skysight-inc/HackerNews huggingface dataset:
This is almost lifted out of a bad movie and it's horrifying. Commit one crime as a teenager, maybe hang out with the wrong friends. Suddenly some software program deems you liable to commit future crimes and your entire family becomes a target for endless harassment by sheriff's deputies. You can either accept it or leave the county, stark choice.
Poster said he was a teenager. For adolescences, everything around sexuality is interesting. Some of those men he was tricking were probably other teenagers pretending to be adults!
I'm not sure what you're implying here. Are you saying the employees got poached to better paying jobs in other government departments?
I'm pretty sure it's using some Chromium-specific functionality, but I can't say what exactly since it's not publicly stated as far as I can tell.
This sentiment is too real. And too many folks in "charge" of hiring play this game.

When I'm hiring, I give applicants a real-code task, something they'd really do if they were hired - and I pay for their time too.

This method has allowed me to skip a lot of time-suck-bullshit while finding candidates, and their process with me is easier/faster too.
If anything, it uses Occam's razor, reducing {conscious matter, unconscious matter} to {conscious matter}.
How to change your font in Slack
My wife’s expedient solution, she says “It’s work, just do it”.
> We have similar experiences. I might disagree with advice to college grads to not pursue a startup though. It can be more fun, and if you are going to be tempted by it it's good to take the hit in your 20's when (probably) it doesn't matter too much.

I'd take FAANG over most any startup and would've if they had given me an offer. I speak as someone who has been in 3 startups before they were 30 (seed stage to unicorn). I think startups (startups that have high chance of no exit - <$500 mil valuation, less than 100 employees, <50 engineers) are better suited for people who have significant experience. If you join a startup - it is frequently filled full to the brim of FAANG rejects, young people who don't realize what FAANG offers, and people from different industries trying to break into tech... which means it's almost always the blind leading the blind. You will not learn best practices, you will inevitably find it very hard to switch into a big company, and your resume will look like shit (meaning you will always get subpar offers/interviews) until that startup either becomes a rocket ship OR you join a big co.

Risking your 20's in hopes you get ultra rich is a fools errand when you could reliably get $350K+/yr by 30 when joining FAANG when you're in your early 20's. No startup is going to give you an offer that will even be good anyway! There's no way you're going to join a startup as a entry level engineer and get an option package that will be worth anything.
Governments ought to be the place for this level of regulation, absolutely - But right now, governments aren't regulating.

In the mean time, I'm glad Apple is.
If Apple wasn't doing this, no one would be.
Who will call app Britain?

https://www.youtube.com/watch?v=Ei9iM_zzzQk
Releasing more CO2 alone is no surprise since by definition if it isn't burnt the non-biodegradable technically sequesters it - but that has other environmental issues not covered by the metric.

One hypothetical that highlights issues with non-nuanced single issue environmentalism: producing non-biodegradable plastic that doesn't release more carbon filling and dumping it in the ocean to produce carbon credits.
I like it! "Team Support" would be the perfect job title to really drive this home
That's actually exactly what we're trying to build at Splitgraph [0]. :) We're building a "data delivery network" (DDN), which is like a CDN, except instead of forwarding HTTP requests to upstream web servers, we forward SQL queries to upstream databases.

The premise of the idea is that we can cut out the middle-man for a lot of data distribution use cases. We give you a way to deliver your data in native SQL, using the Postgres wire protocol. We've decoupled authentication from the database, so we can do it in a gateway / LB layer using PgBouncer + Lua/Python scripting. Any SQL client can connect to the public Splitgraph endpoint (as far as a client is concerned, Splitgraph is just a really big Postgres database). You can write queries referencing and joining across any of the 40k datasets on the platform.

In fact, just this week we've been working on v0.0.0 of our web client. This lets you do things like share and embed SQL queries on Splitgraph, e.g. [1] (this query actually joins across two live data portals at data.cityofchicago.org and data.cambridgema.gov).

