skysight-inc/HackerNews huggingface dataset:
Haha oh man. One time we accidentally added a mostly vodka mixed drink to the public pool of recipes and it started appearing in people's breakfasts... that led to some interesting feedback emails.

Was something like the pinapple+cottage cheese with a side of pinapple the first result it gave you, or was that after a few regenerates? I'll have to do some investigating if it thought that was the #1 best result.
Here's another one:

* We already had a candidate in mind but our hiring process requires us to publicly post the opening and interview other candidates before we hire the person we already decided on.
Facial recognition systems show rampant racial bias
I just wish C had something like defer in go, That would cover most cases.
So what? Why should I care?
I think they would be reluctant to publicly lash out if they think they're still some possibility they're in the running. After that time, hopefully it has been long enough that their emotions have died to down.
Work machine. But it's a small company, no dedicated IT staff, no anti-virus, and everyone has admin privileges to their computer.
The phrases "simple" and "news websites" don't combine well these days. Even the NPR website downloads 13.2 MB of content over 91 individual requests, and takes just over 3.6 seconds to load (6.5 to finish).

- CSS Stylesheets: 3

- Animated gifs: 1

- Individual JS files: 11 (around 2MB of JS decompressed (but not un-minimized))

- Asynchronous Requests: 14 (and counting)

And that's with uBlock Origin blocking 12 different ad requests.

That's not simple in any form. So, the possibility of something on this page breaking? High. There's a lot of surface area for things to break over time. And that's not counting what happens when the NPR's internal APIs change for those asynchronous requests.
Is this new? Is that why it's being posted?
It depends:

- Is it a reasonable time expenditure relative to other priorities (an indie dev doing an MVP is quite different than a 20 person team at a bank)?

- Are the dependencies "large" (framework level) or "small" (tiny, focused library)?

- Can you rely on semantic versioning to give a clue as to upgrade cost?

- How long since you last upgraded (further behind means much more breakage)?

- Does the language / platform you use make it easy (ie do you need to synchronize native libraries as well)?

- Can you depend on your build system to reliably test the upgrade and report stability?

- Do you have higher-than-usual dependency requirements (security, compliance, risk reviews, license review, approvals)?

Having said all that, I upgrade our dependencies every month. It only takes a couple of hours and very rarely causes issues (maybe 1 in 6 monthly upgrades requires an extra hour to identify a regression in a newer version and adding a comment with an issue tracker link to pause upgrades of that dependency until it's fixed).
Superheroes vs. Snow
In general the decentralised fetishism isn't something that is big in academia (as in the academia that publishes paper). There's lots of issues in academia and even more with the semantic web, but fetishism of decentralisation isn't it.
Robby Went from a Struggling Gym Owner to #1 on Clickbank
Escape from System D, episode VI: freedom in sight
Vitelity has supported this for probably a decade.
Note that OpenRefine isn't really kept up to date.

The basic capabilities work ok, but lots of the additional capabilities have atrophied away.
Wonderful write-up. In particular, I appreciated how actionable this was. As a backend developer that loves the web but isn't part of the whole frontend mania, I completely relate, yet still learned a couple things that I can apply easily.
Working with pine and balsa is surprisingly easy and cheap (hand saw is $9, drill is $20, xcircut or paper is more or less free, 8ft of 2x1 pine is $2) with balsa you can get away with just a pocket knife and self tapping screws or just hot glue. I used to use it for making robots, it’s better than 3d printing if you don’t need something precise and repeatable.

You can save money on dimensional lumber if you don’t have a large vehicle and only need shorter pieces by buying the largest pieces at the hardware store and cutting it in the parking lot.
These work only if you move stuff around on the same website. If you switch domains you can't just ask the new domain owner to redirect requests to your new website.
What happens if you put an ebook on a USB memory stick and sell it like that?
Here's a thought: maybe do most of the feedback during the interview process.

Train interviewers to explain their reasoning for the questions they're asking and what they're trying to evaluate.

