skysight-inc/HackerNews huggingface dataset:
My theory is that the big firms can do this because those relatively fixed lob or costs over huge user bases. Smaller companies just don’t have the leverage.

I also think this applies to internal applications at huge enterprises. The number of users for any given internal application is small, so you can’t spread the development costs out very far. You have to connect the initiative to something that impacts the whole firm, the whole customer base to really invest in it. Even then you’re dealing with a user base that is way smaller than the big tech firms enjoy, so you still get outspent... unless you have dramatically better margins.
The author of tool did a really nice tutorial on doing bug bounty recon using Linux in which he also used Gron: https://youtu.be/l8iXMgk2nnY?t=1335
I think this is saying that arrays are immutable at runtime and the bounds of the array are checked on compile.

By doing this, loops can be checked before execution to prevent infinite loops and so constrain that as a Turing Machine construct.

I think the underlying good idea here is that Turing Completeness is maybe overrated. You could argue that most good programming languages are good because of what they don't let you do - constraints around how state is mutated is core to Object-oriented and functional programming. Adding some more constraints to ensure complete and reliable static analysis sounds like an excellent idea to me.
You are correct about the fire bombing. But the "effects" of the atomic bombs were fantastic -- ended the war in about a week when the fire bombing didn't.

So, what happened? One answer is that the atomic bombs were dramatic enough to shift the balance of political power in Japan.

Yes, generally it is believed that just before the atomic bombs, Japan was defeated, knew they were defeated, were out of oil with no chance of getting more, short of food, etc. and were interested in negotiations to end the war. It appears that then the US insisted on something really simple, definite, final, humiliating, etc. -- "unconditional surrender". In the end Japan did get to keep their emperor which was good for the US since it meant that the US occupation of Japan was easier -- just work with the emperor instead of civil war in the streets.

Drama or not, the atomic bomb was darned scary -- one bomb, one airplane, one city, and the fire bombing was not nearly that powerful, that is, required lots of airplanes.

I don't know how many bombs the US had ready then, but Japan could fear that the US could destroy a city a day, including Tokyo.

But this is a bit off the subject: If you don't like the atomic physics, math for the critical mass calculation, the shaped charges, etc., then pick GPS, radar, penicillin, the SR-71, and the transistor as examples of where wildly successful projects were based on science, math, and engineering, proposed just on paper, and could be and were accurately evaluated and funded just from the paper.

And whatever Japan's response was to the atomic bombs, the bombs do illustrate one of my points -- they were evaluated, justified, and funded just from paper and worked as predicted.

Also notice that the US has lots of long range missiles with warheads based on nuclear fission and fusion but not based on the firebombs.
I love gitlab-ci for this exact reason: you're not vendor-locked-in in any way. Running out of credits ? Just run your own gitlab-runner.
As a user-facing program it literally doesn't matter, it's only a political issue. You install it and you use it. The problem is if you're scared of the presence of GPLv3 for no reason.
Hành trình để trở thành một sư kê đượC tôn trọng trong giớI đá gà
Rails autoloading – now it works, and how
Security isn't all or nothing, though.
It is up to the person responding to take your message as they will. Reaching out and attempting to align with the party you are contacting is being vulnerable and has no guarantee of a favorable response - or one at all. However, that is something in itself that may either characterize the individual or could simply be a reflection of what they are currently going through. Some knowledge of this can be baked into the initial message to imply understanding of that person's situation in life, mental state, interests, etc. It is more difficult to connect with someone whose point of view you are oblivious to.
You make sure all operations on lists and arrays terminate. For instance by requiring the user to annotate where progress is being made on the bounded array.
i dont know! but they do it, everyone does it because everyone else does it. it s not unusual
I like both languages. In my mind they fill different niches:

- Rust is a better C++

- Go is a better Python

YMMV.

Some will argue we don't need a better Python or Go isn't a better Python. These are both entirely reasonable positions. My take is:

1. Go is statically typed (even with an interface{} catch-all and no generics; which honestly I personally don't really care about but I understand if you do; it's certainly no worse than the Python equivalent).

2. Python still has the issue of requiring it to be installed as well as the compatibility of that installed environment (ie what virtualenv does). Java has this issue too. Standalone executables are just more convenient;

3. Loading your runtime environment has a greater cost in Python;

4. I actually don't like where Python 3 has gone where almost every point release at this point seems to add to the language itself. Python 3 really was a change in philosophy vs Python 2.
Based on the title I expected to be more offended. But it seems like a reasonable percentage to encourage wage equality.
What goes wrong if I don't do that?
You do not have to force yourself to use the language. It's a stressful, uncomfortable and not particularly efficient way of studying a language, especially for introverts. Some polyglots study this way, some do not - it's absolutely not a necessity. Some polyglots go by the motto: "if you can understand the spoken language, and you're able to write in it, then you're able to speak in it, too".

