skysight-inc/HackerNews huggingface dataset:
Threat modeling is all I get from the article. It is a vague conceptual guide. If you were hoping for code, software tools, or commands to type from your keyboard I understand your disappointment.

Security is often difficult to explain to software developers, because (contrary to what many developers believe) security is so far outside the training and experience of writing software. It’s like trying to explain relational data theory to school children with crayons. It’s not that the children are stupid, they are probably smarter than you and I, but that data theory is not a part of their world view and in practice they really really don’t care.

Yet, many developers falsely believe they have a solid understanding of security despite a lack of experience, training, certification, or interest in the subject. This, more than anything else, explains why opinions and articles from security researchers are frustrating to software developers and why security researchers prefer to not engage software development communities aside from some highly focused security oriented groups.

After working in security for a few years the subject really boils down to two boring words: risk analysis in the most abstract way possible. As a developer we like to think of security in terms of 0day exploits, patches, audits, memory safety, and so forth but those are just symptoms/remediations of. It like comparing pills and needles to medicine.
I can't agree more. Unity was a good way to do games because it provided visual editor and unified API between all platforms including mobile if you use unity only as a renderer, it's pretty good and stable.

The only problem, to use unity with comfort, you need to code some base for networking, asset loading, bundle management, caching, localization, visual scripting, and UI (using NGUI and happy with it). It's the way how large companies work with unity (blizzard for example)

Getting rid of all those layers of abstraction stacked over the generation and writing code using modern C/C++ much more satisfying. Especially now, when we have a nice minimalistic cross-platform layer SDL, not to mess with video card/sound directly.

For those who want a slightly higher level OOP API, I want to recommend to try out https://oxygine.org/. It's using modern C++ to provide API similar to MonoGame.

For those who like unity like editor experience I recommend trying https://www.duality2d.net/. It's free, stable, and extremely fast engine width C# scripting similar to the unity MonoBehaiours system.
The biggest advantage was their military success IMO, capturing India, the Middle East, areas all over the world ... taking on China. The violence was completely necessary because as the article said, because without force "The British could offer little in return that Chinese merchants wanted to buy."
Not to say that $80 million/3.5 million listeners is anything to scoff at, but it's hard to argue that his cultural significance is vastly diminished. Others have said he was reaching 25 million listeners at his peak so 3.5 million is quite a step down from that.

Now that might be just fine for Howard Stern, like it might be just fine for Joe Rogan, but I think it's fairly likely that this kind of deal does come down to trading cultural cache, and one's status as a household name for cold hard cash at the end of the day. In that sense, Rogan's move to spotify might be more like a popular touring act being put to pasture as a headliner in Vegas than it represents him taking on the mantle of mainstream media.

I suspect Rogan will see somewhat less of a drop-off than stern since the barrier to entry for Spotify is significantly less than satellite radio, but I suspect we will see that the medium has been a major component of his success: his show is pretty good when it's free and when it's everywhere. In other words, like Howard Stern was the best thing you could find when flipping channels on the way to work, Joe Rogan's content is often worth a click in a sea of mediocre content. Whether people will actively seek it out remains to be seen.
I think this is only if the unspaced period is in the first term. Having only recently moved to 100% omnibar from URL + Search bars I was momentarily annoyed by what you mention, but I soon realized it really doesn't come up very often because I'll typically use spaced terms and I can remember to put domain names (or inter-period'ed terms) after a first term.
Counterpoint: SROs are the most common location of overdoses in the city of San Francisco. Mentally ill people in housing probably don’t bother you, but that doesn’t mean they are safe and healthy.
>My suspicion is that supply and demand have converged

Eh, check out these sources:

10 Fastest Growing jobs in the USA--

https://www.bls.gov/ooh/fastest-growing.htm

IT Security & App Developer occupations have approximately 30% growth rates over the next 10 years.

Wages and projected openings by occupation--

https://www.bls.gov/careeroutlook/2019/article/wages-and-ope...

IT & Computer related occupations, in aggregate, have 250k-300k openings each year in the USA.

It's nice to have suspicions. It's even nicer to have data.
DragonFlyBSD is definitely it’s own seperate branch of the evolutionary tree.
When there are very few components defining a system, the parasitic components must be significant.

Lee Hill, a popular instructor for EMC compliance trainings, has a saying about that: "There's a lot of money to be made understanding the circuit components that aren't captured in the schematic."
Nest.js + Angular on the frontend is a dream. Nest.js was modeled after Angular and they both use a similar basket of concepts/tools (dependency injection, decorators, first-class TS support). You can build a robust full stack app without context switching. They are both opinionated, ensuring a consistent and predictable structure.

