skysight-inc/HackerNews huggingface dataset:
Security by obscurity is dumb to count as part of your main toolbox of tactics. However it can be icing on the cake, like moving ports around and turning off ssh root login at all. Lowering your footprint never hurt. Sometimes you just have to run a little bit faster than the other guy if you're being chased by a bear.
Full text of the clause:

> 3.2.2 Unacceptable

> (vi) Apps should allow a user to get what they’ve paid for without performing additional tasks, such as posting on social media, uploading contacts, checking in to the app a certain number of times, etc. Apps should not require users to rate the app, review the app, watch videos, download other apps, tap on advertisements, enable tracking, or take other similar actions in order to access functionality, content, use the app, or receive monetary or other compensation, including but not limited to gift cards and codes.
> having to get a EV code signing certificate ($300+/yr) to bypass windows smartscreen warnings, which are enabled by default

Windows was a malware disaster before measures like this were added to the OS, so I would argue this (and other warnings preventing people from randomly clicking and installing things) are a net good for the consumer.

You also technically don't need an EV cert, you can get a regular code signing cert (it will just take longer to build your reputation).
The traditional thing to do is to make packaging smaller (while keeping price the same) - so you'd get to store your new cans in your old cans.
The US will push countries to love their Jews more, anti-Semitism monitor says
Warms my heart to hear that, I'm so happy it helped you!
The thing with the IT field is that it's more an ocean.. with different currents every 100miles and you can drown in every one of them.

Is there a single ladder ?
> Free games are a marketing practice, nothing more.

It's a marketing practice that would not happen without competing stores. The end result is user benefit.

> it's paid for by Epic's exploitative Fortnight lootboxes

Why does it matter to me how it's paid for? Does not allowing competing stores change where Epic or Amazon get their money? The end result is that I benefit from Epic and Amazon getting to compete.

> being marketed to by a company whose values are quite the opposite of my own.

I find Apple's values to be opposite to my own (selling low privacy devices and lying about it, preventing me from doing general computing on my devices, etc.). With competition, I would at least have a choice of finding an app distributer like F-Droid whose values are closer to mine were I to be stuck with an iOS device.

You still haven't answered the question about whether you would prefer if your Mac didn't allow you to install apps outside of it's app store.
Ok, that makes sense. Thanks for clarifying for my stupid self.
Just wait until you learn what % retail used to charge developers for promoting, distributing, and selling software.

People quickly forget what a tremendous liberation the App Store created for developers.

It's also not about the developers, the success of the App Store comes from Apple's users. They trust the App Store because they trust Apple's curation/privacy/security. That's what has caused this flood of software purchases from consumers. Trust doesn't come cheap.
No problem, you're asking to see photos of my baby, I can talk about my baby all day :-)
Very well design :)
Cool job !
Sounds very familiar...
Yes it's been incredibly quick for me to iterate and build my current project. You are still right about migrations though, I'm not sure how that would work in a bigger team with feature PRs etc.
Covid-19 Has Employers Asking Illegal Interview Questions. Here Is What to Say
It also reduces corruption. One of the things Singapore did was to pay top salaries to government employees.

Like others have pointed out, many times people see the government job as a stepping stone to a cushy private job where they will make the real money. Thus, government employees treat the big companies with kid gloves because they don’t want to jeopardize future employment. If instead, the government job actually paid a competitive salary, they would be more focused on their current position and not trying to make sure they kept their future private employers happy.
Is it a newsletter with funny gifs? If so then at least it's funny :)
I've been using a Vim clone of Magit for a while with good success: https://github.com/jreybert/vimagit

Not being an eMacs user, I'm not familiar with the feature differences, but the workflow of stage/commit is worth it alone.
For someone with the title CIO at a company with >15k employees?

They are probably getting a fair number of resume's from CIO's at smaller companies, or mid level people. And like all good HR departments rejecting everyone who isn't making a horizontal move.

OTOH, lets say your looking for a pay raise, would you go deal with the government or jump ship and take a title cut at a us based multinational?

https://seekingalpha.com/news/3502418-apple-hires-astrazenec...
The non-standard port is of trivial value, but it's practically zero cost- that's why it's used.
Port knocking doesn't have that benefit- you're establishing another secret that has to be maintained and accessed- but unlike key based auth or passwords- that secret is insecure in transit and unwieldy to use.

