skysight-inc/HackerNews huggingface dataset:
Jaleesa Garland moved to Tulsa in October, decamping from Berkeley, California. Living in the expensive Bay Area was a grind since she shared a house with anywhere from four to six roommates, shelling out $1,150 for a tiny bedroom.

"I shared a bathroom with at least three other people at any given point in time," she says. "Yeah, it was rough."

Rough got rougher when the pandemic hit and she and all her roommates all worked from home. Garland knew it was time to find a new city. She considered somewhat cheaper places popular with millennials like herself — such as Austin, Texas, and Portland, Ore. — and then she heard about Tulsa Remote. The program, which is funded by the George Kaiser Family Foundation, hosted her for a visit in July. And she was sold. https://www.npr.org/2020/12/20/944986123/you-want-to-move-so...
Someone, somewhere, still has to pay for your Matrix instance. Please consider chipping in a few dollars to whoever hosts it, both for their direct costs and their time.
I've had this discussion during interviews as a disarming technique. Candidates will sometimes express nervousness at the beginning and say stuff like "I'm terrible at interviews" or "it's been a while since I've had to do this kind of programming," and I try to respond by making it clear that I understand that the whiteboard coding has very little in common with the actual job and that I'm not judging them, so when I dutifully proceed to ask them to invert a linked list, they hopefully don't feel as judged when they approach the problem. Seems to help at least a bit. Mind you, I'd prefer NOT asking those questions, but I'm not empowered to make that change at my workplace and I'm honestly not sure what I'd replace it with if I were.
Looks like the Archive is having some trouble today, but it's also getting throttled because the link is getting clicked a lot. the /save/ link will redirect you to a saved snapshot of the page; it basically tells the archive "capture this page right now".
The article says some Facebook employees are complaining about Facebook's actions. Based on the link text here (Facebook Employees Say Apple Fight Is “Self Serving”) I thought they were complaining about Apple's actions.
I don't see how that has any legal merit. There's a FOIA exemption for "Information compiled for law enforcement purposes that . . . Would disclose techniques and procedures for law enforcement investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such disclosure could reasonably be expected to risk circumvention of the law".
I work at smallstep and we're partnering with yubico to give away five build kits for this project. DM us at @smallsteplabs on twitter to enter.

See also: https://twitter.com/smallsteplabs/status/1341800787291168768
Your interviewers rarely have real world consulting experience, meeting with clients and solving real problems tied to real money. What they mean by that "1 hour delivery" is a system design question that must be answered along the standard system design template, which is completely detached from reality. You should lookup up those system design interviews on youtube, ala "design a tinyurl service".
thanks for submitting!
"Also, I need to allow countless third-party services (uMatrix puts the at 51) to even make the website work."

This "website" is nothing more than a spreadsheet transformed into a dumpster fire of gratuitous Javascript and third party requests with https://spreadsimple.com.

https://docs.google.com/spreadsheets/d/1CwEoXiapYtYiU5TvYrVs...

For the raw XML,

https://doc-10-7k-sheets.googleusercontent.com/export/l5l039...

Need to remove HTTP headers and chunking, then unzip.
Apple M1 MacBook Air Review
I think I like the base font "Comic Shanns" a little better. I can't really put my finger on the difference though.

Thanks for sharing!
It was truly, genuinely, not intended to be a pile-on. I thought he was at least partly being playful with that comment, since I could see myself doing that a little. Could be a misread on my part and I'll apologize in case it is. I didn't even vote him down.
IIRC, entry-level developer, including javascript. I don't believe I applied to any jobs that were strictly javascript.

I accept the failed interview, but this doesn't explain why I was banned for failing a technical interview. Amazon is a big place.
> mentioning current mitigations

The "mitigation" in question is buying carbon offsets (I mean there are improvements in DC efficiency also, but those only do so much, and language models ballooning 100x isn't going to be fixed with 10 or 50% efficiency improvements). For the moment "carbon neutrality" is only achieved through the purchase of energy offsets.

