skysight-inc/HackerNews huggingface dataset:
Maybe take a peek at https://www.nocsdegree.com - there is a story on the frontend page currently "Getting an entry level cybersecurity job thanks to Flatiron School"
I have also experienced the elimination of my ego with MDMA use. I suspect this is the explanation that MDMA works as a treatment for PTSD.
"The RingWorld is unstable!"
I LOVE it when there are real-world engineers interjections on sci-fi at this level. Thank you so much for the insight and reference. Ringworld Engineers is a book I have fond associations with as it was written to directly answer/address these 'real complaints' about the engineering challenges in sci-fi. This to me is the heart and soul of sci-fi and I don't see it often enough in modern sci-fi. Thrust gravity in the Expanse is one example of real-life physics in more recent books.
If only companies could get a team to identify key assets and make backups.

(They might still have to reimage all their machines but at least they still have a list of employees and customers)
DA / AD ???
The first thing I said was advocating cross functional teams with both frontend and backend engineers
Yeah, I'm not a huge fan of the current code gen methods. They're pretty hackish and ugly. I understand it's prob the only option right now. Need partial classes: https://github.com/kevmoo/language/blob/5a1e560bb0871f07f682...
What Nobody Tells You About Building a Technical Skill Set
Misleading article title.

> Wilson later distanced himself from AA, as many other influential members of the program took issue with the idea of incorporating a psychoactive drug into a system of steps designed to end drug use.

> But, according to Pass It On, published in 1984 by AA World Services in New York, the movement was totally against his suggestions. "As word of Bill's activities reached the fellowship there were inevitable repercussions. Most AAs were violently opposed to his experimenting with a mind-altering substance. LSD was then totally unfamiliar, poorly researched, and entirely experimental – and Bill was taking it."

https://www.theguardian.com/science/2012/aug/23/lsd-help-alc...
Ask HN: What does the deprecation of 3rd party cookies imply?
Hi,
I'm wondering if the following will still be allowed after chrome starts to disallow third party cookies:

- iFrames that load a page from a subdomain or a completely different domain

- http requests to subdomains or completely different domains (assuming they have cookies)

Based on the above, will technologies like facebook pixel continue to work? If yes, how? If not, then what are workarounds?

Thanks!
I say this as a huge IntelliJ fan, ask anyone who knows me. My friends joke that I must be collecting commission checks, for as much as I nudge people toward IntelliJs awesome IDEs.

Take this survey with a grain of salt, because the results come from IntelliJ users, and IntelliJs most important and popular product is IntelliJ IDEA, a Java IDE (and other things)

So the results will skew in that direction for that userbase.
Wow! That's a great read, you should post a copy to your blog.

I remember running yellow dog Linux on my PS3 (as a kid) but didn't know the GPU was inaccessible.

For the hypervisor, did you have to do any kind of RAM training?

Are folks running Linux on PS4's these days? I haven't been keeping up to much with the system exploit scene (had exploited Xbox 360, PSP) other than the excellent YouTube channel "modern vintage gamer."
CTOs at most Fortune 500 companies do not need a strong working knowledge of double entry accounting beyond accruals and capex and how it depreciates.

You can be ahead of most technology peers by simply knowing the basics of accrual accounting. How to learn it? When working on a project, talk to the finance person you work with about the accrual process. They will be happy you asked. If they don’t help, google “when should I accrue an expense or revenue”

Once you get that down, you will want to spend a little time doing some NPV practice. When it comes time to getting your project approved, you want to show benefits in your NPV model. 99% of this is not the math around the NPV, that part is easy. The hard part is getting business partners onboard with supporting the benefits case.

Most finance people at large companies are mainly doing basic math, but doing it well and spelling out logic in a small program called a financial model. The best way to get good at this besides working in finance is to model everything you can. Small widget models are the key to building that skill
Oh, they all kind of do that. "Life story" is an exaggeration, but most recipe authors provide a lot of fluff backstory to a recipe before sharing the instructions because Google seems to favor longer content in search results. Here's a not so egregious example on a blog I follow, but it's ~8 paragraphs of fluff before they explain the recipe:

https://www.ketoconnect.net/protein-waffle-recipe/
Sounds like the bystander effect.
How would they mean the apps were successful?

Why wouldn’t the outcome be that people didn’t use contact tracing apps because a bunch of them were scans and malware?
It's winner take all for whoever has the shortest path (for something like index arbitrage). There is no value added to anyone if another competitor invests millions in microwave relays or custom hardware parsing to snipe the previous low latency winner and beat them out. It's just wasted money, other than knock on effects of more demand for hardware growing the hardware industry faster.
What I'm wondering is why it seems to have levelled off despite case numbers being wildly different in different regions of Sweden. Are people's habits different, leading to very different thresholds for herd immunity? Are reported case numbers off? Something else?
Check out Starting Strength: Basic Barbell Training by Mark Rippetoe and Lon Kilgore.
> The second-simplest is CNOT, or controlled-not, where one bit is the "control" bit and another bit is the "target" bit. If the control bit is 1, the target bit is flipped. If the control bit is 0, the target bit is unchanged. The control bit is always left unchanged.

