skysight-inc/HackerNews huggingface dataset:
> MD5 is known to be very insecure and you should never use it for real world password hashing. Instead, you would use SHA-512, SHA3 or another highly secure algorithm.

No, you should use a (poorly named) "password hashing algorithm" which has different security properties from normal cryptographic hash functions.

Later on they indicate that they're using PBKDF2-HMAC-SHA512, which is outdated and not as good as scrypt or bcrypt, both of which are offered in the pycryptodome library they're using. The only reason to use PBKDF2 is for backwards compatibility, or with systems that don't offer better (memory-hard or cache-hard) algorithms. The documentation even states "New applications and protocols should use scrypt or bcrypt instead."[1]

Hardly ultra-secure. They didn't even bother reading the docs of the crypto library they used.

[1] https://www.pycryptodome.org/en/latest/src/protocol/kdf.html
I strongly believe the flood myths we find from cultures around the globe is due to the end of the last ice-age and the influx of polar icecap meltwater[0] into the oceans during the incredible global climate catastrophe around that time[1]

[0] https://en.wikipedia.org/wiki/Meltwater_pulse_1A
[1] https://en.wikipedia.org/wiki/Younger_Dryas
While that is awful, I think the 'free ink for life' plan was just as sneaky in itself. Having bought a cheap HP inkjet printer recently, I was curious about the free ink plan. But it's a trick - you can't agree to the free ink, then just buy 3rd party ink when you want more. No, if you go over 15 pages a month, the IOT printer will automatically order you the ink and bill your account. Buying cheaper ink will just be a waste of ink because you won't be able to print with it without ordering more HP ink.

That is truly evil.
4.15Gbps Ethernet on the Raspberry Pi Compute Module 4
How to Leverage Holiday Email Greetings for B2B Sales [ with Examples]
Yes, except that I don't think that's niche. With darcs, I have a collection of patches available from developments/contributions, and a release is a set I'm happy with on top of the previous release tag. If one of them causes trouble during testing, it can typically just be removed from the set. (Obviously it doesn't always work that cleanly, but it typically does.) When happy, tag and release. It's a pleasant model that's straightforward enough for someone who's only been maintaining large projects since the early days of networked CVS.
It says quite clearly:

The reason some birth dates will display as 1/1/1800 is due to confidentiality reasons of the registered votes.
Usually this is for victims of domestic violence.

But I looked at the data [1], and there are other birth dates in the 1800s, not just 1/1/1800. This is weird, because the current oldest living person in the world (Kane Tanaka) was born in 1903.

[1] https://data.pa.gov/Government-Efficiency-Citizen-Engagement...
I would say, however, there is ample opportunity for infrastructure designers/engineers in the space, especially in a world where everyone is going "cloud" but cloud doesn't cut it in the most demanding applications, so those of us who love data center design are sort of loving the resurgence of onprem/Colo usage and the opportunities for pushing the envelop on data transfer/processing rates, etc. The skills and knowledge gained are very useful in other industries, with a side bonus of, if you pay attention, knowing a bit more about the "big picture" of AI than many of the phd's!
Totally. Another part of the metaphor I use is that messes are easier to clean right after you make them. Leave the pans for a week and cleaning things up is a real pain. Cleaning after the meal is done is easier. And easier still is to clean as much as possible as you cook.

And Anthony Bourdain has a nice related bit on how working clean reduces error and increases efficiency. From Kitchen Confidential:

Mise-en-place is the religion of all good line cooks. Do not fuck with a line cook’s ‘meez’ — meaning his setup, his carefully arranged supplies of sea salt, rough-cracked pepper, softened butter, cooking oil, wine, backups, and so on.

As a cook, your station, and its condition, its state of readiness, is an extension of your nervous system...

The universe is in order when your station is set up the way you like it: you know where to find everything with your eyes closed, everything you need during the course of the shift is at the ready at arm’s reach, your defenses are deployed.

