skysight-inc/HackerNews huggingface dataset:
I'd argue it works for devs at the same company quite well, but having asynchronous communication is counter to your average business persons desire to lock you in a room for an hour and make you make a decision.
That's just you. Killing yourself is nowhere near as serious as killing someone else; the insurance fraud leaves that conclusion untouched.
Which means that already more expensive "baseload" plant needs to recoup the investment on even fewer hours per day. Especially true for plants like nuclear which at least for todays generation aren't good at load following.
> I wrote a proxy to convert one's external SSO session cookie to a JWT internally. That ways apps can check the user without having to make any requests to a user service, and can propagate that safely to other backends

I've done something similar, to "terminate" Windows authentication at an API gateway, so downstream services can run on any platform, and don't have to deal with the vagaries of Windows auth.

JWTs worked very well for this use case (obviously any other kind of token would have worked too, such as PASETO).
The epic of Gilgamesh
> While rooftop solar does allow you to go completely off-grid, if you still want to have a grid around

Why would you want to have a grid around?

Friends have been entirely off-grid in the Yukon for over 7 years now. They have a large, modern house with every convenience. Last time they tried to switch house insurance the insurance company didn't want to give them a policy because they don't have "stable" power supply.

My buddy replied by asking how many power outages the insurance person had been through in Whitehorse in 7 years (easily a few a year)... his off-grid setup has never had a single outage in 7 years.

So who has the "unstable" power supply?
Without context it's hard to conceptualize their experience.

Did they start with 5mg Ritalin/day or 20mg adderal 3x/day? Did they take it exactly as prescribed? Did they get 7-8 hours of sleep every day? If they started with 3x20/day and didn't sleep for 36 hours before before having a psychotic beak, well that's to be expected..
The question is whether the performance hit that one gets from running such a language at run time is acceptable. For one, thing, it pretty much forces one to use a purely functional language. Which may or may not be a good thing.
Yes. When a policy is crazy, the Right Thing is to find out how to either alter that policy or obtain an authorised deviation from it as tatersolid describes.

If you spend an hour a month on something that's required by policy and in your opinion shouldn't be, then six hours invested finding the person who sets that policy and explaining why it's a terrible idea may free up net six extra hours of your life within a year.

That story where the guy comes down a mountain with a stone tablet with Ten Commandments carved into it is (a) a myth and (b) no kind of a way to set effective policy. People can't even agree on what his Ten Commandments were, let alone on following them.
You will have to reset all of your expectations, regardless of their combinations. OP has made some strategical errors already and it now depends on the exact writing of his employment contract and the jurisdiction they are in what options are still on the table.
Meanwhile, CyberTruck isn't allowed in West-Europe due to safety concerns.

It bends too little in case of an accident.
Great idea! But if you have to use 'chrome://flags/#enable-experimental-web-platform-features' it is not a "Real World App" yet.
Do you believe in copyright law? Maybe you're part of the problem. https://questioncopyright.org/
“Mr Noonan said this effectively drove the problem underground, leading to the emergence of Facebook groups where potential Amazon customers were encouraged to buy a product and post a review in return for a full refund.”
Given the amount of pushback on that in this thread from you and plenty of others it does not seem that it is all that obvious.
Results and retention. Focus on those and you’ll be fine. I recommend listening to the Manager-Tools.com podcasts. Apparently imposter syndrome is pretty common for managers, so just take all the uncertainty in your stride and keep learning.
Using NIST password guidelines as a compensating control has been accepted by every assessor I’ve dealt with (even the really bad ones). A compensating control must exceed the requirements of the control its compensating for, and the NIST rules clearly do. I’d say it has much more to do with how you write your compensating control worksheet rather than anything else. If you assessor is refusing to accept compensating controls, you should report them to the SSC, and then find a new assessor.
>You call them and ask them to consult with you about how to make your business or organization more efficient. If their recommendations concur with your already-held beliefs, you implement them. If they disagree with you, maybe you reconsider. That's what I would do, and it's what I assume these people are, for the most part, doing.

Sure, but the point is that you call them becase you believe you have not enough profits (or are losing money).

Now, there are generically speaking three ways to fix that issue:

1) increase the efficiency of the organization (really increasing it) which is something that sometimes is possible, sometimes isn't and anyway needs time and dedication by really expert people and produces - maybe - results in two/three years time or more, and often comes at an additional initial cost (investment in new technologies, machinery, etc.).

2) increase the income (i.e. produce and sell more) which again it is something that sometimes is possible, sometimes isn't and anyway needs time and dedication by really expert people and produces - maybe - results in two/three years time or more, and often comes at an additional initial cost (investment in new technologies, machinery, etc.).

3) a mild reorganization of the current processes AND reducing workforce by 20-30%, which takes little time and produces results immediately or almost immediately.