That doesn't mitigate. It offsets. Don't get me wrong, still better than nothing, but its not a mitigation.
How is the Covid-19 virus detected using real time RT–PCR?
If you like this, I also recommend https://github.com/belluzj/fantasque-sans
ONNX Runtime C++ Inference
What about setting secrets in env vars? E.g., gitlab ci env variables.
>wasting their time

I agree with your post, except for this. It is NOT a waste of time to assert, once in a while, your power to examine, extract, and change anything running on your device.
What other balance to corporate power do workers have?
Thanks!

Is there a routing system between SWIFT members based on who has settlement (nostro/vostro) accounts between each other?
Very few people care about privacy which is great for OSINT practitioners. This Internet golden-age has made fox/sheeple tracking SO much easier, almost too much data available. That said MY Fitbit went straight into the garbage when Google bought them and since I didn't particularly trust Fitbit either when I bought the device, all Fitbit had on me for ID was a throw-away email and equally throw-away name.
Moxie of Signal has a great hilarious presentation on SSL at Def Con 19:

https://www.youtube.com/watch?v=UawS3_iuHoA
> Not sure what you expect Signal to do about this...

Be upfront about it. The vast majority of their users, even those who should know better do not realize this.

0days are not that expensive. Within reach of practically any bad guy really.

They are highly proud of Snowden recommending them. But anyone operating on the level he did is a moron to trust Signal. So what the fuck?
This is the LockPickingLawyer here and today I'm going to read this whitepaper by pkulak
The Kobe crash could have been prevented by many things.

Existing synthetic vision systems would have easily prevented this. They're not even that expensive - built in systems can be had for a few tens of thousands of dollars, or non-certified iPad based systems for a few hundred.

That crash was likely due to disorientation in dense fog with an experienced, IFR rated pilot but who didn't experience much fog in LA. A radar altimeter would have been unlikely to help.
Computers, and the like generally don't provide much functionality that's useful...

-ch4s3 in 1950
If you donate to the WWF, you can't demand they give you a stuffed animal and sue them if they fail to. Yes, you can respond to a gift with a gift - that doesn't make it a sale.

Taxes are taking wealth for government functions, whether it's against an individual, a company, etc. When you buy a pack of cigarettes (in the US) you're being taxed - the same goes for gasoline. Overcharging for the vaccine intentionally and using that to give out free vaccine doses is by definition a tax, in the same way that any consumption tax is a tax.
Replying to myself, I found this bit in the docs explaining how Tokio decorates the main:

> An async fn is used as we want to enter an asynchronous context. However, asynchronous functions must be executed by a runtime. The runtime contains the asynchronous task scheduler, provides evented I/O, timers, etc.
It's a real acqui-hire.

They basically acquired a world class AI team. Had they let the company die I'm certain most of the AI talent there would have been poached rather quickly.
Signal says:

>Not only can Cellebrite not break Signal encryption, but Cellebrite never even claimed to be able to.

But the original Cellebrite post says:

>Decrypting messages and attachments sent with Signal has been all but impossible…until now.

and

>This time, the encryption is even harder to crack.

It's just that Cellebrite's claim is totally baseless and what they're actually doing is not "breaking" or "cracking" anything. The BBC article should have been more critical of Cellebrite's language, but I don't agree with Signal that their headline was "false".
I love this quote measuring the age of jQuery in different units:

JQuery was first released in 2006, which is 14 years ago in human years, but much longer in JavaScript years. Measured in Angular versions, it is probably hundreds of versions ago.
I think Texas also does or did. I think there was a push to repeal that law since it wasn't really enforced, but I don't remember if it was successful.
Not to my knowledge... I use Signal every day and haven't noticed any message loss lately.
Would I be wrong in guessing you are a Fitbit shareholder who is unhappy they decided to sell to Google?
The AR glasses?
Stop 1 - the person who designed USB plug
"0-day ... still not fixed" makes it sound like someone is expecting Microsoft to have created a patch for a new exploit with same day turnaround. And therefore what's the big deal that they haven't?

If you want to use the "day" framing, the appropriate headline is "90-day exploit still not fixed". The entire point is that it's an old exploit that is still unpatched, and not some new discovery.
That is a very limiting belief on your end :)
Why a 2k page UK-EU agreement cannot be properly scrutinised in 8 days
BBC, you failed us here.
I fought with Instagram algorithm, and now my instagram explore feed delights me. I get cool new content that I actually like and enjoy.

