skysight-inc/HackerNews huggingface dataset:
> Giant tech companies have data going back decades now on the performance of this method vs. alternatives. The position that they blindly incur this expense for no benefits is hard to believe.

I am not so sure about this. People change, HR fads come and go, leadership always has their own ideas. A company is always ascendant, in plateau, or declining. There's a lot of factors in hiring. It's intrinsically and necessarily subjective.

I think the FAANG's benefit far more from having an appeal to candidates (people really want to work there) than by using some kind of home-grown data-driven algorithm for candidate evaluation.

Ultimately, if these companies can afford to offer compensation in multiples of what others do in other domains and other parts of the world, they really will attract competitive candidates. Does an elaborate selection process help? Sure, but it's only part of the picture and I think it's a relatively small part.
this would be awesome, i would watch this!

i bet they would all go back home and immediately fix their own hiring practices.
> Nothing that requires the labors of other is a "right".

Nothing is a "right". FTFY.

Rights are subjective human ideas and are defined by the systems humans create and perpetuate. Rights/natural rights as a concept are an exercise in semantic and philisophical masturbation.
Discograph: Discogs Visualized as a Social Graph
Yes! Time to drop all those React/Angular/Vue… frontend tech!
Let's go back to good old Javascript, dividing pages weight by 100, no npm, no complex rendering. We're wasting time in those tech, maybe Facebook needs it in some specific cases, but a large majority of the websites just need simple JS.
Off topic, but I really wish to find out any Alexa-like "smart speakers" capable of voice programming.

For example:

1. I would like to command the speaker listen for a keyword like the Fizz Buzz Test[1] if I counted to certain number.

2. Ask the speaker to remind me of something when hearing certain topics during a conversation. Much like the "if" keyword in text based computer programming languages.

3. Program a poem into the speaker over the microphone, tutor my kids to memorize it, correct the wrong parts. Share the snippet to other parents. program simple home made riddles and
tests over voice.

4. The ability to store certain list/map structure as global variables. e.g. asking the speaker, who is the second oldest son in this family? Who got up first this morning?

5. Voice memos and search engine. Stored and indexed securely offline on my home NAS.

[1]: https://wiki.c2.com/?FizzBuzzTest
If OP's goal was to get a job at Github, I'd say this was very well played.
University of London has a BS in CS, however it's a 3-year degree so I am not sure it would be relevant in the US.

https://www.coursera.org/degrees/bachelor-of-science-compute...
OpenHPI has awesome lectures and nano degrees
https://open.hpi.de/?locale=en

Greetings from Berlin
Too often, "tests are required" -- but as you say it's very hard to test anything meaningful, so developers "test something" and call it a day.
You spray then use a piece of toilet paper to finish the business. Probably the same way you’d clean anything.
Bad Guys exist and we can't ignore them, like it or not. A head-in-the-sand approach is not good for security either. Yes, fuck the bad guys but seriously fuck those that refuse to acknowledge and fix real issues.
As far as I can tell the virus isn’t spreading like crazy in Bangkok, Malaysia, or Singapore. Singapore had it way worse in 2003, still the SARS virus withered came June.
A doctor on youtube went over 3 cases and how they were handled, 2 older people and a younger one. https://www.youtube.com/watch?v=Q0A0LyMru3I
"David Plowie" got me
> 1. They can suppress a new-computer login challenge (they call this "2FA", but this is a risk-based login or anti-ATO feature, not 2FA).

2FA means 2 Factor Authentication. This works by forcing one to use two different forms of identification to authenticate, such as login/password and, in this case, identification of the computer used.

So, with all respect sir, what I'm saying is while this isn't the best 2FA, it absolutely IS 2FA by definition.
Ah, David Viner's quote. He wasn't actually quoting from a research paper or anything there though, was he? He produced an (ill-judged) quote for a newspaper. I like the was that Climatism tried to link the IPCC to it - but only comes up with... "Warmer winters and fewer cold spells because of climte change will decrease cold-reloated mortality'.

