skysight-inc/HackerNews huggingface dataset:
From an economics point of view - We cannot say whether we are in a recession or a depression or none of that. Depression is supposed to be much longer. Probably we are in a recession and won't get into a depression unless some major geopolitical conflict occurs

It is good that you have 1 year of backup. Others have already given good business or technical ideas, my comments below are more philosophical

You should not target 1-1.5k. It may be enough today, may be better than nothing. But not okay, even for a 3rd world country. To begin with - you should target 2x of your job income at least. Once you have a figure in place, find out what you like to do (and that pays). It will be easier for you to filter opportunities as they come by. Believe me, opportunities come in truckloads and almost simultaneously. Everyone has just 24 hours and without a filter you will not be able to grab the right opportunity.

If you lose the job, you could get into panic driven fire-fighting mode. With a job today, your fear of losing it might drive you into a half-hearted effort to do something. In the safety of your job, you can plan for your progression to become independent. Tech skills are just one small part of the progression. Read books (or watch videos or listen to podcasts) about entrepreneurship, sales and/or people. Learn about finance and good financial mindset - it helps in the long run too. Take a notepad or use boards like Trello and keep writing the ideas that come to you, what you want to do, how will you achieve it, what problem it solves for you and others. Then prioritize and do the practical stuff one step at a time. That list will never come to an end. Other than a house mortgage, stay away from debt and even the house mortgage should be low or reduced.

Consulting for someone or some company is a good way to make yourself financially independent/safe sooner. But unless you enjoy it, do not stay with that too long. It consumes you and it is a different mindset. I've seen people (including myself) not able to leave consulting for a long time.
> The point is that macros become much harder once you move away from leading parenthesis.

This is... an extraordinary claim. Prolog uses foo(hello, world) syntax (note the comma) and has no problem with macros or any other manipulation of such terms. Note that there are longer, better reasoned, and higher voted answers to that StackOverflow question than the accepted answer which opts for "macros would become more difficult" FUD.
Show HN: A Simple Polymorphic Engine
The USA was never a democracy and was never meant to be a democracy. The U.S. is a Constitutional Republic.
The Phoenix Project is a software instance of one of these textbooks-as-novels:

https://itrevolution.com/book/the-phoenix-project/

https://itrevolution.com/wp-content/uploads/files/PhoenixPro...

And Commitment is about software projects, and is a graphic novel (with a female protagonist!):

https://hennyportman.wordpress.com/2016/05/29/review-commitm...

I'm also reminded a bit of Simon Wardley's dialogues with X; these are just a roundabout way of him expressing his thoughts, but because they're structured as a debate, i think he gives himself a bit of unearned authority when he runs rings around his imaginary opponent:

https://twitter.com/swardley/status/1082647878349324288
Wow, this place has completely transformed then? More like pleb news nowadays I guess rather than hacker news. Shame.
I'll un-shorthand my comment since it wasn't understood too well, sorry about that.

If it was password-strength validation, then it would have been blocked immediately during signup, with an error message that would have prevented the sign up flow altogether. The alternative flow that I'm calling the "weirdest shit ever" would be letting the user sign up without a password error which would mean they are logging the password in plain text for manual review later. You're both not actually making the password rules set during the registration process, but you're also manually logging the password so someone can see it in plain text. That's why it's the "Weirdest shit ever" especially if this code was written by a security person.

> What do you mean by "security of the regex"?

Let's say you use the regex on this page:

https://mkyong.com/regular-expressions/how-to-validate-passw....

If I suddenly want to add words like "fuck" or "f*ck" to the regex as banned words, the complexity of that already complex regex goes waaaay up, and it compromises its validity/stability. If you worked on regexes in the past that have multiple alternative flows, it's very easy to fuck it up and make it accept anything. It's not a good idea to change a regex to have stop words because it has a high chance of breaking the regex itself.

Again however, it's highly unlikely the password was blocked in the password regex step because it allowed signup to continue.

> And you're saying that they'd prefer to store the passwords as plain-text out of concern for the "security of the regex"?

No I wasn't saying that they prefer to store the passwords in plain text. I was saying that it's 10000 times more likely that the password is stored in plain text IFF (if and only if) the reason for the ban was because of the password. How would they ban the user if they didn't see the password, because of either a logged file or simply stored plain text in the database. And the reason it's likely to be plain-text database is because it's probably the number one first approach to store a username password combination. Even though WeChat is a huge company it honestly wouldn't surprise me if they are not using a salt and hash or bcrypt directly at this point. Yes I get that most people you know would use bcrypt or a salt/hash combo, but when you open to the world of all developers, specifically ones in China, what do you think the default user table is going to look like?
Should have been more clear: I worked in the US tech space since ~ 2013 (CyberSecurity) but do so as a remote employee, working from Germany. Hence I got the sometimes surreal experience of working for a VC-backed crazy-growth US corporation while still hanging out with my German friends on weekends who work consulting gigs or at a parts supplier for the automotive industry. Salary-wise the difference was between 2x and 5x, depending on whether you count stock-based compensation. After a while I found it hard to talk to my German friends about my job since it was happening at such a different pace from their regular jobs yet none of them seemed even remotely interested in landing such a job themselves.

