skysight-inc/HackerNews huggingface dataset:
Especially if you have chickens. Raccoons seem to have figured out how to hypnotize them, and will just walk up and eat them one by one buffet style.
Life, part 34
There are tradeoffs and "objectivity" may be overvalued.
I'd say there is a shortage of software engineers as long as most stem grads can easily raise their salary significantly by doing a few months at a coding bootcamp. That is still true, so there is a shortage of software engineers. I multiplied my salary that way, although I learned it on my own instead of a bootcamp but it is the same idea.
Yeah, I'm seeing a lot of nonsense in here. Why is SSH publicly accessible in the first place???

Security through obscurity is just some feel good bullshit.
I stopped trying to fix the climate disaster on my own a long time ago. There is nothing you can do to save us from the climate disaster. The illusion of green lifestyle only serves to push the responsibility from the actual polluters over to the consumer.

While polluters (including those that marked high polluting consumer products on mass scale) are not made to pay for their pollution (e.g. by carbon tax) they will keep polluting.

I’ve shifted towards trying to push politicians into enforcing stricter international agreements and building more green infrastructure. So far it has only made me feel even more powerless then before.
Sure, but the internet did not become a consumer phenomenon till 1993. There were very few rules on the internet of 1992, but one of those rules was that commerce was not allowed. So for example there was in 1992 a newsgroup named ba.jobs which functioned very much like HN's monthly 'who is hiring?' and 'who wants to be hired?' comment sections, but there was no analog to HN's monthly 'Freelancer? Seeking freelancer?' because although it was considered OK to seek W-2 work (i.e., seek to become a proper employee), seeking 1099 work (i.e., seeking a contract to do some programming work) was considered too much like commerce and consequently not allowed on the internet (or more precisely not allowed on the US internet backbone -- and it would've been impractical to run a newsgroup while avoiding the US backbone).

In 1992 visiting a friend's apartment in San Francisco, I had to explain to someone what the Internet was, whereas my friend who was on Compuserv didn't have to explain what Compuserv was.

Note that this thread has evolved / mutated so much that it no longer has any bearing on the question of whether "The French insisted on doing it all in French while the language of the Internet is English. They isolated themselves and could never have been the center of the web" (a question I have no interest in).

The point is that France was ahead of the US in conferring the benefits of computer-mediated communication and computer-mediated commerce to the average consumer.
i.e. Go. Go can make sure you are aware that an error exists (often. linters do pretty good here too), but it does next to nothing to help you handle it correctly.

From personal experience: yes, little to no compiler help on errors takes an enormous amount of effort by both authors and reviewers (and future readers) to ensure correct handling. The vast majority of the time it's just `if err != nil { return err }`, which is very frequently sub-optimal. But without knowing the call in complete detail, you can't judge if that's true or not... and it may have changed since you last saw it.

IDEs help that kind of "is this optimal/correct" question quite a lot, but they can't verify it either. It's question-marks all the way down, unless you fully know all the code you call, which is often infeasible.
Why not simply augment LaTex with PDF tags which would be inserted manually, in the process of typesetting?

Something like:

\pdftag{blah}

Common packages could then generate these tags, and very few modifications of TeX source would be needed.
IMO, this only makes DNS work the way you'd actually expect, rather than leaking even more information. If you're not trusting a third party recursive resolver (to act as a non-logging mix node), then you're still leaking your IP address to every zone you query. The longer term solution is signing the data, such that dns records can be distributed in more of a noninteractive p2p fashion.
> If you lose your domain, spreading bad software is the least of your concerns.

But if you lose your domain spreading bad software is the top of my concerns.
The newsletters are forgettable because the content is forgettable, not because of the medium in my opinion. If the content is forgettable, and the medium is paper, it would be left unread in the physical trash bin instead of the virtual trash bin.

>If it was physically mailed, it would be something a bit more special.

A counter-example to this is: physically mailed junk is no more special than emailed junk. It's even more irritating.

I think the goal is to write content that would at least survive the bin, at most entice people to have it in physical form.

One way to test your hypothesis is to do make digital content, with an option to print it beautifully, not just the browser/HTML print, but a button to download the nice printable PDF. Tracking the percentage of people who find the content interesting enough to want it as a PDF tells you something. The percentage of people clicking to print the content tells you something.

I think this could be a first step to answer your question.

Maybe having a field for an address and asking people if they want to receive the content in physical form can shed some light on your answer. Maybe you could also send a binder with a distinctive color/logo so people know where to put your newsletter, and it creates a "thing" where people share photos of their binder.

It could be a part of a ritual where recipients wait for your newsletter, it arrives, they read it, and they carefully put it with the previous numbered issues.

Maybe you can send colored paper according to the season (spring, summer, autumn, winter). People could build collections.

