skysight-inc/HackerNews huggingface dataset:
We sell a product in the QA space and get to talk to a lot companies about this.* The pattern I see is that companies in the 1-10 employee range tend to have a QA process that comes about organically. You start out with zero customers so a bug doesn't really "cost" anything. As you get customers, the cost of a bug grows to a point where it makes sense to do manual test passes - maybe before a feature release, maybe after every deployment. Usually it's in a Google Doc or Google Sheet, and it's either one person running through the whole thing or a bunch of people divide-and-conquering it.

Eventually QA ends up being owned by either the Engineering team or a standalone QA team. I've seen both work, and both not work. Generally if it's not working for Engineering, it means they're not automating enough or the tests are flaky and they're just ignoring it. If the QA team approach is not working, they're probably overworked... Likely because the engineering org has deeper quality issues they need to fix, but they're trying to make up for it by throwing bodies at it in the QA org.

* We have a no-code test automation product that is used by both QA and Engineers: https://reflect.run
Reader is similar, but I wouldn't say equivalent, because only those things working in the Reader can use that environment. For example, when you have project A using project B using project C, you can't define a putStrLn such that project C can use it and be able to override its output stream from project A, while keeping B completely ignorant of that ability of putStrLn or that C even uses putStrLn.

Reader is like a middle-ground between dynamic-scoping and explicit passing of a context argument around as you would in a statically-scoped language.
> When the same IP gets passed to a dozen different studios who each create vastly different experiences, that's milking and I generally don't like it. The whole point of an IP is that you know what to expect, and having different studios working on the same IP is contrary to that goal.

I think a distinction is if the Publisher treats the individual development studies as functionally equivalent black boxes. With Activision's brutal management of Call of Duty as maybe the key example. Where CoD assigned studios often go bankrupt after a couple games, and several have spun off after great hardship and will presumably never work with Activision again given the choice.

One fun exception from the more "indy" side of things that comes to mind is the playfulness that resulted when Croteam and publisher Devolver let a bunch of indy developers play with the Serious Sam franchise and created some fun games in a variety of styles outside of the FPS the series is known for.
He means that tools have improved.
This is already happening. Look at how the Chromecast YouTube integration was handled, for instance...
I thought that is no longer the case and 3rd party web engines are now first class citizens on iOS. Firefox-iOS works great, for example.
As a QA myself, every project I've worked on except maybe one... has had good shared ownership of quality.

Maybe it's because we were embedded in the dev team.

Sorry you didn't experience the same thing.
They are elementary. They don't require advanced theory, but they require an extremely large breadth of mathematical knowledge or creative.
I guarantee that any engineer working on that product could get another equally well-compensated job which is not so morally bankrupt.
>So... Are you saying that moving your ssh port to a different address doesn't actually increase your security at all?

Having a quagmire next to your castle walls don't makes your walls harder to breach, just buys you more time until the enemy gets there.

It's not bad thing to have, but ... just don't build your walls lower and thinner next to the swamp.
What Would Quantum Internet Look Like?
The Case for WhatsApp as a “Super App”
> Only if you think that due diligence and actually collecting the repayments is inefficient.

I do think that! The due diligence you're describing is only necessary because the custodians can actually improperly handle the money. Embezzlement is a real thing in the traditional system.

Give smart contracts a few more years, and you're going to be more skeptical of the existing system of due diligence with custodians (which we know can be abused) when compared provably secure smart contracts (which we know can have bugs, but will eventually be stable).

If you think crypto is all a Ponzi scheme, you probably haven't been following it for the last couple of years.

Also if you think the traditional system is not a Ponzi scheme, you probably don't understand how it works.
Description !== Implementation
Ouch. You should raise this with your team / company.
I'm loving Annapurna Interactive, games like What Remains of Edith Finch and Outer Wilds have been amazing.
'What Remains of Edith Finch' feels like a (shorter) AAA title, no compromise in production values whatsoever.
I think you severely underestimate the piles of money Nintendo is sitting on if you don't think they'll make it to 2040. Sony is also big enough, diverse enough, and well-established enough that I doubt they would have trouble weathering one or two bad console generations back-to-back.

And let's not forget 2K, 505 Games, Chucklefish, Bandai Namco, Capcom, Deep Silver, Devolver Digital, EA, Epic Games, Focus Home, Gearbox, Koei Tecmo, Paradox, Sega, Stardock, Square Enix, Take-Two, Team17, THQ Nordic, Valve, Warner Bros, and hundreds of other publishers that I can't even begin to list here.

