skysight-inc/HackerNews huggingface dataset:
Except the whole thing is about AI requesting special status as fair trial monitors and getting told no, so not really.
There was nothing enjoyable about ActiveX.
XSS Filter Evasion Cheat Sheet – OWASP
> to hide the name (identifier) Internet pages or site on the Internet I may be a bit rusty, but if it is forbidden to hide the URL of a web site, it does not forbid HTTPS.

(edit: I am wrong, thanks for the comments)
The EU has lots of tech, just less of the tech that's overvalued (like ad-tech, social networks, ride sharing systems). Perhaps the EU needs better PR so they can attract more investors.
GDP per capita doesn't nearly tell the story:

1. Much of the gap is due to former Eastern-bloc countries

2. 50 million of Americans live in horrid poverty

I guess it's hard to get the full picture when you get a cushy six-figure tech job in the Bay area.
OK, "essentially useless" was hyperbole. And when I wrote that I had Macs in mind more than iPhones (and Mac laptops in particular). But I will stand by the substance of my comment: Mac laptops have gotten a lot crappier in just about every way over the last 10 years.
An historian friend of mine called this a "thermidorian reaction." I had to look it up because of course I first thought of chemistry. Made me wonder if the US really is at risk for some kind of modern dictator or emperor.
Sometimes I look at Adobe's stock history in awe and then realize the only thing that has really changed over the years is that they moved from a license model to a SaaS model...so instead of paying a few hundred dollars for a Photoshop license you can use for life you get to pay $50/mo for a bundle forever.
I actually feel compelled to express an opinion regarding WoW classic:

It's a garbage money grab.

The idea that there is a huge nostalgia fueled demand for the original experience doesn't absolve a multi-billion dollar developer from a complete lack of support or quality of life improvements to the game.

There is just too much overlap with the fact that they can literally re-release a game with practically zero development costs.
Not the OP but I largely look for experience with CI/CD workflows and release management, unit/integration/systems testing that doesn't cripple R&D, QA, distributed systems beyond a webserver & DB, and just general "philosophy of software engineering" type stuff like an understanding of the factors that led to the evolution from monolith to microservice, agile/scrum/management fad of the week, and how to make tech tradeoffs based on business goals. These are largely soft skills, not algorithmic trivia.

Unfortunately, there's no one size fits all worksheet for those soft skills that HR can hand out to interviewers, so everyone gets lazy and falls back to the whiteboard BS.
I think that's possibly a bit cynical; 50 years ago the US competition regulators would probably have been taking a good hard look at the tech quasi-monopolies, but these days the EC is generally somewhat more aggressive on anti-monopoly/cartel stuff.
A new X.509 certificate chain validator for LibreSSL
> Adding obscurity to your existing security stack / layers improves your security.

In theory yes. In practice you are increasing the chance of someone else thinking "Oh this is secure I don't need to do that". I saw this very recently in several broadcasters all over the world - they have a broadcast server which comes with a well known default admin password for the webserver on port 80.

Several of these blocked port 80 externally, but allowed another port (7071), as it said to do so in the manual. They then didn't bother changing the password because "port 80 is blocked".

Had port 80 not been blocked they would have been more likely to think "Ooh I must change the password".

Now it's not good they didn't change it anyway, but your flat statement that "Adding obscurity to your existing security stack / layers improves your security" only applies if nothing else in your security stack changes.

I check port 22 on my public IP addresses to ensure that any servers are uptodate. Occasionally I'll find an out of date and yell at the department to fix it.

That's far better than blocking port 22, as they then listen on port 2222 or similar, and never update their ssh servers, and then when someone does stumble across it, nobody has a clue it's happened.

Never underestimate the ability for people to work around your "improved security" by introducing worse security problems
“Awe Walks” – For Just 15 Minutes Once a Week – Boost Emotional Well-Being
With Director of Growth at SignalFire VC, September 22, 9:00 Am (PST)
Thank you Sir
World’s top banks must stop funding factory farming to prevent future pandemics
I really want to do this too!