Are you arguing that there haven't been warmer winters and fewer cold spells in temperate countries?
I used biking sleeves under my shirt.

https://ae01.alicdn.com/kf/HTB1j2LQSFXXXXcCXXXXq6xXFXXXj/WES...
Although I rejected many similar MITM reports myself, in this case I think this is valid threat. It's not some random comments or forum site where there's almost no value for attackers, we're talking on pseudo-banking system, where users have usually at even few credit cards hooked and/or some account balance, and indeed there are many places you can buy leaked/stolen stolen credentials. Ability to bypass automatic 2FA by hackers is little alarming for service where users may lost $1000+. This simply should be fixed and some bounty should be paid for it (of course probably not maximum bounty, but still).

#5 and #6 are indeed exaggerated, especially that even if hacker has stolen credentials, and bypassed automatic 2FA, security question won't be displayed on same page users use to confirm payment (to replace e-mail address), or keylog credit card information.
I don't know about that. I have been in the industry for decades, and it definitely feels worse (more abusive) today than it did 10 or 20 years ago.
> My brother hires for a consulting firm and he was talking about how there really is a shortage of talent out there.

Exceptional talent is rare. There's only a shortage if you're unreasonable. Lots of employers are some combination of apathetic, unreasonable, or plain ol' lazy. It costs them nothing to fish for talent for 6-12 months, accept hundreds of applications, and then complain when a unicorn didn't come along who was willing to take at or below market rate.
I'm not being at all sarcastic. That's what I read from the article. I never said whether or not I agree with it. From my tone you might guess correctly that I don't.
He might have hit the firmament of heaven, which happened to be lower than he expected.
And my favorite: in northern Scandinavia we try to be careful with salt because reindeer find it tasty...
This is the killer moat. It's hard enough to build a competent app for 2 app stores and make any money, that developers have no time/energy to build for a third one.

Microsoft screwed up badly while they still had the chance by changing paradigms rapidly. They (correctly) tried to pay developers to build apps for them, since you don't really need a million apps, you just need the top 30 to work. The problem was that Google owns many of these top 30 and they weren't interested in helping Microsoft obviously. You can't have a winning mobile platform without YouTube, Maps, and for many, Photos/Gmail/Translate.
https://outline.com/eRzCyJ
There is no hope of something like this passing in the US. If it doesn't disenfranchise at least a few hated social groups its flat out un-American and the people won't stand for it. Fuck over felons, recent immigrants, black people, or someone like this and you might have a chance of getting it through. I'll grant you that California is its own weird little world, so yeah maybe its possible there, but for sure this won't fly in the US.
Probably because those benefits already have a value higher than the UBI.
>I haven’t found any other way to copy photos from an iPhone into a laptop (unless you use macOS).

iMazing does this, and is available for MacOS and Windows.

https://imazing.com/guides/how-to-transfer-iphone-ipad-or-ip...
> I wonder why people still wants to work for google after they put through this

Unfortunately, I think the answer is quite simple, and twofold: Google pays a lot, and having Google on your resume will get you any job you want afterwards, if you don't want to keep working there. It's a highly pragmatic decision early in your career (which also corresponds to a place in life where many folks place little value on their own time).
Sounds like your line is secure for another few generations at least!
What a cool extension! I'll give it a whirl!

On impact: I've been running the numbers for a tool I'm working on and the projected savings for the industry look insane! Just by shaving off 10 minutes here or there you can contribute a lot.
Algorand is a platform for launching Digital Currencies
Sorry stupid question: how do you copy the photos from G-Photos to your PC? Through Google Drive?
I have intermittent RSI and I've been using Talon for 1.5 years for programming (web) with intellij and spacemacs. I reckon I'm as productive as using my hands if I use only voice. When my hands don't hurt and i mix talon with my hands I feel i can do more than I could do with my hands alone. Thanks, lunixbochs. Talon is great.
And in this context it's probably not a issue.
Just wish Haiku could distributed the old music that came from Be, included such great tubes as "BeOS - it's my OS" and "Virtual(void)" which lamented rebooting multiple times.
H1 used to have a mechanism where researchers could push to make raised issues public if a ticket was ignored or marked as wontfix.

