skysight-inc/HackerNews huggingface dataset:
Oregon only has a little over 4 million people; half a million evacuated means 10% of the state is out of their homes. Even if only a small proportion of them actually burn we're looking at a serious housing crisis.
I've always wondered why do companies call it "opt" in if it's not optional?
> "I’m writing this as an interviewee, having never been on the other side of the interview table ..."

> ...

> "Most candidates will have side-projects or work they’ve done for previous employers."

As someone who has actually done a lot of interviewing, I can say with great confidence that this is simply wrong. At my current employer, we have a "homework assignment" as part of the interview process. We tell candidates that they can point us at an existing project of theirs instead of doing the homework. Few people take us up on this because few applicants have any substantial public side projects or FOSS work they can share.

And sharing "work they've done for previous employers" is a great way to court legal trouble. They shouldn't share it and as an interviewer I don't want to see it!
The kernel devs have said that that is not a blocker. (This is because what's being discussed are drivers, not the kernel itself, though they would be in the kernel tree.)

And, there's been some interest towards getting gcc to be able to compile Rust too, so that may happen regardless of its need or not.
Jim Cramer: “one of the greatest wealth transfers in history.”
The extrema of the function are the min/max values. If you think a bit about it, you’ll notice that what you write doesn’t make much sense.
Not sure if we're in agreement then. Calling out the analogy as Feuerbachian is essentially saying that the analogies between technology and the universe are anthropological framed around our own ideals and not some universal truths.
Yes, 1 or 2 years ago I saw a short piece about recycling plastics and what really is getting recycled in the end. Many products which would be easy to recycle didn't get recycled because they had fancy labels on them which made it hard or impossible for the machines which resulted in the plastics getting burned instead.
IMHO, simplicity simplicity simplicity, whatever that means to you : )
Anonymous VC partner reviews by founders
From what I can tell, nothing here affects their legal dispute with Epic. They aren't opening up third party app stores which escape the 30% cut.
I have a mini too. I have a samsung ultra that's way too big to fix in the controller so I use a dummy pixel 2 as well. Like you said, works great and I can keep it in my carrying case.
Be different from other one else, stay calm forever.
Changing a port adds one bit of entropy. Not being forced to use "admin" as a username adds a whole bunch, but at least one bit. Not being forced to use https://url/admin also adds another bunch, but at least 1 bit.

Of course, if any of these things are known the entropy drops to zero... Just like a private ssh key that gets pwnd.

All too often I see tickets on open source projects asking for changes to allow better obfuscation, which are then denied using the mantra "obscurity is not security".

They all add bits of entropy to a security and/or threat model that maintainers ignore.
The same headline would be equally true from the moment we left Africa and entered other continents, to today.
They exist outside of FAANG.

I personally haven't seem them outside of the bay area.

As mentioned elsewhere I'm a new grad with ballpark 200k usd total compensation. My base salary is ~2/3rds of my compensation.
SR is faster than 99% of the population can type. You can type for far longer than you can talk though.
I would argue there are many well-qualified frontend engineers who won't correctly solve the two sum problem on their first time encountering it.
On Android, you can deny permissions to preinstalled apps (I just verified this myself) or even disable the apps entirely, which unlinks all entry points into the app. On iOS, they just sit there sucking up your data like iMessage keeping track of everybody you message.
More like it's an attempt to answer nonsensical questions like: "why are apples... apples?"

And anthropic arguments are like: "if they weren't apples, then they wouldn't be apples..."
Yeah. Been years since I even played with it, but even in 2016 I remember Ripper being completely unusable, failing to parse plenty of normal Ruby syntax. The Parser gem also maintains a separate parser for every Ruby version, so you can a program using Ruby 2.5 but tell it to parse code according to Ruby 2.2 syntax. It's also just way better built, tested, and has other nice features like tools for rewriting ASTs.
Why would you think it's in milliseconds? Are you generalising on port scanning?
You could say that uuid as urls are obscurity, but it's not that fast to break through (and then hopefully you get some kind of protection layer)

There's also an additional monetary cost for the attacker, it adds up
> ..a type of delusion in which the person believes that their lives are staged reality shows, or that they are being watched on cameras.

> ..sociopolitical changes and scientific and technical developments have a marked influence on the delusional content in schizophrenia.

We live in a historical era that provides fertile ground for paranoia. Surveillance technology is global and pervasive, with government agencies and corporations engaged in wholesale privacy invasion and colonization of physical and mental space.

Mass media, including the web, is also colonized and politicized, where ideological manipulation is the norm and authentic voices are becoming rare.