And then, at the close, identify all the positive things the candidate demonstrated and what bullet points they're going to bring to the debrief.

I've been doing the former quite routinely, and in the last interview I did, the candidate just asked me why I asked those questions so I went ahead and explained it.

I think it helps make an interview less nerve wracking, and it helps me to think aloud about the case I'm going to present in the debrief.

And, frankly, some interviewers are asking stupid questions and it may help if they have to explain themselves.
This is not hacker news related but I’ll weigh in anyway.

Regardless of your position on biological gender Jk’s tweet was in support of a women who refused to acknowledge the preferred name of a transgender coworker.

I am sorry even though I lean toward the two genders side of the scientific debate, you can’t be disrespectful to your coworkers. I would never misgender a trans person it is incredibly rude. Workplaces can regulate their environments however they like to ensure coworkers are respectful and people can work together. The woman who was fired knew she was violating policy. She deserved it.

Asshat is not a protected class.
There are real-world applications where this* would drop in. I believe Chrome's malicious-site blocker employs a Bloom filter blob.

* assuming it does what it says, I haven't looked.
Do one thing, do it well. You could always bind tcping to a shorter alias or create your own ping that does what you need.
His take is a result of him trying not to completely let go of the story he's already decided is significant. There is no story. There isn't really a great way to defend against credential stuffing attacks when the adversary has access to a huge residential proxy network and you don't want to greatly inconvenience your users. All major US banks are pretty vulnerable to credential stuffing attacks. If banks aren't going to defend against it, Ring isn't.
Microsoft's brand for their platform which covers both VR (their confusingly named Windows Mixed Reality range of VR headsets) and AR (eg. HoloLens).
That's correct.

Selling access to the Google maps API is wholly superfluous to Google's business model. Certainly, it doesn't clock anywhere near a billion in revenue.

Prices have gone up because Google doesn't have any interest in sustaining the product. The total addressable market is miniscule by comparison to cloud or even enterprise productivity apps.
What people need is a plan to buy groceries for n days (likely 7 but may be 3, 4 or 1) and a list of meals for each day. That are good. Make it specific to singles and it’ll be really cool.
As an interviewee, I would love companies to provide some transparency and feedback. The feedback doesn't have to be super detailed, just areas for improvement. This was something which I really appreciated about Facebook. I interviewed onsite a year back and later the recruiter told me "You did well in all the coding interviews but we felt that you did not display the level of competency required in System design for a senior role". That was actionable feedback IMHO and I would not hesitate to interview again.

The flip side is I hate interviewing for companies which ghost / refuse to provide feedback, especially when they give you a take home test / assignment where you don't even know
a) Whether a human / engineer saw your submission
b) What is the criteria being used for evaulation (especially for working solutions).
The worst offender has to be Slack (though Twilio/Amazon is right up there) where they make you create a slack bot which does something trivial (play tic-tac-toe). Wasted a bunch of time to read the documentation and get a basic bot working before I got to actually work on the problem (tic tac toe). My submission was rejected and I was given no feedback / reason why
Yeah this is old?
https://www.theverge.com/2016/8/4/12380036/apple-bug-bounty-...
This is 4 years old? (2016 should be added to title.
The paper claims that it is more space efficient than golomb coded sequences, but this is clearly not the case at least when the golomb parameters and FP rate are set optimally[1] a GCS can be well within a fraction of 1% of the information theoretic limit.

The main limitation of GCS in terms of communications efficiency is just that there aren't that many optimal rate options. Though arithmetic coding the differences isn't really that much more complex to implement and it's optimal for whatever parameters you want.

Now, if it wanted to talk about _access_ efficiency, then sure, GCS don't result in an data structure thats efficient for random access.

[1] https://gist.github.com/sipa/576d5f09c3b86c3b1b75598d799fc84...
I ask myself the same question. I guess with this tool now is just easier. From their docs :

> “ We are excited to announce a new Kubernetes integration that enables applications with no native HashiCorp Vault logic built-in to leverage static and dynamic secrets sourced from Vault.

