skysight-inc/HackerNews huggingface dataset:
> DoH is difficult to distinguish from other HTTPS traffic and is more likely to successfully resolve (since they cannot block HTTPS and still be useful).

Considering that most users would keep default setting and there are two browsers with two default DoH servers, you could just block few IP addresses and effectively block DoH for >95% users.
"As an added precaution, the university computing center decided to issue new passwords for all 38,000 JLU email accounts. However, the university was unable to do this online because of a quirk of German law, whereby the German National Research and Education Network (DFN) requires, in this case, JLU students and staff to obtain their new passwords in person from the university's IT staff, using as ID card to prove their identity."
Depends on which investigation one chooses to believe the one presided over by Modi shill or multiple independent ones that gave forensic evidence that the fire started inside and was likely an accident. https://en.wikipedia.org/wiki/Godhra_train_burning#Banerjee_...
It is my understanding that there has never been a case in California where a court has said “OK, your employer owns that open source patch you made at 3am on your own laptop”. Poking around, Applied Materials, Inc. v. Advanced Micro-Fabrication Equipment comes to mind; here is a summary:

https://www.arnoldporter.com/en/perspectives/publications/20...

The only public case I know of where a company has been able to claim the open source software someone made in their own time is the Nginx case which is ongoing right now in Russia. [1] I remember a story about someone in the US (not in California) where they were asked by their employer to stop working on open source Perl code in their own spare time, but there was, as I recall, no litigation there.

As for myself, I am very careful to make it clear, when signing an “inventions” clause, that I will work on MaraDNS in my own personal time while employed. I also go to a lot of effort to date stamp my open source code, and to only use versions of my open source code written before I signed the “inventions” clause for anything work related. Actually, I prefer working as an independent contractor for employers who do not burden me with an “inventions” clause.

[1] The details are different: As I understand it, Igor Sysoev was given permission from his employer to work on nginx while at the job, and the legal stuff didn’t come up for well over a decade after Sysoev left Rambler, and, of course, it’s in Russia, so it’s somewhat different than the “3am commit on one’s own laptop in California” issue.
From the article:

> Picking an arbitrary limit less than 232 is certainly safer for many reasons, and very unlikely to impact real usage. We already have some real limits well below 106 (such as if/else depth and recursion limits).

> A range of -1,000,000 to 1,000,000 could fit in 21 bits and that three of those values could be packed into a 64-bit word.

In theory this could bring security and performance benefits. In practice if you claim to be limited by MAX_UINT you're likely to encounter issues if you try to close to that limit without very careful coding around overflow.
Restricting memory usage of Python objects seems like a good idea.
I have a Microsoft keyboard that has a dedicated Calculator button. In older versions of Windows, I used to press that button and start entering numbers right away. But in newer updates of Windows 10, I now have to press the Calculator button, WAIT FOR THE CALCULATOR TO LOAD, and then start typing my digits. I think this is ridiculous.
Are you sure this applies to open source contributions? I always thought this would only apply to commercial side projects or inventions. Open source contributions don't seem to fit in either of those categories.
YouTube burnout is real. Creators are struggling to cope
I really hope this model works out for you, I absolutely adore Zulip. At my company, we have the option of self-hosting, since you've made it so easy, but I intentionally keep us on the free plan so we can start paying when we can afford it, to support you.

Zulip is one of the few pieces of software that I think are unquestionably worth their price (some others being Gitlab and some sort of SIP provider, e.g. OnSIP).
Cows <> Crows
> unless you're willing to live with your parents until you're at least 30.

Which is considered normal in many non-US cultures.
I remember finding the SICP in our university’s library as a freshman, me and a friend (both of us had never used scheme) had a lot of fun going through the first chapter together.
I accept that judges sometimes need to refer to dictionaries, but wonder whether this particular essay is someehow related to Scalia's positions on orginalism?

Also, why are the "fowls raised for meat" definitions that they use as an example more explanatory than the "domesticated fowls" definitions?