I agree with you, I wouldn't move to the US for my job (and neither would any of my former colleagues), but we all appreciated the fact that when it comes to business, it's better to work for a US company which understands that sometimes you have to spend money in order to make money, which is not always the case in Germany.
Bannerbear is actually an example that even if you have an audience, and yongfook has been at this indiemaker space for ages, it is still tough to break $1kMRR [1] . He is barely over $1,030/month after almost a year at this project.

[1]https://bannerbear.com/open
You seem to have a conflict with your altruistic ideals and those of your employer. Note that a business is not a "social contract", and it is not a "co-operative".

It may be worthwhile to spend time understanding this closed culture, the decision making, and its overall impact on the business. I recommend reading "The Culture Map" by Erin Meyer.
That is what's becoming apparent right now, yes. I was more of an "a few bad apples" person until this week. But they're making it extremely clear that as a faction they have no regard for anything or anyone but their own power and bravado.
How likely is it that one will get a job at the end of this? "Three or four months. Full time." is a hell of a commitment for a, what sounds like, 'maybe someone will notice you, and maybe they're hiring'.
Simple to-do list without bullshit with execution control
Why is the human brain so inefficient? It takes years just for it to compute the sha-256 of this media file.
Pretty clear case for not hashing however.

Hashing the password on the client limits the password entropy to entropy of hash you generate. Any addition entropy in the original password is thrown away.

Also naive hashing in the client just turns the hash into your password, all of the standard issues of transmitting passwords still exists (such as replay attacks as you mention).
That's answered in the article.

> Nearly all of these agencies are headquartered in and around the capital, making it easy for Attorney General William Barr to enlist them as part of his vast effort to “flood the zone” in D.C. this week with what amounts to a federal army of occupation, overseen from the FBI Washington area command post in Chinatown.
I've been thinking a lot about maturity models lately, I think your points would go well in a maturity model.
Persistent Memory: Blurring the Difference Between RAM and Disk
And these banned words somehow do not stop registration immediately? And these VERY secure identity providers then later show the admin what password was attempted? I would say that's extremely insecure if not a huge privacy violation for something to be considered "very secure", and would definitely not have any form of sign-off from anyone that keeps up to date with OWASP security practices.
More mental gymnastics trying to believe whatever Trump has up next on his plate to rant about isn’t propaganda aimed at inciting violence.
What a complete misunderstanding of an obvious statement. Astounding.

He's just saying "This result is surprising". The part I cannot fathom is how you can misread this so badly. It genuinely blows my mind.
> If you're planning to arrest people after curfew, explain that in clear terms...

Who writes that notice? A coalition of the foot soldiers who are doing the actual arrests, or some high-minded politician sitting behind a desk? Because that politician can't actually make promises about the behavior of the police. De Blasio has been denying that well-documented cases of abuse have happened, and saying that if such a thing were to happen, it'd surely be punished. We've yet to see any accountability for NYPD.

Statements are nice. Actions matter.
The venture capital stuff was good for a time when Moore's law was repeatedly erasing whole industries at a cadence of every two years. That's how stupid ideas like blitzscaling could work [0]. How much longer will it last? That remains to be seen.

I find it instructive that a society that hasn't been exposed to VC practices has created some of the most valuable and innovative companies in the world.

[0] Blitzscaling 14: Elizabeth Holmes on Managing Product Strategy, Regulation, and the Media https://youtu.be/juhATwufdbc
It seems like it's better suited advice for between semesters in undergrad, and not while you are entirely dependent on your own sustained income.
You're really underestimating the complexity the network isolation is solving for.

If you had dynamic port binding, you'd still need to solve for security around open ports, conflict management, and you're adding this complexity into apps of varying quality.

I don't know what you're using docker for but in most of my cases, a non-isolated network would require rewrites and a lot of extra management.
That's in itself just begging the question. The genetic mechanism behind eusociality in bees and ants is haplodiploidy[1], which among other things makes the relatedness of workers up to 75% rather than the 50% between siblings in diploid organisms.

[1] https://en.wikipedia.org/wiki/Haplodiploidy
> Especially During COVID

Public gatherings are supposedly extremely dangerous right now. The fact that everyone is suddenly all for mass protests suggests we got the severity of Coronavirus wrong and people are using this as a convenient out for backing off shelter in place orders without losing face.