If you go the Nest + Angular route, I recommend checking out NX monorepos, which adds another level of seamlessness. NX was created by former Google/Angular team members. One of my favorite features includes the ability to easily share libraries/models across the front end and backend. E.g., if you're designing an API, you can import the same model file to both the front end and back end, ensuring no divergence between both sides as the API is redesigned.
Shhh: The Undocumented DOS Commands (1999)
Well interview's typically have a trick question... Perhaps this was a trick answer
That's rent control for you. Same case in Stockholm
I would say the British and the West in general suppressed China for over a century and it only started to rise after attaining independence in 1947
I read six or seven comments down before realizing that this isn't Next.js. Each time I noticed the "s" in someone's comment I assumed it was a typo. Not a great naming decision to be one letter off from something else that's closely related and in the same language.
The most reliable and cost-effective method I found was an array of USB cameras, recording on a host PC with PCI-E expansion cards and an SSD array. You avoid the hassle of file transfers, h264 compression artefacts and frame synchronisation issues.
Isn't this basic design for testability (TDD, if you like)? If you need some synchronization facilities to make your unit tests end cleanly, then you also need those facilities in your general APIs because applications _also_ have boundary conditions, and pretending that your application exists on an infinite timeline that neither starts nor ends is naive.
the interesting tidbit from the article related to this:

"The lopsided British victory in the first Opium War (1839-42) inaugurated what is known today in China as the ‘century of humiliation’.... Only with the rise and victory of the Communist Party in 1949, the nationalist lore goes, could the original shame of military defeat and colonialism be redeemed."

so in effect, british imperialism, through a coerced opium trade, pushed china from capitalism to communism.
The USA wasn’t around in 18AD, the Colombian exchange Of new and old world crops didn’t occur until the 15th and 16th century.

Soy bean exports are basically a proxy for pork, since exported soy is primarily used in animal feed.
Sorry, I used dictation for this comment.

"and Norma sleep" is a hilarious interpretation of "enormously".
It was a few years ago I listened to it, but I came away thinking Joe gave him the time to spout the theories and didn't push him on it. He has interviewed him a few times, not sure which one I listened to.
Human Readable Magazine Issue #3 – John D. Cook, Bart Filipek, Martin Savage
Let's be serious for a moment. A computer that is hacked and running remote access programs poses a MUCH higher risk of account hi-jacking for ebay and paypal purposes than another computer.

Feed that into a system that monitors lots of other inputs, and you start to build improved fraud detection systems. Most of these systems benefit significantly from long tail / long history monitoring - all the other providers of systems in this space try to get beacons onto virtually all the pages you visit, monitor all mouse and other movements you carry out etc.

Why not this pretty simple and straightforward explanation vs something complicated about overpaid consultants? Amazon does $80B of sales or something per year. Each 1% of fraud on this platform is worth $800 million. How overpaid must a consultant be who can knock this down?

I'm curious how someone with crypt in their name would ignore obvious remote access trojan installs as a threat vector?
Just the other day, VW's Winterkorn was accused of most of those things as well (well, maybe not of being super charismatic, but I don't think Ballmer would be considered that either, nobody would've followed him into the woods for a suicide pact).

My impression is that we'll notice it more in startups because they don't have the large and reliable power structure in place where these things don't become public, and their very nature of high-risk companies that are looking to go public puts them both more at risk for failing spectacularly and in the spot light.
I have done a mixture over the years. Some will be fixed term contracts (3-12 months usually) for a fixed daily rate.

Others have been your regular full-time employee contract. I was a normal member of the company I just happened to not work in the office (or very rarely, maybe once every 2-3 months I would travel and stay in a hotel for a night or two).

For contact work my daily rate does not change regardless of where the company is located. Obviously this can make me a little "cheap" in some places and very expensive in others. After each contract I will re-evaluate my rate. Usually if I find it a bit too easy to get work I up it.

Providing my rate is enough to cover all my bills and put what I want into savings I am good. I have never been too bothered about chasing that little bit extra. At least not constantly chasing. I have a pretty solid financial plan for the future that I am happy with.

When I joined a company as a full time remote employee my salary matched those of the employees I was working with. Obviously it was a fair bit less than what I could get doing contact work but that is a trade off I was willing to make for the stability at the time.
Why not use md5 then? You can always add more rounds.
What do companies feel entitled to keep profiting from content they made over a decade ago? Copyright lasts way too long IMO.
We do, potentially with some modifications to make it easier for applications to interact with each other in novel ways once the user grants permission.

