skysight-inc/HackerNews huggingface dataset:
Agreed, and I hate how all of those cases get mixed together.

We need to be very clear when talking about it:

There is no abuse of H1Bs at the typical big tech companies we all know, like MSFT/Google/FB/etc. Their H1B employees get paid market rate, same as the US residents working at those companies. Those H1B employees are screwed over big time by the abusers in the category I am about to describe below and by general public who doesn't make the distinction and lumps them all in the second category. Not even mentioning the visa system that ends up screwing them due to that abuse.

Where the real H1B abuse happens is at those giant consulting companies like Accenture, Tata, Wipro, etc. They hire tons of software devs and pay them about $40k/yr, while flooding H1B visa pool and making it way more difficult for people in the first category to obtain a visa due to the sheer number imbalance.

Not only this creates a false image and leads to general public blaming the first group for all the visa abuse stemming from the second group, it makes it really difficult for the people in the first group to get their visas. There is a yearly cap on H1B, and it is much more difficult to obtain it when overwhelming majority of visa applications are filed by the latter group. For a price of one average engineer in big tech (let's say $160k/yr for easier math, even though the real number is very likely higher), a consultancy agency can hire at least 4 engineers and send 4 H1B visa applications respectively.

H1B visa is for "outstanding talent" that is difficult to find locally. This holds absolutely true for tech giants, as hiring a competent person is really difficult, witnessed it myself. But I find it difficult to believe that an "outstanding talent" would go work for a consulting agency and get paid $40k, while they can switch to a big tech company and get paid at least x4 that amount.

Luckily, it seems like the rules are getting tighter for the latter group, with their denial rates skyrocketing, while the usual tech company H1B approval rates are staying as high as usual (close to 100%)[0].

0. https://news.bloomberglaw.com/daily-labor-report/it-consulti...
I think perhaps it would be nice to apply the principle of charity (as the HN guidelines require of us). I didn't read it as "smug and gloating", more ":facepalm:".

I doubt the parent is happy about the result, but I at least would question why people would do something that would so obviously get them fired during a pandemic.

Amazon workers deserve better treatment, but, if you're a current employee, trying to affect change should be an internal process, not public. If all internal avenues seem to be failing, the smart move would be a public anonymous criticism. Whistleblowing, effectively.

It sucks that these people got fired for speaking out about something important that they felt strongly about, especially during a time of economic upheaval, but that's what you should expect to happen when you publicly criticize your employer and sign your name to it. They should have thought -- even for a second -- before they spoke.
ProgrammableWeb Launches Covid-19/Coronavirus Developer Resource Center
It's surprising to me they do it with online education. With traditional study, they prefer out-of-state, because oos students are more likely to pay colleges for housing. With online it does not make a difference though.
It should probably be renamed the Double Vision Fund.
That's only half true. Even in a country with strong worker protection laws such as Germany you can get fired for a lot more things than just poor performance. Damaging your employer's reputation can actually be part of it. I don't know enough about the laws to be able to determine whether this would get you in trouble over here, but I certainly would be very cautious doing something like that. I even read that the US has better whistleblowing protection than much of Europe.

It's however true that you can't fire without cause and that courts usually demand strong evidence for such cause. So people would be more likely to sue.

That said, I still find Amazon's behaviour totally shameful, legal or not.
> The wikipedia article you cite as evidence lists several examples where no cryptography is involved as MITM attacks.

It only lists one example about key exchange. That is different than certificate exchange, but not for the point of this conversation.
The UK's Missing 2Ts
Yes, we follow Dgraph pretty closely. It is a cool project, but it is distributed first with all the challenges (and advantages) that brings. My general impression is that they are google (or similar) engineers that are focused on solving google type problems, whereas 95 to 99% of databases or data projects don't need sharding etc. and we are in the area. In fact, we think that as main memory becomes larger and cheaper the advantages of in-memory, on even big DBs, is going to become clearer.
Unfortunately it isn't the popular vote that counts.

