skysight-inc/HackerNews huggingface dataset:
> (how many people knew this was a default before now?)

Pretty much everyone who ever opened /etc/systemd/resolved.conf
The intention may be such, but there is plenty of study on the mentally enervating effects of jargon that I can't help but feel the goal would be better achieved with shorter, more energetic phrasing.

on edit: better structure
More like - that community leader takes an unbelievable amount of flack and is still generately polite and helpful in most of his interactions.

How about we cut them a little slack for occassionally being human?
Don't forget about the many now unemployed youths (due to the pandemic) still dissatisfied with the system since Occupy.
What are the 'obvious privacy reasons' to not use google DNS/NTP?

I am being 100% serious when I ask: What bad does someone expect to happen as a result of this.
Learning (not the machine kind): Slow Versus Fast
A "better" way would be with an hmac sha256.
I don't like it either, but Lennart Poettering already has a reputation for this. If you've spent time listening to criticism of systemd and some of his other projects, this is not news.

I think it may be a mistake to extrapolate his attitude to the scale of "open source community", even though it is also fair to say he is not the only one with this problem either.

Edit:

> Christ, what's next? You accuse us of controlling people's minds with vaccinations we get directly from Bill Gates? And that systemd uses 5G to spread CoV-2?

A joke occurrs to me. Systemd already does so much. It wouldn't surprise me if that were in there too!
How is it possible to use the Go "enum pattern" without having issues with type safety? It's inherently not type-safe at all.
Are you talking about the CERB? Canada didn’t give it to everyone, you had to apply but the CRA essentially approved every application immediately. Then, surprise surprise, there was rampant fraud (8 million Canadians applied and received CERB). So they announced that they will be auditing many applications and asking for it back, potentially adding fines for egregious cases.
Not disagreeing with your general point, but I see Postgres as far from a boring choice. It is constantly evolving in inventive ways.
Toggle the stylesheet visiblity to see the links in the post (using dev tools)
Arch Linux for example:

#FallbackNTP=0.arch.pool.ntp.org 1.arch.pool.ntp.org 2.arch.pool.ntp.org 3.arch.pool.ntp.org
Speaking from experience, the JVM is fast enough for real time bidding in adtech. Most major ad exchanges require the latency to be below ~80ms, which is not that hard to achieve.
In contrast to high-frequency trading, there is no competive advantage in having a lower latency.
Ah, I think that might just be an age or social-clique thing. At least among my friends, we've generalized "stalking" to just generally include seeking out someone's real-life identity via their online breadcrumbs, even when the "breadcrumbs" are signposts put down on purpose.
I so miss 4:3. I still think it’s the right ratio for the kind of work I do. Widescreen is for movies!
This study mirrors others, namely, police shooting are rare and don't show racial bias in the aggregate, and usually are 'justified' in some form (i.e. aren't a very clear case of wrong doing like the George Floyd case). It isn't great for police reform policy, because you don't have metrics to judge success or aspire to.

Having said that, this is an emotional issue and does need some solution. There was a recent article about a black Google VP who was hiding in her office when there was some sort of active-shooter threat on the YouTube campus. She was as much afraid of being shot by this threat, as she was of mistakenly being shot by a police SWAT team... that's a real fear in a person of privilege (highly educated and positioned high in a Fortune 500 corporate hierarchy) and that's not good. There is a lot of trust that needs to be regained that all the calls to 'defund the police' miss. Maybe we need more funding (not less), for things like training in community interactions and deescalation. Why not have police officer spend 1 day out of every month, doing some sort of simulation training on deescalation and community outreach and .. heck .. 'customer service' - it's going to be expensive, but social strife is expensive too.
Anyone know anything about this? I found it randomly
In the time of coronavirus, having people stay home was one of the key goals.
Honestly, the "debtism" as you describe it is more of a cultural issue of consumerism in America. The amount of people buying new $35,000 cars while they're making $40,000 a year is shocking.

