skysight-inc/HackerNews huggingface dataset:
I think it is worth digging into the meanings of "vulnerability" and "confidence" here.

I think "confidence" is rooted in the belief that "whatever happens, I'll be able to handle it. I'll be okay." Showing confidence is externally-emoting as if you believe that to be the case.

Vulnerability...I'm less sure of. I think it is the ability to be wounded. By being vulnerable, you reveal information which someone else could use to ridicule you. Patrick Lencioni's work on organizational health refers to vulnerability as a key piece of building trust[1]. How does it work? By showing that you expect that people hold a social norm against ridiculing people for the thing you reveal. That you are willing to pay a cost for that social norm. I think when people use the word "vulnerability", they mean sticking your neck out for a social expectation of compassionate collaboration -- norm-building vulnerability.

And that sort of vulnerability is compatible with confidence. If they do ridicule you, then you've learned what sort of person they are and you have the power to respond accordingly.

But I think its easy to confuse norm-building vulnerability with another vulnerability: insecurity-revealing vulnerability. This is where you present something that could genuinely hurt your sense of belonging -- Information which you think others could present as evidence that you should be ostracized from a group. For example, a man in a homophobic environment who reveals that he is bisexual. How should a man express these sorts of insecurities? By default, he shouldn't. He should hide them until he can find a supportive community. Unless he's with someone he already trusts or a mens' meeting of Alcoholics Anonymous. Don't express insecurity-revealing vulnerability.

[1] https://www.tablegroup.com/newsroom/news/vulnerability-endea... is an example, but he talks about the concept in The Advantage and his novels.
With a sensory deprivation pod in the middle would be interesting
“When I was working at X on Y, we had a test suite that had become difficult to maintain. Some of this was due to particularly non-idiomatic code using stacked decorators, so I replaced that with more understandable setup and teardown functions. It really improved our ability to keep the tests up to date and to quickly resolve issues, and I’m glad I went out of my way to get it done. I also updated related documentation that hadn’t been touched in a long time to make it easier for people on the team to ramp up on the package.”

You had a good interview story on your hands there! Give the interviewer the context of what the situation was, what you did, and why that mattered. But maybe leave our your leadership team’s penchant for never ending meetings. :P
https://www.google.com/amp/s/www.nytimes.com/2014/09/21/us/d... <— this sort of thing is completely indefensible.

I’m just about the most free-market person you’ll ever meet, but the current situation in the US is completely untenable. I’m beyond caring about how the insurance companies tie your hands, how you’re just a doctor focused on patient-care/“customer service” (that’s a new one) or anything else. Here’s the bottom line: doctors have the most to lose by not fixing this nonsense. Insurance execs, hospital administrators, and other various parasites can go MBA something else. You lot are the ones with specialized and non-transferable skills. If you all collectively don’t start using your knowledge of the medical system to propose real changes, then the rest of us about going to impose changes on your profession that I promise you will not like.
Honestly, we haven't figured out our pricing model yet - it will likely be a combination of support+enterprise features (don't know what those features would be).

At this point we want to make our pilots/customers successful. Would love to understand your use case first and we can discuss pricing (e.g. if you need us to manage it etc)? Follow-up with you on your HN email?
I think researchgate does that with a social network for scientists. I think if scientists can maintain a personal site (or use their lab site) and put the papers there you can mostly find them with google scholar. Researchgate works as well if you don't want to maintain a personal site. I'm not affiliated with researchgate in anyway but have posted by papers and thesis there which can be accessed via google scholar.

edit:- arXiv works as well :)
+1

I have few male friends I can share feelings with and most of the females I've dealt with just don't want this while wishing for men to be more sensible.
A Wall Street Revolt That Fizzled
I fail to comprehend why this being done across the EU is supposed to make any difference? Its not like there were competing news outlets across the EU due to the language barriers. What after the EU implemented it and it still isn't magically working how you deluding yourself into? We just have to make it international then? No its exactly as foolish as everyone with half a brain has been saying and warning everyone for years and its only hurting smaller EU internet companies (if there are still any at all left under the many disastrous EU decisions).
That would work perfectly for us too. Is that considered an open-source license? We have heard OSI has strict standards around that
Weblocks: A Web Framework for Common Lisp
"I had nothing to do one Sunday evening, so I played around with reverse-engineering the different scooter apps' APIs to see if I could find any loopholes. One would think that the more well-funded companies had thought more about their tech and would be good at preventing fraud. However, that isn't the case."

That sounds an awful lot like the author thinks that what they were doing is fraudulent. But I seem to have misplaced my Law Degree, so I couldn't say.

Personally, I am not sympathetic with attempts to "hack" a business' systems, whether by social engineering, attempting to exploit loopholes, or full-on exploiting security vulnerabilities. It may be legal, I cannot say, but when done in bad faith it is nothing more than parasitism. Or if you prefer, "exploitative."