That was a good way to keep companies honest, an implementation of responsible disclosure.

So H1 could implement that again. It doesn't get them a bounty but it does stop companies pretending reports don't exist, if that's what has happened here.
Open Peeps, a hand-drawn illustration library
Even if HackerOne were a company that is licensed to do PCI DSS scans, they were not contracted by PayPal to do it. A PCI DSS scanning company cannot just do independent audits for PCI compliance unless solicited by the target. The auditing process you are referencing is not related at all to reports by unsolicited scanners.
Aerosolized. The difference is important because the aerosolized virus only survives in the bodily fluids expelled by the sneeze/cough, which gives it a much, much shorter range than if it was actually airborne, which would imply that the virus could survive long enough to spread without the need for a bodily fluid to host it.
Thanks for posting this! So happy to see some real academic interest in these topics!
I think we are agreeing. My point is you can get away with explaining Metropolis-Hastings in a useful way and never mention detailed balance. You will need it to work out a formal proof of convergence, but you don't need it to understand or even code up the algorithm.

I think explanations don't require formal proofs to be useful.
My "lunch interviewer" complained about the bureaucracy and said he was looking for another job after being there for ~18 months.

Actually (with that) he wasn't being an asshole; he was doing you a favor.

In revealing to you, quite candidly, just how disappointing the Google experience evidently is for a considerable portion of engineers.
If you have a Squid RCE, what prevents you from getting a CVE for it, writing a blog post, and announcing on Twitter?
Crontab requires a newline at the end of the file
And up to 3 extra months of product development time if the marketing takes a lot of time too. The time cost of marketing is important to be wary of - it really has to pay off because it costs you completed features (as a small team).

The marketing is critical but I’m just saying there is a cost also
HackerOne is complete garbage. I spent close to a month digging into Uber and compromised their m.uber.com mobile endpoint; they hemmed and hawed and then awarded the $25K to another HackerOne top performer stating that he had discovered the exact same vulnerability the day before I had submitted the report.

What's weird about it is that I was using Burp Proxy for everything, and this guy was directly connected to PortSwigger (and Uber was running some promotional for a free three month license for Burp Proxy).

HackerOne completely sided with Uber on everything, gave the Portswigger kid $25K and that was that.

So, in summary: HackerOne is trash, and Burp Proxy may contain backdoor functionality which is relayed directly back to Portswigger whenever a high value critical vulnerability is discovered with it.
> more damage than 10 comments based on facts

This is implying that fact-based comments do damage. Reminds me of Biden's "truth over facts" gaffe.
Coronavirus and the blindness of authoritarianism
When would it ever be proportional to charge a small business more than 2% if they can never charge a large business more than 2%? Are small businesses, as a general rule, somehow more capable of causing damage than larger businesses?

Is the law as written somehow vulnerable to some legal hack where all my revenue goes through Company A but all my data goes through Company B, so that Company B has a small global revenue despite being extremely profitable to the controllers of the companies?
I'm cool with that. I understand that online communication is a rather delicate art. I tend to come across as stuffy and pedantic, because I have found it's the best (not foolproof, though) way to avoid irritating folks.

My writing tends to be a lot more casual, and even a bit humorous. I like humans, and believe that the human relationships we make are the most important artifacts of our lives.
I'm curious why you think her work in math is separate and distinct from her work in advancing equality? I think her mathematics work alone distinguishes her but even if you don't, why do you not view her social contributions to the field as worthy of recognition?