Maybe you could do themed according to geographic locations, and maybe you could be inspired by philately and numismatics. People could share issues, or borrow issues unavailable.
This article makes it sound like the main bottleneck in the first-run recycling process is sorting.

Could anyone with knowledge around ML, robotics and the like chime in on napkin math around novel labor-reducing approaches to improving the operating economics here? From the sound of it, this is not really a solvable problem short of some leapfrog technological advance.

Even then, you don’t want to spend more energy on sorting automation than you get back from the recycling. And this would only make sense if the diminishing returns after the first or second recycle made it reasonable to be issuing so many consumer plastics in the first place.
I learned basic first, then microcontroller ASM, which made C just kinda make sense when I went to it.
Why is it pointless? Corporations are simply a collective of people, working together.

There was a story on here today about the dilemma a roman consul faced because the laws were contradictory. It was fine to murder for revenge, in fact Roman law didn't get involved in revenge or murders really, but patricide was viewed as an absolute wrong, a no-no. The woman had murder her Mum in revenge as the Mum had killed her grand-children to spite her Daughter. It was a real dilemma, revenge is fine, and it was a good reason for revenge, but parricide is an absolute wrong.

Does that sound normal?

Of course not TO US.

I think that in the future, today's corporate law will be viewed just as asinine and bizarre. Corporations poisoning people by flooding chemicals into rivers or releasing gasses or toxins, murdering people with product defects they decided not recall or destroying society's common goods, but all the people involved were let free rather than incarcerated for 20 years as accessories to murder? Thousands of people colluding to murder people with cigarettes when they knew how lethal they were? Fine. Because they were "employees" and the "person" doing it was a legal figment called a corporation?

A bunch of black people in America get incarcerated for simply being friends/near the murderer, but a bunch of white people who all spent years or even decades covering up systematic mass-murder get to walk away? Man, when you actually think about it it's mind-blowing. White collar crime is so easy to get away with.

It's a convenient fabrication that makes sense only when you're inside the system.

I'm a pragmatist, it's not going to change, it's the way it is, but otoh you simply can't see the wood for the trees. You think, somehow, it's right.
Do we really need to further an already tired meme that only serves purpose to dismiss?
Yes, it’s a scam. Only aluminum actually gets recycled. It’s time to tax plastic so companies start using paper products (even if they go to landfill, they will at least sequester carbon there) or aluminum.
Can you share a link with more information on this forked DJI OS?
Yeah, not quite related to the linked slides, which are about scaling in terms of productivity, but still a great talk.

I really found that "isolation" is just a key optimization and one of the most useful properties of a system, which they call out in that talk. I wrote about it a bit more in depth here: https://www.graplsecurity.com/post/architecting-for-performa...

I've written our data processing layer and our event orchestration layer as basically an actor oriented system, with push/pull systems in a couple of key places where it makes sense. It's incredible what you can do with strong isolated infrastructure in terms of performance, security, reliability, and quality.
I have my own misgivings about asking interviewees to write code for interviews. But some of what the author considers weaknesses of this are actually strengths:

> A disproportionate amount of time is often spent trying to deduce the requirements of the challenge.

Deducing requirements is a job skill at least as valuable as the actual coding! There's nothing worse than perfectly polished code that solves entirely the wrong problem.

And the author's proposed alternatives seem even worse:

> Ask pertinent questions.

OK, but that selects for people who can build a compelling narrative around their work. This is not the worst skill to have, but it's not entirely aligned with the actual work requirements, and subject to cultural and sometimes gender biases.

> Have a probationary period

I strongly dislike that. At-will employment is a reality in many places, and probationary periods are a reality in even more places, but they should be seen as a last resort, rather than a routine filter. I don't want co-workers to show up and be kicked out within a few weeks. I don't want to move 8 time zones, enroll my kids in new schools, sell my house, to be told after two weeks "Hmm, this does not seem to be working out".

> Walk through their existing projects

As has been mentioned numerous times on HN, that's at least as discriminatory as take-home exams, if not more so. You may spend your free time with your kids, or welding kinetic sculptures instead of programming. That's a perfectly valid choice. People who interview forensic pathologists don't expect them to cut up bodies at home in their spare time.

And generally, showing existing projects from previous employment should be, and is, grounds for immediate disqualification.

> Ask them to build something – anything!

That strikes me as considerably harder and considerably more subjective to evaluate than a standard take home exam.

> Pair program / Focus on their ability to learn

That's reminiscent of one technique I used to like: Show the candidate a piece of product-like code, and ask them questions about various pieces in it (programming language constructs, algorithms used).
Judge in Theranos fraud case orders 14-hour psychological test for Holmes
> But I think this is something which needs to be handled by governments (laws/regulations) not by apple forcing their opinion about what is right onto everyone else by abusing their marked positions.

