skysight-inc/HackerNews huggingface dataset:
the rule of two is for if it makes financial sense to be a consultant, if you can make 2 times per hour as a consultant that you make as a full-time employee, then it might be sensible for you to become a consultant. It exists basically so you don't look at the crazy money you're being offered and think hell yes, when in reality you are only being offered a 30% raise.

The less important part of the rule of thumb is for businesses to determine if it makes sense to have someone as a consultant or a full-time employee. But whoever is doing hiring should be able to figure that out for themselves because they should know how much the employee actually costs - but hey, even they might need help sometimes.
By now, it's probably reasonable to assume that NSA, GCHQ, the FSB, the Third Department, and Mossad can all use that backdoor.
It’s not though. America’s an oil producing nation, as is the UK and Norway.

Dutch disease is common, but hardly universal. There are known mitigation techniques that can be applied, including a sovereign wealth fund.
Amazon, Instacart, Target, and FedEx Workers Explain Why They're Striking
It's selective and inconsistent. You are pretending it has some rigor to it, but it doesn't.
> Around that time, Bremer decided to bar former ba'ath officer from either serving the new military or getting pension. That decision almost single-handedly created the backbone of the terrorist networks that would become ISIS.

This isn't true. The Ba'ath party had already largely lost its Arab nationalist identity and become progressively more and more Islamist after the first Gulf War.

Saddam announced the "return to faith" campaign[0] in 1993 (which he publicly hinted at by writing Allahuakbar on the Iraqi flag in 1991) and by the time of the second 2003 invasion, Ba'ath party loyalists were already beheading suspected prostitutes in the streets.

What created the backbone of ISIS is a culmination of things - mostly around the collective, ongoing punishment of the Middle East. Arab nationalism was challenged in every direction by the West, country-based nationalism was challenged in every direction, and then the US put on a surprised pikachu face when the only thing left was religious identity.

[0] https://en.wikipedia.org/wiki/Faith_campaign
As Rich himself wrote, none of these ideas or implementation strategies were novel or original in clj. What appeals to me (as well) is how tastefully it was put together. A bit like the typical clj project that composes smallish libraries. The strength of the ecosystem is in how well those snap together, which comes back to the tasteful bit - great synergy and universal use of the core language features.
Among the good things, George W. Bush contributed more to the fight against HIV/AIDS than any other president. [1]

[1]: https://en.wikipedia.org/wiki/President%27s_Emergency_Plan_f...
Since Intel/AMD also designs the processor they can also put in backdoors beyond ME, microcode updates, etc. If you don’t trust proprietary blobs, I respect that. But you can’t trust proprietary silicon either.
> That is the case, but it's super awkward to use.

That's really the case for any language where an eventloop is not part of a builtin runtime (like it e.g. is with Javascript or Dart). E.g. in C++ we also have boost asio, libuv, libevent, wagle, seastar,GUI framework eventloops in GTK, QT, etc.

The thing is once you are in async land, nothing is interoperable anymore in most environments. Whether that's ideal or not is a separate discussion.

What I experience however somehow is that Rust users raise a lot more concerns about interoperability than I've seen so far in other ecosystems. I might stem from the fact that those users often never used another native async environment.
NASA will pay $146M for each SLS rocket engine
Thanks, will look into it
Ten years from now people will figure out a tool like Notion doesn't save you from how hard of a problem Information Architecture is - the same way companies learned creating intranets and internal Wikis twenty years ago.
Hugely appreciate this addition. Do you have a good public resource showing current production & transport cost by country or by play? And/or a public list of breakeven prices to eventually earn back capex on new wells? I used to have these charts but haven't kept up.
Agreed. There's just no way consumers can be expected to usefully verify things like privacy. In the real world, "it should just work" expectations get baked into things like building codes, the Uniform Commercial Code, commoditization rules, and food safety standards.