In February the "Philly had a parade, St Louis Stayed home" article was being shared by here and everywhere else.

From a people placement perspective, a parade and a protest are pretty equivalent.
> The agents protect federal buildings, government officials, foreign dignitaries and facilities, and they perform other law enforcement tasks.

The Bureau of Prisons does none of those things. Nor are they based in DC, which has no prisons. It's quite clear that these are external law enforcement personnel brought in for crowd control.

As to whether they are "occupying" anything... that's a semantic distinction. Clearly their job is to hold ground (Lafayette Park in this particular instance) and prevent access to it by the public. If you have a fighting force doing that, then "occupation" is clearly the correct term. For police? I dunno. What do you suggest?
Searching the FBO.gov you can find interesting solicitations, like the Department of Education needing 125 shotguns.
A single book, yes, can last hundreds of years or burn up in minutes. A book printed in a thousand copies and distributed all over the world, including places likely to survive nuclear war, will last hundreds of years.
I remember in the mid 2000s talking with a ham operator. The bands didn't overlap, but they were interleaved - the radios could access bands reserved for cell calls. If you snipped the right resistor off the right radio, then you could listen in on cellphone conversations.
A surgeon might remember anatomy with great accuracy but he is unlikely to remember the details of some case law nearly as well. Our memories are associative, that is how they differ from computers. It's easy for a surgeon to remember anatomy because he has been immersed in it for a long time and it all interconnects, i.e there are a lot of associations to call up the memory. Computers on the other hand could remember 20 facts about anatomy and 20 facts about case law no problem without needing any framework to attach them to.
So, instead of working with well established EU companies like OVH or Lease Web, they, once again, build-to-fail a sovereing solution.

They will not be able to hire the necessary talent, don't benefit from decades of expertise, have to build trust with multiple communities plus a client portfolio and have to pay for building infrastructures.

As @heipei said, Europe mentality is already years late when it's about tech. And while I do think we desparatly need our own alternative to the US GAFAM and clouds, this is, once again, a doomed attempt that will mostly enrich a few well connected people.
I watched a TV series once where people swapped family (including spouse) with someone from a different country. Pretty interesting
Until you start counting them in moles.
Additionally in a court decision from last year, accessing public data is legal.
https://parsers.me/us-court-fully-legalized-website-scraping...
That's pretty rich coming from a company that scrapes websites for a living.
Undercover officers were used to inform on the Trump campaign in 2016 (see Azra Turk), sometimes it's necessary for national security.
No, it would not be good. There is a difference between brother, best friend, friend, buddy, etc. You can be friendly to people without diminishing what those words actually mean. Not everything has to be "awesome", some things are just great, good or even okay. And that is literally okay.
1990s as well was mostly internet free for an average person. It was probably towards the end of the 1990s when people started getting wired.
>then hash(password) can just be used in a replay attack.

If password is sent over HTTP in plaintext, then password can be used in a replay attack.

Of course you can also do a dozen other things with it, such as attack other sites.

And of course this flaw is trivially rectified by having the site send a nonce.
Or it's possible that in 2-3 weeks, we're going to see a spike in cases.
> I still believe that tech companies should focus on building tech

You missed the whole point of the article, which is that "building tech" at that scale is inseparable from widespread political implications.
I’m pretty sure that under the hood a lot of AWS services like S3 are backed by dynodb, and if so then ‘chopping up and selling dynodb’ is a pretty core focus.
By implicitly agreeing that you understand what this commenter said, you're saying is that if somebody is protesting within 30 minutes of their home, it is just for them to herded into a corner, beaten, and arrested.

I don't think you'll find many others that find this to be just.
https://news.yahoo.com/twitter-takes-down-washington-protest...

> Off Twitter, viral text messages of screenshots of doctored tweets have circulated throughout the country. Some of the false text messages claim that extremist groups are plotting to move into residential areas this week.

> Bot researchers call this kind of disinformation distribution "hidden viral" text messages, which go undetected on mainstream platforms like Facebook and Twitter and can spread like wildfire without moderation.

Should SMS/MMS messages also be censored by the phone companies?
Your point about the need to "popularize" zk-snarks etc. is well-taken and I upvoted you for it.

But that said, we seem to be talking past each other at this point. I don't see why my criticism of the OP was unconstructive. This is not actually a research paper, it has not undergone any sort of academic peer review, and if the goal is to present it as one example of the kinds of things that are possible to build with zkSNARKs, then it ought to be presented in that context.

I do want to note that it is possible to compose zkSNARKs in an application in ways that result in the composition not being zero-knowledge. Not saying that has happened here, but implying there's no danger with incorrect usage of zkSNARKs seems sketchy to me.
> They should be a unique set of priorities, with only one single ticket occupying #1 priority, another slightly less one in slot #2 etc.

