skysight-inc/HackerNews huggingface dataset:
In the best of systems, client-side encryption/hashing occurs.

In the mediocre, they are sent to a server-side app and hashed without being analyzed, and stored in their hashed/salted state.

No good service analyzes your password server side, much less for the offensive nature of your password.

edit: Okay, I suppose there can be some analysis of password strength server-side before hashing at rest. Still, it should not be analyzed for the social acceptance of its content.
Priorities changing is one of the more frustrating parts of doing client work. Business priorities can change for so many different reasons, and you just have to learn to let go. I've seen entire product lines disappear the week a singular person leaves the company. Product in boxes, ready to ship, no longer needed.

If you are in an environment like this though, try to do very atomic commits as you go. Often you can salvage some work for the betterment of the platform even if the whole feature is not needed. Maybe you did some refactoring, if that's in a neatly organised commit you can just cherry pick it right out of there.
If I were a cop going to confront protesters who could be armed, and represent a group known for executing cops, have currently killed one cop, and are generally causing chaos, I might want to bring a little more than my work clothes. Just saying the cops' perspective is not totally incoherent...
At WalMart Stores, Inc., was opening many stores in China in the late 90s and early 2000s, I was on the 'Network Management' team. Think: 'devops' but for an enormous global network.

At the time, (most) every store in the world had a 56k frame relay network connection back to the Bentonville, Arkansas home office. The main purpose of this connection was to do various credit/debit/EBT,check/etc authorizations.

Stores in China had something additional: a fractional 56k frame link, the far end terminated by some other entity.

Normally, in store point of sale systems sent authorizations to the then named VISA system in Bentonville. (It was called VISA but it handled most electronic transaction types. It was replaced by a far more robust and generalized system called E-Pay shortly thereafter.)

In China, the POS systems also sent the transactions across that other link.

We didn't know officially who was on the other side, but it was widely speculated that it was the Chinese government.

My knowledge of these things is nearly 20 years old now, do take my recollections with a grain of salt. Also, I have no idea how this setup has subsequently evolved.
How does that matter? Perhaps due to the potential scenario in question being interrogation by law enforcement that doesn't have your best interests at heart, not "who has the better witty retort to score points online?".
so some context

I'm work with different startups and teams at times, everyone has a different opinion of what UI library to use on top of React, Angular, Vue

At the end of the day we always have to write a small minimalistic sass library because from my experience that's what most people are comfortable with

I find myself constantly writing the same boilerplate so I wrote this instead. Also its super opinionated, based on my experiences of what I liked / disliked about ideas such as Atomic Design principles etc. And what worked / didn't work when working with different teams

Designed to be used with bootstrap, material UI, or just standalone

I personally don't like using CSS-in-JS because it takes too long for me to write, requires the team to understand, and requires too much tooling imo
Would look into different research regarding managing up, down and across and persuasion more generally. Robert Cialdini has a classic book called Influence I would highly recommend. I think at the management level you're describing, managing disagreements is often about trying to create internal alliances to advance whatever project/policies/changes you think are in the company's best interests.

It also might be that your company has grown to a point where not everyone's self-interest is aligned with the company's best interest. Would recommend Loonshots by Safi Bahcall which explores that idea quite a bit too.
Are we really surprised, given China’s death grip on the app? They train their anti-censorship algorithms on user conversations outside the great firewall. Even having the thing installed on my phone is too far
I think an important consideration is important for whom. If the only reason something is important is because of an arbitrary management deadline, the right response is to stand your ground and calmly finish working on what you already picked up. While I understand it's easier said than done, if you don't stand your ground, it won't get better. The polar opposite of this is when I personally broke something and it's stopping others from doing their work. In that case, the right response is to drop what I was or wanted to be working on and fix the issue.

An extra case of all of the above is planning work around big releases and the like. Regardless of how solid your CI pipeline is, if there's a bigger change set released, it's good to have someone who's designated on call. They're free to work on their stuff if they please, but their main priority for that whole day is the delivery. If anything is fishy, they're the guy who picks it up first.

None of the above happens without good communication. To get to good procedures you need to take the time, discuss with your team, and agree on what your plan of operation is. Make sure it's clearly communicated both inwards and outwards. If anyone internal or external comes to you with a fire, you can point them to your plan. It may be urgent to them, but that doesn't mean it overrides your team's agreements.

With all of the above in place, the scenario you described changes considerably: instead of asking whether you can finish your task, you will instead inform the other side that you're going to finish your task, and if it fits your plan, then deal with their problem. At the end of the day, it's a matter of mutual respect — it doesn't matter what the org hierarchy is, they're asking you for help, they can't demand it.
> They created the Cloud and we arrived late on this market

Same for the web, for the mobile, and for many other sectors. We seem to be always late on the market, why is it so?

