skysight-inc/HackerNews huggingface dataset:
i think it's where the glue goes. do you implement an algorithm/write a generic library in c and then glue it to your high level language in your high level language, or do you write a plugin for your high level language in c?

in both cases you need to understand pointers and function pointers and the difference between your integer type and a c int, but in one case you're at home while you do it. in one case, you could plug in to any existing c library without writing additional c, so if the problem is already solved you just use the ffi and you're done. in the other case, your problem is just beginning
It was probably iGware's or Acer's CVS when it was hacked, if I'd have to guess.

RouteFree->BroadOn->iGWare->Acer Cloud Technology (as of 2011, now just a business unit)
Presumably the same, within a rounding error.
It's unfortunate the tally is below that because each time I try to scroll past the chickens I come out the other side with motion sickness.
Uber and Lyft face landmark lawsuit over gig worker classification
Would it be any different? I mean, we breed as much food animals as we slaughter, the only difference is a time lag e.g. today's number of slaughtered chickens should match the the number of chickens bred in March; today's number of bred chickens will be a bit different than today's slaughtered chickens if farmers expect that in June people are going to eat more or less chicken due to Covid or something.
> Or professional airbnb companies which purchased real estate that's only economic with large revenues, financed with leveraged mortgages, many of these companies are set to collapse in a 3-month shutdown, let alone a 6-month low-activity industry. A lot of these will be folding and selling their properties.

I wonder how this is or will impact the real-estate market? Are enough people going to foreclose without interested buyers that the market takes a plunge?
Thanks for the link. I'm rolling my own for a reason. I'm working on not only an Oauth2 implementation, but also a specification for using Oauth2 for filesystem operations (btw if you're aware of such a thing existing already, I'd love to hear about it). So I need to be intimately familiar with Oauth2. I wasn't originally planning to use it, but ultimately it's close enough to what I need, and for better or worse users are familiar with the flows.
Because the concept is category-theoretic in nature and they wanted to foreground that.
Many times employers will make statements like this for better PR (always leaving out that they were required to)
The best way to give drivers better treatment is to make sure a competitor like Lyft is around. A driver to them is worth more than a single customer.

I've also never encountered a driver that actually complained about Uber/Lyft. As far as I know the conditions with Uber/Lyft are still much better than with cab companies of days past.
TCP is fine. There is some questionable things here and I'll just touch on a couple of them.

1) TCP checksums are a bit weak.

The author claims that we don't know how many errors are not caught by TCP's CRC and while that's true on some level the probability of bit errors is driven by properties of the physical medium over which the packet is traveling, not the transport layer protocol in use. That's why most, if not all, physical layers that do have a significant chance of bit errors have FEC built-in at the physical layer.

As a point of reference, I pulled stats on one of our servers and see about 10k bad packets out of 1.3 billion. If we assume that bit errors caused all 10k, we get an error rate of about %0.00076. Since we need two independent bit errors to trigger a state where the CRC might not catch the error, we can calculate that on this particular server we would expect .076 packets that might be corrupt in a way in which it's even possible for the existing checksum would miss it (and it probably would still be caught). If that is an unacceptable error rate, you should absolutely be using some way to verify message integrity at a higher layer. Still, for most applications, a fast hash that lets a bad packet through every couple of years is a good trade-off.

2) TCP's over-eager in-order delivery

The author talks about getting packets 1,3,2 in that order in the context of a file transfer, and in that specific scenario, it might be marginally preferable. Far more likely than out of order packets are lost packets and lost packets may never come if the connection gets closed/reset before its retransmitted. For the vast majority of applications having a partially transferred entity isn't helpful, but not having to deal with the complexity of out of order and partial transfers is.
Agreed, it definitely sounds like they are paying for it
The cultural significance of the name is pretty ironic: https://en.wikipedia.org/wiki/Nazar_(amulet)
Honestly, STFU or leave like Tim Bray! Join the ACLU! :D
Amazon is trying hard to replace its foremen / women with computers. Maybe AWS will develop a nifty web service that allows all of us to shift people management to software.
“The thing I have noticed is that when the anecdotes and the data disagree, the anecdotes are usually right. There is something wrong with the way that you are measuring it.”

— Jeff Bezos

Trusting your eyes over people with replication rates in the 20-50% range (ie, social scientists) is probably a rational choice.

There’s plenty of evidence that polls have systemic inaccuracies — question phrasing, people giving “right” answers, etc.
yea. you support features / ages / percentages, not version numbers. whether there are 2 or 20 doesn't really matter.
I wrote a CSS rule to hide it, and the Google changed their DOM structure so it broke. Then I updated my user stylesheet, then they broke it again.