The "fakeness" of modernity that the Truman Show points out has old roots. Religion, society, culture, and politics are all staged reality shows in a sense. The concept of Maya, this illusory world, in Indian philosophy; Plato's cave; the realm of Malkuth in Jewish mysticism, where divine light is buried in dense matter; how the Gnostics considered the material universe to be a creation of a lesser, malevolent god; the "hyperreality" of Baudrillard:

> a condition in which what is real and what is fiction are seamlessly blended together so that there is no clear distinction between where one ends and the other begins

The eternal quest of the "true man" (true person) is to break free of our inherited worldviews (assumptions, interpretations, representations, value systems) - and to seek real and authentic experience.

This has been relevant in every historical context, and those who attempt it will see that there is a kind of silent, unconscious "conspiracy" to prevent one from doing so - as if society has an immune system that eliminates those who question its authenticity, who disturbs its model of reality.
Interesting but not sure how legit it is.
Recruiting is mostly about finding reasons to say no.

And nothing gives more open ended reasons than the coding test.
No, a VPN isn't magic in and of itself. And yes, I would suggest wireguard for the simplicity and performance these days.

I do agree with the author of the original article that security should come in layers

Once something is secured with SSH and a VPN, you've got that many more actual layers - you now need a CVE that allows access or credential leak for both the VPN and SSH. (And many of those CVEs don't necessarily allow a random attacker to arbitrarily gain access)

https://news.ycombinator.com/item?id=24446919 has my list of what the bare minimum SSH protections should be for anything where you are storing customer/user data in my opinion, as well as additional best practices that I have employed.
The article is more or less already the TL;DR. My perception is that there isn't a strong aversion to adding namespaces, it's just that

1. the crates.io team is understaffed (unlike NPM it's not a VC funded entity), and it has not been a priority for them (or for anyone deeply involved in Rust/Cargo/crates.io development, AFAIK)

2. there are some core design decisions around the feature for which no consensus has been reached yet
I agree with the sentiment. Honestly we don't check for syntax or even require the code to compile. We let the candidate write puesdo code which usally isn't super far python and javascript implementations of our challenge. We try to pay attention to the types of questions the candidates asks about context of the code and choices they make in designing a solution.

That being said i'd be curious how you evaluate general software engineering ability (e.g. writing clean abstractions, decomposing monolithic methods, and general design). I feel most system design evaluations are a bit too high level or overly broad (e.g. design a library application or make a social network) and coding challenge are too low level.
To me, Dreamhost stands out as the sole player that has (mostly) avoided becoming scummy when it comes to shared, managed hosting services. Probably because they're independent and employee-owned.

I was a happy customer for ~2 decades. Only recently left because I simply have no need for their services anymore (and frankly, haven't for years) due to having an assortment of VPS and dedicated server instances running around the globe at any given point in time nowadays.
I think the best hiring process would give the candidate options. Choose among pair-programming a live coding challenge or a new feature creation, whiteboard, take-home coding challenges, or going through some open-source project from the candidate.

I happen to prefer take-home challenges more than any of the alternatives. It’s much less stressful than any live assessment. And I have the time.

But I understand people that hate it. You evaluate the candidate how they think they are best evaluated. And I don’t think it is that much more trouble or time investment by the company.
Author here. I'm no expert on the problems ACA was intended to solve, but if I understand it correctly, I could see some remaining applications for it.

Suppose I schedule 10 commands all at once, with the Ordered task attribute. If the third command fails, do I necessarily want the remaining commands to be executed? Possibly these are a logical sequence (e.g. for a tape drive, rewind, write, etc.)

I have no idea if anything actually exists which can make constructive use of ACA in this way, but it occurs to me that there is still potentially some use there even when autosense is enabled.

That is, if I'm understanding ACA correctly.
Indeed, from collages of college students.

Sorry, but I had to make that joke.
I know someone who would rather store passwords/api keys in the database encoded in a way that is not clear text but is not encrypted or hashed arguing that its overkill to encrypt.

Obscurity instead of Security is bad too.
There is another aspect of it: when you want to change from management to "lower" status jobs, the person hiring you will have a hard time understanding your decision. "You understand you're overqualified for this post, right"? They get suspicious even if you're a perfect candidate.
I'm currently in the interview process with few companies, here's my experience with them:

Company 1:

1 hour HR interview

Coding task spend about 4 hours on it, at first i implemented basic but correct implementation, no OOD & design patters or anything fancy. They said i should redo it but with SOLID OOD and design patterns + unit tests, so i threw in the most convoluted code i could think of for a console app. That did the job and got to the next part.

3 hour technical interview, ~2 hours of HR talk & getting to know me, then a set of 5 algorithms tasks. I failed at some point, as i'm not fan of algorithms tasks and i don't have CS education, so my algorithms knowledge isn't strong.

Result : Not qualified enough no offer

Company 2:

1 hour HR interview

After which they sent me a task that would have taken me about 8-10 hours to do.
I politely Declined.