It's been hard for me to understand, but from what I've read the Fed isn't buying stocks directly, although that is somewhat pedantic as they are trying to prop up the stock market through other means. I still don't see how that can be a good idea in the long run.
Wearables – Where are we?
> Just because you aren't supposed to do Linux syscalls directly, doesn't mean there isn't an Android compliant way to achieve the same goal.

But in this case, they didn't give us Android compliant ways to do any of the stuff they restricted.
This is where the debate usually starts from and then one thinks about it in a bit more depth and uncovers multiple layers of nuance and complexity. Where you end up probably depends on your general outlook and intellectual integrity but you've only just begun the journey.
Thanks for pointing out that the service was already in use on their search results pages. To me, this goes a long way toward explaining how this could have happened:

Scenario #1 - "We need to show favicons in our browser tabs. Lets develop an API that requires every domain be sent to us!"

Scenario #2 - "We need to show favicons in our browser tabs. Hey look, we've already got a service that provides this. We know it collects no PII and our users trust it already."

Obviously the second scenario is flawed thinking, because (of course) it's better to not send that info at all. However, I can easily see how their developer(s) may have arrived at the conclusion that this is still compliant with their privacy ethos.

The fact that the favicon service already existed (and was trusted by users) before this was implemented, makes it much easier to understand how this could have been a legitimate mistake and thus, they deserve the benefit of the doubt.
Non-tech companies. Banks, insurance, defense, etc. are likely your best bets to avoid leetcode interviews, but even those companies are starting to get on board the leetcode cargo cult. That said, the level of rigor is still likely to be lower. A suboptimal runtime solution that would be a fail at a FAANG interview might be a win at one of these companies' interviews. Or you might get leetcode easies instead of mediums/hards.

I don't know the details of your current circumstances, but if you're already at a "FAANG like company", I would imagine going to a non-tech company would most likely be a step down in terms of pay, perks, prestige, and work environment.
Ah yes, you caught us supporting a drug network with 60k members, we will sue you for harming our business.
Practically every popular language is faster than Ruby and Python.
Do you consider visiting a site and then leaving the site before looking at anything there rude? People can't change their mind?

Putting something in a cart and leaving it there should be inconsequential to the seller. The only thing it might affect is their analytics. By the way, I consider analyzing my site visits and other data about me to be much more rude than abandoning a cart, especially when most sites don't even tell me they're doing it.
This article says: "Writing custom cryptographic code such as a hashing algorithm is really hard and should never be done outside of an academic exercise."

I would like to remind readers that the same applies to "salting and hashing". Developers who are not cryptographers should be using an accepted "key derivation function" and not salting or hashing themselves. Examples of KDFs are PBKDF2, bcrypt and scrypt.

That's not to dismiss discussion of how KDFs should be implemented. That's presumably very on-topic for HN. But this shouldn't be confused with best practice in using a KDF. If you're implementing a KDF in your application instead of using a pre-built one, you're probably doing it wrong.
I don't know if this means I'm old but normal people used to just call this a global salt. The pepper term seems a little cute and not nearly as obvious as "global salt". Though it did get me to click it, which I guess means it market tests well.
The Journey of Adopting Cloud-Native Development
America Exports Cancel Culture to the World
Are sitemaps really dead? Still a good way to fulfill the WCAG requirement of providing multiple ways to locate a page [1].

[1] https://www.w3.org/TR/WCAG20-TECHS/G63.html
If it's so irrelevant, then why _not_ change it? That's what good leaders do. Small price to pay to get good will and a large group of bystanders on your side.

His way generates conspiracy and alienation.
Pretty much everyone who ever opened /etc/systemd/resolved.conf

That's a vanishingly small percentage of people who use systemd.
I somehow have the feeling that she will talk before this happens.
If I want my systems to fail in DNS resolution if the DHCP server doesn't give them a DNS server address (by design), I'm essentially SoL then? My option then is to block outgoing TCP/UDP 53 on my firewall, except from my forwarders. Or maybe I should just suck it up and start building systemd in-house an give it a bogus default, with all the maintenance and overhead that involves?

