skysight-inc/HackerNews huggingface dataset:
in your 40s your big picture management skill would be more valuable than technical skill.

you need to disclose what was your role in these startups.

if you want to go back to coding at FANG there would be less ageism but it will still be there. Be sure to brush up your algo, data structure. I would suggest finishing a book of programming interview and you should be set.
Really? Maybe I'm thinking of a different tool then, because that didn't work for me (on an AMD CPU)
Great bike indeed.
I’ve always preferred Firefox’s dev tools compared to Chrome’s.

Really like the ability to outline flexbox and grid elements.
For those not in the know: MLM = Multi-level marketing, also known as a "pyramid scheme".

https://en.wikipedia.org/wiki/Multi-level_marketing
Personally, these days when I see the term at all, it's usually a right wing complaint that nobody really cares about wealth disparity, the environment, equality among races creeds and gender, etc., but that any time anybody expresses support for any of these things it is "virtue signalling" and not an actual concern.
The entire point of that townhall article is to push the blame away from climate change as if the absurd temperatures had nothing to do with this situation.
To nitpick, you'd have to compare with the similar model from when the MacBook Air came out.

The T410 (a brick with a terrible screen and battery jutting out the rear) or the X201 (a nicer brick and a tiny trackpad

I definitely agree with you that the current T470/80/90 is a pretty nice machine, it's wolrds ahead of what the ThinkPad was when the Air was 'new'
Yes, but there is a lot of financial interest at stake that could make it even more interesting in practice... not good, but interesting.
Long Now was founded by Stewart Brand, the environmentalist behind the Whole Earth Catalog: https://en.wikipedia.org/wiki/Whole_Earth_Catalog

While they do have some active projects, like the 10K-Year Clock, it's mostly just a series of monthly-ish talks with a variety of ecologists, engineers, etc., themed around long-term thinking. It's all quite grounded.
I thought it was more of a screed....

Living on the square mile is the hyperbole non-option. Most people can't live on their own square mile with effectively no neighbors, so they have to find some way to get along with the neighbors they will always have. They either can't afford it in money, or they can't afford it in travel time.

Should I have said "go live on the Moon", or "go live on a libertarian seastead", instead? It's supposed to be an unreasonable alternative to being reasonable to all your diverse neighbors.
I do use full disk encryption, but when I'm logged in, any program that runs as me can access my files (subject to some partial restrictions that Apple introduced a while ago). And anyone gaining access to my unlocked computer can easily copy that password file.

You could say once malware is executed with my credentials it's game over anyway. But I disagree with that. Having a file full of passwords stolen is far worse than than anything else, including key loggers, because it's maximum damage in a minimum amount of time.

I want to make that as difficult as possible for any attacker.
Try https://www.startpage.com/ . It's uses Google. DDG (mainly) uses Bing (and it sucks).
More flexible indeed.
“so here is an alt[-right]”
Sonos sues Google for allegedly stealing smart speaker tech
> Do they really care to see* if they are at www.site.com or m.site.com or site.com or do they just want to know they are at site.com
www.example.com == example.com is an assumption that has never been true and I have seen it screw over regular users countless times. Quietly rewriting the URL and hiding that fact will just make that worse.
As for m.example.com, that is even further from standardized. Me and and at least one person I know have personal websites with short aliases like mike.lastname.tld == m.lastname.tld, not to mention the plethora of sites that don't have matching paths on mobile vs desktop. Even if copying the URL quietly switches it out for the real one (which is bad on its own), that break the surprisingly common workflow of writing down the URL you see on a piece of paper.
Bluespec to Open Source Its Hardware Description Language
I disagree with a lot of that. Defined benefit plans make all the sense in the world sort of empirically or like maybe narratively(?), but the problem is that risk isn't handled equitably. 'Unfair' feels like it has more connotations than my liking, but the main source of that feeling imo is that pensions have frequently made implied rates of return that had little to no chance of realization.

