skysight-inc/HackerNews huggingface dataset:
One way to get your feet wet is to write an eval function for a small language like "basic arithmetic language" in your programming language of choice. Allow only an int type, a few operators ( add, sub, mul ), etc. Then have eval parse then run a statement(s) from "basic arithmetic" and you'll get an idea of how interpreters work. From there you can delve into theory and writing interpreters for more complex languages. I believe in doing first and then learning theory after. Also, you can try writing eval in an OO language, functional language and procedural language to get a deeper grasp of the differences between these programming paradigms.
Fantastic write-up, I really enjoyed all of the details on how the forensics are done for these cases. Certainly a good reminder to make frequent air-gapped backups of any mission-critical machines on the network. And even with those, as the author points out, rebuild time and effort could be horrible.

Steve Gibson has been heavily covering the increase in ransomeware on his excellent podcast Security Now. From SN I’ve learned some interesting points, including that Ransomeware-as-a-Service is now definitely a thing. There have been a few major operations which hand out ransomeware packages to unethical hackers in exchange for a % of the Bitcoin they collect.

I can only see ransomeware becoming more and more of a problem in the future, though I certainly hope I’m wrong.
I agree that we are getting closer to archived data consumption (vs requiring Internet access) and we'll pack a "data suitcase" prior to extended trips or errands.

I guess it could be considered brown-bagging your Internet diet when you're on the go.
> items sold that didn’t have any real safety certifications in mind.

The amount of electronics sold without an UL/ETL cert on Amazon is staggering. Many companies no longer bother getting one because there's noone to stop them from selling uncertified crap. Also, we have seen unscrupulous dealers slapping a fake ETL cert on their product and even when Intertek contacted Amazon they didn't take it down!

Hell, there's an "international" power strip sold under many different names which provides three NEMA 5-15R from a single IEC C5/C6 coupler (the IEC standard is up to 2.5A but the UL certifies it up to 13A but still, the NEMA connector is 15A) and to top it off, it is sold with an ungrounded cable. I often see it recommended on travel forums, for real. I can't even decide whether shock or fire is the bigger hazard with this. Someone eventually will burn down an airbnb with it and then will the finger pointing start.
An Introduction to PostgreSQL’s hstore (2018)
I think you're selling some of these "NewSQL" DB's short, TiDB/TiKV for example appears (I haven't personally used it yet) capable of supporting both OLTP and OLAP workloads due to some clever engineering and data structures behind the scenes.
I thought this was going to be an article about the Internet-in-a-Box project (which downloads resources such as OSM, wikis, media for free, private, offline use)

http://internet-in-a-box.org/

Still a nice build, though.
On the other hand, self-hosting everything doesn't let you take advantage of caching.

What I mean is, if two sites use the same resource, and if both sites fetch the resource from the same URL, the resource will likely be cached by the browser once and reused again and again. This can be huge for load times when users visit a website for the very first time.

Or at least, this was the argument that was floating around in the community, when I used to do web dev. It's been a few years since, and I'd be interested to see if people have other arguments for/against this.
It does no such thing. All ISPs and public wifi I have ever connected to have terms of service that prohibit illegal activities.
Thoughts from a 36yo engineer who has decided to transition away from IT:

Specialising in the areas you mention is a big bet, as it implies that the product / architectural approach will remain constant as time goes on. Except for enterprisey institutions like Oracle, SQL Server, or big ERP systems, this isn't really a tenable strategy as the rest of the industry carries on innovating.

Rather than specialising, the modern approach to longevity is learning. You can still carve out your preferred area (e.g. backend), but you must be prepared to move with the tides. You don't have to be an early adopter of every new hot, prototype tech that comes about, as that takes a lot of energy and can be frustrating. Instead, consult industry publications like InfoQ which cover more long-term patterns in the field, and use those to inform your choices of further investigation. This will expose you to actual use in the field, by other companies (e.g. how many seem to be using it, and what common failures are experienced). For example, microservices has been around since about 2010, and was borne (IMO) from Service-Oriented Architecture which was around since about 2005. If you take notice of the rise of cloud technology, you would be able to see the trend towards separating applications and separating processing.

