skysight-inc/HackerNews huggingface dataset:
> The EU might be doing a better job here-- but is this suggesting that I trust my US ISP's DNS servers?

That's the false dichotomy. You shouldn't use either one.

The issue is that if you've already made your choice, e.g. by having your DHCP server give out the DNS you actually want to use or configuring it in your operating system, then having Mozilla default to ignoring your choice and overwriting it with Cloudflare is wrong.

And it would be one thing if it was something like people selling internet gateway devices that do this by default -- that's a great idea because it gets you away from the ISP's DNS by default but still provides a single place to set it the way you want it, and still allows the owner of an individual device to override it device-wide if desired.

Putting it in individual applications is the opposite. It means you have a full time job just changing it back to the way you want it in every application on every device, and even then you're liable to miss some.
Eh, in the Bay Area we have plenty of public transportation agencies / systems (which all coordinate really poorly with each other), and none of them are great (though some are more cost-efficient than others, e.g. Caltrain vs. Bart).
Not true, and where the Spring Framework <strong>allows</strong> to use interfaces only (i.e. without having to write an implementing class) it's for neat reasons, e.g. autogenerating Spring Repositories.
I think you're losing sight of the original argument I was responding to: that a main reason for spinning off bits of Google as separate Alphabet subsidiaries was to allow job title inflation for the same role.

There's only one CEO per company, so if you want more CEOs you need more companies. Being CEO of Waymo probably isn't that different from being Manager of the Autonomous Cars Division or whatever, but it sounds more impressive.
How is this the top rated comment?

Because it spells out a view that the majority agrees with.

The post suggests searching and hiring outside of the traditional pipeline

It suggests the only way to hire more women is to discriminate against the best credentialed candidates.

It doesn't mean that the pursuit of gender parity is delusional

Lots of us believe it's actually, truly delusional.

How long have women been encouraged to go into engineering? Decades. My entire life. The numbers studying it don't shift. Diversity initiatives have long ago passed the King Canute stage and turned into full blown reality denial based on a big pile of nasty conspiracy theories about men. Aline Lerner is one of the better "women in tech" out there but even she goes there:

hostile university culture in male-dominated CS programs, biased hiring practices, and ultimately non-inclusive work environments that force women and people of color to leave tech

Ugh. Women would prefer teaching children to software? It must be that men are hostile, biased and "force" women to leave!

What about the fact that most childcare workers are women? Is it due to rampant bias, hostility and discrimination by women that "force" men to leave? Where are the hundreds of millions spent on fixing that? At least with teaching there's some slightly plausible argument about why gender diversity might be useful, whereas in engineering there is none.

These beliefs are insulting, demeaning, condescending and ultimately false. The vast, vast majority of men I've encountered in the tech world bend over backwards to give women anything they want if they even so much as express an interest in tech. Sometimes they push them to the front even if they don't. The idea that women's lack of interest in tech is all the nasty male's fault is absurd and is the inverse of the reality: namely, women routinely campaign hard to exclude men from opportunities. All in the name of "equality".
But, one of the "app" toggles is labelled "System Services" which apparently only disables some system services. I would expect that disable all system service/location functionality (while leaving me the option to enable some other single app).

For my use case, namely limiting access to 3rd party apps, this mostly works. But, the toggles could be named better.
90% of this post is BS. They spend most of the characters on overriding toString, equals, and hashCode to never use them.
Yes - Java spells it out.

ie A lot of the 'boiler plate' is stuff that allows the compiler to check for errors, and humans understand the code but at the same time allows you to vary behavior if you want.

Java also has language simplicity and consistency [1] ( few syntax short cuts ) - which helps humans understand code - the coding equivalent of 'plain english'.

Whether you see that as a good thing or not depends on whether you are writing self contained scripts or large long lived complex systems.

[1] the later bolted on generics, not so much.
Scripts are superior in term of usability for what you do. Period.

Java is for enterprise scale applications, where dozens or hundreds of developers contribute to the code base, for a decade or more.

