skysight-inc/HackerNews huggingface dataset:
I don't know of any software company that would hire an introverted person who can't articulate themselves for 20k a month. This is how micro-service architected fully optimized solutions that solve the wrong problem happen. Do you really think the high value of a developer just comes from being able to pass coding challenges when there's millions of them out there?
Jupiter's moons may be warming each other by tidal heating
Funny how he starts saying he never had a whiteboard interview and he never gave an interview, yet he has such strong opinions on everything that's wrong with it.

edit: read to the end, a lot of the points are absurd, easy to realize after a couple interviews.
This has nothing to do with monopolistic power. Apple has had strongly opinionated/ arbitrary rules on the App Store way before they had anything which resembled a monopoly. The only difference is now that Apple has grown.
The carbon footprint of streaming video: fact-checking the headlines
My product needs to be in a user's device. It has to be there to work.

I don't care what device, it's features, security, app review, privacy, it just has to be a device.

My users also want my product in their device. They will download it from the App Store or from my website (sideloading).

Apple has no business getting 30% from a business that happens despite itself. Apple is just rent seeking and monopolizing access to people.

If Apple didn't gut their browser, it'd be fine.

My users want push notifications. My users want to persist data from my product in their device. They want to use their device's features with my product.

And they want native performance.
The main thing I remember (I didn't worry as much about performance back then) was when I was grabbing a replacement from a pile of ribbon cables we had in a box, the wider ones were for SCSI, the narrower ones for IDE.

Then SCSI-II and SCSI-III and ATAPI/UATA/PATA cables came along and started making the ease-of-identification based on just visual traits a lot more difficult.
How we upgraded PostgreSQL at Gitlab.com
I'm more willing to spend money on iOS than other platforms, because of how Apple manages the platform. Forcing Apple to change their platform away from the reasons why people like it is absurd.

Apple does not have the largest market share by OS, Android does. Other app stores and sideloading are already very widely available.
> You can buy anything, from anyone, with bitcoin. All it takes is two bitcoin users.

Shouldn't we amend that statement to be "You can use bitcoin to buy anything which is being sold by some other bitcoin user?" ;)

Which sure, is potentially anything/anyone, but will obviously vary on circumstances.
That... that channel is amazing. Wow. Thanks!
Do it yourself! (Implementation loosely based on phantomics' comment below.)

(defun april-reader (stream char)
(declare (ignore char))
`(april ,(read stream t nil t)))

(set-macro-character #\⎕ #'april-reader)
How to avoid a carb crash (and other productivity hacks)
For what it's worth, I'm pretty sure that line's been in there since the review guidelines were public, years ago.
All software security comes down to obscurity: it depends on the selection of specific numbers that are known to the authorized parties, but are extremely difficult to guess (i.e. very obscure) to the unauthorized parties.

The extreme of this strategy is to make a successful guess cost more than anyone can possibly pay, for example by using numbers so obscure that all known algorithms for guessing them will take longer than the heat death of the universe to succeed, or something like that.

But while there seems to be solid math to calculate such numbers, implementations are rarely perfect and can easily leave open the possibility of other guesses that cost a lot less than breaking the theoretical limit. (AKA side channels, vulnerabilities, bugs, etc)

Where "security by obscurity" comes in for criticism, it's usually because the implementers have misjudged the amount of obscurity they are actually creating, or misjudged the amount they need (their threat model), or both.

It's easy to make these mistakes because it is hard to create perfect implementations, and hard to know exactly the current and future capabilities of your attackers.
As someone who has been programming for 40 years and had a decently successful career but is struggling with these challenges now, I can empathize.

It's not so much what the challenge is -- it's how one is asked to accomplish it.

Sitting in front of my laptop for 6 hours while people ask me random programming tasks while they watch me on camera and see every keystroke on screen while I'm editing is not how I work. I work by choosing from active tasks that fit the "space" I'm in, by multi-tasking, etc. - if I get stuck on something in the "real world" I'll go work on something else that needs to get done, etc. You'd be amazed at how many interviewers simply refuse to ask you another question in lieu of or even in addition to the one the first wanted to ask, for example.
I would say this because the literal text is

>Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances

Wherein do you construe taking a picture to be a first amendment situation save where it constitutes an act of communication? Press in current context could be stretched broadly enough to fit basically anyone with a cell phone but in order for it to be protected it has to be capturing something to share with your fellow man.