If you want to add another layer and manage another secret- why not just add another layer of the lower-friction and more secure methods we already use to establish secret-based auth?
In Europe it indeed wouldn't, however GDPR enforcement has been severely lacking despite the potential for significant fines, so Apple taking matters into its own hands (and using its influence and power over the App Store) is very good news.
I’m not sure why you’re being downvoted. I’ve seen this happen to several talented but overly trusting people. Sometimes it’s best to just keep your head down and admit that institutional dysfunction is beyond your capacity to change.
That isn't obscurity. And in your scenario, there was a security hole if the requirement was that you had to be on the intranet, but someone was able to gain access from the outside.
There are third-party tools that do all of this.

A LaTeX-generated PDF does not render correctly at all for a blind user.
Portfolio HTML for Free – Template&Plugin
And also less ambiguous.

Often in person communication can be rushed if it’s between meetings when someone has a few min to drop something on you. If you don’t have time to write it down or ask follow up questions, the ability to deliver the right thing is going to be limited.

When we’re remote, almost all delegation is either conducted or followed up in async text. This means you have something to refer back to as well as a thread to ask questions without having to find free time from the other party.
I tried googling, it definitely wasn't as easy as you made it seem.

The closest thing I could find for the registering without verification claim was a Verge article [1] about people's Fortnite account being taken over after clicking a link that was sent to them. If you have a better source please do share.

EDIT: Source has been found, apparently store didn't initially send a verification email so anyone could use any email[4], this has been fixed though. I could find no source for the claim that this affected millions or thousands of people.

As for the claim that they were "scanning your pc for everything", that is just completely wrong. According a few articles [2][3] they were reading your steam friends list after getting permission from the user.

[1]: https://www.theverge.com/2019/1/16/18185398/fortnite-player-...
[2]: https://www.slashgear.com/epic-games-store-isnt-spying-but-d...
[3]: https://www.pcgamer.com/epic-steam-data-reddit/
[4]: https://twinfinite.net/2020/09/crysis-remastered-ray-tracing...
Statistics was one of the first classes I really struggled with in school.

When something grabs your attention, you start to suffer from Frequency Bias (like 'all of a sudden' everyone has the same car you bought or are going to buy). But in this case, everyone really does suck at statistics. Which probably explains why when I learned what an actuary was and that they made about the same as an anesthesiologist, I wasn't that surprised.

The ironic part for me is that I kept thinking dependent variables were independent, whereas most of the people I observe think independent variables are dependent (gambler's fallacy, etc), and so vastly underestimate the potential for a 'bad run' of events.

When I still played WoW they posted an article about how they tweaked probabilities a bit to avoid frustrating people. Much of the questing in WoW is based on succeeding at an action a set number of times that has a probability of failure, which turns it into a normal distribution. Your buddy might have gotten lucky and finished a quest in two minutes. Meanwhile, there's a 1 in a million chance that you could still be working on that quest 5 hours later. And there are 10 million users...

So to prevent rage quitting, they made the success rate dependent. Which they can do because the scenario is fictitious. You can't do the same thing in the real world.

I'm not sure if there's a way through this or around it (except maybe "always hire a professional"). More likely in 10 years we will discuss how we should have just backed away slowly from these probabilistic situations and done something else.
The bigger story here is for game streaming apps (section 4.9). Previously Xbox game streaming and Stadia had been rejected as they were a single app that provided access to multiple apps.

tl;dr the new rules allow For games to be streamed, but each title must be a separate app and run all in-game purchases through in-app purchase. They’ve also explicitly allowed for game streaming services to have catalogue apps that link to the individual App Store listings.

This is massive and strikes me as a great compromise solution. It separates the technical implementation (streaming) from the actual value proposition to users (the game itself). Essentially, each individual game needs be a separate app in the store and be reviewed individually.

I think the xCloud team at Microsoft is about to pull a few late nights to get this launched on iOS in the next few weeks.
We have similar experiences. I might disagree with advice to college grads to not pursue a startup though. It can be more fun, and if you are going to be tempted by it it's good to take the hit in your 20's when (probably) it doesn't matter too much.
So I get 10s of attempts a day for my sshd on port 7xxx. If I had an account with say ubuntu:ubuntu, it'd totally have been found by now.
Well, it's a pretty nice salary in the US as well (if not so much at the highest levels of large private organizations or at large SV tech employers).
I think mixing in the human bit confuses the issue, you could have a goal oriented AGI that isn't human like that causes problems (paperclip maximizer).

Check out GPT-3’s performance on arithmetic tasks in the original paper (https://arxiv.org/abs/2005.14165)

Pages: 21-23, 63

Which shows some generality, the best way to accurately predict an arithmetic answer is to deduce how the mathematical rules work. That paper shows some evidence of that.