Mobile operating systems are far ahead of desktop operating systems when it comes to making the "application" a first-class entity. macOS comes closest since most ordinary applications can be largely self-contained within the app bundle and the sandbox is steadily getting richer protection/isolation mechanisms. Linux applications have fairly well-controlled install and uninstall processes thanks to distro package managers, but post-install behavior cannot be managed with application granularity in any standard way (though there are some projects seeking to accomplish this, if they can first succeed in replacing existing distro package managers). And Windows is still largely allowing applications to spray files all over the disk and run whatever in the background.

The challenge for the desktop is that we don't really want to switch from a multi-user paradigm (with all applications in the same security domain) to a single-user paradigm with per-application security domains. We need a multi-user OS with per-application security domains, and mobile operating systems aren't quite there. (I've heard that Android can be multi-user, but I've never encountered that functionality in the wild.)
> Or perhaps I'm looking at this question the wrong way?

Yes. Achievement is much messier than we like to present it. HN is often not a good place to observe or discuss achievement before there are very polarized views that don't consider the impact of the achievement, or rail against an achievement because of the costs.

An example might be Elon Musk, but he could be substituted for many other people. It doesn't really matter because the pattern is similar. These individuals have outsized achievements that their core audience lauds. These achievements have costs, ranging from material impacts through to reputation. On the path to that achievement there are decision points with costs which only some people can bear.

The point I want to get to, is that individual achievements aren't the only kind and most people start to rethink their original ideas of achievement. As you get older, you have more joint achievements, or you get more satisfaction from helping others achieve big things.

So, as others have stated, understand your audience and work towards achievements for them. Just remember that your are more likely to become an expert in the area and be part of many joint achievements and help others break through. If you fall into the trap of individual achievement over all else, then you won't be able to recognize these things.
How to choose big avocados with small pits
Very nicely done, thank you for sharing this!

A CLP(FD/ℤ) solution such as this one has two parts: First, the relevant constraints are posted. Second, a search tries to find concrete solutions. In general, a search is necessary because the constraints by themselves are not sufficient to deduce the unique solution as that would be computationally prohibitive.

You can therefore influence the speed of the logic program in two categorically distinct ways: First, you can post different constraints or try a different formulation altogether. Second, you can try different search heuristics that try to find concrete solutions more efficiently.

Regarding constraint propagation, there is a clear trade-off between strength and efficiency of propagation. For instance, the all_distinct/1 constraint that is used in the sample solution propagates very strongly, and is therefore much slower than the weaker all_different/1 constraint, even though they are completely equivalent from a semantic perspective: Both are true if and only if the given integers are pairwise distinct. It depends on the problem at hand whether the stronger propagation pays off, or whether the weaker propagation is in fact sufficient to quickly find solutions.

Especially for very simple tasks such as Sudoku, quick and weak propagation may well outperform strong and slow propagation.

In this concrete example, I easily achieved a 20-fold speedup by replacing the all_distinct/1 constraint with all_different/1, and using the ff labeling strategy to search for concrete solutions. ff means first-fail, and is often a very good strategy. To get this, I simply textually replaced all occurrences of all_distinct with all_different in the source code, and posted:

?- problem(1, Rows),
sudoku(Rows),
append(Rows, Vs),
labeling([ff], Vs),
maplist(portray_clause, Rows).

Also, in less than 5 minutes, I just produced all 88 solutions for problem 3 which is shown at the end of the article. This is only due to using less powerful propagation, and a better search heuristic.

And this is one of the key attractions of constraint logic programming (CLP): You can relatively easily try different search strategies while keeping the model the same.

In Hakan's very nice Picat solution, you see that a specific search heuristic is used, specified as:

solve([ffd,down], Vars).

In addition, Hakan's program uses all_different/1. For a fair comparison between the solutions, constraints with the same propagation strength, and the same search heuristic must be used in both approaches.
Cobol was designed so that business people could program it. Then there was Basic, Smalltalk, spreadsheets, office suites, Lotus Notes, Hypercard, Visual Basic, Flash and the web used to be something simple enough anyone could whip a simple page or website together. But now we have Wordpress and Wix.

