skysight-inc/HackerNews huggingface dataset:
I wonder if domain email can look pretentious or confusing to non technical people. I own a few domains, including <firstname><lastname>.com and <initial><lastname>.com but I don't work in IT (I'm an accountant), and don't have a business, blog or website. I bought the domains to keep them from bulk squatters.

I set up email with fastmail but I don't use it much. I assume people will look on them as some sort of vanity address.

I probably should migrate my most important logins to my domain email, though.
How to solve the Z-index issue within a minute
PS Plus May 2020 PS4 Games Confirmed
Block JavaScript on Some Websites to Prevent Annoying Email Tracking
What a jerk. Sorry that happened to you.
> he tweaked the code, adding an auto-spreading feature that would send copies of the virus to victims' Outlook contacts, using a flaw in Microsoft's Windows 95 operating system.

What's the flaw?
Michael Burry
This isn't rote memorization at all. They're typical real-world problems to solve, and the point is to ensure the candidate can "think their way through" the problem to come up with a solution: not to come up with a solution using a specific function or keyword.
> These days we could track every single step in this product supply chain far more effectively with a crypto-based, blockchain approach.

You can solve precisely none of the problems with a blockchain approach.

A blockchain might be used to implement a tracing system, but the blockchain is "just" a storage and query layer, not the interesting and hard part of the problem that needs to be solved.
Libplist's new XML parser has numerous bugs (2017)
The motivation as proposed was to reuse already existing and certified STS (Space Shuttle) components in the next generation rockets, to reduce costs. The Falcon rocket family did not exist at the time that the SLS was proposed and green-lit.
We are a small company and we use Ubiquiti Unifi gear for that; for now including the supplied RADIUS server. We do have a domain, but for something that public as Wifi and VPN passwords we went with separate credentials.
We've had famine and war for as long as I can remember. Pretty sure plague and pestilence are the late comers to this party.
Yes, but the original discussion was declarative vs imperative, and tests were introduced only as an analogy by gp. I just showed that it doesn’t really apply, it was not a question on how to test in general.
Of course, I just try not to step on them.
I initially decided against posting the video because the thread has a small amount of discussion.

Mainly the link to related work: Seven Sketches in Compositionality, https://arxiv.org/abs/1803.05316

Edit: previously on HN: https://news.ycombinator.com/item?id=20376325
Intel set to purchase Israel's Moovit for $1B
I completely disagree. A good full-stack dev knows SQL pretty well: at least well enough to be able to work through the general questions in the document. Good SQL skills are essential, and the lack of good SQL developers I would attribute mostly to ORMs that abstract it away so mediocre developers can mostly ignore it (which makes the job a whole lot harder for people that actually DO know how a relational database works, and give it the respect it deserves)
I don't love them. They're useful/convenient if you need to support older or edge-case browsers.

When I can get away with it, I'd rather use plain CSS.
Calling platform functions are always unsafe. In the case of malloc, the standard library wraps calls using a safe interface. This assumes that malloc is implemented to spec because there's no good way to handle it otherwise.
I would guess so, too. In my experience, they do strive to be CF, the CS parts express mildly/are few and far between and often are accidental.

That makes using a CFG parser practical and hacking around the problems caused by CS does not take much effort.
Svelte/Sapper
Depends on the transformation. Dropping a couple of columns in a wide dataset is extraordinarily ugly in sql vs anything else, for example.
There's a lot of enthusiasm around Rust on HN (I share a great deal of it) and it's probably a bit excessive at times, but here it's about a safety issue with Rust which is not exactly good publicity.
> preserve institutional knowledge about building rockets

No it would be "preserve institutional knowledge about building OUTDATED rockets"

If you are a tech company are you going to run your own outdated servers at 10x the cost because you would like to preserve institutional knowledge about running outdated hardware ?

Your argument would be correct if the cost difference was not that huge, the fact that it is so huge indicated that the tech they are using is very very outdated. No point in preserving anything about it.
It does get tiresome. Is it deliberate, or are random people just trying to get some filler for their CVs?
MARVEL: integrating with Norse mythology before it was cool
Cyberpunk, being broke and writing a virus to steal access passwords -- and then he ends up running a phone repair stall, even more cyberpunk.

