skysight-inc/HackerNews huggingface dataset:
Ask HN: What it is like system or Cyber security jobs in future?
As there are growing connected services and systems. I am looking into moving to security domain. Can you guys share your thoughts on how good security jobs, Whats the scope of job, whats the must have skill in security domain, will security jobs will be high paying?
aren't 50% of severe covid-19 cases improving from normal treatment? Would this imply about a 33% improvement over standard care (modulo concerns about patient selection criteria?)
You think people would switch to bing because news sites were delisted? Many of us would be happy to get back non-official news sources back in the first page of google.
There are a lot more Twitter threads now, including this which is apparently from an organization he is involved with:

https://twitter.com/Mathematical_A/status/124905768857257164...
A TLDR wouldn't hurt much. The article seems to be circling around students not qualified enough, but still considered qualified due to Covid-19 related circumstances ("Higher education today resembles a massive Ponzi scheme. Colleges desperately recruit ever more marginal students who stand little chance of graduating.")

Also, it seems to focus on non-diversity ("Elsewhere, campus diversocrats enjoyed similarly enviable mobility while the rest of the country was shutting down", "The frenzied desire to boost “diversity” creates the pretext for much of the bureaucratic bloat. Colleges admit so-called underrepresented minorities (URMs) with academic qualifications far below their white and Asian peers.")
Earn Money Online quickly like an Influencer
Unless you're carrying rocks in it, holding a purse will not pull your shoulder down. They are saying the slump indicates the dominant side and not the effect of weight.
>Every country wants to impose its own laws on it in order to guarantee the rights of their citizens.

I think that is a very charitable interpretation of what they're imposing, though it may not have been your intent. Rather than "guarantee rights", I think it is just an attempt to assert their powers as governments. Hence the push to collect taxes on internet services, break encryption, and so forth.

But yes, we're heading toward an increasingly-balkanized Internet.
Thanks so much! I'm entering a PM role soon and this'll be a great reading list to get me up to speed.
Such a long list even without mentioning: FRACTRAN, Conway's soldiers, the angel problem, the Conway base 13 function, the 15 theorem (and 290 theorem)… incredible how he got so many mind-bending and unique ideas.

On Conway the showman: I heard the following from my friend who went to Princeton for his PhD. First day of class, Conway walks in, after some introduction, picks up a piece of chalk with his left-hand, starts at the left-hand corner of the blackboard writing quickly and neatly. Everyone thinks "Ah, he must be left-handed". When he's filled half the blackboard he smoothly switches the chalk to his right hand and continues writing just as quickly and neatly.

He told me many such anecdotes about Conway dazzling everyone; all the students were in awe of him. One of them is mentioned on the Wikipedia page for Doomsday rule: “Conway can usually give the correct answer [the day of the week for any year/month/date] in under two seconds. To improve his speed, he practices his calendrical calculations on his computer, which is programmed to quiz him with random dates every time he logs on.”

[1]: https://www.futilitycloset.com/2010/06/27/conways-prime-prod... / https://en.wikipedia.org/wiki/FRACTRAN

[2]: https://en.wikipedia.org/wiki/Conway%27s_Soldiers

[3]: https://en.wikipedia.org/wiki/Angel_problem

[4]: https://en.wikipedia.org/wiki/Conway_base_13_function

[5]: https://en.wikipedia.org/wiki/15_and_290_theorems
yer. i've always used N/2 as a rule of thumb and checked if that is a big enough number. i saw this quote from NIST on crypto exchange in regards to AES-GCM. i would usually assume 96 bit -> 48 bit would be enough but they have what I think is some pessimistic advice:

https://crypto.stackexchange.com/questions/42982/safety-of-r...