I don’t have the energy to continue, so I’m left with that classic software dilemma: good underlying technology, or good UI.
That would probably have been clearer to newbies, but they already had a complete terminology ready to go from category theory and it's not hard to remember "Functor ~ Mappable". Plus, "obvious" names break down once you start building up hierarchies of these properties. One of the reasons people have a hard time communicating the (simple) ideas behind other algebraic objects like Applicatives, Monads, etc. is because it's hard to come up with short, self-descriptive names for them. The search for such names has resulted in several famously bad analogies, such as "a Monad is like a Burrito".
I think it’s highly unlikely that an upstart is going to steal a noticeable amount of market share from AirBnb during this pandemic. It would be hard enough during normal times when travel volume is much higher.
https://variety.com/2020/music/news/california-gig-economy-a...
If someone sticks a gun in my face and gives me a choice of wallet or hospital, do I really have a choice?
While I don't want to seem like I'm wishing unemployment or hardship on anyone, the implosion of Airbnb is already causing a rent price correction that was sorely needed in many cities that have become severely unaffordable.

Wired published an article about this effect in London [1] and I've seen price drops as much as $500 for condos in the downtown core of Toronto on Zillow already.

https://www.wired.co.uk/article/airbnb-coronavirus-london
Airline crews coming together to support health care professionals
Disclaimer: Used to work at a ride-sharing company.

It actually benefits the drivers to have Uber set prices. Uber's revenue is a percentage of drivers' earnings, so prices that maximizes driver revenue maximizes Uber's revenue. It's very easy for individuals to set prices in-optimally which means they either lose out on surplus (priced too low) or can't find riders (priced too high).

To me, the most important aspects of independent work is to set one's own schedules, hours per week (0 for as long as I'd like), and not bound to work for any single company. Though I might be biased because of the disclaimer.

edit: grammar fixes
Are we aware how many engineers were affected?
people in general have been bombarded with scaremongering for two months now, no wonder they are scared witless,

had they been shown this graph on who is at risk they would support different scenarios

https://www.statista.com/statistics/1105061/coronavirus-deat...

and even for old people the majority of death are for those in nursing homes - old and very frail

the overwhelming majority of the rest of the population is has an extremely low risk. Our focus should be on protecting the nursing homes not locking up everyone.
Any time you classify traffic lights for a captcha you are doing just that, you are being asked to do something by a robot because it is not so confident about their own results. We are just starting to be the cheap labor of robots.
Indeed, but more people isn't good for its own sake. Lest we forget, California produces almost as much in its economy as the UK does with 2/3rds the people. We are more forested, we are more people-efficient, we are just as power-efficient, our energy comes form just as good sources. They need to step up. Our conditions here will not last forever and it is time for them to reforest, and pay the debt they owe the Earth.
There can be some weird situations that you need to be careful of. For example, if you jump on your partners PC, log them out of their Firefox account and log into yours, all of their passwords / history etc gets merged into your account. You need to learn about Firefox profiles to get around this.

Also, the old Firefox had a way of clearing all saved passwords from the Options menu. This is now gone, you can only delete a single password at a time. You need to enter the following URL into the Firefox browser, which will let you clear all your passwords: chrome://pippki/content/resetpassword.xhtml

I personally use KeePass, but I like having the passwords saved in Firefox so that they are accessible on all my devices.
Thanks! I had no idea how to check if it was still the case.
> However, how can striking SWE effectively bargain for other people?

It seems like it should be possible, if FC workers are involved, for SWEs that have the means to go without pay for a while, and greater financial leverage to strike on behalf of FC workers who are more vulnerable, and the FC workers determine the terms. Not that organizing something like that would be easy.
"(−1)S∗1.M∗2(E−127)
How everybody hates floating point to be explained to them."

Now I know I'm weird, as that formula makes sense to me.
worth noting that this severance is vastly more generous than you'd get from statutory redundancy in most (all?) countries.

the UK is one week's pay for every year, but with a maximum of £538/week and a maximum of 20 years for length service.

given that a software engineer who's been at AirBnB for two years is going to get 16 weeks of pay and probably makes _at least_ 180k/year, they're probably getting around $55k.
> The way that AWS is tossed around/described almost makes it feel like a class-gap between Amazon employees. "Oh, don't worry, you're with AWS, we pay for our employees parking and give them healthcare, you're not part of those Amazon shlubs who have had articles upon articles released about how poorly they're treated."

I Google around a bit, and found this article [1] from 2017 where an Amazon VP commented that his benefit package is the same as that of warehouse workers.

> For my more applied response to "run as a startup" being bad - after working in 10 startups and losing half of my lifes holidays/weekends/etc launching apps that never make money just sounds like you're going to try your hardest to work me to burn out. So, I don't really like that sentence nowadays even in non-AWS worlds.