Why should governments force their opinion about what is right onto everyone else? Why not allow freedom in the market so that users can choose what matters most to them? Right now, Apple is serving the market of those opposed to tracking and in favor of greater privacy. If it turns out this is what consumers want and are willing to pay for, competitors will feel pressure to follow suit. No heavy handed government regulation needed.
Every time I took a German course, my textbook had a section something like "was machen Sie für die Umwelt?" ('what do you do for the environment?'), and the first example answer in dialogues was always "Müll trennen" (sorting kinds of trash for recycling). It was amazing what a cultural force this habit seems to have for many Germans.

I still remember that one of the textbooks even started an answer with "natürlich trenne ich Müll" ('well, of course I sort my trash...').

(Of course, there were other things in the dialogues such as cycling and taking the train, so it's not like recycling is the only ecological measure in German society.)
> developer relations are significantly repaired, and Apple can go back to spending its time, resources, PR, and political capital on making their products better and customers happier.

Your first mistake was assuming that they care about those more than maximizing shareholder value
I’m not trying to shame you for your efforts—plastic trash is indeed ugly and annoying; thank you for picking it up—but plastic straws are not the reason the west coast is on fire.
>Curious, how does this work?

It depends on the implementation. For a client <-> server VPN, it creates an interface on your local machine that corresponds to the network address range for the VPN, and tunnels traffic to the remote end.

For a site to site VPN, two appliances create a tunnel between them, and traffic is routed over that tunnel via the same sort of routing rules you normally use.

> Is the VPN connection setup for the SSH session only?

It can be. It can also be configured for all traffic, or some other combination.

> What if someone needs to have multiple SSH session, going to different networks altogether?

You can have multiple VPN connections to multiple networks. It can get complicated if the VPNs are using overlapping IP space.

> Im thinking it could be pretty impractical to go onto a whole other network to open an SSH session.

I'm not entirely sure why. Millions of people use VPNs every day for a variety of reasons, including SSH. I currently have 8 saved VPN configurations in my wireguard client, and connecting to one is as simple clicking on the client and picking the one I need in the dropdown. Then I SSH as normal, except its to the server's private IP and not public.
The Titanic Was on Fire for Days Before the Iceberg
A Black Venture Capitalist Sees Challenges as an Investing Edge
Surprise, surprise. What did we think would happen with increasing quality of life (increased consumption) and increasing population (further increase in consumption).
Planet Money goes into this in a 2-parts series:

https://www.npr.org/2019/07/09/739893511/episode-925-a-mob-b...
Facebook's action wouldn't effect Epic and vice-versa. The two are unconnected outside the fact that they relate to the App Store.
There is supposed to be a response when a port is closed telling you the machine is online but not listening to that port. https://en.wikipedia.org/wiki/Port_scanner
This is a very good point. There is absolutely the potential for the video feed or screenshots of the video feed to get onto their servers.
Work sample tests have been proven repeatedly to be the best predictor of future job success.[1] The next best predictor is general mental ability.

It's not unreasonable to ask someone to demonstrate their capabilities. Just make it interesting, relevant to the job and most importantly: short. Whatever time work sample testing requires should replace interview time, not add on to it. 2 hours is a reasonable ask. Oh, and you can't ask people to invest time in a work sample test unless you've already invested a significant amount of YOUR time on in-person interviews. [2]

screening interview -> coding assignment -> maybe more interviews? = not cool

screening interview -> first round with hiring manager -> coding assignment -> review assignment with candidate -> maybe more interviews? = cool

Sources:

[1] https://www.researchgate.net/publication/232564809_The_Valid...

[2] Me. I'm a ex-Netflix software engineer, now run a tech recruiting company (www.facet.net). I've seen hundreds of technical interview processes across many industries.
Same, though I wish I could be better at avoiding these
> To make things worse: sub one-point-zero versions don't actually need to mean anything.

I think SemVer would be improved if 0.x versions were treated exactly like 1.0+ versions except that all minor versions had the semantic guarantees (none, that is) of major versions (but patches still had patch semantics.)

> Library authors often stay in 0.x ranges "just in case the API needs to change".

It's a problem that library authors don't want to commit to API stability and clearly differentiating breaking changes, but it's not a problem with SemVer that it makes it easy for them to notify of this intent in an unambiguous manner.
Do you have a source of this happening? This is from a report about Indonesia (http://www.fao.org/3/a-i7696e.pdf).

> Large plantations cultivate export crops on about
15 percent of the total agricultural area, but the majority
of farmers (68 percent) are smallholders operating on less
than one hectare.

Indonesia's population is still growing. If you're an uneducated farmer in a large family with a small farm, the only option you have to make a living may be to work in a palm oil plantation.
1955 letters of John Nash and the NSA on a cryptosystem
I'm doing a lot of interview as an interviewer these days mostly with junior candidate.