2040 is definitely too soon for the dystopian future you're talking about. Maybe 2042.
"Not exclusive to XBox" could just be PC as well.
Is the dragonfly logo somehow on a more general level related to spy stuff? It is not the first time I see it in a spy context and neither this or the other time it could be easily explained just because of dragonfly drones.
Layperson, but my intuition is the same. Also, as far as I understand it, phosphine is seen on other planets (gas giants?). If phosphine is seen on these planets, is it really a stretch to think anything but similar explanations?

Is there a TLDR for why we understand that phosphine can be on other planets without life but not on Venus without life?
Similarly, military and political practice don't define what is and isn't illegal in connection to launching and justifying wars, frequently and repeatedly killing innocents and journalists, setting up a highly illegal system of secret sites and covert armies explicitly for the purpose of abducting people globally (including random innocent members of the general public) and torturing and killing them, conspiring to lie about it all to the general public, then phoning up your cronies and launching a transparent international extra-legal persecution of someone who has embarrassed you.
The only part of Linux related to ML on GPU is PCI-E bus driver. The rest of it is proprietary NVidia stuff.

The part, that matters for users - GUI and gaming - barely supports what Windows did 5 years ago.
Just how many people do we need doing that job, anyway?
Who Were the First Americans?
I've had the SSH server for my host on a non-standard port for well over a decade now. My observations:

Back in the mid-2000's, botnets were small, the Internet was slower, and there was a lot of low-hanging fruit. Putting your SSH server on a non-standard port was a good way of reducing log clutter.

Today, though, it doesn't matter. I get as many login attempts on my non-standard ports as I see on hosts running SSH on port 22. This is because for at least the past few years, it has been feasible and indeed entirely commonplace to scan the whole IPv4 internet, 65k ports and all. Companies like Shodan and Censys sell access to detailed maps of basically everything on the routable Internet. There is no such thing as "hiding" a service on some little-used port anymore.

One can make the argument that attack surface is inversely proportional to security, so putting services on non-standard ports is in fact an increase in security. It's just that even back in the day, that increase was too small to seriously consider and today it's microscopic.
The Local Case for Reparations
previous discussion: https://news.ycombinator.com/item?id=2378110
Fantastic analogy. I leaving this comment so I can find it later.
I have just rolled off a react-native project. And a xamarin project. Both were real PITA's. Spent more time debugging than coding. And trying to bend the framework to look and feel native. Still not seeing the benefits of hybrid. We programmers like to trade one pain for another pain.

It's painful to learn native, but the trade is debugging across more platforms. And learning three mobile paradigms (hybrid, ios, and android). And the complexity of shoehorning this, to support native properly.

Quicker to develop using hybrid? Definitely an unrealized myth.

Just learn native. Been doing native and used every major hybrid solution since 2008.
> My question is this: how long does the MAX have to be grounded before the costs of it not being service end up more than (1) the costs of recertifying pilots, and (2) the costs of making the other design changes that would be needed to certifying as a new type under current rules and then getting it certified?

This was the gamble that management took. Hopefully, they still get their bonuses. (/s)
Pretty much the Brexit issue and how incompetent Labour have been lately.

When I was younger I definitely favoured Labour, but drifted towards Tory/Brexit party when Brexit happened. I don't particularly like giant power structures and want small government - Labour will never give me that. I also strongly identify with core conservative values, even if the Tories don't project them very well, I don't see an alternative.

Sibling comment is fairly on point.

TL;DR: "The least worst" party (imo).
It needs a math dictionary and grammer primer, and a lot of math knowledge.
This logic would render all national security reporting illegal. The job of national security reporters is to convince people in government to divulge information they're legally barred from divulging.
I think he is a good conversationalist and funny but a pretty bad interviewer. hes also largely an idiot (a fact he regularly admits), hes more goop salesmen than thought provoking journalist but i think that is what he wants.
Going where no scooter has gone before
YC Build Sprint – Our Metrics
I was curious to learn another data point here, I asked you directly about your personal threshold - the reference to military is valid for nations with active long term deployments (not valid for my own comparison).
I wonder if anyone at FAANG has figured out that they collectively employ over 1% of the developers in the US.

What they are trying to do is not just practically impossible, it is literally impossible.
> Look at Destiny, there was originally planned for Destiny 3, but now the plan is just to make Destiny 2 the only game for the next 10 years with constant content updates. Even now, Destiny 2 of today is a significantly different than Destiny 2 at release.