Cloud and microservices, regardless of their foibles or unsuitability, are often a reality as the tech industry moves in a way that is not really very wise, and things are often rediscovered in different ways. As an alternative to embracing this "move with the tide" approach wholeheartedly, you could position yourself as a wise consultant-type figure (not necessarily an actual consultant, just an employee who has wisdom), and push for the right approach for a given situation. I would still keep abreast of trends though.

Something that has worked for me is doing university / polytechnic courses whilst working. This will add interesting flavour and variety for your mind to work on during the day, and you might discover a new interesting field (for me, it was people and HR, the role I'm now transitioning into). If you want to do this, I'd recommend the book: The HBR Guide to Changing Your Career (has advice on how to gradually incorporate more of what you want to be doing into your day job, safely).

Best of luck in your quest!

[Edit] You mention "good old RDBMS" which suggests a strong affinity to things in your comfort zone. I'd suggest Googling "Growth Mindset" and "Immunity to change" as tools to help you recover your curiosity. Remember: Don't focus on others already knowing a subject better than you, think about what you know now and improving that knowledge exclusively. Otherwise, you will always persuade yourself out of learning something.
I think it needs a "killer library". The core language is pretty easy to learn if you've used Python, but there aren't a ton of third party libraries, and the ones that do exist seem to be incomplete, poorly documented, buggy, abandoned, or some combination thereof.
Rather than "panic buying", it looks like a bunch of random people calmly shopping. Customers are smiling and there is a couple joking around with each other. "Reporting" like this is blatant fear mongering.
Ask HN: Low Code tools like Webflow, what's my role in the future?
I'm not a software developer, I like to code, but I prefer relative simple websites with HTML, CSS, JS and a CMS. Developing complex applications is not my thing and I see no future for me there.

When I see things like clutch.io or webflow.com I ask myself if it is still worth to master the basic 3 (HTML/CSS/JS).

I think even larger projects can be done well soon in tools like webflow, squarespace, wix and all the others.

What do you think has the most future for me and other frontend developers which are not very skilled in the very technical part of coding? What should I learn to have a secure future without having to go deep into software development?

I like coding, so design is not a full time option for me.

What's your take on this?

Thank you!
If you have examples you can try sending it to jeff@amazon.com and it will (eventually) get triaged as a sev-b ticket if you're lucky or it is an interesting enough issue
Thanks for the suggestion! From what I read, Wyze's cloud doesn't store continuous recordings. They only store 12 sec event-triggered videos with events being at least 5 minutes apart.

They say that continuous video can be saved to a microSD and played back in Wyze app. Do you know if this playback works remotely or would I have to be on the same WiFi?
> hiring managers, who perhaps often don’t have the time, interest, or even ability to read someone’s portfolio to determine the quality of the code.

Then perhaps this person should not be interviewing in the first place?
Why should an unqualified hiring manager somehow asses the candidates technical abilities ? This seems really bizarre to me. Imagine putting someone who is clueless about the medical field in charge of hiring surgeons based on some test score they took online, whilst completely ignoring their years of experience.

> I can’t tell from your online portfolio whether you’re the sole author and/or how much you’ve contributed to a project. I can’t easily tell if you get a lot of your code from StackOverflow, or write it yourself.

The OP has hundreds of citations in his portfolio. It's interesting that leetcode which can be gamed by a grad has more weight than multiple, well established projects.
If you place this much trust in applicants, you will most likely be micromanaging them as well.
This isn't the way to attract top talent.

> I can’t tell what motivates you, whether you love programming or you are hoping for a high salary.
This is what the in person interview is for.