>> AES-GCM takes a 96-bit nonce and NIST says that you can only encrypt 2^32 messages under a single key if using random nonces. This is because if you throw 2^32 balls at 2^96 buckets then you have roughly a 2^-33 chance of getting two in the same bucket and NIST drew the line there. That probability might seem either high or low to you. It's pretty small in absolute terms and, unlike a work factor, an attacker can't spend resources against it, but it's a very long way from the safety margins that we usually use in cryptography.

i notice libsodium uses xchacha20 which has a larger nonce which is 192 bits size. and in there docs they say:

>> Unlike plain ChaCha20, the nonce is 192 bits long, so that generating a random nonce for every message is safe.

Not sure if they are referring to both libsodium ChaCha20 implementations. One of them is obviously very unsafe with only 64 bit nonce, but one is 96 bit the same as AES-GCM.
In what universe am I, a software engineer, remotly qualified to know how important staying at home is, or what symptoms indicate I should self isolate, or how long after symptoms I remain infectious.

Expertise is important. And so are secondary and tertiary sources who can synthesise the mass volume of raw information those experts generate in a way that is consumable by the non expert.
https://www.avinashmeetoo.com/

I'm a computer scientist in Mauritius, an island in the middle of the Indian Ocean. For the past three years, I've been working as an adviser in Government. Before that, I ran my training and consulting company. And, prior to that, I was a professor at the largest university of the country.

On my blog, I write about how Mauritius can become a smart island with smart people by leveraging technology and innovation.

My blog dates from 2010 but I've been blogging on my family blog https://www.noulakaz.net/ since 2004. This blog is more eclectic. I write about my family, sports, TV shows and movies, etc.
The twitter account oogle search doesnt back this up - this may be true but in this day and age WTF people why is this number one?
Thank you. I did note the passing of John Conway but I certainly did not associate it with the black bar. It could be interesting to make the connection more discoverable, ala Google's Doodles.
They do have the ability to walk away - just like users have the ability to walk away from Google. They can cease operations in France and remove themselves from France's jurisdiction (probably the whole EU, including their wonderful little tax haven). They did it to China once, if I remember correctly, after a series of state sponsored Gmail breaches. Don't want to pay? Don't participate.

I'm enjoying the schadenfreud even though I'm terrified of the implications for the rest of tech.
> In most other languages, these would be bundled together into an Integer Utilties package, if they're not already part of the standard library.

This is the root of all the many issues. There is no standard library. So things that are trivial to write but also dumb to rewrite every time you need them (left-pad a great example) turn into tiny dependencies.
Could you provide a TLDR which audience should consume the linked content?
A modification of the standard RT-PCR tests can be used to identify if someone has the correct strain. This really is just a matter of making a different set of primers.
These articles are very good on topic:

http://loup-vaillant.fr/articles/deaths-of-oop

https://medium.com/javascript-scene/the-forgotten-history-of...

https://www.yegor256.com/2016/08/15/what-is-wrong-object-ori...
A 2-week sprint backlog is not a roadmap. Yes, you can and should reprioritize every two weeks, but at a tactical level to better meet your long-term goals based on what you've learned since the last sprint.

A roadmap is a tool for communicating long-term direction and priorities. By making clear what the ultimate destination is, a roadmap helps you keep steady on the those priorities when doing your sprint planning. When sales says "we want this feature to close this deal," if it's something already on the roadmap, great. If it really doesn't fit with the long-term vision, you have a basis for saying no.

I wrote a book on this topic, Product Roadmaps Relaunched, Setting Direction While Embracing Uncertainty, for O'Reilly a couple of years back that goes into more detail: https://www.amazon.com/Product-Roadmaps-Relaunched-Direction...
Scala 3 could improve on 2.x struggles with supporting JDK 9 and up:

Support features of JDK 11+
https://github.com/scala/scala-dev/issues/139

Support Java Module System
https://github.com/scala/scala-dev/issues/529

In comparison language features seem to attract much more attention:

Removing existential types
https://contributors.scala-lang.org/t/proposal-to-remove-exi...