Destiny seems to have gone through a lot of different plans. The plan before Activision was seemingly to stop after 1 and make that the live service game, though the 1/2 break helped them hurdle a console generation gap so Activision might not have been wrong to push for 2 at least (but yeah was definitely trying to milk it with 3).
DNS Auth doesn't work with split-horizon DNS though, since the LE process will update the internal view instead of the external.

It sounds like you've put all your RRs in one flat zone visible internally ad externally but then that breaks device network portability, since mail.example.net on 10.x.x.x won't be reachable once outside the internal network

ACME and LE were really developed without an understanding of how certs work in the IT World. They were developed by folks who spin up a service on AWS and think that's how the world works.
It ropes you into that ecosystem and that ecosystem only. Most consumer/web tech companies won't understand a resume that's just "I did a thing, can't talk about it".
Abandon smartphones, everything about them is centered around selling your behavior. If you actually want a handheld computer get a pinephone.
How do you define competency? Games sold, aggregate review score, or some other arbitrary metric that you're using to gatekeep on game quality?
> This isn't dynamic scoping; this is just a global variable with a stack of values.

I don't know what you think dynamic scoping is? Because 'global variable with a stack of values' is what it is.
Text RBG to 50409 to request your senators wait to appoint a new supreme court
Text RBG to 50409 to send a pre-written email to your senators requesting that they wait until after the election to appoint a new Supreme Court justice.
It doesn’t, you aren’t compelled to use Signal, I care that the clients I’m talking to are conform to the spec and don’t expose myself to side channel attacks (e.g. previewing content directly from the client)
Maybe Microsoft should give this whole thing a reboot. After many years working with .net but not following it closely last 2-4 years I'm hopelessly lost what's going on....
I dislike this kind of analysis, because it really rests on an unsupported point:

"The encrappification of America dates back centuries. While there were, undoubtedly, once village blacksmiths who forged brittle nails, farm women who adulterated their butter, and tailors who cut corners, these were the exceptions. Most things were made by skilled and reputable hands working with good intentions, supplying the needs of people within local communities. "

That's a tremendous assertion to make, and it's more about the author's particular view of an ideal past than anything. Golden Age thinking tends to assume people were better in the past in some way, as opposed to being like us but just with different challenges to face. It's not really responsible to keep that premise unexamined.
The shop can correlate all of your purchases (down to individual items) into a single purchaser profile tied to your credit card number -- basically the same as if you used a loyalty card with all of your purchases. If they can ever gain the ability to link a credit card with an identity, (say, via a credit card purchase that uses your loyalty card) then they can link multiple credit card profiles together.

In terms of data flow, it mostly goes the other way. It allows the shops to sell this data about you to others. Your credit card company does this, of course, but the only "direct" visibility they get is to the establishment. "In an average month, _trampeltier spends $x at grocery stores, $y at liquor stores, $z at tobacco shops", etc. They don't learn the actual itemized purchases without cooperation from shops (who of course have this data). Though I wouldn't be surprised if that was built into credit card processing agreements at this point, who knows.
I could see technical questions being asked about Apple Silicon, and other hardware considerations
Be that as it may, a team that would have shitty code with QA will likely have shittier code if you fire QA. Case Study: Windows 10.

That said, an understaffed QA team can be really helpful. Not enough people means you can't ship garbage and expect QA to catch it; they'll catch many things, but not everything. Not enough people also encourages efficiency in testing --- test the most important stuff well, test the other things opportunistically.

A QA team also can really help turn customer problem reports into actionable bug reports.
That's true, we're the bottleneck now.. and also society got the brakes off on the web. Computing is now a double edged sword instead of a fun tool.

I'm not sure AR/VR will make a big diff but time will tell.
I can list some good qualities I love about Ruby, but I don't know if that's gonna be a great answer. It just clicked with me and analysing it too much is futile. Kinda like analysing why you love your friends is futile: sure, you can list some good qualities. But you could also list good qualities of people who aren't your best friends.
It just so happens sometimes a person or a tool clicks with you, it's being in the right place at the right time with this tool.
I can see why C# or Python make sense for people. But they haven't clicked with me so they're not my friends. We have no history together.