But a wife, two daughters and a mortgage… I love them more than my life, but think a lot about your life before you attach a millstone to your feet.
> It trumps favoritism, empire building, and intra-office rivalries.

Does it? I associate those things very strongly with endeavors that are primarily concerned with making money.
For a business, culture is made up of the behaviors that management reward. Most of the reward is money, immediate or deferred, and some of it is in accolades, social respect, and other forms of promotion.

The revenue model drives the behavior of the salespeople. If you sell small subscriptions, no individual customer is important but marketing is. If you sell multi-year service contracts that take six months to sign, your individual customers are important and the salespeople bringing them in are important.

If the company perceives that it is selling a high-value service, the development teams are important. When the company is selling a low-margin commodity, the people who can improve the cost structure are the heroes.
Thank you for articulating this comment. As I said before, I am really not a fan of some of Graham's out-there ideas, but actual archaeologists have been wrong time after time, and most people don't realize that it is not a hard science. This crowd of scientists (and their supporters) like to hand wave people like Graham away by labeling them with the "pseudo" moniker, as if nothing he says has any value. Throwing the baby with the bath water.
You fail to see the simple point Facebook's software runs on Facebook's computers. The four freedoms are not touched by that. People voluntarily use the services they provide.

Besides that, the four freedoms include the freedom to use the software (Facebook's proprietary software, after all, runs on top of free software) for anything the user seems fit, including serving poisoned cakes and make billions of dollars out of that.

I am not engaging with your argument because it doesn't make sense. Facebook (and Google, and Twitter, and Hacker News) are services provided to us. We don't have a natural right to inspect the source of their software because the license it's under doesn't give us that right. Would it be better if we could? That's unclear, since a lot of the behavior is tied to the data that is collected and we can't inspect more than the data we have the right to see (our own).
if they would just keep cranking out sequels at the same level of quality but no real innovation, I would be pretty happy. mass effect 1 was pretty good, me2 was great, me3 was still decent. why did they have to mess with the program for andromeda? similar with far cry. fc2 was great, but probably too unforgiving for the mainstream audience. they dumbed it down a bit for fc3, and fc4 was more of the same but with a couple pain points ironed out. then they had to mess everything up for fc5, why?

oddly enough, call of duty seems like a pretty good example of how to do a AAA franchise. they hit a winning formula with cod4, and they haven't really changed anything since. I'm not a huge fan of the series, but if you loved cod4, you'll love pretty much every game after that.

or an even better example: counterstrike. hardcore cs players will complain about subtle differences in the engine/hitboxes/netcode over time, but the core mechanics are exactly the same as in 1999. if it ain't broke...
Is the US allowed to extradite journalists? Yes or no.

Yes.

There is no process, other than the United States government's own procedures, that prevents the US from extraditing any of its citizens, journalists or otherwise, to other governments.
I've spent the last 3 years building the whole solution suite for 2FA banking devices. We have our own hardware devices with secure elements that use your computer as an internet proxy (connected via bluetooth low energy or USB). If you find a small company doing interesting work, your job looks very different than just writing configuration files. Especially when hardware is involved and the firmware is written in house.

From my experience, if you find a post startup small business with fewer than 10 developers, you end up wearing many hats. Both times I've been at large corporate jobs, though, it's exactly as you describe.
Steam has been good to me with their native Linux client, Linux client support, proton compatibility tools and community tool support (glorious eggroll proton version). Epic has nothing to offer me.

Furthermore, I know some gamedevs personally who release an early access level title with exclusivity deal on epic's playform just so that they gain access to further funding to finish the game and release on Steam for the actual shot at success. They take advantage of the money to fund their work, but have said that the numbers do not compare to that of Steam.
Ah ok, that explanation makes more sense. Since so many of the sites I use are web apps, I wouldn't be able to use a browser that doesn't support JS. But, having a JS sandbox that is content aware would be great.

