skysight-inc/HackerNews huggingface dataset:
Bezos’ wealth is a function of the Amazon’s stock price. It is a company with a P/E ratio of 137. That is not normal. He does not set his stock price.

So when people talk about taxation, its taxation based on the general stockholders speculation. Which seems fair if we think BTC or 401k holders should be paying taxes on their annual values. Pretty sure most on HN would want not want that.

So it’s a question of limits, or a line, picked by society on how much something of arbitrary valuation one can own.

But I’d bet there are many here with >$1M is assets and >50% of the public would find that outrageous.

As far as AMZN being too big, I’d be fine with breaking it up as the components would probably be valued more than they are together (remember Standard Oil). Which would be good for my 401k.

The people have voted on the Walmarts and Amazons of the world. They lost something for the convenience, and it’s 100% their fault, not Bezos.
> I still haven't understood where is the definitive place to set dns nowadays.

If you are using NetworkManager, then in NetworkManager, per each connection. You can also configure which zones each of them can resolve, if they are not global.

So you can things like using your prefered global DNS and then have per-VPN DNS that can resolve hosts in whatever network you VPN into.
My personal bias is that I've worked at Google and I've worked elsewhere and I know that Google's control over what code runs in prod is years ahead of the other places I've worked. They have strong controls that audit that binaries running as sensitive roles (roles with access to real user data and logs) were produced from reviewed and submitted code and built in the official hermetic build farm. For very sensitive roles (gmail etc) they audit the command line and everything. The controls everywhere else I've worked are a complete joke by comparison.

This quote is from Google's security infrastructure whitepaper:

"""Google’s source code is stored in a central repository where both current and past versions of the service are auditable. The infrastructure can additionally be configured to require that a service’s binaries be built from specific reviewed, checked in, and tested source code. Such code reviews require inspection and approval from at least one engineer other than the author, and the system enforces that code modifications to any system must be approved by the owners of that system. These requirements limit the ability of an insider or adversary to make malicious modifications to source code and also provide a forensic trail from a service back to its source. """

I don't think the conflict you mention exists. Google benefits when people use the open web. They run DNS because DNS is critical to web user experience and ISP DNS is garbage. Also, by the way, ISP DNS privacy story is a complete disaster.
> The Privacy Policy for Google's public DNS service explicitly says that they don't do that. If you really think Google is doing it then you should take it up with the FTC who would really enjoy making an example out of Google.

Stop pretending like there's no regulatory capture going on. Otherwise we would already have antitrust cases going on with many of those big corporations.
Why does even capital gains have a different tax rate from dividend. I would fix that first.
It seems that some US engineers believe that their jobs are being "taken" from them by "unqualified", or "substandard", or "underpaid" immigrant engineers, and that getting a work permit in the US is something almost "trivial".

You(or others) may be getting mixed up between complaints of legal vs illegal immigration. Illegal immigration does tend to displace American workers for forms of manual labor like on farms, roofing, etc. Legal immigration like H1B tends to be gamed by large corporations to get cheaply paid workers for contacting companies. If talent was truly global, they wouldn't do this.
Strong unions, and strong contract law, without the current union call for elimination of issues addressed by said unions (minimum wage, health benefits) Problem will be taken care of by individual union contracts locally
In case it wasn't obvious, I was mocking the excuses I see thrown around for systemd eleswhere.
Wages are too low across the board. Why are wages so low? Past administrations have been incentivizing businesses to move production capacity overseas. Combine this with large amounts of immigration, and our most vulnerable populations are underpaid or unemployed with no chance of moving up the economic ladder.

A technical degree is the only remaining ticket to the middle class, and we've got over 600k H1B's and their dependents displacing domestic labor that could easily be trained to do the same jobs.

So when I hear that "Essential Workers" are making less than the unemployed, I want to resolve the core issue: low wages.
Which Amazon products/services did Jeff actually create?