The boilerplate, the verbosity, strong types, the dependencies on complementary tools is what makes a large code base maintainable in the long run. If cared for.

If you need to scrap a website a couple of times, convert text from one format to another. Yea just use some script. Throw away code that nobody but you will ever need to touch or even look at.
It is possible to write a python, Perl, JavaScript, or even Php app at scale. It may require a bit more due diligence though. Frameworks have been introduced to help with that.

The article is written by someone who doesn't fully understand Java. No need for interface to support injection. Interfaces are commonly written by CS graduates or uninformed long time OOP developers, but composition and DI have been around for over a decade. I stopped reading when the interface was pointed out as the only way to go.
It's getting reported on by major outlets, just not very loudly or prominently. There have been articles in the Guardian, The Daily Mail, Reuters, Forbes and others. The press frequently gives China a pass on things that any Western country would be pilloried for.
Yes. Its preservation is promised by Allah. In practice, I think one reason for that has been that it's encouraged to memorize it (from its inception), the original blockchain :)
That's kind of like saying modern healthcare and vaccines isn't really a solution sinve someone will invariably catch the flu every time a new virus hits, isn't it?
Interfaces in that case can be useful for unit tests since they enable mocking.
The other is to force investment (either from them or through government) to a third vendor. Bombardier and Honda seem really interested in entering the space, and maybe Dassault can be dragged into it, but its capital intensive.
I suspect people see a lot of enterprise-y boilerplate (IAbstractFactoryBeans, for example), absurd inheritance hierarchies, and other things like getters and setters--they think these things are "part of writing Java" in a way that isn't "part of writing Go". In some sense, they're right--Java has more of a boilerplate culture even though it technically requires less boilerplate than Go. You can break from that culture (and as I understand it, Java is moving away from that boilerplate culture) to a certain extent, but you're still likely to have to use libraries that encourage it (by extending a ridiculous inheritance hierarchy, for example) and you'll probably end up working on teams that require a certain amount of boilerplate (e.g., mandates like "getters and setters for everything!").
I'm always suspicious of people who offer opinions about Java, but then mention "J2EE", a term which has been obsolete since 2006.
Read Quantum Computing Since Democritus. Its the best you can do as a lay person.
that's a problem with linux not taking container security seriously. there are other, more secure, container implementations in different kernels. containers are a good abstraction, but linux does them poorly.
I think largely it is defined as "all situations that can be dealt with by humans". I don't think this needs to be said, because obviously no one expects an autonomous vehicle to be able to do anything about being hit with say, a thermonuclear warhead.
Just a quick comment on "Nothing new here imho." One of Martin Luther King's friends and supporters, Rabbi Abraham Heschel, said the following:

"I am surprised every morning that I see the sunshine again. When I see an act of evil, I’m not accommodated. I don’t accommodate myself to the violence that goes on everywhere; I’m still surprised. That’s why I’m against it, why I can hope against it. We must learn how to be surprised. Not to adjust ourselves. I am the most maladjusted person in society."

I think this perspective is what drove Heschel to "pray with his legs" as he put it. I appreciate this perspective of spirituality, and thought it might be insightful.
Just figured this article (or copy of an article originally posted by Joel on Software Engineering) fit in this discussion.
https://pastebin.com/VJUNqsU3
Looking at how Gazprom is buying EU politicians wholesale ...
How does Lombok help to avoid this?
> my keys, my photos, my docs

You listed it, the problem is personal data.

If an executable nuke my computer it’s a pain but if they don’t have access to my data it’s not that severe. For a long time we conflated the two, being hacked / getting a virus meant you got downtime, and you were screwed if you didn’t have backup, but it stopped here.