I'm hoping that also solves the problem safari has where if I login to a site in one tab (in private mode), I can't open a second tab for that same site without having to login again. Chrome doesn't have that problem with incognito, but of course those cookies and local storage can be used for tracking across other sites then too.
I imagine if you set up a host with hundreds of ssh tarpits and just one slow SSH port, bots trying to crawl your site to figure out the SSH port would be minimal.

https://nullprogram.com/blog/2019/03/22/
You should have included a record field of the same name in both data types, since this is where the proposal really shines.

E.g. if both data types were to contain an "id" field then "taken.id" and "class.id" wouldn't result in a compilation error as it does now.
An AI driven command economy does not have to be perfect to outperform a free market. If an AI-driven command economy outperforms free markets, the free market dies, just as when self-driving cars become more cheaply insurable because they cause less insured loss, and stop entailing traffic enforcement costs, the human driven car dies.
Then your comment is purely hypothetical, apart from wrong.

Also, H1-B visas and others alike are non immigrant visas, so there are no “immigration rules” in play here.
Lolwut? Personal computers have definitely been around _longer_ than just 20 years. Maybe not 40, but it is ludicrous to suggest _less_ than 20 years.
After scrolling to the bottom and back up, Brave blocked 69 (nice) “ads and other creepy things”, on the phone. I honestly barely go to sites like this anymore.

Big media is just gross. The quality is dirt-poor, the business models are abusive, and as the Facebook era draws to a close and the money dries up, the production value is trash too. Ars is good in this category, but still bleh.
"The brightest minds of our generation are working on making people click ads".

Every time I hear this quote, I remember all the small businesses and ventures that only exist because of Instagram, Facebook and Google Ads. Housewives baking cakes, a leatherworker making custom backpacks, a blacksmith restoring antique knives - those are just personal friends of mine who wouldn't be able to build their businesses if not for what those brightest minds of our generation are doing.

Is all of this really worthless to you?

(Copied over my recent comment on this exact topic, I hope it's OK with the mods).
There are many counterpoints to what you say. Why is agriculture deemed important enough to regulate it so heavily but IT isnt? Listen ,EU is far too disjointed to have one single strategy but it does harmonize the market on any sector that has strong lobbyists. Those sectors are, sadly, old money. It does harmonize banks, construction, shipping, foods, cars. It allows tons of leeway on international companies to evade taxes on its many tax havens (monaco, lux, whatever) but it somehow seems to be sensitive only on IT profits .

That's because there's nobody to lobby for IT, which is ... well chicken and egg problem. EU should allow member-states to create a stable , easy framework for tech companies to operate in EU (like ireland , cyprus, increasingly bulgaria and other countries try to do) the same way Delaware does that for the US. IT is inherently a virtual sector, and it needs this kind of constructs, not Kafkaeque VAT rules and constant charges and arbitrary taxation. This is what turns away people to greener, or just more stable pastures

> EU still operates within the US' "Overton Window.

Sort of. the north does, but eastern / southernn countries have done significant openings to china because they needed investment. They are also the countries who host the cheapest and most dynamic tech workers (who are sadly often forced to work remotely for the US)
I'd definitely be happier being a fraudulent multi-millionaire.
True, the index and mutual fund part is pretty much useless. As is the calculation and market sanity

There is no equivalent of Reliance in Nasdaq or NYSE.

But if Value investing suits you, you can take up the books others have suggested and get profits

I used to be a value investor, but these days I'm not. I still look for good companies available for discount, but if it goes 10% up I immediately sell it.

Intelligent investor is good for this: you can decide what type of investor you are. That gives you an intellectual framework to work with stocks.

For eh, I bought ITC for 179 yesterday, it went down to 176 today, but I did not immediately freakout, I am holding to the stock coz it has value and company is financially strong and product wise very diverse.