Reminds me of rtm's chapter in the book CYBERPUNK by Katie Hafner, pg's in there too. Except neither of them are now broke and running a phone stall in Manila.
The Sharpe ratio should be mentioned here. It allows an apple to apples comparison between the performance of different assets in terms of expected return against variance (risk). In an efficiently priced market, assets will be priced to lie on a straight line of unit return vs unit risk. The line itself passes through the y-axis (zero risk) at a point called the 'risk free rate'. This is a hypothetical point but a close proxy in the real world is e.g. US treasury bills. In the game, I assume the bank always pays interest on deposits so it _is_ the risk free rate (0.05%).

Plotting the different strategies, then fitting a straight line (passing through the risk free point) would allow us to say "strategies falling above the line have market beating Sharpe ratios and strategies falling below are underperforming".
Super late, but AAPL arguably shouldn't be within 10% of it's all time high. Arguably it is at the current price because of unprecedented swift and decisive action on the part of the federal reserve and congress.

The Federal Reserve slashed the federal funds rate to near zero and starting "unlimited QE". Neither of those actions amount to buying equities directly, but them taking such an active part in the corporate bond market (they now have the ability to purchase investment grade bonds, though they hinted in a recent meeting that they didn't actually purchase any) has done enough to spur companies into raising cash.

Congress's CARES act and other bills actually lend 4.5B (500B leveraged up ~10x) to corporations with little oversight.

On top of all of this AAPL actually has a ton of cash on hand, so they are arguably a better buy than other companies. Arguably the downturn in march was panic selling and/or selling to cover margin requirements, but with the uncertainty on how the virus would affect various industries and for how long, de-risking is worthwhile.

Also, no need to spend massively on hedging -- hedge according to your risk appetite.
I don’t understand: are Haskell or Scalia trees cache-friendly at all?

The reason people don’t use trees is because it’s hard to make them memory-local. Otherwise it’s obviously easier to conceptually understand.
Thanks! I've indeed used clojure for some personal projects.

Didn't think about requesting code from the Backend to the Frontend, which sounds like a reasonable use case.

However this hasn't been posted by the author as it seems so there probably won't come any answer about their use case.
Never attribute to stupidity what is adequately explained by opportunity cost
https://news.ycombinator.com/item?id=23043758
It doesn't give the productivity that GC allows for writing GUI code and UI designers.

Imagine having JetPack Composer, SwiftUI, Qt designer, or WPF/UWP Blend in Rust.
Years ago, I added Dorobō to Nomad List
That was a great read, thank you. Though, if I publish a book, and everyone pirates it, how do I buy food?
Dangless Malloc (2018)
Shrinking my static site
OS X/iOS Entitlement Database
+1 for MikroTik. Super good value IMO - especially in a home or small office environment.
Hi. FYI feedback is it’s own plural. You use ‘feedbacks’ multiple times on your homepage and in the product and to a native English speaker this sounds very wrong. Given this is the core basis of your product, you may want consider changing it.
AppImage is not at all easy to create for app devs because there's no SDK, unlike FlatPak and Snap.
Ask HN: Has LinkedIn Apply and 3rd party websites overcome applying over email?
I have been using linkedIn for some months now and have also found my current job through it. Still I noticed that when applying you most of the time get redirected to 3rd party websites or use linkedIn EasyApply.

I dislike this because I need to share sensitive information, keep track of accounts, get spammed by notifications and be one of hundred applicants in an UI.

What happened to conventional email apply? Would you use a tool that utilizes job search from linkedIn but gives you the ability to apply over email? Does something like that already exist?
Needs more details on the tagging traps along with any suits that are too thick to get pierced by their stingers.
> The CAs are hard embedded in the core snap.