Now of course, if the author has no intention of using these fraudulently obtained promo codes, and this is supposed to be some kind of white-hat "security research," that's another matter.

But this doesn't really look like it is being conducted for public benefit, e.g. to protect the privacy of users. And unsolicited testing of other people's systems seems like a legally perilous activity.
Openness has gone down over time imho. Too many unbroachable subjects and kneejerkers. I somehow observed life and came to the opposite conclusion as you did. Curious. Whats a big world we live in.
After reading the comments (on HN) and the law I think this is a good thing. I’m rather confused by the visceral response by some people on HN.

It may be an unpopular opinion, but Google was stealing. They were showing enough information no one was clicking the links. What this means for content creators is that you couldn’t make revenue.

If I search for something on Google I get so much information above the fold (and ads), I pretty much never see a real site. That’s a serious issue, because Google isn’t creating that content. Worse, their using their monopoly to push the AMP framework to make it easier to get snippets and actually serve your content on their servers.

No, this doesn’t have to be the end of the world. Almost all decent sized websites add their own preview and snippets (which Google can display). So all it does is enable further controls to publishers.
> The exploit allows only tethered jailbreaks, meaning it lacks persistence. The exploit must be run each time an iDevice boots.

Could it be made to persist?

> Checkm8 doesn't bypass the protections offered by the Secure Enclave and Touch ID.

Could it be made to bypass the Secure Enclave?
For a great deal of civilisation, so was rule by tyrants and warlords, and eating meat. Arguments from nature don't get you very far.
Anyway, airports are highly dependent on the correct functioning of all the instruments involved in IFR approaches.

Whether it's ILS, MLS, GPS, GBAS-LS or GNSS; spoofing, jamming and replay attacks may imply the capability to degrade or disrupt airport operations.

Usenix is not publishing techniques for military grade electronic warfare... I'd hope so.
> Problem, of course, is that your municipality likely uses some form of metal piping to get water to your tap. Which, depending on what all that is, could mean elevated lead levels etc.

Not a metallurgist, but I am pretty sure there are metal alloys that do not contain lead.
> The findings of the study will be presented at the European Society for Medical Oncology meeting in Barcelona, Spain, and published in The New England Journal of Medicine.

Anyone have a link to a preprint? Can't find one anywhere. Hard to comment without seeing the actual source.
You're right, that's a terrible answer. But not because the content is bad, but because you threw a coworker under the bus and because you didn't mention the impact that any of these changes had.

"We had a large module that we were making lots of changes to that used Python decorators to add behavior. This pattern ended up growing to be really difficult to debug as we were changing the code, and when tests would break it would take hours of tracing through the code to figure out the reason. I (rewrote each method to not use decorators | inlined the decorators manually | whatever) to clean up the code. One of the other reasons working with this module was difficult was because the documentation was terrifyingly out of date, so as I was cleaning up the decorators I also updated the documentation."

If you can say anything about the quantifiable impact, then do it, but I don't think this example necessarily requires it. The meetings had nothing to do with your problem.
Agreed. Thanks for the insight.
Yup, 'clean' nyc always seemed off. The grit is what sells it.
This is typical tactics from Trump. Whenever there is a meeting he inflicts maximum leverage and stress to the opponent. I wouldn't read much into this honestly. It's a game.
No. Yes, yes.

The New Colossus

Not like the brazen giant of Greek fame,
With conquering limbs astride from land to land;
Here at our sea-washed, sunset gates shall stand
A mighty woman with a torch, whose flame
Is the imprisoned lightning, and her name
Mother of Exiles. From her beacon-hand
Glows world-wide welcome; her mild eyes command
The air-bridged harbor that twin cities frame.
"Keep, ancient lands, your storied pomp!" cries she
With silent lips. "Give me your tired, your poor,
Your huddled masses yearning to breathe free,
The wretched refuse of your teeming shore.
Send these, the homeless, tempest-tost to me,
I lift my lamp beside the golden door!"
I have no idea how to argue against this nonsense.
Basically, these are the same anti-scientific arguments that climate sceptics put forward against climate science or anti-vaxers against medicine. One simply claims that a science is in reality a religion and that it serves only to support unpopular policies such as tax increases, interest rate cuts or to increase the profits of the pharmaceutical industry.
It's very weird, he seems to admit defrauding the system and bragging about.
I don't think it's a very wise idea.
That's a really good point Josh, I was reading something about a month ago about one of the gaming keyboard companies which has an adjustable magnetic switch which lets the user change the key travel, which I believe was also done via electromagnets.

Hopefully none of this is too far off. I'm not sure how the industry got itself into its current condition of poor experiences due to a desire for the great thinness.
> Could it be made to persist?