Hillary won by 3 million votes, but she lost by only ~80,000 votes in Pennsylvania, Wisconsin, and Michigan.
3. would have to be a new mechanism for variadic functions, that would have to be distinguished in header files from the old mechanism with which it is incompatible. So this proposal would imply some new keyword or syntax. I am not in the committee, but I don't think this is going to happen. The improvement is way too incremental to force a new syntax.

(The committee is fine with incremental improvements, but new syntax need to have strong motivation behind it, much stronger than this.)
Beautiful project, I like this idea.
This is not a good moral. You’re generalizing from one example.

Warren Buffett has made many successful investments for example, over a damned long period. There’s clearly skill in his story. Skill that Masa didn’t have.
if you vent your home cpap machine into an open room and the person using it is infected, congrats you just vaporized the infection onto anyone nearby
To be fair, both quantum mechanics and general relativity were first "seen" without the aid of the Lagrangian. (Not to dismiss its role in later developments.)
Trauma is poverty's handmaiden.

https://www.keranews.org/post/kids-living-poverty-living-chr...

Based on the abstract in the OP, the study seems to focus on acute war-related trauma. Poverty can be a kind of slow-rolling, unending trauma of its own. Not criticizing the article/headline, just a cautionary note to avoid extrapolating too much from this.
The internet is pretty good at criticizing things.
Agreed on all points, also that spring-cloud is subpar.
Also, if you're using Gradle (I usually prefer Maven), there is now a Kotlin DSL. Glad to get rid of Groovy.
I guess this is why vendors like Apple, Oracle, ARM and Google end up going the hardware memory tagging route instead.
Is there a way to buy put options on softbank from north america? Have wanted to do so for a while, but doesn’t appear possible at my broker.
> narrow strings are considered UTF-8 by default almost everywhere

It means that this is mostly true.

I dunno what it should be. There are benefits and costs on both allowing and restricting the names. As well as there are good reason for the kernel alone to support them even tough all the userland doesn't. But it does mean that you just use UTF-8 and it's done.
I'm not denying the unfortunate reality that in many/most cases in the US today, the employer holds outsize power relative to employees. If you are precarious - you don't have emergency savings or the ability to quickly find another job - then it is not bad advice in a strictly pragmatic sense to be careful when it comes to criticizing your employer publicly.

I was taking issue with the specific idiom used. "Biting the hand that feeds you" often carries with it a moral dimension, and is usually used in cases where you repay kindness or generosity with some kind of bad behavior. If your employer hires you in exchange for a compensation package, they typically do so because they calculated that your labor would provide them value above and beyond what they are paying you. It's not kindness, it's not a gift, it's not to be compared to a master feeding his/her pet dog because of love.

edit:

I'd again suggest another perspective in response to this sentence:

> Every bit of money, and everything I've bought from it, has been from my employers, from pizza delivery to robotics.

Your skills, your time and your (presumably) hard work were the source of value that you provided to your employer in exchange for money and benefits such as health insurance. I don't know your specific situation, but maybe it's possible that you could choose to provide them to a different employer, maybe for even more money.
Uber almost killed Lyft. Had it not been for the 2017 #DeleteUber campaign that started in 2017, Lyft might have ran out of money or forced to concede more US markets.
Imagine being so poor you can't concentrate on what tomorrow is. That is what being poor does to you. It robs you of thinking.
Same as OE/Œ in French, then.
Comments merged thither. Thanks!
ADO is widely used inside Microsoft, with a variety of internal extensions to integrate with our internal build & deployment solutions.

AFAIK, there aren't any plans in Azure to give up ADO in favor of GitHub. If anything, with the push to standardize builds internally, it wouldn't make sense to move to GitHub for at least another 2-5 years.