I've already got some minor profit and dividend from ITC in the past.

Get the basics, follow a framework but also be aware that this is just luck in the end. You can't predict a stock market so if you think you can invest all money directly in stocks then its not a good idea

Some in stocks some in RD/FD (not option in US as interest rates are like 1% or so compared to our 5.5%. but let Modiji stay for another 5yrs and FD rates will probably go 0)

I'll say don't fall in the mutual fund trap. They're adverting it so heavily that I stopped even thinking about it.

As a quote goes: a man visited a Index fund manager's lavish boat. Excellent boat. But after the party he asked "where are the customer's yatchs?"

Indian MF/Index funds don't provide you a report asto where they r investing like Warren Buffet provides to his shareholders.

They're opaque and u hope to get returns. Nobody I know has actually got 30% or so returns.

Edit: sorry if I avoided pedantic I thought you are the one who asked the qn. I realise that you already know what I was trying to say.
At a minimum, spend some of my limited time and attention on this issue rather than the 100s of other things that might be clamoring for my time.
I see a lot of comments here from folks wishing they were working on something more fulfilling than a CRUD app. Maybe the problem isn’t what kind of software you work on, but what it means, and what it can help accomplish in the world.

Building easy to use software that solves real problems for real people is hard, regardless of whether it’s a CRUD app or something more exotic.

And building easy to use software that solves real problems for real people feels good and meaningful.

Those real people don’t know and don’t care about the difference between Rust, Clojure, or PHP, they just know that you’re making their life appreciably better.

Don’t find a new career. Go find work that actually carries meaning and worth for you.
Sometimes I wonder why everybody tries to get out of line, when instead it might be more useful, to keep some service on port 22 just to increase the cost for the botnet operators.

Does someone know it there is something like a super slow and super save sshd implementation which doesn't allow anybody to actually login?
i mean, we kind of can. 3blue1brown is amazing and popular. Dan Carlin and Hardcore History.

its just that the 7 sins always win hands down. even for someone who's aware of their corrupting influence.
This response is missing the author's point. There's a distinction between obscuring the methods and obscuring a parameter to those methods.

Security by obscurity, and in particular its negative connotation refers to obscuring methods. The reason it has a negative connotation is that the amount of work it takes to implement a secure system is high relative to the amount it takes to break it. By contrast, the amount of work needed to generate an RSA key, new port number, etc... is incredibly low relative to the amount of work it takes someone to break it.

Security by layers is important, but the article's point is that the ratio of effort to benefit for changing your port number is far far higher than the term "security by obscurity" generally implies.
Note that the root restriction isn’t strictly true any more: for example, on Linux you could grant the CAP_NET_BIND_SERVICE capability to a process and run it as a non-root user. If you have network services running as root just to be able to bind a low port, you could avoid that.

In the case of sshd, of course, it would also need permission to start sessions as another user.
It's likely not as common as it seems. Personally I only ever heard of some mythical software engineers from the US pursuing woodworking, but not from anywhere else. Maybe in the US it's a lucrative field and it's common for software engineers in the US to live in houses with plenty of space to do woodworking and where the products of woodworking might actually be useful, so it's something they can play with at home and consider a nice skill to have in case they get fed up with software industry.
The EU cannot create a tech sector like the other blocks because of the cultural barriers. There is no common language and no common media. That means you have to launch country by country, adapting product and marketing strategy for every country. Meanwhile, in the US it is easy to launch a simple product and market it to the entire country.

That means US companies are orders of magnitude easier to scale up to behemoths. In fact, if an EU tech company wants to grow really big, it is better off trying to conquer the US (like spotify).

There is no fix for this. Even if the EU managed to take away the many regulatory differences between member nations and created a funding source equal to silicon valley, and managed to keep the US tech giants at bay, the EU tech industry will never rival that of the US.