Isn't this just XOR?
Not sure why this article came out today, the new comics were released on the 7th. https://www.thefarside.com/new-stuff
Speaking to this point exactly; drugs do not meaningfully fund terrorism. In a person's locality, one can readily learn what their supply chains consist of, and who is the chemist/grower producing it. For one to assume flat out that all drugs somehow for some reason pass through a cartel shows lack of knowledge, or bad faith. Especially today in the booming drug market, one can very easily buy right from cannabis growers and right from chemists, or nearly directly. Cartel drugs are frankly poor quality absolute garbage.
That pretty standard journalist snark.
FIT files aren't encrypted. You can copy them directly to your computer are parse them easily.
Just keep making stuff, in your CV put what school you attended and be honest for how long. The fact that you started college says a LOT about the person. Many people do not finish college for many reasons.

Keep making stuff, make new libraries to fill niches etc. As you get older AND have made more things your college experience will have less and less meaning.

But importantly, make lots of stuff, contribute to open source where possible (making stuff is more important though in terms of getting a job since it's easy for your contribution to get lost in open source if the project is big)
he is against the big bailouts that go to all the large corporations. he said he'd rather the money go to individuals
For context: No degree, Very comfortable (salary over 150, savings, family, etc) and in my mid 20s with 5 years of experience.

Here’s how I went from being generationally poor to that:

1) Taught myself the skill. Really put my head down and learned.

2) Demonstrate you know what your doing and have a passion for it (fake it if you don’t and just want to get paid) through projects, contributions, volunteering, having your own site with mentioned projects writing etc. You’re building an image here.

3) Literally get your foot in the door anywhere, doesn’t matter how bad. Mine was at a local web dev shop locally as an “intern” in a tiny office w/ 4 people.

4) Start racking up XP and use that XP as leverage going forward. I mean really sell it. And always talk up your previous experience.

People tend to care more about experience, ability to get shit done, and personality over education in this field.

But yeah that was my experience having been in the same boat.
I am astounded by the abundance of languages on the Beam, Gleam, LFE, Purerl, Lua and possibly many more.

Have you seen Lumen, a Beam implementation in Rust that targets Wasm?

https://github.com/lumen/lumen
> Or maybe you can't draw that line because the upper layer stuff still has implications.

Yes. You gave the example of compression. One of the things you'll find inside HTTP/3 (not QUIC and not even TLS even though QUIC is underneath HTTP/3 and TLS provides the cryptography for QUIC) is an explicit design choice to compress each header separately because of BREACH.

Arguably the whole web stretches this point. It is common for cryptologists to discuss cryptography with the assumption that an adversary can choose to force participants to send messages of their choosing for them to observe the results - in many consumer applications this attack class seems pretty fanciful. But because of Javascript it's actually tremendously easy on the Web and we must prepare against or it expect bad guys to always win.

> if that means everything is in scope, what then?

Training. Your programming teams need appropriate skills and training to cope with the implications for their environment. You likely already train employees about what to do if there's a fire, or if a would-be supplier offers them Superbowl tickets, or their boss asks them for a blowjob, or the new head of marketing wants to email the user database to an ad exec or plenty of other things.

Most likely as a result they also need a trustworthy expert they can escalate any hard questions to. That could be somebody in-house at a big organisation or it could be out-sourced especially at smaller firms. Any questions they ask can help shape future training.
I notice in your other replies you have several interview questions that seem to be targeted at previous experience. What kind of side projects, cybersecurity or just programming related, do you find the most appealing in a candidate?
It’s clear to me that the message that a sufficient amount of money let’s you subvert the rules weakens trust in society and increases justification for an every man for himself strategy.
Teaching isn’t about managing behavior, but it is about managing attention. A misbehaving student draws others’ attention from the task at hand, stealing valuable focus away from the learning activity. Managing behavior is therefore critical to both teaching and learning.
A few people are saying that a grasp of basic accounting is important, and I just realised I've written something relevant on this front.

A while ago I developed a library for double entry accounting in Django. To do this I had to learn how double entry accounting worked from scratch. I was therefore briefly in a position to remember not knowing how it worked, while also grasping at least the basics.

I therefore add a page in the docs titled "Double Entry Accounting for Developers":

https://django-hordak.readthedocs.io/en/latest/accounting-fo...

I kind of cringe posting this here, because 1) I wrote it a long time ago, 2) it may not actually be entirely accurate, and 3) it may be overly simplistic.

