skysight-inc/HackerNews huggingface dataset:
I think in a stock market context the word is understood differently, as I said.
This.

I'm all for treating language as the living thing it is. However, "literally" is a very useful word and there's noting else quite like it.

If "literally" can mean both literally and the exact opposite of literally, it becomes devoid of meaning.
Look at the salary change between Principal and Distinguished Engineer, it's virtually non-existent. Most projects, even at the FANG level, do not require 30 years of incredibly specific technical experience. There just isn't an incentive to pay these folks a lot more, and this has a secondary effect of pushing them into things that can (management), or retiring. Realistically, if you've made $500k+ total comp for the better part of a decade, you can retire.

I used to work for a healthcare company and we often, if not routinely, had radiologists (avg. comp $600-700k plus bonuses, starting after residency so around age 30 or so) retire between 40-45. Our manager jokes that they worked 8 years to pay off med school and 8 years to fund their retirement, then they were done.
Is punkahwallahs an actual term? Asking as an ABCD.
If you have access to cooking facilities and a fridge you can absolutely do that. I used to have to watch my budget carefully and I ate a lot of frozen vegetables fried in butter among other cheap and nutritious things like porridge. If a bus ticket will meaningfully move your budget beans and rice are cheap as hell and nutritionally complete, as are potatoes and milk. If you’re not determined that’s a choice.
They may be using Linux as OS.
What I meant was not that the wording of the ban will be limited to certain use-cases, but that the outcome would be... regardless of wording. Even if they do generally "ban using software to recognize faces," the difference will be symbolic.

If cameras are being used, facial recognition is probably happening... if not in real time than later.

Yo
It’s surprising to me that the “master key” system on 1Password proved difficult for your users. For me, this is one of the simplest things about it: you remember one password that unlocks everything else.

Am I talking about the same thing as you when I call this password the “master key”? I feel like I must be as this is flat-out the thing that makes 1Password easy to use.
Ask HN: How could a bricked IMEI enter Apple's refurbishment system?
I recently bought a refurbished iPhone 8 directly from Apple. Apparently (after working through their tech support), the phone has been bricked by the previous carrier, and cannot be activated.

I'm curious about theories as to how this could happen. First, how could such a phone enter Apple's system? Presumably it was stolen, or never paid off, etc. Second, surely Apple is checking the IMEI numbers as part of their refurbishing process?

(The tech support call was a bit frustrating, since it was hard to convince Apple that there really was something wrong with the phone. Spectrum Mobile had gotten an error they were not familiar with when they tried to activate it.)
With the dmenu wrapper (passmenu) or something similar for rofi there is almost no need for a browser extension.
Only if you can prove it. And I have to wonder if clauses that force binding arbitration are considered illegal. Plenty of big companies use(d) them even on their own employees.
The Fourth Ambit – Science Fiction Audio Drama
There is another thread on the front page right now dedicated to comparing (salaries). The Democratic Party platform is based on comparison.
Maybe they should both come with a warning about possible loss of joy.

Once the joy is gone, stopping comparisons doesn’t really bring it back unfortunately. And comparisons only hurt in a few individualized things. Everywhere else they show the path of incremental progress and long term strategy.
Yup... also very happy with pass, with the addition of ansible's passwordstore plugin, qtpass, dpass and various other pass-addons. All my passwords are gpg-encrypted and versioned in git.
67 in Oxfordshire.
LastPass' UI is so clunky, confusing and under performant that storing passwords securely is the least path of resistance for end users. I dread using it daily at the office.
Essentially, low barrier to entry. Something that free education (not necessarily limited to degree-granting colleges, and perhaps living grants for self-study) and a robust safety net could achieve today.
I'm not a compiler engineer, but I'm willing to venture that the lower bounds of a "competitive salary" for an engineer in silicon valley is somewhere between 200 & 250k. Compiler engineers may make much more, I don't know, but it's unlikely they make less than that. Perhaps that answers your question?
REDGPU SDK v1.0.4 update
If hollywood can be special because their jobs and compensations are different, why couldn't the tech industry be different?
Random Points in a Sphere
> strange to include in this list (like "memory corruption" - in case of faulty memory, everything is in danger, not only database)