It's easy to thumb your nose and say "well that's the company's problem", but what it does illustrate in a more general sense is that counterparty risk is very real, especially in underfunded pensions. While pension plans have a large amount of money saved, the reality of the situation is that part of a pensions mechanics look like a claim on a company's future earnings. That's what grinds my gears about pensions, there's a lot more risk than people think, and it's foolhardy to assume the employer assumes all the risk in theory or practice.

The best thing about the transition to 401ks imo was that it made it abundantly clear that there is a large amount of risk in funding retirement. The downside is yes, companies made it clear they were no longer willing to assume any of that risk themselves.
Yes, you can choose to simply not give either to charities or directly to homeless people, but be honest about it and don’t talk about charities being a more efficient way to give.
You're not alone.

My experience in Habitat for Humanity and with various churches offering programs to get the homeless off the street and into homes and jobs, is that people who want help go to places that offer help. People who want easy cash for selfish/self-harming reasons beg on the corners/parking lots presenting either lies or scams.
While somewhat a bad form for general web browsing, its definitely possible for www.site.com and site.com to be entirely different hosts. In newer versions of Chrome, you would never know which one you were actually on unless you select in the address bar.

Maybe dropping the protocol definition in the URL is debatable, as probably 99.99% of the time in Chrome a user is going to be either http or https, but dropping a part of the hostname is unacceptable in my book.

Would dropping .com be acceptable? All a user wants to see is that they went to Google, to an average user the .com could be seen as redundant clutter as well. Might as well have the address bar show "google" or "cnn" or "facebook" in it, as clearly that's what a user cares about.
VMS also "popularized" The microfortnight as a unit of time. In SYSGEN if you set the TIMEPROMPTWAIT value, it was in microfortnights. That would be how long the system would wait at console during a boot if it didn't have a valid time in its system clocks. Presumably your attentive operator would enter one during this interval.
Secure communication between data centers and the cloud
How could they enforce that? By barring EU residents from dealing with Travelex?
I wonder if this will finally bring HD video encoding to arduino platforms?! I'll have to check what kind of VPU IPU the STM32H7 has, at least I don't see how they can break out the IO for a camera interface, but this would be amazing.

Looks like the STM32H7 supports one MIPI CSI-2 peripheral (and/or one MIPI DSI).

Another comment on this thread mentioned on the back of this module are two long flat board-to-board style connectors.
Clear Street | fulltime/onsite only (NYC) | salary + bonus + eq + relocation | Open to visa candidates

-----------

We’re Clear Street (https://clearstreet.io), a well funded NYC startup, founded to solve problems lying under the surface in capital markets. We are making a massive, multi-year, multi-million dollar commitment to developing a cloud-based platform, built from scratch, to solve these problems.

Businesses will be able to connect using a single API.

That’s the beginning.

-------

Engineering at Clear Street:

We care deeply about our engineering environment. Our engineering teams work in lockstep with each other and with subject matter experts across the organization. Our progress benefits from our dedication to our craft, our tooling, and our commitment to our engineers' experience.

-------

We're hiring engineers API(backend), Data, Devops, Fullstack (product) engineers -

details here ---> https://clearstreet.io/careers, https://angel.co/company/clear-street
The Encryption Witch Hunt
Some people are wired to cry when emotions of any sort are overwhelming. I was like this as a kid. I'd cry when my brothers and dad lost their shit at a Leafs goal.

It's possible you're misunderstanding why they cry. Particularly as you say they're too old for it.

Striking them to stop is a great way to really fuck them up.

If you're feeling stuck and not sure how to proceed this is absolutely an appropriate thing to talk with their physician about.
I assume there was a lot of work (read money) put in those collision attacks rather than it being discovered by accident. I'm wondering who is sponsoring this work and for what purpose?
The argument about proving that an algorithm is broken and working on better cryptography wouldn't suffice in this case, as issues were shown before that. Here the purpose was to make the attack cheaper?
Why wouldn't you move to the existing STM32 ecosystem instead of sticking with Arduino for pro/industrial applications?
> That's fine if you trust the PRNG. Linux used to at least attempt to provide a source of true randomness. You and Hendrikto are essentially asserting that everyone ought to accept the PRNG output in lieu of true randomness. Given various compromises in RNG primitives over the years, I'm not so sure it's a good idea to completely close off the true entropy estimation to userspace. I prefer punting that choice to applications, which can use urandom or random today at their choice.