So, in a few months to a few years, when systemd silently switches to DNS over HTTPS, what then? Maintain a (growing) blacklist of public DoH servers?

I'd much prefer my software to fail (and let me know), rather than assume some default someone, somewhere, somewhen thought a good idea.
> That amount went to everyone, regardless of job loss.

This is provably false. It only went to people who filed taxes in 2019 and who met the qualifications.

Despite both of those things still being true, and having lost my job as a direct result of COVID-19, I was still told I would not be receiving the benefits. I was not given a reason by the automated system and I have yet to reach a human being to explain my rejection. I am far from an isolated case
Heh...I never even noticed that before, thanks!
Data Templates with Pydantic
when I worked in adtech, we located the servers close to the exchange. This indeed made much more difference to the latency than code optimizations.
“Sous les pavees, la plage.”
I'm not an economists, but I don't think that's how it works.
There's nothing stopping trusted 3rd-parties (e.g. mastercard/visa) from building wrappers to hold the btc in the meantime and mitigate end-user risk (full circle woo!). Definitely fewer protections from bad-actors with direct btc transactions, but that's by design (e.g. no requirement for a third party)
Why do we need to quantify it?
I didn't mean the entire open source community, just the Systemd open source community, sorry for the confusion.
I can recommend a book called Wiz Mob.[1]

It's ostensibly a study of the specialized language of pickpockets, but actually goes in to great detail on how pickpocket gangs work.

Before reading this book, and knowing nothing about the subject matter, I had somehow assumed pickpockets worked alone and were just bottom-of-the-barrel amateur opportunists. I couldn't have been more wrong, as it turned out they work in highly organized units.

Fortunately, probably through the ubiquity of video surveillance, such gangs don't seem to be as widespread as they used to be.

[1] - https://www.amazon.com/Whiz-Mob-Correlation-Technical-Pickpo...
Wie lukt het om het best te worden
Ok, thanks :)

We can't go any further on here, too much ground to cover.
With .NET 5 the fastest non-PCRE C# regexredux implementation there completes in five seconds on my machine, as opposed to 8 seconds for the Java implementation. Still quite a bit away from C, but I'd say respectable for a purely managed implementation.

It helps that the team has done a lot of optimizations for regex and other parts of the standard lib in the past few months.
I see that HN has devolved into Reddit where downvoting is used for disagreement instead of replying. It was a good run, but every site eventually jumps the shark.
Even then, demand scaling doesn't happen instantly.

Markets aren't perfectly elastic.
I thought a LLVM-based compiler would have been nice for a while but in reality a lot of the tooling is C or C++ based and the run-times here are fundamentally different.
This is why putting Go and C code together is so inconvenient (and slow), the calling conventions / stack setup is very different.

I really favor the C/C++ binary interface for its simplicity but Go is really good for what it is built for.

But yes, compilers are always a good argument. I can understand however why C++ frustrated people. To get this beast to work for you, even after C++11 - it requires a lot from the developer. Today, things are a lot better though and they keep getting better.
Uber CEO Wants to Shift More Engineering Jobs to India, Sparking Internal Debate
I didn’t mean to be or come off as insensitive. I get that many would be horrible things were prevented. Which is very much appreciated.
To be clear, "bad light" here means testimony from multiple victims that she frequently participated in the seduction and rape of underage girls.
This might be dangerous if you initially planned to disclose responsibly and did the research/testing of the vulnerability without anonymization. In that case if you were to release the vulnerability anonymously and it wasn't exploited before they could still figure out that you did it by examining the logs and finding your early non-anonymous attempts.
Looks like they developed the favicon service for their search engine so they could show favicons in search results.

It actually increases privacy there, DDG already know what domains your search returnedy and the alternative would be fetching favicons directly from websites, leaking information to them before even clicking.