If we don't come up with something like that as an industry, eventually somebody else is going to do it for us. And we won't like that one bit.
> the “users don’t care” argument, i believe, is a cop out to make ourselves feel good.

Strongly disagree. It's just the simple reality that most users don't care about security. The vast majority of potential consumers in the world don't choose digital products based on security. I always see this security angle touted on Hacker News, but I'm quite frankly shocked that people here don't have the self-awareness to realize that we live in an uber-tech geek's echo chamber.

Have you ever met an "average" Facebook user? They really, truly, do not understand or care about security. I'm very confident that even if you sat one down and walked them through all of the implications of what poor security even means, they would walk away and not change their behavior whatsoever.
Please expand on Pat Tillman. He does not belong on that list. This is the same man that as soon as the war moved from Afghanistan to Iraq was quoted as saying “this war is so fucking illegal.”

Full disclouse: I knew him personally… mostly from a distance. It was disgusting seeing the likes of Senator John McCain try to capitalize on his death. That doesn’t mean he wasn’t the man depicted in Jon Krakauers’ book.
Comparing COVID-19 deaths to flu deaths is like comparing apples to oranges. The former are actual numbers; the latter are inflated statistical estimates. See: https://blogs.scientificamerican.com/observations/comparing-...
it is a pdf reader, our own fork of PDF.js https://github.com/eScholarship/pdfjs-embed2
I think this is an important point. Startups trying to make privacy ‘cool’ need to pay more attention to branding. While I love DDG, the name and the whole flavor of their site will necessarily limit their reach to technical people.

In terms of popular media, I thought Mr. Robot did a pretty good job of making privacy/security tech seem sexy, even if the main character is usually bypassing it.

Here’s a good example: https://youtu.be/i9CBKGLVCME
> And refactoring your code should not result in changes to the unit tests as the purpose of the unit test is to tell you if your refactoring broke something. If you have to change your unit tests when you refactor, you're doing something wrong

I disagree a bit here. Without getting pendantic about units and refactors, in practice, it is common to want to modify methods that have unit tests for them. Maybe you want to break out the method into two, or break the class into two classes, or you want to improve the method's interface, change the types it takes, its parameters, the structure it returns, etc.

All these changes will most likely break your unit tests. If they didn't break the unit tests for the method, I'd actually be curious what it was even testing.

Above this, people often in practice also unit tests private methods, so you've often got to deal with those type of unit tests as well even if you're only touching the inside of a class and leaving the public methods intact.

And beyond refactoring, sometimes you are simply adding a new feature or fixing a bug, and this will result in you maybe choosing to modify the behavior of some existing class and its methods. These changes will also break your unit tests.

What all the use cases I just listed have in common is that all of them have good reasons to break the unit tests, and will result in people simply going and changing the tests to reflect the new changes.
I'd really like to chat regarding privacy on dating apps

I'm literally kicking off a blog in the next week dedicated to those apps

Edit. Wasn't paying attention and autocorrect ducked it up. Really? I got downvoted for reaching out to someone that has relevant information I'd like to discuss.

Whoever downvoted: get a fucking life. Or get laid and then you might not be such an anonymous pussy. You probably could use the tips from my blog. Asshole
The Rush to Stop the Asian Giant Hornet
> How anyone could even hypothetically arrive at this result is beyond me

Well, for a handful of commits, it's very easy to do a "manual binary search" for the commit that caused a bug. Not the OP but that's how I read the comment.
I think, "Don't actually care" is pretty different than, "aren't convinced enough by an apparent one-time issue to cut off a lot of relationships".
> it has to make business sense on an ROI level aka that solution only costs me 2k rather than the $20K I spent on the accountant

With these numbers, I’d stick with the accountant. They work. They are flexible. They can be easily replaced.

With a SaaS product, I have to worry about whether their product works, if they’ll be around in a few years, how they’ll safeguard my data, if they’ll try to lock me in and increase prices, and if they can adapt to my changing needs. This decision process, alone, could easily nullify the projected savings.
Is quality pixel art more expensive than quality 3D assets? I really don't think so.
As a matter of national policy, you’ve got to incur a heavier price on Russia for this stuff, although it will be hard for the Czechs alone to do it.