If you let your mise-en-place run down, get dirty and disorganized, you’ll quickly find yourself spinning in place and calling for backup. I worked with a chef who used to step behind the line to a dirty cook’s station in the middle of a rush to explain why the offending cook was falling behind. He’d press his palm down on the cutting board, which was littered with peppercorns, spattered sauce, bits of parsley, bread crumbs and the usual flotsam and jetsam that accumulates quickly on a station if not constantly wiped away with a moist side towel. “You see this?” he’d inquire, raising his palm so that the cook could see the bits of dirt and scraps sticking to his chef’s palm. “That’s what the inside of your head looks like now.”

That is a very close analogy to coding for me. If I keep the code clean, the inside of my head can be clear, well-ordered, precise. And if it's a mess, I become a mess.
Hello, PyMC developer here. We're excited to give Theano a second life, and hope that this work will lend some staying power to the PyMC project in the probabilistic programming world.

As always, we're happy to accept to contributions! If you're looking to get involved, now is a great time. Please don't hesitate to speak up or reach out, either on the Theano-PyMC GitHub repo (https://github.com/pymc-devs/Theano-PyMC) or some other way (my website's in my bio).
I think this is more of a survivorship bias thing. If a bunch of companies write bad code and a few of them survive, so you work at those companies and see their bad code, it isn't necessarily true that permitting bad code enabled them to succeed. It may be that writing better code would've made them even more likely to succeed, but the advocates of better code were not able to make that case to stressed out management.

I've almost never seen a situation where intentionally bad code has helped even in the short term. Maybe bad code was the best that a particular engineer could do, and nobody else was available to do it, so that made it acceptable. But any engineer writing code less well than they are able to has never led to anything good in my experience.

Even in 45 minute interviews, if I take shortcuts, I usually end up creating more problems for myself than if I had just written code the right way in the first place.
There is a built-in self-limiting mechanism for this. As development level increases (and coincidentally the number of workers required decreases) so does human fertility. Birth rate in the US is 1.77, well below the replacement rate of 2.1; Canada is 1.5, Finland is 1.49, Japan is 1.43. The workers are disappearing peacefully already.
for the english-speaking and not hard-of-hearing part of the blind population, yes. And the english speaking part is a pretty small one.
RHEL 8.3: fapolicyd breaks system upgrade, leaving system in dead state
What if SSDs just had an alternative interface that talked SQL? Presumably you could bake SQLite into the microcontroller and optimize perfectly for the storage scenario. Having your journaling aware of how long your supercapacitor will last in the worst case could open the door for some wild optimizations.
Intel has a competitor to chiplets, called EMIB, based off its Altera purchase. EMIB is pretty cool, but has only been deployed in a small number of situations so far (There was a Xeon + FPGA chip Intel made. There was the hybrid Intel+AMD chip, and finally the new big.LITTLE clone chip that Intel merged an Icelake + Atom core together). I don't know why Intel hasn't invested more heavily into EMIB, Foveros, and other advanced-packaging technologies... but Intel is clearly working on it.

Intel can do it, they just haven't decided to do so yet. They have the tech for sure.

Its simply a matter of priorities. Its not so much that Intel "isn't" investing into it, its arguable that Intel just hasn't invested "enough" into it.

AMD went all in: they literally bet their entire company on advanced-packaging, with AMD GPUs using an active interposer with HBM2, and now Zen-chips taking a chiplet strategy. And to be fair: AMD had to do something drastic to turn the tide.

We're just at a point where AMD is finally reaping the benefits of a decision they made years ago.

--------

If I were to take a guess: Intel was too confident that they could solve 10nm / 7nm (or more specifically: EUV and/or quad patterning), which would have negated the need for advanced packaging.

AMD on the other hand, is fabless. They based their designs off of what TSMC was already delivering to Apple. Since TSMC leapfrogged Intel in technology, AMD can now benefit from TSMC (indirectly benefiting from from Apple's investments).

Intel's failure bubbled up from the fab level: Without 10nm chips, Intel was unable to keep up with TSMC's performance, and now AMD is advancing.