Applications need only concern themselves with finding a secret at a filesystem path, rather than managing tokens, connecting to an external API, or other mechanisms for direct interaction with Vault.”
So glad this came out. I used to work at a company that was using it well after it was obvious the company wasn’t maintaining it and we generally had a great time with it. I always lamented seeing Mongo win over it because this had saner defaults, a query API that had joins, and live change feeds before Mongo and I think PostgreSQL too.
Definitely a thing growing up in central Victoria in the 80s/90s.
How do people here feel about feedback for technical tests that take at least a couple of hours?

Personally I don't care if I'm not given feedback after a phone interview, or even an on-site interview.

But when it comes to technical tests, I would really appreciate feedback, since it could actually help me improve my coding skills, or at least know where I need to improve. If I'm not given feedback on these, it's just another red flag to me, the company doesn't value my time, and seems to treat the interview process as a one way street.

I recently was asked to do a coding test, the HR person told me to do it over the weekend, as most candidates needed all the time they can get. I told HR I was only willing to spend around 4 hours on it, they could judge me on whatever I could do in that time. And even working for free for 4 hours was as stretch, after all, I'm not getting paid, there are other things I could've been doing. And to this day they haven't even acknowledged my test, I did get through to the next round, but no mention of my test whatsoever.
Because the number of potential developers on this platform is at least an order of magnitude bigger than all Windows Mobile developers on this planet. Probably more. Developers also that happen to be the first users as well, an aspect very different from the one Windows Mobile had to struggle into.
If ths thing turns out as interesting as it promises there would be hundreds thousands of people willing to work on various tasks to bring it on par with other platforms. That day we'd have to find a benevolent dictator, sort of a mobile version of Linus Torvalds, which would direct them various teams right to the spot, since it's very likely that groups being working on say accounting software (just to name the most boring thing to me if I was in their shoes) would proceed at 1/4 speed compared to those working on say video acceleration or networking tools.

It will start as a community toy, then one day, possibly after the 2nd or 3rd model, normal phones users will start to notice that little thing that doesn't get advertising, doesn't ask for DNA when installing apps, doesn't spy what the user says, writes, buys or where he/she goes and when, consumes a fraction of their metered data plan since great part of it (ads/junk/telemetry) has been blocked or never requested/created by design, offers equivalent non spying apps etc, all at the cost of avoiding the usual social media apps (I assume FB/TW will never allow a port of their clients there, especially if sandboxed). For some people losing FB/TW or GMaps could be too much, but others wouldn't care. It will slowly but steadily gain a good mostly technical userbase. If I had a date to be concerned about, it will be the day its growing userbase size could raise a flag in some offices, so that the following day the folks that made it possible will get a huge offer to sell the entire operation. That eventuality would deem the project to become a copy of any other platform out there. There's hardware production involved; forking the blueprints wouldn't be enough.
Even if that happens, Boeing does a lot more for the federal government than just rockets.
Web pages are constrained by the functionality made available to them by the browser - which is (purposely) very limited. Electron apps run on a native JavaScript interpreter (NodeJS) and have full access to the OS.

As far as UI inconsitencies go, most libraries I have used for native apps (Qt, Swing, Tk, etc) also do not feature UI elements that are consistent with the OS. Many developers simply can't afford to support multiple UIs just because they subjectively look a bit better.
A California Megachurch Is Trying to Bring a 2-Year-Old Girl Back to Life
You're free to return HTTP 401 Unauthenticated if you want to. I've never tried, but I tend to suspect it will either be processed purely on the code 401, or displayed to the user somehow.
I think this article is excellent, but one small nit: isn't it contradictory to say don't minimize HTML but do minimize SVG?

The justification in the HTML case is that "view source is good" and "it's compressed over the wire anyway". Don't those arguments apply equally (or nearly equally) well to SVG?
I've been rejected from engineering roles for those reasons as well. From my experience, it's just people looking at your resume, rather than actually trying to understand the candidate.