What they advice is usually #3, mainly because it is "easy" and "fast, and by the time you can see the possible overall long period adverse effects of the "cure" they have been already paid and are happily consulting some other firm.

Mind you it is not that many organization are perfectly efficient and actually very often workforce is larger than really needed, and as well a "spending review" can often solve part of the issue, so - when they propose the 20-30% cut on workforce, and remove each and every possible "fringe benefit", etc. they are not doing anything particularly "wrong", still they will be paid an (usually very high) amount of consulting fees to provide what amounts to some "obvious" measures and confirmation of your intuition/gut feelings.

I.e. all in all very often they are "an excuse" (the consulting firm has determined that ...) for whatever unpleasant you will be doing to your personnel.
Show HN: SpringBoot web app for browsing Kafka topics
>Women, being in the middle [in terms of power and influence], are exempted from conscription

This is just a wrong analysis. Women didn't get our of conscription as a result of their power and influence. They were exempted from military service because almost all men, across all classes, were opposed to women serving in the military.
Bloomberg Media uses feel-good opinion pieces to accumulate trust and interest. Then, it uses this to drive a very specific agenda from the top brass. The company has used this strategy for years. Sheeple continue to upvote these pieces and serve special interests, though. The acquisition of CityLab is intended to capture more social capital and drive more political agenda when Mike Bloomberg makes his phone call. Firing half a company is essentially killing the mission and culture that was CityLab and confirms the acquisition strategy.

My advice to those who were fired is to organize and continue what you created elsewhere.

Note that Bloomberg has shills and PR working among us on Hacker News. They also have sentiment bots searching for comments such as mine and organize down votes. Hacker News Admins are not equipped to handle modern day communication control by powerful interests like Bloomberg.
> In a typed language, only polymorphism which can be proved correct is admissible. In an untyped language, arbitrarily complex polymorphism is expressible. [Hickey's tranducers give an] example of how patterns of polymorphism which humans find comprehensible can easily become extremely hard to capture precisely in a logic. Usually they are captured only overapproximately, which, in turn, yields an inexpressive proof system. The end result is that some manifestly correct code does not type-check.

There is something here close to a feeling that I've got that I struggle to experess. My two day to day languages are Python and C#. My C# code is usally longer and more complex than my Python code. At least part of this isn't down to the problem domain, syntax or features available in one but not the other. However I struggle to put into words exactly why or what is the cause of this (or even to really quantify the difference as I'm doing very different things in each language).

The pendulum has swung massively towards pro-static-typing but I remember the last cycle and I would like to hear from more people who were around for the last time we all started to decide static typing had huge drawbacks and the cost of dynamic typing was a price worth paying.
People believe that part of what brings happiness is living a moral life, but
IIRC, there have been that claim: Libraries, of course, were going to put book publishers out of business because all of their patrons were reading books they otherwise would have purchased. We simply don't hear of this pushback much anymore and we more see it as a public good - though not always good enough to fund them properly or make sure everyone has access to one for free.
> single stand-alone HTML file for offline presentation.

TBH HTML isn't a really good format for stuff like this, as HTML is text-only. Same goes for HAR. The moment you want to embed large images/video you run into size problems.

It would be really nice if browsers supported some kind of archive that contains multiple resources like images, wasm files, etc, that would all be accessible by the browser if you open it. file protocol is basically being deprecated by chrome for stupid security reasons: https://github.com/WebAssembly/design/issues/1200
Great use of mitmproxy and data! Nice article!

Did you choose Lisbon for any particular reason?

I'm from Lisbon.
See if there is a onebrick.org chapter in your area.
In the US maybe.

In the UK, most of my lawyer friends would tell you that lawyering up is the last course of action you want to take, as it tends to make issues more complicated, expensive and combative, though you might want to be careful what you admit / agree to.

My wifes a solicitor. :)
frink

or this python library : https://github.com/katerina7479/python-units-of-measure
Are you aware of IBM in the enterprise software industry? They manage to do almost all of that with their own software and open source rebundled.. No OS/2, almost no 3rd party programmers who are interested in their platform.

That is the future of Microsoft and the non-future of Windows.
I completely agree: the poor quality of error reporting in parsing tools is a significant reason not to use them. When I started looking into this a couple of years back, what surprised me is how much work there's been in this spread over decades.

Building upon that (and obvious bias alert!) led us to come up with a couple of new algorithms. The current paper draft is https://arxiv.org/abs/1804.07133 (a future version of that paper will probably chop out MF which, in retrospect, adds too much complexity over CPCT+ for the relatively small gains). The Rust library (https://crates.io/crates/lrpar) it's implemented in is documented at https://softdevteam.github.io/grmtools/master/book/errorreco... which is probably a friendlier starting point. Summary: one can do a surprisingly decent job of error recovery for very little work.
Recipients of Mailchimp campaigns have the same experience as recipients of Sizle presentations. They’re not told the sender will be notified when the document is opened however this type of tracking is fairly commonplace.