Linux never provided a source of true randomness through /dev/random. The output of both /dev/random and /dev/urandom is from the same PRNG. The difference is that /dev/random would provide an estimate of the entropy that was input to the PRNG, and if the estimate was larger than the number of bits output, it would block.
Truncated hash functions are not vulnerable to length-extension attacks.

Length-extension attacks are relevant when you design a MAC by passing a secret and then a message to a hash function, where only the message is known.

Truncating the hash (which is what SHA-512/256 and SHA-384 do to SHA-512) removes the ability to grab an existing hash H(k || m) (where k is unknown and m might be known) and append junk because a truncated hash does not contain sufficient information to recover the full state of the hash function in order to append new blocks.
Ah! Makes sense now, thanks.
Interesting guy. It just shows that we shouldn’t correlate high intelligence and talent with virtue.
I think there's another thing going on.

Let's say that I'm getting by, but only just. There's things I'd like to do - take a vacation, or replace the carpet, or trade up to a better car - but I don't bother thinking much about them, because there's no point. Those things I can't do bother me a bit, but I don't dwell on them very much.

Now my circumstances improve. Now I can take that vacation, or replace the carpet, or trade up to a better car. But note that I said "or", not "and". I can do one of the things I want, but only one. Now each of those things is realistically possible, and I can seriously consider doing it. But in the end, I can only do one of them.

In this way, it's possible to have more money, and therefore more options, and still feel worse about the things you can't do because you don't have enough money.
One of the issues is that Walmart opened a new dairy plant here in Indiana which considerably increased milk processing capabilities for the region, as a result companies like Dean Foods had to turn around and cancel contracts with farmers in Indiana, Ohio, Pennsylvania, New York, Kentucky, Tennessee, North Carolina and South Carolina.

That allowed Walmart to gobble up the best of those farms (30 something farms between Indiana and Michigan), for cheaper. Given that they're processing, bottling, and distributing it to their own stores let's them sell it cheaper too, which then makes companies like Dean Foods lost contracts and now suddenly have pretty stiff competition.

Walmart didn't replace all of those contracts Dean cancelled (and I imagine other processors/distributors too) which really hurts the small guys that have 50, 100, 200 cows.

Keep in mind a cow is only good for 6-7 gallons a day, so these smaller farms just aren't worth it for a massive company like Walmart. Within 2 hours or so of the plant they're servicing close to a thousand stores (if not more once you include the grocery-only ones) so those smaller farms basically end up screwed with no one to sell that milk to.

It's not like you can just go "ok we'll let's butcher some of those cows and make some money while we figure something else out" either because, dairy cows are generally older and only good for ground beef and really cheap cuts. Even with a beef cow you're only going to get $700 or so.

At 25lbs~ of dry weight food a day per cow, you might get a little over a year of hay for one dairy cow sold for ground beef - basically those contracts getting cancelled just kill the small dairy farmers.
I receive these popups multiple times per day. It is rare that I actually want notifications from your web site (or mobile app). Messaging is one of the few use cases that comes to mind but even then I don't always want to be notified.

Do you mind me asking what your notifications are for?
I mean, books have been written about PE, LBOs, raiders, and financial vampires for more than 30 years. Movies have been made. It’s literally one of the most enduring financial stories of the last 35 years.