There's also an example here of using an Observable notebook with the Splitgraph REST API [2]. It also works with the Splitgraph DDN configured as a Postgres database, but that's only supported in private notebooks for now (since normally it's a bad idea to expose your DB to the public!)

In general, we like the idea of adding more logic to the database. Tools like OP's are useful in this regard. In fact, at Splitgraph we use Postgraphile internally (along with graphql-codegen for autogenerated types) and we have nothing but good things to say about it.

[0] https://www.splitgraph.com/

[1] https://www.splitgraph.com/workspace/ddn?layout=hsplit&query...

[2] https://observablehq.com/@mbostock/hello-splitgraph
> Wasting an attackers time is a fine goal.
reply

This. Putting a tarpit on port 22 isn't going to stop an attacker, but it will slow the ssh scans down for everyone.

https://github.com/skeeto/endlessh
Budget Deficit Crosses $3T: Live Updates – T
Do you think that sector is referring to the males the article is? I highly doubt it.
Yes. But the Alpine C library is musl, not glibc, and musl can sometimes be incompatible with code compiled against glibc, so I don't like using it.
For production use cases in a business environment it's just not as good as the alternatives. Setting up VPNs and blocking SSH access to the internet is just as easy, less overhead, and more secure.

Let's say you're a bank. You implement port knocking as your security measure of choice to keep SSH secure.

I know from your job postings that your developers and IT department work at X location in Y city. I know the IP range of your public facing servers. I go to the closest coffee shops to that office, and drop off some wifi sniffers that record and send me all the communication to that IP range. All it takes is one of your employees doing some work on one of those servers from the coffee shop, and now I know your port knock sequence. Layer defeated.

Or, you use a VPN. I do the same thing. All I see is VPN traffic. Maybe I can identify what type of traffic with DPI (unlikely to have the horsepower on the type of device you'd be leaving unattended at/near coffee shops for extended periods of time), but no real details on where that traffic is ultimately headed, and I have no ingress point given up to me. The VPN can also be used to secure other types of traffic beyond SSH.

There's just not really any reason to use port knocking over a VPN when the difference in overhead and complexity is minimal and the benefits you get with a VPN vs. port knocking are so massive.
No global service can run with 10 people. Just to have a good coverage 24/7 you're looking at a 50 people company.
Zip ties!
A goal is a dream with a deadline.
Can't tell if this is a serious reply.
I disagree with the quoted statement, and my disagreement leads to your conclusion as a consequence, but not as a problem.

Leaving aside whether the different positions are better/worse, easier/harder, etc, the higher you go, the more influence your decisions have. The engineer, if he does his job well, might be responsible for a few features and best case, be responsible for part of the revenue, and worst case, waste the time of a few engineers. The director, being responsible for perhaps a whole product, is responsible for a large portion of the revenue, and can waste the time of several dozen people if he doesn't do his job right. The VP, responsible for lines of products, can waste the time of hundreds of people. And so on up the chain. As an engineer, implementing the wrong feature probably won't get you removed from your position. As a VP, choosing the wrong product line can definitely get you removed from your position. And this is in addition to the increasing need to be able to negotiate with internal and external stakeholders to get increasingly larger scope of things done the higher you go. It's high stakes, high reward, and that's why the compensation is higher for those who can demonstrate that they can make a significant dent in the bottom line.
The discount bins you mention illustrate the previous poster's point: That developers used to get far less before the App Store existed.

If Electronics Boutique can dump a $50.00 game in a discount bin for $3.00, how much do you think it paid for that game in the first place? And how much of that amount went to the author?
But this also excludes letting the user chose between either
watching ads or paying for the content.

A not very well working but reasonable business model.

Why is it incompatible?

Because getting access to normally payed-extra-for content by watching apps means receiving a "monetary or other compensation"
I disagree with the author. A coding challenge is a good way to judge how a candidate approaches a problem. The ability to walk through what you’re thinking while you’re doing it is a great judge of ability.

