skysight-inc/HackerNews huggingface dataset:
This has been my experience, as well.

I once had to delete an entire bug fix version, and turn it into a feature version, because I "shouldn't" have done something (can't remember what, exactly -I'd have to go digging through the commit comments to find it, and I don't want to do that).
A Brief Accurate History of Programming Languages
So I actually did that. I transitioned in applied AI research about four years ago (came from an creative writing background and did a variety of other things spanning technical project management, business analysis and data analytics). Over the past three years worked at two different AI startup where I lead most of the deeplearning research.

I got to work on interesting problems like language modelling, neural program induction, question answering / information retrieval, and conversation AI in the context of enterprise problems. Found the problem space incredibly fascinating and the fundamental research often lacking. I was able to get in a funded AI phd program this year. Many of the NLP and deeplearning challenges we faced in both startups have become the inspiration for my phd work (exploring augmenting deeplearning methods with external knowledge graphs for causal reasoning over text).
Interesting, I've always wondered about the very different approaches of Basecamp and GitLab when it comes to remote salaries. Basecamp pays the same, GitLab always (as far as I know) followed the same idea as Twitter and VMware are now doing. I think I prefer the same pay for the same work, regardless of where you are – but as long as cost of living is so ridiculously different that's probably not really feasible. I'd also like that to change, though.
Again, this is where all port knocking debates devolve to ...

Port knocking is not the christ child that will wash away all of our sins ... and therefore is not worth implementing.

You're right!

It doesn't add that much. But it's non-zero and has almost zero cost. It's very elegant, in my mind, and it makes me very happy.
> Why is having an App on iOS a must have?

This may be one possible reason: https://i.imgur.com/kPXs9NO.png
This. Client wants a "simple" site, but insists on custom themes and plugins that break or are unsupported or abandoned by the developer.
>* Change the default port from 22 to something in the 40k+ range, which will keep you from being scanned, and

I'm replying to these suggestions all over this item because I think it's important, so I apologize if you've since seen this comment elsewhere, but:

This introduces new security risks. Non-privileged users can bind on ports in the 40k+ range and cannot bind on 22. If you restart sshd for a software upgrade or some other reason, or the iptables rules you're using to remap the ports get flushed, the malicious non-privileged user can now bind to the port people were communicating with your sshd on, and if they ignore the host key mismatch, everything they send can be captured by the malicious user.

Older openssh clients have default configurations that can result in the leak of the whole private key, if you use password auth or 2FA they can outright steal those, perhaps their fake sshd will do more than just steal credentials and will actually mimic a shell and let them gain more understanding of how the system ticks, etc.

Is this level of attack something most people are going to run into? No. But neither is an attack more sophisticated than brute force password attempts. It's definitely information people should be keeping in mind when making these sorts of decisions, too.
Fair enough, I've edited the comment to reflect this :)
Agreed. I used fast_jsonapi on a project, and while I liked it, I felt that I had to change my project to work a round it and not the other way around.

For my next project, I used `blueprinter`, which seems to be pretty fast in its own right (there was no discernible difference from what I could tell).

Overall I i'd like to give fast_jsonapi another try, but only once I see serialization is my bottleneck
I've heard a better analogy - security by obscurity is like camouflage on a tank. A tank has massive armor and a terrifying gun to defend itself with. But even a half-assed camouflage can delay enemy reaction by a few seconds. Sometimes it's all it takes, because it lets you shoot first. In addition, the cost of camouflage paint or a net is laughably low and can be replaced in the field. It's simply an extra layer of protection and a very inexpensive one.
This is so arbitrary and petty

It sounds like Apple is trying to keep from becoming the new backpage.com.
Yes, they do. On the Mac, at least for the longest time, they put a sticker on the shrink wrap for the device that said something to the effect of "By using this device, you agree to the terms of Software License Agreement found at apple.com/legal/sla". Of course, if you didn't agree with that you could return the device or install Windows/Linux, but on the iPhone (which won't activate without agreeing), you can't since the bootloader is locked.
I bought a new virtual machine and I waited about a day until I logged in. The SSH logs showed over 100 failed login attempts. I hadn't even logged in!