Obviously all the past and present employees created those products, many of which are based on, or dependent on research funded by govt, and also enabled/reliant on a stable society, rule of law, an educated workforce and customer base, transport networks, electric grids, and all kinds of other infrastructure.

The social bargain here is that successful companies then pay back those external govt/societal costs with taxes.

Except in this case ...
Facebook shared user data with at least 5k app developers after a cutoff date
> I’m upset that he has done more than any other developer to break my machines, and he keeps getting more authority so screw things up.

I may be wrong, but you should be blaming the ones who made the _actual_ decision of replacing whichever init system, with systemd.

systemd was developed under Red Hat's umbrella. Nowadays, the vast majority of mainstream Linux distributions use it, and I doubt it was because Red Hat/Poettering pressure them to do so.
Interesting for sure, I actually contributed to developing tools for making synthetic data recently. This Python module => [redacted] is what we developed. We ended up hitting a snag with our initial research as scaled synthetic data generators are generally not open-source. We put this together to fix that.

It's pretty cool, because both the branches let you create custom generators. One we tinkered with was using T-Digests to profile large datasets to produce synthetic data, rather than just fake data. Basically we're working on something that lets you take in data and spit out something with identical statistical information inside. One thing you can use this for is stripping out confidential data (in theory at least). Another use case was to expand dataset sizes.
That's a solid approach if your dependencies are already managed by make, but languages like Rust and Go do their own dependency management, and Rust in particular is pretty slow to compile. I wouldn't want it running every 2 seconds.
According to levels.fyi, an "Amazon Distinguished Engineer" (L10) is making $960,000/year. The GDP per capita in Central African Republic is $681/year. Should someone that is basically a typist, earn 10,000 as much as another human being?
and "sezon ogórkowy" (cucumber time) also in Poland :)
The “pepper” should be a cryptographically random key. A password is nothing even close to that.

In this case I’m not worried about any specific attacks. Knowing how most password-hashing algorithms are built, it’s probably completely safe to do so. But these tools weren’t necessarily designed with this method of use in mind and haven’t been analyzed extensively with it either, and that should give anyone pause. If they had, they would—like argon2—have a specific input parameter for this purpose.

For what it’s worth, sometimes even like inputs can’t be smashed together safely. For instance HMAC(k, a a| bb) doesn’t uniquely authenticate aa and bb if they’re all or partly user-controlled, since it’s identical to HMAC(key, a | abb) and HMAC(k, aab | b).

The point being, concatenation of inputs to cryptographic functions is often not a safe operation. Triply so when it’s being used to naïvely add a “feature” to a tool that lacks it (e.g., the classic broken example of SHA(key | message) as a poor-man’s HMAC).
It depends on a variety of factors.
Availability* Is the code easily accessible to a wider audience?

Legacy system cycle* Was the code written in a system that is expected to have a long cycle? (20 years+)

Attribution* Can it be easily attributed to the owner?

Access* Do you have access to enough source codes to confirm it to be true?

Quality* Does the code have an appropriate level of quality?

Company* Did the company survive the peaks and through of capitalism even if it means being bought out?
It wasn't that complicated to index it to salary, there was an amendment proposed but Bernie threw a tantrum and it got rejected.

Meanwhile European nations have suffered much lower unemployment because governments decided to subsidize salaries instead of paying people to stay off payroll, the former being a non-starter in the US given the current House composition.
CDC acknowledges mixing up coronavirus testing data
Just try using a system on a "captive portal" wifi connection. You will soon learn "apt purge systemd-resolvd".
DataCamp did nothing wrong.
The original question was stupid. We all get that. We’ve all suffered that on occasions at work. But that doesn’t justify his grossly unprofessional response.
There is structural similarity between the two, but in Synechdoche, Caden’s (the director) life is the explicit subject of the intradiagetic (in-narrative world) film. [0] The subject of the OP uses Soviet-era Russia and its surveillance state as the (um) synechdoche to stand in for the apparatus of the cinematic production.