Jackie Robinson was a great baseball player but his contributions to the game extend far beyond how he performed on the field.
I can emphatically confirm that this is not what annoys me about go, and what does annoy me are the real-world issues I ran into it through multiple pieces of production software developed with multiple teams of skill levels ranging from intern to senior.
Donald Knuth was framed
Athabasca University offers a 4 year, Canadian distance Computing and Information Sciences Bachelors. It's affordable, the whole thing is under $40K CAD ~= $31USD. Just a suggestion for the non-Canadian Hacker News set.
> It makes sense for the people that are getting the most profit from a piece of software to be the ones paying for basic maintenance/cleanup/improvements.

It often does make sense for them, and you can see lots of cases where this is is done with actual open source software without resorting to a commercial license that discriminates on scale. If it doesn't make sense for the people you want to pay, making a free-for-everyone-else license isn't going to convince them that it does, it's just going to convince them that they are better served elsewhere.

> If you want customizations or new features, that's when it makes the most sense to 100% self-fund.

I would argue that it makes sense to 100% self-fund the additional work whenever you want something more than the open-source offering provides and doing so is less expensive than commercial (off-the-shelf or bespoke) solutions, whether the additional work is basic maintenance or something else, and if you are using an open source solution and it's not maintained adequately for your need, the responsibility for addressing that isn't on other users that you’d like to have subsidize your use.
Different, but related. If you call 'map' then you know you're not mutating the values, and you get an output the same size as the input without dropping values, and...

It means you operate on a higher level of abstraction, and that inherently makes reading code faster. Not per line of code, but certainly per functional unit.

Idiomatic Rust tends to use a lot of functional code, and provides all the tools to make that safe. Its map function could mutate the input -- it would be unidiomatic, but certainly possible -- except that, if you don't pass a mutable reference, then you're safe to assume it won't.
"Integrated" in my experience seems to be a contested term:

- During my elementary school and the first part of my high school years, there were attempts in Atlanta to de-segregate schools via busing of students from Black to white neighborhoods. The schools where my neighbors who participated were sent to typically were not "integrated" in the sense of complete 50/50 proportionality. Typically in the Southern US, the mere presence of a Black population within a formerly segregated institution counted as "integration" [1].

- Similarly, the neighborhood next to mine formerly had covenants on who a house could be sold to. The city was founded by an advocate and supporter of the Klan. Informally, "integration" is thought of as "Well, the neighborhood used to be white by law, now the town/neighborhood is 30% Black..." The "tipping point" phenomenon, in which white residents leave if the number of Black/LatinX residents increase above a threshold is documented [2].

All that to say that "integrated" is a term relative comparison, where the majority of neighborhoods remain deeply segregated, perhaps even an 70/30 comparison is likely to count as "diverse" or "integrated", but the old patterns of power are likely to be replicated.

[1]https://www.newyorker.com/news/news-desk/the-unhealed-wounds...
[2]http://cityobservatory.org/are-racial-tipping-points-overblo...
> So essentially I've had the opposite conclusion. Unit testing to me is a symptom of bad engineering practices. If you rely on it, something is wrong.

I think that's being too extreme and dogmatic. Unit testing and small-scale integration testing (implemented as unit tests) are a way of testing your assumptions and documenting and communicating your assumptions to others. Both are good engineering practices.

You just have to be pragmatic about how you use these practices. Teams definitely get too dogmatic and narrow minded about mock-heavy unit testing, and some people do manage to write code without writing any unit tests, however those are both extremes that are best avoided or of only limited applicability.

The benefit of unit tests is that certain things are more economical to test that way. You literally can test everything though integration tests of varying levels (or manual testing!), but it'll take more effort and run more slowly. If you want to thoroughly test a regex, just test the regex by throwing a dozen strings at it. Don't bootstrap the program and construct valid input requests to test each of those strings (but do do that to test that everything can work together, which includes a subset of those strings).
The article doesn't mention the single most import reason for unit testing: to enable you to refactor your code.

Without a suite of unit tests, there's no way to know that your refactor hasn't introduced bugs of some kind. A suite of tests won't necessarily catch every bug you'll introduce, but it will catch many of them. I've seen this repeatedly.