Is it possible that the authors are confusing greater specificity for being fuller or more explanatory or superior? Given the prevailing dogma that English language dictionaries merely describe popular use rather than prescribe it, it is unclear that the more specific definitions more accurately describe its use by fluent language users.
She has said she hasn't even tried to make a bricklink account yet. Hopefully she tries and is able to order that way.
I'm not justifying their "boo science, yay debauchery" line of thinking but let us look at the numbers (because I'm curious):

This is for the US, from CDC data, so probably 30-something percent depending on how many were between 60 and 64:

>Totals For 2010: 2,468,435 people of all ages died. About 11.9% aged 25 to 54. 24.5% aged 25 to 64

https://modlinlegal.com/blog/maybe-i-just-won-t-plan/90-the-...

And this https://data.worldbank.org/indicator/SP.DYN.TO65.MA.ZS

shows numbers kinda all over the place depending on country, depending on where the person is from it may very well be that the majority die before 60-65 in their country.

Angola, Burkina Faso, Burundi, Cameroon, Central African Republic, Chad, both Congo, Cote d'Ivorie, Equatorial Guinea, Eritrea, Eswatini, Gambia, Guinea, Guinea-Bissau, Haiti, Lesotho, Malawi, Mongolia, Mozambique, Namibia, Niger, Nigeria, Sierra Leone, Somalia, South Africa, South Sudan, Togo, Uganda, Zambia, Zimbabwe all appear to be under 60% chance (one or two may be at or above, I made the list quickly) of making it to 65 if I'm reading that table correctly.

So, that's about 679 million people using 2017 numbers found via Google so not even 9% of the global population but still, that's roughly a 1 in 12 chance they are from a country where death before 65 is a thing for 40-60% of the population.

Also TIL Nigeria has 191 million people!!! Wow, I would have never come close to that if told to guess.
When was Google ever anything but "just another US corporation"?
Because historically, a "sharp" note was thought of as a leading tone (Ti), whereas a "flat" note was thought as a fourth scale degree (Fa), tending to step down to the third (Mi).

(Actually, this was thought of most often in terms of hexachords, where there is no Ti and one would always use Mi-Fa for a half-step interval. I rewrote it in terms of scale degrees to avoid confusion.)

I.e. the F# in Gmaj does "want" to step up to G, in basic structural terms. We call the places where this happens most properly "cadences", and they are among the main structuring elements in a piece of music. (This Ti-Do - F#-to-G or B-to-C motion is then called a "cantizans", since it appears most prominently as a "canto" or "sopran" cadence. It's most typically seen as Do-Ti-Do, where the first appearance of Do is first "prepared" in a context that makes it a consonance, but then sounds as a dissonance as the other parts shift to a dominant chord (Sol and Re), so it's allowed to resolve to the leading tone.)
Longer than me too and I've been there since the mid aughts.
"Don't be evil" is looking more and more hollow.
The search for a greener internet is taking root
How the Immigrant Dream Died in an Automotive Shantytown
What about LeVar Burton? His given name has two capital letters!
Diary of a Beard
> Add to this the player opposing is under pressure because he HEARS the discussion. Can he take advantage of knowing plans? Should he?

Since we knew the opposing player was listening we mostly didn't discuss plans, at least not in a way that would have hurt the plans. Mostly we suggested moves to each other, and pointed out problems with the other person's suggestions.
> Are you referring to HTTPS-intercepting proxies?

No, I am referring to what I said. Public WiFi networks only allow their own DNS resolver and block all others and most other non-HTTP/HTTPS network traffic. This breaks DoT and even unencrypted UDP DNS to your choice of resolver (outside of the WiFi's captured DNS/Middlebox DNS).

A lot of free public WiFi today break DoT and work with DoH. DoH is indistinguishable from other HTTPS traffic, DoT and DoH are highly distinguishable from one another. DoT is trivial to block (often without even targeting it specifically).
YouTube is underrated
I interviewed at a well funded company for engineering manager. The interview centered around how they were going to build a 100 person team so the job would include lots of interviewing and hiring.

