skysight-inc/HackerNews huggingface dataset:
There is this idiotic notion that any security measure that cannot stand on its own is "security by obscurity", and therefore useless.

That principle is taught in school and echoed by every junior netsec professional out there.

After almost 20 years of work, I can say that these layered techniques, are invaluable. OF COURSE, the core security has to be bulletproof. But once you've covered that base, there is an enormous value in keeping your assets under the radar.

At the very least, it reduces the number of alerts you need to review by several orders of magnitude. Logs become READABLE.
> Herd immunity shouldn't be a goal.

Herd immunity is how vaccines work. It's the reason not everyone needs to get the measles vaccine so long as most people do.

> Think of Ebola and herd immunity for more that a second, and you'll understand what it means: herd immunity is not the only way. Korea proves it too. SARS 2003 died without herd immunity either. What about HIV? Fancy trying herd immunity?

If you can obtain a slice of the population that is not particularly strongly affected by a disease large enough to achieve the same result as you would with a vaccine, it's an avenue. That's true of folks under 45, broadly speaking. You may not like it -- I may not like it -- but it is an effective avenue.

It is the goal. This conversation is about different ways to achieve that goal.
What are you hoping for the business focused founder to get out of this exercise?

The reason I ask is that in my experience the "hacker mindset" is a very nebulous thing. There's sort of a "hacker ideal", but in practice actual developers, white/blackhats, makers, etc. come from all sorts of backgrounds, have all sorts of ways of thinking about problems, and are motivated by all sorts of different things.

Are you hoping for the business founder to better understand how to effectively work with technical people?
There was a really interesting article posted a year-ish ago about a company/person (I barely remember the details). Someone went and created a random WordPress site, posted the article, and back-dated the post to make it look like the article was stolen from them.

Last I heard, litigation was still on-going. I should probably have beers with that person :soon:...
I feel like inheritance is the actual problem with OOP. Trees of types with increasing specialisations just don't describe many real world problems that well.

When you do build programs like this, code gets more and more rigid until it becomes a maintenance nightmare, and extremely expensive to pivot functionality. Sometimes having a complex object hierarchy literally stops you making some new feature.

A lot of mental effort is sucked up in mashing problem spaces into hierarchies, and once there the program is constrained by them.
I don't buy that. The Republicans would have killed the filibuster when they were next in power. This was simple acknowledgement by Democrats of the changing nature of the Republican party.
I was with you until the last sentence which I didn't understand.
So do you believe Ford deserves to exist? Because they’ve killed a lot more people through faulty engineeeing than Boeing.

The Pinto fuel system alone killed over 900 people
This looks like the same thing Etsy has been doing since early this year.
https://www.theverge.com/2020/2/26/21155193/etsy-advertising...

Ad landing pages feature prominent links to competitors' products at the top of the page.
> What hope does any other store then have to create a malware free web store if even Google can't?

I think you're giving Google too much credit here. For years nearly every single extension, no matter how targeted the purpose, has told me "This extension will have access to all your data on all your web pages". It is such a no brainer to do a little better than that but they tolerated it for years.

In a few cases I looked into why developers requested that kind of permissions and the answer was that Chrome permissions weren't designed well enough to allow narrower permissions. So Google has no excuses here. They control the browser and the store.
If this was written recently, I'd almost think he was criticizing lockdown culture.
Without having a source to back it up, I'm guessing that a month ago tests were more scarce. So you had to have a strong clinical indication to get tested.
Yea it matters. If monopoly was achieved through market competition then fine, if it was achieved through destroying other companies then it is illegal and unfair. But once dominant market position is achieved company still needs to behave properly and not stifle competition.
Maybe it's more about hiring people with a strong work ethic, who will do whatever needs doing, not just what's fun. Note: I don't think I'm really one of those people.
Show HN: Listen to BLDG Evelyn – Chapter 5 Part 1: Sisters
https://opensource.stackexchange.com/questions/8367/is-the-t...

This is one of the top results when searching
Historically, console cycles tend to overlap significantly; and I actually think the next-gen consoles will see very slow adoption curves. There's not that much difference between the current gen Series X/Pro and next gen from a capability standpoint, and the business model has shifted to where the games themselves are the platforms (Minecraft, Fortnite, Overwatch, etc). Exclusives don't move systems the way they used to (unless you're Nintendo).
Popular in which fintech companies? I don't believe this is true, but I would be happy to wrong.

Jane Street uses OCaml, but of course that's not Haskell. All the other finance firms seem to use pretty standard C/C++ because they need the low latency.
Amazon is pretty bad.
> I've never had the mind-altering experiences other describe. It's been interesting for sure, last time I was in bed, evaluating and analyzing my entire life, realizing I need to improve a lot of thing, and I faced a lot of thoughts that I've always had subconsciously, but never admit normally.