Why? Because if becoming mayor means that you’re likely to be assassinated, then your country will be sapped of all political talent overnight. You can’t let a foreign nation hold your internal affairs hostage, much less with violence.

What exactly would count as a proportionate response is beyond my level of creativity, and is left as an exercise to the reader.
> Traffic is encrypted using SSL/TLS libraries, but recall that all of the major SSL/TLS implementations have had highly publicized vulnerabilities.

I'm not sure this is a valid criticism...wouldn't we be more worried if they were using anything else instead?
The world is a better place when companies like Apple do stuff like this properly. Besides, I’d guess that well over 95% of the chargers Apple ships are bundled with a device. Possibly 99%. So the retail cost of the charger on its own is beside the point.

If you want a cheap aftermarket charger, consider products sold by IKEA. While I can’t say it’s an immutable truth, IKEA electronics tend to be well engineered considering their low cost.
Conditional Move for Shell Script Acceleration [pdf]
I wish there was something like this ready in Noode.js world (happy to pay)
>But if I install a deb, I expect to get a deb. You don't want to offer it anymore, fine, take it out of the repo. But sneakily migrating me to a snap, and not even notifying me, is just trust-breaking

Indeed.

We need to modify the age old saying:

"Computers do what you tell them to do, not what you want them to"

By applying the following patch:

"Computers do what you tell them to do, not what you want them to do - except Ubuntu 20.04 LTS"
Users do care, but they tend to guess the quality of the entire product, including security, from the slick look of the product or marketing pages with fancy words. In reality, all of these are hard to verify even for tech savvy users.

Amazon/MS/Google should do a better job of making it hard to leave things unprotected. They are no longer a new service and no longer have the excuse of having to avoid friction.
> But, what's a batch in common? There is the crate that got delivered to the pharmacy--did the drug get too hot and melt some of the conatiner into it? There is the batch that got delivered to the distributor--did a rat or something urinate on the box? There is the batch that got delivered to the sterilizing company (probably gamma radiation for eyedrops)--did they not give it enough dose or did they have a metal obstruction from multiple loads in the facility.

> I can keep going further and further back. Was the water in the process supposed to be deionized or sterilized in some way? Did somebody mix up two similar compounds on the line? Did you clean your reactor with the wrong compound? Some drugs are made by cells and your reactor can "drift" over time and you may have to purge it and start over when the drift gets too far.

These days we could track every single step in this product supply chain far more effectively with a crypto-based, blockchain approach. It would be a lot more efficient.
Did I misunderstand or didn't someone find a way to neuter and/or disable Intel ME by setting the NSA High Assurance bit?
> Judge and jury for our friends, poisoned tea for our enemies.

I think you're extremely confused. The nation that poisons their enemies with tea doesn't have judges and juries. They have magistrates who serve at the pleasure of an executive that just extended (aka eliminated) term limits to keep himself in power. Judges and juries for everyone is what separates us from them.

You do realize that calling every internet comment an active measure desensitizes everyone and makes those active measures more effective, right? Case in point: American politics since McCain leaked the Steele report.

Edit: Nice to see you edited out your accusation.
looks great, I wish there was something like this in the Node.js world
Location: Boise, ID

Remote: No Preference

Willing to relocate: yes

Technologies: Java, Python, Linux, Blockchain, Cryptography

Résumé/CV: https://www.linkedin.com/in/keer4n/

Email: keer4n@gmail.com
> before that it only showed up in one other historical writing (in which is is clear what Huckleberry is interpreted as) that does not predate his Tombstone work by much (about 30 years IIRC)

This simply isn't true. It was a common phrase and is widely attested in texts from Holliday's lifetime.

