skysight-inc/HackerNews huggingface dataset:
I think you need to become more independent from the 'system' you describe; i.e. go freelance / contractor / consultant / remote etc., some variation of these.

I think I really don't trust the author of Rich dad poor dad but the one thing he got right is the ESBI system ("cashflow quadrants"). — I'll let you google but the gist of it is simple: there are only two limited resources, money and time, and any work is a trade of one for the other. You want to be in a position wherein you generate 'enough' money to 'buy back time' essentially. That means being either a business owner (B quadrant) and/or an investor (I quadrant).

Freelancing is the "S" (specialist) quadrant, you don't want to be there forever — because revenue only comes from putting in hours, it's a neverending grinding wheel, however profitable it seems. What you want is to setup your 'freelancing' as a 'specialist' to grow into hiring people and thus become a business.

Never forget that more than 80% of GDP in rich countries is made by small businesses. Groups of 2, 5, 10, 20 people make up the effective wealth of our economies.

Deep down that's what The Millionaire Fastlane or The 4-Hour Week expose to the general public, this idea of relative independence combined with a business model that cumulatively earns you ever more time — and hiring is key to unlocking that, multiplying manhours around your activity, sharing the load, not being "required" yourself for the business to run. A group of well-organized devs could probably wrap 30-hours weeks and still make a ton of money.
Well, you don't need the 16x16, 32x32 and .ico ones.
Possible Trump Executive Order on Open Access Alarms Academic Publishers
Right, but retaliation for engaging in a concerted labor effort is specifically an illegal reason to fire someone.
> im presently reading Paul Fussells "Class"

That's a really fun read. I had a great time playing "spot the behavior of parents/relatives, described as if he knew them personally" (all of which fell somewhere in Prole or Middle, for the record, so nothing to brag about, particularly in the latter case—oh boy, the poor, sad, misguided Middle)

Interesting lens through which to view Trump—does he ever have some weird displayed-class-markers. He reads as the most Middle and entirely un-self-aware and unobservant person possible, who's also won the lottery so all of that is on extreme display. Like a parody of the Middle. It's so strange. It's gotta be just a perfectly-maintained act, right? Given his upbringing it makes no sense for it to be natural, AFAIK. Utterly bizarre.

Lots of subtle observations in there that really do seem to match reality. The "mirrored surfaces signal you don't clean your own house" thing—that's been a fun one to watch out for. I felt very proud in a totally raised-Middle way that I knew the obelisk thing among the Upper-Middle and Upper was aimed at oblique association with Paris rather than Egypt before he got to the reveal, hahaha.

Some updated version by a similarly-observant person would be awesome, but Class is still remarkably accurate given how long ago it was written.
I was mostly referring to the Kotlin calling side of Java code and libraries, and yes you're technically right that would mean only 100% compatibility with existing Java code and not interoperability. But, when moving forward to using exclusively Kotlin and not building libraries that will be Java compatible that is totally ok.
I've just posted a working code on Dwitter based on this "JavaScript with Only Six Characters", it shows 1e+100 turning into Infinity. https://www.dwitter.net/d/16881
Because running you're own DB on a VPS means:

- Dealing with sec upgrade for PG and Linux

- Dealing with backups

- Dealing with HA, so settings up slaves / replica, then what do you do when something goes wrong? Do you manually SSH and do some magic?

- Network security / usernames / passwords

- ect ...

Clearly what startup don't want to do and usually lacks expertise into.
Sure, there are lots of multi-modal travelers, and by and large those people are the most even-handed and reasonable in these discussions. :) Some people who cycle or take transit do so exclusively, but I suspect that many or even most have a car at home or occasionally rent one, or have at least been in a passenger in one in the recent past.

Meanwhile, the overwhelming majority of motorists have never experienced the road from the perspective of a bicycle seat, or last rode a bike decades ago as a child or teenager. For those who live in a garage door community, it's possible that you could even go many years with your only vulnerable pedestrian experience being the weekly dash across the Wal-Mart parking lot.

