skysight-inc/HackerNews huggingface dataset:
In most scenarios, you want to avoid L2 tunnels to reduce complexity and/or performance issues.

The chain of thought typically goes like this:

* Remote networks are connected via L2 tunnel.

* ARP requests are broadcasted over L2 tunnel to all connected networks, introducing scalability issues

* Proxy ARP is introduced to cache ARP responses

* Proxy ARP may become out of date or not scale as the L2 domain grows.

* BGP is introduced to keep track of and broadcast all topology changes

* How do you mitigate issues caused if Proxy ARP fails?

Most of these issues go away if you use IP tunnels instead of Ethernet because IP was designed to be routable.

For your point on security... Whitelisting MAC addresses doesn't provide security. These are trivial to spoof. Same with IP. Please start relying on cryptographic primitives to establish workload identity instead. I highly suggest looking at SPIFFE to get started here.

If you must send L2 over the VPN, please go use a L2 EVPN which is designed to handle the complexity and provide fault tolerance. There are numerous SDNs out there you can use to implement this including Tungsten Fabric and OpenDaylight. No need to complicate Wireguard to support EVPN.

[edited to improve formatting of bullets and clarity of wording]
comma's system is an automatic lane keeper. As in that thing CMU made in the early 90s. What's the relevance to autonomous vehicles?
Couldn't find a breakdown in the 10-K, perhaps you can: https://www.sec.gov/ix?doc=/Archives/edgar/data/1018724/0001...

But even if it's 1 permanent to 1 temp, or 1 permanent to 2 temps, it's still a little far from the $70k. I'm assuming the temps would also get some pro-rated bonus, for example 50% if worked 50% of the time.

Also - remember that this is in a good economy (not "the greatest ever" like the president likes to say, but still an expansion, so good). Companies are supposed to make profits now, to have a cushion for the bad times, so they don't have to contract business immediately on the first sight of trouble.
Yes, Command E has a similar UX. Actually, we started with Jira because many devs that we interviewed mentioned it as a big pain point. It's slow and confusing but you still have to use it to keep your team up-to-date. As to enterprises, we focus on individuals first but see value for such a tool in a team setup.
A great point. It does depend on your use case, and your dependence on manual operations. For our organization, almost all database interactions and maintenance are performed in code; if somebody is connecting manually, something pretty bad has happened. So for us, we are not really impacted by having to perform port forwarding like this on rare occasion. I completely agree that it could be much more impactful to other organizations.

I'm curious: why is utilizing port forwarding over these mutually authenticated SSH tunnels less secure than employing a VPN? From my perspective, port forwarding still adds a level of intentionality which reduces the likelihood of an incident/accident.
I have a very hard time believing that, given birds existed.
Location: Seattle WA

Remote: Open

Willing to relocate: Yes

Technologies: React, JavaScript, Angular, HTML/CSS, AWS, Java

Résumé/CV: https://maxinrui.com/wp-content/uploads/2020/03/Xinrui_Ma_Resume_703-581-7361.pdf

Email: fullstackguy@gmail.com

LinkedIn: https://www.linkedin.com/in/xinruima/

Looking for SDE positions, I am Expedia SDE II. Any help appreciated, Comfortable with Front End, but willing to do backend as well.

My personal website: https://maxinrui.com

I have 6 years full time SDE experiences.
WHO has also taken a lot of criticism in recent days as being extremely solicitous towards China and avoiding anything that looks like criticising them.

That doesn't mean they're wrong, mind you. Just that, if they wanted to keep on the good side of Xi, perhaps they'd exaggerate how good his policies have been.
What advantages does BSD have over Linux?
do you have any links to benchmarks showing json serialization inefficiency for large sets of numbers?

I found this which shows json isn't too much worse than others, but it doesn't go into extreme cases

https://github.com/eishay/jvm-serializers/wiki
Recent and related: https://news.ycombinator.com/item?id=22440922
It shouldn't be possible. That the browsers allow it is the real problem. Same with forced unmounting of resources from the DOM.
Looks like it has been available since September 2017: https://github.com/braintree/braintree-web/commit/b79008a51c...
Breaches and Bridges
Duvel triple hop is, indeed, vile, but there are other Belgian breweries that are taking on the IPA and doing an outstanding job of it; Brussels Beer project comes to mind immediately, but I'm sure that there are others. I'd take a BBP Delta IPA or Dark Sister over nearly any American IPA.