----

AMD's strategy just works really well for AMD. AMD is forced to keep buying chips from GloFo (which are limited to 14nm or 12nm designs). All of AMD's decisions just lined up marvelously: they fixed a lot of issues with their company by just properly making the right decisions in a lot of little, detailed ways. A happy marriage of tech + business decisions. I dunno if they can keep doing that, it almost feels lucky to me. But they're benefiting for sure.

AMD took something that seemed like a downside (the forced purchase of 12nm or 14nm chips, even when 7nm was available), and turned it into a benefit.
Is there enough incentive for Microsoft to add a root store to Edge by next September? How hard is it to make that addition?
What in your experience do the top N business schools teach that make managers form there able to manage engineers, that other business schools don't?
You've described what I would call a "rewrite", just one that was thoughtfully planned out. Another benefit is that you have the existing, running system, to use as test validation. If the new black box works exactly like the old black box, you're good. Of course you need to do a few things like go through an end-of-year with both systems to make sure you found any lingering differences.
Gpt3 generated post. Ignore
Area Under the ROC Curve and Integrals
why not the city and state you live in? The questions did exist 2500 years ago; When someone decided to leave their 'home' country, they stopped caring about the things they could not longer control. They focused on the community where they lived. Sounds A.) Stoic, and B.) common sense. Why did your partner move here if not in search of a better life? If you don't think you'll have a better life here than elsewhere than the answer to your question is you should move to NZ.
I found out that some get very touchy when you don't know what it represents. I was doing a joint training exercise that included brits and canadians, and one day they started wearing poppy pins. We asked them why they were wearing flower pins on their uniforms, and they reacted like we'd shit on a war memorial.
Let's not forget that four companies entered this latest race in process node tech and two failed. Intel's 10nm and GlobalFoundries 7nm.

This is high risk business. Unseen problems that come after pathfinding when big choices have been made may kill the success.
We do have volatileStorage: it’s `sessionStorage`

We do need better permanent storage.
Yup, and it’s been merged :-)
Oh boy. Someone high up in the WF foodchain didn't do their homework before deciding this policy. Wearing poppies in Canada is a big deal. Fun fact, Canada used to celebrate Thanksgiving the same date as America, but they pulled it 6 weeks forward so it wouldn't crowd the mourning period around Remembrance Day (Nov 11). That's just how serious Canada is about this particular holiday. Although an old hockey commentator got fired last year for ranting about how immigrants don't wear enough poppies, there's widespread support from every section of Canada about wearing poppies and in general paying some respect to the war effort around Remembrance Day. Outside of Don Cherry's rants though, people rarely make a political statement about it. It's just one of those things you do.
Hong Kong informers’ hotline receives 2,500 tip-offs within hours
Tech debt is a bad metaphor. Having lots of debt can be a smart business decision. The problem is usually engineers do a terrible job telling the story around why having lots of tech debt will cause problems. Usually if you've got non technical managers the best case is they've lived though it before and know.
How to Get a Job as an SDET (Or Any Other Job in Tech, Really)
Ask HN: How to fix expectations and set up path for life?
So, for the past few years, I've been struggling with depression. I am already taking care of my mental health doing therapy and taking prescripted meds for depression.

A few weeks ago, I had a depressive crisis where I couldn't do anything related to study/work and kept reflecting about life for a few days.

With help from my psychiatrist, I noticed I had set up impossibly high expectations for my life and because of that, everything I accomplished always felt like it was nothing or it felt like it was something already expected for me to accomplish. Because of that, much of what I do feels empty and does not give me pleasure.

I'm 26 and I'm finishing my Master's Degree, researching NLP, but it feels like there are not many jobs which I could work as a researcher where I live. I also don't feel prepared to move to another country to join a big company (I want to work at MS someday lol).

All of that makes me feel like what I am doing is for nothing and that it has no meaning. I also feel locked into a path which I don't enjoy much anymore. While I want to work as a researcher, to learn more and make use of all I've learned until now, I want to try other things related to computers.