Thanks for sharing that. I'm not trying to convince you either, just sharing my perspective to ensure a balanced discussion. When people say "run as a startup" I think they mostly refer to the positives, i.e. having a lot of autonomy and a surprisingly low amount of politics (for the size of the company). People at AWS work hard but it's not crazy and from what I've seen it certainly doesn't rise to anywhere close to your startup experience. One particular about work at AWS is that if you're in a service team you'll be oncall for some amount of time each quarter. Operator culture is very important here. Oncall duties will vary by team, and I think workload will also be different for different teams.

In my experience (having worked at a startup myself too), I think the biggest two differences between a startup and AWS are: i) AWS actually has processes (called "mechanisms" internally) and they generally work, ii) when you're building a product, it will usually be successful. This is because the process to get to a product definition (the "working backwards" process) is extremely rigorous and rarely results in products or features that are duds.

[1] https://www.businessinsider.com/amazon-employee-benefits-201...
Nanopore sequencing, Shasta toolkit enable de novo assembly of 11 human genomes
Not sure how much I can trust "AWS Gurus" about actually building SaaS products in a real world at a real company.

It's all good advice, but please provide me with the money, and resources necessary to do it all.
The layoffs at Airbnb cast a dark shadow over Silicon Valley
PHP was intended to be a quick and dirty templating language for the web, not for C programs. It was always intended to be directly embedded in HTML pages; remember, it came from the era when the assumption was that most pages were static and you only needed to embed a bit of dynamic code to make everything awesome. A natural side effect of this is that PHP programs aren't like programs in any other language: technically, they're a web framework and a templating language right out of the box, and they always start execution from ground zero at the start of an HTTP request. In some ways this is great, but in other ways it, well, isn't; implementing a front controller pattern for your MVC framework means writing code that subverts that design, as well as loading configuration and performing initialization for the entire application on every request. (Yes, I know modern PHP caches opcodes and data and I'm sure many modern frameworks are very clever about lazy loading, but no matter the cleverness they may employ, PHP frameworks simply have to do more work per request than frameworks written in languages that get all the setup and configuration out of the way once.

While the criticism that the "Fractal of Bad Design" post is eight years old is fair, the criticism that the author "doesn't understand PHP" isn't; it's very clearly written by someone who understands PHP and is frustrated by it. Not all of the criticisms are still true, but PHP's huge popularity means that it's very difficult for them to change the language design in ways that truly break backward compatibility.

PHP's biggest advantages, I think:

- it's actually still very fast, particularly if you use a well-optimized framework or (gasp) don't use a framework at all

- it's super easy to deploy, especially for small-scale sites where "first, build a Docker container" sounds like the tech equivalent of taking the Harrier jet to pop over to the grocery store

- it's got a pretty robust ecosystem around it at this point

In my extremely subjective opinion the closer you can come to PHP's laser-targeted ideal of "minimize the setup and just get going," the better off you are, and if you find yourself routinely invoking multiple factories to create dependencies to inject into your inflected reflected dejected container it may be time to either investigate a dynamic language that is not trying to become Java or to just, you know, use Java, but again, that's just me.
What "bad work" were people doing before Uber and Lyft? Were all of these people previously unemployed before these companies came around? Did any of these drivers quit other employment to be an Uber or Lyft driver?
That's how life works, yes. In what scenario are you not responsible at all for understanding the legal situation you put yourself in?
Warehouse giant seeing insatiable demand from Amazon, Walmart
According to https://shieldgeo.com/terminating-an-employee-in-france-a-gu... it would rather be roughly 1 week pay per year of seniority.

However it is hardly comparable as unemployment benefits would kick in (on average 72% of your previous salary after taxes, maximum duration 24 months with decreasing amount).
For instance if you worked 3 years and your annual salary was 80k, you could get a benefit of 57k over 12 months.
Jeebus how is this possible - is our supply chain that fragile that things like hand sanitizer (that you can make with alcohol + aloe gel) and freezers run out?

Why is there no increased demand-driven supply on these things?
It used to be standard operating practice as an attacker to close the holes through which you yourself gained access to prevent others from taking your prize.

Ironically the most secure and cheapest thing a company could do was get compromised by a competent attacker who only wanted to launder small amounts of data or CPU cycles through your network, and in exchange keeps your servers all patched and up to date for you to keep out other attackers.
Regarding the configuration and failure modes, I think something like CDK could be a great way to set all this up in a more familiar and readable way

https://aws.amazon.com/cdk/
Client registration is so that (1) the authorization server can obtain the client type (confidential or public), then, (2) if appropriate, obtain the client's Redirection Endpoint URI, so that the authorization server's authorization endpoint can avoid needing to be an open redirector, and (3) to obtain any metadata that the authorization server will display to the resource owner just prior to them approving or denying the authorization request. The spec explains this [1].