That said, the IPA style was originally British; it's called an "India" pale ale because they added a ton of extra hops to preserve the beer well enough to make the trip to India. It then got brought to the US, who picked a metric (IBU) and optimized it beyond repair, and the American take on IPA has certainly made it back to the UK (e.g., a good half of Brewdog's repertoire)
I'm a christian, but there are even bigger issues with Genesis from a scientific point of view: how about the dinosaurs, bacteria, viruses and so on.

There are some Bible quotes that seem to show transcedental, accurate insights -- like the Earth floating in void, but not much, that's not something central to the Bible.
I don’t think he actually wanted to sell HIBP. He was way more focused on providing detailed constraints for the future of how it should be run, than in listing its assets and how those might benefit the future owner.

I think what Troy actually wanted was resources and support and management for his vision of the future HIBP. That’s not usuallY what a sale is, and it sounds like he paid a lot to learn that lesson.

It seems to me like Troy treats HIBP as a mission, not a business, and in the US at least, a nonprofit would be an option to organize financial resources around a mission. As a private company, he could seek investment from like-minded folks with deep pockets, but that would likely come with external pressure to show a profit.
At a previous employer, I was dumped a client lib and server whose purpose was to maintain a data cache with realtime updates. It was fragile and slow as fuck.

When I got ahold of the source and started diving into it, discovered the client had 2 copies of the data, which was kept in memory. The server had 3 copies of the data in memory! Worse yet, the primary cache would be updated, then a multicast message was broadcast to update all the clients and the server's secondary and tertiary caches...thats right: the server would update the 2 other caches by broadcasting a multicast message, receiving it, then updating the other 2 after message receipt. A re-architecture was definitely in order. Took 3 months. Took another 3 months to get the interface to be backwards compatible with the original version.

Mind, the server was responsible for serving up relatively static market data for finance. But, considering we traded globally, we had +400 objects we cached, more than a few had 100ks of record. Memory usage for the server was many GB.

The rewrite involved moving to a single cache, instead of multiple for both client & server. It was also architected to handle large volumes of updates. Original implementation could even handle 100 updates per hour without bringing the server's and all clients to their knees. The write could handle +10k updates per second amd clients would barely notice a slowdown. Write locks were only held for a pointer swap. Memory usage for the server went down by close to 2/3. Client memory usage by 1/2.

During that time, also moved from static libs to dynamic on both Linux and Windows, so I could make nonbreaking changes without a firm wide recompile/relink, which typically took 3 days. HUGE productivity boost. A small bugfix didn't require a firmwide recompile/relock for the smallest bugfix.
The employer has no legal way to mandate that. That said, if it were consistent with generally accepted recommendations from the government, and my employer was not just allowing but encouraging that recommendation, I probably would comply voluntarily.
I'm missing the.CTA - afzer reading desktop based I want to click download and try it out
dollars are lives if you didn't start with enough.
I have no way to prove to you that I am not some paid shill :) , but I have no relationship with Okta outside of being a customer through my employer, and I was not compensated or gifted anything for the creation of my post.

I blog about things that I encounter at work and find interesting. That happens to often be a cross-section of infrastructure and identity!
This is not a comment in good faith. You are accusing parties of something you cannot prove: intent of action. Regardless of how the actions are perceived you may assume malice or something else, but you can't prove it. Even in court of law (I'm not a lawyer, but this is what I have learned) intent is incredibly difficult to prove.

It is better to make claims with data (ie, administration does X, Y, and Z) and the provide reasonable interpretation (these have such and such an outcome on these segments of the population).

This is a gentle reminder that casting aspersions does not benefit anyone and may divide communities on issues that should be talked about in concrete terms. Bumper sticker politics might the status quo on most social media sites, but they have no place here.
CBOR. Binary JSON with some extra features.

I like PB, but it was too hard in my application to sync all of the sides with the same proto as it was developing rapidly.