But theoretically one could build something that handles up to X random bit flips, so it's maybe worth mentioning that sqlite doesn't handle this (even though probably no one else does as well)
How many people do you think can afford to fail 10 times?
I was thinking at historical communities like tribes not at internet communities.
Not only is it still in demand, I think demand for compiler engineers is growing (and fast) due to the end of Moore’s law, since that means performance improvements are mainly (and soon only) happening due to improving software and making specialized hardware, and both of those involve heavy use of compilers and compiler writers.

JIT compiled scripting languages and DSLs (domain specific languages) are all over the place, GPUs and the APIs that run on GPSs all need special compilers, embedded processors and custom chips often need custom compilers and/or custom optimizations.

There’s certainly a ton of optimization work out there, so if you like designing optimizations on top of existing compilers, you can pretty much pick what kinds of API/software/hardware you want to work on.
This example is so wrong it's borderline lying. The median attorney salary in the US is $115k. Some make $500k but most don't, just like some software developers make $500k but most don't.
https://ourworldindata.org/human-development-index

Positive correlation between human development index and GDP per capita; also positive correlation between GDP per capita and education and health.
I was a paid user of LastPass for about a decade. I don't mind a subscription-based model, especially if there's cloud-syncing involved (I've evaluated the amount of risk I'm comfortable with, and cloud syncing is fine for my use case). Part of the benefit for a paid account is the ability to access your passwords when there's a network outage.

However, in the year before I left LP, they went down three times, at most for about 4 hours. Each time, I could not access my local vault, not through the browser extension, not through the Android app, and certainly not through the website; no matter what I did, it was nothing but errors, and their support was useless. It just would not work. That was enough to spook me and get me off their service.

I was complacent, thinking that no matter what, I could always see my vault, regardless of network status, until it actually hit the fan. I'm currently with 1Password, which is quite slick (their change on 2FA is what actually got me to give them a try), but I've killed network access to my devices and was able to access my vaults.

Just in case, though, I have KeePassXC as well. You never know.
I've found WAL mode with one writer thread and as many reader threads as you want works pretty well.
This. Yes, Netgear has a bad track record with security, but this is likely a calculated trade-off.

Alternatives:

- Self signed certificates. Users will learn to acknowledge the error and an attacker can just present their own self-signed cert. This what most vendors do.

- Plain HTTP. Worst option, no security, not even against a passive listener (but no bad PR because of "security disclosures"... hooray!).

- Something similar to Keyless SSL, as suggested on GitHub and in this thread. Will at best slightly inconvenience the attacker, who can still extract any device key and impersonate the device. It also introduces a single point of failure. Server is down, nobody can log into their devices (and HN would not be happy).

- Secure enclaves and hardware key management for the shared key. This would be workable and reasonably secure, but the implementation costs likely won't fit the threat model.

- Issue an individual SSL cert for each domain and print the domain on the box. That would work, but be very complex to manage (plus certificate costs, and plenty of failure cases around renewal).

- Reverse proxy through vendor servers. Single point of failure, and the most likely time to log into your router is the internet is down.

Hardcoding a valid SSL cert for a single-purpose domain (routerlogin.net) is similar to a self-signed cert in terms of security, provides a better user experience and does not teach them to blindly acknowledge TLS errors. The threat model requires an attacker doing a MitM attack on the local link. Also, compromising a router provides very little access to an attacker in today's TLS-by-default world.

Anyone downvoting the parent post should offer a better solution.
> I would like to see this changed but really I have never even seen a proof requirement when looking at Rust jobs. Not even once.

?

