skysight-inc/HackerNews huggingface dataset:
Perhaps somewhat similarly, r/TalesFromRetail is devoted to kvetching about your job in the retail sector, but it's really not a depressing place. There are a lot of rules and expectations about how you tell your story. You aren't supposed to outright dox anyone or veer into genuine trash talk.

It's not supposed to be negative per se. It's supposed to be entertaining.

It's an art form. It's not everyone's cup of tea, just like horror isn't everyone's cup of tea. But people often watch horror movies for catharsis, not because they want to be depressed and wallowing in self pity.

Storytelling is often about educating people about things you can't speak about more directly. It's often a way of sharing wisdom in an inoffensive manner and one that will stick because people will actually pay attention, unlike when you are giving them some dry lecture about some problem they haven't yet had and don't yet care about.

But if you entertain them, they will read it anyway and that story may stick with them. And then six months or a year later when they have the same problem, they will actually remember how someone else handled the same issue and it will turn a potentially nightmarish scenario into "Meh, I just did the same thing that guy on Reddit did to his shitty boss/customer/coworker. Worked like a charm. Moving on."
Here are some answers:

https://wiki.debian.org/ReproducibleBuilds/About
Whats the tech stack this was built on?
The real thing is the best thing, but typically you lose about 10% in transaction costs (dealers have around 5% spread on both the buy and the sell). You can decrease that somewhat with larger transactions, but you'll take a pretty big hit upfront.
On the other hand, round-tripping to the server on every interaction isn't the paragon of efficiency either.

There are only trade-offs, not a faction war. People who don't realize that are usually just part of a cargo cult.
It's hard to not love a language the compiler of which uses words like "perhaps" in error messages, suggesting solutions that are often what you wanted to do in the first place.

I've been writing in Rust in a very on-and-off fashion and thanks to the compiler messages I'm able to pick up where I left even after a few months.

All that while being a front-end developer or, in other words, as far removed from systems programming as possible.
> I’m a recent windows 10 convert from Mac

What happened, if not too sensitive to share, of course.
> Fellows are retired people who don't have to leave.

This is false. Retired people can be fellows but you do not have to be retired. Some Fellows at tech companies are quite young because they were lucky to invent or spearhead famous technology that changed the fortune of the company.
> However, my ISP is doing some weird 1:1-NAT

It's probably a 1:Many NAT, where the external IP you see yourself as coming from, is used by many customers, not just you.

Otherwise there's no upside to deploying the additional overhead and cost of CGN devices for the carrier.
Presumably there is benefit in reducing trust in a party with mixed or unknown incentives to increase trust in a party whose incentives align with your own. For a critical piece of software I could imagine a schema where a user pays one or more independent verifiers to validate the software. That would allow the user to control the incentives of the entities telling them the software is safe.
I can think of one argument against reproducible builds that really make sense:

You have some legacy system incapable of reproducible builds, and the social effort to convince people not to care is less than the technical effort to fix it.
Long before computer science, even though the ideological attitudes might be similar ;-)
Once the economists rule, the company is dieing.
Architecture for Containerized .NET Applications
Because it's not the end? I think we strive to continue on into the unknown.
What is ammonium nitrate and how dangerous is it?
In a similar vein, there are USB gadgets that emulate a mouse that keeps on jiggling, to prevent the machine from locking out on user inactivity.

However, there are anti-jigglers too that lock the machine when any new human input device is plugged in.

http://codefromthe70s.org/antijiggler.aspx
I'm interested in living on Mars. I'm not interested in living in Antarctica.
I want to believe there’s a piece of internal software that is literally called SECRET TOOL.
Re: Canada

The prime beef ranching lands in Canada have not been forests at least within the last several hundred years, likely longer. Mid- and southern Alberta is largely grass plains
I would certainly hope that green threads have less than 10 megaseconds latency.
My friend created something very similar - https://github.com/arbazsiddiqui/rSlashVideos (Ignore UI :p)
I worked in a company that has a decent mixture of technical and non-technical folks.