In my case it was because I studied design in college (it was actually design + development), and my first roles were mostly front-end. Even though I passed their backend test, they still just treated me based on my resume, and assume I could only do front-end engineering.
More leverage should equal more risk. You shouldn't be saved just because you took too much risk. That's how it's supposed to work!
Defer can be emulated with the block extensions of Clang and GCC [0], though I'm not sure how much I'd like to see something like that in a codebase.

[0] https://web.archive.org/web/20180426195701/http://fdiv.net/2...
I wonder if you might find evidence in near-earth orbits.

Would a geosynchronous satellite stay in place after 400 m.y.a? Or a descent stage of a moon lander, perforated by impacts, from a Troodon?
Cool! Thanks for this - and the link to orangeduck’s work (which further points to Cello.)
Use GCP to predict next product to be killed by Google?
Facebook - No dollar amounts listed but "If we pay a bounty it will be a minimum $500"

Amazon and Netflix, no dollar amounts listed

Microsoft offers up to $250k for "Critical remote code execution, information disclosure and denial of services vulnerabilities in Hyper-V"

Ironically that google page dumped a bunch of html into my browser, including a "script nonce" and a function definition:

(function(H){H.className=H.className.replace(/\bgoogle\b/,'google-js')})(document.documentElement)

I'll be waiting for a cheque from them, I suppose.
Visual Studio Code’s Closed Issues
Show HN: Unifrost – Stream PubSub Messages to the Browser
Fischer Random Chess
The Staggering Net Worths of the Highest Paid Internet Marketer in the Business
Nuxt, which is SSR using Vue. Also has the ability to be statically generated in case your frontend isn’t particularly dynamic.

Elixir for an API if you need something extremely fault tolerant. Use Go if you need speed but don’t want to learn Rust or C.

Unless you’re doing something way out there stick with PostgreSQL for the database. Maybe an Apollo/GraphQL query setup in front of it.
I'm not sure if this will be great or I'm being punked.
MACH, a Distributed Learning Breakthrough for Extreme Classification Problems
Uh no they don't. At least not in all cases. They refused to give me feedback after requesting it. I even asked an inside friend to follow up with the recruiter.
Indeed, but that wouldn't explain the pilots reports actually looking at the object moving at those speeds.
Peeps keep insisting on the device's malfunction or whatever, but keep forgetting that the pilots actually looked at the object.
Post Mortem of Ludum Dare 38 and Bullet Surfing
One more of the ever growing number of websites that require Javascript to browse.

I'm reading, what's the justification for Javascript to be running?
Prior to now this program was invite only. They are blowing it open to all security researchers as of today.

https://apple.news/A4h_BM9HqTjSpsWKsrVPGBw

Also, max payout has been bumped to $1.5m which is a pretty big change. Most of this was announced a few months ago, they are just making good on a previous announcement at this point.
Professional confessionals: why are memoirs about work topping the charts?
The point on not minimizing HTML doesn't make any sense to me. Who looks at HTML via View Source to understand a site, when the Elements panel is right there?
Science in a Golden Age (2015)
Bloom filters don't require linear space. You can essentially create a set of arbitrarily large objects, as long as you have a hash for them. It requires O(C) memory where C is the size of your largest hash function. As a trade-off, it's not deterministic, since there can be hash collisions due to pigenhole principle. So, even though bloom filter claims the object is in the set, there is a certain probability (that you can calculate) that it's not actually there. On the other hand, a tree-set or hash-set will be deterministically correct, but they require O(N) space and tree-set requires O(logN) lookup cost.
Once he starts dragging his foot I assume he’d fall into the deceptive category
The bug bounty is no longer invite-only, and the maximum payouts have been increased.
TFA is written from a reader's perspective: the author had found a bunch of links important enough to bookmark, and then most of them disappeared.
AMD Ryzen Threadripper 3970X vs. Intel Core I9-10980XE
That's awesome, thanks for the link. I made an AUR package: https://aur.archlinux.org/packages/github-actions/
Programs such as Inkscape put a lot of extra information into SVG files that is not actually needed for them to render. File size reductions with SVG minifiers can be significant. For instance, the applications-internet.svg icon goes from 31K to 9K when compressing it with svgo.
I've never looked into svg specifically but I would assume that even if it's xml, it's generally far from reasonably human readable/editable, in which case you're not losing the properties by minimizing. Unreadable -> more unreadable is much less significant than readable -> unreadable
Finding the Other: The Radical Vision of Toni Morrison
The justification is that millennials broke the web.
My worst interview was where the interviewer started yelling at me.