Company 3:
1 HR interview
2 x 1hr technical interviews,

First technical interview : extend a very very simple code (2-3 classes) with couple of functionalities and write tests. All in all it took an hour and was pretty straightforward. With no hidden gotchas

Second technical interview : you are given task details, and have 20 minutes to come up with overall system design. after which we spend about 30 minutes going trough that and asking why i choose X or Y, or what if the requirements changed to X or Y.

then 1 hour final "culture fit" interview.
Result: waiting for offer.

Company 4:
2 x 1 hour interviews with the CTO & CEO. Tech talk mostly, but no deep algo questions. What challenges I've had and how I've solved them.
Result : waiting for offer.

Company 5:
one 1 hour HR interview, and i have to do a 5 hours long fixed time (i.e. they sent tasks at 12:00 i have to be done by 5 and send results).

And i'm debating if i should do it at all.

I've had the most pleasant experience with companies 3 & 4. From their HR staff to their Interviewers.

About about me for context: I'm a backend/full stack engineer with about 10 years of experience. I've coded professionally in PHP, C# and JavaScript. I've led few interviews, but never used spend-a-day-doing-it code challenges.
The concept of anonymous blocks of code in the middle of a flow annoys me. I fully appreciate that sometimes they're useful, but like everything else in C++ there is a way to misuse them horribly and you will run across code bases that do it eventually.
But we don't know either way... and importantly don't (yet) have a means to know.

Axioms aren't helpful in that regard.
Watching TV while eating prevents us from realizing when we’re full
That's orthogonal with the naming scheme. In fact the Go team eventually implemented a way to decouple the storage of a copy of the package from the name of the package, namely the goproxy. How they got there was admittedly a bit clumsy, but it proves that it's possible
There is an article on Phoenix, Oregon, in the left column below the fold on page A1 of today's Washington Post.

Today's New York Times has an article on page A1 at the top of the fifth column (of six) filed from Molalla, Oregon.

I don't think this is off the national radar.
This reads more like an attempt to extract “powers” that managers have and give them to staff / principal engineers, but I think this is a bad mistake.

The people in those roles should influence those things, sure, but not “own” them, under some faulty idea that management doesn’t lead or own strategic and technical roadmaps or execution.

An engineering manager is someone who takes inputs from their immediate team or staff, as well as cross-functional stakeholders like product managers, directors, staff/principal engineers, and more. Then you synthesize that into team or org investments: projects, roadmaps, staffing, resources, tools.

An engineering manager is not someone who “just executes 1-1s and fills out HR feedback cycles.”

They are more like a staff engineer or architect who takes an expanded point of view to include team dynamics, career growth, budgets, strategy and resources into the solution design process.

This often just is a promotion above staff or principal IC roles because it usurps and supersedes a lot of that work while also involving additional new work managing career growth, hiring, training, resource investment, etc.

I’d put product manager and engineering manager at the top of the promotion pyramid (excluding director / VP / executive roles). Staff and Principal ICs are next, then the rest of ICs.
I suspect most Public Defenders may disagree.
> you'll still see scans on a regular basis.

Not in my experience, I would even say that full range port scanning is extremely rare. Botnets (again, in my experience) seem to only be interested in vanilla installations and will test standard ports exclusively. But of course, if you are in charge of some very tempting target (eg a cryptocurrency exchange) your experience will be totally different than mine.
The crazy part is the people who fly into fits of rage when you suggest Apple could do something differently. Changing the web browser on iOS was one that would get tons of hate and responses like “you don’t need that! it would confuse people!”

Then Apple lets people do it and now they’re okay with it
Exactly. We've gotten rid of managers or created brand new roles in order to retain key engineers. Managers are often easier to replace than these engineers.

If you're an IC that is providing clear & visible value to upper-management you likely wield more power than you think.
I don’t know Rust but have learned enough about it to know that lack of namespaces in crates.io and anything at all Rust related Is inarguably a feature
There are plenty of jobs that I get given that I absolutely hate as a developer as they are too complicated for non devs, but frustrating for someone that does enjoy "proper" software development (typing code).

Salesforce and Marketing Cloud were projects that I was asked to integrate and I hated them, I just don't enjoy the dumbed down way that they work compared to being able to express things in Python or SQL. Maybe something like that would suit you. There will be plenty to learn but it won't require as much of the creative part of coming up with solutions that more normal programming requires.

In fact I bet a huge chunk of developers would be happy to have someone on the team that doesn't mind the grunt work style tasks that require some knowledge of programming but aren't actually very intellectually challenging.