That is ridiculous. Thanks for the info, yet another reason to stay far away from snap...
What is a “short” UUID?
Pandemic Resilience Roadmap
I can't find the full funding breakdown, but I'd guess Obama contributed more. Purely as he had 8 years to Bush's 5 though.
What was bullshit about killer bees?
Germany may be heading toward its third summer of drought
But do we really need those C*O jobs and increased shareholder value? Probably keeping many of rocket science jobs could have been cheaper for taxpayers. But no one cares about that today, our children will be paying our debt, not us.
> He also created a title for the email attachment that would have global appeal, tempting people across the world to open it.
"I figured out that many people want a boyfriend, they want each other, they want love, so I called it that," he said.

Great product management
Disjoint Sets (& Why I Have a Favourite Data Structure)
I had little hope for Bridenstine when he got the position, but I must say that I've been impressed time and again. That video was absolutely terrific.
This is another form of marketing Rust, in itself Rust has a steep learning curve and not developer friendly so require constant barrage of hype. It relies on C++ based LLVM for generating binaries like many other languages and underlying unsafe C library for doing anything useful.

It cannot yet be used extensively in Firefox for what it was designed, hope it can accomplish its primary goal for building Firefox sooner.
How to prevent code reviews from slowing down your team
> I have only understood that it is a small proprietary OS running underneath the user's OS.

It's not running underneath the user's OS. Both Intel ME and AMD's equivalent run on on a completely separate processor; think of it as a small CPU hidden next to the main CPU. This means that, for instance, "increased CPU usage" will not happen.
Here in Austria, a Döner is usually 2.50-3.50€. I would be surprised if it were more expensive in Germany (expect for tourist traps)
TimeMachine backup taking a long time? Exclude caches
Ha I'm in the same boat as well. Locked out of my first ever Gmail account and thank the stars that I had this forward everything set up.

Every few months, I try the recovery process again to no avail. "Sign-in with Google" is very convenient so it'll be a pain to move to proton + outlook but c'est la vie
What will that accomplish though? The way he described their auth APIs, you will be able to set an auth token generated by you for an account that you anyway have the user credentials for.
Same here. I think the issue is the charger connector is on the bottom and they sit there with it rammed in their stomach at one end and tugging the other end. I don’t do that and mine have always been fine.
"Outdated" also means well-researched, well-tested, with very little unknown unknowns. I do not mean "safer", necessarily - but the data about how safe they are is much more reliable.

> If you are a tech company are you going to run your own outdated servers at 10x the cost because you would like to preserve institutional knowledge about running outdated hardware ?

As a startup CTO, I will think twice about using the freshest framework or programming language, which is sexy and cool - just because I haven't seen enough people use it long enough yet. I will build a hobby project with it and love it, but or a small product that is allowed to fail, but I will not start an important new product with something like that.
The unsafe beast hides in unexpected places. That being said this one is not too bad in my opinion, it's fairly unlikely to occur accidentally (if you use no_mangle you're probably dealing with unsafe interfaces anyway) and it doesn't really invalidate any of Rust's core principles and models, it's more like a plumbing issue in the linker.

It would be nice if these programs failed to link however.
> Or they might feel that someone who is ok cheating at a zero-stakes, zero-effect game might not be a great person after all. It's the difference between, say, cheating your taxes purely because you want to be rich vs dodging your taxes because you have to feed your family.

I don’t cheat at Animal Crossing. No real reason not to, I just don’t feel like it. I am not in a rush or anything. But to me, Animal Crossing is (and I mean, to be fair, literally is) a computer program and “cheating” is really just “using in unintended ways” that are not really much different from modding games (that are not intended to be.)

I can’t tell if you are playing devil’s advocate or not but I view this argument as being pretty much projection. I think everyone should feel guilt-free to explore video games and the arts however they enjoy so as long as nobody is directly being harmed by it. I personally would bet the farm and some change that there’s no correlation between cheating in Animal Crossing and “not [being] a great person.”

