skysight-inc/HackerNews huggingface dataset:
Yup. It is soul-crushing.

My company failed in the back-wash of the "dot-bomb" (we were not strictly a dot-com play - but close enough that we got caught in the back-wash), and while I would have preferred IPOing (not really possible in early 2000) or M&A (actually, similar reasons), I got really DEPRESSED!. Now, I was just the founder, not the CEO, but the journey from garage to supremacy (if you even make it) is a ride, maaan!

I always found the garage loneliness that you find people lamenting on HackerNews to be a lot more bearable than 10 shareholders and 250 employees and (in our case) 20 global enterprise customers. I am certainly not sure that I have it in me to attempt again. Psychologically, I mean.
Schemaless data (or at least schema-on-read rather than on-write) is the primary feature. Store JSON documents and index on any field.

Also it was great at sharding and scaling horizontally when first released, and one of the few options available at that time. It's since been eclipsed by much better systems that don't have such a convoluted and fragile setup.

These days there's not much benefit over a JSON field in a relational database, unless you're really invested in JSON/Javascript through your entire stack and want that to reach into the database as well.
I think you're referring to PAKE (password-authenticated key exchange). SRP (secure remote protocol) might be the Stanford proposal you're referring to, although it's actually fairly commonly implemented as far as PAKEs go (Apple for instance uses it for their iCloud Keychain).

https://blog.cryptographyengineering.com/2018/10/19/lets-tal...
They're claiming political influence and they have the president's public statements as evidence.
https://riscv.org/risc-v-genealogy/

https://en.wikipedia.org/wiki/RISC-V#History
This still happens, in 2020, with breathtaking regularity. Several times a year, a site won't accept my password, so I then start the whole "Will 20 characters work? No, that didn't work. Will 16? Nope... 15? Nope... 12? Nope. Oops I skipped 14... AH YES FINALLY."
Now retailing for $9.99 USD[1] but unless I specifically needed ethernet, I'd probably pick an RPi Zero W for support's sake.

1: https://www.friendlyarm.com/index.php?route=product/product&...
We're finally seeing challenge-response in the form of WebAuthn, though I'm not sure why it's taken so long to get to where we are now. It's not like challenge-response is a new concept. And you don't need a hardware security key to handle challenge-response. If you don't have that as an option, you could use the password to directly generate the response. Of course the browser has to support this, otherwise you'd be relying on the page's JS which doesn't help with the attacker controlled server scenario.
It's disturbingly annoying, I agree
I don't think it's a grand conspiracy. I think it's just that someone who's career is writing for the Atlantic isn't an intellectual heavyweight.
I don't use Github much. My code is mostly on https://git.zx2c4.com
The financial cloud apps control your financial database and therefore your ability to perform analytics on them. Open source allows you to actually plug in and make dashboards.

It took me 20 mins to build a monthly revenue dashboard in metabase that updates live and you cant do that natively with Xero.

https://youtu.be/PeQR7GseFQI
What is Public Key Cryptography? (2018)
why do people beleive "wacky" relegions?

my guess is it provides an explanation for things, and for people who might not have some direction in their life, something like conspiracy theories provide some meaning (stop the evil conspiracy) + explanation (so thats why things are so screwed up)...

thats my guess anyways....
I think what's missing from education in the US isn't more depth or breadth of facts, but the ability to think independently and critically. We need to gain better awareness that if we're responsible for making an important decision, but we can't be bothered to become informed before making that decision, bad things will happen to us (and others who rely on us) that we could have avoided if we had taken responsibility for our actions like an adult.

I think a huge fraction of society are used to living like a child -- we're used to being told what to do in every part of their lives. So we never learn to accept responsibility... for a business, or an investment, or the health/welfare of others, or for their jobs and livelihoods. We reject accountability.

I think most people believe they're powerless to control their lives, that they're helplessly propelled by giant forces far beyond their control, so their individual decisions and actions don't matter. Thus they don't need to know the facts or consider the consequences of their choices. The collective they belong to will make that decision for them. Their only decision is what sociopolitical gang they should join. They delegate all authority to the group's leaders to think for them after that.
Funny to read the comments here and how people debate and wonder what could be the causes of stock markets rallying.

There has been speculation that Fed is aiding foreign central banks (like the Swiss central bank) in buying US stocks such as Apple and others... When central banks can print money in an unlimited manner (with no real risk) and buy real securities like stocks, the prices keep going up...

Quantitative easing (QE) at its best without Fed taking full responsibility with what can eventually happen.

Robinhood and other trading apps for the consumer are just small sparks contributing to the growing fire...
The 1B came out in 2012, and you can now get a Pi with 4× Cortex-A72 1.5 GHz and 2 GB of RAM for the same price as the 1B cost then. The title does say "alternative".
That should have started the usually uncomfortable dialog about enrolling in a basic statistics course. It could save your relationship.
Terminology aside, I think the comment was accurate.