I consider it like the DEFCON level.

DEFCON 5 - Technical people who were aware of Bitcoin speaking

DEFCON 4 - New technical people who were not aware of Bitcoin (we are currently here)

DEFCON 3 - Business people

DEFCON 2 - Non-technical people

DEFCON 1 - Bathroom chats (last time I saw this was around the $17,000 mark)
Ex-NSA Hacker Finds a Way to Hack Mac Users via Microsoft Office
Also, these laws are immensely valuable to compilers. The Haskell foldr/build rewrite rule allows for intermediate lists to be eliminated altogether[0], so you can write

sum (map square [1..n])

and the compiler will remove the intermediate list altogether, putting a tail-recursive loop in the expression's place.

[0] Paper on deforestation https://link.springer.com/content/pdf/10.1007%2F3-540-19027-...
That's not sad. What's sad is when that specialization becomes worthless and you can't afford to specialize again.
But there is a release phase in Heroku, and reasonably that's the only time you should expect to need DDL permissions...

The principle of least required privilege seems to suggest that the production web server shouldn't have permission to perform DDL when it doesn't need it (so that fat-finger would have likely never happened, or never caused a problem, so long as it was only running in the context of the prod web service.)

It's just a little bit surprising that there don't seem to be any concrete solutions for this, I find it hard to believe I'm the first to whine about this issue related to commonly understood DBA best-practices. I don't know how you solve it, (maybe add a production_migrations environment?)
The entire point of identifying an externalized cost is that it is not being paid for by the beneficiary. You can't both allow it and have them pay for it or it's no longer externalized.
Was not that the time of massive migration from IPX/SPX?
> The module concept of Oberon's predecessor Modula-2 is still unrivalled today

The module concept of Oberon is also very good (leaner than Modula's). There are also other languages with good module concepts, e.g. Ada, or the CLR based languages.

> Wirth's book Compilerbau ... is a piece of pristine clarity

For a certain type of compiler (rarely used today).
I think that depends on the framework and what deviation you want.

I agree that if you use Rails and constantly override its conventions, you will have a bad day. But following conventions is usually a strength, not a weakness. Most websites are not shocking cutting-edge things that have never done before, but relatively boring simple tasks that involve grabbing data from databases and showing them to users via templates. Every decision you have to make is a cost, and if you have a small team, having basic naming convention decisions and directory location decisions already made accelerates development. There's a big advantage to following conventions when you want others to work with you, because different Rails applications look quite similar in many ways.

I have not had trouble overriding Rails when I needed to override something specific.

Btw, I like the original article. There's nothing that's good for all cases, so it's very important to understand what something is good and not good at.
So, we have source code for the signal app.

We can audit that source code, to ensure no key-leakage occurs.

Next, I install signal on my phone via the app store. How do I know the app I installed matches the source code that was audited? After all, google / Apple could decide / be forced to provide a modified binary.

Reproducible builds work for that.

Alternatively, consider debian. I ain't got time to compile every package I want from source (otherwise I'd run gentoo). Requires so much more dependency hell I'd rather avoid.
With reproducible builds, I can check the source for any package, and so can every other curious person. This way, instead of everyone needing to set up their own build environment for every package, we can all depend that once in a while, someone checks whether a build actually comes from trusted source code.

Is it less secure than building myself? YES. Does it make deploying compromised code more likely to be detected than without reproducible builds? Also yes!

Heck, if we change from "depend that once in a while, someone checks whether a build actually comes from trusted source code." To a federated system of trusted checkers. It gives pretty nice guarantees, and makes depolying compromised code pretty damn scary.

Essentially. Whenever the person compiling / signing the binary is not the person writing the source code, reproducible builds are pretty dang nice.
Why Your House Could Be Your Best Performing Asset Class
Looking at the number of unprotected databases (see i.e. https://news.ycombinator.com/item?id=23957510) I think it's good that cloud providers push for gateways etc. in order to restrict access on network level.