It doesn't seem like any of that has diminished the demand for software professionals.
Power Up Your PostgreSQL Analytics with Swarm64 [audio]
How to Build a Design System in Sketch (Part Three)
> Companies are forced to pay as much as possible to keep the talent for leaving. In a competitive labor market, this is often a good thing for the employees.

In practice they conspire to rip off the talent: "Apple and Google's wage-fixing cartel involved dozens more companies, over one million employees"

https://pando.com/2014/03/22/revealed-apple-and-googles-wage...
a) It refers to a court decision, and everybody knows that it cannot be related to the current situation because court cases take (much) more than two months.

b) Swissinfo is a well-regarded, state-founded website that provides news in several languages. Their translation is probably very good. Tages Anzeiger has a free trial if you want to read the German original.
A friend of mine had two job interviews lined up back to back for two game studios. On the first interview he bombed pretty poorly, but the interviewers were great guys who explained every solution and helped him work through the problems.

On the second interview they asked the exact same questions and he got the job offer.

He's now got his name credited to several AAA games and moved in with an indie studio to publish his personal project under them.
Why We Don't Shoot Earth's Garbage into the Sun (2019)
Why do you have so few platforms available to you?
> One of my features includes the ability to easily share libraries/models across the front end and backend. E.g., if you're designing an API, you can import the same model file to both the front end and back end, ensuring no divergence between both sides as the API is redesigned.

To be fair this applies to any case where you have the same language on the front and back, which was one of the main motivations for Node in the first place
Foursquare, Lidl, Nike, Globe and mail
Tail Risk of Contagious Diseases by Pasquale Cirillo and Nassim Nicholas Taleb
Will he withdraw the addresses from Kleiman case?
As much as I hate to admit it, I think more casual users use Spotify than use podcasts. Anything that isn’t available in my podcast player is invisible to me personally. But I’m probably in the minority. Just like anything that doesn’t have an RSS feed is invisible to me. But again, I realize that I’m in the minority.
Well, does dev/null supports sharding?
>Why do you feel so entitled to such ultimate convenience?

Businesses are in the game of enticing customers. If your homeware store is so bad that double-digit percentages of the population choose to steal glasses and cutlery from local bars rather than shop at your store, you need to take a long hard look at your business and figure out what the fuck you're doing so wrong.

You can bitch and moan about how it's wrong for people to steal from the bars if you want, but that's reality denial. It will not get you more customers.
We (fully remote team) made the switch from Slack to Twist about two years ago and never looked back. They really focus on asynchronous communication.
It's a common grammatical error for temporal typical people. Time travellers would have said "The US will have appropriateded in the 1800/18 fold". Not to be confused with 2036/2000 fold.
I'll add Ju 88 R-1 W/NR.360043, which is remarkable because the defection required coordination among two of the crew (who held the third at gunpoint).

https://www.rafmuseum.org.uk/documents/collections/78-AF-953...
You hit the nail on the head. A well designed system has coherent building blocks. When you scale that up, you don't end up with a rat's nest. Funny you should mention Evernote. I'm building https://histre.com/ as the said coherent alternative to it (among other reasons), as Evernote truly turns into a hoarder house after a while.

I'm a big org-mode user as well, and that solves most of the "write stuff down for later" needs for me.
Nuxt is Next for Vue.js, so it does make sense.
Next and Nest are unfortunate, always need to read it twice to be sure.
I've only heard the audio and didn't realize. Wow! He's great then. A superlative interviewer.
What hint?

Mobile is growing and Reddit is a business.
I can't believe someone can so totally misunderstand a 15+ year old application.
Ecoin exposed data from 2M+ users: emails, names, phones, encrypted passwords
I would say it is somewhere between tutorial and distro.

It is a distro that has no binaries for you to download. Instead you copy/paste pieces of code and follow instructions.

Instructions are regularly updated like a real distro.
That’s a good point—the software provides new types of UI, too! I had been thinking about rearranging text and org-capture, but you’re right that another excellent feature is the ability to view and interact with text fluidly and easily
Vidas Y Teatros, Federico Herrero, Director Profesor
Try checking "Print headers and footers" in the print dialog.
Counterpoint: If this was going to happen it would have already.

Here's RMS talking about secretaries extending Emacs with Lisp:

> programming new editing commands was so convenient that even the secretaries in his [Bernie Greenberg] office started learning how to use it. They used a manual someone had written which showed how to extend Emacs, but didn't say it was a programming. So the secretaries, who believed they couldn't do programming, weren't scared off. They read the manual, discovered they could do useful things and they learned to program.

https://www.gnu.org/gnu/rms-lisp.html