But really what changed in recent years in threat level is how much personal informations are in computers, and classic security models were not thought with that in mind. There is no « personal data » flag, just a permission it belongs to a user. It worked fine for executables and working documents, but personal data are a different thing.
I confirm this. I rename classes and move them around, and without a refactoring tool that renames files and changes imports automatically, life would be very hard. Before refactoring tools got to this level, I was running pytest to see what import statements got affected during my refactors.
No worries, on the whole the documentation is top notch.
Java OOP is embarrassing. Design patterns are inconsequential in FP / Go / Erlang. It should not be taught in schools. Startups should stay as far as possible away from it. Java Enterprise software and programmers need to die a slow death. Ruby style OOP has its place but nothing closed-minded needs to be respected, let alone coddled.
The hack is (and I can't explain why because I don't get it) a lot of investors still look at Google and only Google and don't care how much money the 'bets are losing.
As soon as you get it out of there either as income (at least some part is required) or as dividend and you start paying taxes. Not before so this is allowed and legal (and smart). They are about 25-30% in total well below the top tier of about 52% in case of income tax.
You can feel this when panning because the relative direction of a point on the outside edge of the display swivels around like crazy.
Immutability – Computerphile [video]
Sorry but that seems like nonsense, at least the Bezos example.

If everyone gets 1B tomorrow an amazon share will just be a lot more expensive. You are assuming Bezos holds all his wealth in cash.
Reddit’s 2019 Year in Review
430 million monthly active users – 30% YoY increase
199 million posts – and counting!
1.7 billion comments – and counting!
32 billion upvotes – and counting!
Monthly comments have grown 37% YoY
Monthly view count has jumped 53% YoY
There will not be a ceiling anytime soon. Cheaper flights mean people relocate farther from family and companies take contracts for jobs in remote areas etc. People want to travel extensively. If people could teleport they would. There is a huge latent demand from developing countries too.

That is unless we get a steep carbon tax. Hopefully we will.
After Climate Despair [Unpaywalled]
Wow, wasn't expecting that quick of a turnaround.
The Foundation didn't seize the domain, it just suggested to the NIXI that they should do so.
My biggest beef with idiomatic Java code is that it is so annotation-based. For example, I recently had to do a small CLI app in Java, and the command line parser library that came up in searches was picocli. Now, I mean no offence to the creators of picocli, it's pretty typical of most java code in my experience, but why does it have to do everything via annotations? Take their example for instance: https://github.com/remkop/picocli#example

Not sure why a "just plain data" approach couldn't have been taken so that instead of:

@Option(names = { "-v", "--verbose" },
description = "Verbose mode.")
private boolean[] verbose = new boolean[0];

You could've had something more...

Option<boolean[]> verbose =
Option.<boolean[]>newBuilder()
.names("-v", "--verbose")
.description("Verbose mode.")
.default(() -> new boolean[0])
.build();
Good point about implicit conversions; I may actually be able to use that to clean up some code in the near future.
Here you go, from the Guardian: https://www.theguardian.com/world/2019/jun/17/china-is-harve...

It's about the Fulan Gong movement, FWIW.
Here's a demonstration of and business case for LEO from 1957: https://www.youtube.com/watch?v=-8K-xbx7jBM .
I'm not aware of any move that makes it impossible for any one player to win Settlers of Catan, while still extending the game to 2.5 hours. There are at least four basic strategies that work to win, and it's nearly impossible to block all of them to the other players while still pursuing one yourself.

I have seen people win without ever building a third settlement.
The compiler is not interacting with the user. The ide isn't smart enough to apply some refactoring without the users consent.
They're not: C++ and Rust have winners for some of the tests.
If you have wind, polars, currents, and sea states you should have a good grasp at where you're boat will be and at what time.

Also, the closer you are to your start time the better the model. If I go sailing in the next 30 minutes, the model is really damn accurate.
Previous to selling it.
This is taken to a pathological degree in the VIPER architecture. Every thing is decomposed and wrapped in and interface. Unfortunately this has gained some popularity in the iOS world. It makes code so much harder to follow and maintain.
Top three requirements for OTA software updates for IoT
nonsense, that's an animal
Confessions of an insurtech founder: why single payer is the answer
Spot on. Thankfully it is becoming more common to Just Write Java. Java without the frameworks and other bloated crap is actually decent. The language itself has a lot of warts, but the Java ecosystem is one of the best (Python too).
Newfound Monster Black Hole Is Too Big for Theories to Handle
"Never fixed" here, means changing in meaning, not failing to be repaired -- but which also happens.