You originally said:

> due to Tombstone most people think it is: "Im your huckleberry" when in fact the correct term is "I'll be your huckle bearer"

I'm not arguing that "huckle bearer" wasn't also a common phrase. It's just not the "correct term" here. There's no basis for the idea that "huckleberry" was either a misquote or a corruption of "huckle bearer". Both the immediate textual context of the novel and the broader historical evidence for the phrase clearly establish otherwise.
Is it? My personal experience makes me think that it isn’t. I’ve programmed professionally in eight languages if you count significant line changes, ten if you count any change. At this point changing editors is harder than changing programming languages.
Realistically if some party made use of these backdoors regularly someone would probably have noticed the traffic already.
Isn't the whole point of a micro lib that it is limited in scope, well-designed, and shouldn't need to change much?

In the case of a CSS framework specifically, browsers are a moving target and you would expect changes to either fix issues or to take advantage of new features. 2018 is more than 10 versions of Chrome old, and while it's possible that nothing in that time was worth adding to this framework it does seem unlikely. At the very least you'd expect a line in a readme to be updated to say its been tested and it works.
As a huge critic of Bush and the disaster that war caused, I'm no fan of Bremer.

But O'Sullivan came to Iraq via the State Department, and Rumsfeld didn't want her there, which seems to indicate that perhaps she wasn't as insane as the Rumsfeld/Wolfowitz/Cheany neo-con people.

In anycase, I think this article makes a good basic point: lots of countries are going to be in deep trouble with this oil price.
"There's no silver bullet with this virus."

Well, that doesn't make any sense to me, given the reported experience of some countries like China, South Korea, and New Zealand. Unless they are all covering up/fabricating statistics, then somebody has discovered a silver bullet, even if most places haven't.
If you want a better look at the basics I've found LiveOverflow on YouTube to be entertaining and fairly accessible for myself.

Fundamentally though, you will probably need to build up some low level knowledge of whatever you are targeting (whether it's an app platform, TCP packets, C/ASM code, etc).

If you have a web background there are lots of sites that have fun challenges you can start with. You could try Google's XSS game: https://xss-game.appspot.com/

It's a field that really interests me since I always liked puzzles and games and am happiest at work debugging tricky issues - but I'm not sure how easy it would be to break in as a 'junior' at age 35+.
Check for Borrows in Bitwise Operations
That can't be right because it implies that computers with Windows 10 do either what you want or what you tell them.
”Several weeks of hard effort”, they said. I can buy it, if they actually work hard and are basically competent. Rust is a difficult language in total, that’s for sure, but you can get a lot done without knowing it all.
Indeed, it does fulfill an important function; it makes journalists much harder to sue.

The beauty of this fiction that journalists are not making a judgment call in choosing who to quote, on what topic, when, is that it makes some trusting people think they’re in some sense impartial.

The internet has broken this fiction wide open. All kinds of authorities used to unthinking deference from their subjects are now having to deal with the fact that said subjects can now talk about them, with each other, in n public. See Martin Gurri, The Revolt of the Public. Newspapers may have shut down their comments sections but they haven’t shut down twitter, Facebook or other competing websites. So newspapers don’t get to control what the conversation is about any more and memory holing inconvenient principles is becoming more difficult. Twitter is the best thing to happen to accurate perception of the media ever. Unfiltered access to how journalists actually think, unimpeded by editors who want the public to trust them.

No wonder trust in the media has been dropping for the past two decades.
Looking for a BDR for Iris Automation – AI Software for Drones
Do you have suggestions on how to get real with this?
A (non-tail) recursive function actually needs a reentrant mechanism to implement the semantics of calling itself; this mechanism is a stack.

Without recursive functions, we have a bounded call depth and thus don't actually need a growable stack; a fixed-size array suffices.

We take for granted that function calls are always implemented with a stack, because that's how processors work today, but it could have been done differently. We could imagine an alternative timeline with much restricted functions and no implicit call stack.