Any B.Sc. in CS can do most of the unsafe proofs in a one liner. All crates I maintain require unsafe blocks to be commented with a proof, for most of them the proofs are trivial, and for all of them that weren't, the unsafe code was correct, and the correct one had a trivial proof.
>Won't some candidates simply be too complex and unstable to reliably produce using existing mammalian or baculovirus platforms?

You can add that to the objecting function that your model training function is optimizing, ensuring model output is not "too complex or unstable to reliably produce".
"I recognize I’m saying something unconventional if not provocative."

On the contrary, you're preaching the conventional wisdom of today. And I also don't think you read the short article; it's simply about making more common-sense laws to at least achieve a modicum of privacy and put a leash on the data broker industry.

The technology can't be stopped, but we're still early enough in the game to limit data identification, correlation and discrimination.

Edit: I'd also like to recommend Schneier's books. For instance, his "Click Here To Kill Everybody" is a great look at how security with IoT is failing, why companies _want_ it to fail, and what sort of actionable legislation would fix these issues. He's not a pie-in-the-sky zealot for privacy.
Squatting is terrorism now?
This is only true in one direction.

You can be wealthy and working class, sure. But the converse is simply impractical.

How many upper class individuals are there living in a rotting house share, on benefits, hitting up the food bank?

There's a minimum amount of capital required to be able to meaningfully participate in social activities at different levels. That might not mean fantastic wealth but neither does it mean working in the corner shop (unless by choice).
There are four bits of information you need with 1Password teams

1. The team address <team>.1password.com

2. Your login name (email usually)

3. Your 'secret key'

4. Your 'master password'

I suspect GP is talking about item #3 being the point of confusion.
I don’t think it’s possible to build a suction cup (or in fact any climbing tool) which will work 100% of the time against any countermeasure. However this design does seem a significant step forward from existing suction cups.
Yes. Despite being quite an introvert, I have tried to reach out with genuine need, praise, requests to various people.

To be transparent, my fake attempts clearly displayed lack of approachability and interest. They just don't make sense any longer to me. I have a strong bias towards quality and risk over quantity and spray gun approaches.

There are three things that stand out from my analysis to make this effective:

- Genuinely appreciate your need to reach out. You cannot fake stuff for long

- Articulate your reasons and your homework as well as you can. This can mean a bit of hardwork but it is worth every bit

- Express gratitude and understanding even if the answer is negative. People have other things to do

On point 3, that is not a dead-end, pick up if you have a stronger case and try again without being painful

Also, get out of your comfort zone. The odds are in your favor IMHO. And yeah, don't get personal ... it does no good.

I'm still actively learning ... so this is quite experiential as we speak
Long before it was fashionable, I made the jump from the Corporate world to start-ups, mostly because I decided I'd rather be writing code than being a manager in a corporate IT organization.

Years and a few start-ups after that, I landed in a company was slated to have what looked to be a solid IPO, and I got a block of "Friends and Family" stock - shares which can give to whoever you want to purchase at the opening IPO share price.

I believed I owed much of my success to a few of my managers from my corporate days, who taught me as much common sense and good management as anything. Even though I had't spoken to some of them in over a decade, I tracked them down and passed on the opportunity to purchase the shares.

They were astonished to hear from me after so long, and even more astonished by the opportunity. Since they were still in the corporate world, or retired, the shares turned out to an unexpected windfall which had a real impact on their lives.

To this day I'm most happy about that result.
"starving fat" is not an oxymoron. You can absolutely get fat from excess calories while literally starving from malnutrition, i.e. lack of essential nutrients.
Thoughts on Building Paid Software
Why one shouldn't use cloud-based services.
I'm sticking to keepass. (I'm syncing the keepass file over a cloud, but I still have a local copy on all my devices against cases like these)
C Extensions for parallel programming – Part 1: Thread-based parallelism [pdf]
> How does one even respond to comments like that!

I think a large part of it is (at least for me) the inability to believe that you cannot eventually make them see the light.