Then they re-used the favicon service for their browser without rechecking the privacy issue and realising that browsers have different privacy needs.
Suspension bridges and backpacks. How unusual combinations can lead to BIG ideas
I have experienced it first-hand due to the fact that referring to paid papers is not possible unless one has a huge budget and the abstract itself isn't enough to decipher what lies beyond!
>Not sure what Windows issues exist outside licences

well, perhaps not for you and I guess not really, in my experience, for me, but I have noticed that the population at large seems to suffer recurrent damage related to some ancient decisions made regarding Windows security.
This is why Linux and SystemD will struggle to find maintainers in the future: https://www.theregister.com/2020/06/30/hard_to_find_linux_ma...
By "issues" I mean software defects.
Ads are taking over Samsung's Galaxy smartphones – and it needs to stop
> Uncle Sam has long since stopped paying for things with tax money.

That’s very disingenuous. Obviously we all know that spending is financed by debt.

But where do you think we get the money to service that debt? We can’t borrow infinitely.
I'd add recruitment, under false pretenses, to that list.
They have to have some validity to pay the $99/y developer fee
Perhaps, but still larger than the set of people who compile their own systemd builds.

Also it's the answer to the question. The defaults are visible in config files as commented out lines. No need to check build scripts, etc.
>The Netflix documentary on Epstein definitely painted her and others in a bad light.

I've wondered about this point. If you've watched the documentary then does that make you ineligible to be on the jury because you'd be considered biased?
> I believe Google's DNS service is used for monitoring DNS traffic from IPs. This is then most likely used for personalisation, which aids Google's mission to take freedom and privacy away from nontechnical and technical users.

Not questioning if Google does it or not but I was made to believe that IP is not really useful for ads targeting because it just doesn't work great with multiples users behind a single IP. Now with CGNAT on both type of networks (fixed and mobile), using IP for targeting does not seem pertinent to me.
Understanding the “average treatment effect” number
> and a majority of Americans have a 401k

You are living in a confirmation bubble, one easily disproven by data. I'm a career engineer and I don't even have a 401k
Yeah, it's unclear to me why there's not more demand for them either. I think it might that most go users with prior static language experience are coming from Java, where there aren't sum types either.

From my naive perspective, they seem like an easy win, and are 100% more important to me than generics.
Synthetic Data for Deep Learning (2019)
How many packages do you, as a package maintainer, maintain? Can you say with high confidence that you are aware of all of the flags offered by all of those packages, including changes to the defaults between package releases?

I expect that package maintainers are human, and put a fair bit of trust in the upstream developers, and will only tinker with build flags for issues which are specific to the distro. I also expect that they will miss changes to defaults, or new flags, or deprecated flags, quite often.

I looked at the systemd defaults to see this issue for myself, and the fact that Google's nameservers are in the DNS defaults didn't immediately pop out to me (it's a list of 8 mixed IPv4 and IPv6 addresses).
I wouldn't consider any of those responses as being "generally polite", He could have just said we already discussed this, linked to the old discussion and thanked the people for their concern and closed the issue, no need for him to respond with nasty language.
"devolved into"? Unlike reddit, the official position on HN (although a good chunk of the community disagrees with it) has always been that downvoting for disagreement is ok, back from when pg did run the site.
More to the point: does any Linux software at all use a default DNS or NTP server? NSS resolver library doesn't default to using a specific DNS provider, and it's a DNS resolver. NTPd might default to using ntp.org pools, but that might just be my distro's default configs.

To me this is more evidence that Systemd is really just "Poetteringd": whatever he feels like it should have, it has. Really disappointed that distros continue to use this software rather than start a community replacement that addresses its shortcomings.

If I re-did systemd, it would retain the same functionality, but not come enabled by default, and it'd be broken up into independent packages to be installed as needed. It would also use standard interfaces and do away with the binary formats, defer to existing system software rather than default to its own custom versions, de-complicate its awkward filesystem tree and simplify management of service configs, make the command-line interface more sane, and begin integrating more cloud-specific features to replace more complex cloud software (such as for service discovery, cluster management, and HA).