To my mind, this project more closely resembles the disastrous subject of the documentary We Live In Public [1]

[0] https://www.imdb.com/title/tt0383028

[1] https://www.imdb.com/title/tt0498329
I think they meant thematrix.com which forwards to a WB site; maybe autocorrect added the space.
This is a geek forum, is it that surprising that when conspiracy with some credible people (UFO stuff), or coincidences so big that it everyone accepts it as reality (Epstein), than people would want to discuss it.

UFO stuff is just fun to talk about or entertain.
Epstein is revolting look into what really happens with powerful people. He was just a tip of an iceberg, killed to keep the lid on. You'd be a fool to think he was the mastermind pedophile rapist holding half of elites by throat all by his own.
> with newer systemd supporting name resolution over dbus.

Not only that, with suitably configured nsswitch.conf, (e.g. with nss-resolve), you might find out that your /etc/resolv.conf is used only by apps that have their own resolver and ignore the glibc one.
HN title is misleading clickbait.

The article says that modern Android security is pretty good, listing a number of Android's security features and recent improvements, but the author never tries to make the case that it's "the most secure device you own".

There's also zero comparison between Android and any other operating system that would be required to support the HN title's conclusion.

Also, Android isn't a device, it's an operating system. An operating system is only as good as the devices it's put on; a deeply insecure device isn't going to magically be made better just be installing Android on it.
integration probably varies over time, is it fair to take it into account ?
Permutive (YC S14) | Scala Engineer | London, UK | Full-time | ONSITE | £70k-£100k

Permutive are developing a next generation data platform for a world with a trillion devices, and we think applying functional programming techniques like compositionality and type-safety is the best way to build these massive distributed systems.

We are looking for backend engineers with Scala experience to develop our real-time data management platform. You'll use a wide range of technologies to build functionality that solves previously-impossible problems for our customers and helps them deliver value through our platform.

Apply directly here: https://boards.greenhouse.io/permutive/jobs/4646719002

If you have any questions, just drop me an email stevie at permutive.com
That's not even true in the stdlid--there are some io errors that aren't errors per se and at the same time perform an action and return a value, e.g. short-write.
The obvious way to assess if availability is the factor is to look at open access publications. Elsevier (unsurprisingly) say it makes no difference [1] and there are confounding effects which are stronger. For example, papers with code tend to be cited more in ML. And it's very difficult to control for article quality, which is a big factor (MDPI's quality is extremely hit/miss, for example). Open access may improve your paper's reach, but will it actually give you more citations? Unclear. I'm very much in favour of open research though.

On the matter of Sci-Hub. I already have access to all the journals I commonly use via my university. Those journals almost certainly track downloads (Elsevier even has a recommender system when you download a paper). All Sci-Hub does is reduce friction for researchers who can't be bothered to use their institutional login while off campus. Admittedly that includes a lot of people, but for the people who measurably contribute to citation metrics, does Sci-Hub actually improve availability? I doubt it, at least in universities with budgets for subscriptions. Before Sci-Hub there were always routes to get papers: ask the author or ask a colleague in a neighbouring university if they have access. Or you can ask your library who may be able to get it.

My point is that generally it was a bit more work sometimes, but in the grand scheme of publishing a paper, it wasn't so bad to network to get access to things.

It's certainly enabled the general public to access research and no doubt tons of small companies are using it to avoid paying for subscription fees, but those people aren't significantly publishing papers in places where we can measure it.

All this study shows is that paper downloads from anywhere is a proxy for popularity/hype which can be a proxy for citation count. I'm sure Elsevier or Taylor or Nature could provide a similar correlation between downloads and citations. There is also a bias here - if I'm looking for papers, I'm probably going to download the most highly cited stuff first because that's a weak signal that it's a useful paper.

I'd be more interested to see, as you said, temporal analysis of before/after Sci-Hub.