I changed the default SSH port to a random high number.

I had zero failed login attempts in 2 months.

Of course use strong security methods but I suggest changing the default port numbers just to clean up the log files.
>But SSH is a terrible example, because the cost to the defender of simply not having SSH vulnerabilities is the same, or even less, than the cost of obfuscating it with nonstandard ports, "port knocking", or fail2ban, which are all silly ideas.

This just shows how ignorant you (and most) are on the topic of port knocking.

SPA port knocking is cryptographically secure and does not suffer from replay attacks.

Similarly, it defends you against 0-day hacks, and greatly increases your signal-to-noise ratio. With port knocking, ANY failed attempt is super suspicious. Before you'd get hundreds of attempts a day.
> A code audit carried out by FTI Consulting was said to have revealed no causes for concern, with DJI posting the exec summary (but not the full audit) on its website as a PDF. It had access to 20 million lines of source code, according to the summary, with analysis focusing on code concerned with “communication protocols and network activity with host infrastructure”.

DJI can pay for all the audits in the world, if they are not trustworthy they can find a way to spy in spite of the audit. Computer and software systems are just too complex to declare clean with audits.

This is a trust problem that DJI simply cannot change in their present state.
> No, you always worry about retesting because SemVer is a statement of API intent, but does not include a guarantee against bugs, including new or modified bugs.

That's what I do, yes. What I tried to explain is how library devs generally update versions.

> Yes, but if it's a minor version change then, as a developer, I also want to review the changelog for new features I should consider whether we should add backlog items for refactoring to take advantage of, while a patch doesn't create that need

This sounds like a good argument; although in my professional experience I found that 1) I need to re-test anyway 2) I need to read the change description anyway (as bugfixes most of the time mean behavioral changes, so I want to understand why the patch was necessary).

So overall I understand the theoretical argument behind semver, but I still don't see a very strong argument behind it. At least not as strong argument as popular semver has become.
TOML used as an `.ini` file is nice, but it gets verbose and confusing pretty quickly if you try to store more complex data in it.

`[[foo]]` syntax is not obvious at all. It's a bit weird that top-level declarations use ini-like syntax, but values can use JSON-like syntax, and there are multiple syntaxes to express the same data structure.

It doesn't strike me as very elegant, or obvious. Still, it is less annoyingly-inflexible than JSON, less verbose than XML, and less footgunny than YAML.
Principles That Will Improve the Rest of Your Life
Doesn't Apple track every app you install, access and run? Track you if you want to develop your own code for your own fully paid for device?
Right and that’s partly because online store like Apple's out-competed then on price by taking less than traditional distributors.
Are we comfortable admitting that this can never actually be answered with the scientific method?

This puts all realms of the discussion in the metaphysical, which is fine, but it should be noted :)
> People who are actually bad at what they do rarely realize it

Apparently, they may often think that they are good at it! See https://en.wikipedia.org/wiki/Dunning–Kruger_effect
Now, assume that every painting in your house can be checked for a safe behind it in milliseconds (total, for all safes) by the people in your house.

Did you actually accomplish anything?
People quickly forget that software was distributed on the web long before the App Store existed.

He's talking about when you used to have to pay $50 to $500 for software in a store, but the author was lucky to see $5-$10 of that.
“I should still be able to view where I am on this map without letting anyone know where I am”
What a simplistic view of the world.

You, the seller of the product, have to decide what the final price is suitable for your product, among other things. Oh, you want to earn $60 per box? Well, good luck with that. After logistics, distribution, retailer (and/or possibly multiple resellers in between) margins your product will sell for, let's say $90. Good luck selling that to customers.