After the interview the recruiter sent me an email and told me that he wouldn't work with me anymore as I was hostile during the interview.

It was insanely bizarre. It was like being found guilty without ever even being given a trial or being told there was a trial.
I think the argument is that HTML can and should be human readable and editable, while you really need a tool to meaningfully create and edit SVGs anyway, so minifying isn’t a loss.
All the means reinforce impersonal interaction
Hi there! Could I also ask for some documentation on the proper way to get a Windows CI system that has popular software (like Clang, MSYS2, etc.)? I know you can install these via NuGet, but it has a habit of failing a ton randomly (503 server error or other random stuff) and having to install each tool on every build slows things down a ton. I assume there must exist images that already have these? (This has been a mystery for me to figure out. I don't know if it's relevant, but I'm not a Docker user.)
They do have MFA, but only via SMS.
It is skipping the buffer cache that is true, but, if I understand things correctly, it allows kernel to use user provided buffers directly, thus skipping the copying of the data from kernel to user land. That is why buffers used in O_DIRECT context have to be aligned properly.

It would be fun to run the experiment non the less.

From open(2) man pages on O_DIRECT:
Try to minimize cache effects of the I/O to and from this
file. In general this will degrade performance, but it is
useful in special situations, such as when applications do
their own caching. File I/O is done directly to/from user-
space buffers
Salvaged copper is worth a lot and has a lot of uses for which it can be repurposed. Salvaged fiber...less so.
Cool project! Thank you.
Good! It’s been a long while since I’ve managed anything clients using Vitelity trunks, but recall having a generally positive experience, glad to hear they still run a good ship to have at least this mechanism.
This is inherently good in itself. But, I ask myself if the oft- requested 'can we be people without phone # in signal' is now actually a deliverable, or if they only stated it in hypothesis, and still don't have that as a roadmap outcome?

I want to have two (or more) non-phone enabled devices able to be in signal. My tablet, and my computer. I realize there are adjunct methods, but depending on a physically present device to have one thing hooked up isn't actually what we want here, the phone is not a useful second factor, its a hack I believe they worked out to get beyond the 'must be a phone' state without having to re-engineer the back end.

So: do we now get phone-less signal identity? This feels like a precursor. Does that definitionally say phone-less identity will follow?

(again only from belief, I believe the secure enclave on the phone is bound into identity along with the IDD, so having a secure enclave backed in the cloud breaks one of the two dependencies out a bit)
Real $ amounts! This is how you beat the black market.
Taiwan and The Netherlands are not even close to being the most densely populated countries in the world. Taiwan is 652/km² and Netherlands is 418/km². Compare that to Macau 20,286/km² or Singapore at 7,804/km².

But I agree that The Netherlands has a pretty big development community, and generally their English is fairly close to being native.
Thanks for the context. As a user of Apple devices, I'm excited about the increased attention to security!
Homoiconicity means same representation. Literally, the word homo means same, and icon, same icons. The source code and the data-sructures are represented the same using the same iconography, aka, syntax.

What's the point of that? Well, let's see... Why is working with Json in JavaScript so much better than in most other language?

When the syntax for data-structures and code and data serialization, and configuration, etc. is the exact same, it is really harmonious to work with. That's one of the great things about homoiconicity.

The article is saying that macros are the point, and macros are great for sure, and it is one of the points, but homoiconicity is also a great point. It is useful even in non-macro scenarios, and it is even more useful when combined with macros, since it makes writing and reading them that much easier.