skysight-inc/HackerNews huggingface dataset:
This is not unilateral, and not the terminal answer. Due to the bundling going on right now, many shows are getting pushed behind absurd paywalls. For example, if I would like to watch Season 11 of RuPaul Drag Race, I would need to get a subscription to FuboTV, a "live sports and TV" service with 100+ standard cable channels. The best price they can do to include this content is $65 / mo. For a single show I care about!

After some checking around, I did find it for $20 / season on Amazon, which comes with the following license agreement:

> Offers and pricing for subscriptions (also referred to at times as memberships), the subscription services, the extent of available Subscription Digital Content, and the specific titles available through subscription services, may change over time and by location without notice (except as may be required by applicable law).

So... I can give them $20 for them to stream it to me for however long they'd like.

It is impossible to buy the series on DVD.

This is not an isolated incident. As with the late what.cd, at some point these torrent services also serve as an archive of secondary and rare work. This particular example does not fall into that category, but it is not hard to find others, such as the classic Max Headroom, that do (https://reelgood.com/show/max-headroom-1987).
> But a few years after it's over, we'll be acting as if it never happened. We're good at that.

So melancholy, a lot of the responses seem to gravity around a general accidentalism. I feel that’s true for a lot of people who have had great success, never really understanding how each of the pieces fit together to make their success and thus never feeling like they’ve owned it.
did you read the article? there is no reason to encrypt passwords.

scrypt is a popular KDF, i think you'll be fine with that.
Admin tools should probably be IP whitelisted instead than open to the world if admins are few?
From a task-oriented perspective, developer A can seem more productive than developer B because developer A marked more tasks as finished than developer B.

The problem is that marking a task as finished does not mean that its deliverable is solid. A developer can game the system by leaving technical debt behind for others to fix. In this way, the developer is stealing productivity from others, by forcing them to spend more time reading, debugging, refactoring their half-baked code.

A neophyte manager may buy into this approach to performance, and even encourage it. But after a few iterations of this unsustainable practice of leaving tech-debt behind for no reason, reality sets in: now you need an army of engineers to get things done because the system becomes fragile and complicated. And you also need an endless amount of documentation that is constantly getting out of sync.

In a way, under poor performance management rules, development becomes like a game of pool: it's not only about having a higher score, but also about making it more difficult for others to have a high score. If you want high productivity, recognize this and penalize it.
This cookbook is from around 1670, almost 200 years after the discovery of the New World.
I've been thinking about that a lot lately (mostly in terms of my own memory) and a fun random thing I've been thinking of is that it's really impossible (at least to me) to visualize something with any meaningful fidelity. I can describe a scene, but that's just my description, it's so blurry.

When I hear a song I like, I can pretty much repeat it note for note when I whistle, and it conveys really the same feeling and meaning, but it's also a bit blurry on account of the details getting fuzzier like lyrics, specific instruments etc... but it feels a lot more authentic to the original memory/experience than anything I can ever visualize.

What I'm saying, is that I wonder if there's something special about how spoken/vocal memory sticks vs other kinds of memory.
SHA256 is also no good for storing passwords, you need to use a PBKDF like scrypt, bcrypt, or pbkdf2.

The SHA-family cryptographic hash functions are purposefully designed for throughput, if you combine them thousands of times like in PBKDF2 they can be fine. One round of SHA256 is trivial to brute-force especially with the plethora of ASICs available.

HMAC is also completely unnecessary here, and see the article title for your variable naming: it's not encrypted_pw it's hashed_pw.
Wow. Quote:

> But I can’t think of a prior case where the feds unambiguously acknowledged using Google search logs this way: to, apparently, zero in on people who searched the wrong word at the wrong time.
SyncThemCalendars – Setup a synchronization between calendars
Really any restaurant model based on high, peaky lunch traffic is just going to get hosed.

So I would imagine that in the worst case scenario, some food models, like the lunch truck, the NYC hot dog cart or the NYC deli, are going to have some severe issues generating enough cash even just to play their employees, since they are low-margin, high-volume businesses. At current volumes they will never make enough money to cover even non-rent costs at <$5 a sandwich.
> That's a tautology though :) Of course any language designer will design a language according to the properties he/she desires.

Eh, you can just fail, too, no? Like I could sit down and set myself the goal of designing a language that achieves goal X while staying under complexity limit Y (by whatever measurement), and then end up having to compromise on either of them because I can't quite figure out a good way to achieve a particularly tricky part of X without adding a lot more complexity than I initially expected. Or I could decide I want to design a language that's portable across many CPU architectures but inadvertently bake in a lot of x86isms that make it awkward/inefficient to implement elsewhere.

> Not necessarily. Race conditions are hard to find. It's established that "simplicity" is not a straight forward metric to measure. Having a simplistic language just means that complexity is being pushed on the programmer, since most non-trivial programs are complex by definition.