Significant indentation syntax
https://github.com/lampepfl/dotty/pull/7083
This wouldn't be much of a problem if developers weren't as reliant on frameworks as JS developers are — who for some reason love to blame others for "reinventing the wheel". What do people even use lodash for? Do you really need a whole library because you can't write a function to sort an array? This all reminds me of the npm left-pad scandal. To me the problem was not that a single package broke thousands of projects, but that thousands of developers depended on a package for such a simple feature.
They wouldn't switch but if you are on bing already looking for news you will use bing more which means google less
Quite the opposite. The core idea of anti-discrimination law is simple: Treat people the same where they are the same and treat people different where they are different. Here the example of the rough sleeping tax applying equally to the homeless and those with homes is often used to illustrate latter.
Is it safe to build a space elevator with so much junk in orbit? (2019)
Unicode Consortium's technical website experiences “catastrophic failure”
Glad you like the concept! The post, and Causal, are targeted at anyone who needs to work with numbers —

With those ad questions, there's no getting around the fact that you need to come up with a 'model' for how, e.g. incremental spend impacts CPA/position. Once you have a model you're happy with, there's always going to be uncertainty around aspects of it, and you'll ideally want to account for it. Simulation is a good way to do that.

Causal has data connections that you can use to pull stuff from your CRM. Depending on what you mean by 'optimize', we might be able to do that too — happy to chat in more detail if you're interested: taimur @ causal . app
I really wish OneTab could sync between different computers. I regularly use three different machines and hate when I can't find a Tab I saved on one of the machines I'm not currently using.
Inal either but the way the court phrases it in the press release is that google negociated a free use licence with everyone, regardless of their financial situations, using their dominant position on the market to "force" everyone.

A way of seeing this is that it might be fine for the big players for national and international news (Le monde, Le figaro ...) , but probably has a much bigger impact on small news outlet, because if they dont agree they are at a disadvatage obviously, so they cannot afford to say no, but at the same time they might already be in a difficult financial position, and that revenu might have helped.

The key part is that google had no real justification according to the court to treat everyone the same way, and that consitutes discrimination.

It seems a bit weird to me too but you could make a parallel to a school that has a set meal price for every student, regardless of parent income.This would obviously be discriminating towards the poorer students.

Now whether google is a public service the way school lunches are is up for debate but i think it basically comes down to equality vs equity
> Windows and macOS just work and don't need constant tinkering and fixing stuff.

I agree with this. After even finding the time to 'try out' many Linux distos and dual-booting Ubuntu for a long time, I keep finding myself always going back to macOS since the keyboard shortcuts just work everywhere without diving into the dotfiles or apt-getting a missing package to fix it or even Googling a weird X11 error that could be specific to my setup.

The last thing I want to do is end up spending days customising, playing around or fixing annoying issues with my computer just to get to work. I don't need to do this often with macOS and Windows. Some Linux distros however....
Anyone else with "credentials" will understand the metabolic pathways enough to have a conversation with me.

Sorry, I just do not want to post my credentials for privacy reasons.

Asking you now, are you concerned about peroxynitrite formation and are you doing anything to control it? Like IV Vitamin C?

https://ccforum.biomedcentral.com/articles/10.1186/s13054-01...
The twitter account doesn't back this up with a source - the OP here doesn't back this up this up with a source - my quick Google search doen't back this up, this may be true, but in this day and age WTF people? why is this number one without any verification?
Counterpoint: what are some things that Turbo Pascal lacked that we take for granted in a modern language environment?
Here's a playlist: https://www.youtube.com/playlist?list=PLt5AfwLFPxWIL8XA1npoN...
Yup, I locked it pending the outcome of the talk page discussion; it would be nice to have a non-twitter source to point to.
Without any content? These newspaper make up less content than a needle in a haystack.

If google just listed twitter results that would fill the information void immediately.

If alt publishers were promoted maybe more opinions would be exposed.
Because they don't want people to learn about a topic by going to Google and entering a search term and then clicking on the links that they are free to use. This workflow inherently routes around publications requiring a subscription fee unless they have something unique to offer. It also tends to drive revenue towards zero whichis an existential threat.