And I’m not saying this as though I view video games as purely being software and experience absolutely no emotion. I am pretty much saying that for Animal Crossing, but there are plenty of games where I felt very immersed and felt empathy/sympathy for characters the way I would in other realms of fiction and indeed, real life. I couldn’t do “genocide route” in Undertale, for example. But, that also does not mean that I engage in this stuff as if it’s real, because of course, it’s not. It’s fiction. It’s walled off into its own space where I can explore and experience things in ways that I probably wouldn’t and maybe would not want to in real life. I certainly do not condone my actions in Grand Theft Auto as good, but I assure you I am no closer to committing such offenses in real life.

(Aside: I think the video game violence debates are equally fascinating as a subject matter, on that note.)

I am also not at all suggesting how you consume this content has no bearing on reality, but I am certainly saying I believe it’s very non-trivial and fair to handwave as being too complicated and personal to make pure blanket statements about.

I went a bit rambley here, sorry. My thoughts on this subject matter are complicated, although it isn’t really something I hold too personal, especially because the reality is I play exceedingly few video games anymore.

I don’t really condemn anyone for their opinion on this either, but I do feel it is a good moment to reflect and broaden the horizons (pun intended) regarding how people consume and enjoy games. Again, watching people play this game has been absolutely fascinating, no two people I’ve seen appear to get the same exact thing out of it!
It's Windows 95.
there is a reason we havent switched to renewables and that is that they are unreliable.
What is a bad “UUID”? A wouldn’t the hacked client do things anyway like uploading UID or local credentials to its servers?
Falcon Heavy didn't exist, but the Falcon family certainly did (and had flown).
First of all, in your example, the DB server is doing the other 97 lines of work that java had to do; one approach uses data structures the other uses a SDE designed for data management and access. I think most employers would prefer a developer that can do both.

Second, the most important skill to DBA or Data Scientist role and to an employer is finding someone that understands the data domain well enough to point out obvious mistakes, bad approaches and thinking to managers and provide leadership, not just access, to information.

Third, "any competent person" is just belittling a skillset that, like programming, can take years or decades to truly understand.
> What happened to conventional email apply?

Most of the time these jobs are posted on a lot of platforms, including the companys own website and not just on Linkedin.

I never had a problem finding an email address of a position by just looking at the website. If you apply somewhere looking at the website should be part of your application process anyway.
Man finds his childhood Amiga disks in dad's attic, thought to be lost forever
I agree with @thulecitizen here, in that his questions were not met constructively. You could have posted a few words and a link or 2 for a newbie.
> I hope they come up with a good solution.

Narrator: They won't.

:)
Via https://old.reddit.com/r/amiga/comments/gcbopp/man_finds_his...
TL;DR Emacs org-mode.

A private git repository containing my org files synced with my devices with syncthing, it's a git repository because I commit and push once or twice a month in case I lose all my devices at once, (very unlikely, but... the TAO of Backup http://www.taobackup.com/). On Desktop, I use Emacs (well spacemacs), on mobile Orgzly, to manage the actual work, there are still some glitches, but I stumbled upon this https://blog.viktomas.com/posts/my-workflow/ recently and I'll see how to integrate all this in my own workflow.

https://opensource.com/article/19/4/calendar-git

Edit: Seems there's already a blog post about something like what I'm using.
https://hiepph.github.io/post/2017-11-24-emacs-org-syncthing...
Yet there seem to be no designs with any ventilation. Why is that? Are heat sinks not allowed because the case is (usually) not grounded?
Far-right paper propagandizes nonsense from a narrative-convenient "expert." Film @ 11.
Asian honeybees do that, european honeybees don’t have that skill :(
In a podcast episode entitled "The Science of Happiness" on Sam Harris' Making Sense, the guest (a researcher in happiness and well-being) argues that we feel happier in our lives the more of these passing conversations we engage in. Definitely a skill worth investing in!
about MikroTik I'd be extremely worried about security - not exactly a good track record:

MITRE/CVE's: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Mikrotik

"Most MikroTik routers fail to get patched a month after severe security issues disclosed" https://portswigger.net/daily-swig/most-mikrotik-routers-fai...