Ah, I didn't mean that concurrency bugs are quickly found or solved. I definitely agree with the just-moving-the-complexity-around part. I just meant that soon after getting started with Go, you'll probably have run into a bunch of concurrency bugs already and developed the kind of mental scarring and automatic averse reactions to certain concurrency situations that'll let you cope and still get things done despite it being clearly suboptimal.

> the fact that it's being pushed for almost everything, due to hype and fad driven development, and the inexperience of many programmers, is an issue.

But this is a kind of success too, isn't it? Presenting your solution to a problem in a way that appeals to enough "inexperienced" people to create the hype/fad isn't trivial, so they must have been doing something right. I don't think it's just a case of "$bigcorp does it, so it's cool", plenty of $bigcorp languages or technologies don't really catch on, let alone on Go's scale.

I think there really is a niche where Go is the best solution (or at least a significant local maximum), even if that is only "'inexperienced' programmers can get started with, say, highly concurrent http services", it's still _something_.

(Again, disclaimer: I use Go at work and I like to give my (non-google) employer and my coworkers enough credit to think that it's not just because of hype/fad, so I may be biased.)
if that was true, this article wouldn't exist: https://en.wikipedia.org/wiki/Deterministic_encryption
support on most platforms

What do you mean by "platforms"?
and here I find the fact I no longer have the stress of traffic to offset most of my concerns plus it really is beneficial to my wallet.

So yeah, there are pros and cons but the parenting one is not truly fair in that the arbitrary handling of schools across this country is maddening in its own right. people who tend to be good at managing their own time are usually good at dealing with the children being around.
So specter is lens and meander is syb/generics. Nice
Yes I did read the article, It's not a password, it's a PDF file, it's contents I store them as plain base64 now, but I'd rather have store them in a more secret fashion in case of a leak...

If that makes sense...
Yeah I think that whole paragraph needs to be rewritten; one could also come away thinking that substituting characters in a word with symbols is also a "good" password.
Lots of interesting info, and I really like working with MongoDB. But I am baffled by the claim that "MongoDB is the king." In all the circles I work in, I only hear Mongo dismissed as a joke. Unfortunately the company's dismissiveness of RDBMSes, their hubris in pushing NoSQL, and their blunders over what are extremely poor default settings all combine to make MongoDB something I don't see anyone taking seriously. I use it in a project where it's basically just serving as a big cache, so the reliability and durability of the data is not critical. It's certainly way easier to query than any other document-oriented database, but getting a foothold to use for anything requiring long-term storage would be a major challenge.
I’m sure there is a way to phrase that same thought without disparaging the mentally disabled.
And now we have discussion boards like this one which will be a goldmine for future historians.
Rights holders get paid sane cost per use that diminish over time and are rather opaque because of distributors flat rates.

Distributors compete on service quality not library. If I need 2, or more service subscriptions, including my isp, that's too many for me and I will actively seek out solutions that provide better functionality without paying a tax for worse service.
Nice! I just tried it out now. I also like the fact that "croc" defaults to receive, where with MWH you need to type "wormhole receive". Saves a lot of keystrokes.

Tab completion is something I'll miss from MWH (I'm already converted!) but I can live with it, and my non-technical friends aren't even aware of the concept.
Maybe still with a salt? Otherwise I’d think it would still be reasonably hackable cause both things can (could) be known.

The only thing that bothers me here (not sure why) is something about the fact that if the user changes their email you get a pass change as well and that might signal an account take over if your system is analyzing behavior stuff like that. Could be wrong on my gut feeling here.
Or just talk to them regarding how you feel. I concur with one of the commenters below regarding FAANG - you rarely get good feedback if your manager is not supportive of you.
Bitcoin is useful as a trust-less medium of exchange but in the real world, legitimate trade involves some level of trust and enforceability of implicit or explicit contracts. Nobody needs a blockchain for legitimate transactions because there is the accounting ledger which is transparent to the law and whose falsification constitutes an illegal act. For example your bank can not deduct money from your account without cause. You do not need a blockchain for the value stored in your account to be secure because falsification of ledger balances is a crime. You don't need to encrypt the account (equivalent to hiding money in an obscure place) because stealing is a crime and if bank robbery or failure happens you have the FDIC to ensure your balance to a certain degree (ask users of Bitfinex circa 2015 or 2016 about this...) Thus Bitcoin is largely a solution in search of a problem unless you are dealing in a black market or trying to hide money from legitimate authorities for some other reason.

The dollar is a highly decentralised currency in actual practice. Yes, the federal reserve or treasury can increase or decrease supply of dollars but in practice in recent years the value of a dollar is set by its usability in the real world not the actions of a central authority at the margins. In fact I would venture to say that if the central authorities started to undermine the value of the dollar for global commerce the central authorities would lose their power over the dollar before the dollar lost its value. Many more countries than the USA use dollars. In fact the vast majority of physical dollars, if not dollar balances exist outside of US jurisdiction.

