skysight-inc/HackerNews huggingface dataset:
I feel that the author is seriously underestimating the cost of his traffic to the Google Maps API.
Your server shouldn't be getting compromised on a regular basis. The occasional black swan event occurs, and sometimes you have no other choice.
If you add making a bunch of money on top of that you have the ultimate combination of toxicity. Arrogance, ignorance, hubris, echo chambers, thinking you're an expert on matters outside of your field, random and inappropriate activism... Google brought all of it on themselves.

Google is now a blight on our industry (in terms of invasive technology and cargo cult copying of their culture and policies). It's so huge and entrenched that it will take a Microsoft amount of time for its relevance to die but thankfully it's going in that direction.
Do you hire philosophers?
In a capitalist society, for small minority groups within large firms, changing from within is a strategically better. "Moving on" is only good if, as a baseline, you can line up a 'relatively equivalent' position, and if you want to enact change, there is enough momentum within the firm to do damage with 1) a mass exodus or 2) media attention. Both are made easier the higher up you are.
A person making $500/k a year living paycheck to paycheck most likely needs therapy, not a financial advisor.
Oh come on.

Are you also arguing that there is no difference between warm and cold because “at what level does cold end and warm start?”?

Besides, there are traffic rules. They should be followed.
Why not? I have a 14 Mbps stable ADSL connection and it suits my needs. Why should I pay more for something I don't need?
So wait, why does the refresh token not work? Why wouldn't you verify user permissions when generating a new access token?
Electric use for the client on compressed vs not compressed isn't as clear cut as more/less cpu. You also need to consider the reduction in use of the network interface, since the data size will be smaller. Overall latency could improve as well if the compressed form is meaningfully smaller (depending on the tcp congestion window, just one packet smaller can mean a whole roundtrip time)
> Is a generation twenty years, or fifty? I still don't know

Should be the same as the age gap between parents and children, so about 20-40 years, roughly speaking.
Yes there is doubt. Can you say for sure that we have a complete model of all physics, and that all physics can be represented computationally? We're still discovering new features of neurons at the quantum level. Who knows how far down it goes. There may be some unknown physics at play inside neurons that can not be computed by a Turing machine. https://www.elsevier.com/about/press-releases/research-and-j...
No. I am not an investor in Wealthfront, Digit or Tally and have no relationship with these companies.
In my experience, don't use JWT's for carrying application state.

In more words, if you need to carry application state and you haven't outgrown the simple database cluster, then just use the tried and true formula of carrying state via SQL database. Pretty much every engineer these days understands how the architecture works, it's fast and reliable due to the sheer maturity of the components involved, and you don't add cryptography and maliciously crafted input attack surfaces to your auth system (see the recent talk at BlackHat 2019 about Outlook accepting unverified auth tokens). In this case using a predictable and mature approach is a good thing.

On the other hand, JWT's work well for (1) federated authentication, though revocation is still hard, and (2) carrying authorization claims. The reason is that these aren't state in the sense of application state. They're attestations of an existing fact and you're using the signature mechanism to let one service trust another without having to talk directly to each other or to protect any shared secrets. You need to send signed payloads containing user ID's and lists of claims anyway, and JWT's meet those requirements pretty well.
I wasn't suggesting mutating the signing key multiple times per day or once per 90 seconds. At that point, you might as well just have a very early JWT expiration timestamp specified.
What a kawinkeedink, I tried out Barrier earlier today. It worked, but (a) looks like a Java app from 1997 and (b) it completely shit the bed when I activated fast user switching (I had to use the trackpad on the client machine to kill the session - if it had been a desktop I’d have had to turn one off).

I’ll try this over the weekend .