Sometimes that actually happens. Mostly it doesn’t.
We Should Have Bought the DVDs
Food deserts are a problem of lack of demand, not lack of supply. Where there are people who want fresh produce people will sell it to them. See any US neighborhood mainly populated by recent immigrants from countries where people cook.

> The Geography of Poverty and Nutrition: Food Deserts and Food Choices Across the United States

> We study the causes of “nutritional inequality”: why the wealthy tend to eat more healthfully than the poor in the U.S. Using two event study designs exploiting entry of new supermarkets and households’ moves to healthier neighborhoods, we reject that neighborhood environments have economically meaningful effects on healthy eating. Using a structural demand model, we find that exposing low-income households to the same food availability and prices experienced by high-income households would reduce nutritional inequality by only 9%, while the remaining 91% is driven by differences in demand. In turn, these income-related demand differences are partially explained by education, nutrition knowledge, and regional preferences. These findings contrast with discussions of nutritional inequality that emphasize supply-side issues such as food deserts.

https://web.stanford.edu/~diamondr/AllcottDiamondDube_FoodDe...
IDA Pro was also something I remember playing around with at some point during this time period when SoftICE was also well known and used.

Can't say I've done any low level debugging or attempts at reverse engineering since long ago though. Most work these days is abstracted so far above these layers you don't have to go down nearly as deep to muck around. Plus as an adult, many tasks these tools are useful for aren't in business interests (outside of security and driver development). It goes to show how much development has sort of shifted in the past 20 years.
Boeing isn't planning an in-flight abort test. They selected an approval regime that relied on simulation and aerodynamics studies. They've already completed a pad abort test.
> 1. Just let it be HTTP. Stupid browsers are stupid, but at least they don't prevent this page from working yet.

This would be categorically worse than hardcoding the SSL key.
Even small towns have a decent number of high earning people, mainly small business owners.
> If you do a task with a 20 percent chance of success but you do it 10 times, your chance of succeeding at least once becomes close to 100 percent.

No it doesn't because those aren't independent events.
you can store water in water table instead
I didn't know St. Pauli had fans outside of Germany until I saw a large group of Brits on the train that were partying hard. You could hear them over great distances. I am not a real soccer fan, but due to proximity and clientele it is the club I would mostly align with and it notoriously shelters fans that don't take soccer too seriously.

Soccer is known to have violent fans and this club is no exception, but I think there are far, far worse examples. St. Pauli notoriously has fans that are politically on the left, which is unusual for most soccer clubs. At least you get that impression if you read about violence around the sport.

To be honest, this list seems like the usual ridiculous hysteria of counter-terrorism efforts that certainly caused more damage than a soccer club ever could. Maybe the protesters are onto something.
> series of questions, carefully chosen to expose any lie

I don't understand, how this is possible. Is it assumed that every lie is necessarily a Bernoulli trial with a known probability? Because if not, what prevents a single oracle from telling consistently false story, taking into account all lies he told you before?
> Very well put together article. I don't see why this is in "opinion," considering how factual all the points are.

The opinion section of a newspaper is where one (someone not working for the newspaper) can submit opinion pieces for publication. Opinion pieces like this one espouse a particular idea or standpoint; in this case the plea for banning not just facial recognition, but to broaden the scope of privacy laws addressing the problem of overreaching surveillance.

Opinion pieces in respected newspapers form an influential part of the public debate, and tend to be read by policy makers and politicians as well.
Well, the audio quality is already reduced on upload - and much more than mp3 transcoding would.
Tron (TRX) Review – Decentralize the Web
> an engineer in silicon valley

Good point. The biggest factor that determines an engineer's salary is location, followed by years of experience. Not whether they work on compilers/embedded/web/whatever.
> there's no evidence that the British wanted to "wipe out" the native population.