The only way that the dollar can and will be dethroned is if some other currency becomes widely used in commerce. That certainly wont be Bitcoin but it could be another digital currency like maybe Ripple. Bitcoin is not very useable in actual commerce. The processing time of transactions is tremendous, and the deflationary and volatile nature of the currency makes it an unsuitable store of value or unit of account. There is no reason to expect in the future bitcoin will stabilise. Its price is set by exchange speculation and a decreasing rate of new coin supply. Unless commerce overtakes exchange speculation as the price setting mechanism for bitcoin it wont be very useable for legitmate commerce.
>Why does “Black culture” in the US differ from “White culture”?

One factor - white Americans have historically identified not as "white" primarily, but by country of origin - Italian, German, British, etc. "White" as a culture tends to be used as a reference in contrast with and in comparison to "black" culture or people.

Whereas African slaves and their descendants were deprived of the opportunity to identify with their culture and countries of origin, so they had to build a cultural identity around the only common attribute and heritage they were afforded - their race.
- Narrator: ...it's basically untreated spring water, and some doctors
warn it could be a serious health risk, but Evans loves it.

- Evans: On my first Burning Man, I'm looking for an RV to share. And Vatra
had room in his bus. So Vatra was a perfect synchronicity. I was, like,
wondering what kind of water I was going to drink at Burning Man,
and Vatra was, like, "I've got 50 gallons of Mt Shasta spring water"
so it was, like, just epic!

- Caption: [Vatra Amidzich, Fire Dancer]

I wonder how many emails Mike Judge has in his inbox of people sending him this clip.
$13 ZeroPi is a tiny headless computer with Gigabit Ethernet (2019)
I don't buy that they're simply ignorant. Yes, perhaps they are but tied into that ignorance for many, many people (that I've met anecdotally and, i'm sure in statistical terms) is a strong willfulness about their postures.

In other words, despite being shown any evidence you'd like, no matter how concrete about the incorrectness of their beliefs, they'll simply disregard said information, because to accept or even consider it would imply the possible disruption of specific political/religious beliefs that a great deal of emotional identification is invested in.

And lack of access to information isn't even an excuse for this in most cases: It applies frequently to people who live otherwise technologically connected lives, with easy access to a vast wealth of extraordinarily detailed knowledge about anything they don't understand in terms of evidence, theories and facts. Despite this, they just.... disregard it, and will even give MORE weight to the most absurdly unsubstantiated "alternative" ideas so long as they don't poke at that emotional investment I mentioned above.

Again, this is not simple ignorance, it's something much more deliberate and to call it anti-science is not at all unfair.
Your comment will be used in the future to explain what comment gaslighting looks like.
Glad you enjoyed it! The Winamp player ("Webamp") is open source: https://github.com/captbaritone/webamp
>You can't have an honest discussion when not everybody can speak their mind.

Yes, you certainly can.

Looking through the thread I see a lot of what appears to me to be honest discussion, and I would also consider it of reasonable intellectual level. Those common "unspeakable" opinions you allude to tend to drag the quality of discussions down, rather than lift them up.

But if it helps, everyone is aware of those opinions, it's just that most people just don't find them interesting or worth discussing.
Snap-Ons business model isn’t the high quality of their tools, it’s their financing. I have a mechanic friend who is over $7,000 in debt to Snap On. They’ll finance just about anyone who has a job.
They're talking about the variety of "left" endorsed by tech companies; of course that doesn't include organizing unions.
for the encryption itself, you can use e.g. LibSodium or AES (in a sensible mode!!!). of course, you'll need a key too, which is where you can use a KDF. but without knowing more about your threat model, it is hard to tell you how to do the key derivation.
There has been a lot of selection going on until an article makes it into a newspaper though. The individual writer needs to want to write it, their editor needs to think it's a good idea, and there are plenty of chances for it to get pulled or rewritten in a major way. "It's just this person's opinion and by chance it landed in The Atlantic" does rarely happen.

It doesn't require a conspiracy, of course. I find it much easier to believe that it's essentially pre-chewed stuff a large audience can nod along to. No need for any agenda other than "I want eye balls on my article, and I want lots of them and I want the brains that are attached to share the article because that will get me more eye balls".
And yet, all the studies of people with children show that they make you less happy, while they are around, although more happy later in later, presumably once they have moved out. Years of relief built up I guess (just kidding, more likely the benefits of having an extended close family when you are older).

Speaking for myself, I know that I would hate to have my freedom taken away by having children. I also know that my sister, who has a four year old and a one year old, has been miserable and exhausted for much of the last four years.
https://covidreference.com/
>having been "perceived" in a way by some (possibly) [redacted]

Perhaps you're a young man.