What did you use to build on windows and Mac? Or is it two separate builds with a common protocol?
The link seems to think this is impossible but I don't understand why.
I access my manager from my phone and type them in. I would never install my LastPass on a public computer even if they let me.
HTTPS: //medium.com/getscatter/the-design-process-at-scatter-7b5f3bc7ef0d
Yes, a Doctorate of Arts in Software Development would be more appropriate.
Broadband has always meant "faster than dial-up".
Draining Earth's oceans, revealing the 2/3 of Earth's surface we don't see
Big caveat: multipass does not support bridged networking so you can't configure your VM as just another server on a local network. See this issue:

https://github.com/CanonicalLtd/multipass/issues/118
Maybe. But to be honest that comes across as trying to sell some software. Ultimately, anyone can become a millionaire following some really boring advice.

1) Six months' of expenses in cash/money market.
2) Max out 401k if possible.
3) Anything left after that, buy index fund that tracks the S&P 500 and let it ride the market over the long term.

Literally all you need to do. Sure, there's room for some budgeting software or credit card alerting and things like that. But the market is not so complex to understand that you can't understand it yourself. I'd say within a weekend of study the average person can understand the basics.
Do you not think it says something, nobody much talks about google having worker-ants in uniforms? The IRS issue is why they have to wear a yellow star, yes. But the question is not that they wear the star its what the fuck is the culture which normalizes this
Yeah, I mean what's the alternative? Your code will bit rot if you don't keep up. You don't have a living software project if you don't do this.

You should read the release notes of the new version of your dependency, fix any obvious issues from that, see if your tests pass, and wait for bug reports to roll in for non-obvious things not caught by automated tests. Ideally you should do this before the new release of the dependency hits the repos of the distros most of your users use, so that it's only the enthusiasts that are hit by unexpected bugs.

Even if you could delay and batch the work together every several releases of a dependency, you're still doing the same amount of work, and it's usually simpler to keep up bit by bit than all at once.

One trick is to not use dependencies that have constant churn and frequent backward-incompatible changes, and to avoid using newly introduced features until it's clear they've stabilised. When you choose dependencies, you're choosing how much work you're signing up for, so choose wisely.

Of course you could go the alternate route and ship all dependencies bundled - but that is a way to ignore technical debt and accidentally end up with a dead project.

Also, your project should not demand a specific version of `libfoo`. If `libfoo` follows semver and a minor release breaks your project, that is a bug in `libfoo`. Deployments of production software should pin versions, but not your project itself.
Connotation and Denotation [pdf]
This is an important piece of context, thank you for pointing this out. Exactly - you can't classify things one way in certain contexts, but then want things viewed differently (in this case - ADSL not viewed as broadband so not included in broadband aggregate speeds) when it no longer suits you.
Not dead yet.
This is a bit of a tangent, but what is the state of IPv6 in general right now? Can I switch to IPv6 for my home network and use it exclusively?
Yes, quite a few. The prerequisite is basically that you have to be able to do formal logic at the first order level and also Doug has to be in a good mood when you do the interview.
The act of contributing an edit to OSM is vastly simpler than fixing a kernel bug. But OSM does still have the massive barrier to entry in that if you are using an application built on OSM data, it is usually not easy to realize this and understand that OSM is where you need to go to fix a map error, unless you are already familiar with OSM.
Thank you for reminding me I can do that... going to give it a try and see what I'm missing/forgotten, and what features I might miss.

Wish there was a VCS-ish way to get an intermediate version.
Now if only cellphones included an AM receiver. And if only modern radios didn't often strip the AM band out of their devices anyway...
You can also 2FA your manager, minimizing that attack vector.
A shame. I bought a CD from them, which they kept in storage, and I was instantly able to stream it. (I couldn’t get that music any other way at the time.) I have hundreds and hundreds of albums, maybe more than a thousand, but I still couldn’t see myself sending them to someone to rip and store.
The press release indicates that they're using RadioSAFE:

http://www.theradiosource.com/products/radiosafe.htm

> RadioSAFE Broadcast Systems have the capability of staging hundreds of preplanned safety messages that can be selected locally or remotely at a moment’s notice and updated minute by minute. Programming can be performed at the station or remotely via telco or UHF/VHF transceiver or by LAN/WAN if optioned. Redundant levels of message control are provided in the RadioSAFE design.

