skysight-inc/HackerNews huggingface dataset:
Do you mean practically, or philosophically, and do you mean just the Public CAs or the trust stores that set policy?

Practically these certificates would simply not work in popular web browsers. So if you sold them you're going to get lots of complaints because stuff doesn't work.

It's already very complicated (because of name constraint rules and conflicting policy requirements over 20+ years) to do name matching, so there's no incentive in the browsers to make it even more complicated so as to enable CAs to sell yet another product of dubious value.

As a general rule you should try to have less stuff covered by one certificate, the same way a large estate would try not to use the same key on every lock but instead have a diversity of keys, possibly with a "master key" arrangement. So from that point of view it's hard to justify multiple wildcards - ⭑.⭑.example.com suggests there might be... dozens? hundreds? thousands? of services with perhaps unrelated content all "secured" using the same keys and that clearly isn't a good idea.

Edited to add:

It occurs to me that you might not know the "CA/B Forum" is not just Certificate Authorities deciding their own rules.

CAB is a standing meeting between (some) CAs and the Browser vendors who in practice are almost exactly the OS vendors (Microsoft, Apple, Google, Mozilla, with Mozilla effectively standing in for the Free Unixes). The purpose of CAB is that Browser vendors get to set their own policy for their browser, but to the extent everybody agrees together on a common policy it's simpler than having lots of different and perhaps conflicting policies, this is done in the form of the Baseline Requirements, a document you can find here:

https://cabforum.org/baseline-requirements-documents/

Unlike OPEC the bodies at CA/B are not sovereign entities and so there are competition rules, they must not be or give the appearance of being a cartel. As a result CA/B never talks about prices, nor about which products you might actually sell to customers, but it does talk about policy decisions which can indirectly impact those products.

Because there are a lot of public CAs and few browser vendors the body is deliberately not using simple majority rules, like successful governments in places that have historically had violent conflict on ethnic lines. Instead a change to the BRs must have support of both CAs and browsers to pass.
Encouraging people to walk and bike, while also reducing pollution, is a great way to reduce the effect of future health problems. Wish they'd do this in NYC. You could close 30-50% of the streets, convert them into parks, and the only negative impact would be that people have to walk an extra block to get a cab.
Just watched the whole episode - that was fascinating - I love the human sewing machine
https://areweguiyet.com/ gives a broad overview, but is slightly outdated i believe. I recommend all raph linus' research on this topic, fairly recent blog: https://raphlinus.github.io/rust/druid/2019/10/31/rust-2020....

Personally I used iced [1] a bit and found it very pleasant to use. iced is cross platform, sponsored and very active.

https://github.com/hecrj/iced
Sure, but it's circular logic to suggest that there's no need to rush reopening since demand will be low anyway... (As others have said)

When you need those jobs created by reopening to get people back to work and closer to the point of having disposable income again.

This isn't pure chicken & egg, since consumer debt is tightening up while business debt is getting cheaper. Plus the only way we're going to alleviate fear is by opening and seeing what happens.

Even testing vaccines will require that leap of faith at some point. After all, what good would a clinical trial be if the patient quarantined during it?
> is just asking for trouble outside of our circles

it's asking for trouble in our circles too. Imagine getting a tab-sep file, opening it up in an editor and having it automatically convert to 4 spaces "because", then sending it back without checking something that doesn't look wrong.
This is not a valid certificate. See https://tools.ietf.org/html/rfc6125#section-6.4.3

1. The client SHOULD NOT attempt to match a presented identifier in which the wildcard character comprises a label other than the left-most label (e.g., do not match bar.*.example.net).

2. If the wildcard character is the only character of the left-most label in the presented identifier, the client SHOULD NOT compare against anything but the left-most label of the reference identifier (e.g., *.example.com would match foo.example.com but not bar.foo.example.com or example.com).
That's not remotely true. If this is happening to you then you're almost certainly having N+1 problems which is architectural and would affect any solution you're using. Add google trace to get a breakdown of your requests SQL that's executing.

In an unusual situation it is possible in PG to have a very large pg catalog if you have thousands of tables and schemas which is resolved at run-time because Rails resolves models and types through db introspection, and the types specicially are only loaded during runtime. But that would be very unusual. I'm working on solving this in Rails because this unusual sittuation is affecting us.
That depends on a lot of things, including perspective. Things can be legal according to one set of rules, yet illegal under another set.

EU member states certainly could see this as illegal interference in their economies and a stretch of US jurisdiction. There is also a good chance that this goes counter to at least a few international trade agreements. Agreements the US still desperately needs for other things it wants to keep doing.

It appears a very short sighted policy, by people who probably don't give a shit about whatever damage they do long term. Once they are out of office, it is no longer their problem. If it made them richer, they won. It's the ordinary people that will likely pay a price for this at some point, but not them.
I've done FAANG, and I have friends who've done the HFT shops.