That being said, I think a fair few companies are running their finances from Hordak, and I haven't had any angry issues opened yet. So I can only assume I wasn't too far off the mark.
I agree - credit ratings companies are garbage.

But it doesn’t follow that all rating systems will be garbage for all time.

The rating system would not deter misbehavior. ‘Misbehavior’ in this case is just competence. The rating system would give clients some transparency into the competence of the service provider.

Any company that was confident in its processes would volunteer for scrutiny because it would be positive for their credibility, just like other independent certifications.

The question would then become - why would a customer choose an unrated company?
I'm uncertain if that would impact ego directly though I imagine it perhaps could through helping heal/process/remove past trauma and its associated emotion and stress, which then potentially will allow ego mind guard/coping mechanisms to dissipate.
Here's an estimate of Stripe's yearly transaction volume at $200 billion https://www.forbes.com/sites/christianowens/2019/09/21/strip...

Here's Uber's announced results of $18 billion in gross bookings https://investor.uber.com/news-events/news/press-release-det...

Round that to significant figures and you get 10%.
That's my point. The Spanish flu killed 750,000 in the United States at a time when the population was around 100 million. It was certainly a massive crisis.

What was the reporting like and how has it changed?
No because it takes two inputs and gives two outputs. One input is passed through unchanged, and the other output is indeed xor.
So, you don’t have proof, you just happened to develop anxiety around the time you started taking LSD, which was as a teenager, a time of notable change.

> If you try LSD you will know what I mean—you could walk into a train without hesitation or fear.

I’ve done LSD a number of times, the most recent was 8 days ago. I’ve never lost the interest in self-preservation while tripping on LSD. You cannot control someone’s mind when they’re on LSD.

Please provide me with a drug that LSD is more dangerous than, keeping in mind that mind control with LSD isn’t possible. I’ve been a heroin addict and severe alcoholic, and I’ve also taken LSD a number of times. Being an addict/alcoholic is so much more dangerous and detrimental than any use of LSD than I find it hard to take you seriously when you make such claims.
LSD helped me give up nicotine and consuming animal flesh. It was very clear to me that I didn’t need either in my life. Why harm myself or other beings for such mundane pleasure when I could now access the transcendent (now through meditation).
Customary, a reading by Bryan Cranston https://www.youtube.com/watch?v=T3dpghfRBHE
> Seems to me the "simple" fix here is for MSFT to hand vscode off to something like the Apache Foundation (independent organization) for management and oversight.

Vscode is already licensed under the MIT license.

There are already FLOSS forks of vscode, such as vscodium.

The solution you're advocating is not a solution at all. In practice you're just advocating that MS should stop investing the company's resources to develope the product, because orgs such as the Apache Foundation are already free to fork the project and work on it themselves.
I think he’s chilled out a bit. Definitely read the project forum guidelines and attempt a search for an answer before posting a question.
A Quick Note on GPT-3
S3 is easy to handle but not intuitive. S3 always get write access from production systems because gotta be able to send the backup (anything strategy that aims to prevent writing to S3 is doomed).

The trick is to get another S3 account (or any large storage really), to download everything from that bucket periodically. The "replication" needs read-only access to the first bucket. The second account doesn't need to be accessed by anything or anybody so it is relatively safe.
That's why the pharmaceutical industry is not putting all eggs in the vaccine basket (but for the press, it is the only option available).

Therapies with monoclonal antibodies might handle this case, in particular, cocktails of antibodies (like Regeneron, Vir, and Sorrento are making) to reduce the risk of selecting resistant mutants (if you target multiple parts of the virus proteins, they'd have to mutate all together to gain resistance, which is a less likely event).
Wait a second, CNN and Washington Post race bait for more views? Wow, that’s news to me /s.
"I'm not a comic book villain." ~ Ozymandias
to be fair, if nothing had been done, it is pretty likely that the surge of deaths would have trashed the economy just as well.

Not that I disagree that the US response has been among the worst .. and the bar is pretty low with only a handful of countries (like south korea and Taiwan) having been able to promptly adopt effective strategies.
> Can't do much about that one. Gotta have someone telling you, or (worst case) the very state of the art advancing under your feet.

But that's kind of the point. Primitives aren't easy either. Even one thought to be secure yesterday might not be today, which makes it easy to get wrong merely by relying on literature from a year ago rather than today.

> The natural (and utterly impractical) line to draw is untrusted input.

I think you're right about that, both as to where the line really is and as to how impractical that is if you don't want to just end up with essentially everything being in scope.

> Compression is a tough one. I'd personally try padding.

I'm not sure you can fix it strictly in the lower layers. The general attack works like this: The attacker can supply some data, the victim compresses that data and some secret data together and then sends the combination encrypted over a channel where the attacker can observe the size. If the attacker-supplied data matches the secret data, it can be compressed more so it gets smaller.