It also helps to weed out people who can’t actually program, this comes up annoyingly often.

I agree that having intentional errors in a starter repository is bad though.
I believe that. Contact time is a thing.

Kinda like how cars recommend a very short interval for the first oil change: because that’s when all the metal is flaking off. Once your engine is old, everything is smoothed out and there’s a lot less surface area.
I think it would be interesting to look for games that are the same kind of game as chess or Go (zero-sum games without randomness), but are harder for Alpha Zero than people. Something where it's hard to learn through self-play alone.
From Vim to Ed
That would be great! I wouldn’t need a Netflix account it sounds like. All the movies would be in a single place instead of spread around different apps. Honestly, I would love that! I’m not signing up for anything from Microsoft or Google, but I’d consider steaming a single game from Apple’s AppStore.
> You can do that, but you need to do it for every exception type ): I'd love it if Java had templated exceptions.

It does have them. You can write an interface with a type parameter `<E extends Throwable>` and declare functions inside it with `throws E`
Even whatsapp the app is deceptively simple. It works seamlessly in all the dialects around the world, on a swathe of devices quite possibly matched by no other app; and it manages to handle every actually useful feature anyone wants in a messaging app with amazing aplomb. In India for the majority of the people whatsapp is not just their communication platform, it's also their photo album, dropbox, task manager, social networking platform and contacts manager. All within the simplest UIs I've ever seen.
Anyfiddle – similar to JSFiddle but for any language
WhatApps got audio and video calls after the Facebook acquisition.

Usage increased by a few orders of magnitude too.
Telling an imposter syndrome sufferer that they have impostor syndrome without any additional evidence is telling a pyrophobic that you won't sell them a fire alarm -- and that they shouldn't expect anyone else to.
Read through this and it's super interesting, but am I missing something or do they still need a series of storage nodes that can hold a copy of all the data anyway to allow for the pinning to work?

Similar to torrents with no-one seeding, if there isn't an active set of users to 're-seed' the data, you need a copy to do so yourself, similar to a seed-box.
Never heard about it before seeing your comment. However, I have just looked it up and I think that the very limited scope (both temporal and geographical) of this "movement" just additionally emphasizes and supports the points that I have made in this thread.
What do you mean? Microsoft was certainly seeing more than 5-10$ per product sold.
I'm going to save some people time and summarize link [2]

Mark Manson says The Uncomfortable Truth is that our lives are meaningless and when we die, nothing we did will have mattered. That the human condition requires hope so we invent narratives, as individuals and as society, to create a mental framework that makes life worth living.

That's all well and good, I was hoping to get some solution or suggestion but I got to the end of the essay and it was essentially "now buy my book to understand more".

I'm going to assume link [1] is of similar quality and conclusion.
Probably not as natural gas remains dirt cheap in parts of the world. Turning it into polyethylene is a way to export those low prices.
Then packages will be resquatted. Maybe by the same person under different name.
I can't believe they were dumb enough to put that SCOTUS line in this.

It just plays into their current "meh, here's some rules but we'll do whatever we want anyway" image.
The key for those with informal power is how to leverage it to leverage the formal. Get managers to trust you, and you can have both.
> Google, Facebook, Apple each make billions of dollars from China, every year.

How does _Facebook_ make "billions" in China in particular? It's completely banned there.
Then US has the audacity to whine about their own 9/11 while completely forgetting what they did to other countries.
I think checked exceptions are backwards. If you use a `throws` declaration the caller must catch it. It quickly becomes quite onerous. (Especially if you come from the philosophy that an exception often means "abort this program - unless somebody catches this". In small programs you might just want it to crash early.) And even worse, it is not exhaustive. You can always get a RuntimeException or a NullPointerException from nowhere.

It would be great if they worked the other way around. Instead of forcing the caller to catch an exception, they would guarantee that no exception leaves a certain block.