I've had many conversations with developers who claim they don't need unit tests. When I ask "How do you refactor?" the answers is usually some variant of "I don't."
There's a huge difference between an informational email "somebody just logged into your account, was it you?" and 2FA workflow which does not let you log in without entering proper code. The latter is a security feature, the former is at most auxiliary informational feature.

> I'd definitely call this 2-factor authentication -

You'd be misunderstanding what "authentication" means then. Notification and authentication are different things. Email is notification, not authentication. Confusing it means either not knowing what authentication is, or purposely confusing matters to present issue as something it isn't.
Bah no they aren't, HackerOne has a small collective of security testers that they consistently make awards to, over and over again. If you submit a critical vulnerability, magically one of HackerOne's top ranked folk end up getting the award, AND HackerOne won't share any aspect of that triage information with you to actually prove that the vulnerability you submitted was legitimately discovered prior to your submission.

Junk company, waste of time and effort which results in all of their clients getting 95% free security analysis services.
This is my personal observation, but GitHub appears to be a much more ambitious company, now that they are part of Microsoft. With a CEO that understands both the open source and the enterprise world and with Microsoft cash at hand, I don't think spending money to make search better would cause any concerns.

Doing technical things that GitLab, Bitbucket, etc. can't is quite valuable. It also helps with recruiting, since smart people want to work on difficult problems.

It may well be costly to maintain, but I think the operating cost would be well within the realm of an incumbent that wants to maintain and expand their reach. I've been studying the code hosting space for quite sometime and GitHub, from an outsiders perspective, appears to be much more focused and ambitious, which should cause serious concerns for GitLab.
I would probably start with the seeed studio ReSpeaker array hardware wise. Otherwise, can you write up a more specific use case list with specific commands and responses? This sounds fun and I can probably help you make this happen.
Devotion's short-lived horror will be preserved at Harvard University
Use alternative maps -

https://en.mapy.cz/, https://maps.me/ - Google Maps is useless anyway.
In about the 80s, cars were rather more efficient at 50mph. Depending on brand, market segment, and transmission, I'd believe they are roughly as fuel efficient at higher speeds. My car (2.0L turbocharged hatchback) uses about 7-14kw to maintain 60-70mph on level ground at around 30-33mpg. The unfortunate uncertainty in my figures is due to poor memory
The fast path for vaccine approval is 2+ years.
Harvard's Extension School offers a variety of Bachelor and Masters degrees, and whilst not fully online, you can fulfill most of the requirements without setting foot on campus.
The Role of Source in Organizations (2015)
I think it’s more “the rejection of every idea”.
The former; the author's report (short of seeing what was intentionally left out for proper disclosure reason) is credible, and Paypal's failure to respond/remediate the issue is improper.

Getting access in this way to users' financial accounts is absolutely a vulnerability.
So kinda like riding a metro train, where the lines are named after the final destination.
Not being plastic is what it brings to the table.
I was in the same situation. I simply asked if I could use intelliJ instead and then copy-paste everything in google doc at the end. The interviewer was ok with that.
this is awesome stuff, thank you! great work!
Here ya go: https://sourcegraph.com/search?q=open+repo:edwinyzh+lang:pas... (search) and https://sourcegraph.com/github.com/edwinyzh/EditBone@d9ec56a... (find references in Pascal)

Sourcegraph.com is universal code search and navigation across all public repositories. To use it on private code inside your company, run a self-hosted instance at https://docs.sourcegraph.com/#quickstart.

We've been so focused on internal code search for companies. See https://about.sourcegraph.com for some of the logos of well-known companies whose devs all use Sourcegraph. Because of that, our "public demo" site at Sourcegraph.com has a few limitations that we're working on lifting, such as only searching across a subset of popular repositories by default (unless you specify a specific subset with `repo:` in the query).
15 Months of Intermittent Fasting Didn't Change My Life