Mistakes in written scriptures are common, often seeding weird cults. For example, the biblical proscription on "suffering a witch to live" is said to have referred, in the original, to poisoners, but inspired an Inquisition devoted, in large degree, to confiscating widows' inherited property.

"Life of Brian" noted the phenomenon.
> ensuring there are no URL’s that can be copied and pasted

Google maps does this with addresses. Why can't they just let someone copy the text. I don't understand why it's so purposefully hostile to users.
Mary's Meals. They provide free meals to children all over the world at their schools. Without Mary's Meals those children wouldn't be able to go to school at all. I think that is the simplest and the most effective way of solving the poverty problem. They also use only locally produced food and help from local volunteers. And they claim that they keep only 7% of donated funds for operations.
> I'm fairly well acquainted with the literature on this topic

How so, exactly?

> and I think the opposite; the fact that most people don't understand why these "nitpicks" actually seriously undermine the premise and totally butcher the prescriptive suggestions

Personally, I'm inclined to withhold judgement until the dust settles, yay or nay. The topic is technically difficult, and there are a lot of actors with political interests in the outcome of the discussion that muddy the waters.
Guy gives crypto presentation in NK and is arrested by US for evading sanctions
.in is a ccTLD, so there are no requirements on its transfer process whatsoever. There are plenty of ccTLDs out there that don't use EPP at all, and simply maintain everything in a hand-edited database or provide a web console (but not programmatic interface). I doubt that .in is one of these ccTLDs that doesn't support EPP, because the big ones tend to support it for obvious scaling reasons, but there's still no protections being offered because the Indian government can always just do what it wants, like provide an API to an anti-botnet company in Germany that can instantly yank any domain name it wants to.
Like many successful foundations the Wikimedia Foundation has been taken over by empire builders. These types expand non-core mandates to justify increased headcount and gain clout & self-importance.

The tech requirements of Wikipedia are straightforward. The content comes from volunteers. The software development could be handled via a community development process like Debian's.
Privatization is the solution to regulatory capture.

Larger government just creates more regulations to capture.
I agree that Java is almost unwritable without an IDE, but that strictness has led to Java having better IDEs than most languages. For large code bases, most languages get unmaintainable without an IDE, putting Java at an advantage. I'd still use Python for something simple that won't grow past a few thousand lines, though.
Great question.

Check out [1] and scroll down to Table A-7 (it's an Excel file). It's the real earnings data (in 2018 dollars), by gender, from 1960 to 2018 (though it's kind of spotty before 1967). What sticks out:

* For men (looking at Total Workers), real earnings are currently around 10% higher than they were in the 70s (moving from low-$40K's to recently just past mid-$40K's, with some peaks and valleys along the way). Doesn't sound like much, but...

* For women, earnings have roughly doubled in that timespan

* The number of men in the workforce has increased by almost 50%

* The number of women in the workforce has increased by almost 100%

From a certain perspective, it's kind of amazing that real earnings haven't gone down significantly.

In the last 20 years, median earnings, in real terms (adjusted for inflation), are up. Unemployment is at its lowest, and that's at the broadest definition of "unemployment" (U6) [2].

As for poverty, check out [3] from the US Census Bureau and scroll down to Table 6 (it’s an Excel file). It’s the percentage of people in America that are below 125% of the poverty line (I.e. near poor to absolutely poor) between 1959 and 2018. That percentage has gone down from 31% to 16%.

The median number of years to recoup the cost of a Bachelors degree in America, adjusted for inflation, has gone down since the 1980’s, from about 22 years to about 10 years. [4]

[1] https://www.census.gov/library/publications/2019/demo/p60-26...