IMHO this is a good thing. Megacorporations are an economic antipattern. It is better to have a million small businesses serving their local market than a few giants covering the continent.
Carmack's Facebook Connect talk last week[1] sure made him sound very plugged into what's happening at Oculus. I was surprised, given that I, too, thought he had essentially left for AI research.

[1]: https://www.youtube.com/watch?v=sXmY26pOE-Y
Not to be an apologist for Tesla here, while Elon has made some pretty explicit statements here the ordering page for cars has always said "equipment capability" and pretty accurately described it was the required equipment for when the capability was available.

And yes, there is an implicit problem there where you can't definitively know this is all of the equipment you need until the capability is released, but I suspect Tesla would have provided any additional upgrades for free if and when they release "auto-drive."

I thought of it kind of like "cable ready" TVs (not that most people reading this would have heard of those :-)) that were TVs that could, in theory, use cable. However, the cable standard wasn't finalized and there was a chance that what came out in the standard would not be compatible with these TVs.
correct, Activision-Blizzard
Sounds a lot like wikileaks itself ;)
I understand that it could be built with libraries in some languages, but I think it would be neat for a low-level language with ecosystem wide support for call-stack context objects.
> takes only one insufficiently trained employee/intern for a potential breach

How? If they've leaked their key, why do you assume the port hasn't leaked too? On the other hand if they haven't leaked their key how would they get in?

Or are you allowing password authentication like it's 1999?
i find the contrary to be true, largely without exception. the boring useless stuff that no one wants to touch generally pays alot better.

work that I actualy care about is difficult to get paid for
>> My question is this: how long does the MAX have to be grounded before the costs of it not being service end up more than (1) the costs of recertifying pilots, and (2) the costs of making the other design changes that would be needed to certifying as a new type...

Not sure how long, but they passed that point a long time ago. From what I've read, one of the goals was to not require pilot training on the new plane, and that is already going to be required now.
Xbox Game Pass subscribers jump 50 percent to 15M in less than six months
In cash? Or loans with his stock as collateral? He was taking loans with his stock as collateral to buy more stock. I'm not sure he actually has any money at all once everything rinses out.
None indeed. But then how do you define the impact of a lifetime? If it's to be immediate, then politics is a far better choice than anything else.
Personally I feel like my personal moat over my friends and peers is a unique combination of my skills (hard and soft), combined with my experience and outlook on life. Even if someone desperately wanted to become "me" (god, I hope not) and even if I gave them an exact blueprint, it's not something that could easily be replicated. So, I'm a little doubtful of generic tips like these. My generic piece of advice: Collect a lot of different experiences, talk to a lot of people, try and fail at different things, and be honest with yourself, your strong-suits and your limitations.
Omfg, the hours I've wasted searching for netframework answers, and all the search results are netcore. Because search engines prefer newer, and nobody adds "framework" to their questions.
Services like that are typically called tarpits, for SSH you can use Endlessh:

https://github.com/skeeto/endlessh
Sounds hand-wavy. How is editorial independence measured?
Visakan is watching “Lawrence of Arabia” [twitter thread]
The trend is definitely moving away from many separate games and toward "living" games. Look at how many games these days end up just doing updates/DLCs over many years rather than releasing whole new versions of the game.

Look at Destiny, there was originally planned for Destiny 3, but now the plan is just to make Destiny 2 the only game for the next 10 years with constant content updates. Even now, Destiny 2 of today is a significantly different than Destiny 2 at release.

Microsoft/343 have indicated that "Halo: Infinite" is planned to be this way as well, a living game.

Even indie games like Astroneer and Don't Starve are going down this route of updating a single game over a long period of time.

I'm not sure if that should be considering "milking", but it's definitely a change from how things used to be done.
I didn't downvote, but

> in HTTPS the URL is in clear.

You can see the domain from a previous DNS query, but the URL requested is encrypted. Everything HTTP is encapsulated in TLS.