In truth paying for journalism going forward is going to be a difficult problem made more difficult by the fact that most of the money spent on journalism does not go directly to people who produce value like editors, analysts, photographers, journalists but instead goes to buildings and busines people.
Very nice overview. I very much agree that all these techniques are very useful. But one thing still bothers me. How does one test with a notion of time? How do you test a cron or a calendar with alarm function?
This comment seems to ignore who the "they/THEIR" are. The organization that choose not to invest in unemployment benefits IT was the voters and taxpayers of New Jersey/"name that state".

Yes, it might be nice to have voters with more foresight and long term horizons who don't mind paying higher taxes. But lets not blame some nameless profit centered corporation.
Yeah, it’s a giant mess.
It is ‘a’ solution, but in my opinion not a good one. There are a number of ways this could happen, the easiest is just to send people to the area where it was first found and look for people infected. It is technically very easy to test any sample to make sure it is the right strain.

Even if you can’t get the strain it would not be technically very complex to recreate the virus from scratch once you know what deletion you need.
I don't see the insult? He's saying that anyone who assumes that the CS program was mediocre is mistaken
Introduction to Synthetic Mathematics (2015)
I hope you take backups - I lost 500 tabs stored in OneTab about 3 years ago. Just launched the browser like always, only to see blank onetab page. It probably wasn’t the extension’s fault but browser’s (I don’t remember whether I was using Vivaldi or Opera at that time), but that day I moved to https://pinboard.in
Turbo Pascal is 3.7x smaller than the Wikipedia page describing it. Wikipedia's prose description of Turbo Pascal is 148k.
> edit war

probably, duckduckgo preview even showed "John Conway war a British" a few seconds ago. Aptly typoed
Well. You also get better binary compatibility and the possibility to do whole program analysis.

Edit: oh. And this is on top of a rewritten, faster, compiler, a unified base paradigm making it easier to learn the language, and better error messages for compile errors. I think dismissing this as as minor release is disingenuous to how much effort goes in such a large scale rewrite. Granted, most of it is under the hood but it will pay off dividend.
I am not suggesting using an orthographic projection. What I was suggesting was using a 3d earth model, which will be rendered on the screen using a perspective projection.

Does not the earth viewed from space indicate true shapes, distances, and areas?
Show HN: Generated Art
Next Step for Scala: Shutdown.
See this comment, with sources: https://news.ycombinator.com/item?id=22798543
Why do we open new tabs?

1. We want to do multiple things at once (very rare, very limited, let's say we have 5 such things, Gmail, Slack, Gitlab, monitoring, etc.)

2. We want to have websites preloaded and ready to go as soon as we get to that tab (often)

3. We want to "bookmark" links temporarily without actually saving them into our Bookmarks (this goes hand in hand with point 2. but not always)

4. Observation: large numbers of pre-opened tabs will stay opened for a very long time until we actually find the time to get to them, consuming memory, tab bar space, as well as our mental space as we have their tab icons visible.

So I think based on the above, an ideal tab management system would:

- understand "sessions/groups/trees", e.g. I opened HN and alt+clicked on links and discussions that interest me as I went through the list

- gave me an opportunity to transfer such "trees" to another browser window, session, computer

- had an option to automatically, or on a command, archive (and later restore from) these into a tab history, which would retain the hierarchy

- had other functionality that I cannot foresee at this moment

Additionally, the browser should probably load & pause a background tab once its opened using alt+click, and only run it once its actually opened by the user.