It looks like I've been rambling for a while. I am not really sure what I wanted to accomplish writing this, but I think the main points are:
* How to fix my expectations to make accomplishments matter?
* While NLP is an interesting topic, it feels like there are not many opportunities where I live;
* I want to try new things besides Machine Learning, but I feel locked in this path already.
Maybe it's already implied, but I am not from the US.
An introduction to Webpack, and where it fits in with Node and NPM
No it's not. WebSQL would have become "WebSQLite", quirks and all. That's not good for anyone. Any quirks in SQLite (of which there are _many_) would immediately become unfixable parts of the spec.
It seems like a case of “commoditize your complement” to me. https://www.gwern.net/Complement

They offer a variety of enterprises services and can now capture more of the marginal consumer value relative to competitors still fighting for the cert issuing market.
you can change it system-wide... but there's a bug which means it constantly gets reset

the most annoying thing about the dialogs is if you type a filename in: instead of selecting the file with that name it starts doing a recursive search...

no-one has EVER wanted to do that
There isn't always an actual need to change a design, but people feeling that something "looks outdated" if it's not following current aesthetic trends is a real thing.

Somehow the Wikipedia design doesn't seem to be suffering from that. (And that's probably a good thing.)
E-mails should never be used as IDs (or logins), since they aren't case-sensitive…

(the domain part by the RFC, but the local part is often made case-insensitive (and more!) by the e-mail providers.)
What if misinformation and trolling is treated like a DDoS? How would we mitigate it?

In this analogy, our brains are servers and bad actors were stealing our attention.

Thoughts?
Everyone says Nintendo supports Vulkan. But that wasn't actually the case outside of marketing materials in the past, and nobody has confirmed that this has changed since.
Also: how a post at #28 on HN went to position <not in the top 500> in the time it took me to walk from my balcony to my desk.

https://i.imgur.com/OsBFDUX.png

Still available with search though: https://hn.algolia.com/?q=How+a+misleading+post+went+from+th...

> 8kun is a message board filled with extreme language and views. It's popular with far-right activists and believers in the QAnon conspiracy theory - a belief system which says that Trump is waging a secret war against satanic elitist paedophiles.

https://www.fallacyfiles.org/loadques.html

> A "loaded question", like a loaded gun, is a dangerous thing. A loaded question is a question with a false or questionable presupposition, and it is "loaded" with that presumption. The question "Have you stopped beating your wife?" presupposes that you have beaten your wife prior to its asking, as well as that you have a wife. If you are unmarried, or have never beaten your wife, then the question is loaded. Since this example is a yes/no question, there are only the following two direct answers:

> "Yes, I have stopped beating my wife", which entails "I was beating my wife."

> "No, I haven't stopped beating my wife", which entails "I am still beating my wife."

Propaganda...so easy, and yet so effective at shaping beliefs (even of intelligent people), especially when there is some truth to it (real, or established).

EDIT: looks like it's been taken care of for good now:

> [flagged] [dead] How a misleading post went from the fringes to Trump’s Twitter (bbc.com)

Funny how it disappeared from the top 500 before even being flagged. It will be interesting to see how many "dogs that didn't bark" there will be 1/3/6/12 months from now in the good ole US of A.

I guess now we'll see if my two admirers show up now that the post isn't accessible.

Reminder to self: some kind stranger gave me one upvote, so the usual -1 final score should be 0 this time.
Yes, and that's a serious problem. For a while, I had to use networks that I knew were monitored, so I automatically reached for TOR for some stuff, but no luck. Cloduflare beat me.
We've changed it now.

Submitters: please follow the site guideline about titles: "Please use the original title, unless it is misleading or linkbait; don't editorialize."

(Submitted title was "New US mortgages will include 0.5% “adverse market fee” starting Dec first")
It’s not unreasonable by the time you’re 30 or 40 that you have sufficient funds that the team or project is more important to you than a salary for a few years, especially since it’ll always be there later anyway.
I live in Europe ( Belgium) and that's bullshit.