The attacker's job is really easy if supplying one more byte of data that doesn't match the secrets causes the observed length to increase by one byte, but fixed padding just requires the attacker to find the padding boundary by supplying increasing amounts of pseudorandom (i.e. incompressible) data until the threshold for the next output size is reached, then swap in different bytes until some of them match the secret and it falls below that due to the compression. And random padding just requires more samples to account statistically for the randomness. In theory you might be able to fix it by making all messages the same length, but then if you want to support large messages, all messages become large, which could be unreasonably inefficient. And the whole point of the compression was to do the opposite of this.

The real solution is not compressing attacker-supplied data together with secret data to begin with, but that means the upper layer has to know not to do that.
Interestingly, programs for quantum computers must be reversible.

https://physics.stackexchange.com/questions/392414/again-why...
Daily testing numbers aren't really important except as they compare to daily new cases. Countries that have already controlled the spread of Covid (many Asian nations, NZ, a lo of Europe at this point) don't need to do many tests because they have few cases. And on that metric, the US is doing worse than all of Europe and all of Asia except maybe Japan.

We sit just between Nigeria and India, but well ahead of Brazil and Mexico.

More concretely, 0.5% of the tests in Germany, the UK, and Italy are positive. For us, between 8 and 9% are positive. So to do the same level of testing per-case, we need to do 15x as many tests as we have been.

https://ourworldindata.org/grapher/covid-19-daily-tests-vs-d...
For those that are interested, here are the survival rates, broken down by men/women/children in first/second/third-class/crew: https://www.anesi.com/titanic.htm
British and Exotic Mineralogy
Is there a technical white paper, code, or repository available for the code that runs Randonautica?

Are there plans to open source the project?
Well well well, if it isn’t the consequences of 50+ years of terrible policy making. Who could’ve seen this coming except every other country on the planet?
The two books on accounting I liked (no affiliation):

Accounting Made Simple: Accounting Explained in 100 Pages or Less by Mike Piper

How to Read a Balance Sheet: The Bottom Line on What You Need to Know about Cash Flow, Assets, Debt, Equity, Profit...and How It all Comes Together by Rick Makoujy

Then I started doing my personal finances on GnuCash, and now on ledger-cli. It's helped a lot both professionally and personally.
The companion article at https://pavelfatin.com/typing-with-pleasure/ has some example results, showing Atom, the only Electron-based one in the list, as having several times more latency than the others. I wonder how VSCode compares.

It's unfortunate that software seems to feel slower the newer it is, including developer tools such as text editors/IDEs. I suspect this is because most people - including younger developers - have never seen how fast things can be, but are instead constantly subjected to delays in using applications to the extent that they think it is an absolutely normal speed[1], and then propagate that notion to the software they themselves create.

Also related: https://danluu.com/input-lag/

[1] For example, everything that uses UWP in Windows. Someone who had only ever used the Settings app in Windows 10, or (even worse) the Calculator, might not realise how absurdly slow they are in comparison to the previous versions' where they would open nearly instantaneously.
The USB side always worked fine for me. The problems tended to be mostly video related.

I have a HDMI KVM switch that's supposed to be 4k@60. One PC won't detect it as such; I can make a custom 1440p at 42Hz mode but nothing higher. The other will send 4k/@60, but the monitor will do one of 4 or so failure modes:

* Entire screen compressed to half width: 50%
* Correct behaviour: 20%
* Correct display, occasionally flipping to black screen: 10%
* Gatbled screen: 5%
* No synch: 15%

Switching input is a game of toggling back and forth until it synchs correctly.

None of this happens with a direct connection.

The switch also doesn't seem to detect when I set up a keyboard macro for the switch-input sequence (control-control-1/2/3/4) but that's not nearly the dealbreaker.

I'm not sure if it's the switch or the monitor being relatively intolerant of the switch's behaviour, but I don't want to toss around $100-300 on spares to diagnose this.
Yes, but they locked down for much shorter than we did. San Francisco had restrictions in 1918 for just over 1 month, for example. Nowhere you’d have found things like 5 months+ lockdowns like we have now in many places, with no end in sight.
The attacker could stumble upon a valid hash like they could stumble upon a valid password.
Mentioning cryptography and magic makes me think of Steganographia written in 1499 by Johannes Trithemius.

https://en.wikipedia.org/wiki/Steganographia

"Trithemius' most famous work, Steganographia (written c. 1499; published Frankfurt, 1606), was placed on the Index Librorum Prohibitorum in 1609 and removed in 1900. This book is in three volumes, and appears to be about magic—specifically, about using spirits to communicate over long distances. However, since the publication of a decryption key to the first two volumes in 1606, they have been known to be actually concerned with cryptography and steganography. Until recently, the third volume was widely still believed to be solely about magic, but the "magical" formulae have now been shown to be covertexts for yet more cryptographic content."
News need not be instantaneous.