A person taking a picture to share with their fellow man or even using facial recognition to enrich that communication with more info could well be protected but an org feeding a video stream into facial recognition to blanket gather info on your fellow man would be apt to be disallowed.
There's a game called "The Battle of Polytopia" https://en.wikipedia.org/wiki/The_Battle_of_Polytopia which plays like a quick version of Civ. It might scratch your itch.
The Uber app actually lets you use Apple Pay (as opposed to in app purchasing). Apple Pay charges standard credit card rates that you would pay anywhere.
GPT-3's performance on artihmetic is exactly one of the examples of how limited it is, and of how little the creators have tried to understand it. They don't even know if it has some (bad) model of arithmetic, or if it's essentially just guessing. I find it very hard to believe that it has an arithmetic model that works well for numbers up to the thousands but fails on larger numbers. More likely it has memorised some partial multiplication tables.

Getting back to the human bit, I'm using 'human' just as a kind of intelligence level, indicating the only intelligence we know about that can do much of anything in the world.

The paperclip maximizer idea still assumes that the AI has an extremely intricate understanding of the physical and human worlds - much better than any human's. My point was that there is no way at the moment to know if this is possible or not. The whole excersise believes that the AI, in addition to understanding the world so well that it can take over all of our technology, could additionally be so alien in its thinking that it may pursue a goal to this utmost extent. I find this combination of assumptions unconvincing.

Thankfully, the amount of knowledge we have about high level cognition means that I'm confident in saying that I don't know significantly less than, say, Andrew Ng about how to achieve it (though I probably know far less than him about almost any other subject).

I'm not claiming that AGI risk in some far future won't be a real problem. My claim is that it is as silly for us to worry about it as it would have been for Socrates to worry about the effects of 5G antennas.
Ooh, ok, now I realize users can also replace images under some circumstances. User-uploaded images are hosted at publicly-accessible URLs, which makes it likely you'll be inadvertently hosting some unsavory content before too long.

There are also a number of hiccups and contradictions on your pricing page, and quite a few things listed there that don't appear to be represented in your (current) offering...
Adopt-a-Pet | US REMOTE | Full Time

Adopt-a-Pet’s vision for the future is one where every pet that enters a shelter leaves through the front door and into a loving home. This proclamation drives everything we do, and the people who work here have the satisfaction of knowing that they are using all of their talents to save the lives of animals and give their new owners the gift of unconditional love. Every month at Adopt-a-Pet, we connect over 250,000 homeless pets with 5 million potential new families!

The team at Adopt-a-Pet is a group of intellectually curious individuals united by a set of shared goals and values: make a positive impact in the world, operate with integrity, value our partners and support one another, collaborate, continuously learn, and have fun!

We're working on a newly rebranded website and rewriting front and backend, so it will be a very exciting time to join!

Open positions:

Senior Front End Developer: https://apply.workable.com/adoptapet/j/EC0F1E7416/

Back End Developer (PHP / Laravel / PostgreSQL):
https://apply.workable.com/adoptapet/j/43148697E6/
Stories of reaching Staff-plus engineering roles
You have a get a paid Developer account. It costs $99/year for the Developer account which gets provisioning profiles that are valid for a year at a time.
A respectful VPS provider is also hard to find. Sometimes I get most of the way through the sales funnel only to find out that the ToS includes selling my personal information to third parties.

In general I found that the more third-party domains linked to from a provider's site, the higher the chance they're up to some kind of disrespectful behaviour.
It would be helpful to keep the conversation in scope of things that are real or could happen.
Yes, the talk mentions that Dyalog is still much more performant, given how much time and effort has been spent on optimizing it.
That reminds me of when I visited Vienna many years. I went to the information counter at the train station. I didn't want to be rude and presume the information person spoke English. So, I asked if he spoke English. His bemused reply was "Yes, I speak English and 7 other other languages".
We are not addicted to making babies, or at least not endlessly. Take a look at Wikipedia's list of countries by total fertility rate, and then google for charts showing what's been happening to it over the last few decades.

Most countries, the significant exceptions being in Sub-Saharan Africa, have TFR below or near replacement (2.1).

When girls are allowed to learn to read, and when people move to cities women don't have all that many kids.

Most of the world's current population growth is due to increasing lifespan.

So don't worry about managing population. In a few decades the worry will be about keeping it up, not down. (With Sub-Saharan Africa, again, as the exception.)
This is why I like the Go approach: just use an existing global namespacing system and delegate to it all ownership disputes etc: DNS + actual web servers serving traffic (not necessarily just got repos, since the "vanity imports" offer an indirection based in html meta tags)
We apparently saved some server costs by moving to kubernetes, but it cost at least 6 months of dev time. And we have had problems with large uploads and downloads, because the smaller instances can't handle them as easily. I am not convinced it was a wise choice, but it was made before I started.
I'm amazed by these salaries. I thought I was making decent money but it is nothing like that.

Do any of these sort of salaries exist outside of the US? How about outside of FAANG companies?
This article could benefit from a definition of "security by obscurity."