[2] https://twitter.com/jmhorp/status/1201903269095698432

[3] https://www.census.gov/data/tables/time-series/demo/income-p...

[4] https://libertystreeteconomics.newyorkfed.org/2014/09/the-va...
One of the reasons I've stuck with Fedora is the fact that it does have SELinux turned on by default, and takes active steps to make sure that the policies are up to date. It can occasionally suck when something gets borked and one of my programs starts throwing SELinux errors after an update, but I think the security trade-off is worth it.

It becomes much more manageable when you go all-in on SELinux from the outset, rather than trying to bolt it on after-the-fact.
What’s cheaper to own though - a whole test library / framework (assuming you don’t use any other feature), or a simple interface?

I’m generally hesitant to add test libraries if there’s an easy design choice alternative that keeps the code simpler.
Wikipedia blurb about the author:

Frank Anthony Wilczek (/ˈwɪltʃɛk/;[2] born May 15, 1951) is an American theoretical physicist, mathematician and a Nobel laureate. He is currently the Herman Feshbach Professor of Physics at the Massachusetts Institute of Technology (MIT), Founding Director of T. D. Lee Institute and Chief Scientist Wilczek Quantum Center, Shanghai Jiao Tong University (SJTU), Distinguished Origins Professor at Arizona State University (ASU) and full Professor at Stockholm University.
Larry Page and Sergey Brin Stepping Down
No ad-free for Plex Pass subscribers?
That's clearly untrue. Otherwise we wouldn't have the CIA as an organization to spy on foreigners.

It is true you don't need to be a US citizen to have protection. However, you do need to be under the jurisdiction of the US (on US soil). Otherwise, the US Constitutional rights don't apply to you.
Lots of people have started businesses and made money via ads, in ways that increased wealth for everyone. Of course people think about how to do that.

In contrast nobody has changed the gender ratio in tech without discriminating against men: a zero sum game that definitely does not increase wealth for everyone.

As for your dismissal of people's 83 reasons, why not show us how it's done and address them?
That, while terrible, has nothing to do with the subject being discussed. That's plain whataboutism.
>Yubikey owner. You have to physically insert the USB key and then interact with it (touch it) to do signing/auth/etc. If you hijacked the signing touch step, you'd notice that your signature wasn't generated by the touch and would know you're compromised.

as mentioned by a sibling comment this can be worked around by social engineering. some ideas:

* simulating software/hardware/connection error, forcing the victim to retry. bonus points if you only start doing it after the victim installs an update to gpg

* in cases where you know the signature doesn't have to be valid, substitute a legitimate signing request with your payload, and returning a fake signature for the legitimate request. for instance, the you coax the victim into sending a signed gpg email. you know that nobody would be checking the signature except for you, so you detect that case and use that opportunity to sign your payload, and return a fake signature to the email program.

* my favorite: causing gpg to fail (thereby forcing the victim to retry) by injecting typos into his terminal when he's invoking gpg from the terminal
Ask HN: What do you want to learn about Vue.js?
I've been working on very complex apps with Vue.js for a few years now. I thought it would be helpful to share what I know by helping you guys understand concepts or fix issues you're having in your Vue.js apps.

If the answer to your questions is short, I'll do it in the comments here, otherwise, I'll write a blog post about it.

But please try to generalize the question you have because I can't dive into each one's code and figure out how to fix it (this will require too much time).

I'll try to answer as many questions as I can.

I hope I can help you all guys :)
The attacker would need to leave more footprints to do this, but yes. It is common for people to pipe up with "I wrote a thing that does this" and I imagine that results in people picking up odd packages.

I think an experienced programmer probably would be less likely to do this, but perhaps a junior programmer working on a system that no one wants to support anymore introduces a "bad" module.
Congratulations, you've invented taxes.

In all seriousness, that is precisely what government is intended to do: take a portion of the private surplus and apply it to the public interest, thus increasing total productivity.
https://www.startupschool.org/latest
https://en.wikipedia.org/wiki/Metal_umlaut