(They still could do IPv6 proper - no argument there)
If I look at the database queries on the vast majority of pages in a typical Django project, I see a big list of operations being executed sequentially that could actually be done in parallel.

Additionally, (this is my pet use case) if you implement a GraphQL server on top of Django (using one of the many libraries), you tend to get subpar performance because GraphQL lends itself really well to parallelised data fetching, which is hard to take advantage of at the moment.
I have to agree with this comment, I've traveled to Thailand 3 times and I've never been attacked or kidnapped. 1, or even 2 datapoints aren't enough to say something like this. Being kidnapped will always be a risk, but not something you should worry about.

Unrelated to this, I'm curious why everyone is picking so much on Thailand. I'm not sure if this is my own bias because I've went there multiple times, but people use Thailand for a lot of (mostly) bad examples. Even though Thailand is probably as safe as it gets in South East Asia (with the exception of Singapore). I know multiple people from Thailand and the Philippines, and everyone is saying that the Philippines is more corrupt and more dangerous.
It does look like they have a different, less “fatal” avenue to recover work related accounts[0], but I’d still be scared to host my FOSS repos there and make a mistake only to lose my account forever.

[0] “What if this is a work account?“ FAQ header in OP
That would be "Compiler Construction", the last version being freely available[1].

Given that Oberon is a simpler language than pretty much all of its predecessors and that the latest revision went even further, I'd be interested what Wirth does think about contemporary strongly typed system languages like Rust or Go (the latter being quite, erm, influenced by Oberon). Or heck, Eiffel, being the language of his successor at ETH Zürich.

IIRC he didn't have a high opinion of functional programming.

[1]: https://people.inf.ethz.ch/wirth/CompilerConstruction/index....
That's not necessarily a problem with nat; anybody with basic networking knowledge can tell you that packets that move through v4 and V6 do not have to follow the same routes. Since there are more users using v4 than V6 it's common for v4 routes to be congested while V6 routes are not.
It's the only browser that gives me complete control over my session logins in containers, and it respects the cardinality of the URL - never meddles with it, conceals part of it, autocompletes it... I use Chrome only when forced to by lack of Firefox support.
A better, more satisfying explanation for Simpson's Paradox comes from Pearl et al.'s work in modern causation theory, in which they point out that the paradox exists only because we fail to consider the causal structure that generated the apparently paradoxical data. If we take that structure into account and are clear about the causal question we are trying to answer, the paradox disappears. For a recent example involving COVID-19, check out this blog post:

http://causality.cs.ucla.edu/blog/index.php/2020/07/06/race-...
First Git commit 19 July 1972
You mean "static" typing. Ruby is strongly typed, it just isn't statically typed.
August 5 Discussion Board: Missing Covid Data
I suppose you could backronym it to mean Ireland/Eire, if you wanted.

Funny. I've never really wondered about this before [and I'm Irish!] but now you've got me puzzling too.

IR not being available [Iran] the next most logical would seem to be:

.EI --Éire

.ER --could also work for Éire

.RI --Republic of Ireland [Official name of the country in English]

.PE --Poblacht na hÉireann [Official name of the country in Irish]

I've never heard of Inis Eagla by the way. Must be very obscure.

If someone fancies asking the .ie official registrar, on the off-chance they actually know, their Twitter account is at @IEDR_dot_ie [I'm not on Twitter, so I can't do it]
True, but the question is if transparency is desirable. I would say it is dangerous for three reasons. First, you might be tempted to tweak your prior until your posterior confirms your hypothesis. Second, using Bayesian reasoning, you make it seem that the first procedure is justified. And third, if everyone does the tweaking for example within in a scientific community, nobody would complain, since everyone automatically would confirm their hypothesis with higher posterior probability.
>>I heard once that their still finding caches of gold from the fall of the Roman empire. It didn't help those rich papos, why would it help you?