Now I'm not saying you can't ever grow out of your friends (or languages), I just haven't outgrew Ruby.
I have 4 kids ages 5 and under, and 1 dog. Honestly the dog is in the ballpark of being as hard to manage as one of the kids.
Heck, keep them around when they do expire. I'm sure effectiveness starts to drop off at some age, but it's probably longer than 10 years. And I would sure rather have an expired mask than no mask at all.
Should be fixed now. This was an old bug related to filter pushdown into scans. The demo now runs the latest version of the system. Thanks again for the report!
I'm honestly considering doing the same thing. I love my MBP 2012 but it's replacement is really expensive - and if I want to upgrade my capabilities (I have a quad core i7, 16 GB RAM and 512GB SSD) then even more so. I'm considering building a desktop (something I haven't done since the 90's!) and running Ubuntu Studio on it (music & photography are my creative outlets). I found this great site, pcpartpicker.com, that makes it really easy to look at all the parts you need to build your desktop. Between that and an iPad I think I'll be good to go.
For my podcast transcripts I use Sonix.ai. I don't know if this is exactly what you're looking for, but it's worked great for me. I upload the file, it does the transcription with some pretty decent accuracy.

It's 22/month and 5/hour of transcription.
To make the expense make more sense lol
Good grief, what is Boeing, the mafia? "Nice airplane ya got there. Should would hate for something to happen to it."
Extension idea: A chrome or firefox extension that allows me to automatically choose the minimum cookie settings for most websites that use a standardised “consent solution”. I.e. if it is a consent solution by quantcast it automatically opt-outs of all cookies.

does anybody know whether this already exists?
Acne+No+More+(Optin+Page)
No, it's like saying the best athletes of our generation use their gifts to get people to buy stuff. That's how they make their money, but ultimately it's not what they spend their gifts doing. They work to be at the top of their sport and other people figure out how to make money on that.
The parent comment is more right than not: end-systems in fact don't perform DNSSEC validation, but rather rely on their DNS servers to do it for them. On the network path between an end-system and its DNS server, no cryptography is deployed to protect DNS records; rather, a single bit in the header signals to DNS resolvers that some DNSSEC validation has been performed, somewhere. Along that network path, any middlebox can tamper with the DNS.

It's not an academic concern, because the two most common modes of deployment for DNS are "with ISP DNS servers", in which case one of your most important and active DNS adversaries is on-path, and "with services like 8.8.8.8", in which case the whole Internet is between you and the thing that validated DNSSEC for you.

It's not a good system, and it's true that DoH does a better job at addressing this problem.
While "Culture Eats Strategy for Breakfast" -- https://culturematters.com/culture-eats-strategy-for-breakfa... -- it's possible to have an awesome culture and an unprofitable business. As long as you make enough to be a going concern then culture trumps anything that would lead to a short-term gain in revenue which jeopardizes the culture of the organization.
> These 300 users are essentially a threat to the company because they often click on anything they get per mail.

I agree, but I have to mention as well that in general all teams (not only IT) got reductions of budgets and amount of employees and in the end everybody is very stressed most of the time, which in turn makes everybody pay less attention to what they're doing.

In my case (IT) last year I received an email with the title "ACTION REQUIRED" and I just blindly opened it and clicked on the link of the document which I was supposed to fill out, and (luckily) it was just a well-crafted internal test related to phishing (which then of course I failed => I then had to take an online course) - in my opinion the problem is that nowadays we're permanently under pressure to deliver/react/do stuff with very short lead times and it's therefore hard after a while not to start to unwillingly forget best practices related to security.

This year the company I'm working for has started as well to use quite often external companies (websites) to provide some services => doing that makes identifying phishing emails even more difficult for me.
I think just as likely, governments use this information to try to elicit responses to various stimuli. They treat voters as consumers and consumers as animals that they can train to react via various kinds of repetition and rewards. More granular data allows them to be more precise in these marketing and behavioral manipulation methods.
A unity build gives some of the same build time benefits as zapcc for full rebuilds, but requires more work and compromises in code structure, and also increases your single-file incremental build time. If you're already using a unity build then I'd expect zapcc to not speed up full builds much if at all.

I'd be interested to see if zapcc could speed up your non-unity build to be close to your unity build, without requiring the same compromises. I'd also be interested to see if zapcc would speed up single-file incremental builds in your unity build.

Ultimately I can't recommend zapcc for general use as it's a fork of clang that's not being regularly rebased anymore, so it's getting out of date. That's why I wish someone would pick it up again.
Failure detection on Orchestrator (MySQL replication topology management)
Ads aside, when an article is written specifically about a rare video/audio that has been released, I expect it to be right at the top and clearly visible. Even with ad-block, you have to get past a long intro and dig for that single word link in the middle of the article to get to the audio.
Hey, while you are reshooting the pictures, have a look at David Hobby's material over at Strobist [0], especially the lighting 101 series [1]. Hope you find them as helpful as I did!

[0] https://strobist.blogspot.com/
[1] https://strobist.blogspot.com/2006/03/lighting-101.html