HFT shops do indeed pay more. Perhaps at the top percentiles they're similar but at the median, HFT probably pays double, and it's cash, not RSUs that vest over many years. The downside: culture of always in the office (not sure how covid will affect this), software that is insanely specialized and uninspiring, and generally awful work/life balance. I'm sure some shops are different, but they expect you to put in a lot of time to earn that salary. Compared with FAANG where the burn-out is at little more prolonged (and of course the morally dubious business that is ad-tech).

I've learned to stay away from both and have never looked back. But I think working a FAANG or HFT is a good thing for any dev to at least look into while they're young and ambitious and can "afford" a bit of burnout to see what life can really be like (or not).
Make sure to relax on this journey. There is a convincing case that education doesn't impact life outcomes much at all (e.g. The Case Against Education by Bryan Caplan for a recent book).

Therefore I'd advise to let your kids have fun and educate them around whatever that fun thing is, like how Montessori does it.
You tend to see a whole lot more challenges if you're on a VPN. It taking a couple of minutes isn't at all implausible.
Supplemental vitamin D is not as effective as that naturally produced by exposing skin to the sun.

This is perhaps what you read, and doesn't invalidate thre findings here.
> Seems like a good use case for linking to their respective GitHub mirrors

https://github.com/chromium/chromium/blob/master/net/cert/x5...

https://github.com/mozilla/gecko-dev/blob/master/security/ns...
Https://Realisticlandscapes.com $2500 made so far!
> It will take a monumental effort from all Londoners to maintain safe social distancing on public transport

This is why we need work from home. Banning cars and forcing public transport is not going to fix the problem!
That's not true. Source: I work at an HFT. Rust is very interesting for Greenfield work. The major down side is millions of lines of legacy C++, the more useful already using C++17 or C++2a, which typically provides a lot of what you'd get out of Rust's stdlib and ecosystem but already packaged and integrated. When you choose Rust at an HFT you have to worry about integration with codegen tools (generating efficient Java/C++/$HDL and reasonable throughput Python for protocol definitions is table stakes at any HFT I've heard of) and build pipelines (which might already have distributed building/caching infrastructures and fancy packaging/deployment.

Rust has some benefits (and still integrates reasonably well at the ABI level), but modern C++ compilers are no slouches. Rust provides a friendly dev experience, which is a valuable thing, but a lot of the ecosystem advantages are old hat at companies with mature codebases.
An algorithm might be: Take an array of integers as input and return their sum. Returning or adding integers does not require allocating memory.
Who knew our officials were such savvy traders? We must be electing the right people.
Certificates are used to prove the identity of a given domain. e.g., if you visit https://news.ycombinator.com (https), when your browser connects, the server offers a certificate that basically says “this is the certificate for news.ycombinator.com”. Your browser verified that the domain on the certificate is the same as the domain you’re visiting. If they’re different (or if there’s is something else wrong with the certificate like it expired), you are shown a warning that says “It may not be safe”.

Some sites have a multitude of domains and they don’t want to have a different certificate for each. Fortunately, there is a way to specify wildcard expressions in a certificate. For example, many SaaS tools where your account name is part of the domain (e.g., my company’s PagerDuty account is at opsevel.pagerduty.com). A certificate that could be provisioned would be for .pagerduty.com and that would work for all of their subdomains (one per customer).

This site invented a cute trick where they used wildcards to essentially match any* domain or arbitrarily deep level of subdomains. It literally is a certificate that could be used by any domain because its wildcards match everything. Of course, it provides no security because it’s vacuously passing.
Could you give a layman overview of how ASML is dependent on these companies and what the geo-political/econmic shifts would be?
Dark Theme for Angular App
This is why the strict core of microeconomics never allows one to make interpersonal utility comparisons. As soon as you start to try and figure out "best" outcomes across groups (beyond ability to pay), it gets really complicated, really quickly. This is the domain of areas like Social Choice:

https://en.wikipedia.org/wiki/Social_choice_theory
Not only doesn't apply to non-Americans, but sometimes it doesn't even apply to American citizens, (Chelsea Manning was tortured in a U.S. military prison).
I think I’m gonna have to read up a little more, but I’ve seen this in support of the excess returns view:

https://www.nytimes.com/2011/07/10/business/mutfund/congress...

And this in support that avg congressional portfolio is not performing well:

https://www.mit.edu/~jhainm/Paper/Eggmueller_CapitolLosses.p...

https://www.morningstar.com/news/marketwatch/2020041854/sena...