I assume that some investor was told that "We are going to have 100 developers while our competitor has only 20" and the investor bought into that plan.
I'd like to expand on the complementary facet that has not yet been approached here. The physics/signal theory behind of it. It's a great way to learn for scientifically inclined people. Try looking at how instruments are made, and where does sound come from. Look at experimental instruments like waterphone, bells, violins, strings, drums, winds, animal noises, natural sounds, electronic music...

Try looking at the way the waves propagate and interfere, learn about acoustics and how physical objects respond to incoming sounds by vibrating themselves at specific frequencies which depend on their geometries.

This approach will give you the basis blocks upon which generations of musicians have built a language and cultural norms that also take into account understanding the listener and its emotions.

Try to find something which interests you and dig as deep as you like.
>Just to be clear

Then be clear. We both know what she was doing, why be obtuse?

This was an activist power-play. Every article that is written about this lists the action as activism. Again, why pretend otherwise?

But if you want more clarification: it's not her job as a SECURITY ENGINEER to send warnings about federal statue compliance through a security tool. I also have yet to have anybody demonstrate that Google was breaking any federal law, and I highly doubt they would. They have entire departments that deal with legal complience.

And you linked to a labour consulting company website, which I take is where this actvist decided to helpfully issue threats to senior management through the security tool she was tasked with maintaining so they think twice about contracting them.

This is a such a clear violation on her part that I am flabbergasted that you would actually defend the move. She deserved to be fired for her arrogant stunt. You don't get to dictate compliance policy (as an early 20-something tech-sister, who knows nothing) to a company employing 50,000 people.
Don't sign a contract if you don't like its content. This can hardly come as a surprise if it is started in the employees contract
> […] canonical hangul version of foreigners' names […]

Like a list of names with their Hangul version? The problem is that you can't know how someone's name is pronounced for sure.

In Japanese I provide the katakana reading for my name myself, because the chance of meeting a native Japanese speaker who can correctly derive the reading of my Dutch name in katakana is remote. Fortunately, in Japan it is already customary to ask for a name's reading in kana, because kanji readings too can be ambiguous.

Names are interesting in that their pronunciation for the same spelling can vary even within a single language depending on where the person is from.
Stop the autoconf insanity Why we need a new build system
What Employees Tell Us About Automation and Re-Skilling
I have briefly evaluated a few of these in the last month (focusing only on TS or Python) or so and have ended up convincing myself I need to go down the path of building bits I need in my own way. Consider this only constrictive criticism and I massively applaud the hard work that has gone into these projects:

https://github.com/async-labs/saas

Good:

-React Material UI Front End

-Book showing how you how to build it, really cool way of funding OSS!

-Simple but scalable enough architecture, not too much cruft.

Not for me:

-MongoDB/Mongoose, where SQL (sequalize ORM or plain postgres) would have been a much better fit for a SAAS boilerplate in my opinion. Quite a big user document in the mongodb schema.

-Quite tight integration with AWS by default (s3,SES,Lambda) not hard to replace but the principle of OSS with defaults to one vendors IAAS feels uncomfortable to me.

-No password based login, not a big deal but an interesting choice.

-No Delete on team members and some other simple things that are needed to make it functional.

-Missing a few key features (permissions, master dashboard ect) that are addons by commercial licence which is fine, but these add up quickly to ~$1000 for something that would still be a fairly basic boilerplate.

https://github.com/staart/api

Good:

-Awesome features: landing page, RBAC (although roles are hardcoded so take a look at these before you build your app), TFA, Api Gateway, Auto Join company based on domain. Everything you need (and some you wont)

Not for me:

-While there are lots of features, some don't actually work out of the box and require fixes. Some features you will not need and may have to strip out. If more time was spent on getting fewer core features absolutely perfect this would be the best SAAS starter out there in my view (in TS/JS).

-Again integration with AWS by default (SES) with no SMTP or second option, easy to replace though.