Obviously, I don't speak for my employer and leadership may have other directions in mind.
What's are the other contenders for top 3?
It's true Adam Neumann is a con - being a con, though, is not industry specific. Elizabeth Holmes is a con and investors still wasted their money on Theranos, which was more moonshot-esque emerging technology than some office buildings.

Every industry has snake oil salespeople, and the Vision Fund should have put in more due diligence with their choices.
Why was this downvoted? Do people here seriously believe that the US doesn't have a system of crony capitalism? Is it so implausible to believe that regulations, while created with the best intent, are not susceptible to corruption via lobbying by powerful corporations to keep competitors out of the market?
It's about time for unions to make a comeback.
He got lucky in a big way twice. The reason he was able to lose more money than anyone in history, is because the first time he got lucky like that was with Yahoo when a relatively small investment became worth tens of billions of dollars. He failed to sell though and Yahoo of course didn't have a sustainable position (unlike Alibaba). The epic boom in his Yahoo position is what initially made him famous during the dotcom bubble. It started the mythology of Masayoshi as a finder of those types of investments.
Yup, done. Thanks!
There are a lot of arithmetic conditions for which C could generate special code. There are div_t-related functions for the other direction. I for one would like a good way to obtain, using some Standard C coding pattern, fast "carry" for multiple-precision integer arithmetic.

Several places in support functions, I have coded unusually to avoid wrap-around etc. I bet you could devise something like that for (unsigned) multiplication.
We’ve worked with several Pulumi users who have migrated thousands of resources (including in production) from being managed by Terraform to being managed by Pulumi - so this is definitely possible.

We’re actively working on an overhaul of the tf2pulumi tool to support more Pulumi languages and more breath of Terraform project structures. But already it should support the majority of adoption use cases.

At-scale adoption can be done in Pulumi by combining transformations [1] and imports [2]. Together, these allow programmatically importing existing resources without the need for manual steps.

See the section on adopting in the docs here for details: https://github.com/pulumi/tf2pulumi/blob/master/README.md#us....

If you have more detailed questions on this - feel free to reach out on the Pulumi Community Slack (I’m @luke) for a deeper discussion: https://slack.pulumi.com/

[1] https://www.pulumi.com/docs/intro/concepts/programming-model...
[2] https://www.pulumi.com/docs/intro/concepts/programming-model...
>However, an artificial transaction limit was created

? there's nothing artificial about a transaction limit. it is p2p and fault tolerant, and there's no such thing as unlimited data storage yet. this is by design.
Qualitatively different? Probably not. Quantitatively? Yes, I think so. Bezos fooling with the Post's news-covering editorial activities would be a major scandal that would likely end with him having a very bad reputation and possibly start with a large number of the Post's journalists publicly taking a walk. But Bloomberg doesn't have that kind of integrity or reputation to maintain; this story is just another day at the office.

That doesn't mean Bezos does not have influence, nor that he won't, hasn't, or isn't exercising it inappropriately. But what Bloomberg did is discussed to great lengths in Journalism 101. That's hard to keep quiet.
I see no downside of allowing your employer to actively exploit others, simply because they're not (currently) exploiting you. "They've always been good to me", you say, "I never would have expected this."
It's a paid service, but AWS Cognito supports SAML in a similar way to Okta/Auth0 but with a much lower initial cost (you just pay a reasonable rate for what you use, not multiple thousands of dollars to get it up and running). I used it to build a SAML integration at the end of last year and have been pretty happy with it so far.
Thank you! Trying it out to see if it's something useful to more people. I have a couple of ideas that I would like to add in the future.
Who is we? I've never made a decision that compromised my beliefs or my country to benefit China.
Precautions for Intubating Patients with Covid-19
Some of this is truly on terraform. The for construct (and looping in general) was only added in TF 12, released in May 2019. Older codebases didn't have a real way to support looping so there's more copy paste there. TF supports ternary conditionals, but not true if statements, which makes adding more complicated if logic difficult.