Unlikely and that'd be something Apple can patch at their leisure.

> Could it be made to bypass the Secure Enclave?

That's not how this works. The Secure Enclave generates and stores asymmetric encryption keys and exposes an interface to perform various operations with these keys. Retrieving the keys is not possible. You'd need a separate vulnerability in Secure Enclave. Once you found a Secure Enclave exploit you need to run it, yes and iOS does not want you to run it yes, but let's face it: anyone having the mastery to break the Secure Enclave is more than likely to have an entire stash of iOS zerodays...
I don't disagree with you when a candidate has already been through a thorough interview process but the company has some concerns around a special and unique area of concern. It is very fair IMO to ask someone to do a little test around that special area or go through a more detailed interview there, I've done this for specific candidates myself too. But that area needs to be something so considerably unique to your business that the person can't have conceivably done it 20 times before. What is ridiculous is asking them to solve a puzzle unrelated to the job, or write loops or look up data from a database when all those things are something they have done likely 100's of times and you can easily ask questions around. In this specific case, I don't think a small test is out of line at all, as long as it is paid and short and the person knows they are the short list ready for an offer, or an offer has been made contingent on the test.

What I object to is all these companies that do a 10 minute call (or not even) and then ask a candidate to spend many unpaid hours doing a test before they even bother seeing if the candidate is a fit for the position. And frankly, even paying for it doesn't make it fair for most experienced engineers. For example, I have seen most companies that do offer to pay, offer typically around $50 for 4 hours or $20-40/hr and they want an NDA that contains non-compete clauses many times. I have seen 5 startups doing this in the last few months, one was a company I had been mentoring off and on, the others were mainly companies friends had applied at and were dumbfounded. But if you take my scenario where the test is legit, you are testing something that is specialized knowledge and isn't useless to the company so you need to pay a fair consulting wage for the time, not a discount amount. Hopefully that makes sense, it does in my head but I am not sure I articulated it well.

The overall goal is move through interviews fast, find smart candidates that will solve problems and don't put so much emphasis on meaningless details. I have seen a few companies doing a solid technical interview and they do ask quite a few algorithm based questions. I normally would disagree with algorithm questions when they are done just as a CS question. But when they are being asked because the candidate will literally need to be implementing them or understanding them at a deep level because the product and position being interviewed for is handling millions of distributed transactions a second or something similar, then they are legit and very necessary questions. But they are more or less useless (with a few exceptions) when you are a startup and you don't even have a working product or customers, in that case, the company just needs people with experience to get the product out the door and stop worrying about crazy algorithm questions or useless tests.
So it is necessary to know a device's PIN to apply this jailbreak?

The article refers to Secure Enclave and how its protection cannot be bypassed, but it's unclear whether the PIN itself (and entering the DFU mode) is protected by the Secure Enclave.
Competent Elites (2008)
The article fails to mention ILS integrity monitoring systems. They are mandatory for Cat II and Cat III operations.

ILS degradation is a well-known risk and concerns are mostly associated with environmental effects like signal reflections from other aircraft or airport vehicles. 1979 FAA report "Far Field Monitor for Instrument Landing Systems" explores the issue in depth: https://apps.dtic.mil/dtic/tr/fulltext/u2/a079663.pdf
The available evidence suggests that that's much less true than the obvious Economics 101 arguments would suggest. See e.g. https://en.wikipedia.org/wiki/Minimum_wage#Empirical_studies for some pointers.

Obviously if you raise the minimum wage high enough then it's going to hurt employment. But it seems like it has to be quite high before it hurts employment much, and in particular it seems that "everyone who would otherwise have been paid less than the minimum wage just loses their job" is a really inaccurate model.
Very little of what they said applies to auto mechanics, outside of consumers not having much domain knowledge.
Yes, in most EU countries checks are nearly nonexistent, and a large portion of population have never ever seen (much less used) a check even once in their life, it's something you read about in literature and hear mentioned in American media. IIRC they're quite popular in United Kingdom still, though.

I worked in a bank for a bunch of years, a decade ago we were processing <100 checks a year, which was an unusual (and expensive) service; about half of the checks was companies doing international sales to unusual countries and the other half was scams; so that business was shut down - some banks do offer a service of cashing checks, but many banks will not.

A wire transfer to an account in another banks is (depending on your bank) either free or something like 0.15-0.30 eur, certainly cheaper than a stamp if one would need to send a paper check.
Well go read the book and argue against that, that's good enough for me. Economics is not a science, economics uses science. The alternative to economics is politics where political decisions like austerity are not wrapped up in economics and pushed hook line and sinker. Where you are have to argue for policies politically rather than just pushing them because leading economist nobel prize winner said so.
My God, It’s Full of Dots
> Could it be made to bypass the Secure Enclave?