My dad had to receive money from someone who couldn't repeat their debts and there was an intermediate party that came to talk about everything and propose a plan.
I think the point the author is trying to make is that "roguelike" is emphatically not actually a genre but describes both the development process and the end result, at least in the "traditional" sense.

In the same sense that some strongly distinguish "FOSS" from software which is just "open source" or just "free as in beer", I think Roguelikes to many people indicates not only the "style" of the game but both the development style and shared history of the game.

The "lowest common denominator" roguelikes like Angband, ToME, Nethack etc. are pretty dissimilar games, apart from some shared procedural generation and dungeon crawling aspects, but they all share either a literal or spiritual lineage to the original Rogue game, itself written as a kind of demo for the curses library in BSD UNIX.

Hack began life as a Rogue-clone written by a highschooler on the school's PDP-11, was rewritten a few times, eventually ended up becoming a collaborative effort on the "net". Angband is based on the gameplay of UMoria, a rewrite of Moria in C for Unix, itself originally a rogue clone for the VAX written in BASIC/Pascal/assembler because UNIX didn't exist for the VAX then and the developer missed playing Rogue from the PDP-11.

To some Roguelikes aren't just a "style of game" but a community that encompasses both playing, developing, distributing, and modifying the games. Many people have learned coding from making small modifications to Roguelikes , which are in turn modified by others, similar to game mods today.

Unlike most game mods, however, because of the open-source nature of "traditional" Roguelikes, they tend to be "forked" and released under new names as large monoliths, which can themselves be forked. Instead of the modern phenomena of installing 100+ mods to your favorite RPG, a developer would throw 100+ patches into Angband and call it YAngband, and then some other person would throw another 100+ patches and call it NeoYAngband.

I agree that at the end of the day being pedantic is pretty silly and people shouldn't lose sleep over something as silly as this, but I also think it'd be sad to forget about the community of "original" roguelikes and abandon the practice of kids picking up the last generation's game and forking it.

Thing is, that hasn't happened -- it's just that "games that mechanically resemble roguelikes" have become sort of mainstream, and the group of people who just want to play games and be done with it has grown much faster than the sort interested in the old way.
Can someone recommend good io style/roguelike games here?

I like starve.io for instance. I'm also open to non-browser platforms.
And I'm not sure that it actually has Vulkan support. Can confirm that OpenGL is at least technically supported.
You may be looking for a 3D rendering engine. There are lots of choices depending on your target platform, preferred programming language, license preferences, requirements for real time vs animation or image production, etc.
It's even worse than that.

Whenever Salima toasts bread, her toaster orders more Boulangism bread. Even if she toasts bread that she has bought or made herself, she cannot use the toaster without her paying for genuine Boulangism bread.
In b4 the technologists say electrification, water desalination, vertical farming, artificial meat, solar, and carbon capture will solve all our problems.
This was a direct result of Whole Foods banning pro-Black Lives Matter pins and buttons.

Many of those who are complaining about freedom of speech now were pretty quiet when the policy first rolled out.
They will care about who can make a defensible claim and defend it, on whatever real or made-up grounds. That will be 99% earthly politics and power projection and 1% space-to-space lasers for a long time to come.
> Do they Rob or murder?

Yes they do.
Have you ever parked on the streets of SF?
I second the people who say "get to know a neighborhood" and add "learn about the cooperative business model and use it to solve the communities needs".

There's a big food desert in south Atlanta, but a group of neighbors who were sick of not being able to buy healthy foods got together and are opening a co-op grocery for example. If the grocery does well, it builds wealth for the neighborhood (since they're all co-owners), and they fill a need that the community had to boot without some big corporate grocery coming in and refusing to stock fresh vegetables because it's not a wealthy neighborhood and they think they'll sell more packaged goods or whatever the case may be.

In another part of the city, we're trying to start a co-operative ISP because the only options are AT&T and Spectrum, both of which are garbage in my opinion and screw their customers over at every turn. Others are building community gardens, or greenspaces, etc. and when these things are built they do more than just fix the individual need, they help foster ownership which makes people less likely to litter, or smash mailboxes, or whatever problems the neighborhood has.