So yes, there is some tribalism to this. The people who ride bikes (some of the time) are a minority group, but I don't think we're the ones driving that mentality.
Serverless: From POC to Production
Bill Gates: 6 books to enjoy this winter
What's the screen quality on that $400 laptop? Screens, keyboards, trackpads, is how laptops differentiate. The overpowered (thermally throttled) CPUs are just to get the ricers' money.
African Mobile Internet Users Exposed in Data Leak
Thanks for the feedback.

I won't pretend that we're the password manager for everyone. If we're not the right one for you then hopefully one of the dozens of others out there fit the bill.

I appreciate you taking the time to respond and let me know your opinion on this though. Thanks!

Kyle

1Password Security Team
Adam Neumann is now a billionaire. In the meritocratic, rational-markets mythology of how many people believe the system works, you're only supposed to get a billion dollars if you create value for a lot of people. After 18.5 billion dollars of investment, thanks to Adam Neumann's leadership, WeWork is now worth 8 billion dollars. So rather than creating value, he actually destroyed a shitload of it. And now he's richer than you or I will ever be.

You're also ignoring one group of victims here. I wonder how the current and former employees of WeWork would feel about your assessment that it's "not so bad"? Their labor was no doubt compensated largely in the form of now-worthless equity grants. "Sorry you got screwed but this is necessary for the health of the investor class. Won't somebody please think of the investor class?!" How totally fucking odious.

I don't know how you look at WeWork and arrive at the conclusion that professional investors are at risk of becoming too conservative. Clearly, venture capital has stopped functioning with any sort of discipline or rationality if it can invest in companies like WeWork and Theranos which later turn out to be obvious mirages of pure ineptitude and greed.
Heirloom and organic farmers tend to reseed from heritage crops. I will give you they are a small subset of farming but the cross germination is having an effect on them.
Hard Drive History Lesson: MiniScribe and the Brick Fiasco
Impressive: this managed to be wrong in the first paragraph.

He needs to consider the enemy within. I did not resign because "my shields dropped," I got shot in the back by the folks inside my "shield." Nobody presented me with an opportunity, I went looking for one when I realized that my loyalty was misplaced and my efforts wasted. At no point am I kidding myself about "curiosity:" I wanted out. Then investigation happened, I did not receive an email about coffee.

It's a strange take: we as employees are supposed to resist temptation like some kind of monk beset by lasciviousness. Let's go with this metaphor he loves: somehow, the burden falls upon us. Imagine standing there, day after day, holding a thirty pound shield before you. Tiresome.

The saying goes that people tend to quit bosses, not jobs, and this shields concept is a coping mechanism to not face the idea that bosses can screw up and frequently rely upon employee inertia instead of trying to tamp down their screwing-up frequency.
Ask HN: Security vulnerability discovered during interview
I was recently on an interview where the team pair programs on real code as the “engineering challenge.”

During the interview we were working on a feature and I noticed what appeared to be a session fixation vulnerability where - and I kid you not - the session ID is the user’s email.

The product allows you to upload/download files to the user’s account.

I pointed it out to the engineer and the response was that it “was fine” because _they_ only cared about certain files and if other stuff ended up there it didn’t matter. I pointed out you’d be able to also _read_ any files (which are sensitive reports) and was told “you’d have to know the file name to download them.”

The file names are trivial to guess given you are familiar with the site.

While this isn’t a feature that could be exploited to take over a host, it could allow free file hosting, huge costs (if one kept uploading large files), and a potential data breach of sensitive customer information.

I am _not_ a security research or a colored hat wearer of any sort.

What would you do in this scenario?
> If the message was "I baked cookies, come by my office if you'd like to try some" do you think this person would similarly be fired?