There is no shortcut to learning a new language - even if you're fluent in 9 languages, the 10th will still take 1000+ hours. The most efficient way appears to be a loop of listening and drilling vocabulary, particularly listening to excerpts that come with text transcription.
With languages as complex as modern C++, I always tend to hunt for a subset of features that makes me happy and productive, and effectively discard the rest. Compared to that, I think there is relatively little in Go that one may want to disregard, and I'd argue it's due to the fact that it's a relatively tight featureset with practicality in mind, and is therefore easy to learn. With Rust, I'd say the experience is more subjective, but it's still not as sprawling as C++.

I know it's an unpopular opinion, but I believe personal fit in a programming language is just as important as its fitness for a purpose. I always like to check out new languages and features, but in the end I'm very likely to stick with what feels productive for me personally. If that means dropping half of a language's features, I'll do that, too. Chasing "modernity" or buzzword fads is a recipe for unhappiness in my opinion.

If C++ (modern or reduced) feels good and productive to you, I'd say there is nothing wrong in sticking with it.
I'm afraid I may not have worded my original comment well. I was not making demands, I am thankful for the tools I have and use, I do demonstrate that by donating to open source projects as much and as often as I can (but thank you for providing the link to encourage others), and I too as a software engineer contribute my time to such projects, for free, and without want nor need of thanks, but simply to know that my work is making a user's life easier somehow.

It was not my intention to appear to be making demands, I was genuinely asking why deprecate the tool without a replacement. It seems there was a misunderstanding on my part, it is in fact the protocol being deprecated, contrary to how the majority of the article makes the point appear.

As a software engineer, I too have users, and deprecating a simple, functional and easy to use tool is not something I would do without expecting a response, or for them to ask questions about how reasonable that is, whether they pay me or not. Expecting them to use a more inconvenient solution is something we should avoid as software engineers, and instead aim to make their life easier, whether they pay us or not.

I have no issues with switching tools. I have embraced systemd, iproute2, ss and others. Deprecating scp as a tool/syntax, to me, seems more fundamental.
I'd expect no less of a response than if we were to be told that "cp" itself was being deprecated in favour of something which may or may not offer a similar syntax, may require more thought to use and may or may not be available under certain conditions.
It means that for example Mac OS or Windows will not bundle it by default.
I stop reading after "Linkedin profile *" requirement. Anything that require that sounds like scam.

Lindedin = Scam.
Transactional email providers for indie businesses
I'd suggest Basilisk II and emulate the mac in that. This would also let you use modern hardware. Especially useful when copying / porting to something more modern.
As the article I linked states, if not sold directly, "pricing" (for figuring royalties) is according to the street value if they did sell them packaged up and these cores match up somewhere between A35 and A53.
This article appeals to so many results in complexity theory but can anybody tell me if they are valid? I did pass a basic course in theory of computation but can't verify these myself.
No, that's trademarks, you need to enforce them.
Author explains the state of documentation / mentions name change:

There’s a frightening amount of stuff to write, and it will take me a while to explain everything.
My current plan is, I’m actually releasing it as I’m writing this answer. There is almost no documentation, but I’ll write it one page at a time in the next few days. I’ll also write a blog post tomorrow to explain what I’ve been doing.
Oh, and after talking to Florent, we have finally decided to change the name. More on that in my blog post tomorrow.

https://discourse.pijul.org/t/is-this-project-still-active-y...
Uh... please no, it requires double the clicks/time to solve it. I just tried it: reCaptcha 5 clicks, hCaptcha 10-12 clicks
Premium-Rate Phone Fraudsters Hack VoIP Servers of 1200 Companies
Well, this one might be...

It is very often the case that a hypothesis is suggested by our partial knowledge, and in those cases, it would seem paradoxical to put it aside and set off on a random search for whatever.

Many of the problems outlined here seem to arise from attempting to force a hypothesis where there are no clear candidates.
Because they are scared of the presence of GPLv3 for no reason. Still a good point. Mac OS also doesn't ship modern GCC or Bash, so they are pretty much at war with reality at this point - or rather - creating their own ecosystem.
No, "sildur" was correct that the "sftp" protocol is not better than the "scp" protocol.

Another poster described in detail the problems with the "scp" and "sftp" protocols. They have different advantages and disadvantages and neither of them can be considered a good file copy protocol.
Looks really interesting. Unable to find a "Buy" button though, which is weird.
Ask HN: How Does SaleQL Work?
I have been using salesql for some time. It seems to find personal email addresses of linkedin profiles that I visit. Most often even their mobile numbers. That just can't be guessing it.