The reality is that all programming languages have significant copy paste codebases using them, but there are features which help reduce the amount of it. Terraform is missing some of those features, and many of the features it does have were introduced in tf 12, which is less than a year old.
good CEOs create situations that allow people to provide feedback in a safe and supportive way, through things like town halls, anonymous feedback messaging, etc. so employees aren't forced into high-stakes interactions like marching into their office.
How-To Build a Docker Image Using GitHub Actions
Ah title is misspelled, page says “Gahaku”, which is a slightly archaic term in Japanese for artist/Painter with a connotation of being a highly skilled and respected master of the craft.

There’s also a sarcastic net slag meaning to the term as well but the creators are probably not using the term with that intent.
A sharp reminder that “free speech” under capitalism effectually doesn’t apply to your job, ie the thing that you spend nearly half your waking hours on and your primary way of contributing to the functioning of society. Some employers might be more lenient but Amazon is big and successful because it is ruthless in this and all other things.

This is yet another reason I think we desperately need to democratically plan our economy; which is another way of saying we need to extend democracy into the workplace and the sphere of production.
GitHub: Core GitHub features are now free for everyone
Projecting the transmission dynamics of SARS-CoV-2 in postpandemic period
Well yeah, but a lot of the criticism is baseless. For example, you have people downthread saying things like "this can't be right because it's discrete", or, "it's inherently impossible for a theory of everything to make predictions", and so on. These aren't true at all.

Every physicist knows that if you want good criticism, you need to go to people with relevant expertise. That's what peer review is!
Paper:

https://srcd.onlinelibrary.wiley.com/doi/full/10.1111/cdev.1...

If I'm reading the results table in the linked paper correctly, it seems that household wealth was only a significant predictor of working memory in the combined group and the refugee group but not in the non-refugee group, indicating a possible interaction that it is trauma that increases the susceptibility to poverty.

Also, one of the strongest predictions of working memory in all groups was gender, which may be an indicator that confounding factors haven't been broken down. For example, with gender, one would ask the question are males really that much better at working memory, or is there a treatment of male children that would result in the noted difference. In the same way, poverty may result in different treatment during a refugee event or similar mass trauma that may have a larger impact on cognitive function. A simple hypothesis would be that wealthier refugees have better access to food which means that there is less cognitive decline associated with poor nutrition during childhood brain development that occurs during a war time event.
Ask HN: Does Gitlab's website always feel slow to you too?
It looks like ShapeCPU originated around 2012 but only made it into posters, not papers. It's kind of a shame because I spent quite some time reproducing their work to confirm that it was viable, then building on top of it with HideCPU.

Lots of prior art in that implementation!
Sadly they just followed online+offline trends. Thought WeWork is barely a software company. Their soft is very low and horrible feels like it's been written way before WeWork was actually funded.
Podcast: Gaining the Focus You Need to Code During Covid-19
Intelligence officials weigh possibility coronavirus escaped from a Chinese lab
This is a really tragic tale: a young person is bludgeoned into accepting a status quo as inherent, rather than something they could ever change.
Google readies its own chip for future Pixels, Chromebooks
A sharp reminder that “free speech” under capitalism effectually doesn’t apply to your job, ie the thing that you spend nearly half your waking hours on and your primary way of contributing to the functioning of society. Some employers might be more lenient but Amazon is big and successful because it is ruthless in this and all other things.
This is yet another reason I think we desperately need to democratically plan our economy; which is another way of saying we need to extend democracy into the workplace and the sphere of production.
Try Pascal (free pascal or Delphi)
College isn’t free yet, but Savi raises a $6M Series A to assist student loan
Well, sure, a missing function will cause the program to fail to function. But what has this to do with the discussion?