Edit: formatting
Damn, did we ever get that one wrong.
I am sure you are right, but I don’t happen to know anyone from FOX News. If you do get in contact with me.
> Germany is run by a Christian political party. In addition to no longer being able to advocate for Nazi politics in Germany, now you cannot speak about certain facts that have occurred in the past

What did I just read.
I would say having an installer that depends on 3 other languages, using a particular libc without the ability to switch it up, unable to cross-compile to other platforms.
Excess and incest were meat and drink to the Byrons
Thanks - I will look for these.
It seems like G Suite meets all the requirements listed on the blog post, but is not discussed. G Suite or Office 365 also work well as personal email providers - they fulfill all the requirements mentioned such as a custom domain, text search, and IMAP access.
> This matters because, if one is clever, it provides an escape hatch from system which is small, predictable, controllable, and secure, to one which could do anything. It’s hard enough to make a program do what it’s supposed to do without giving anyone in the world the ability to insert another program into your program, which can then interfere with or take over its host

I take issue with the statement that TC means that something could "do anything". It means it can theoretically compute anything, but Turing completeness does not in itself give access to any additional resources; being TC does not magically allow something to talk to internet or write to disk or spawn new processes, or possibly not even allocate new memory. Computers do so much more than just compute; TC might be the first step towards being able to "do anything" but it certainly is not the final step.

From security point of view, what TC can (but not necessarily!) is open the host to denial of service by excessive resource consumption, or by non-terminating program. But as another comment noted, also non-TC systems can consume impractically large amounts of resources even if their resource consumption is not theoretically unbounded (as it is afaik with Turing machines).
“Please stay at home” and soon “Please install the Covid app”
Guédelon Castle
> Google tries to bypass the spirit of the law, which is for newspapers to get paid for their content by people using their content, and Google can do so because it's in a monopoly position in search

I don't understand. Google would display titles but not content on their news site, users would have to click through to the actual news website to read the story, and thus the news site would make money off those clicks. You could thus argue that Google was paying for the titles by directing users /clicks to the site?
Ask HN: How can I make money out of forensics?
Hello, I am a person who is currently working in the cyber security field in an entry position, and I am interested in earning some side-money.

I know that for red-teamers bug bounty is a viable solution, but I do not have the appropriate knowledge for being a bounty hunter, nor do I wish to be one.

I have knowledge instead in windows and linux forensics, and I am looking for a way to offer my knowledge so that I can get payed for it. Not as a full time job.

Also, if you have any suggestions for other "blue-team" jobs that require skills not mentioned here would be appreciated.
Interesting. Would this also supersede the need to use extensions that attempt to put tabs to sleep to manage memory usage? When I was using Chrome it was always the memory usage by many tabs that caused me problems.
Not involved with causal.app, but I see it as going the other way as far as causality goes. Pearl-style models are trying to infer causation from data. Here, you give it a causal model that encapsulates how you think a scenario works (which variables affect the outcome, how, and a range of likely values for them), and it simulates your model to give you ranges of likely outcomes, plus some other things like sensitivity analysis (which variables impact likely outcomes the most). I like the comparison they make to spreadsheet models. It's that style of modeling but with Monte Carlo simulations, so you can put ranges instead of single numbers in cells, and the ranges propagate through the model to output ranges.
I have a similar take on Haskell and I do think its adherents are more clinging to a near-religious like commitment to the language and its counterproductive purity.

That said I think

> I feel learning Haskell was worthless.

is a little harsh. I suppose b/c I don't think learning (anything) is ever worthless.

Yes I'm a Clojurist, per se. I agree with even Rich Hickey who will even say that it's fundamentally not about the specific programming language.

However I do think Haskell falls into a different category. Most PLs at least make pragmatic concessions. PLs with strong static typing take a fundamentalist approach that does not give any flex and therefore I find anti-pragmatic.

But why not learn a strong static PL? Why take my or anyone else's word for it? The best way to discover the right tools is to pick them all up and wield them. If outcome is your goal, if productivity is your sincere goal (as opposed to something else like intellectual curiosity or purposeful rigidity...b/c you're, say, afraid of change) then I do think you will gravitate away from static typing in many cases. Especially in the prevalant case of development of web and distributed data systems.
Turbo Pascal is a language I've never used professionally but always has a special place in my heart. I grew up poor without any kind of a computer but always considered computers "fun". As a high school senior (1995) I took what I thought was just another computer class; they were teaching Turbo Pascal, and I immediately knew I discovered my life's passion.