The guy in charge of those before me was the kind that use aha question with no relevance whatsoever. Pure ego trip. If that guy had interviewe me I would have said "I don't know" a few times and eventually get up and leave.

For my candidates, I tried a few things. Now I've got it down to explain to me your last project. I ask questions until I've understood every little detail of the project. Then we code a few simple "exercises" with increasing "difficulty". The candidate is allowed google, documentation, questions, anything. Then we read code. A piece of code with a "bug" or a feature to add.

The key is to make them talk about concept from impérative, fonctionnal and object paradigm and interact like a junior and senior dev would in a dev team.

I found that junior candidates react pretty well to these. Some of them thank me for having had the opportunity to learn about new things like functionnal programming. It's pretty cool and I feel that make them want to join us most of the time.
I don't like coding challenges, but on the hiring side it turns out even really basic ones can filter out a huge chunk of people who can't code their way out of a paper bag. But for most jobs they don't really need to be anything crazy. It turns out that plenty of applicants have a hard time with things that are surprisingly simple and that's really all you need.
I think the fact that you had to list the 20-year-old SSH CRC compensator vulnerability to establish the untrustworthiness of SSH is telling; very few pieces of software have OpenSSH's current track record. I would cite the same 2 vulnerabilities to suggest that SSH is as trustworthy as almost any other piece of software you can run.

Having said that: I don't like exposing SSH services either! Which is why I try to keep them behind WireGuard, at least on prod networks that I care about.

In contrast to an actual VPN, port-knocking and (heh) nonstandard SSH ports shield you only from casual attackers; both give a middlebox attacker all the access they need to launch the attack.
I'm reminded of this classic bit:

https://youtu.be/i-oDOJlWBTw?t=1849

"That's castling sweetheart... It's an advanced level manoeuvre, they added it in the last patch."
Couldn't message you on linkedin for some reason (looks like they've locked the messaging feature to premium now??) - but just FYI, looks like the twitter account linked on your blog in the footer is owned by someone else.
Obligatory raccoon removal video (11 of them!) In a Toronto suburb.

https://youtu.be/6S27dgeGqfA
>Worth noting that the range of the remote is significantly less than claimed in the marketing materials, which is not really surprising because they claim 4km (!) and it dropped out on me at ~200 meters.

This isn't really true. While radio links can of course perform poorly or unexpectedly at times, DJI's actually does deliver on their promises. It's quite incredible what they're doing with range of the control & video systems on 2.4 & 5.8Ghz actually. Not sure which model you have but the 2.4Ghz one will perform far better, though 5.8 is plenty fine in decent operating conditions. As you saw though, just because it can go 4km in normal conditions doesn't mean it won't ever hiccup for a variety of reasons (noise floor, obstructions, orientation, etc).
I don't see how this addresses geebee's point -- what makes you so sure struggling on programming puzzles implies incompetence on the job?
If you want to test somebody's ability to think a problem and not just bullshit 100%, why not ask them questions like "Given two integer variables x and y, write a function to swap their values without using a third variable"?

It's a pretty small problem, but it's still one that needs some thought to get. Also doesn't weed out people who don't know technical details of a red-black binary tree (for example) without necessarily getting rid of people who could quickly pick up what a red-black binary tree is.
Exactly. Not to mention younger engineers will probably work 24/7 for 12 weeks while constantly worrying they could be fired tomorrow because they didn't fix some bug fast enough.
Doesn't matter what term you use. The rich and powerful will spin up the propaganda machine to shit on whatever term you pick.
$200M seed valuation for Roam shows investor frenzy for note-taking apps
You can, you know, pay for the service (be the customer and not the product) and not see any ads
That’s buzzfeeds bread and butter, hit pieces and blow everything outta proportion
the problem with that (and security through obscurity in general) is that if your opponent attacks at random, they still have a chance of getting you. having lived in a bad neighborhood I can tell you that you don't have to flash money, or even look like you have any money to get into trouble (someone chooses you at random for a gang imitation, crackhead wants your shoes, or someone is just straight up crazy). it's always better to have as much cover is reasonable, and beyond that concealment doesn't hurt.
Neither changing the SSH port nor using IP source address filters constitute serious countermeasures; they complicate systems and offer little return on the investment. Don't bother. If you're worried enough to change the SSH configuration, set up WireGuard.
> Just recognising and labelling the Ugh Field phenomenon can make it less bad, because it’s an accurate systemic explanation for what’s going on, rather than a misleading personal one like “I’m hopeless and never get things done”.

great this does seem helpful

> If Ugh Fields are a constant issue for you, it might be best to try tackling those underlying [mental] health and well-being issues first

It started out strong categorizing a sort of mental rut but then goes and blames it on underlying mental health issues? Not even anything specific just woolly depression/anxiety/etc. - not helpful in the least!