For me schemaless was better, and now we have extremely easy JSON conversion... but did have to write the parser myself.

I personally can’t agree on PB being “the future”.
Indeed, but then at least in my experience, the quality of sleep is terrible.
I interpreted “problem” as the bloat problem in a 1.7 mloc chat app.

Summarizing it as a chat app is probably the first miscommunication here.
These projects were developed by volunteers and are distributed free of charge. No need to be a jerk.
Plus if there's something you don't like you can always pull the code, modify what you need and submit a pull request.

I use Linux everyday and I prefer a slightly off UI once in a while than having to deal with the frustratingly sluggish performance of macOS.
>"We are experiencing a technical outage... <corporate blah blah blah here>. If you need to make trades, please do so via phone at 1-800-SHORT-RH"

"You're call will be taken in the order it was rexeived. Current wait time: 1,732 minutes."
8 megs and constantly swapping out virtual memory.
It may be spelled Alphabet but it's pronounced Awfulbet.
When the expected outcome from receiving standard of care treatment is the death of you or a loved one (which is sometimes the case with cancer), then you may have a higher tolerance for risk than the healthcare system.
I, as the shipper, tell you (the receiver) out-of-band that you're getting a tilt indicator with serial #C097412. You check the received label against my out-of-band signal to ensure it matches.
Link to Sophos release: https://www.sophos.com/en-us/press-office/press-releases/201...

(I was getting connection timeout errors on the linked article from the post)
my personal feeling is L5 won't happen until we have AGI at average human levels.

There's really that much involved with driving a car.
The agricultural revolution and its consequences have been a disaster for the human race.
The points you raise about resources required to support administration of these therapies is a good one and I do agree with it. It's why my wife ultimately did not get IVC, I found an alternative care doc to administer it but didn't trust his ability to actually do it safely. There's generally a resource shortage all around, maybe especially with the oncology docs themselves. I think we had 20-24 hours in front of her doc through her two year treatment, 8 in surgery and the rest peppered through infusion visits and inpatient.

I'm pretty confident IVC will end up at least as part of palliative care. Nobody is going to fund trials for it for adjunct cancer therapy because onc docs want to see trials for their specific cancer and given it's not even a candidate for monotherapy it's just not going to get the investment.
You do realize that you can have one code base and write in C++ right? You don't need a slow framework to have a UI run in multiple places.
Lull+Mattress+Savings+$150+Off
Actually cutting cost usually comes first to the mind of the investment bankers because:

1. Cutting cost will always yield a quick gain

2. It's a lot more difficult to turn it around and win in the long term

3. Even if the banker wants a long term picture, cutting cost is not necessarily a bad idea.
MACs can be spoofed. There are entire companies which begin their sales pitch with "So, I can poison the ARP cache to take over your DNS in your Kubernetes Cluster" due to the NET_RAW capability required to respond to ICMP (ping). :)

You'll want to use a crypto based identity if you want to ensure spoofing isn't occurring. Even then, you can still be DOSed by a malicious actor. Tools like eBPF may be able to help here by filtering out source MAC addresses that don't match the source interface's hwaddr.

edit: Sorry, I didn't read this comment properly. In ZeroTier I can believe that they cannot be spoofed across the VPN due to relying on a cryptographic hash. :)
I think he run it under a VirtualDeskop mode, where its physical screen would be smaller than the X11 video mode, thus, having to scroll up and down to show the full Fvwm Pages.
I found when I visited Prague a few years back that the Czech cuisine that I grew up with had apparently managed to be completely unmodified from the original in its American version. The same cannot be said for Mexican cuisine in the US. I suspect part of that might be that very few people without Czech heritage (or Czech-adjacent, it seems the cuisine is fairly uniform across much of the old Austro-Hungarian empire) eat Czech food in the US.
That's a glorious Ling ASCII banner. But the video referenced in the commented YouTubePlayer widget is a first for me, and absolutely hilarious:
[Drugos (Despacito) LINGsCARS website promo][1]

[1]: https://youtu.be/L2GlWaeNNoU
Location: Chicago, IL

Remote: Open

Willing to relocate: Yes

Technologies: Python, Swift, PHP, JavaScript, HTML, CSS

Résumé/CV: https://github.com/MissUgne/Resume/blob/master/UgneGliaud_re...