No one accused all "the British". If you read my sentence, I used the word, some Brits such as Churchill. There's ample evidence of Churchill's desire to genocide, and even actions taken to genocide non-white people and subsequent whitewashing of the matters. I am sorry if some readers are upset to discover this about their hero, as I do realize a lot of Anglo-Saxon people worship Churchill, but these are unfortunately the facts of the matter.

"I cannot understand this squeamishness about the use of gas," he wrote in a memo during his role as minister for war and air in 1919.

"I am strongly in favour of using poisoned gas against uncivilised tribes," he continued.

"In 1937, he told the Palestine Royal Commission: "I do not admit for instance, that a great wrong has been done to the Red Indians of America or the black people of Australia. I do not admit that a wrong has been done to these people by the fact that a stronger race, a higher-grade race, a more worldly wise race to put it that way, has come in and taken their place.""

You can also google Hanslope Park papers to see that a lot of other evidence of intentional planning for genocides and other serious crimes against humanity level of wrong doings were erased or blocked from being released. https://www.theguardian.com/politics/2013/oct/18/foreign-off...
I find that it depends a lot on what you buy. I have not noticed any fakes on regular household items. However, I buy a lot of cables and adapters because of what I do and for those items it's a problem.
For a multi-million dollar potential unicorn? Almost nobody even gets one chance. But for a small business started on the side and slowly grown? Anyone middle-class can in the US IMO. You don't need investors or massive loans to start a small business in your free time, just customers that can be earned through word-of-mouth when starting out. Capital grows exponentially, so even small profits can compound into something significant if reinvested.
I'm sorry but that is just ridiculous and time prohibitive.
LOL. I've actually often referred to shitty piece placement in my well as "technical debt" when playing Tetris.
If you’re born a baronet, go to Eton, take a commission in the Guards, but end your days alone and penniless in a care home then I think you’re still upper class until the day you die.

Likewise I could win the lottery tomorrow but I’d never have the background and connections to become upper class.
The attacker would just dump the individual router's key instead and use the remote signer as a signing oracle to impersonate devices.
Ask HN: Stress Test Application for CPU/RAM/Disk
Hi there,

I want to check and then harden my Kubernetes cluster's stress tolerance by deploying some kind of stress generating application that would:

1) Try to hog as much CPU as possible

2) Try to allocate as much memory as possible

3) Try to saturate disk IO with a lot of operations

The question:

Do you know, can you advice any application that does some harmful chaotic activities, tries to misuse resources, e.g. hogs CPU and leaks memory like there's no tomorrow? Does not need to be Kubernetes specific, just need something that works on Linux ;)

I need this to test if resource limits we apply on our Kubernetes cluster work the way we expect them to work, before deploying production applications there.

Thanks!
I remember seeing someone tackle that question on /r/spacex; the consensus was that, while a first stage booster can return on its own, if it has a full second stage attached the extra mass is too much for the legs (it normally lands nearly empty) and the extra length causes aerodynamics issues (the gridfins should be at the top of the rocket but in that scenario there's quite a bit of rocket above them).
As a fellow lover of value and substance, I appreciate comments that point out that the original article has no value or substance. It saves time. Sarcasm is merely a way to add levity to this odious but necessary task.
Does the water on the innermost edge of the rotating ring, which is exposed to the vacuum, NOT vaporize because the absolute pressure is still above 10kPa (100kPa atmospheric - 80kPa vacuum)? [0]

Will the seal slowly evaporate away or absorb into a porous surface like concrete?

[0] https://en.m.wikipedia.org/wiki/File:Phase_diagram_of_water....
I found the submitted title impossible to parse before starting to understand the content of the body.

I think it's not helped by Click-Bait Case, which HN seemed to recently start applying to submissions unless you go back and edit them to your original submission, at which point it accepts it.

The following seems much easier to parse, (still not a great title, but that's not HN/submitter's problem) to me anyway:

> German club St Pauli badge on UK anti-terrorism guide under 'Left wing signs'
It is. See also Chaiwallah, Dhobiwallah etc