I'm pretty sure that's what people are talking about. What may vary are your life experiences and if you decide to act on these reflections or not. It's not magic if you don't act on your thoughts it won't be mind or life changing.
If covid-19 is really a one-time hit, then actually that makes perfect sense since debt ratios are based on long-term revenue projections.
I don't think it's particularly useful to compare across industries like this, especially when invoking an "appeal to worse problems" to justify ignoring a problem under discussion.
Telecom is a horse of a slightly different color though because they are intentionally granted regional monopolies over utilities. There should be better regulatory enforcement of these utility deals, but between regulatory capture and nearly trust-like brokered deals to swap regions among each other to best minimize any particular region's regulatory control and collusion opportunities between neighboring regions, almost all of the regulatory enforcement that should prevent certain types of monopolist behaviors has nearly no teeth left in the US.
> Amazon handling the French court order to fine them a high dollar amount for each non-essential (as determined by the court) item they deliver

Play stupid games, win stupid prizes. Amazon has shown that they cannot be trusted to determine whether workers or items delivered are essential, and do not take the safety of their workers into account. The cost of behaving in an untrustworthy manner is having everybody else treat Amazon as untrustworthy.
Apache Ant insecure temporary file vulnerability
There's some truth to this. For many years, Google allows users the ability to wholesale export all of their data (perhaps as a defense for this moment in time).

If the consumer market wanted an alternative, wouldn't there be competing companies by now that would ingest all that data and give you matching mail, docs, video, etc, services?

On the advertising front, Google is no longer the only game in town, so by definition not a monopoly.
I'm being tongue-in-cheek, of course.

The biggest upside I see for automated DI is to get back concision once you've parameterized your code by the code it depends on. Usually this parameterization is done for unit testing purposes.

Direct calls are hard to exclude or intercept for testing, so you call a method on an interface or a base class or an object instead, and now you need to be initialized with a reference which may be replaced for testing purposes. But the requirement for initialization remains in production, even when there is normally exactly one candidate and it might not even require state if it wasn't for all the other references it in turn needs to call.

The great increase in the burden of initialization creates demand for the IoC / DI container. And once you have a container framework which takes care of gluing objects together, why not let it stick transparent adapters (proxies) around the objects too? Proxies for per-request state, multi-threading, transaction management, caching, all that good Common Lisp advice of before, after and around.

The temptation for clever people can be hard to resist, and before you know it your local code has global side effects unknowable to people who don't have the full picture in their head.

I actually blame unit testing, particularly when combined with a static type system. Static binding, in particular: you could mock static calls if dynamic binding like Emacs Lisp was available!

Unit testing is great at the leaves of the call graph, for self-contained things like container libraries, or things which behave functionally, i.e. they transform things.

Unit testing is like arthritis in the middle of the call graph. It makes rearchitecting much harder by baking in assumptions both upstream and downstream, and the easy temptation of mocking usually overspecifies the interaction with collaborators. The parameterization demands DI which encourages too much cleverness, as discussed. And unit tests don't leave you very confident that things will hold together because test mocks and stubs don't necessarily replicate the behaviour of the real things.

I like integration testing higher up the stack, and trying to convert a program as much as possible into a composition of functional elements - things that belong on or near the leaves of the call graph, and leaving as little "middle" as possible to be infected with unit tests.
if only more system would leave my plain text emotes alone an not try to convert it to a emoji
Once you stop making hundreds of classes with globally visible names and members, and start using function scope, functional programming, and mostly short lived value objects, much of the OOP induced pain of programming simply goes away.

Alas, this requires training of the road not taken.
Yea, we're still discussing the exact roadmap on this side. In the short term, the plan is to integrate better with the whole ecosystem. We are still exploring options on the graph NN side. Do you have any specific algorithms to point out? :D
Google has done a lot of harm to websites strictly to force people to advertise. I cannot "prove" it but, I, and god knows how many sites know it to be true. They went from sending people to the best match to keeping them in Google's circle.

(Matt Cutts, you were the enabler. Your money and reputation is tainted)
also works on Mac OS
Wow, the entire advertising chain here looks like a completely unnecessary TAX on restaurants and consumers:

* A restaurant pays the advertising fee to DoorDash/GrubHub but the money is used to divert organic searches for the restaurant to DoorDash/GrubHub instead. The restaurant gets nothing for that advertising fee. In fact, it loses valuable organic traffic online.

* A consumer searches for a restaurant, but the first result is for a paid link to DoorDash/GrubHub. The consumer gets connected to these middlemen instead of the restaurant as intended. The search engine and DoorDash/GrubHub charge their cut for inserting themselves into the transaction.