Warranted or not, 90s Gates was the prototype for the asshole tech CEO. Only Larry Ellison came close, and that's saying something ...
Really cool!

He also made a video about it: https://www.youtube.com/watch?v=ExwqNreocpg
DOE and NRC have requested something approaching $200 million over the last two years for Yucca Mountain even though it has been killed and revived and killed again. It's been dead for years, but it never really dies. They continue to pour money into it. But, as previously stated, they aren't allowed to use it.

Nevada has fought hard against it. But people outside Nevada (and some inside Nevada) keep trying to jam it down Nevada's throat. The illegal midnight run was just one example.

There had been some $10 billion sunk into the project 10 years ago. You can guess who has the incentive to keep pouring 100s of millions more into a supposedly cancelled project. If the whole point is to funnel giant money into somebodies' pockets, the legal status of the facility has nothing to do with the money allocated for it.
Thanks for mentioning it. I'll followup.
Yep. Last four jobs. In 3 of them, we were friends beforehand. Almost got hired by a fifth.

Huh I just noticed I have a tendency to work for friends.

It is much like a marriage. There’s stuff that has to get done, and you have to work together to get it done. And like marriage, moving on can be tricky.

Trickier is befriending higher-ups. Keeping confidences is important when you know before your boss does.

I’m still friends with 2 of the 3 former bosses, so it is possible to maintain a relationship.
Hardly, piracy exists because people can't resist getting something for free when the consequences are non-existent. It's fundamentally a moral issue, but practitioners are dexterous at avoiding that line of thinking.
You read the absolute wrong conclusion from that statement. Hint: Django and Rails are not front end frameworks and you can definitely use them to serve 20mb front ends too.
> Stop your manager in their tracks next 1:1

BAD idea with most managers. Your manager is likely to be vindictive and insecure if confronted like that. Even with peer reviews in place managers have disproportionate influence on your reviews, and promo/comp decisions (something you readily acknowledge). If the manager treats you with disdain, it's almost impossible to fully reverse that - it's just human nature, let alone do so through confrontation.

The best thing is to move on to greener pastures, of which there's vast abundance at any FANG. People can move around easily there by design: that way shitty managers get naturally de-staffed. Anything else is a sunk cost fallacy. Do yourself a favor, and go to a team where you're appreciated, respected, and can work alongside decent people. Do not tolerate this abuse. Otherwise your career will stall, you won't be able to do anything about it, and you'll feel miserable throughout.

Source: been there, done that.
> there's a lot of overhead with running and securing the site

Not really. Especially not if you have Google at your disposal.
Frankly, why not just use a different social network?
Like google+ or myspace. (I kid, I kid)

On a serious note, I see an opening for a new social network.
I've done a lot of thinking about this, and I think much of the nostalgia for that era is actually rooted in limitations and the way that they made certain things exciting.

Owning a new album was exciting, because previously you couldn't listen to that album.

Getting a new mp3 player whose storage was suddenly measured in gigabytes was exciting, because previously you couldn't carry around that much music.

Getting a new phone was exciting, because it probably had a camera, or internet access, or the ability to edit files, or some other fundamentally new feature that your previous device couldn't do.

Spending a Saturday curating your music collection and updating metadata was exciting, because that couldn't be done for you automatically.

Each stage where some barrier was overcome - be it a small, personal barrier or a large, technological barrier - came with this intoxicating sense of progress and improvement and possibility. If you assembled the solution yourself from existing products - software or hardware - it was all the more potent of a feeling.

These days everything just works, amazingly well. That's a testament to progress, but it's also incredibly boring. There's little left in consumer tech to solve, by consumers or by companies. You have one miraculous device that does everything you could possibly want in your digital life, and does it really well, out of the box. It has as much bandwidth as you're likely to use, you can stream enough media to fill a thousand lifetimes for less than twenty dollars a month, it can shoot photographer-quality photos and orchestrate your smart home and play console-quality video games and run a fully-features office suite.

Progress is what gadget-lovers like us miss. Tragically, the the very act of indulging it erases opportunities for it.
Yeah, losing a few billion dollars (not sure how many they did lose) is not that bad if you still have several billion dollars to manipulate things with...
Neither scrypt nor lzma are encryption.

If you use scrypt, you won't be able to get the file back out ever again.

If you use lzma, it's compressed, not encrypted, and anyone who gets the compressed data can trivially decompress it.

Consider using an nacl secretbox if you need to encrypt it.

Consider very carefully where you'll store the password.

Does the user input it each time they access the file (in which case use a key-derivation-function on their password)? Do you encrypt it with an application key? Per-user key stored in vault? Do you have a hardware encryption tool available (an HSM) or something like aws KMS?

Your encryption is only as secure as you keep the encryption keys.

See also [0] for some suggestions.

[0]: https://latacora.micro.blog/2018/04/03/cryptographic-right-a...