Every crypto system is based on obscurity of one kind or another. That private key, password, or token is just an obscure form of information that may yield, eventually, to a brute force attack. Or not. It's really hard to know for sure.
> build something that is scalable?

That's probably the point - 1:1 experiences that are not scalable is a drop in the bucket even if they charge a 30% commission.
To me (at least in the area I live in) the easiest and quickest win is to plant trees massively.
There is so much space available. But somehow people/governments wants to have grass vegetation as a filler between roads, inside parks etc.
Yea, it's meant to be a waste of your time.

More accurately, if you need to learn new things to complete it - it will be very time consuming.

Someone experienced, or that uses relevant tech/skills on a daily basis should complete it in less than the time allotted.

Therefore "homework" coding challenges are useful for discerning if a candidate has relevant, current experience.

See the article on college professor solving a 30+ of CS problems in one day.

Whiteboard challenges, on the other hand, evaluate a candidates thinking process & presentation skills.

Whiteboard challenges
Interesting to hear about low carbs, I've been moving in that direction because of family history of diabetes on both sides. I still eat some junk food with added sugar, I wonder if cutting out added sugar entirely would help.

The other thing that helps me the most is running, but sometimes I just fall out of the routine.

I agree with everything you wrote, especially about the way medications are dispensed. I did try a medication once and had a bad reaction, have not tried since then but I think about it often.

20 years is a long time to suffer.
Yep plus the boy who cried wolf risk (ie that would only work once if at all)
When did they stop? I just bought a new MacbookPro yesterday and there was nothing on it like that. Same for the iWatch I bought last year, and the iPhone 6 two years ago.

Or is this just software?
That's a problem with the company. We at @cdr pay interviewee's $200 for their take home challenges.
I know I should get to it - maybe I should've done that during the COVID lockdown eh? Thanks for the links, I'll check them out.
I think we're arguing semantics about business philosophy.
If it's not a monopoly, there needs to be some other word for it. It's not equivalent to retail stores, where if you don't like Walmart's price you can shop at Target, because the cost of switching from one phone to another is prohibitively high. Until everyone walks around with an iphone in one pocket and a Samsung in the other, it's something akin to monopoly.
If any of them would be broken, a new one would emerge with the flaw fixed. And so on.

This is a race which cannot be won, expect by applying total control over encryption. Which obviously would mean a state of total control from my point of view.

Combined with a state of total loss of control, since control over encryption wouldn't be restricted to one specific nation, as it would require a kind of backdoor.
Building a Stupid Mutex in the Rust
What would you actually be buying, if you bought the software without being legally capable of using it?
I disagree. They have always been this arrogant. You are just noticing it right now. Do you remember when they essentially said don't run to the press if we don't allow your app, it won't help you, which I personally interpreted as or else? Or how almost every time someone criticizes Apple they sandwich a one-sentence criticism between 50 sentences of praise because they know the cost of not doing that could be their entire business? Since the launch of iPhone, Apple has been the 800lb gorilla in the room and has acted like it.

EDIT: From App Store Review Guidelines on September 2014:

> "If your App is rejected, we have a Review Board that you can appeal to. If you run to the press and trash us, it never helps."

https://web.archive.org/web/20140903022336/https://developer...
I can't tell you how many times I've seen someone say doing something for obscurity shouldn't even be done because of the adage. Some of these adages are really harmful.

InfoSec has very much gotten a bunch of these statements that can't be argued with, and people won't even take you seriously if you point out the flaws with password managers or PKI.

I've definitely used methods in my own code which "aren't trustworthy" from a security doctrine standpoint, but proven near 100% effective, on their own. Just because a state actor won't be phased by it doesn't mean it isn't a strategy that'll prevent 99% of automated attacks.
Depending on who you ask, Apple may or may not have a monopoly on their App Store. I’m of the opinion that you can’t just redefine a “market” to be what you want that would make someone a monopoly. Is Target a monopoly on what it sells in its stores?
Since Pringles tastes like cardboard, why don't they start making the can out of Pringles?
So then they just change their script to only create 3 projects per generated username?

There's nothing you can do to prevent this except devise a system where it's inconsequential to register all of these names: namespaces.

If it bothers you that one person can do this with many packages, then presumably it bothers you that 100,000 people can do it benignly with a few package names which is what goes on in npm/ruby/cpan. The solution is to simply making them worthless.

Subreddits have the same problem.
I require them because candidates lie, not always intentionally.

The unfortunate reality is that it can be really tough to fire low-performers. I NEED to know that a candidate can do the work. We go out of our way to make our ask reasonable, relevant to the role, not spec-work, not time consuming, and well defined. It's not uncommon for us to learn that the candidate can't actually do what their resume says they can or for the candidate to learn that they grossly overestimate their own skills.