The only term that in mind describes the act of extracting rents in exchange for providing no value or even subtracting value is... extortion.
Might be interesting to do a few hours of pair programming too; i.e. implement and ship a small feature
You're of course correct but I also think you greatly overestimate the number of people willing to even put up with PGP, let alone sign their tweets with it.
I like it! The fade-in and up on the paragraphs is a nice touch, and it has a minimalistic feel that makes me want to read each section.
The article content is all about how Swift isn’t bound to iOS. You can use it in Ubuntu, Fedora, and inside a Docker container — combined with the “Remote - Docker” extension, as well as some Swift-related extensions hooked up to the included-with-Swift sourcekit-lsp provider, makes editing and running Swift on Linux fairly easy.

And Swift 6 will likely see Swift on Windows, sometime next year. That work will be built upon the efforts for Swift on Linux, so you can get ready for that today.
What about reading Dr. Seuss (or similar books), where the goal is not to access rich content or solve a problem? Where there is no goal other than to enjoy a book?

I agree with you there's all sorts of useful and interesting internet content that's not reading crap on facebook. There's even literary discourse on the internet!

But what about books? Reading actual books is different.
This is wonderful.

I’ve never really understood how solid fuel boosters work. Are they filled with something granular like sand, that empties down the rocket tube?

The video makes it seem as if the entire tube is on fire at the same time.

It’s also fantastic that an asymmetric vehicle like the Space Shuttle was ever built. What an outlier it seems, amongst the more, I suppose traditional looking rocket designs in this video.

A very poetic leap, as well, to think that the same orbiter that climbs under so much power is the same vehicle that glides into land without power, all the way back from orbit!
I used to have the same issue. Looking for interesting tidbits in a podcast was like finding a needle in an 1hr long rant haystack, and I personally like to have some snippet as a reference for later when I'm learning, but I found this app https://www.airr.io that lets me save and share snippets of podcasts. Pretty useful!
Log4j 2.13.3 Released
Google has an estimate 88% of the search market share in the US. (Its higher world wide if it matters.) Many people consider that to be getting into monopoly territory.
No, it's clearly just more sane. Without any knowledge of keyboard escape sequences, why should down come before up?
OpenNebula Webinar: Migrating your Cloud to OpenNebula on StorPool storage
I like that a lot more than what it means in Dutch!
Amazon doesn’t really “have” a monopoly. Walmart just can’t compete online, but it’s because they suck, not because of a structural force stopping them.
TypeScript almost seems designed to be transitional, and I say that as a huge fan and heavy user of TS. Gradual typing is fantastic for learning, porting a codebase, and interop with JS libraries, but as TS gets more ubiquitous and everyone goes toward strict mode, people are going to start wanting runtime enforcement of types, and to stop adding a ‘type’ or ‘tag’ or whatever metadata key to all their objects. After getting a taste of a good type system, people naturally want to go all the way.

If TS doesn’t figure out how to provide this in a nice way, I imagine there will be a fork or a new dialect eventually, or JS will get types added natively like you say, and lots of people will move in that direction.
CoffeeScript? 2017?

I had the impression that CS was done when ES2015 came out in ... Well 2015

I personally prefered LiveScript, should have been.
But this isn't a case of one party with financial means going up against another party without financial means.
Founders have to thrive, not just survive in the current economy
I don't think transportation is a good analogue because it is very easy to make substitutions. There are lots of ways to get from point A to point B with no single entity blocking your path.

How many ways are there to publish a mobile app, for example?

I generally describe myself as libertarian but I'm struggling to have a laissez-faire attitude about some aspects of big tech. I think the most frustrating thing is the lack of "due process" in the way that big tech deals with customers. Look at the recent story about the ridiculous review process for Chrome extensions. I could tell similar stories about the app stores.
Neutral looks cool. Look forward to trying it out once it's released (tho permissions on the chrome version seem a bit ominous, plus their website is broken!)
I think a "normal" user isn't likely to hear about PeerTube and immediately think "how can I join this?" Rather, someone might send them a link to a cool video like https://video.blender.org/videos/watch/8533ea43-4271-4a57-96... and if they like it, they look at some of the other videos on the same instance. So discovering an instance you like is not that much of a problem if you're not starting from the central project website.

Of course the instance that has the videos you like may not allow just anyone to create an account (e.g. video.blender.org doesn't) at which point it does get pretty confusing, because you need to move to some random other instance for no obvious reason. (Of course the reason is decentralization, but "normal" users don't care about that as an end in itself.)
Why is it dominant? Is Google is preventing competition from entering the market or is it because Google offers the superior product? Good luck with that in court.
The loops were imho, pretty tough but focused on library specific knowledge while implementing algorithms in the form of live coding.
Sorry, what's not accurate here?
It's worth pointing out that the overall IFR is estimated at between 0.49% and 0.83%, with 0.63% being the median. That's only a bit lower than your NYC quote, and still about twice the IFR from the study from Germany (0.34%).
Coffeescript does have useful features, but problems such as the ones I described made CoffeeScript code inconvenient to maintain in practice.