No, but I think they'd similarly be fired if they had written an anti-union popup. (Indeed, if someone wrote an anti-union popup and weren't fired for it, I expect that would itself have made the news as a "Google hates unions" story.)
Part of the job was writing precisely that sort of pop-ups.
There are examples of bad unions. Police unions protect the "bad apples" that kill people with no consequences. Teacher unions protect teachers at the expense of students and education as a whole. Unions are designed to protect the weakest link which many people with highly sought-after skills feel is not in their best interests.
I think in that case your supervisor should be fired.

You followed company policy, but your supervisor didn't.
You mean the "gargoyle" equipment? I kinda pictured that as a sort of google-glass-meets-nintendo-power-glove arrangement.

Although perhaps that's too literal an interpretation of "recording everything that happens around them" and "in the metaverse all the time"
We've recently switched to a scheme where we run a Nginx reverse-proxy with LetsEncrypt. Everything is in docker containers.

Based on this:

https://medium.com/@pentacent/nginx-and-lets-encrypt-with-do...

Now, in our setup, everything is running on a different port, so it is easy to set up additional services all coming from the same hostname with the same IP address.
They specifically made that illegal with Taft-Hartley because of the political power available to workers by allowing it. Most labor parties in Europe actually arose out of these unions, for example.

The WGA was grandfathered in with the law, but you’re not allowed in the US to create sector wide programmers union. It is cool to imagine what you could accomplish with sector-wide software strikes though.
Had to access an EOL device and couldn't browse the web because of all ended certificates...
Certbot works with multiple configurations and servers / Operating Systems:

https://certbot.eff.org/

I wouldn't be surprised if that's how he's managing 100 servers, or something similar.
Three Million AirPods Sold in Holiday Rush
Don't get me wrong. I enjoy socializing more than anything in the world.

Small talk with a complete stranger cutting my hair feels very awkward though. We're not friends, have nothing in common, and I typically have nothing to say to him. Which means it's a considerable and awkward effort to keep a conversation going.

A cashier who asks "Did you find everything alright" because she gets fired if she doesn't also feels like talking to a hostage. That's a different thing, but it is also often cited as "human contact" by people, and that is very alien to me.
Being in charge of the infrastructure does not mean you are in charge of the content.

Those are well defined roles. Specially in a company of that size.

She didn’t just make a judgement call. She went way outside her role imo.
They may not know how to do it right, nor have the means to get a software development team started on the project. To some extent, "if it works, don't fix it" applies here... until it doesn't work.

I don't blame domain experts for scratching their itch and solving problems in whatever way they see fit using their own knowledge and tools. It's the way that many software projects get started, and where new opportunities get discovered. These are good things.
> unreadable for people not well versed in the language

This is a sign the language is pulling its weight. We're going to spend most of our careers at the top of the learning curve, so we shouldn't optimize for briefly being at the bottom.
Somewhat, rather, not not unprofessional, perhaps.
I agree, what’s useful about this mentality is not about becoming a multimillionaire, it’s about having your wealth match your income. A doctor making 250k is often living pay check to pay check while spending crazy money. Even with a steady paycheck their not accumulating wealth.

Even worse, a football player with a 20million dollar contract is likely to end up broke if they instantly maximize their spending. However, if their lifestyle is based on their savings account that’s going to quickly grow to match that income.
Surely there was one model that happened to come up with the right prediction, I would assume there were multiple. But my questions is whether there was one model with consensus support (which seems to be the claim), which would be necessary to rule out survivorship bias.
The word "accent" implies that it is being compared to some kind of reference. You might be looking for the word "dialect" here.

For example, if you have two speakers with English as a first language and a third from Germany with English as a second language, the native English speakers will probably detect a German accent in the ESL-speaker's dialect.