- Would personally have chose postgres with knex (rather than direct mysql) for the DB and react for the front end over vue but these are personal preferences.

- UX on front end could do with a little work.

SAASForge seems interesting but missing alot of features like companies/teams master dashboard ect.
LifeLabs pays ransom after cyberattack exposes data of 15M customers
Los Angeles startup uses AI to reduce unnecessary spine surgeries
This is not really what happened. I have toured many battery factories in Dongguan - they have stock on-hand even of non standard sizes. I have been shown the actual inventory spreadsheets from product managers. Also, buying batteries from a friend of a friend is very risky...batteries are the most risky thing to buy, at least li-ion, you are almost guaranteed to violate International shipping laws.
Pharmaceuticals are tech. The only non tech IP industries are things like art.
Why? Why does a textbook about fundamental principles need to be 'adapted' to technology currently in use in industry?

The Feynman Lectures uses an example of a screw jack with 10 threads per inch, and a 20" lever. Should we update this to a name brand screw jack with 8 or 16 threads per inch, and an 18" breaker bar, because those are common in industry today?

Be sure to extend the introduction of that chapter to include a history of this particular screw jack company, and who currently holds the trademark, and all the major companies that make screw jacks today, and typical uses of jacks, and how they're constructed [1].

[1]: https://sicp.comp.nus.edu.sg/chapters/1
For intellectual property yes. If you invent a new hybrid carrot, your seed maker employer would probably claim that.

Physical property is very different. Your employer cannot claim your carrot or tomato crop in your home garden.

Ultimately, you’re better off with terms like this if you’re working with a big company. If you have permission to do a side project, your are without risk. If you don’t, or your employer doesn’t have a clear policy, there is always the risk that they’ll come out of the woodwork and claim some piece of the action.
Competing in the Age of AI
Put down the books and websites and articles. Write music.
"Property" isn't natural. It's defined by law.
It's called Snake Oil Consulting Inc and the sorts of firm that has very very good contacts to the federal gubmint...
https://www.facinghistory.org/reconstruction-era/letter-jour...

I don't know that the former master was genuinely hurt as much as he was trying to get some more free labor.
This rebuttal isn't worth much, as it was written back when js was a much different language, some 2 years before let/const, promises and probably half of what modern js developers use day-to-day. It is also way too snarky to take it seriously. Not gonna lie, it was a fun read though.
"WHEREAS, the Employee desires, on the terms and conditions stated herein, to be employed by the Employer as President."

Seems reasonable for the President of the company. Do they make waiters and line cooks sign a similar contract?
The rational can't be entirely wrong. In tech, skills and ideas gained during employment help generate new ideas. Since you are paid and trained, there is this incentive to profit from everything you produce.

Companies use tricks such as 'coded on the corporate hardware', 'non compete agreement' etc.

Grow some common sense, do all your side project strictly outside office hours, on your own hardware, in domains that don't even remotely relate to what your employer's industries , and it will be very hard for the emplying organisation to come after you.

I could inspect everything my organisation does, how they do it, then bake something up that technically outperforms it, then quit and work on marketing, again Leveraging everything I've learned, their mistakes and success. Would that be fair?

On the contrary, working for an optic company and developing oil drilling optimisation methods to sell once in quit, would they even come after me? It's fair, won't trigger any suspicion or even interest in pursuing litigation.
What enjoys widespread appeal is however the cream of the crop. Being raised in Sweden I often opt out of watching a Swedish movie or tv-show simply because everything that makes Nordic Noir good, morally complex stories with plain language, can make the main characters insufferable and obnoxious. You have to remember that the most exciting stories in a culture are about those who do something daring and in Scandinavia, where we are very conflict averse, you thus get heroes acting like assholes because we wouldn't dare do that ourselves.