If we weigh the convenient aspects of CoffeeScript against the inconvenient aspects, in the end, CoffeeScript can be an inconvenient language to use. It was the case at least for me in various projects I had to maintain.

Part of the inconvenience was all the JavaScript tooling you cannot use, and occassionally being forced to read JavaScript code generated by CoffeeScript.
> Even in Google Chrome you can pick DuckDuckGo and Ecosia as your default search engine.

And making this argument is exactly why they added search engine selection. They wanted to be able to point to this tiny insignificant detail that might cost them a negligible fraction of Chrome searches and hold it up as market competition when the inevitable antitrust suit came along.

Have you ever heard of a for profit company gifting traffic to their direct competitor? It would be irrational behavior in a competitive market. If anything this is evidence of Google’s search engine monopoly and Google built the selection feature into Chrome it in furtherance of that monopoly power.
I think you might mean "Unravel 2".
Pretty much everything above their small medium business ISR routers use ASIC/NPU for all traffic possible. Which routers are you referring to?
Haha, I love that story at the end. I promise not to tell your company that it is a database.
> It appears your organization left an elasticsearch database exposed to the internet. This happens frequently due to poor configuration.

sigh

Why is everything being deployed publicly accessible? If one is relying on their database configuration as their only protection, they are one fuckup away from disaster.

Layers, people, layers. If this is on a cloud provider, put it on a private VPC/subnet. Add a load balancer or similar serving traffic only to the instances you need traffic routed to(which are unlikely to be databases themselves, more likely web servers). Configure firewalls accordingly. And of course, configure the servers properly.
sure. but thats really just a window being under the bandwidth delay product. the discussion makes it seem like you suffer an outright linear performance hit
You made me realize that podcasts do take the place of Wikipedia for me, especially when I have a lot of busy work. For example, someone mentioned Jurgen Schmidhuber in an AI thread here the other day and I was able to find a bunch of podcasts interviewing him or mentioning him. I threw them in a playlist and got a lot of what I wanted, passively for the most part and while multitasking.
> "Inheritance and OO design are the distinguishing features of OOP in my mind;"

I don't consider inheritance an important feature for a language to be an "Object Oriented Language." Inheritance: none, single, and multiple have been bandied about in the OO world for quite some time now so I understand where you're coming from.

I break out design from the language. While I wouldn't design very deep without knowing the language I was targeting I do consider Go as having a natural bias towards driving me to OO design over, say, functional or procedural. For me Go lends itself naturally to OO design. Sans inheritance, of course.

> "if you don't have these, then OOP is indistinguishable from FP or DOP. If Go is OOP, then which languages aren't, and why?"

Haskel, some Lisps, some Forths, etc. would be more non-OO languages in my mind. C is also a non-OO language to me even though you can certainly code it in an OO style.

I guess I agree with the blog author, OO is simply part of the language landscape these days and isn't going to be supplanted by functional any more than procedural was supplanted by OO. And with my mind-set then I'll say most all of Algol's recent children can be considered OO languages. So for me Go is definitely an object oriented language. But I now understand why you don't.
I've read lots of books in my life. There's nothing wrong with reading books if that's something you wish to do.

But not reading books doesn't mean you don't have an intellectual life and spending your entire day futzing around on the internet does not mean your brain is clearly and unarguably going to rot.

That's all I'm trying to say.
Write more tests. That's probably the best way for me. Writing tests forces me to write testable code. Which usually means higher quality code. It's hard to write tests for low quality code because you end up having fragile tests (having to change the tests because of changes in the program itself). Ideally the tests should be more like oracles, they should always work (at least until you decide to make a major redesign, not just a refactor).

Depending on your language of choice, if it has tools to initialize and manage packages/system/whatever-deliverables, make use of that to ensure good practice within the context of that language.

Build a CI/CD pipeline, even if it's just local. Most of my code never really leaves my machine (even though I use git for everything I write). I usually have a monitor running (either built into the language tooling like with `dotnet watch test` or just homegrown with `fswatch`) that executes tests/builds with every file save.

Pairing the previous two paragraphs, to avoid rewriting those scripts/tools every time I've forced myself into a habit of using good, standard organization for projects. By incorporating more testing (whether full-on TDD or not), I have to maintain the code quality a bit more.
How though? It's trivially simple to change the default search engine. Just because a product is dominant doesn't mean it got that way nefariously. I'm sure if you added up all the R&D over the years in search, especially considering the lead time in market, Google's numbers dwarf others (I don't have a citation on that, but it stands to reason).

Parallels could be drawn with Amazon and AWS's dominance.
Title does not match and is incorrect, they raised at a $100M valuation, $10M on cash and possible follow-on later