered systems still prevail despite all this?

Well for one, IDE's help hide a lot of the complexity by offering rapid auto-completion for even the most complex of systems.

For two, it's not something you can read and truly grasp. Complexity doesn't necessarily have an objective measurement. Even the attempts we have of measuring it, such as cyclomatic complexity, don't really tell a full story.

You could reduce a somewhat complex string manipulation down to a regex replace. But that regex replace may be far harder for someone to understand what it actually does, even if they're experienced with that particular flavor of regex.

To be blunt, 100 lines of code could be easier to understand than 25 lines that do the exact same thing. It just depends on the reader & the task at hand.
I'd like to try some of them but none of them pass the wife test. She's extremely picky on what TP we buy. I would eventually like to install a bidet however.
> when they throttle in areas with weak cell signal, the throttling is aggressive and internet practically doesn't work.

I want to add in for those that don't know. There's a difference between throttling and deprioritization. Throttling usually kicks in as some specified speed at the IP network's level(like 256kbps). This isn't going to make a difference whether you're close to a tower or far away. It will make a massive difference on your battery life if your user equipment has to stay transmitting forever to complete transfers (this is a big problem when roaming on t-mobile's throttled international plans, battery life is obliterated).

Deprioritization is very different. The radio layer (called radio access network) of the tower (specifically the sector) that you're connected to controls how much time your device gets using a QoS scheduler. Stuff like voice always takes priority no matter what, since it all goes over the same data network now. I'm going to try to explain this below in easier to comprehend language...

In LTE, resources can be allocated out to a device as resource blocks. Each layer allows up to 100 physical resource blocks at any given time. Depending on the quality of the signal (how far away you are and how many people are using it), the blocks can be broadcast at different MCS levels. This controls the amount of error correction and the amount of data that can be carried per resource block. So when you're stuck at cell fringes and only allowed to get less than 5 resource blocks at an instant, the transfer rates will be slow. When you're close and allowed to use higher orders of modulation with less error correction (256QAM broadcast 4x4 MIMO), the performance loss isn't going to be as noticeable.

Deprioritization can be worked around by connecting to a different sector that isn't as busy. It's also assessed pretty quickly, something like 20ms the radio scheduling happens. Sprint's the only network afaik that posts something even slightly technical to the general public: https://www.sprint.com/en/legal/open-internet-information.ht...
Too bad TJ Miller went insane - next season would surely be We heavy. Now there probably won't even be another season - and I'm okay with that considering the last one.
Lessons Managing a Design Team
"...the archive began several new projects. One of these was the Trump Archive..." Specifically having a project for just Trump. Do they have one for whoever is the current president?
Mid 20's, first job was a small office, it was ok. Second job was in a cube farm, hated it. Current job is working remote, see my regional team once/twice a month. Been in this position for 1.5 years now and I'm ready for office life back, maybe that's just because i miss the social aspect, but i also get frustrated sometimes with not being able to get facetime with people. Would be nice to just grab lunch or hang out with people in different departments and see what they're working on.
I've been thinking about doing a similar project for fun. How long have you had the clock? I'd be really curious how hard that 1 minute refresh rate is on the screen. I have a Kindle and I definitely read more than a page a minute (especially on that small screen) and haven't noticed any problems. But a clock is more consistent and constant.

As for a watch, I could see getting notifications once a minute being fine.
I’m still not seeing what you’ve “set straight”.
The content of the call itself might not be recorded, but who you called, when, and for how long does get recorded. This is what people like Edward Snowden were talking about when they talk about metadata.
Google Cloud App Engine and Environment Variables
That main witness "bombshell" is not remotely what is written in the NYT. It is what Fox news _says_ the NYT wrote knowing the audience will never actually read the article. And is in fact a rather blatant example of undermining reality based media as an "enemy of the people"

>Considering the frequency of retraction

What, even approximately, is the rate of retraction?

And more generally, note the irony that if honest journals correct errors, it is portrayed as proof of conspiracy yet those outlets that don't (or "double down") are considered reliable. Perhaps the NYT should follow politicians and the lower grade media and aggressively deny anything that makes them look bad.
Didn't Armstrong mean to say "one small step for a man", "a man" referring to himself? Surely even at maximum political correctness, nobody would object to saying that Neil Armstrong is, in fact, a man?
One of the things that I've noticed traveling internationally for work is how much this differs from country to country. You'll be hard pressed to find a public trash can anywhere in Suwoon, South Korea. Meanwhile there's a trashcan on every single street corner in Düsseldorf, Germany. Neither city had much trash.
We're talking about JavaScript in the browser though... what other message format is more readily and performantly processed in-browser using JavaScript than JSON?
I wonder how much we've lost as end-users dealing with completely broken software due to Agile cargo-culting and the increasingly diminished (now gone) role of dedicated QA?

> The system which can be defined is not the true system.

What do you mean by this?
> Instead of considering the pain of a young person treated in such a manner [...]

I find it really odd this myoptic view: he is defending a coworker, which is not alive anymore to defend himself. He did not say the victim is lying, he is talking about how Minsky possibly didn't do anything wrong himself.

Is everyone aware there was a protest against the ones involved at MIT (including Minsky)? How would you feel if someone protested against you if you were innocent?

> [...] opining that 14-year-old girls have free will [..]