You probably aren't as bad as you think. Most jobs are maintaining crappy old code rather than writing from scratch, where you spend most of the day reading through code, to change a line or two to fix a bug.
The confusion regarding checked exceptions (which are fine, if not misused, see aazaa's answer) was made much worse by IDE's such as Eclipse, which would generate:

catch (MyCheckedException e) {
e.printStackTrace();
}

This causes unreliable programs, since the programmer will initially only think about the successful path. Eventually, the exception will get thrown, and things will break in weird ways. They may not notice it quickly, because the stack trace will be buried in logs. Alternatively, if the IDE default has been

throw new RuntimeException(e)

or something similar, which would crash the program, the programmer would have noticed it more easily. Of course, the program would still be broken, but better crash hard and violently than subtly and confusingly.
(thinking emoji)

(thinking emoji)

(thinking emoji)

(mindblown emoji)
I would never work somewhere that didn't make me write code as part of the interview process.

I don't want to work with people who are good at bullshitting their way through interviews, but can't actually write code.
Will this functionality ever be a core part of the language?
Hayes command set, as expanded from land-line modems to GSM cell phones:

https://en.wikipedia.org/wiki/Hayes_command_set
Not really. Look at the protobuf 'renaming' and think about how silly that is.
Yes, making security breaches harder for attackers at zero cost is obviously good. But obscurity does not have zero cost if it makes the system less efficient to operate. Having multiple cars in a presidential convoy is inefficient; using non-standard ports adds complexity; obfuscating data makes debugging harder; etc.
>Why would you think it's in milliseconds? Are you generalising on port scanning?

I am, since that seems to be the primary example used in the original article and the main example being discussed in the comments.

I think that's fair, since obscurity does the most to help against non-persistent threats. Persistent threats have targeted you for some reason, and that targeting means they are willing to employ more resources to get through your security. In that situation you should be focusing on adding as many layers of security that you know have protections besides just 'not being known' as you can, especially when there are tools out there that are specific in helping make them known.
Sure, and that's why I said I was assuming, but my (poorly communicated) intent was to question how unique your first name is, and how someone is squatting on it if it's a real account and maybe they have that name too?

I mean, it's probably not a big deal in this case. But if I had a github account that someone wanted and github just gave out my (personal?) info, I might feel a bit betrayed by them. I know, I shouldn't give them any info I really want private, but that doesn't mean I can't expect them to act responsibly with what I have given them. I just didn't want to state all that up front, because it assumes a lot about what happened when there wasn't a lot of detail provided.

It is nice when people can just make simple stuff happen though, I agree. It's just a hard line to walk, because you allow that and then you get stuff like the recent Twitter hack. It's hard for us to all have nice things and nice people that can help us because there really are a bunch of people out there to get you (or someone in a similar situation, at least). :/
Correction: iOS has had permissions at least for as long as apps were allowed and more permissions were added over time.

Screenshot in the Camera section of this iPhoneOS 2 review: https://www.imore.com/iphone-os-2-review
While I certainly don't have all the answers, I have met with the founder, and am happy to connect anyone to someone who does. I will answer any questions that I personally can, however.
Sort of; you can still delete github repos and the proxy doesn't keep a copy forever, right?
Completely disagree. Tje richest 10% of the world is responsible for 50% of CO2 output. I don't know about other metrics, but that I'm sure that pattern isn't just limiter to carbon footprint. We don't have a population problem. We have a problem with Greer and resource use that slashing ourr population - even drastically - will not in any way solve.
You're probably gonna want something more complicated than that. Glancing at the github page it looks like at least the following need to be dealt with:

(april "apl code") ; and april-f
(april (with (stuff)) "apl code") ; and april-f
(april-c "apl code" (input))
(april-c (with (stuff)) "apl code" (input))
I've heard anecdotally that Steve Jobs helped write those guidelines, and the "amateur hour" line in particular sure sounds like him. I don't mean that in a disparaging way; Jobs could certainly be a jerk, but there are times I wish more CEOs were willing to be that blunt in official communication.
It's actually terrible, justs look at NPM and RubyGems.

Instead of just coming up with a good name for your project, you have to come up with a unique one even though the project with that name isn't even active. And since most names are taken, you have to come up with a clever one for no real reason. Or go down the route of naming strats you see on npm/gems: better-lib, lib2, lib2-better, lib3, better-lib3, etc.

It really does nobody good except for the person who was able to clutch the original name, and that's a weird incentive structure. Subreddits have this same problem where you're instantly gimped when named anything other than r/bitcoin, r/politics, r/news, r/atlanta, etc.

Instead, there should be no preciousness to names nor dictionary words. That's the correct incentive structure: none.

People keep linking https://crates.io/users/swmon and it probably seems like an easy fix to just revoke those names. But swmon isn't the problem, the system is. It's no bigger problem when swmon does it overtly vs thousands of people doing it incidentally when they register a package they don't do anything with.

The problem isn't to calibrate a system that can detect swmon but build a system where you don't care what swmon does.

What you want is something like this: https://package.elm-lang.org/

Watching Crates get this wrong was like watching Swift not implement qualified imports.