I have tried searching the detected email address with "me@example.com" in google and there seems to be no result to it. So evidently it isn't some advanced data searching either. Any idea?
I feel your pain. Google is cancer for the web. And it should be illegal for sites to require third-parties you want no business with, at the very least for public or utility sites.
Or maybe the court that the RIAA thinks will ultimately hear any related cases just had a conservative judge confirmed that they think will be sympathetic to them.
That's true, but I'd imagine a company like Western Digital has those patents and cross licensing agreements.
I don't mean to criticise your work or be the typical nitpicking HN commenter that you see downvoted all the way to the bottom of the comments page. After all, it's your own digital world and you should feel you have total freedom to build it in whatever way suits you. Don't feel you have to conform to the conventions on your own private space.

As for bouncing people: if the content comes from the right type of a person, I'm willing to jump through some hoops to explore what they have to say. Not everyone does, but to me, the content is its own reward for persistence. Unique, personal spaces that someone chose to share fascinate me, so I like to have a look around when I discover one, just to see what they are like.

Having this fully downloadable for offline use and interaction is also brilliant. I want to be able to work with everything I have even when offline for extended periods of time, so this is also an aspect I value for whatever solution I use.
Rad E-Commerce Websites
> missing -3 support, it will not work if the server does not run sftp subsystem

Eh.

Seems like a half-assed solution for a non-problem, that will simply break stuff, remove functionality, and increase attack space for no benefit. If you need sftp, use sftp.
I'm interested to hear more about why changing syntax is such a huge deal in this particular space.

Computer security evolves over time, and we have to cope with APIs and workflows which change to keep pace. Nothing supports SSLv1 anymore. Telnet is (largely) a thing of the past. Yes these migrations can be painful, and place some burden on users to change their practices. I get that there are a large number of scripts out there which may need to be adapted to work in this new world - but how is that different to any API change? Major breaking changes like this are rare, because the cost to users is high, but even so I don't recall seeing this insistence that things must _never_ change in, for example, glibc.
Good morning HN!

Let me present you the side project I have been working on for the past two weeks :)

It is a place where you can share your side projects, even before they have a shiny UI or marketing videos, and when you don’t feel ready to post them on Product Hunt yet. In other words: a mix of Product Hunt, Show HN, and /r/SideProject.

What do you think?
sftp-server is linked into sshd since 2008.[1]

How do you know it's less popular? It seems like every non embedded distro enables it. OpenSSH linked sftp-server into sshd because SFTP only configurations were popular.

[1] https://www.openssh.com/txt/release-4.9
Appears to be from 2001, but still a nice read. Perhaps add year to the parent title?
I use Rust and Go.

I think missing from this is a discussion about which projects might be more enjoyable to write in Go or Rust.

Nearly all the automation and web services I do is in Go. In Go it's easy to pull in libraries to work with other services. Everything from pushing Route 53 changes to making automated changes to HTML documents in a web server. Build pipelines that require orchestrating other processes. Development servers.

I sometimes reach for Rust when there's some more intense central algorithm or data structure I want to work with. This could be something like image manipulation or writing a compiler or parser. Writing a parser in Rust is a joy.

I'm going to make an unfair generalization: Go is more likely to get the job done, Rust is more likely to do the job well. Just my feelings on the matter.

As an illustration... if you are spawning a process, you don't really care about how efficient you are constructing the strings for the argument list. If you are writing a compiler, you do care about how efficient your string manipulation is.
There must be some marketing handbook somewhere that says "When the customer asks if you have this model in blue, you must never say 'No.' Instead, always say 'We have it in red, green, orange, and seafoam violet.'"

Drives me nuts, but all companies do this rather than giving a direct answer.
Listy · The things you love, privately saved and beautifully listed
I also have a single node 'cluster' for the more bulkier (diskio) stuff that won't fit the raspi's. And it's nice to have the same API accross all my setups. Apart from the data (backups, photos, media, etc) that is stored on the disk there is nothing of state worth saving on the node. If my root disk crashes, I just install K3s again and apply all configurations from the yaml files on my workstation and K3s pull everything back up as it was before.

As you said Linux does offer standardized packages, but they are not applications/deployments. To get them running, beyond installing the binary, still requires a lot of configuration. Nginx (proxy, tls), a database maybe, storage/LVM, firewall, etc. So you quickly run into tools like Puppet and Ansible to manage this. The disadvantage is that they don't reverse the changes they make. So if you want to try something out and deploy it with Ansible, there is no easy trivial way to undo it except for reverting all the changes individually. Also there is always the tempation to quickly tweak something by hand, forgetting to commit it to CM.