People get into long internet arguments over this, but the closest thing to a neutral English dialect is General American English, also sometimes called Broadcast English because newscasters, TV personalities, and actors would be trained this dialect so as to not sound like they are "from" anywhere in particular. It used to be common as well for highly-educated or upper-class individuals to hire speech coaches to teach them this dialect in order to "lose their accent". It still may be common for all I know, but I believe the deliberate acquisition of General American is probably on the decline.
It's not an impossibility. Nothing is an impossibility. We are all temporarily embarrassed millionaires and most of us are temporarily embarrassed for life.
I don't really agree. The notice is required by law to be posted in workplaces. It's also required by law for Google to post it on their intranet. It's not a stretch to provide a link to that intranet info, in an add-on that provides links to company policy - assuming you are operating in good faith.

But again, law of the jungle and all that. If I were her boss and she came to me for approval, I also would get approval from my boss and my bosses' boss.
Putin Still Using Windows XP
>> Storing my password DB on other people's computers is simply not going to happen.

What is the risk scenario you're worried about?
Robot-powered outfit is being fashioned to help seniors walk
Show HN: Simplify complex workflows with this modular workspace
This a perfect example of grass being greener on the other side of the fence ;) In some European countries I know of, unions are solely responsible for forcing the government hands into things like keeping around and subsidising beyond any sense and belief a dirty energy sources (coal mines and power plants for example) resulting in air quality killing more people than car accidents every year. Those unions won't stop at anything and are ready to and have in past organising violent riots on streets, until everyone around surrenders to their demands.
Is there any writeup of the theory behind this? I'm particularly interested in type inference.
I don’t even think that’s the primary problem. I think the average person doesn’t give a shit about stuff like this, at least not to the point where they have to make personal sacrifices.

It’s very very easy to live your daily life and not see any real world consequences outside of some sometimes shrill activists who aren’t the most persuasive people to the average lowest common denominator people.

For one thing these sorts of people won’t be hanging out on an MIT website called EN-ROADS.

Indifference is the biggest enemy, not some big orchestrated conspiracy (although there is some of that too, but that doesn’t explain why even most liberals aren’t doing anything about it).
Stop Calling Them “Side Projects”
Rumors and fear about CAB/NRC is causing people to come on streets in India
During 1947 riots, the Hindu-Muslim unity was very important for our country's survival but today, I feel the Left-Right wing unity is even more urgently needed to avoid a major catastrophe.

I am quite worried that there is a deep factional divide or a major fault line emerging among my countrymen. And though religion is part of this complex equation, let's face it - this is more about "your ideology vs my ideology" than being about any religion.

Those protesting against the CAA/NRC are worried about the Indian constitution. But why protest when this act isn't for Indian nationals at all but applicable to the refugees of Pakistan and Bangladesh?

The incidents at Jamia and AMU clearly shows how a hive mind can create a toxic mindset and cause a bunch of students to revolt and wage a war against the state. I just hope that sanity prevails outside of these educational institutions and rational people will see the futility in fighting crusades over something which doesn't even have enough clarity yet. Why club CAB+NRC and then form hypothesis and fear monger over it? We will see when this act actually gets implemented, why worry about it now? Assam Accord was passed in 1985 but hasn't even been implemented till today! Let time pass and let a future generation deal with this, why are you people losing blood over this?
Possibly that's the case.
Five Books to Enjoy This Winter from “GatesNotes”
Wouldn't this be subject to Let's Encrypt's rate limit of 50 certs per week for duckdns.org? Do they have an exception or are not enough people using this trick for it be a problem (yet)?
You can change the sensitivity.