Looks like there might be a historical component around the STOCK act that different studies play with for their data window. In either case — I still say for the poor level of diversification within & around asset classes that I don’t see a lot of shining examples of how to achieve success.
Waste of time! They are exempt from the insider trading laws.
I think it’s usually due to those being seen as a cost with low expectations. As long as people can work, they’ll be low-priority and they almost certainly don’t have competitive salaries or career paths to keep top people.
Yeah, Django's documentation is top notch, but I haven't seen a lot about mixing Django + Intercooler. That's a cool approach to make sure the actions are always reachable. Will read these, and maybe reach out to you sometime to find out how you like Unpoly! Thanks!
Watermelon Milkshake – Jama Masjid Delhi Ramzan Special
There's no way to make a rigorous (to the "prove" level) argument from history on racism (or most social issues) because it relies on counter-factuals. Counter-factuals are inherently untestable.
To simplify even more, you don't actually need `Display` or `Error` impls. I use Error enums frequently without display or Error impls. Though, with better backtrace support coming it'll be handy to have Error and the Backtrace related APIs implemented.

(Sidenote, I don't use `impl Error` because I never use `Box<dyn Error>`. Which isn't to say that's correct, just to say that I've never had the need to implement it)
Interesting. I don't think I have ever hand edited a CSV (unless you mean created from scratch, well then, perhaps).

OTOH the ability to just look at it... that I've found very valuable and agree there.
Not just "C++" but usually they want C++ experience that is very relevant to precisely what the hiring manager wants.

Maybe I'm sour-grapes, but I got pretty far through a HFT loop only to get turned away because I didn't have any experience with the particular boost library they were using. (A library that will be mostly obsolete by C++20) They said that this was common in the industry.
The part where far far into the future, the protagonist(?) takes out a SWAT(more like 75th rangers?) team that has him surrounded with cover with the tactics of firing from the hip. The funny thing is that it all started so well. The apartment scene is almost believable.

Altered Carbon was just cyberpunk eye-candy. There was no technology explored in a meaningful way besides the stacks.
From 4 years in a large public quant house (not HFT): everything upstream of trade execution is Python with very heavy use of numpy, scipy and pandas. This has pros and cons, on balance I'd prefer a better type system, but that everyone in the org can share code has tremendous value at scale.

Briefly, the faster your execution the faster everything else needs to be. Java should be fast enough for almost anything short of HFT + colocation which is super expensive infra wise.

The skills are not different from other backend roles, but you will need to exercise more math with emphasis time series and stats.
But Ukraine had a very bad strategic position and outdated military. Taiwan is an island well prepared. Taking it is possible but very costly. Nuking it into oblivion is always an option but the optics of that kind of liberation is bad.
Why do you have a giant list of potentially stale bugs?

The policy described in the linked-to article is roughly equivalent to saying that every bug/issue must be passed to someone, who is in charge of that issue, including closing them.

The main difference is that there's a single tracker instead of "personal workload lists".

What happens to the workload on a personal list if the person is unexpectedly out of work for a month?

Now that I've read a bit more:

> Developers will only want to hear the same request so many times, before losing whatever is left of their sanity, and deciding to address the issue.

What happens if the stakeholder's sanity runs out first?
I've worked at two of what are broadly considered to be the top firms. Most of these comments are inconsistent with my experience.

Everybody's talking about what it takes to write trading systems, but OP asked about "skills required to land a job" not skills needed to do the job. Aside from a few specialized roles (like FPGA dev or security), the firms I'm familiar with only evaluate general dev skills. The interview process is pretty much the same as you'd experience at a top tech company. They don't care at all if you know the languages they use. Once you're in the door, the firm will teach you everything you need to know.
The TPP would simply have incentivized more manufacturing to leave the west for other asian countries.

You got a trade war because there was finally a US president willing to risk confrontation like the chinese are, who started calling out chinese practices like dumping steel in canada to kill the US steel industry.

A year ago people said trump was crazy for talking about chinese steel dumped in canada as a national security issue. Then you couldnt get n95 masks and the world realized things run out if you dont produce them and someone else makes them.

The trade war is a positive - the US-China relationship needs redefining. If you look at chinese influence campaings the chinese are well aware of US efforts to deal with orbitting allies and is pushing their own influence. Your ideas would have worked 15 years ago, maybe.
Nothing's preventing it from escalating to war. The national defense agencies in all countries probably have plans if that happens... I believe and really hope that an actual war won't happen. There's too much to lose, and little to gain.

A technological cold war will likely happen, Huawei and other Chinese companies will just continue R&D and manufacturing on their own. In a way, the US is letting go of whatever control they had left and making it easier for them to form their own alliances in this matter. It will just polarize the world more... again, as always.
The argument that politicians should have the same expectation of privacy as regular citizens while also making their stock transparent is inherently contradictory. Regular citizens do not have to make their stock transactions public, but politicians should be required to.

I think it’s entirely reasonable for politicians to assume a life of less privacy since every aspect of their lives is scrutinized by the press anyway.
Yes? Yes!