The only thing that has changed is that PE has managed to take some cues from VCs and mount a PR campaign aimed at techies and other new-money types to make it seem like the industry isn’t as vulturistic as it has always been. And techies and new-money investors believe them. Because it’s easy to believe the wolf until he kills you or leaves you for dead.
Agree. And anything that needs it goes into a container.
True, but gcc isn’t the only C compiler, and these days clang, which is an LLVM frontend like rustc, is pretty popular and mostly equivalent to gcc.
What's your internal technical documentation like?
We should be quick to encourage genius outliers, but thats not most people, and those people shouldn’t be forced into death marches to ship games. The two concerns aren’t antithetical. Major industries like sports and entertainment, both of which are a heavy mixture of average and high-performers, are already unionized without any real drag on the exceptionally talented nor their compensation.
There's high supply of "technology people" in the space because a lot of people want to make games, but you have to remember that not everybody who works at a game developer is a programmer. An artist being asked to crunch for $45K a year and who doesn't have too many other options deserves some representation, too.
http://archive.md/PJ8Qr
What's the idea there? Insurance fraud, just causing chaos?
IIRC their business model was "buy pizza from Domino's - repackage it - lose money" which at least explains its failure.
As usual the show is much more sensible than reality.
Cows have udders, not breasts. There is no breast milk besides for human that is frequently drank in the world.
Maybe not in one step. But starting a SaaS side project or starting to freelance (with enough reputation and client pipeline so it is reliable) also won't give extra $2k from one month to another.

Advancing the career as software developer still seems the most reliable and conservative way to get am extra $2k.

Disclaimer: it is not my option though. I am building a side project to earn extra revenue, but because my goal is not only the extra money. I want to work for myself with something I enjoy building. With that comes more control over my life, more freedom, and joy from building something nice.
Early in my career I was interested in game development because I had dabbled in graphics programming personally and it seemed like more fun than other types of development.

A cursory look into opportunities showed that the schedules were grueling and driven by the market, which expects new flashy titles quite often but the demand for the new titles tails off relatively quickly. Worse, it's not like a spreadsheet where you can just fix some bugs, add some new features, then charge people for upgrades. You're constantly rewriting everything.

So I made the decision to not go into that market.

Software development skills are fairly fungible. I'd advise people to not go into game development unless they have a real passion for it and don't mind the demands upon them that are derived from the market forces.
YouTube still has some amazing content for kids.

My solution has been to curate specific videos then embedd them in html pages and turn off the suggestions that would normally run at the video.

Yes, it’s more work, but I see real benefits in this approach.
General questions:

(edit: these are indeed general questions, not just about SHA1)

Has anyone else been worried about data deduplication done by storage and/or backup systems, considering that they usually use hashes to detect data blocks that are "the same" (without additional metadata) and avoid storing those "duplicate data blocks" again? Doesn't this seem far worse when you also consider that systems like Dropbox deduplicate data across all their users (expanding the footprint for collisions)? Are there any research papers/articles/investigations about this?
Is it ethical to genetically engineer animals (e.g. people) to be braindead?
Not to be disrespectful, but your response sounds like those arrogant Stack Overflow responses that are simply not helpful. There is enough in his question for anyone to provide a proper answer.
> If you think of a standard user

You mean the strawman repeatedly trotted out by people defending shitty changes as justifications for why their shitty change is necessary? Ever wonder why so many things suck nowadays?
I'd be hard-pressed to disagree. The entire time reading this blog post, I was confused why a plain function couldn't have been used instead.
That is not how cryptographic research works, at all.
Finland’s fake four-day week became a ‘fact’ in Europe’s media
'We're Going to War, Bro': Fort Bragg's 82nd Airborne Deploys to the Middle East
The "divisible by 400" rule means that 2000 wasn't a special case, in the way that 1900 and 2100 are.
I read it as more of a PBS tote-bag / Patreon kind of thing. MLMs tend to promise fantastic riches, which LongNow certainly does not. (Not a member, but I've been following their talks for roughly 15 years now.)
That's a strong claim given that we don't yet fully understand the laws of physics.
yeah my thoughts about git are similar. look at the two messages they have an an example:

Key is part of a collision! It's a trap!yE'NsbK#ދW]{1gKmCx's/vr|
-pJO_,1$)uB1qXv#U)9ESU;p~0G:Y
ݕbBIjFra눰3&t'lB_!h5M([,˴QMK#|o5pv|i,+yYpݍD7_Rf\'GUZ,ϵdvAYAugV=Lk8_E 2
+nolBtxXoQt&+?Y3LP:'Qt(,ۛuԪWJm:A"M6<|B4kVv̨ޠA=M+m%殺j5N|EMA\Ed-
s&@u@:a?pq^Xf0U?R}