It can work quite well as evidenced by the popularity of The Bridge, The Girl with the Dragon Tattoo and others ... but it can also not work out at all if you don't sympathize with the characters' cause. That's why they're almost all crime dramas, because asshole or not, we all sympathize in their attempt to catch the bad guy. Try watching a Scandinavian romantic drama to see what I mean.
But B does want to step up (or resolve) to C, the tonic of the C major scale. Similarly with F# to G in G major.
"Dystopic" [sic!] may lead to misunderstandings. Also the article above states that it isn't an actual word.

You can't even pronounce it. People will only hear "this topic" or something like that.
Still better than n-page v2 and m-page v3.
> Enterprise use cases can easily manage this through Group Policy.

That's Windows-only mechanism.

> Households (keep in mind we are only talking about people who knew enough to change DNS settings in the first place) can just change the setting on each of their five or so computers.

And not forget to do that for every new device they get. And after reinstalls. And occasionally just to be sure, as we know how software tends to "forget" user preferences sometimes. That's all only up until Mozillas' telemetry will show, that nobody changes the default anyway, so the preference will be removed entirely.

> And if you are using DNS as parental controls, that's not a great solution as nothing stops someone from getting the IPs out of band (ex. a website that does DNS lookups) and connecting directly to the blocked sites.

For the user, it's more complicated than that. He has to persuade the browser to send the right Host header when connecting to the obtained-out-of-band IP address. If you have rights to modify hosts file, you might change the DNS as well and spare the effort.
Disclaimer: I left Apple in June.

Processing on local devices is slightly better but ultimately it’s cold comfort when those devices are locked down, closed source, and opaque to anyone but hackers.

From the end customer perspective, the only protection was Apple’s customer-focused business model, which is now slowly tilting from “sell slick technology products” to “monetize the user base.”

Another solution is needed. Since I created Dropcam (Nest cam), I am working on fixing this: send us a message at https://duffy.org if you want to learn more.
Amazon, Apple, Google, and the Zigbee Alliance to develop connectivity standard
Google should be broken up like the Bell system was in the 80s.
What a search warrant for a Google account covers
Nobody's solved the trolley car problem to everyone's satisfaction in a century. Not gonna happen tomorrow.

Agreed it shouldn't be left to the companies - that's why the 'make a rule' idea. Else the companies are in an escalating war of ad-hoc behaviors to preserve their customer vs all others.
Bypassing Objc_msgSend
Have you tried Ravenspiral's guide?
It seems like a fire at your home would be a reasonable scenario that might well result in that outcome.
I have exactly one lasting memory of Elmo from the 90s. He was yelling random things such as "belly button! belly button!" until some adults stopped him and walked him through the definition of the word "important".

So... yeah, you nailed it.
More like "Nvm, I found the problem, it's working now :)"
Someone needs to invent an adblock for stupid meme gifs. That page is fucking unreadable, holy cow.
Boom (Navigational Barrier)
Check out this book on the topic from Stripe's publishing arm:

https://www.amazon.com/Get-Together-build-community-people/d...

"Nearly every challenge of building a community can be met by asking yourself, “How do I achieve this by working with my people, not doing it for them?” In other words, approach community-building as progressive acts of collaboration—doing more with others every step of the way.

The throughline of our book is this simple concept: “build with.” It lives in each of the recommendations we make as we take you through three stages of building a community: sparking the flame, stoking the fire, and passing the torch. "
What does a trillion dollar R&D company NOT work on?
When I was renegotiating my contract, Software Freedom Conservancy reminded me that everything is negotiable, so I negotiated ownership of all open source code I produce for my employer in addition to the existing ownership of side projects.

https://sfconservancy.org/contractpatch/
https://lists.sfconservancy.org/pipermail/contractpatch/2018...
Yeah, this was a surprise to me as well. Spent a while trying to figure out why Firefox wouldn't show a local development instance despite curling it working fine.
Agile and Scrum can add a lot of meetings and processes and metrics into a development team. For non-technical managers this is great because they can create nice charts with story points for upper management.

The above comment can devolve into a flame war because non-technical managers see Agile and Scrum in a different light. They believe that without proper management developers will be unproductive.