I've heard the ability to drag & drop tasks around in an ordered list (i.e. a task only has priority relative to others, i.e. it's position in the list) as "ordinal priority".
Though Bull doesn't exist anymore as independent company.

I did an internship there (before it was bought, in 2012), the river of public money had mostly dried up and I felt like the company didn't really knew what to do, even if there was some nifty tech being developed here and there.
Link looks broken. Getting 403 Forbidden.
Entropy is defined by the password. The hash is deterministic.
I think having a niche or single product focus is great advice!

Imagine if OP:

1) Picked a product/tech

2) Did a deep dive into it for 3 months - setups and teardowns, reading, learning everything in the docs, and experimenting

3) Started writing blog posts about it now - It's never to early to create content! This would help the OP learn and eventually (a long time from now) become a lead generator.

4) Started advertising as a specialist in XYZ

There are lots of opportunities to become an expert in something. People that really get themselves out there create courses and learning communities for their specialty. It would require some work to find the right niche.
There’s a lot of talk in this post about “experienced engineers” but it is never defined. I wonder what does an “experienced engineer” has or how can a junior acquire those skills.

Personally I have about 8y experience but suddenly found myself as CTO (inflated title...) of a startup, with budget to allocate, processes to implement and weighting what to hack together vs what to implement properly.
The last thing any company needs right now is the media digging up an old blog post/Tweet of them praising the police, so can't blame them. I wouldn't be surprised if the post magically comes back up when things are back to normal.
There's a difference between doing something and pretending it's the best idea though. Not allowing dissent sounds dangerously like setting yourself up for a fall that all the sycophants around you saw coming but were afraid to mention.

Like I say to my kids: you don't have to like it, you just have to do it. I absolutely encourage expression of disagreement though (and do change my mind sometimes when disagreed with).

I suppose if your management is primarily about being in a power-trip then projecting the idea that all reasonable people agree with you is essential.
> There's always that moment when you don't feel like picking "the one at the top".

A few solutions for this that have worked for me:

* Small units of work

* Having a tech-debt backlog broken into short lumps of cleanup, so you can "take a break" with something different

* Pair programming with frequent pair rotation. The next ticket is always taken by the next open pair, but you can work one something different every few hours if you need.

* trade tasks with a colleague

* sighing, saying, "well, this is my job," and picking the top thing anyhow
An algorithmically sorted feed separating signal from noise will ALWAYS have to make the choice of what to show. If there are 10k stories, and the average person only scrolls through 1k stories, thats 9k stories it chooses to suppress.

There is a difference between delisting stories completely, and removing stories in private messages, but once you talk about the feed itself, the provider is going to be writing some kind of editorial engine, that prefers stories that have more engagement, while at the same time trying to not uprank trash, spam, clickbait, and other types of bs that float to the top.

Spam has already crossed the line, where near everybody, in universal agreement, is ok with their email provider blanket censoring the bulk of it.
I'd rather they be counterbalanced with a well-armed citizenry, such as the "cosplaying" the article insultingly describes.
Maybe, but network isolation is an easy way to solve it and the existence of those environments shows its an important thing to solve.
We already have plenty of curated news outlets. It's entirely possible we will simply end up with another one.
Germans have a lot of legal requirements, red tape, old ways of doing things. Netherlands and UK are more streamlined, more parts of govt and daily life are digital, bank systems are more modern.
The idea of health wealth is good IMO. In ye olde times in China I read that you paid your doctor while you were well. If you went sick the doctor went into action to protect his recurring revenue treating you to the best of their ability.
Yeah, that’s all on you. I don’t know if confidence training is a thing, but you could hit a huge ROI if you level up your extroversion/confidence game.
There's a big difference between undercover police officers and officers who are overtly police but refuse to identify themselves.
Not that are publicly available. But I do work in large fintech, and know how much revenue we make from interchange and it way more that you expect.

While interchange in the EU is capped, it’s not zero. And interchange earned from customers travelling abroad in countries with very high interchange rates is quite significant.
You did not really show that "doing something" is better than inaction (see politician's fallacy). For example for a long time reddit was very hands-off at the global level and left moderation to the indiviual subreddits and in my opinion that worked fine for most. Sure, there were some very disagreeable ones, but you still had to deliberately enter them to see their content.

Division of labor does not necessarily mean total centralization.
Thanks, I was just thinking "I bet that's like the second line of the article" ...
The District of Columbia is not a state; it belongs to the federal government. Federal forces there are no more an occupying force than the Georgia National Guard would be an occupying force in Georgia.
https://en.m.wikipedia.org/wiki/United_States_presidential_e...

An unbroken history of being held every 4 years even in the midst of a civil war and WW2.
ios version?