I think it would have been better to kindly correct any terminology issues you noticed without saying "nobody actually involved with helicopters calls them" twice. For example:

"While `rotary wing` is an accurate term, most people in the industry would probably call them rotor blades."

I don't think the "copter" correction was necessary, since that is in fact one of the slang terms for a helicopter and it's clear what they were referring to, whereas 'wing' could confuse someone into thinking of fixed wings on the side. But if you were going to mention it, it would have been helpful to mention what you thought would be a more appropriate term.

Just some friendly feedback! :)
I didn't hear about this. I was a party to such a bidding process at a government agency.
If you have a random 80 bit password, yes. But passwords are the farthest thing from random. Even high entropy passwords from a password generator will only use the printable ASCII character set, which reduces the number of possible values of a byte from 256 to 95. An 80 bit password from a conventional random password generator would have an effective entropy of (80/8)*log2(95) ~ 66 bits, which would take about 30 GPU years.
Starcraft II 10TH Anniversary Game Updates
Its a mega contract and therefore worth wasting lawyers and our tax payer money on for a decade.
That's fair and totally makes sense from the perspective of someone that is able to enforce that assumption. In my experience in large orgs that condition is very difficult to enforce and that's when organizational inertia kicks in. But your method is objectively better if you can prevent people from doing dumb stuff while you keep working.
The code density beats ARMv8 (the best they could do with a fresh start do-over) and beats x86 too. They gave serious consideration to creating a compact instruction set that also doesn't cause the performance impacts seen in Thumb.

There's various reasons for a new ISA. The most appealing right now is the patent pool. Most other open ISAs are explicitly patent encumbered (recent MIPS versions) or provide zero protection (openrisc). The chances of getting sued over RISCV seem very small until you start moving to non-ISA parts of the chip.

For an ISA to succeed, the ISA itself is a distant second to the ecosystem as x86 shows so well. The amount of money an R&D being poured into RISCV would single-handedly be enough reason to adopt.
Well I never witnessed any government employee saying this. I just realized my language sounded like I did. Oops. I was in a (private sector) meeting where they relayed the situation.

So I wouldn’t say I witnessed it. I was called into a brainstorming session for “how can we spend this money? We need to come up with something quickly.”
I thought the hot dog carts were financed by the tourism board to make NYC look interesting on TV and movies. Do they have customers?
Sounds like a bad architect or someone who only knows surface features and doesn't have experience with the actual databases.

Adding a column is not hard in any relational database, and pretty much all modern ones support no-downtime transactional schema updates with backfills, concurrent index builds, etc.

Also the schema always exists somewhere, and it's usually to put it in the database so it's next to (and validates) your data rather than keeping spread out in your application code.
git has quite extensive documentation, and it is, in principle, really useful. The problem is that it suffers from what Geoffrey Pullum called "Nerdview" <https://languagelog.ldc.upenn.edu/nll/?p=276>: It is written from the perspective of the author of the program, rather than the user, and therefore it is easiest to understand if you are already thoroughly familiar with the underlying architecture of git.
I’m curious why people are downvoting the comment. It is quite remarkable for a major corporation to call the President out so explicitly. This is a scorched-earth approach to the comparatively anodyne world of public messaging around government contracting. Perhaps it’s a bet that the government changes hands in November and this kind of post curries favor with the new administration.
But hasn't the password + salt been matched up, not just the password? Or is his point that you don't know, so you need to treat it like the password is compromised (which I agree with). But the password is compromised either way (hash or encryption). I'm confused, maybe I need to go back and read it again.
Amazon: "We have the broadest range of services and the most secure and reliable data centers, we meet every technical qualification and then some, why were we not picked."

Government: "All of that is true, but what's your managed Active Directory story look like."

Amazon: [bugs chirping] uh [crickets] we have, a, um, active directory service, it, uh [sweating] works [perjury] pretty well.

They could argue all day about the technical merits; Amazon can complain about political motivations. I think its all bullshit. The Government is, and always has been, for better or worse, a Microsoft shop. Amazon checks boxes. Microsoft solves problems. Amazon was never going to be able to walk in thirty years into the Federal Government / Microsoft relationship and steal this contract.

And, frankly, its better this way. The biggest cloud provider doesn't need to get bigger.

I've got contacts inside Azure who say that many, if not most, teams across the entire org are heads down on JEDI right now. The government invested billions of dollars into Microsoft, but Microsoft is investing right back (and always has for the government). Amazon's complaints are going to amount to absolutely nothing; Microsoft knows it, the Federal government knows it, and it seems most people even here know it. So, all this amounts to is a really, really bad look for them; like sore losers who would rather complain about losing out on billions of dollars than fix or improve the myriad of issues customers like Us have with AWS.
My portfolio is split 50-50: I have $2M in common Vanguard index funds, and $2M in private illiquid equity from a startup I worked for in the past, via options I exercised.