An antenna upgrade is offered:

http://www.theradiosource.com/products/antenna-hpr0990.htm

> 300 Watts, 470-1800 kHz, 20+ Mile Radius Range

Various warnings are noted about requiring an FCC license beyond certain transmission power thresholds.
Something you are missing in (2) is the collaboration & work with peers, as well as baseline coursework (although that varies from country to country and program to program), and some of the other communication parts.

A handwavy version of the scope would be

1) core coursework, which makes sure everyone has the same basic competence across a range of topics deemed important

2) comprehensive exams (but vary wildly by program) - the intent here is to set a bar everyone must pass to demonstrate the competence in (1)

3) seminars/journal review groups, etc.: group activities typically which are far less formally structure than (1), but allow students to be pushed technically by a prof and each other, and expand their understanding of current work

4) semi-formal presentations (usually within your group) and more formal presentations (e.g. conferences) - you have to learn how to communicate effectively with your peers and demonstrate it

5) Advisor: one person to guide and mentor you over the course of your study, and help tailor focus and remedial study as needed. Should help you refine your thesis topics etc.

6) Committee members: A group with broader experience than just your advisor, who will periodically review your research plan and progress. May be involved in setting your comprehensives. Will definitely review your thesis and will manage your defense.

7) external examiner : this is a check-and-balance thing, so a department doesn't drink their own cool aid too much. Should be an arms length expert in your field, who will review your thesis and can spike the whole defense if it isn't up to snuff.

So things that list are difficult to reproduce in your requested scenario: a) ongoing collaborative work with peers through baseline courses and paper reviews, editing each others stuff, etc. b) non-formal interactions with committee members although if you can commit to regular campus visits you can probably do that.

If I were in a position to consider supervising a "remote Ph.D." student like you suggest, I'd be concerned mostly on how to get them really ready for comps, and how to get them the kind of interaction and face time in a group to achieve demonstrate competence outside of a formal exam. The actual thesis part would be more manageable.

I'm not saying it couldn't be done. In fact it's not uncommon for someone to go "remote" once they have finished their comprehensives; in some fields this is known as ABD (all but dissertation). At this point you've put about 2 years in and mostly focusing on your own research.

It's worth nothing that leaving at this point is also a very common way that people just never finish.

It sounds a bit like you envision doing this ABD part, really, but as noted above that's only half of a PhD program, or less than half.

Basically the thesis part is a way to hand hold you through the process of writing up independent research and demonstration you can do it properly and on your own. In recent years their has been a move in some disciplines towards paper-based thesis, actually, which I think is weaker but is a response to the demand for publication numbers.
There's an organization where volunteers teach coding to refugees: https://www.hackyourfuture.net/ It started in Amsterdam and has spread to Copenhagen and Toronto now - you could get involved and help open up a chapter in your city too.
I would view any Lisp project as a major bonus in favor of a candidate. It's really encouraging when you see people who have an interest in different programming languages. When I look at people's open source, being a polyglot is a huge plus. Each language offers a unique perspective on programming and the desire to explore them is a strong signal of a self-learner and someone who is passionate about tech.
In your example, it seems the app was not mis-priced for you. In fact, it was the perfect price, until the company decided it was mis-priced for them.

So now they add all these unfriendly features, which now makes the app mis-priced for you.

My point is that mis-pricing can be different depending on who's perspective we look at. So in an economic sense, when we say something is mis-priced, from who's perspective is it?
See if Repl will offer you a deep discount or free use of their Classrooms product (since you're not making money from this, but without the hassle of forming a 501c3 or other formal non-profit entity).

https://repl.it/site/classrooms
For those looking for the simple to understand solutions:

Bertrand’s box paradox:

The trick here is that you are not actually drawing a card, but a card side. There are 3 cards, but each card has two sides so there are 6 card sides and half of those sides are white.