Email: ugne.gliaud@gmail.com
s/mute/moot/
OK, ELI5: How is C++11's memory model different from pre-11, in ways that are visible to the programmer?
What I Learned from a Year of Daily Metrics
I guess those ones didn't have the 180° sensors on them? With these one it would be pretty much impossible to jiggle both balls into place.
The doubling period of Covid-19 is between 1.8 and 4.1 days where large scale quarantine measures aren't being taken [1][2]. The conference is in 43 days so without large scale quarantines and stopping large events then the number of cases in the US could grow to as many as 800,000 assuming a doubling period of 3 days. It seems therefore fairly obvious that most large events in April will have to be cancelled.

[1] https://link.springer.com/article/10.1007%2Fs15010-020-01401...
[2] https://onlinelibrary.wiley.com/doi/abs/10.1002/jmv.25723
You're picking examples of companies with deliberately razor thin profit margins.
These are deaths per TwH, capacity expanding won't change that.

The one thing that will change the death rate is if the capacity reaches the point where peak production exceeds demand. (Remember, we have no practical means of storing large amounts of electricity, the closest we have wastes at least 1/3 of it.) The thing is the deaths are from construction and maintenance, not operation, and thus go with nameplate capacity, not power generated.
There is a paper from Norway's geology administration that says what's happening is that fossil fuel productivity is in steep decline since about 2005. Which means the amount spent on fossil fuel (oil and gas) extraction is growing faster than the world economy. Basically an economist looking at gross figures thinks everything is fine. But a mayor of a city looking at his budgets feels like things are getting worse.
Please don't post the same thing over and over.

But I don't know about "significantly underrate" either. The screens in the video you linked are 93x44 characters. It's certainly usable, but just my main screen holds 8 windows that size with a generous font and room to spare.
We are talking about how the composite extension for X was a must for FX, I said bullshit because I had these effects long before the X entension and Compiz.

And I know XRender is not a WM, FFS, my first distro was Debian Woody so I know my shit better than those Compiz bling-bling new users.

And not only KWIN did that, a lot of WM's did different FX in software by either using XRender or custom coding (such as Afterstep).
For me, I like understanding what's going on under the hood. OS's like FreeBSD are very straightforward. When I use even a carrier-grade Linux distro, I'm more detached to the internals and entrusting my setup more to some other party. You lose compatibility for more stability.
IMO marshaling int64 to string is required for interoperability; RFC7159 recommends not assuming that more than IEEE754's 53 bits of integer precision are available:

https://tools.ietf.org/html/rfc7159#section-6
Most IPv6 packets are encapsulated in Ethernet frames which use MAC addresses. What may change is the vendor specific MAC address could be replaced with a MAC address generated by a cryptographic hash to preserve privacy.
> the name seems like it's going to confuse people.

Agreed! This name is poorly chosen. Most people have a general familiarity with what raycasting is about and will likely be confused by this usage.
because that sentence can be read within the time span of human attention span and the problem with it easily identified.
Easier Stream Processing on Kafka with KsqlDB – Episode 122
The idea here is that what people generally regard as a "photon" today is actually one second's worth of oscillations of light at a particular frequency. Imagine each oscillation of light as the true elementary particle instead. There are plenty of those elementary particles within the classical "photon" that can be split out into smaller "photons" of a different frequency.
Location: Pune, India.
Remote: Yes.
Willing to relocate: Only in Europe, depends on USA.
Technologies: Nodejs, JavaScript, Postgres, Mongo, GraphQL, Typescript, Rust are preferred.
Résumé/CV: https://docs.google.com/document/d/1JwclpQkMv48kIN54GY0rgu3_VdThwxE5YLUvvE8Igjs/edit?usp=sharing
Email: prabhanjan@fosslife.com