Maybe some where helped by it, we don't know. But better to have it than not to, unless you announce to the desperate masses that you have lotsa gold

>>I truly don't see gold being of any use in a collapse where suddenly food is the most valuable asset.

You can do without food for weeks, and many will trade food for gold ("I have enough food" etc etc). plus, you can provision for food too. The idea is to make believe you don't have x% of your networth and buy gold/silver/guns/food/land with it for that one moment in time.
It makes me wonder if we should remove some percentage of fallen trees in forests and sequester them? Otherwise all that co2 goes back into the atmosphere.
Here's What It Looks Like Inside a Tire When You Drive
I assume we agree that "productivity" doesn't just cover writing code, but also avoiding/finding bugs and maintaining the code over a long period by different people. TypeScript is a big progress over JavaScript in this respect.
Why everybody hates scrum and how to replace it?
I find this entire discussion to be indicative of a deeper disconnect within "programming culture" [insofar as such a thing exists]. Broadly, it seems to me there are are (a) folks who value mathematics and the ability to reason about programs using mathematics, and (b) folks who do not see the value of being able to reason about programs.

I personally fall into the (a) camp, since I work on compilers and formal verification. Monads are mathematically useful when trying to define the semantics of a programming language. This mathematical usefulness translates into useful API design [which I personally see as the hallmark of all functional programming techniques].

On the other hand, if one does not care about or want to abstract over a very generic notion of a side-effect, yes, monads are useless. You can go your entire life without needing to know what one is. And that's okay.

Why does side (a) side feel the need to pressure side (b) into learning all of their mathematical tools? Why does side (b) see side (a) as "being difficult" or "being obtuse on purpose"?

As far as I can tell, the two groups do not even share the same axioms about how we should build and reason about programs. Monads are a red herring.

- Real world example of where monads are used to reason about programs: Inside the VE-LLVM codebase, which provides a formal model of LLVM in Coq to prove certain properties of certain algorithms used with LLVM corred, a monad is used: https://github.com/vellvm/vellvm-legacy/blob/e4c22d795974ba7.... Much of the reasoning around sequential side-effecting semantics is phrased in this language.
BT and Hyperoptic both also provide native IPv6 in the UK

Hyperoptic will give you a globally unique IPv4 address for an extra £5/month, and otherwise will stick you behind their CGN.
Reminds me of the "hot slide" technique used for old telephone switches
If I lose all the keys to my car or they are destroyed, I can pay a dealership to create new ones for me, I don't just have to forfeit the car.
Compensation models for on-call work
You would still have to do it with reproducible builds. It's only reproducible if you have the same code. If you change something there is no reasons to get the same result, a bit like you would expect with a hash, it is deterministic, but that's all.
I'm surprised they weren't stopped by police to investigate a very suspicious heavily loaded cart on the Subway. It easily could have been 300lbs of explosives on that cart.
Construction equipment for scale:

https://s.yimg.com/ny/api/res/1.2/mz7KZlvgwTBa5cs4xfM_aA--~A...
Was the title changed? Because it says "ms" both here and on jet-start.sh and that unit is milliseconds.
Well, in many industries the "who knows who" is a significant roadblock for extern competitors, which can slow down the process.

But that is already a compromise to the position that explains unequal demographics with discrimination. There are countless examples where demographics did change after civil rights got extended, psychology is an example.

I think CS has a distorted (self) image that can make it unattractive to women, but that is also something that either changes gradually or reflects the type of person drawn to the field. In the latter case there is no problem. Actually I think carelessly attesting systemic racism/sexism keeps more people out than actual discrimination.

You can easily falsify that when you look at academic juniors where there wasn't even any room to discriminate anyone and their later representation in the work force.