I fought with Youtube algorithm, and it's really really lame. I don't get any new creators or quality content. Even the education content it tends to suggest is absolute garbage.
Amazing! Anyone has ideas on how to: 1. Bet on AGI, 2. Encourage AGI?

I have a strong belief that it could grow and I’d like to contribute (and join the development)
I agree, the UI is very lacking and the UX could be better but there are VERY frequent updates and new features seem to be added regularly...
Earn up to $50 per completed survey FOR USA
Good point, except that was pilot error not outside interference. Plus planes aren't supposed to be flying near ski resorts or mountains in general.
> make sure you know what your assert does, and when it does that, if you have a debug and release build

Absolutely. Probably the most common difference I've seen in "Debug" and "Release" builds relying on the standard library headers is when NDEBUG is defined as a macro when <assert.h> is included, which causes assert to become a no-op [0].

This has interesting implications when developers accidentally rely on the side effects of functions and assert on the return value of that helper. On "Release" builds that side effect would be compiled out. For that case, clang-tidy has the bugprone-assert-side-effect [1] checker if you want to enforce this in your CI.

[0] https://en.cppreference.com/w/c/error/assert

[1] https://clang.llvm.org/extra/clang-tidy/checks/bugprone-asse...
I use Comic Code - not free, but pretty reasonably priced. http://www.myfonts.com/fonts/tabular-type-foundry/comic-code

I find that it is pretty readable and makes coding feel less serious - it helps me get into a looser "try it and see if it works" mentality.

Screenshot: https://i.imgur.com/x1b1gac.png
Nice word, I was always looking go see if I could use it in any real world sentance.

But I thought it came from some form of writing that alternates left to right and vice versa.
> yet free and without a viable business model.

This has been bothering me as well but seems to be solved now.

All current messaging features will be free but new team features etc will be paid IIRC and AFAIK.
The interaction between the services (connection points) would also pass type checks. (Because they are typed as well)

... so that’s the whole problem domain.

No move of goal post. And no, like I said with things like typescript (And flow or Sorbet) you don’t need to compile any binary at all let a lone a single one.

Also: a monolith does not refer to a single binary it refers to a single application code base. (You can have monoliths in Ruby/Python/JavaScript/php/etc where no binary is produced)

I think you are misunderstanding what I’m saying, because I’m basically saying the same thing again:

- service A consumes service B
- they are both type checked (as you readily admit)
- the call site of service B in service A is type checked as well.
- there are 0 points in the code or interactions that are not type checked.
The Rust language provides the async/await syntax, which can turn imperative code into Future objects, but to run those Future objects, you must repeatedly call their poll method. Tokio is the piece of code that calls that method. It does so in a manner such that futures are only polled if able to continue work, and not e.g. waiting for a timer.

Besides that it provides lots of utilities for working with async code.
Please, please make this work without Spotify (e.g. type in a few favorite albums from Musicbrainz or something)
Monofur is really good.
That doesn't absolve BBC of spreading misinformation, which is what they are doing. It takes near zero effort to make a dubious claim on a blog. If BBC then writes, "kortex claimed to have hacked the NSA", that's accurate, I did make a wild claim. It's also misinformation if that headline is published without any investigation as to if that claim has any weight beyond internet rambling.

"You can't put anything on the internet that isn't true"

"Where'd you read that?"

"Internet"
> why would he want to be in a union when he is a top earner compared to great majority of people in the same country?

Didn't Google get busted fixing wages along with other tech companies?

https://en.wikipedia.org/wiki/High-Tech_Employee_Antitrust_L...
> Your spotify was sinatra-mug-shot-poster-in-your-dorm-room-massage-franchise-bed-bath-and-beyond-christmas soundtrack bad

I resent this comment
These blogs are just for procasinators to feel productive. If you landed the interview then it is just about practicing through a lot of questions. The time you finished reading this comment and this blog, some people out there have already completed a mock interview or a leetcode question. I wonder who made greater gains.
Very few customer supports provide reasonably prompt written communications, though. And the trend of chatbots to try and help you first is particularly bad.
>Learn to answer the more ambiguous questions

This is something I have never done before my most recent job search but it has been a huge help. Previously all my interview prep was on tech and I pretty much winged it for the behavioral stuff since interview prep guides seem to always focus on the tech side. Plus it always feels worse and more obvious when you struggle with or fail to properly answer the tech questions.