Littlebit about myself: I am a full stack NodeJS developer. also knows Python well. Worked on Multiple open source projects (github.com/fosslife). I am also a tech Writer/Speaker. Have given multiple talks on JavaScript in local meetups. Checkout my LinkedIn for some of them (https://www.linkedin.com/in/Sparkenstein). Currently, I am learning Rust. I was the winner on National level Hackathon by Govt. of India leading a team of 6 people in my college, worked with Ministry of AYUSH, India as well. I also host my own services like pastebin/storages/my own blog etc. Looking for a remote opportunity preferably in NodeJS/TypeScript.
The Advanced Python Task Scheduler
I've yet to see an example of this that actually works. I guess Google is one of the heaviest proponents of "get support only if you pay for it". Any others?
In a typical WebAuthn scenario the Private Key is actually being stored by the Relying Party, they just don't know that because it's encrypted with a symmetric key. That symmetric key is baked inside the hardware token.

Yes I'll say not being able to get that symmetric key out of the hardware token is a feature, because it is. Without that feature you'll have to educate users about how to care for their symmetric key and every time you inevitably fail they get exploited.
I agree, but I'm also picking large employers (because that's how you'd get a lot of impact from a change like this). Which one then? :).

Boeing? 10% margin (before the MAX - not in 2019, so not a Google or Facebook but still quite good). 12 months ending December 31, 2019:

Number of employees: 161k
Pretax earnings: $-2,259,000k (loss; that's the MAX fiasco)
Let's take pretax earnings for 2018 instead: $11,604,000k
Earnings per employee: $72,074

$72k bonus (but nothing more) is theoretically possible, for 161k people.

In a good year, not in 2019 with the MAX troubles. Assuming shareholders are somehow OK with this. And assuming you need $0 for growing your business (like new factories, machines, acquisitions, hiring more people). And assuming you're leaving yourself with zero room for error (no cash cushion for a bad year), because sure as hell Wall Street will not give you investment-grade credit once you need it so that your bonds can go into old people's retirement accounts and slowly blow up there.
My personal experience is consistent with what jcims describes. My situation is sufficiently atypical that it's been challenging to find consensus among multiple oncologists and oncological surgeons.

The burden is on the patient to be their own advocate and parse through the various opinions (and their own research) to decide on the best treatment choices, with the assistance and guidance of the experts. Because despite them being experts, they have insufficient time to research and understand all of factors that are applicable to an individual's situation. (For example, in at least one matter, I proposed a significant change to the treatment plan and my oncologist agreed with the underlying logic and we made the change. Had I not mentioned it, it wouldn't have happened.)

It seems like there are a few bounds within which a doctor, and the healthcare system (including insurance companies), are prepared/allowed to vary treatment. I imagine some patients, especially those with potentially terminal conditions, are interested in treatment options that fall outside of those bounds.

(Perhaps if one's cancer follows one of the most normal/common paths, then blindly following standard of care is sufficiently wise. I'm not sure how often this is the case, but my impression is that there is great variation even within cancers of the same general type.)
Tent cities are a product of a broken society in the US, not a global worldwide phenomenon.
everyone knows you get best pizza in Chicago.
SEEKING WORK | Backend Services; Data Engineering; Systems Engineering

Location: Boston, US | Remote: Yes

I'm an experienced software engineer looking for part-time and short-term contracts.

I'm most experienced in the data-analytics backend-stack: from ETL to database design to web-api to devops. One of my major projects is an analytics engine for web applications (https://github.com/hwchen/tesseract).

However, I'm naturally curious and happy to work in any domain which requires high performance and maintainable code. I've worked with a distributed worker system, debugged async database drivers, and implemented text layout primitives.

Primary Skills: Rust, Python, Linux, Google Compute Platform, ClickhouseDB, Postgresql

Production Experience with: Python/Pandas, Node/JS, AWS, Docker, Redis, MySql, Nginx

Github: https://github.com/hwchen

Contact: hello@hwc.io
The transition from being unashamed to ashamed is a big part of the Garden story.

First: "Adam and his wife were both naked, and they felt no shame."

Then, later: "Then the eyes of both were opened, and they knew that they were naked. And they sewed fig leaves together and made themselves loincloths."

I don't know, or care to focus on, how literal or figurative the story is. Perhaps it's describing a change that occurred during evolution to (or within) homo sapiens, a change that caused us to be more self-aware (in a bad way?), self-reliant, conscious of good and evil. Just speculation here.