And indeed, tail recursive functions are usually implemented with tail call elimination, in which the caller reuses the stack frame of the callee; function call becomes a simple goto, which transforms recursion into loop iteration. If we didn't have an implicit stack we could still have tail recursive functions (and a bounded number of non-tail calls), and manage other recursion cases with explicit stacks.

See for example pratt parsing https://matklad.github.io/2020/04/13/simple-but-powerful-pra... which uses the implicit call stack, and contrast with Dijkstra's shunting yard algorithm https://matklad.github.io/2020/04/15/from-pratt-to-dijkstra.... which is the same thing but with an explicit stack. If we didn't have a call stack, we could always program in Dijkstra's style and be none the wiser.
Calculating speed, bearing and distance using Kafka Streams Processor API
The article says the man was travelling on a diplomatic passport which means diplomatic immunity.
Interesting idea, but im pretty unconvinced its a threat in practise. People will connect to any free wifi they can find, you don't need to trick them into it. Use HSTS if you need security. (The author of course says its easy to forget on some obscure part...well yes. Security is hard for a reason)
No one’s going to deny these apps will find some cases. But to be effective they need to find a majority of all cases.
Strike: A web-based, 1-bit paint tool
If a massive privacy breach that potentially shaped history is not sufficient and all the follow up stories on it were not sufficient, customers have basically decided that they practically don't care for the purpose of conducting business operations.
Why Italy's daily death toll jumped today
I think users care, given the outrage when leaks or “creepy” ads occur. But the problem is that users have an impossible time reasonably evaluating apps for security and privacy, so there’s very little market incentive for app makers to make secure and private apps.
since this person was doing network level I/O work, they could do similar things with an iOS device leaking network packages. there are even work arounds for "pinned" SSL certifications so that your package sniffer can read the contents of network requests and responses.
> Clinical trials have informed consent and medical monitoring.

How is "informed consent" (to the extent that that is even possible) not possible outside the context of clinical trials?

And "medical monitoring" doesn't mean it won't kill you, it only means if you die they write it down.

> I don’t understand how someone could argue that establishing that a drug works and will not harm you is “red tape”.

It prevents you from using a drug that could work based on no evidence that it doesn't. That is a much more aggressively authoritarian stance than prohibiting something which is actually known to not work or be harmful.

It also prevents you from using things that are known to work, and are used in other countries, but have no one to pay for the US clinical trials because no one holds a patent on it, e.g. because it's a part of a plant.
These examples are not obscure at all. If the job involves working with a lot of complex SQL, then these are some great questions to test the candidate's deep understanding of relational queries. It will be critical in their ability to maintain and write SQL quickly. Time and accuracy is of the essence in many such roles. However, the "if" is very important and often ignored. A web developer doesn't need to be interviewed for complex SQL.
I suppose the point is to generate sales and earn some referral bonus. Correct me if I'm wrong
so you thought I was replying to that, got it.

we've all read flash boys

I was saying it isn't an applicable caution if you don't know what the person is trying to do with automated order creation and management. If they just want to set limit orders to their dynamic screener and ride them for two quarters, successfully, then the worse fills from the presence of HFT is no different than the worse fills that a human would get because everyone gets worse fills from HFTs if you don't route orders to the closest exchange exclusively.

Therefore saving that comment for a thread about trading algorithm isn't really any more relevant than saying it in any thread about trading.
How I Started Enjoying Programming Again
because you don't know the future use case

...and thus you shouldn't care about it. I've seen enough problems caused by attempts at "futureproofing" to know that YAGNI is always a good choice. When/if it does matter, then you can do the work; but inevitably, requirements always seem to change in such a way that your attempts to anticipate them results in code that's structured to be flexible in exactly the wrong way, adding unnecessary complexity, or even hinders the desired changes.
Not if the "anything else" was for this part of the system to not exist and/or not have any network access.
Intelligent Automation: Getting Employees to Embrace the Bots