So you would have a function

void MyFunc() onlythrows IOException {
first();
second();
}

And the compiler would statically guarantee that no other exception can leak out of it - because first and second have been marked `onlythrows IOException` or are "pure" and cannot throw at all.

For sure you'd need an escape hatch, like Rust's "unsafe". And it would not be very useful around legacy libraries. But it would be tremendously useful if you could drop a block like

neverthrows NullPointerError { ... }

in your code and be sure that everything inside is null safe! I asked about this a few years ago on StackExchange [1] but so far I never heard about it anywhere else.

[1] https://softwareengineering.stackexchange.com/questions/3497...
it should be of particular concern to drone hobbyists. perhaps things have changed since I got bored of flying drones, but I recall it being very hard to operate a drone completely legally. the rules I knew of were themselves a pain to follow; the worst was the requirement to notify every helipad within five miles or so. at the time, I could use airmap to get a list of numbers for all the helipads in my area, but the listed numbers were often some random person's cell. even when I went through the entire list and dutifully called each number, I'm not 100% sure I fulfilled the legal obligation. I always wondered if I was in violation of any state/local laws I was totally unaware of. it seems pretty rare that any drone laws are actually enforced against hobbyists, but the penalties are pretty stiff. having flight data copied back to a remote server for authorities to pore over later seems like a pretty substantial risk.
Hill Charts
Apple says bug-fixes will no longer be held up by rule violations.
Looks down at Ryzen PC with three SCSI CD-ROMs:

"Hear that fellas? You're just mediocre."
People can't improve if they lack self-knowledge and others are wiling to bullshit them.

"I've got skill gaps as a programmer, especially at broad-level architectural design" is a belief that a mentally healthy person can have.

"If I express concern about my skill level, people will just say that I'm delusional" is a belief that will mess somebody up, especially if it is repeatedly re-enforced by reality.
Coinbase's struggle with Apple's App Store restrictions
All those little bits you stuffed onto the end of your pretend quote negate the "great web experience" portion.
Wouldn't be too hard to do, someone in the video suggested a #⎕ reader macro followed by APL. Like take '#⎕string' then expand that to '(april "string")'.

But April has many ways of passing options and external data for the compiled code to operate upon, and implementing a reader macro system that would support all those parameters would be complicated and require developers to learn a bunch of new syntax in order to use April with reader macros.
any normal person that's not a nazi I suppose. In my mind being associated with Thiel should be seen as a serious stain on someone's reputation, here people band it around as a badge of honor. Needless to say, I'm not impressed.
I guess my point is largely: I can set up a VPN in a roughly similar timeframe to setting up port knocking, and it has roughly similar overhead for end user, but the VPN gives me significantly more security while also solving the same issue port knocking does. In that case, why not just set up a VPN instead of port knocking?
Is it still plausible that the remaining I-D will advance to an RFC?
It's not binary. China's market is more closed (or less open) than the US.
Namespaced packages have almost the same problem

People can just have maliciously typeo-d namespaces

Actually you could argue it's worse since people tend to pay more attention to package names rather then namespace names
Yes, you have lovely clean logs to audit
The phrase "fake it till you make it" is also bad programming. Variable names should be intention-revealing.
"could be tasked with the drudgery of intervening in naming disputes or managing an identity layer"

What do these have to do with the issue of namespaces?

Having namespaces would lessen naming disputes since users would be able to name their crate whatever. Any system will have disputes, so I'm not sure what the argument is here.

I understand why crates uses github for identity management, but it's not ideal that people are locked into using one specific git platform. Github is already an unavoidable entity, much like facebook, but this is a bit of a harder issue to solve without a lot more resources.
I wouldn't give anyone in management the title of engineer, just for the sake of clarity to external collaborators
Scaling, reliability, support, dialects and localisation, accessibility, edge cases, device support, security, moderation (not just moderators but moderation tools) infrastructure, research and exploration, monetization, commercialization. Basically everything no one in a startup thinks about for years if not more. And to that add the simple fact that as the team grows the per engineer productivity just has to drop due to communication overhead among other things.
There used to be a security app on my MIUI phone. Security apps can't do anything on android, because each app is sandboxed. But of course, it had full non-revocable permissions including physical sensors, precise location, contacts, camera and microphone.