So, now we have to pick one of the 3 white card sides at random. Of those 3, 2 have white on the other side and one has black. Therefore, if you pick a white side at random, there is a 2/3 chance that it is white on the other side.

Monty Hall Problem:

Say you're going to switch no matter what. Then the only way you can lose is if you pick the right door on your first try - a 1/3 chance. Conversely, as long as you pick either of two wrong doors first you win. Therefore, you have a 2/3 chance of winning if you switch vs a 1/3 chance if you stick with your original pick.
> Why? They had a 12 factor -ish app that scaled the normal way

So, yes, horizontal scaling is good, especially for stateless workloads - but that doesn't mean you run the most hopelessly under-performing code imaginable on each node, so you basically have to scale out like this! I mean, seriously, 4000 containers to serve 4000 concurrent requests? I mean, I can't even...

I honestly can't believe the attempts in this thread to justify such an utterly, horrendously bad architecture - there are 1001 better, simpler even, ways to approach this.

Yes, premature optimisation is bad, but optimisation here was nowhere near premature.
Yup. Further, I do a lot more research in the dependencies I bring in (if I can help it).

Does this thing also bring in 1000x sub dependencies? How much am I REALLY going to use this. What's the actual added value here.

I've seen people bring in libraries for simply the dumbest things. The worst offender I've seen is lombok brought in for a @Logger annotation on one class. That stopped our java 6->8 migration because the version of lombok they brought in was old and for highly used library (so upgrading wasn't simple).

If you can write the used functionality in 10 minutes, you should not bring it in as a dependency.
Did I ask you to put my electricity supply on the internet? No: I did not. I did not ask SCADA to go on the web. I didn't ask hospitals, power nets, gas supply, airlines, police to do this.

Nobody asked for the critical infrastructure to be exposed and made brittle. A bunch of turkeys just thought it was a good idea.
I think this is more a factor of percent of total earnings.

For example, my consumer and small business experience with Microsoft support is very negative. But working in an enterprise that always elects for the most expensive support package... I have never experienced better or more personal support than from Microsoft.
From the article:

> Many large companies have policies restricting access to sensitive information to a “need-to-know” basis. But in some segments of Google’s workforce, the reaction to Walker’s argument was immediate and harsh. On an internal messaging forum, one employee described the data policy as “a total collapse of Google culture.” An engineering manager posted a lengthy attack on Walker’s note, which he called "arrogant and infantilizing." The need-to-know policy "denies us a form of trust and respect that is again an important part of the intrinsic motivation to work here,” the manager wrote.

I don’t work for Google, and this kind of entitlement mentality confuses me. I’d hate it if everyone had access to the stuff I was working on. That seems weird and kind of creepy. Without proper context lots of stuff could get misinterpreted (broadly speaking).
The Invisible Government: Edward Bernays, Public Relations and Propaganda
https://runforsomething.net/
This is not an ad for Wealthfront. I am not an investor in Wealthfront, Digit or Tally and have no relationship with these companies.
Sorry, but this seems like nonsense to me. You are telling me that the curtailing of your attention by an app which you voluntarily install and voluntarily use is a ‘cost’ such that you are a stakeholder in the app?
Ok td shit poster.
No, sadly not. There are plenty of sites that are not reachable via IPv6 yet. github for example does not work over ipv6.
Sturgeon demands Scottish independence referendum powers after SNP landslide
any work that brings please is worth it, no matter the routine
The url: https://tildes.net/
2019 LLVM Developers’ Meeting: “Arm64e: An ABI for Pointer Authentication”
Indeed, you can do that. I am actually doing that at various places at the moment. If you want to discuss how to do it, you can reach me directly on https://IPv6.chat
While that is true, you can still fully run your network IPv6 only. At the border router, you can simply use NAT64 to reach the IPv6 Internet.
Can adjudication be impartial with regards to civility?
The comment thread started with "if you need them to be revocable". Any tool with "a few hundred [enterprise] customers" needs to be able to revoke access for terminated employees, compromised accounts, and the like, and those revocations will occur frequently and in many cases need to have immediate impact.
11 months ago: https://news.ycombinator.com/item?id=18804875