> All defense/sensitive/state owned companies, administration and maybe banking companies will not have the choice

Ok, so if I understand it correctly the EU is going to regulate out from some sectors non-EU companies and has to both come up with a legal excuse and to create some acceptable alternative before the regulation comes in force. And if the alternative is mediocre it won't be much of an issue because there will be no choice anyway. But the idea of creating an interoperable standard is good: it could allow a sane competition between companies to provide a basic standardised service. I hope it doesn't resolve in the next embarrassment. It won't solve our problem of constantly lagging in most consumer high tech sectors anyway.
> This project does nothing additional to automate the actual installation of macOS inside the VM.

This one does https://github.com/myspaghetti/macos-virtualbox

Not fully, not perfectly, but does. It periodically asks you to press enter and wait.
TIL English has no word for pining.
(wy)kombinować - I'm sure other eastern block countries have their equivalents though.
You Can Sell Your Home Without a Realtor Through Instant Buyer Companies
I haven't been protesting but there should be an exception for when police escalate.

I've watched videos of peaceful protestors getting shield bashed by police which causes them to get really angry and then they get a beat down for being angry about it. It's a pretty human response to get angry when someone gets physically aggressive towards you.
Try getting a job in react or python(Django?) or nodejs. There are huge demand for these and these are the easiest to learn.
But that's because in those days the people that built the thing have to do production support once it goes live. That doesn't happen so much in larger organisations because they have separate teams divided along "add/build something new" and "keep it going" boundaries without a lot of cross-pollination.
I mean that would be true in the US, but OP explicitly said he's not in the US. It really depends on where he is; 1.5k/month could be considered a very good wage where he is.
You might set a karma ceiling for the reward system, so that it only applies to a particular band of the karma spectrum; the bot is pointless after the threshold has been reached, so there's less incentive to write it.

(I wonder sometimes what things on the site should exclude people based on high karma).
>> There are more gun-carrying agents employed across the federal government by inspectors general .. than there are ATF agents nationwide; the roughly 4,000 inspector general agents nationwide, in fact, is roughly equivalent to the entire size of the DEA. The Department of Veterans Affairs’ police department, who guard the nation’s veteran hospitals, facilities and cemeteries, is larger than the entire U.S. Marshals Service.

Why don't security guards guard hospitals and normal investigators work in watchdogs? Why are they all police-style groups? Is there some historical reason?
Charted: Deadliest Jobs in America (2015)
I hate Yammer but some salespeople in a previous company "lived" in it. I always thought of this obsession with having a company-wide social network as horrible and creepy. Teams or Slack are just about the most I can tolerate: flexible working groups. Anything beyond that is oversharing. I honestly don't want to hear about the party you had after this or that big win, particularly when I know how much those drinks cost compared to my non-rising salary.

Then again, I don't like anything that resembles instagram culture, so I'm probably in a minority.
Everywhere I Look I Still Can't See
If you have the Fed artificially buffering the expansion & recession forces (as we have, with their zero rates forever, QE infinite), you could see a slow overall rate of growth stretched out over a long period of time instead of a sharp & brief recessionary contraction and sharp bounce back as typical in the past. Their never-ending stimulus may smooth out that expected event. In that scenario, the only thing likely to cause a meaningful recession is an (perhaps inevitable) epic asset bubble popping, from some very high price point that gets so high in a parabolic run that it's unsustainable even if pumped by 0% Fed rates (think Bitcoin crashing down from the rapid run toward $20k or the last quarters of the dotcom bubble run).
Would you even have cross-cutting concerns in a team of 5? Given previous experience, it's quite common that if you have a team of 5, it will be reasonable to assume everyone is sharing a bus factor of 1~1.5 and one person will be the infrastructure master. Letting them use whatever tools to leverage until you can have more runway is good.
There is a lot of fantasy in this. Traditional Native Americans had to deal with a lot of things we don’t: famine, drought, disease, rotten teeth. And depending on the tribe, war could be part of your culture and age-appropriate males could be expected to risk their lives very regularly.

Ostracization was a death sentence: there was no space for LGBTQ or anyone significantly different than the norm.

Do you know what they did for entertainment? Games similar to horseshoes. No books, no video, no computer, etc.

Hunting is really hard when it’s 10 degrees outside with snow on the ground and your shoes are made of plain leather with no modern water proofing.