Every now and then someone contacts me interested in buying some shares of that company, which I promptly sell and immediately buy index funds with the proceeds. I liquidated about $1M of those shares already, let me know if you have $2M to burn sitting in your pockets :-)

I wanted to invest in some private real estate syndications, but then covid came through and I don’t think it’s a good time to buy commercial real estate. Plus, my job keeps me super busy.

To be honest, if index funds end up averaging a return of 3-5% after inflation, it would be more than enough for me, that’s why I keep investing in VTI/VXUS, I have done that for a decade now, non stop.

What options are you finding right now? I find that the opportunities available to little guys like me who might not want to put more than 50-100k per deal are incredibly limited.
I remember it the same as a kid. I read an interview with Peter Molyneux in Amiga Format or Amiga User where he talked about using C to code populous and I figured - ‘I need to learn C!. So I managed to save up 15 pounds or so, which was a fair bit of money then, to order a shareware C compiler from the magazine classifieds. I remember it came on several floppy disks. Then I found out I stll needed the commodore standard libraries (which cost hundreds) if I wanted to actual make anything and I was stumped! Ah the joys.
And at that point we'll have access to uranium from asteroids and other planets.
Seems like a rant against hashing, but using bcrypt at level 10 (like he demonstrates) is just so much better than encrypting. Level 10 takes about a full second on hardware from a couple years ago, which was the last time I checked. Yes, you can verify that one of them is "iloveyou", when you already know that, but any kind of dictionary attack, at one per second, is not going to be a good time. And like he said, if you encrypt, and lose the key too, game over.
That's the worst, especially when the truncation is silent. Boo!
There are some requirements in the RFP, like RAM sizes and ruggedized hardware, that exactly matched AWS specs but not Azure (at the time).
It wasn’t easy, never said that, but I also had no credentials and no one cared.
To do their in-game enemies mostly.
I don't particularly like the idea of rightward assignment (although the syntax itself seems fine to me), but the "million-and-one ways to do everything" is the biggest reason I strongly prefer the language over more "constrained/limited" languages like Python. In those terms, this seems like a definite win for the language (and those who choose to use it) for me.
> RedHat announced that cockpit will be the long term successor of virt-manager:

Sweet, now security bugs in the same-origin-policy can root my virtual machine!

I really wish RedHat would make a competitor to VirtualBox.
Great comment! My corollary would be that "Many managers have never had a great role model". In my first role as an engineering manager I thought it was the logical career progression and promotion from lead, but my preparation was more along the lines of "I've had managers, I can do what I think they do". I was very fortunate that my company at the time was supportive with follow-up training and building a peer group of newly minted managers, but it would have been more ideal to have some prior leadership & management training so I was more aware of the role and responsibilities I was signing up for. I think training provides helpful insight into intentional motions and being a competent manager, but it is hard to beat experience and learning from some great role models.

One secret I would tell any engineers considering management: "management is a career change, not a promotion". Charity Majors has some excellent blog posts on this, including the Engineer/Manager Pendulum: https://charity.wtf/2017/05/11/the-engineer-manager-pendulum....
Uber is a scam, designed to cream off lots of cash from drivers and investors alike.

If you're an investor or a driver, you won't make money, and you'll be out of pocket.

The only people who gain from Uber are the Uber Administration.
Those are the founders of YouTube. The Rogan podcast has a YouTube presence but started on UStream and (pre Spotify) appears to have earned money the way many other podcasts do (sponsorships read into the podcas ) and used all the usual distribution channels including open podcast feeds. I’m sure there is some YouTube revenue in the mix but seems pretty incidental. I don’t think Thiel has anything to do with funding the Rogan podcast.
I agree that Bitcoin remains volatile. It will never stabilize. But there's a misunderstanding that Bitcoin will replace fiat. It doesn't have to compete directly. Bitcoin is an alternative money. It's volatile but predictable issuance. Fiat is stable but has unpredictable inflation (debasement). They co-exist. From a philosophical perspective, Bitcoin and fiat are the two extremes of Yin and Yang. They're both necessary for a functional money system.

https://bitflate.org/post/2020/08/24/yi-ching-and-cryptocurr...
No, not justifiable. Illegal. Rich people blatantly stealing from poor people. Wage theft is more common in the United States than all other types of theft combined, and we shouldn't normalize it. It's criminal, and it's morally despicable.
> it is isn't atomic

merge is a single, logically-atomic statement in sql server (with or without hints)

it doesn't have the same physical locking characteristics as a single insert or update statement, how could it?
Interesting problem. In this case though, I was just offering a pointless optimization to the parent post, which also used subtraction, so I assumed it was allowed.
That will work with Oculus? Doubtful
The email approach is what StreamYard does. If someone gets a forwarded email within a short timeframe, they have access. Then they cookie you with an access token.