Ask any Russian abroad if he wants to come back to his "free" fatherland
When I was a kid there were 12 year olds that missed the 60s. Nothing to do with their parents waxing lyrical about how great the 60s were.
When dealing with race-conditions, is the skill required just the ability to identify candidates where the race-condition will occur and then apply the relevant locking features around the mutations? What are the implications of identifying a scenario where there is no race condition? Does it just result in a performance hit?
Trade is not a zero sum game, it enriches both parties.

https://en.wikipedia.org/wiki/Comparative_advantage
Show HN: Basic UI Components for Tailwind CSS
Many Americans Get More Unemployment Money Than They Earned In Work
Re: sniffing, if I were implementing port knocking I would use the "single packet authorization" variant like in knockknock, which makes sniffing much less useful to an attacker.
Unless it's paid-to-build, the software company's risk is creating the software and then not being able to sell it because a different software is better.

Communal software isn't always custom-built, the majority is normal off-the-shelf stuff, just focused on that niche. My involvement is limited to a small city a few years ago, that may be different in a large city as Munich if they have lots of custom requirements they don't share with other cities.
They’re talking about a part of London where many people walk to work anyway. This just gives them more space and eases crowding on sidewalks. Also, not every job can be done from home.
These reductio ad absurdums aren't very absurd, because of this clause: "if that person uses their insane problem solving abilities to increase utility for others, and they're good enough at it". That's a big if, in order to offset the disutility of harvesting brains, but if that is the premise, the conclusion is unsurprising.
Combine this with the fact that many business no longer exist and the new normal of the restaurant industry, I would expect to see the commercial market crash pretty hard.
Yup. I wasn't a frequent visitor, but r/politics always seemed like a level-headed intellectual political forum. After the 2015-2016 election the tone totally changed. For the most part, it changed to favor politics that I prefer, but it's hysterical and anti-intellectual and not a place I want to get information from or be associated with.
And that's considering the tomb had been partially looted during Antiquity and that he was a nobody.

I wonder what's the maximum share of the worldwide gold reserves that's been kept in Egyptian tombs at the same time.
I used to write Java code which didn't have any objects, just byte arrays. It would never call GC and ran lightning fast.
This is such a moving target but right now my eldest son is having a great time making explainer videos and posting to YouTube. He’s learning to shoot better footage, edit video, and about his subject matter. My younger kids are playing with LEGO nonstop right now and have been looking for ways to repurpose LEGO kits they’ve put together over the years using hack instructions they find on the web and Snap Circuits.

At those ages, you are still laying so much foundation and cultivating curiosity. Keep it fun, keep it widely integrated: science is history is art is math is science.
Cautiously optimistic about this! I live in London and expected a swing towards more cars as a result of this (which would be barely manageable).

However, there's one caveat here:

> Officials said they were working with boroughs to implement similar restrictions on the minor roads they manage within the area

Some boroughs (e.g. The City) have historically been very interested in pedestrianising, but others (e.g. Westminster) have fought tooth and nail to ensure that roads are cars-first.

I would expect them to put up a fight here, too, so this is probably far from settled.
Five Code Review Antipatterns
Perhaps I should have clarified that I meant better in a UX sense.

Those cons you mention definitely do exist, they're an emergent problem of the conversations and communities that arise, but opinion bubbles never seem to be a bottleneck for a platform gaining popularity - which makes sense since they, by definition, favor the majority's opinion.

I'm also not convinced that chronological ordering is better for diversity of opinion: comments might not be hidden directly, but they can be drowned. In a reddit-like system each user can downvote you just once, while in a message board system each user can post N times, with each post making your opinion a smaller portion of the conversation.

What chronological posts are better at is favoring power users over casual users: there is a clear advantage for those who can post early and/or often. For everything besides the starting post of the thread, it also rewards short and not very thoughtful posts (since posting later is punished in visibility). The result is also a bubble, and one dictated by the people that spend their lives on the boards.

And in my personal opinion, there's not a lot of overlap between the people that lead interesting lives and are great at their fields and those willing to spend a great portion of their life in a message board.
>What is it that is actually preventing this from escalating to a hot war?

The same thing that's always prevented nuclear-armed countries from going to war: https://en.wikipedia.org/wiki/Mutual_assured_destruction
Trading firms have many positions available other than the HFT algorithms. There are teams that support those to enable desks (read: startups) to get off the ground quickly (like YC!), analysis teams for doing research for future strategies, accounting, shared service teams, as well as governance teams like risk, compliance, treasury. Depending on the team you're on, your job may be drastically different. I find myself in a role focusing on devops, developer tooling, and team automation, but others on my team focus on data ingestion, financial models on top of the data, UI development for end users. If you're a skilled programmer, there will be a role for you in a sufficiently large firm.
International travel during the coronavirus pandemic [twitter thread]