> While high technical ability is a requirement for someone I hire, it’s not actually the primary requirement. What I need to know is how adaptable people are, how well they’ll work in a team, how quick they are on their feet

All these are valid points, but the discussion here is regarding whiteboard algorithms vs actual experience.

I honestly think it boils down to a few things:
- Companies are willing to waste the candidates time.
- Copying FAANG style interviews serves as a marketing tactic for startups (we have the same hiring standards as Google)

And finally an unpopular opinion:
- Asking Algorithm questions makes the interviewer feel smart, Especially if they are interviewing someone which is more experienced.
Wow, this is triggering some kind of memory cascade in the back of my brain that I simply cannot place. I know this font, but I really can't say from where.

The closest guesses I can come up with is the Commodore 64 Programmers Reference Guide, or maybe an old terminal or computer magazine. But I could easily be wrong.

Either way, I love it.
Ha! I realized this yesterday after considering it (very briefly) for a home lab deployment—I’m pretty sure I dodged a cannonball on that one.
That's what I would have assumed, but he was explicit that he already pays per device:

"To be clear, this is not stealing internet service - it is expensive and we pay for the premium, unlimited, steaming package for multiple devices."
EU Police Push for Pan-European Facial Recognition Network
> Juicing an already hot economy with tax cuts and low interest rates is just stupid,

The economy isn't "hot" (obvious attempt to negate positive facts), it's healthy. "Juicing" it is improving it further and making the population wealthier. There's nothing negative about that.
I would pay a good premium for an amazon like platform but with guaranteed good, premium products.
Because of the search results.
> What I've never understood is how this doesn't ultimately just shift the security risk to my DNS registrar.
> Instead of social-engineering the CA to give me a cert, I have to social-engineer the registrar to store a TXT record. I don't see why one should be significantly harder than the other.

Rogue registrars aren't necessary: one can simply attack the registrar or interfere with the DNS traffic. These attacks have already been seen in the wild and are continuing today: check out info on DNSpionage (https://blog.talosintelligence.com/2019/04/dnspionage-brings...) and Sea Turtle (https://blog.talosintelligence.com/2019/04/seaturtle.html) attacks.

Meanwhile, Let's Encrypt has been making some interesting changes. For instance, they just introduced multi-perspective challenges (https://letsencrypt.org/2020/02/19/multi-perspective-validat...) in which they submit multiple challenges to the user from different network paths. Attackers hijacking network paths to interfere with challenges must then intercept all possible paths to a client, which is much harder.

That said, I'm not a fan of devolving our certificate validation to DNS--it's like building a castle on Jello. It wasn't designed to be a security-first protocol, and it's definitely showing its age.
Up until a decade or two ago, tritium--which emits alpha radiation--was commonly on wristwatch dials, precisely because they were not dangerous. Alpha radiation is easily stopped; it's only dangerous if you breathe it (or drink it, if that's even possible).
MIT algorithm discovers antibiotic that can fight drug-resistant diseases
As the article mentions, a bigger anti-Myst sentiment was from the traditional inventory-NPC based adventure fandom, which was annoyed that this game eliminated inventory and NPC-based puzzles. And arguably killed the traditional adventure games, except for fan works.
I own our company with a partner, so it's me paying for it either way. I buy on the market but company pays for it.

I think the overall costs are lower for Kaiser, I think I have one of the gold plans and it's only like $20-40 copay for fairly specialist visits and most medicine is really affordable. I pay labs costs and I think looking at bill I remember them being more than the actual Doctor and they seem fairly expensive.

In past years I've found I barely have any costs or recently with a 'high health' year a few of the more rate big costs helped me the out of pocket pretty quick.

Just googling found this: http://info.kaiserpermanente.org/healthplans/colorado/indivi...
The article says about the Stackifier algorithm: "no link for the latter, it’s only mentioned by this name in LLVM internal discussions".