For comparison, you might allow cookies from a website you visit regularly, even though they’ve notified you do you really know the extent to which you’re being tracked by a cookie like GA? A large part of the online community assume at least some part of their activity is being stored somewhere, Sizle doesn’t even come close to the tracking that’s being applied to almost everyone that visits any news media site for example.

We made our own analytics tool from scratch that only gathers a few metrics to support sales teams. If that’s creepy to you I would recommend looking into some of the bigger data giants.
Yes, windows developers with experience are going to go work in the game industry..
Use OpenFaaS as Gitlab Serverless Runtimes
Sure, but how are writers to get paid? It's hardly the most lucrative business to start with.
First world problem: we've chosen to let the second and third world make stuff for us because we had more important things to do, and then sell the stuff to us via Ali Baba or the 40 thieves, and there's no way to tell which is which.

"Back in the day", I didn't even have the option to buy a USB-chargable hand warmer to keep my cell phone's battery from dying in the cold so I could hike in the winter and be within contact for various reasons. But my options are to buy one USB-chargable hand warmer/charger that will probably work for part of a season before it stops working, and another hand warmer/charger that will probably work for part of a season before it sets my house on fire when I try to charge it, and there's no way to tell which is which.
As I said, the majority "is concerned", but at the same time doesn't really want to take actions. Because being concerned is free, taking initiatives can be very, very expensive.

Just look at what happened in France when the government decided to increase taxes on fuels.
https://en.wikipedia.org/wiki/AIXI
Ah, I see, thank you. So this is just to avoid TLS negotiation every time.
There's a clip of Elon driving one in public roads and the truck is so large that while performing a left turn it bumps over a cone in the center lane. It's really a massive car, just crazy to picture it in a regular road in most European cities.

The video: https://mobile.twitter.com/langejanne/status/120377531270789...
RGB layer plus black and white depth map layer plus a little calibration metadata in a TIFF file is probably about as portable as it will get until someone very large tries to promote a standard.
> Because passive safety and pedestrian protection are very important in Germany. The body must therefore be designed in such a way that it deliberately deforms in an accident and absorbs the energy of the impact in order to minimize injuries.

This is exactly what I was wondering about the minute I saw the Cybertruck presentation. In the event of a crash, the stiffness would be horrible for people in or outside of the vehicle.
LD r0,$TONY
RIP
Have you seen OpenFaaS? https://github.com/openfaas/faas

It seems like it covers most of your use-cases and with more modularity and scale-out on Kubernetes if needed. For single node use k3s or Docker Swarm.
It's not about practicality. A Formula 1 car or high-performance sailboat has no practical value, but I trust engineers far more than kindergartners about Formula 1 or yacht design. On the other hand, I've seen gifted kindergartners draw things which I thought were pretty good -- on par with some respected artists.

It's about having real-world validation. Anyone can have an opinion about art and literature. If your opinion happens to mirror the opinions of English department academics -- just clever enough to be a new twist, but not so brilliant as to go outside of the culture -- you can get a position as a scholar, and keep writing papers within a mutual appreciation society of academics all thinking roughly the same thoughts. Eventually, the whole crew goes down one rabbithole or other.

A group of thousands of self-supporting, mutually reaffirming "intelligent scholars, designers, artists, philosophers, and religious figures" doesn't make that opinion any more right or valid than my own.

On the other hand, if an engineer can make the fastest sailboat, that's external real-world validation that they got something right.

As a subtle point, I'll trust the opinion of filmmakers who receive public acclaim (external validation). I'll trust the opinion of filmmakers of niche artistic films a lot less. That is to say, I'll trust them about the technical aspects (what aperture means, or how to edit a video), but not about the artistic aspects: how you use film as a medium for communication, expression, and so on. A big part of communication and art is understanding the audience, and they haven't demonstrated they can do that, at least outside of their own clique.
That's super interesting for a 40 years old home, around here homes from that time sometimes don't even have double-glazed windows. It's too bad that there are no details being provided, but other articles[0] give more information and aside from the house being covered in solar panels it doesn't look too alien (save for the very bendy walls) at least until you find out the walls are 40cm thick and the greenhouse is absolutely integral to the concept.

I really like that the greenhouse uses permanent water fixtures (a waterfall, brook and pond) for both ambience and humidity control, I've been thinking about this sort of things and how to heat responsibly: mixed wood / pellet furnace was about my best idea, and apparently the Lovinses still have a backup wood-burning stove though their 2009 "v2" renovations allowed them to get rid of the gas-fired stove and heater.