2018: https://news.ycombinator.com/item?id=18353874

https://news.ycombinator.com/item?id=16517412

2017: https://news.ycombinator.com/item?id=14290114

https://news.ycombinator.com/item?id=13865459

2016: https://news.ycombinator.com/item?id=11929267

https://news.ycombinator.com/item?id=11895440

2015: https://news.ycombinator.com/item?id=9616425

2014: https://news.ycombinator.com/item?id=8283006
The economic consideration comes down to the real value of the labor, and that depends heavily on the economic benefits of specialization.

A day of you doling out soup to people or picking up trash won't be worth any more than what someone who does it for a living is paid. And it will probably be substantially less because you're not practiced at it.

A day of you building houses (assuming you have no training) could very well be negative if someone has to come along and fix your work later.

A day of a non-profit employee's work should be worth at least what their salary suggests. (They're chronically underpaid because of the conventional wisdom that high wages are a red flag. This is patently insane and unfair.)

A day of you working closely to your profession is probably worth something similarly close to your salary.

Now, if no one is picking up trash and you want it picked up, then by all means go pick it up.

But otherwise, if in other contexts it'd be a waste of your time, it's still a waste of your time when donating, so consider donating money.

That raises the question: why do so many non-profits have all these worthless volunteer activities?

First, they do tend to focus on young people whose labor isn't worth much to begin with, so they're not losing as much.

And many volunteer efforts simply need a lot of warm bodies. There's no way to canvass for votes, for instance, without having a horde of people knocking on doors.

And I suspect many volunteer activities are also a great way to raise publicity and connect with donors.
Here are the results to that question:

Question EF3. Suppose that you have an emergency expense that costs $400. Based on your current financial situation, how would you pay for this expense? If you would use more than one method to cover this expense, please select all that apply.

Put it on my credit card and pay it off in full at
the next statement 33%

Put it on my credit card and pay it off over time 16%

With the money currently in my checking/savings account
or with cash 45%

Using money from a bank loan or line of credit 3%

By borrowing from a friend or family member 10%

Using a payday loan, deposit advance, or overdraft 2%

By selling something 6%

I wouldn't be able to pay for the expense right now 12%

Other (please specify) 0

Refused 2
Good to know, but only if you have a choice of carriers. While I hate to drag the free market into this, having choice (read:competition) would expose this issue and be more likely to solve it.
I think giving honest feedback at exit is a good thing and I view it as showing respect. I would probably avoid the word “sucks” though.
The word you are looking for is fraud. People should go to jail.
I get more and more frustrated by YouTube's monetization attempts every day. Educational and other serious content creators need to start moving to more quality-focused platforms like Vimeo (which unfortunately isn't free, but at least it doesn't have ads!). Leave YouTube for the teenage influencers and inane children's content.
Google Launches Creator Labs Incubator Initiative
Isn't IT all about investing in fixed cost upfront and reaping profits on the variable costs in the future?
Probably cargo.

- It was built in to Rust from the beginning and officially sanctioned so fifteen different people don't have to build their own incomplete, buggy package managers.

- You can add plugins for things like automatically updating or adding dependencies.

- It handles projects and subprojects.

- All you have to do to install dependencies and run a project is "cargo run", reducing friction for getting into new projects.

- For the most part, it just works.

That said it isn't perfect, especially when needing custom build scripts, but it's good.
Agreed. Their business support has more visibility into your account than you do. They’ve been superb at finding issues fast and explaining things better than I can phrase the question.