With a system like K8s, everything (container, volume, ingress) is a declarative configuration and the 'system' works to converge to the state you declared. If you delete something, K8s will revert all changes. So there will be no lingering state or configuration left. Making everything way more managable imho.
MS's Cloud PC: Leak reveals new details on upcoming Azure-powered remote desktop
An Underappreciated Danger of the New Space Age: Global Air Pollution
I have never been able to get basic auth to work with apache/mod_wsgi/django. Someone somewhere is stripping out the header.
To be effective, a US president needs to be a consensus-builder and compromise-broker.

I think Trump doesn't even know what those words mean.
More fun: https://musescore.com/groups/improving-musescore-com/discuss...

Composers don't have an option to assert their own copyright, and musescore.com declares that their work is "PD". It could be seen as uploading to musescore is an implicit grant of PD status.
Which is the exact reason they paid a billion dollars to acquire it.
What does Cortes have to do with their practice of human sacrifice?
I agree that the Leningrad siege was a terrible suffering for everyone inside the city, no question about it.

I'm not sure though what Finland could have done otherwise; if they had not been where they were, Leningrad would have received shelling from all sides, and like you say, the city would have been under siege anyway - possibly with worse consequences, since the Lake Ladoga route would've likely been cut then as well.

Actively resisting the Germans in their aspirations was not feasible, as Finland needed the German military muscle to repel Soviets then and in the years to come.

So, Finland could not not be there, and if Finland had not been passive, then the only option available would have been to actively contribute to the siege and fire at an innocent civilian population. I'm not saying the decision to avoid this was because of moral or ethical concerns; the reason was probably more mundanely a lack of material. Artillery shells and bullets were best reserved for soldiers and not starving civilians in a strategically uninteresting city.

A side note about the "Nazi alignment": if that taints Finns, then it should, strangely enough, taint Russians as well; even the Soviets aligned with Nazi Germany. The secret clause of the Molotov-Ribbentrop pact divided Europe to Soviet and German spheres of influence. Then, soon after the pact was signed, Poland took the first hit in 1939 with attacks by both Nazi Germany and Soviet Russia. And weirdly enough there was even a joint Nazi-Soviet military parade in Brest-Litovsk.
Those high salaries though arguably just allow people to build nest eggs to go the startup route whenever they want.

The real challenge is that, rationally, startups an extremely large gamble on a lottery where your expected value is < 0. Most startups fail or take too long to get acquired and, unless you’re a founder/invested, you’re not seeing the really big amounts that make it really worth it (and sometimes even then). Fundamentally the challenge is that as a regular employee (even early) your stake is too small. I think startups can attract talent more easily by taking the salary disparity and matching it with stock (ie if you’re making 300k and the startup is paying 150k, for the first few years the startup should treat you like you’re investing at least 100k into the company because that is what you’re doing with your time).

As an anecdote, I have a friend who was working at a startup that got acquired by Google recently (he’s a Staff SWE so he’s making really good salary). He noted if he had just stayed at Google instead of working at a few startups over the years he would have been at least break-even or better based on salary + google RSU performance over that time. My personal experience with startups was a bit different. While the acquisition I went through was larger for me at the time, the biggest impact was that it pushed me into a far higher salary band. Startups and smaller companies can be a better way to “level up” some times than the traditional corporate ladder climbing.
Another 5th gen and upgrade the storage to 500gb ?
Stipa-Caproni
Election workers aren't hired by the parties, if they're hired at all it's through the state or municipality. Most of the time they're volunteers.

They're completely different thing.
Run by this chap: https://en.wikipedia.org/wiki/Gary_Gensler

Now he seems very qualified in many ways, but his current trajectory seems to be pushing various AI & blockchain technologies which to my mind do not define what the term FinTech means. Not least because my experience of a lot of AI in fintech is that it is gibberish designed to make investors salivate who have been hoodwinked by market analysis propaganda

The course does seem to have some nice contextual placing of these technologies in the context of existing practices etc vis a vis blockchain.

The AI sections seem to be little more than relating the terminology
Utility vs. Usability
"Rsyncing the directory itself" means making a copy of the directory node (the root of the tree) and naming it with the original name in the new location. That is different than taking the children of the source directory and copying them into the new location.

Scp and cp have the same semantics, so cp is vulberable to this gotcha as well. Rsync doesn't have to be used with remote sources or targets (nor does scp).
Ask HN: Anyone making money with online courses?
I have spent the past couple of years trying to build and launch products (yeah, the "Indie Hacker" path) and never made a single dollar. Recently I've been considering building online courses focused on the technologies I already know and work with. I worked with teaching before getting into software, so I know a thing or two.

- Are you building educational content on the web? (courses, 1:1 lessons, e-books, anything)

- How do you publish/sell your product? (YouTube, Fiverr, Udemy, Gumroad?)

- General advice for people looking to start?
How to Be Expert on Fin-Tech Apps? Documentation Guide