One of the things which I find more interesting is how diametrically opposite they went for one of the directions: opening up the house using efficient glass panes, where I was thinking more towards burying it, in a more extreme version of turf houses. But that makes sense if you want to produce your own electricity using solar panels, you couldn't maintain a proper turf cover then.

[0] https://grist.org/climate-energy/amory-lovins-high-tech-home...
Offfer Offer Offer
Try to get the AD policy revised. Because there is (since 2017) clear NIST guidance saying not to do this, chances are that somewhere in your organisation a document can be updated to cite that NIST guidance and then the AD controls can be relaxed to let passwords have the same lifetime as the account they're for. Finding who owns this policy and getting them to fix it may take a bit longer than one of those 90 day password changes, but it'll feel like you made the world better and it may only take a phone call or an email to the right person.

Newer Windows AD builds have FIDO2 support, so on shiny new computers you _could_ unlock "your" computer (one you've logged into recently) with a FIDO2 USB key, or a fingerprint reader. That's a much nicer way to unlock a computer you use all the time, while not discouraging you from using a nice long password that bad guys would need to guess or steal to get in from a different machine.
That's kind of the "same" problem given we are not going to ditribute power of solar provenance by traveling half the earth. Likewise for wind: the distance are enormous to get reasonable wind diversity. So in practice it is not sure it is even possible in some (most?) regions of the world.
Nice, this is an ambitious project and your fresh execution does a good job of cutting through the staleness of typical PowerPoints. I played around, here's some feedback:

- Really like the templates. Lots more would be very helpful so that I can build out a presentation quickly without having to fiddle with detail.

- Top toolbar appears crammed when editing text on a laptop. Tried in both Firefox and Chrome. https://imgur.com/a/fZW7oUI

- You could probably cap the number of presentations in the free tier at about 5 before charging (perhaps a cheaper tier without analytics). Presume you're just trying to get the word out for now.

- Once you've got a good foundation it would be nice to start differentiating with more interactive elements.

Great job, though. All the best!
make them profitable, quit and have no employer. problem solved.

but oh wait. IT salaries are so high that it's impossible to match them nowadays
This baseless speculation is rather silly until it’s closer to actual production. We have no idea how it will do in crash testing. It’s not hard to imagine they’ve taken engineering steps to help with this. Tesla has an excellent record in crash testing with the Model S, X, and 3; in my opinion they deserve some benefit of the doubt.
Considering they have enumerated this for others to pick up and execute quickly, they may have just saved the wider industry potentially 100s of thousands per month.

Give and take is an open source attitude. It doesn’t always have to be about source code, sometimes it can be about cost savings techniques such as this.
Step 1. Realize that advice on HN is often wrong and very one-sided (i.e. they were dead wrong about Dropbox)

Step 2. Figure out what you want, and why, and get it in writing. Figure out what your company wants, and why, and get it in writing. Then open a dialogue and its time to start talking and negotiating!
> ...is akin to taking medical advice from a forum.

Listening to doctors instead of carefully reading forums would have probably left me seriously crippled. Doctors hold no real liability, nor do they have any real expertise outside their (very narrow) problem domain.

There is no substitute for doing your own research if you want something done right.
Yes, if you’re not actually doing the “compare password against breach lists” part of SP 800-63B regularly they likely won’t accept it.

I hope forced expiry will be gone from next PCI revision anyway.
https://news.ycombinator.com/item?id=21788587
Yeah, but Dropbox is okay since you have a copy of the folder on your computer(s).

Also, it's guaranteed to be small (2 GB) so it's easy to backup.
When logging in, the backend will generate some state (e.g. user privileges) and store it somewhere, alongside a random session ID. It might be stored on disk, in a database or in a KV store like redis.

The backend returns this session ID in a cookie.

You store this session ID as a client-side cookie, which gets sent on every request to your backend.

When your backend receives a request, it will (typically using some kind of middleware) lookup the session ID in the backing store and deserialise the state.

Sliding expiration is typically used, so as long as you keep making requests, you'll remain logged in.

Revoking a single session ID is very easy, since you've just deleting a single row/key/line from your backing store.
It’s not really possible to give specific advice without knowing which jurisdiction you’re in. In most European countries there are laws that govern employee inventions and grant a share of the profits of an invention to the employee (in Germany e.g. the Mitarbeitererfindungsgesetz). Besides advising you to talk to a lawyer - which people already did here - there’s really little to say without knowing more details. If you can provide at least the country your employer is based in it might allow people to give more specific advice.
I think these guys are being a bit precious and don't realise how much is tracked these days. All the email marketing campaign platforms do it, all the specialist quoting tools and line stores do it.

Good work mate, keep going.
Is this article computer translated from the German source? It seems like it's barely even been proof read.