Since the release of this article, I wrote a blog post explaining how Stackifier works, for those who are interested:

https://medium.com/leaningtech/solving-the-structured-contro...
No, it's not a problem. And the trade deficit is also a result from people being able to afford to buy goods. Government debt is no problem at all for a healthy economy. Corporate debt is a sign of trust in those corporations.
I think you are confusing frameworks and SPAs.

For example, React is meant to build small components not SPA. But you can build a SPA using react-router. But you can build SPAs using vanilla JS as well.

The only thing that truly defines SPAs is lack of “true” page changes. JS is taking control of your browser url bar and history. Which I personally dislike.
To get linear time validation, you need conditions at each control flow transfer that can be checked locally but together imply that stack usage in the function is well-formed.

The funclet approach (in more ordinary terminology) is to ensure that the stack difference from function invocation upon entry to a basic block is the same across entries to that basic block, and that those additional stack entries all have the same (statically specified) type in each invocation. This is very natural when generating code from an SSA optimizer.

Java bytecode traditionally didn't contain any of this branch target or type information, and required the bytecode verifier to do an iterative combined control/data-flow analysis. Even now that they added some of that type information with stack maps, it's still more complicated than it needs to be due to the historical legacy of this approach.
Is no direct communication between microservices necessarily a bad thing?

I've made a few similar design decisions in our tech stack, we have no "direct communication" between microservices, discounting the shared database. Microservices communicate through the use of RabbitMQ.

We build our system around the premise of eventual consistency, thus reducing the need of blocking computations.

So-far this has served us rather well.
I subscribed for a while. I noticed the problems were mostly solved by things that existed already, or were ideas I didn't see much potential in. It was worth exploring though.
Culture is not race. Imposing one's cultural norms on people of other cultures, while distasteful, is not racist, it is merely insensitive.

Feeling offended doesn't mean racism is afoot.
There are lots of companies that will pay you the price of the item + $X to buy the product and leave the review.
Nope. Today, tomorrow and for 6 more months is 825 days. As of September 1, 2020, it will be 398 days - a change people knew was coming for a long time.
https://passingcuriosity.com/2015/haskell-reading-process-sa...

https://hackage.haskell.org/package/base-4.12.0.0/docs/GHC-I...

None of this looks immutable.
> Now I find that I rely more and more on brands to decide which things I buy

It's interesting that you say this, since Amazon itself is a brand--but not the kind of brand you're looking for. You are looking for reliable quality, and Amazon's brand is quick and cheap.
Cyan’s latest game, Obduction, is quite good in VR.
Node, maybe. There's still plenty of it out there but more skepticism about perf and npm, and less hype that it will be the great general unifier of front and back ends.

They were probably equal in 2017, but now go seems to have far surpassed it in terms of server side relevance.
You can still have this: it's called 'split-horizon' or 'split-brain' DNS. It can be tough to set up and maintain for large DNS environments, but not /that/ difficult even at that level. If you do this and you don't want those names in the public CT records, though, you have to implement a private internal PKI for those servers so they're not getting public certs. Or use a wildcard, which carries its own significant security risks.
Now it needs U+0CA0....

https://www.fileformat.info/info/unicode/char/0ca0/index.htm
How to Load a Dishwasher
I work as a cloud solution architect, with more tech focus (75%) than business (25%). But I want to move into a manager position and I've been told that I need to talk and act more strategically.
Is there a secondary or original source for the claim? The video doesn't look much different from a busy day in any large supermarket. "The cat is out of the bag" title was written by a user name 'chovy' on the video website (you?)
I've always taken it as a proxy for quality. My thinking was that Prime means it must ship from Amazon (I realize now marketplace sellers can qualify for the Prime flag if their shipment is free and fast for Prime members). And then it follows that shipped by Amazon means they stock it, and are responsible for returns. Therefore, not wanting the expense of excessive returns, they would probably have a system to ensure quality merchandise.