I recently talked to a Python/JS expert that led a project at a major agency to scrape a network of websites, find and extract specific data, and deliver game changing competitive intelligence. The candidate ended up admitting that their role was limited to copying and pasting a pre-built code snippet into the dev tools console and that they couldn't actually read or write any code. The proof is in the coding challenge.
I was in Guatemala in the early 90's on a bus and it stopped near a stand with people selling soda.

The procedure was open the soda bottle, pour the soda into a plastic bag, put a straw in the bag and tie it. The vendor kept the bottle (presumably you could keep the bottle yourself if you paid the deposit with your soda). I kept waiting to see a bag leak or some other disaster but it seemed to mostly work. You couldn't put your soda down though. Maybe it was a scheme to encourage rapid consumption or accidental loss and sell more sodas, not sure.
whataboutism: n. An accusation of hypocrisy designed to deflect from bad behavior on the part of another party.
I think it's the power dynamic. The marketing material doesn't need to be as good because they're (culturally) in charge now at the company.

It used to be that engineering/design led the company. Now it's marketing and legal.
For advanced roles I'd suggest separating out the evaluation of coding ability from the evaluation of a particular language. Let the candidate pick their language when you want to test how well they can write new code, and then do a separate evaluation of how deep they are on the language and technical stack you are using.
Honestly, how cool would it be if it popped open like a pillsbury crescent roll can?
Sure, go ahead, but I would advise you to rephrase it in your own words. Otherwise you run the risk of rejection due to a few Google searches!! But.. none of this is special sauce, this is the playbook for every "scalable" organization. I would avoid the word "interoperability" though. That's verbiage from the last major IT/govt push.
I have a DJI Mini drone (which is awesome), I use it with a Google Pixel that has no internet connection (no SIM card and no WiFi) and it works fine.
What naming structure are you looking for?

The biggest problem I have found is that there are so many metadata tags, with many different formats, which complicates taking the dates accurately.

I'd say the pain is the manual work that you need to do to organize the photos without recognized or proper metadata, but still, it's less painful than organizing everything manually.
Yes, I want my store on my hardware. Thank you.
There has to be be some degree of tying purchases to an account. The real issue here is what is done with the data after it's been collected. Internal use is one thing; such as improving apps etc. When it's used to target individual in a bid to influence their thinking, that's when the real problem starts. Are Apple guilty of the latter?
> It's about strong typing. I detest stringly-typed programming.

I feel like that's something that's more an appropriate concern for the application, and not something that ought to be baked into the configuration format itself. For example:

> E.g.: a guid turns up as a "System.Guid" type in C# instead of "System.String".

Can you not just pass the System.String you get from the decoder into System.Guid's constructor and handle the resulting error should that string not actually be a GUID?

Like, my problem with a lot of config file formats is that they're frequently too clever about assuming types of things when I would much rather they be strings by default for me to interpret later.

> If you roll your own ["hex-string-to-byte-array" decoding function], it'll be about 10x less efficient than something done properly using SIMD instructions.

Unless you roll your own that uses those SIMD instructions, whether in hand-written assembly or in a programming language with a compiler smart enough to use SIMD for this.

This does, however, reek of a premature optimization.
If I remember correctly, the SCOTUS reference dates back to when Steve Jobs was CEO. I am, um, not at all surprised he put that in the guidelines.

The guidelines also used to say:

> If your App looks like it was cobbled together in a few days, or you're trying to get your first practice App into the store to impress your friends, please brace yourself for rejection. We have lots of serious developers who don't want their quality Apps to be surrounded by amateur hour.

You can tell this was personally written by Steve.

---

Taken from https://web.archive.org/web/20140903022336/https://developer.... This is the earliest available in the Internet Archive as far as I can tell; circa-2012 they were kept behind an account login.
Indeed. Madagascar is a slow-motion environmental catastrophe because every family has many children and each of those children eventually needs to slash-and-burn rainforest in order to plant enough rice to sustain themselves. Also a lot of tree-felling to make charcoal, because for whatever reason Malagasy villagers cannot afford e.g. kerosene to cook with. The result is the steady eradication of all those cool lemurs and other rainforest wildlife, but the perpetrators of this destruction are not millionaire industrial fatcats like people often imagine, they are dirt-poor subsistence farmers.
Same on Mac AppStore.
I don't think anyone would consider the city or a mall running their security cameras data through facial recognition an artistic endeavor.

I don't think anyone would consider someone taking a picture in public to run afoul of this law.
Barrier to entry isn’t necessarily part of antitrust. I can’t set up my own toll roads without billions of dollars of investment, but a toll road company isn’t necessarily breaking the law.
Which vpn though?

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=openvpn

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pulse+secur...

VPN doesn't magically fix all problems.

wireguard is good so far, but the kernel implementation is in C, so who knows.