Or alternatively geographical studies - does this affect lower income countries more? I imagine that this is a boon to researchers who didn't have access because their institution couldn't afford it.

[1] https://www.elsevier.com/connect/citation-metrics-and-open-a...
Show HN: In two years we recreated Excel's formula engine in TypeScript
> all the maintainer would have to do is answer "No"

That would technically be a lie. The answer is actually a qualified "yes".
Neat idea. Presumably a dynamic JIT like HotSpot would use this technique.

In C you can have a global function pointer, and mutate it, but presumably that still has an additional indirection compared to the self-modifying approach.
In my experiences with German beer, most pubs will carry the locally-brewed brand and that's about it. Sometimes it's local pride, sometimes it's because the pub is sponsored by the brewery to do so, sometimes it's both. Beer seemed more about the Gemütlichkeit than the culinary experience.
Greetings fellow Lord of Sealand. I recently received my certificate also. It's a nice touch that the certificate is mailed using a postage stamp created by Sealand itself!
Maybe those people need a union to increase their bargaining power to obtain a greater share of the means of production!
I am NOT a security export, just an observer, but saying "Contrary to popular belief, modern Android is pretty secure." (Which is how this post finishes) sounds pretty much like something I'd agree with, but saying "Your Android might be the most secure device you own" isn't really something that I'd agree with as much.

I don't even know how one would really measure these things in a reliable and objective way. Do we compare it to IOS or Windows or ChromeOS or MacOS? Which version of Android and so on.

The post picks out the best things about Android, nothing wrong with that, but isn't that just ignoring all the problems with Android? I agree though, Android is pretty secure, but so is everything else.
I want to know how many of the total 3600 engineers are just maintaining the main uber app and how many are off in other ventures (self driving etc.)
> Python's core strength is to be a beginner's all-purpose programming language, and not very much else

Wow - I do think that it's a great teaching language although this definition could apply to Java, JavaScript, PHP and others. But "and not very much else" seems to me to be a crazy limited view of Python.

Many of the worlds most popular websites (including the one I work for) use Python successfully in production.

It's also now become the standard language (replacing R) for doing data science and machine learning.

I'm not in the science community, but my understanding is that is used heavily in scientific programming as well.

I'm sure there are plenty of other use cases I haven't mentioned here.
Because destroying chargers with too much current, or lighting cables on fire is a bad PR?

I have a lot of cheap chargers, and they give out all sorts of crazy stuff. One drops the voltage to like 3.5 volts with 1 volt of ripple under load. Another shuts down the port completely if you draw >.6A.

It is really hard to tell how much current can one draw safety.
This appears to be a pretty bad move from DataCamp. The original incident put DataCamp in pretty bad light at that time. I feel the reputation actually recovered pretty well since then.

I'm a premium member of DataCamp for 2-3 years and also an avid user of Rstudio and a fan of many of their staff.

I may be missing what the CEO is referring to but I haven't seen much disparagement of DataCamp by Rstudio.
Most people in Europe have at least 5 weeks paid leave a year guaranteed by law.

The US does not sent a mandatory minimum, and consequently many employers don't offer anywhere near as much time off.
> I would imagine you don't want to hit a pothole at 180km/h

You would just kinda fly over it, unless it's huge. The faster you go, the less potholes are a problem. What's more dangerous is that braking distance is quadratic in velocity.
DataCamp pretty much took every wrong turn possible in this story, and I don’t feel like this action is justified. In addition, I’m not sure that rstudio is a competitor to DataCamp.
That's about what it cost my friends.
AS long as you do not start installing apps,
and avoid using some vendor pre-installed apps.
MediaWiki Vue.js Migration Project Charter
It's puzzling why a security resource would use vague terms like "x characters long" to characterize entropy.

>The salt should be at least 16 characters long.