I hope someone cracks open their 'security' app and controls every MIUI device, just for them to learn their lesson.
This is absolutely true, but in some ways this is more about reducing the number of 'attempted connections' in the sshd log. Meaning, any failed connection that is recorded (and ideally shipped off to a centralized log system) is in some way actionable. Opening up port 22 (with keys) will still create tonnes of alerts from any SIEM.

The other thing to consider is that there could be exploits in OpenSSH itself. There hasn't been a truly critical vulnerability in a very long time, but low severity or non RCE vulnerabilities aren't exactly rare: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=openssh
I currently work for a municipal government.

You can't change anything. You have to graft on top of it.
> 2. Even by 2016, pdfTeX had been largely superseded by LuaTeX.

Is that true? My experience was that pdftex is by far the most used one, but while thinking about it, I noticed I have zero data to back that up.
The author doesn’t understand the phrase “security by obscurity” and doesn’t know why we use that. He took the normally used phrase literally and ran with it.

The phrase is used to suggest developers shouldn’t think that obscuring something provides security. We don’t say not to obscure stuff. In fact all the examples in the articles are from what’s already used in products. So the security community uses the best available method to secure the given task/stack already.
Seems like people instinctively associate status with having control over other people. Maybe engineers could fight back by calling their programs cute names or putting hats on servers? Cloud computing is not helping though.
Show HN: How are you coping and staying healthy with the wildfires and smoke?
If a single company was putting up toll booths on every intersection AFTER selling those roads to the public, then yea, call me a communist but I don’t think that’s good for the economy.

Interestingly, in recent years such things have happened. In Chicago, the tolled Skyway has been leased to an Australian company. And all the city's parking meters have been sold to a Spanish company.
Ironically, one example is an app that was useful for detecting malware or other security problems:
https://www.sektioneins.de/en/blog/16-08-11-sysinfo-what-hap...
Open sourcing has to be done with the audience in mind. It generally doesn’t make sense to (publicly) open source a system that is idiosyncratic to a single organization. The only likely interested audience is hostile attackers. A useful general purpose dev tool though? Sure, and the people using it might be able to help.
I'll disagree - a lambda should be very short indeed[0] else just define it as a standard func with a descriptive name[1]. And python's lambdas regrettably single expression only, no statements, which can really limit things.

[0] My opinion

[1] Exception is where you use lambdas for passing to new control flow structures. Something you can't do with python, although python does finally have a way to do the same thing (I think htis, though I'm a bit rusty so maybe something newer https://www.novixys.com/blog/proper-cleanup-resources-python...)
You can fit more plastic-packaged product too. Still waiting for them to sell it in cubes though.
Do you also have an android app? What I'm asking I guess is not why do you need the AppStore when you are on iOS. But more why do you have to be on iOS in the first place?
Food waste isn’t a problem per se. If the farming is done sustainably, and distribution improved so people aren’t starving, I don’t see why we have to eliminate foods instead of just increasing their price and/or reducing availability to e.g. tier 1 cities.
That is the most compelling answer I've seen so far.
This happens to me sometimes with a work project. Typically the only way I can break the logjam is to just pull an all nighter, refuse to go to bed until it’s done.
Well, nor can Occam's Razor, but we don't seem to have a problem quoting that!

Occam's Razor is not an argument or explanation. It's a heuristic for discriminating among different arguments/explanations.

And anthropic arguments amount to "there isn't any explanation for the precise value of the fine structure constant!" Or "you should just give up trying to explain why it has the value it has!"