> evolution has had almost a billion years to arrive at complex brains

There are brains everywhere and evolution is extremely slow. Maybe the large computational cost of training models is similar to speeding that computation up?

> there is no obvious way to go from approximately human-level AGI to the kinds of sci-fi super-super-human AGIs that some AI catastrophists imagine.

It's worth reading more about the topic, it's less that we'll have some human comparable AI and then be stuck with it - more so that things will continue to scale. Stopping at human level might be a harder task (or even getting something that's human like at all).

> This is all not to mention that we have no way right now of tackling the problem of teaching the vast amounts of human common sense knowledge that is likely baked into our genes to an AI, and it's hard to tell how much that will impact true AGI.

This is a good point and basically the 'goal alignment problem' or 'friendly AI' problem. It's the main reason for the risk since you're more likely to get a powerful AGI without these 'common sense' human intuitions of things. I think your mistake is thinking the goal alignment is a prerequisite for AGI - the risk comes from the truth being that it's not. Also humans aren't entirely goal aligned either, but that's a different issue.

I understand the skepticism, I was skeptical too - but if you read more about it (not pop-sci, but the books from the people working on the stuff) it's more solid than you probably think and your positions on it won't hold up.
> That's the assumption that people need to let go of.

Its not an assumption, its a fact that managers everywhere on average get paid more than IC.

Unless you are working for a non profit or some cutting edge change the world stuff. Why would you work for less.
Computer Science Papers That Changed How I Code
At least in my country the law that is ruled unconstitional loses it's power immediately, unless the constitutonal court itself grants some grace period. The thing is: constitutional court can't by itself decide which laws to start analysing next, there must be some formal complaint by either the President, group of members of parliament, or several other institutions, including IIRC any complaint signed by at least 100k citizens.
Organizations live shorter than packages, just look at all the com.sun stuff in Java. And even in the absence of corporate changes, you may well want to transfer a package to a new home.
Ross Moore did a presentation about accessibility and PDF at the 2020 TUG online conference.

https://youtu.be/VF9Ubax_HIY
I personally do not feel eager to install an app that very likely was written by the lowest bidder. Especially when the underlying requirements were written by our politicians, best case we have complete incompetence, worst case someone saw a way to make the bundestrojaner look harmless.
Decent nits, but...

Short-lived threads (for one request) are a performance and scalability disaster; tens of microseconds or worse to spawn and join, contention on important locks, bad for caches, etc. There's not much concurrency when it comes to spawning threads, too.

If you have long-lived threads in a pool, yes, they may not live forever, but you generally have to assume that each thread will end up with a resident stack size equal to the largest stack use: each will get a turn to run the stack-intensive functions.
The number of times I've seen people shitting all over port knocking is truly confusing. Since we added it several years ago, we've not had a single case of hackers trying to break into sshd. Before port knocking, 100's a day, even though it was on a very unusual port.

I try to tell people this, when they poo poo port knocking, but they just don't get it.

EDIT: s/the/they/
| better sound reproduction than any speaker

Aside from the comment below regarding bleed as desirable, this just simply isn't true. Yes, you can spend an order of magnitude less for "good" headphones, but the advantage of a cabinet for tuning the driver will always beat what can be done right near your ear.
Generally the minimum for a mortgage here is 5%, though I think it might be more like 10% in the current climate.

If you can expand the distance to within 45 minutes you'd get a lot more for your money as that suddenly puts a reasonable area outside of the M25 within reach.
1. Needs (2016) in the title.

2. Even by 2016, pdfTeX had been largely superseded by LuaTeX.

3. The author bizzarely links to "the mess" of the literate source of TeX the program as a WEB file rather than as a typeset document.

4. AIUI, the source code of the TeX engine has nothing/very little to do with adding tags to PDFs, which it is the job for LaTeX packages. Admittedly, understanding and writing their source code is a rarer skill than reading the literate source of TeX.
A plastic tax would solve this. Make plastic containers at least as expensive as cardboard or aluminium cans through added taxes.
> A type of `some{T} | undefined` means that the expression can have values `Some(_)` or `None` or `undefined`

Can you please explain this further? Why is `None` an inhabitant of this union?
But that's putting the second line of defence (against an on-system attacker) above the first, which is to not get someone on the system in the first place. It definitely makes sense in some setups, but for your general purpose web server a high port is probably the right trade-off.
Good to know. I’ll take your word for it that it’s the same, but the article doesn’t say that Sony forbids using your oven payment processor.
I believe you're right, though I think it's Spring's inversion of control rather than the annotations themselves.