All these fixes would allow the "anti-systemd" crowd (of which I am a card-carrying member) to run a simple init system if they want, or extend it to the full range of systemd functionality. It would remove glaring pain points and user friction, embrace the existing system's default functionality (and backwards compatibility), and extend the software to be more useful in cluster environments. In addition, if this were maintained by the community, all distros could adopt it like they did systemd, and we don't have a half dozen different service systems like before.

Now please somebody reply and tell me why this is a terrible idea...
Covid-19 vaccine must protect 50% of people for approval, FDA says
Some people have performance requirements to meet, and we’re pretty locked into Python (because some of our engineers foolishly bought into the promise that we could just rewrite the slow parts in C/Pandas/multiprocessing/etc).

If this is “living the dream” then Go and other languages will blow your mind. You can have iteration that is at least as fast (especially when collaborating with other engineers) and performance that is 2-3 orders of magnitude better than Python. Not to mention a better packaging and deployment story.

The sad thing is Python could be much better, but it has to back out of some bad design decisions first.
What's the reasoning here? (not challenging you, just want to make sure I understand your thought process).

I imagine it's something to do with the fact that some of the words won't be "offensive" by themselves, or perhaps even at all by all people. So naming it deny disassociates the reason from the word? Ie sometimes the word itself is offensive, sometimes it's fine but part of offensive combinations, etc etc?
I hope if I were in the maintainer's shoes I wouldn't have raised my hackles quite as quickly, but speaking as anyone responsible for making any decisions that might be unpopular, it does get pretty tiring when someone very quickly reaches for the good old "I'm not saying you're a shill, I'm just asking if you're a shill."

The part of the comment in question:

With the above response, might I ask the developers a question: has this project received any donations from Google?
Even before systemd, Poettering was one of the more uncaring, abrasive project maintainers, e.g. in pulseaudio. If there is no slack for Torvalds, there shouldn't be for Poettering.
Ah yes, because C is the only fast language.
No, that question was asked in bad faith. By asking the question, you implying that there's a conflict of interest or some monetary motivation for the decision. If they truly wanted to ask a neutral question, something like "Given the for-profit nature and potential privacy concerns, why is Google's DNS the default instead of some other non-profit entity?"
This is a pretty good summary of the scope of the allegations:
https://www.theguardian.com/us-news/2019/dec/12/she-was-so-d...

A useful concept to keep in mind as this develops:
https://en.wikipedia.org/wiki/Limited_hangout
The loss of jobs and income is going to have cataclysmic cascading effects, worse than if a few large companies had gone under. It hasn't even started yet.
Schools: What’s It Going to Take?
>Christ, what's next? You accuse us of controlling people's minds with vaccinations we get directly from Bill Gates? And that systemd uses 5G to spread CoV-2?

That seems a very aggressive response to a perfectly valid question in modern times. Google pays Mozilla tens of millions to be their default search provider. Companies use money to influence things to their benefit all the time.

edit: Another example was all the extensions that Kite bought out and had their service offering added to (which sent all your code back to Kite servers).
From related portions of the economy: given the growing use of debtor's prisons, predatory loans, and coercive tactics including armed repossession & bounty hunting dependent on an exploitive for-profit bond regime? Yes. These are not companies rejected by modern capitalism. On a higher economic level private equity's leveraged buyouts are very frequently hostile takeovers that use a company's own resources to seize control of it.
The real barrier to entry here is the stress. Always feeling those butterflies when the phone rings - getting nervous when you see a police car - freaking out a little when the doorbell rings.

It's no way to live - and don't even think about having a family/kids after you get involved. You'll die early of the stress.

If you think you're a master 1337 hacker or online drug dealer - just get a job in IT security. It pays better, comes with zero stress.