So, when you distribute your goods through the retailers, you will factor all those costs. You want to sell your product for $60 to customers? Subtract all the costs I listed, and you end up selling it to the retailer for a significantly lower price. Hell, if you're new to the market, you may end up paying the retailer an upfront sum to cover potential losses.

But yeah, retailers get a "0% cut" on your money.
How Did I Overcome Depression
On a further note, what is preventing Stadia from running on Safari on iPadOS right now? I suppose it's making use of some non-standard Chrome only features?
> As opposed to countries that wiped out indigenous and stole their lands, enslaved people based on race, killed protestors, experimented on people without knowledge or consent, dropped nukes on civilians, etc?

> ...I guess you haven't heard about what democracy did to alan turing? And no, natives, jews, blacks, chinese, etc will be lined up far ahead of you.

Oh, come on. All of that stuff is now roundly condemned, or at least very controversial.

What makes liberal democracies better is not that they've been perfect and blameless throughout history, but they're structured to work through their faults and allow progress. If the US had been run by an oligarchical one-party state of Southern elites (a la the CCP), it'd still probably have literal chattel slavery.

>> “The only thing necessary for the triumph of evil is for good men to do nothing.”

> Like all quotes, it's superficial nonsense. Every evil doer thinks that they are the "good guy". Pretty much all evil is done in the name of "good". The nazis, islamic terrorists, japanese imperialists, british empire and the people who nuked innocent civilians all think they are doing good. They all use your quote.

> The true evil are the ones who portray themselves as good and the other as evil. Those people who are so ideologically brainwashed as the ones capable of true evil.

You're confusing righteousness with self-righteousness and a kind of deluded evil. They're quite different things, and it's important to know the difference.
It’s worth its own front page post, since that’s popular for these today.
Erlang is a system and language for distributed (not just concurrent) programming. Go is a language for concurrent (not distributed) programming. Unless things have changed substantially since I last investigated Go, the language does not sit within a system designed for distributed computing. There are libraries you can use, but the language itself does not attempt to solve the same problems as Erlang.

If you use Erlang within one node, it's roughly equivalent to Go. But Erlang is designed so that the same concurrency mechanisms you use on one node also work across a cluster of nodes. There are more differences than this, but this is probably the most critical one.
There's nothing for me to learn here other than domain theory which is very advanced math and how people behave.

If you follow the conversation you'll see that the entire argument turned into a battle of definitions with me turning to a very generally accepted definition of a function and bitdizzy turning to using more obscure mathematical definitions of "function" and arguments about semantics what context is relevant to what definition of "function." Whatever definition you choose to believe domain theory looks like very advanced stuff and clearly outside the scope of your average technical conversation.

Either way, I didn't have time to respond to your other comment below. But I will now.

Don't worry about the upvote thing. It's just for this thread I can switch accounts.
What ports did the firewall have open?
It's also an indication that there are no default passwords in use. So even if you know what port SSH lives on, there's a lower ROI to attacking it than a default port.
I had a similar discussion with someone about hunting pictures in dating profiles. My initial opinion was to include them, because I hunt and I’m not going to compromise on that, so if it’s a dealbreaker for a potential partner, it is best to have that out in front, right? But it was explained to me that this isn’t a subtle approach. Having a picture of yourself with a thing you killed is likely to illicit a strong response from the middle group, women who don’t have a considered opinion on hunting, for or against. If that is one of the first images they see of you, they might reject you out of hand, whereas after a few dates, a mention of a hunting trip is a better way to broach the subject.

So I would take the same approach with a cat. Let her find out you have a cat the first time she comes to your house. At that point she’s already decided you’re masculine enough to hang out with so it isn’t going to change anything.
Using Steam is even MORE optional. They're PC games! Yet people still want to be on Steam even if you have to play by their rules, because being on there creates value.
Maybe this should be the link in the tweet instead of the tweet itself? [1]

I don't really get the point of using blockchain for a sovereign currency because the whole point is to be decentralized, and if you're centralizing it then there are better options.