Also, service providers who are custodians of the resource owners' data want you to be accountable to them and their users, so they want to have some information about you.

There's a proposed standard for dynamic (and/or programmatic) client registration [2]. While there are some interesting use-cases, it offers little benefit to a service provider who wants to vet clients (or appear as if it did).

The spec contains some design recipes if you want a loose association between which clients are allowed to receive data the user approved (i.e. implicit grant), if you care little about whether the user trusts your app (i.e. resource owner password credentials grant), or if you care little about user approval (i.e. client credentials grant). The catch is that your unilateral opinions are insufficient: the client and service provider need to be in agreement about whether these are okay to use.

And, as is often the case with "kitchen sink"-type specs, these other usage modes muddy the waters around the safer and saner usage modes, so much of the current advice on OAuth2 focuses on dissuading their use.

[1] https://tools.ietf.org/html/rfc6749#section-2 [2] https://tools.ietf.org/html/rfc7591
It sounds like the author wants a protocol that allows for arbitrarily-sized datagrams, with the ability to interleave the transmission of those datagrams across a some shared master connection.

From my relatively-inexperienced perspective, notwithstanding the widespread protocol ossification of Internet network infrastructure, the underlying MTU for each connection seems to be the primary constraint that any viable alternative must deal with effectively. This article did not seem to discuss MTU considerations at all. It's hard to take a protocol argument seriously that neglects to deal with such a fundamental constraint of network infrastructure.
No. Depending on the signature you trigger one of two things will likely happen:

If it is an allied partners tool, they will reach out to the other intelligence agency and deconflict. The other agency will confirm access and share with the US.

If it is a foreign toolkit (Iranian in this example), they have likely reverse engineered the tools and will piggy-back on them to access your system. Another option is 4th party collection where they use access to Iranian networks to siphon off the data the Iranians have collected on you.

If either of these turn out to be bogus, it will be treated as a false positive and they will reinfect your machine ignoring the warning.
You can’t have your cake and eat it too. If you withdraw your labor from an employer, and can’t act as though you have some ongoing exclusive right to provide that labor. By the same logic you provided, the organizers are harming the class of all people willing to take the employment on offer. When seeking employment, you have no onus at all to first check with the class of all potential candidates for that role to determine whether they all consider the tabled offer to be fair. The only judgement you have to make is whether you do.
Faking It: The Obviously Dubbed Telephone Ring
Contractors aren't payroll, they're technically AP/suppliers. If you do payroll, you pay taxes - it's the law.
At least they aren't doing it the wrong way, like when some big companies need to clean house a bit, they move the office to a new location quite distant from the current one. In the process they reduce the office size from 50,000 seats to 30,000 because they've estimated that amount of people will resign rather than endure a 4 hours commute... But officially :

> totally you still have your job if you want, we are not laying you off, but I need you in the office everyday... Or you could resign if you don't like the new location...
It's pretty bold to claim any and all price drops are directly attributable to Airbnb when in the middle of a recession causing pandemic that is heavily impacting normal housing/rental market activity.
You do realize we’ve been waiting it out at home since early march here in CA? The only real reason why no of deaths is not through the roof yet. If you divide number of confirmed (!) covid deaths in nyc by total pop it’s already over 0.2%

Edit: actual calc i did is 13k confirmed deaths in nyc / 70% herd immunity magic number of 8.4 mil
So of the people with smartphones, who also carry them with them everywhere, and allow location services, and somehow were added to the dataset of anonymized user location data, presumably by using crappy "free" services, compliance is low.

Well golly gee. People that don't care seem to not care. Meanwhile I haven't seen my friends and family in two months and have a locked down mobile device that doesn't even have the google play store on it, for privacy.
The headline is very misleading. The author says that web searches by people thinking of moving out of San Francisco are up.

That's very different than actually leaving.
The SBA may release more guidance but as of now payroll costs over $100k are not included in the calculation of the eligible loan amount. They have not been excluded from forgiveness.

However, the forgiveness penalties for reductions of more than 25% in wages/salary for employees does not apply to employees making over $100k.
Just an interesting bit of human psychology: a motorcycle could be either gender as it's strongly analogous to a horse, but a car is always female.

In languages with gendered nouns, objects which can have humans inside of them (e.g. cars, boats, houses) are almost universally female (presumably because females have wombs), and this leaks into English pronouns as well.
A lot of companies do stack ranking every year regardless of whether they're doing layoffs.
Is revenue per employee some sort of standard measure in the industry?
Spike mutation pipeline reveals the emergence of a more transmissible SARS-CoV-2
File a bug report with JetBrains.
Wow, SF might have been awesome.

It's a real shame those regressive activists prevented progress.