The copyright of the program is clearly mine. The copyright of the functions linked into my program is that of the functions copyright holder. The license regulates my right to link the functions in my program. But unfortunately, the license tries to affect my copyrights to my program parts.
I've known about ArduPilot for a long time, never even heard of HoverflyOpen. The only reference I found for HoverflyOpen is this:
https://www.parallax.com/product/31500

Comparing that to the ArduBee isn't really much of a comparison. The only advantage I see is that HoverflyOpen currently exists, while ArduBee looks like they are still in the preparing-to-Kickstart phase.

If there's more out there for HoverflyOpen, please share it. I'll admit I didn't dig around much.

ArduPilot is a well-known and battle-tested platform.
"The vulnerability is that an attacker can perform a MITM attack by spoofing an HTTP request pretending to be from store.steampowered.com".

The blog post writeup isn't the best in the world, but the actual H1 submission seems fine.
Could be inherited from arabic as cited by another (does all western numbering system derive from hindu-arabic?). What really intrigues me is why specially the tens are reversed. If it were some practical utility or reliability feature (saying the most important first/last?) I'd expect a fixed order throughout. Maybe it's just a random irregularity.
> There's never been much of a push factor into simplifying the script

No, actually there was two pushes in modern times. One advocating the use of romaji (or even French) which did not succeed.

Then there was a set a post-WWII reforms that aimed to simplify the script by: standardizing kanji use (eg 言う instead of 言う or 云う), standardization of kanji readings (当用漢字), kanji stroke simplification (新字体), dropping the old kana usage (旧仮名遣), standardization of kanas themselves to get rid of 変体仮名. The convention also shifted from using katakana everywhere where kanji are not used to the mix of kanji/hiragana/katakana of today. So yes, the Japanese script changed quite a lot recently.
Super TL;DR: We don't know yet
> Our rights are always there, but often violated.

That sounds like 18th-century thinking. In that era, "natural rights" seemed a reasonable notion because people could agree on the existence of a higher authority (even if it was a pretty aloof Deist-type God) that bestowed those rights inalienably on each and every person. But that idea has become increasingly discredited, and in the 19th century other schools arose with their positions that "rights" are merely an invention of human societies for the purposes of those societies.
Coronavirus distancing may need to continue until 2022, say experts
Nest Downgrading Camera Video Quality in Response to Covid-19
Yes, I have found it helpful. One nice feature is that it uses a character-terminal interface, not a platform-specific GUI.
Can anyone translate the text?
> 2. The App fails to validate that it is actually communicating with The Store by not using https

That is the software defect, and that alone. Everything else is completely working as designed even if the results not expected. That does not rise to the level of a MITM.

> 3. Thus, an attacker with control of an external network (e.g. a coffee shop wifi) can "secretly relay and possibly alter the communication between The App and The Store who believe they are communicating with each other"

In that scenario the store would never believe it is talking with one of its user's because the traffic was relayed to an alternate location. Therefore its an impersonation and not a MITM.
How to Write Your Way Out of a Pandemic
This is mentioned in their site. Seems they've identified it.

>Currently, we are confirming that the output of the AI artist has been biased.
We hope to use a wide variety of learning data and increase the diversity of output in the future.
> I don't know if I agree. Overflow is like uninitialized memory, it's a bug almost 100% of the time, and cases where it is tolerated or intended to occur are the exception.

Right, but I think the problem is that UB means literally anything can happen and be conformant to the spec. If you do an integer overflow, and as a result the program formats your hard drive, then it is acting within the C spec.

Now compiler writers don't usually format your hard drive when you trigger UB, but they often do things like remove input sanitation or other sorts of safety checks. It's one thing if as a result of overflow, the number in your variable isn't what you thought it was going to be. It's completely different if suddenly safety checks get tossed out the window.

When you handle unsanitized input in C on a security boundary, you must literally treat the compiler as a "lawful evil" accomplice to the attackers: you must assume that the compiler will follow the spec to the letter, but will look for any excuse to open up a gaping security hole. It's incredibly stressful if you know that fact, and incredibly dangerous if you don't.
FAUmachine – A Configurable Virtual Machine