and

Practical SHA-1 chosen-prefix collision!'lka}vbI3,·W]Ǟ+gK}Cxs/v&r|
}-hRJO_
rO̳;bzC ,1&uRP-MXrU3aO;pr0:sY'2
l&r7#(A{oNyCJ_W,8
əbحBYީpFr2a8#&t+n_15q(_,ˤQMW#hzYMgVV=L,kO0E*N
+oc@BpXoᯖd&?+?[{3LвP&'U
t ( WJÏm\:A"6>>|SB(k;Vv̨ޠ^A=Y ;om%j-|cUAAۜEТ&@o@:La3psH^eXf0QJm
ݶd

they have the same sha1sum, but in all practicality its nonsense since both messages are pure trash. you couldn't have malicious C code that would have the same hash as non malicious C code in this example
The compiler performance may be a perfectly valid reason not to use Rust. Don't mistake the frequent Rust articles for the whole world moving to Rust. It's more like a few excited pioneers exploring its use cases and doing foundational work. Besides, if it helps other people build more stable, secure, or better performing software tools for you to use, isn't that good, even if you don't use it directly yourself?
Isn't this backwards? I read "X as code" as "you can execute X (and observe some result)". But you can't execute these diagrams. What you can do is to "execute" code and observe visual diagrams as a result. So I think this should be "code as diagrams". Or simply "some diagram description languages".
Man charged for lighting NSW bushfire to protect cannabis crop
People in the game industry are tech workers.
Suicide Is Not an Act of Cowardice
"...a tangible legacy than a beautiful story of a guy who was too kind to be a dick when he needed to..."

That is the shortest, best description of Machiavelli's ideas that I've ever seen.
It matters because the hard-coded behavior is brittle and often doesn't do exactly what we want (or think).

For example, GPT-2 has been ascribed nearly magical powers: it's a knowledge base, it can play chess, it does calculus, it's a dessert topping AND a floor wax!

When you look closer, however, it doesn't do any of those things particularly well. It can regurgitate something that looks like a true fact--or its negation with equal probability. It doesn't quite know the rules of chess. It needs a solver to check that the solution to an integral is, in fact, a solution.
I'm pretty sure there was no Node.js in 1999/2000.
> it's not like you don't have options

There's a catch-22 there, though - the more times you exercise your option (to move to a different job), the harder it is to exercise it the next time. Too many job changes is considered a negative.
As someone who fasts intermittently, and has come to understand the cognitive effects on the brain of caloric deprivation, it's saddening to think of a child experiencing a similar effect. Unlike a voluntary faster like me, the circumstance is completely out of the child's control and probably happening while they are facing any number of other family challenges.

On top of that, they are in this condition while in school, where they are being evaluated for their cognitive performance.

It really underlines the dire importance of things like free school breakfast, lunch and snack programs.
Green bar for payments?
"I can still keep up coding, but should I do that, or try for management?"

HN can't answer this for you. Which do you prefer?
Thanks for filling me in. My question wasn’t rhetorical, and if Carmack is right that some games literally couldn’t be made without crunch time, that does seem like a good argument that it’s not a failure even if some people find it intolerable.
A lot of people think this way, until they are forced to deal with the real and visceral physical suffering themselves.

Just look at Mother Theresa. She was refusing administration of painkillers to people dying in agonizing pain at her hospitals (hospices?), because she believed that experiencing suffering in this way was a part of being a true christian and virtuous person (yes, that was her actual stated reasoning). All of this was immediately cast aside as soon as she herself got debilitated with painful suffering due to illnesses, however.

I do believe there is value in suffering, but there are different kinds of suffering, and what’s being talked about here (physical) isn’t the kind that has much value.
> Hard to justify going to the trouble of encrypting your backup. 10 years from now, it might be as good as plain text.

That is an absurd statement. Every backup you encrypted 10 years ago with then up-to-date security is still well encrypted.
The SHA1-thing came coming over a timespan of 15 years. It still doesn't threaten past usage, only active attacks are really relevant.
I stopped using Chrome about 2-months ago. It was difficult at first, simply because I was so used to it. But you are 100% right; I couldn't imagine going back to Chrome now that I've made the switch.