[1] https://www.streetinsider.com/Globe+Newswire/Council+of+Econ...
With a user controlled Android phone, you can just feed apps you don't trust fake location data. But now Google has started restricting user-owned Android to a fixed number of flashes or something, or they get locked out of Google Play Services.
Isn't tetrapak more complex in makeup and more ubiquitous? How is it recycled? Because there's more of it, there's a better effort at handling it?

* I'm currently testing used tetrapak as shingle siding for dog houses!
The use of the word ‘nightmare’ when describing consumer packaging makes discussion of climate issues seem like a joke to the average person.

Do journalists realize they are being mocked when they highlight this terminology? Are they doing it intentionally to make a mockery of these issues?
It's no problem. The company can contact zoom support and get your account unlocked.
They say:

> Consider using Xcode to install your app on a device for free or use Ad Hoc distribution available to Apple Developer Program members.

Can anyone explain this to me? I have some AppleTV apps I’ve written for myself. I can run them on my AppleTV but I have to reconnect to Xcode every 7 days to continue using them. It’s a pain in the butt. How can I install these apps without a dev account and without having to reconnect to Xcode every 7 days?
It would be cool if it was implemented as a reader macro instead of just passing a string to a function.
woo! dept of interior insisted on this, got a forked DJI OS, and did an expensive consulting round to verify that it didn't phone home

looks like all it takes to negotiate privacy w/ a big tech company is a million+ procurement process and a trade war
BEHEMOTH hit the road in 1991. Speech recognition was... not a solved problem at that point in time.

https://en.wikipedia.org/wiki/Dragon_NaturallySpeaking
The promotion is still on the developer

Apple does plenty of app promotion, from promotions inside its own store to multi-million dollar television campaigns showcasing all the cool apps that are available inside the App Store.
One fix could be to give managers a title that is of lower rank than an engineer e.g. a manager’s official title should be “support” and ensure that every part of their role is about supporting the engineers they are responsible to.
- I think you mean quicksort is O(n log n), not O(log n).

- I actually think you mean O(n^2), unless you specifically say you are talking about the average case, which you didn't mention.

- For interviewing: if you ask a shallow question you get a shallow answer. So if you don't follow up and ask why foobarsort is O(n log n), then of course you are going to have people game the question.

- Having rich standard libraries should not be an excuse for ignorance. I have interviewed people who find a suitable thing in some standard library, and call it a day. Why an ordered map instead of unordered? Why this data structure choice instead of that one (the library supports both)? They don't know. If you can answer a big O question intelligently, and you can give me reasons for your choices good. Otherwise, I recommend against hiring.

- Why so complicated? Obviously n! <= n^n. So log(n!) < log(n^n) and log(n^n) is n log(n). (Since you just want the big O.)
Correct. This is an argument made from a corporate network perspective.
It is, the client won't launch in Firefox on Windows or Linux (for me).
Only if they're paying for dates
I'm mostly looking at remote jobs (There aren't a lot of openings at the smaller companies I'm applying to in Pittsburgh but of those I mostly haven't even gotten past the resume screen). I told them I was shooting for $120k/year although I was flexible. I've probably submitted 50ish applications so far.
This irks me. I've also had to go through the horror that is using a mac after a life of using 'regular' pc's. To me it feels like a totally arbitrary change, to switch the alt to the left, and put a different button (which acts the same as control) in the place of alt.

I'm convinced that Apple does this purposefully so your muscle memory gives you negative experiences when you're using other platforms.

To switch it around on MacOs is basically impossible, relying mostly on apps implementing it themselves.
-Common Lisp vs C/C++

-April implements the language and just punts to CL for all the I/O and system level stuff. Like it doesn't have to implement a REPL, or a line editor or APL workspace files/array stores.
DJI has been subject to a crazy amount of hobbyist and professional reverse engineering, much of it made public by now.