I could go on but I’m tired of trying to convince you. Every culture has it’s pros and cons.
Browser WhatsApp works through a connection to the phone, and not directly to servers. If your phone is off, Web WhatsApp doesn't work.
Here's what's actually happening: the cops say there's a curfew and they're arresting everyone at 8. Except then they kettle everyone at 7:30 so you can't leave. They then arrest you at 8 for breaking curfew.
> since by definition household has at least 2 members.

You can have single person household, and single income - but yeah - my point is 1000$-1500$ for someone who claims to live in a "third world country" and have no experience sounds like you have expectations on what you should make because you've seen others charge that - in reality with no experience and formal training you should consider yourself lucky to get any opportunity to learn/validate your skills because more often than not (from my experience at least) during the first 6 months to a year it will probably take more resources off productive people to get you to be productive than you will be able contribute
Well i run a node (not exit) and yes it's better then nothing, but to fully trust Tor is a big nono, i said nothing else. Protections from private company or country's yes..but protection from GCHQ/NSA probably not.

And no you can trace it thru the ISP's, the problem is the latency, Connection from here to there in that millisecond trace one...and so on.
Yes, like that elderly man they pushed over in Buffalo who fractured his skull. You never know when these unarmed old people are going to try to end your life!

https://www.cnn.com/2020/06/05/us/buffalo-police-suspension-...

The protestors are not a group known for executing cops. Unless this was just a straight up racist dog whistle about black people. That has no basis in fact. The protestors are overwhelmingly peaceful.
It seems "libertarian" followed suit of most other political labels: more definitions than adherents.

First you had the left libertarians, who, in typical left fashion, were splintered a million ways. Later you had right-libertarians who gradually splintered a million ways: I remember Gary Johnson being accused of being a statist for being a fan of driving licenses, I've seen minarchists at constitutional libertarians throats, and ancaps who choose to wear a different label. Don't even get me started on what makes justified property and how that divides this label even further.

If I didn't include this sentence here, I'm sure I'd get a comment about how none of those are real libertarians or how there is only one true libertarianism.
I can't think of a project of any size that terraform would be excessive for.

Agree, if you're introducing it to a new team and don't have time to teach the tooling that could be problematic.

But being somewhat familiar with Terraform I would use it to launch a single EC2 instance. Because it's about as fast to do that as it would be for me to use the AWS Console.

It's not that I think Terraform is needed for that small of a project, it's that it adds no cost even for tiny projects.
Ask HN: Laptop and OS setup for total web development coverage?
As a web developer I was handed a MacBook a couple years ago. Its 'ok'. The keyboard is jank and not being able to span windows over multiple monitors is one of my many minor annoyances with MacOS.

However, I was recently given the chance to switch to a laptop+OS of my choosing. I was eyeing up a thinkpad or xps, but I realized that I have no clue how I would facilitate the testing of Mac specific things like Safari and Apple Pay outside of a VM. Likewise, currently I have a 2nd windows laptop just for the sake of Edge/IE11 testing.

Folks who need to be able to test IE11/Edge/Edgium/Chrome/Firefox/Safari are you using VM's, juggling multiple physical machines, or have some other solution that works for you?
Spotify for Pets
What a joke of a headline - what does Trump have to do with it? Is Reuters trying to say Trump was dead right or misleadingly imply he was dead wrong?
> have currently killed one cop

When/where did this occur?

> represent a group known for executing cops

Which group would this be?
I use a function "ev" that wraps bc. It's crude, but handy:

$ ev() { echo "scale=3; $*" | bc -l; }

$ ev 22/7
3.142
Conversely, I know someone who fried their Macbook by using a counterfeit MagSafe charging cable. The charging cable was sold through Amazon (!!) and claimed to be genuine, but it was not.

So the advice to use only good cables is universal. With USB-C at least you can get a good cable for a lot less than $79.
From an epistemological point of view, the word "cat" is as untranslatable as the word "sobremesa". That's the absurd part that gets people in arguments on the internet.

In practice, we get by mostly fine (partly because, as you point out, we have footnotes).
C is the most important part to me, lol.
Just like you should drive defensively, you should protest defensively too. A pair of ballistic-grade safety glasses for starters would go a long way (the kind industrial workers use to protect their eyes from flying ball bearings). I keep reading stories about reporters losing eyes to rubber bullets, when it is completely preventable.
I'm surprised backpacking isn't a more common answer. Pretty much every time I go backpacking, I'm essentially isolated from the world. My phone is just a camera/reference device at that point. Like you, I spent a few months backpacking before smartphones, and it was amazing.