>The pepper should be at least 32 characters long

16 characters? What characters? digits? alphanumeric? hexadecimal? raw bytes?
> does it mean that if you sell something people actually want, literally nothing else matters about your intelligence, education, character, background, or anything at all.

Yes, although I think more specifically s/want/are addicted to/. See also: Saudi Aramco and Facebook.

> What I'm beginning to think is that the "smarter," people are in a company, the less anyone will want their product.

Do you not think Apple and Google are composed of very smart people? Tesla and SpaceX don't make the cut?
Now if only I could get the Pixel (or generally clean Android) software experience on Samsung hardware....
> When driving and accounting and phone centers and retail are all automated, will we, yet again, come up with meaningful roles that are accessible to most everyone, but cannot be performed by such technology?

There's at least some evidence for it, I think. The more time people have (because of less work, primarily), the more they need entertainment, it appears, so we're automating away time consuming labor and adding jobs helping the population kill the time that has been freed.

My impression is that we're far away from anything that comes even close to full automation. Of course, from an 18th century standpoint, we're there and then some, but then again, from an 5th century standpoint, we've been there many times over, I suppose.
Tesla is making a Covid vaccine
Learned something today.
Android is a device.

I always thought it was an os by Google based on aosp(also Google..).
Not sure the age of the original author is very relevant. GvR was 35 when he started work on Python. Chris Lattner was 31 with Swift, Brendan Eich was 33 with JS. These are some of the most used languages today. I’d say it’s more a matter of being in the right place at the right time to serve a particular use case.
Positional Software: How today’s best business software goes viral
Much of economics these days is fatally contaminated with ideology, so it's hard to find good explanations. "MMT" (modern monetary theory) is also ideological but has some interesting ideas that might explain this.

Conventional explanations include "price stickiness": wages and prices don't change overnight, they have to be deliberately changed by individuals in the market. And the more technical "transmission mechanism": just as an automatic transmission doesn't immediately convert faster engine RPM into faster road speed, there is substantial lag in the mechanisms by which money production affects prices.

The reverse process was seen round about the introduction of the Brazilian "Real". People had become used to inflation and re-negotiating prices regularly. Swapping out the name of the currency helped reset that in the minds of the public. https://en.wikipedia.org/wiki/Plano_Real

One of the more convincing ideas is that, because fiscal policy is either conservative or only expansionary for high earners, monetary expansion doesn't affect most consumption prices and only affects assets. e.g. house prices and the stock market.
I Got Rejected by Y Combinator So I’m building my own Incubator
Might be dated at this point, but a chapter in Freakonomics was about the economics of being a gang affiliated drug dealer in the US. The analysis there was that outside the top couple guys, the actual pay wasn't much better than just working as a fry cook or whatever, while the risk of being arrested or shot was much, much higher.

So even in criminal enterprises, I think you have to move up the distribution chain a ways to see the big $
EncroChat is not an app you get from an app store. It came with the EncroPhone, which are physical Androids you rent for some absurdly high price (like $3000/year-ish). And EncroPhone didn't sell online. You had to get them via a reseller i.e. someone you knew, or they had a few physical stores in the Netherlands.
I think the issue with hardware is the potential for infiltration and compromise of the hardware along the supply chain. Both in the component itself or in the assembly process.
You don't feel you have anything to hide, now. But if ever the government started doing something you disagreed with, like started getting too powerful, or using that power unjustly, your ability to check that power would be significantly diminished.
if it is systemd-resolvd, then privacy oriented solution would be to not use google, cloudflare or even the non profits. It would be to just have list of 13 DNS root servers and do recursive name resolutions (i.e. what caching resolvers were meant to do).

But the absolute correct behavior would be a hard failure, because if you have IP properly assigned and routing setup but no DNS, then you either purposefully set it up that way and don't want DNS to work, or you have misconfigured network setup which you should be aware about it, without having to troubleshoot why some machines don't have working Internet while others seem perfectly fine.