This is both good and bad. When I needed a whole team to have access to my account, I just built a mailing list, and used that address for signing up. Yes, it was annoying that we'd all get email every time someone logged in on a new device, but it was also pretty straight forward to use.
How can you kick the server if you're not in the datacenter?
The attention span of players today is much smaller than it used to be and there is a lot of money to be made in this industry, so I believe that these facts changed what mainstream games are supposed to be. But we have the indies :)
Could you expand on this a bit or give a link where I can read more? And why do you think he has "lost sight" of that potential wealth, as opposed to the idea that many businesses are simply not appropriate for equity financing?
Anybody who makes complex technology decisions based on marketing copy doesn't deserve to be taken seriously either. Not that I think these people actually exist other than in the minds of many HN commenters.

Oracle on their website right now says "we lead the market in autonomous, cloud, and applications technologies".

I assume you think developers are going to suddenly abandon AWS, Python etc and move entirely to an Oracle stack based off this quote ?
Sure, but Openstack-based public clouds are in short supply (unfortunately? fortunately?). I think the short explanation is that pure OSS stacks limit providers ability to move fast and differentiate. So it’s a race the bottom for Openstack-based providers. (Rackspace’s gambit was quite different, as they were arguably trying to do exactly that.. comoditize cloud services.)
You can make assertions like this if you like, but they're simply untrue. Windows is nightmare to install software on, while on Linux one usually has multiple, easy-to-install-and-keep-updated options (Appimage being the worst choice, because it is the most Windows-distribution-like, and requires the application itself to check for updates etc.).

You can also distribute binaries on Linux easily enough. There's just no general reason to want to do so.
https://www.merriam-webster.com/dictionary/theft

Definition of theft

1a : the act of stealing specifically : the felonious taking and removing of personal property with intent to deprive the rightful owner of it

Much like violating copyright isn't similar in nature to commandeering ships on the high seas its not much similar to the taking of real property in that the owner isn't deprived of anything and in fact is wholly unaffected and absent from the transaction.

Actual property is the necessary resolution of the inherently rivalrous nature of property while Copyright is mandate that I limit what data I transmit to another party so as to avoid transmitting any patterns of bits that could reasonably be argued to be owned by any entity on the premise that this limitation will create an intangible good that can serve as an incentive to encourage creators to trade in it.

If congress contrary to the rest of our interests grants you sole ownership of the color red I wont be a thief if I opt to paint my house that color.

Really this is a tired subject having been debated endlessly since the 70s. Anyone still using it is apt to have staked out their position and decided they care more about the emotional import of the word thief than reasoned argument.
Would the bounties be large enough to cover the work involved? I'm doubtful.
Arguably wealth creation is never zero-sum, but businesses also do cause money to transfer which is - but I get what you're trying to say and won't dispute definitions.

By wealth creation I mean something like this: you buy parts to build a house on land you've purchased. After you're done building the value of that house is worth more than the sum of its parts. The time you invested created something more valuable without taking anything from someone else (you now have more 'wealth' than you had when you had some land and a pile of house parts). This doesn't take wealth away from anyone else, but if you were to sell someone may choose to buy your newly created house when they might have otherwise chosen the neighbors house which is slightly older. That's a bit of a different thing.

There are definitely some industries where a lot of the cut-throat nature is a result of stagnation and groups fighting each other over what profit is available via competition. (Thiel talks about this in Zero to One and why businesses in competitive markets are a bad idea).

That said, the uber/lyft example is interesting.

Some points:

- Prior to uber and lyft a lot more people would just drive drunk, taxis were unreliable and expensive - if you had to take a taxi somewhere people would just opt not to go.

- Taxi companies were pretty corrupt and (at least in NYC) relied on a medallion model that expressly limited growth and empowered organized crime groups. This led to a worse experience for everyone except the medallion holders who could extort drivers and riders (while providing bad service).

- A lot of people that drive for uber and lyft were not driving for taxis before, the market maker effect of uber/lyft and people that need a ride created a much larger market for people hiring taxis. This creates wealth - both for the drivers that did not have that ability before and for the riders that would not have previously bothered to call a taxi (and clearly all the people that work at uber/lyft generally). It might also have knock on effects where people go out more which might benefit local businesses more, but that's fairly speculative.

Are there people that get screwed in this? Probably - taxi companies that provided bad/expensive service are not competitive with uber/lyft. A smaller amount of people at those companies that were making more are probably making less. Is that worse for society generally? My personal view is that it's not.

Anyway - on a meta note, I also appreciate the back and forth and engaging with me. I'm open to being persuaded otherwise. I've read a lot about this stuff and have tried really hard to understand the underlying truth away from politics. This is where I've currently landed.