Not in the US, but that does not apply to a good number of countries is Western Europe, South America, etc.

Now, I do not agree with everything Stallman said, but he has the right to be wrong. Why can't he be wrong? Is he not entitled to an opinion which does not conform to the majority?

Silencing people we don't agree with is a slippery slope, specially when appealing to some absolute morality standard. I see this happening too much lately, including here.
It varies dramatically. Some people have to endure scorn from their managers and lose pay in order to handle important tasks in their lives. They may end up losing their jobs. Other people come and go as they please, just leaving a polite note for their coworkers about when they'll be back (or not). It's all dependent on the employer and manager and, in some cases, state laws.

What I find confusing is how you imply that "going to the bank" is an OK reason to leave work, but taking a sick pet to the vet is weird? What country do you work in?
on both sensors at same time, getting the same fake signal at the same spot ?
Others got the Karen part but crunchy comes from "granola parents" who are doing trendy "health" things.
Context is data. All you're saying is that data is better when there is additional relevant data. Yes...
Well there's your mistake. If you apply through their website, you're instantly being funneled into an HR tool that weeds out anyone without a BS in CS.

The trick is to get in contact with that company's recruiters using a site like LinkedIn. Establish a bit of rapport, send your resume and portfolio, and let them handle setting up your phone screening and technical on-site.

Recruiters are an amazing resource in our industry and are great for getting your foot in the door... Especially when you're being blocked by those automated HR filters.
Is California allowed to add a tax on vehicles for various emissions?
When Blockbuster could have bought Netflix for $50M, but didn't
If I want to talk with somebody, I'll do it face to face. Most people aren't worth that kind of effort, and text/email is all they deserve.
Used it in college about 8 years ago. Can't say I'd do the same today, but back at that time it made some sense as college programming classes were teaching more than just practical programming knowledge.
They do matter but not for the reason you'd first think. It's about liability. Imagine a bank testifying in a hearing about a recent data breach. They are going to want to give the perception that they have done everything within reason to protect their user's data. Password restrictions are a cheap feather in one's due diligence cap.
Gut bacteria IIRC effect personality/mood as well as other things.
I have been making my test suite emit structured data for the API tests which is used to document the API. This eliminated the margin for error in manually keeping the API documentation up to date. This improved the test coverage a lot as complete coverage is required for the documentation to be complete. It looks great too -

https://github.com/userdashboard/organizations/blob/master/a... derived from https://github.com/userdashboard/organizations/blob/master/t...

Another thing that helped was moving all my UI page tests to Puppeteer which is a NodeJS API for browsing with Chrome and tentatively Firefox web browsers. This let me automatically generate screenshots for my entire UI to publish as documentation, while simultaneously testing the responsive design under different devices which surfaced many issues.

https://userdashboard.github.io/administrators/stripe-subscr... generated by https://github.com/userdashboard/userdashboard.github.io/blo...
I don't think gullibility is the issue here. Really it's liability. Don't think for one second that Troy wouldn't get his pants sued off for any number of these banks for poo pooing their security. They certainly have the money to do it with.
Expect Shortcuts to land in 10.16. Most of the plumbing’s already in 10.15; it’s just not public yet.

https://twitter.com/stroughtonsmith/status/11359563313603461...
Saskatchewan has a government run telco called Saskatel, that's why you're inlaws have decent service. Every where else in Canada has worse service than Comcast.
These benchmarks indicate better protobuf performance [1]. Compute time these days is often dominated by memory transfer rates. The "slowness" of javascript seems to be offset by there being less data to begin with. Collapsing a 100KB resource down to, 50 or 25KB is usually worth it even if you have to do more operations in javascript. Not to mention end to end load time (which is probably what people are usually trying to optimize for) can be lower by reducing how much data needs to travel over the wire or radio.

At the end of the day, who knows if the use case hits edge cases or stresses parts of the implementation that is not optimized for JSON decode or protobuf. Getting meaningful performance data ultimately needs to be experimental, and resists categorical answers about whether X is faster than Y.

1. https://www.npmjs.com/package/protobufjs#performance

This article goes into a bit more detail: https://auth0.com/blog/beating-json-performance-with-protobu...
>You have a bit of a misunderstanding here - a baby does not have a microbiome in the womb - it is a sterile environment

no. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4350424/

"The first, and most important, contribution to the genesis of the microbiome is vertical transmission of maternal microbiota. Colonization of mucosa in the digestive, respiratory, urogenital tracts, as well as the skin begins at, or perhaps even before, the time of birth when a newborn is exposed to a mother’s microbiota. It was previously thought that the in utero environment was largely sterile and that a fetus was not colonized with bacteria until the time of birth. Recent studies suggest the presence of a microbiome within the placenta as well as fetal meconium, suggesting that the colonization process begins well before delivery. "

And my point is that the "most important, contribution to the genesis of the microbiome" probably gets hit with the antibiotics given for C-section.
I do not argue that they're competent because they're important. I argue that they are competent because there is a multi-billion dollar pile of cash that they're guarding. If they aren't competent, how come nobody has stolen it all yet?

Look at the efforts spent hacking Bitcoin exchanges and identified large holders. Lots and lots of money being taken there. Look at the efforts made to hack much less important things. How come no big banks have suffered a serious compromise leading to the loss of 9-figure plus amounts of money yet?
Are Adam's pronouns we/we?