I wouldn't underestimate the western multicopter scene and their ongoing hilarious shenanigans against the world's biggest drone maker.

This article is 3 years old now, you'd be mistaken thinking people gave up being given bigger challenges: https://www.vice.com/en_us/article/3knkgn/dji-is-locking-dow...
A lock that keeps an experienced lock-picker out for a few minutes will keep the layperson out indefinitely... Until they grab the bolt cutters. Everything is relative to context.
It's perfectly fair to complain that these discussions are untestable, at the very least, but unfortunately they're inescapable. We need some heuristic for evaluating which anomalies/patterns are likely to be hints of "new physics" (and are thus worth investing resources in exploring further), and which ones are just coincidence or otherwise not worth investigating.

Anthropic arguments seem to provide a reason to be uninterested in a large class of apparent surprises. Should we invest in investigating those surprises, or not? The discussion may be metaphysical, but the decision has real-world consequences.
What's right with package namespaces? How do they help at all? Where's the benifit? The cost is that package paths are longer and hard to remember. Also confusing because multiple packages can have the same name

> I have to deal with name-squatting and a much more difficult naming process for crates as pretty much every short, meaningful name in English is taken at this point

Squatting is not a major problem just name your package yourname-xml or randomname instead of yourname.xml
> Apple devices OTOH are severely limited regarding sideloading

Yes, but for many users this is a premium feature, not a flaw.
I have 0 in the last 14 days on port 2xxx. Probably depends a lot on your IP range (I'd assume AWS etc is scanned more thoroughly) and whether you've happened to hit a port used by another service. But even in commercial ranges, I've seen hardly any hits on >10k.

But I have only anecdotal evidence as well, so my guess is as good as yours.
Or give them a title like “collaboration engineer”
"Apps should not require users to rate the app, review the app, watch videos, download other apps, tap on advertisements, enable tracking, or take other similar actions in order to access functionality, content, use the app, or receive monetary or other compensation, including but not limited to gift cards and codes."

Bunch of apps started doing the above "enable tracking" part already - good thing Apple specifically disallowed it, should nip that problem before 14 comes out.
The tradition is to keep the packaging the same, but less content.

The same packaging for less should be a crime with bankrupting fines.
Telling someone to fake it, means you are telling him to lie.
Telling someone he is probably too harsh on himself, is not telling him to lie or cheat.

So no, fake it till you make it, taken seriously, is not a good advice.
I do not think Apple should have the power to do such decisions.

I do not like tracking at all.

But I think this is something which needs to be handled by governments (laws/regulations) not by apple forcing their opinion about what is right onto everyone else by abusing their marked positions.

In this case it might be beneficial for the users.

In others cases it was not beneficial for the users at all but only for apple. Like if I remember correctly apps where not allowed to state that they are Pebble compatible because Pebble did compete with the Apple Watch at least theoretically, similar platforms like Netflix/Amazon Prime got special terms wrt. the pay cut but a Netflix/Amazon Prime for gaming wasn't allowed at all for dubious reasons (with that reasons any content gateway like browsers, newsfeeds, Netflix etc. would not be allowed) oh and guess what it seems Apple is currently working on their own Gaming/Game Streaming platform...

So yes anti tracking is good. But I still belive Apple is again abusing their monopoly like positions for their own benefits, let's not forget Apple has their own app network which likely isn't affected by this.
Nothing ever works.
Everything is fixable.
The uncomfortable truth:

50% of food is thrown away due to our current habits. This % would be even higher if we didn’t use multilayer materials to protect food from spoiling.

The only way to solve this is by changing our eating habits (e.g. some things would have to go away, because they are not economical to centrally produce and ship everywhere around the world).

That, or you get distributed manufacturing that makes this food on demand locally.
The Ugh field must be a close relative of the SEP field: "somebody else's problem". As Douglas Adams noted, it's the closest thing to invisibility possible in this universe.