Well, drilling each individual chip is not economical, but doable. Usually it only meant to get something out, not in.
With further exploits, possibly, but not with Checkm8 alone.
https://www.ft.com/content/967daaae-2412-11e7-8691-d5f7e0cd0...

> The National Front party leader warned over the Easter weekend that French “civilisation” was under threat as she pledged to suspend all legal immigration and protect the French way of life, toning down her plan to take France out of the euro.

> “Give us France back, damn it!” the far-right candidate demanded at a rally in Paris on Monday night as her supporters chanted: “This is our home!”

> In comments clearly aimed at France’s Muslim population, she said: “In France, we drink wine whenever we want. In France we do not force women to wear the veil because they are impure . . . In France, we get to decide who deserves to become French.”

Who are the people whose home France is?)
> and I also think PHP is a hot mess

That is a mighty strong statement when trying to big javascript lol
I wonder when Trump will realize he's trying to play checkers on a chess board?
May I respectfully suggest that you go and fuck yourself?
If I'm posting something on Craigslist, I'm usually more interested in getting rid of it than getting the best price.
Paradigms of Artificial Intelligence Programming by Peter Norvig (1992)
I like this one more: https://ui2.worldspinner.com/

The process can seem a bit lengthy but you can skip most parts (e.g.: culture generation) and just get to the map bit.

Here is a map I made last night: https://i.imgur.com/HYMrbjx.png

I turned off all cities, roads, rivers, etc, as I just wanted a plain map.
No, PHP Doesn't Have Closures
Oculus Connect 6 Day 2 Keynote (John Carmack)
> depends on what _alternative_ choices are available

Doesn't that put a negative stigma around sex work? It makes it sound like sex workers should/would only get into sex work if they had no other options available.
No, religions love the idea of an abortion ban, because it makes sex scary and not fun which means they get control over who gets to live and form an intimate relationship with who. Which religions love. Same reason they hate condoms - if abortion were really about the life of an unborn child then condoms and sex education would seem like a good idea. But nope! That leads to sexy sex which can't be OK, and apparently is worse than abortion.

We could go back thousands of years, or I could just point out the southern baptists standing outside colleges with signs against homosexuality today.

Or we could go back like 5 years when the entire country lost it's mind that two people with penises could live together and be called "married" by the state.

Because orthodox religious people in my country are cruel and like power. And they're very against abortion because they want power over people because in their own lives they are weak. At heart it's the same kind of hatred that's against immigrants - a selfish peevish little feeling that rears its head in order to make one seem better at the expense of others.

It's not that deep or hard to understand. We don't need fucking Aristotle and the Mystery Machine.
The whole democratic voting for implementation and architecture decisions drives me crazy.

Am I being irrational?

I just want somebody to make a decision, and if it is wrong, we learn, and try something else.
It seems like they are doubling down on the Oculus Quest.
Don't be reductionist. Most arguments have grounding in nature and the real world, believe it or not.
Also Vatican City.
Coleslaw: Static Site Generator in Common Lisp
> In that instance, where an engineer can easily leave your company, it makes sense to want to ensure they really want the position since interviewing and onboarding are very expensive for a company as well as having someone leave with a bunch of institutional knowledge built up over the years.

I think that's the main thing we worry about when hiring. We do have HR do initial screenings, but we have our engineers do the rest of the interviews, so it's very costly for us. We've been bitten a few times because people wanted to use us as a strong stone. We aren't as big as a FAANG, but there are a lot of people who leave our company and go to one. If we spend months finding a person and they leave in 6mo to a year, it's very costly for us.
this might be the only realistic way of solving the immediate problem, but I don't find it very satisfying. I don't believe people like mark zuckerberg have actually created billions of dollars of value themselves. it does require hard work, skill, and a bit of luck to get that initial advantage, but then the few people that find themselves in this position are able to ride network effects all the way to the top, basically exploiting a market failure.

imo, the ideal society is the opposite of what you said: people who do "useful" stuff should get to keep most of the value they create, and there should be mild restributive programs to ease the burdens of people who can't really contribute. definitely not realistic, but this is the ideal I think we should shoot for. the team of researchers who cure cancer should be worth more than guys like zucc.

note: I don't mean to single out zucc; I just think Facebook is a good example of a valuable company that hasn't improved the world.
That might work well for a site to report bad driving (though I believe most people still don't have dashcams, so it would hurt the effectiveness of the site a bit).

But, recalling what the bad-driving site was an analogy for, it doesn't seem like it would be appropriate for sex workers sharing reports of bad clients.
I’ve heard some people taking about using a raspberry pi zero or some other microcomputer to apply the exploit on boot, which sounds quite interesting.

As someone who used to jailbreak back in the day, this news was really exciting. However looking at it in a mature way than I did back then, it’s also slightly worrying that a whole class of iOS devices have a severe and unpatchable security flaw.