I ended up losing my camera charger too, so I had to sketch everything I saw in my journal. I got pretty good at it, and realized how much more methodical, thoughtful, and slow sketching is, compared to photography. It was an enlightening experience. I bet you treasure your journal a lot. I certainly do.
Further to the practical/technical issue of being blocked, there is a legal issue: this way of coding it (= not using an API key) violates Google's Terms and Conditions.
I think the police can disperse when they think violence will escalate.

Say you have opposing factions protesting each other (let’s say people seeking independence versus those who want to remain a colony somewhere). Should police just allow them to beat each other or instill some order?
> In what way can this be proven?

Proven? Nothing in science is ever proven.

But on half a millenium we have failed to find anything that can't be simulated by math, and Turing completeness means a computer can simulate anything that can be simulated by math. We also can simulate all the smallest components of a brain.

At this point the claim that math can not simulate it is highly extraordinary.
Start a business. Even if it fails it will help you migrate towards a not pure software engineering role which, as you are now seeing, is highly cyclical.

It is 100% okay if the business fails. I cannot stress this enough. Starting and running even a failed business combined with your technical ability will separate you from almost all other candidates if you need to re-enter the job market.

You sound like you are in a lower wage country so I would recommend a marketing or sales tool. That is typically a growth industry during slowdowns as sales people search for new tools to turn their numbers around. That makes it easier to sell to people in higher wage countries without having a physical presence that is sometimes important in typical b2b sales.
https://metacademy.org/
People always carry with them these passions but without a clear channel to direct their passions, it remains in tension without expression. The pre-existing efforts to address these concerns could very well be seen more as tension-defusers as people are content to believe that someone else is doing the hard work.
That sounds like a good approach to reduce tragic outcomes _right now_, but I can't help but feel that it's also oppressive. I don't want there to be curfews at all, because that's not freedom. I'm just glad that my municipality doesn't have them, though I have to be careful these days about where I bike because some nearby ones do.
Server side, the more you pass around a clear text password the more likely you are to have a security issue. So it’s very good practice to immediately hash any submitted passwords to avoid them ending up in logs accidentally etc.

It’s pointless client side. Trusting the clients hashing of a password is the same as using a clear text password. Aka some admin or hacker learns the hash they can use a modified client to send the hash directly.
> "I quickly learned that engineers frequently assume the best-case scenario for their time estimates, while managers end up planning for the worst-case scenario."

To be fair, bad managers (and there are a lot of them out there) often get really angry if you give a reasonable worst case scenario time estimate for a task, even if you can back it up.
Yeah, I've seen that as well. I believe it's mostly fear-driven, in a way of "if this gets automated, why would they need to keep me around". It's a terrible mindset for everybody involved. It really slows the team down, and it's a major issue for the person themselves. It's like impostor syndrome on steroids. Not only do they worry that they might be found out, they worry they might be replaced by a script.

I've never personally seen somebody getting fired because a script can do their job. I've seen them being freed from doing the same repetitive bullshit day after day though, and finally being able to actually tackle new challenges.

But unfortunately, that kind of mindset is not something you can change through rational arguments, at least in my experience.
No, people who murder people over property are murderers
Ask HN: What can I build for you?
With the current pandemic and most things shut, I have a lot of free time at hand. I am looking for something to build.

So, is there anything I can build for you?

Skills - HTML, CSS, Javascript, Node.js, Python, etc.. I can pick up anything else that might be required.

I just want to stay busy / engaged. I don't need money. I would be happier if I could open source it.

Let me know.
I've noticed that (low- to mid-level, at least) business, marketing, and other folks are generally a whole lot looser with their numbers than developers are. That is, they'll toss around measures that aren't meaningful—and not just in some quibbling sense of "well technically maybe these could possibly be wrong" but truly are very likely to be way off the mark—because they didn't properly control for confounders or are clearly measuring the wrong thing or whatever. They'll assign meaning to measures that could easily have nothing to do with what they're saying they mean, or mean the opposite.

... but this usually goes over just fine. Rarely questioned. I think if they didn't do this they'd be just as bad off as developers, if not worse due to (again, generalizing) having a worse understanding of how to measure things well.
As a beginner myself I wouldn’t even know where to begin to contribute to something like Kubernetes and agree with your point. Those projects have a lot of eyes on them and the talent to follow, what value could I add as a beginner that someone with experience couldn’t do in a heartbeat(or hasn’t already).
people claiming to be acting on behalf of blm have executed a number of cops, and i believe some of their leaders have called for the same

micah xavier johnson is one

security guard dave underwood was executed a few days ago

but you also bring up a good point some protesters could be gang bangers who do have a vendetta out for cops