First from top menu simulation -> assumptions.
Then from below > "Climate system sensitivities" you can alter Climate sensitivity, Ocean mixing index, CO2 fertilization index, Sea level rise from ice sheet melting and Carbon cycle land and ocean uptake
You are completely discounting the power of compounding. Saving every penny won't make you rich in a year or even in 10 years. But think about 20 years in the future. Think about retirement. Every extra dollar that you put into your 401K will make a meaningful difference on how you retire in 20-40 years. Here's one real example for you: 96-Year-Old Secretary Quietly Amasses Fortune, Then Donates $8.2 Million - https://www.nytimes.com/2018/05/06/nyregion/secretary-fortun...
Windows itself costs $200 or so. LogMeIn isn't worth 5 times as much as the operating system. At that price, it very quickly becomes cheaper to investigate alternatives like just using a Linux machine where remote management is a breeze, and there are tons of high-quality, free tools (with optional paid support contracts that are very inexpensive by comparison.)
The thing is its easy to see that someone stole your machine and take action to revoke credentials. Further, the damage a person can do with a dev machine is rather limited - probably the worst that might happen is exfiltrating code. Yes, devops machines can do more damage, but presumably all their remote access is 2FA protected (at least). But a devs main influence is pushing to a git remote, and triggering a build. Maybe the build is a weak spot, but it seems unlikely that an attacker would find and exploit it faster than the defender would realize the box is gone and revoke keys.

No, my main concern is ongoing, persistent, secret access to my machine, particularly delivered via a malicious package. Something like Little Snitch is going to make it much harder for such an attack to work. Locking your machine, 2FA, PKI, etc is not going to help with that threat at all. And I have reason to believe it's more common than people think.
RTFA. They were literally doing their job.
A Sorting Visualization
> But injecting javascript

Come now. It's a browser extension, it's written in JavaScript, and knowingly installed by employees. No "injecting" went on here, let's not try to make this sound more nefarious than it was (not very). Fireable? Perhaps. But not because of a security concern.

(edit: reading more, it's clear that the only thing that makes this "fireable" in google's view is that it promotes union organizing that they oppose. Any other such message would probably not cause firing unless it caused a PR problem, and perhaps not even then.)
I know, I am agreeing with you :)

But alot of people in the comments claim that she more or less hacked the system.
Sorry -- was thought it would be obvious that I've taken the pledge Giving What We Can recommends.

I'm not quite sure why it matters whether I've taken the pledge or not though. Could you elaborate why I should disclose this explicitly?

Also disclosing affiliation seems sensible if I'm promoting a product and I'm going to benefit from others purchasing it. Here I'd be thrilled for more people to join in, but this is akin to telling others about an opportunity to volunteer. Are you thinking there's some conflict of interest?

I'm really curious -- thank you for your time.
Bank Financing for Sports Stadiums Could Count as Helping the Poor
Depends on what you want. If you just want the work and don't care about owning the company but are using the equity to secure payment that's fine. It'll probably be a hard sell (not impossible) for them to hand over $30k out of $90k of revenue when they aren't actively growing the business.

First thing no matter what, define the job and figure out how much it would cost if the work was being performed by a professional firm. If that cost is $100k including profit, then that is your base cost and you need to figure out how you get at least that value out of the business.

To be fair, the above is only the way most people think when trying to make money. Wealth is not built that way, but paying the bills can be. IMO if you think this business is profitable, and can be grown and leveraged better than you need to think about permanent equity stake or a leveraged buy out of some sort where you own it all. A business doing $90k a year, may sell for $30k or may sell for $900k, just depends on the factors of the specific business and opportunity. If you want to own it, then look at leveraged buy out ideas, these work in a lot of small business transactions and generally let both the current owner and the new owner have skin in the game at the same time so everyone is working for the best outcome. But if this isn't a business you are going to want to spend time really growing and working in every day, then just do the consulting + profit route and be done.

I did a few e-commerce deals where I paid for their development with my time and my teams time but I took a percentage of their profits until my cost + profit was paid off, and then I still kept getting a smaller percent of profits until some next milestone since I took the risk and they had little risk. e.g. I might get 30% of profits until I am paid back, and then 3% for 5 years with a minimum of $X/year guaranteed. These types of deals are good when you don't want to be in the business but you are taking risk and they are getting to leverage you/your time and/or your money. The percentages are all super dependent on the business, types of deals, number of transactions, deal size etc.

There are almost an infinite number of ways you can structure these types of deals to be fair. You have to define what you want to be doing first, then you can figure out options.