Of course, none of that thinking is accurate, but it appears to be logical on the surface.
There is a difference between a calculated risk and a death wish. I am by no means anti daredevil. Go ahead and jump from the edge of space or ride a motorcycle over a canyon. Just don't fly in an amateur rocket if you have any sense of self preservation. The budget to do it safely is far out of reach for the self funded thrill seeker.
> mostly holiday, but also some work

> This is obviously somewhat overkill, so worth some explanation...

The author doesn't make it immediately obvious why they chose the particular components and why the overkill, especially for something that is so rarely used and is not aimed at enterprise scenarios. It comes at quite the cost. The FireBrick alone is £500+VAT and as far as I can tell the 3 Aruba boxes together easily cost even more. That's at least $1500 worth of equipment in the Internet Box. Couldn't the same result (within reason) be achieved with something substantially cheaper? Like a travel router, maybe combined with a RPi if needed? Of course you wouldn't really get anything close to "enterprise" but then again the occasional vacation cruise doesn't seem to beg for such features.
I always thought engineering was simply applied math and science. You're not researching and testing new theory explaining the nature behind how phenomena work, or developing new mathematical techniques, that's for scientists and mathematicians. Rather engineers take their work, and apply it to invent things and solve problems.

As so, I'd consider software development can qualify as engineering. If you're taking the work of computer scientists and mathematicians (or any other science fields) and applying it to software, it fits the definition. If you're just laying code to a given spec without much more thought, then you're just a programmer/developer...
Unpopular opinion:
GraalVM is what should have been webassembly.

Reasons:
* True polyglotism
* existing, feature complete implementation
* compatibility with the existing JVM platform, and through polyglotism compatibility with almost any platform/library.
i think from the director of engineering at amazon charged with making sure reviews are not fake, they would say "we can only make it so difficult to create a new account and prove you are human before it literally becomes impossible for new people to make real accounts." You say amazon has to police this more. I say amazon has tried and there is so much money to be made in jumping through the hoops to prove you are a human, that there is no way to win this war.
I think a lot of places do this for convenience, and don't realize the risk it puts them under (not that you are unaware of this, just that others may not be). Whether they have everything generate its own wildcard certificate, or create one wildcard and share it to everything, they've created a significant security risk. Namely, any time a wildcard cert and private key leaks, the attacker can now impersonate literally everything behind that name. By using wildcards everywhere, they're creating tons of leakage points, and only one of them has to leak the private key and the attacker wins, particularly if they can grab it without the user being aware.
https://medium.com/@arschles/go-experience-report-generics-i...
Srsly, if ever an article could have benefited from more illustrations, it’s these two. The GIF was helpful, but still only of the most basic knot and didn’t even show much color fluctuation. /gripe

I’ll take a quick look to see if there’s more somewhere...

Ah! Here’s the stuff! - https://science.sciencemag.org/content/367/6473/71/tab-figur...
That's exactly it. A test verifies one potential execution path. A TLA+ model verifies every execution path, in every ordering that those events could happen.

One of the tricky parts I found was figuring out what granularity to use when writing specifications.
Ah, a mainstay of technical drawings and engraved office signs.
Good news – they're working on it: https://help.github.com/en/github/searching-for-information-...
What's your definition of unpredictable & random?

I'm interested because you write off quantum mechanics as unlikely to be deterministic. When everything being deterministic is more realistic and from scientific understanding of systems working in nature.

Contrary to determinism would be true magic. Having a force without any cause. That just feels like lack of understanding.
The story about the foreigner asking for directions in Ireland comes to mind. The (helpful) reply: "You want to go to Ballywhereever? Well, I wouldn't start from here..." Top that!
I thought fake reviews were typically from humans? Bot protection / human verification seems like the wrong front to be tackling.
Mildly related, here’s another instance of harmful things you can buy on Amazon: “negative ion” trinkets that are actually radioactive [1].

[1]: https://youtu.be/C7TwBUxxIC0