The problem with inversion of control is that if you get it wrong, there is no feedback. All you get is "nothing happened". When it works, it just works, which is great. When it doesn't work, it doesn't work, and "it doesn't work" is practically impossible to Google. Spring had the same problems, worse, with XML configuration.

The solution is exactly as you say: let programmers program. Solve the problem with debugging tools that you already know, rather than introducing a whole new meta-meta-programming environment without any debugging support. (If you attach a Java debugger to a running Spring program to step through the point where it's failing to find your annotation, you will regret it.)
Because the question contains many common symptoms of a good programmer:

The author can easily read code from others, there is no implication of other people complaining about his code, and can program in several languages.

There are also stuff that commonly causes impostor syndrome up there:

Very general surface level knowledge, problems with interview questions, and difficulty on understanding "very basic OOP concepts".

The only thing pointing to a bad programmer is that "although my solution is more likely to be a complete mess", but it's thrown there without any context on problem difficulty, code size or environmental restrictions.

Any of the best programmers I have ever met could have written that same question if they got reasons to doubt themselves.
Хорошая работа)
Johnson also described that pay as chicken feed: https://www.theguardian.com/politics/2009/jul/13/boris-johns...
They created the store, how entitled are you.
The issues were fundamental and entirely predictable, that's the problem.
My take on depression is that it's an internal fight between an emotion (usually fear, anger or guilt) and a thought that says we shouldn't be feeling it (because there's no logical reason for it, etc.). The conflict gets so intense that the whole emotional system shuts down resulting in full on apathy, which is the cause of most of the symptoms of depression.

Apathy, in my case, felt like the flu. I didn't have energy, didn't want to do anything, felt weak and soulless.

This is not the official definition, but it's a workable description that also points to a solution - process the apathy and then the underlying emotions and the depression should lift. That's what the app I built helps with. But as usual, YMMV.
> I've come to realize I'm not very good at it and thats unlikely to change.

I may be wrong here but my impression from this comment is that you _want_ to improve, have a sense of where you can improve, but you have not found an improvement plan that works for you.

I can relate to the frustration of seemingly not being able to move the needle for your skills. One thing that has helped me over the years is adopting more effective learning strategies.

I highly recommend the books "A Mind for Numbers" by barbara oakley and "5 elements of effective thinking" (don't remember the authors) for some ideas on how to deepen your knowledge (so that you don't just feel like you possess purely surface level knowledge).
> People quickly forget what a tremendous liberation the App Store created for developers.

We do, but at the same time, physical stores selling software are now rare or non-existent. Apple is not competing with them.
Sure. I had some experience in systems programming, doing some hobby Win32 programming, and then systems programming as needed as a backend dev in a few domains.

From 2010-2012 I tried out webdev, and didn't really like it. My clients were happy with my work, but I ultimately ended up quitting the culture of shipping things and hoping for the best. (I know they're not all like that.) With little plan in hand, I started self-studying compilers because they seemed far from webdev, and I was interested in them.

I eventually found a job at a small R&D shop where I worked on an LLVM transform. Because they were small they couldn't guarantee that I'd always have that work, but I got almost two years of maintaining that transform under my belt. From there I continued to self-study interpreters, eventually landing another project there involving DSLs, compilers, interpreters and high-performance code...all of my favorite things. It was a lot of work. From that, I found a genre of companies that worked well for me and didn't involve fighting to get into a FAANG company.

That's where I am now, and I feel more valued here than anywhere else since I started working 15 years ago. Now I realize there are a lot of opportunities out there I could be interested in.

Webdev's hegemony tends to suck all the air out of discussions of computing. There is a huge need for skilled generalists in multiple domains that have nothing to do with HTML/CSS/JS.

The trick is to find the people who share your computing aesthetic, and can teach you things. Once you feel like you have not much more to learn from them, start looking elsewhere.
I think it depends on what system you are talking about and where it is. So if you have an internet-facing server running sshd on port 22 then you are going to get hammered with low-effort, automated scans and changing to non-standard port can cut down on noise and at least "hides" you from low-effort attackers. But if your server is in a hardened, private subnet then any attacker that is even in a position to connect port 22 has already bypassed multiple layers of security and is already invested so likely won't be in the least bit deterred by a non-standard port.
This sort of arbitrary judgments-from-heaven is a sign of monopolistic power. You only have a Hobson's choice when it comes to the app store.
This was my experience with Xamarin. It was easy to get started, but then it was nearly impossible to get the "finer points" working just right. Instead of just doing "x" I was fighting the tools to get "y" to do "x", with that extra level abstraction sometimes requiring custom code to generate the right native output.