I don't feel to happy to justify myself for not wanting to discriminate against anyone and why I think that a Bloomberg author might have not a good grasp at what he/she writes about. Sorry, didn't look up the name/sex/race because I just don't care.
Files by Google adds PIN protection for your most sensitive files on Android
AWS and older hardware is no different. Set it once and it keeps running for many years.

I've came across old AWS account (startup have been using AWS for the longest). All the network traffic or VPN goes through a single instance with 3 years of uptime.
I guess the author is arguing that we currently over-abstract, which is quite possible. At the end of the day, it will always be some kind of balancing act.

My point is that web applications are, at least from a security standpoint (but also some others) anything but simple, and I'm fairly sure most attempts at creating a focused, lightweight, custom framework are littered with security issues. There are counter-examples in both directions, but this is just my general experience; people who know all the pitfalls you would have to avoid also don't generally want to try to implement all that by themselves.
Seconded, Keepass2Android is great and has very good integration on Android. You can use the autofill feature to, well, autofill the credentials fields in any app.

Has merge functionality if you've edited the password file both on mobile and computer.

It even has an offline variant that keeps everything local. I'm using that with NextCloud.
Android version also didn't see any updates until May this year, when this feature arrived.
Sure espionage happens, but there are half a dozen people in prison for spying for the Chinese already, and counting. In fact it’s precisely because people keep getting caught and thrown in prison that we know it keeps happening. Every few years a programmer at an investment bank gets sued or jailed for stealing code. There’s nothing new about people facing consequences for pulling this sort of crap.
I believe that was only because it was mandated by the federal government as part of procurement process. It’s the same reason there was a half baked posix subsystem in Windows NT. I don’t have citations at the moment to prove my memory.
You used to be able to stick info in the ICC profile area of a jpeg, and it would survive Twitter's compression and thumbnailing. Not sure if that still works: https://www.theverge.com/2018/11/1/18051514/twitter-image-st...

Discussed at the time: https://news.ycombinator.com/item?id=18342042
> Governments have a hard time making people wear a mask that can save their lives and the one of their families.

That seems like quite an exaggeration for a virus with a survival rate of 99.95% for those under 70
https://www.medrxiv.org/content/10.1101/2020.05.13.20101253v...
>If you’ve been working since the 90s and are only making $200k/yr in tech (less than the total compensation of some new grads going into FAANG)

I think you should be clear that when you say "some new grads going into FAANG", the word "some" actually means "very very few". Because, very very few grads going into FAANG actually make $200k/yr starting.
What would help a lot, if you could customize the generated parameter in some way. Together with the password feature noone could "hack" into it anyways.
I don't find it dispiriting so much as eye-opening and a good laugh. I can't help but laugh out loud when I see a pretentious-looking padlock defeated by a sliver of metal from a Red Bull can. Or, even better, a "smart" lock defeated with a magnet. Conversely, it's scary how many products intended to secure guns are really not up to the task - something to think about when you're looking for one.

But, as with all things, use the best tool for the job. In some places, a cheap Master padlock is all the security you need, though it wouldn't hurt to get something a bit better. It's definitely worth checking out his channel if you're thinking about buying a lock.
I think whether or not this is true for a site depends heavily on the target demographic. Highly technical people with above-average focus would probably see it as an interruption and view it negatively.
The field changed. Why did all the women kick out the men from psychology?
> I do have a reason to want to modify this extension.

And it is...? It's a completely honest question, I really like to know what you'd want to achieve and modify but is hidden from you for being in that binary. I'm not interested in the "benefits of open source" but in the specific use cases.

I surely agree that you are limited to the platforms MS is building that binary for, but if you are already using the platform for which they provide the binary, what would you like to change but you can't since it is in the binary and not in the rest of the extension for which there is existing source?

I'm asking as somebody whose job was for many years actually implementing these kinds of software (parsers, compilers, real time parsers for help during editing, etc.). I am really interested in specific use cases, to know if working on the development of some alternative could be justified.