"Finding and exploiting CVE-2018–7445 (unauthenticated RCE in MikroTik’s RouterOS SMB)" https://movaxbx.ru/2020/01/29/finding-and-exploiting-cve-201...

"Coinhive malware infects tens of thousands of MikroTik routers" https://searchsecurity.techtarget.com/news/252446369/Coinhiv...
Nobel prize-winning scientist: the Covid-19 epidemic was never exponential
Nintendo Switch Emulator (Yuzu)
I wasn't aware that plain http was what made that attack practical, that's good to know. And while not disagreeing with your point, I meant that it isn't supposed to be interceptable despite being plain text, due to the integrity check, so it isn't inherently insecure, just (significantly?) less hardened than if it would use https only.

For the 'which software is installed' argument (confidentiality in addition to integrity), I agreed but your first link actually argues this:

> the privacy gains [of using https] are minimal, because the sizes of packages are well-known
Another defence for Rust as if all the problem is with C, Rust will magically make everything safe (however unreadable and not really true). This is another form of marketing Rust, in itself Rust has a steep learning curve and not developer friendly so require constant barrage of hype. It relies on C++ based LLVM for generating binaries like many other languages and underlying unsafe C library for doing anything useful.

It cannot yet be used extensively in Firefox for what it was designed, hope it can accomplish its primary goal for building Firefox sooner.
H-1B is a temporary work visa. You’ll be happy to know there is already a per country cap on green cards. Maybe there should be a per country cap on the path to citizenship of undocumented immigrants also ? Otherwise Indians may just overstay their visa and use that ?

> education and knowledge should not be exported

Not sure a country that bans export of knowledge has much knowledge to export to begin with. I suspect you are more interested in a one way valve for knowledge and brains. You can get in but can’t get out. But with a per country cap for both knowledge and brains ?
On more than one occasion I've started with a simple table for all tenants (where tenant = x) because we didn't know at the time if we will have many.

Then progressively when we understood how the service will be used, refactored to keep separate tenant's data separate.

Ended up with each tenant in a given schema, we were using Java and relied on Hibernate (ORM) to help connecting to the correct DB (it does support multi-tenancy) as well as on a DB migration tool (Liquibase) so any changes we made to the schema get replicated over all tenants.
You would notice, the hash of the commit would change and you would get an error message in Git. If this is a vector attack your are worried about, you should sign Git tags with your PGP key and then you would notice any change in the history, each commit depends on its ancestors so signing a tag ensure no older commit can be changed too.
http://archive.is/axMiv
Lighting controlled by a OralB Bluetooth toothbrush
You mean the Ubuntu LTS, I meant a browser's LTS version (a sibling comment just mentioned it's called ESR in Firefox instead of LTS... I meant the concept, not the specific name for Firefox, but my bad) so that you don't keep getting browser feature updates but only get the backported fixes.
Unknown Traffic Sources
20+ Virtually UNKNOWN Secrets To Get Tons Of Traffic To Any Website or Funnel...
The first step towards fixing a problem is to admit that most of our "best practices" are marketing talk. We do not actually do it.
I have to admit, I found the wonky vertical alignment of the text on the buttons really off-putting (caused by Nunito).
Start by not using Google Authenticator. It's outdated and has security vulnerabilities allowing malicious apps to extract your code. And it's impossible to backup without a rooted device. Anything that supports "Google Authenticator" really means any TOTP app is supprted, so for example andOTP on Android may be a good choice. Or you can use Authy or 1Password if you trust them.
Useful ventilation means holes through which someone could insert a thin metallic part (wire, needle...)

Never underestimate the ingenuity of fools. The safest design is one without holes.
In my experience only a very small percentage of the apps where I look at the traffic using Charles Proxy have the certificates pinned. Usually it's the stock apps from Apple that are all cert pinned.
And Tarsnap.

Not sure if rsync can do local encryption these days? So I guess 'for the paranoid' (as Tarsnap's tagline is), Tarsnap with write-only keys might be better.
Emacs' Org-Mode and Syncthing = Perfect (2017)