What I did is I prepared 10 different stories about my career experience and then tagged them with a bunch of prompts. For example I have a story about one project that had dual PMs that experienced a lot of scope creep and eventually fizzled on release. I can now use that story to answer a broad range of questions from failure to various project management approaches. Overall I now have prepared stories to answer probably 50-75 different questions immediately.

Another benefit is that I have also told these stories multiple times in interviews now and I get better telling them each time. Even if the answer isn't 100% relevant, I feel more confident and likely come off better launching immediately into a detailed story about my experience rather than trying to awkwardly come up with an answer on the fly. It is also easy to drop irrelevant parts or expand on specific details when the basic framework of the story is already something that feels natural.

I will even have the document with all the prompts and story bullet points open whenever I am doing phone or remote interviews. I could probably even create a cheat sheet to use for in person interviews since I usually would bring an executive style notepad with me anyway to interviews to jot down notes about the company.

Maybe this is obvious advice, but I think I am relatively smart and never done it previously or even seen this approach recommend so I am guessing there are other people who could use this tip.
A lot of these pages have very heavy analytics libraries. I've built a lightweight full-suite analytics platform to counter this problem. It's also privacy-focused: https://getinsights.io
The problem is AI is a tool to build a product. It's not a product in itself.

Element AI's product was it's talent (mostly all grads from MILA just next door) and the fact it's one of the few places where you could get as many great devs and deep learning experts in the same room.

But as long as folks focus on AI and not building an ecosystem or a product we'll see these acqui-hires.
As a Fitbit fan that just deleted my account to keep the data from Google...

I'm not sure where you get this "They are literally putting a doctor on everyone's wrist" thing. I had a Fitbit Ionic, their most expensive smartwatch at the time, and it was a somewhat helpful heartrate monitor. It had an SpO2 sensor built in which was advertised, but it didn't work in the years I had the watch on my wrist, and only recently became an available feature, around when Apple added the same to theirs.

And Apple put an ECG machine on people's wrists. Even my SO's Watch SE, which lacks the fancier new sensors is lightyears beyond where Fitbit is.

And Google will destroy Fitbit. If you think Fitbit is as revolutionary as you say, than you should be supporting every possible way to prevent Google from adding it to their graveyard.
Not really a criticism and just an observation, but you can tell this page was written by a programmer because the section called "What does it look like?" is about what the code looks like, not the font itself.

I realize the page's text is in the font, but often there's a sample that shows what all the common characters look like and in different variations (like regular and bold). Which is what I expected when I read that section title.
Yes I agree with you. My favourite stack right now is Django with DRF+Admin for backend, Typescript+NextJS (React) for frontend. I front the backend with Caddy, have django live on both admin.example.com and api.example.com with a couple of rewrites, and put cloudflare access in front of admin.example.com.

Currently I still use allauth for social authentication, though I'm not a fan of how little flexibility I get with it especially in such a setup (it makes a lot of assumptions about a template setup).

The other weakness in this stack is the lack of API typings. I haven't bothered messing with OpenAPI yet; I probably should but I understand that it's not a silver bullet in terms of typings either, so I just end up writing my own types for the API and it does become a very repetitive maintenance burden…
Your examples are very revealing of a larger problem.

Not only are these viewpoints, which you claim can only be argued in bad faith, supported by empirical evidence, but the people who dare to support them publicly are risking social and financial ruin. If "unsafe" and "marginalized" do not describe their situation, then the words have no meaning.

As a minority from one of the groups at the unflattering end of the crime rate distributions, it is my lived experience that the type of censorship you are advocating for is what makes me feel unsafe.

Inconvenient empirical truths about my community can not be discussed in the sort of polite and caring settings where the seeds of real solutions that don't ignore reality could germinate.

Instead, they can only be discussed in rude and hateful settings.
> I flashed my cellphone but it failed and now it's bricked.

It doesn't sound wrong to me, both "flash" and "brick" are correct in an appropriate context. It's not "updating the system" but "flashing" if the process uses some low-level recovery mode, and it would be "bricked" if can no longer be recovered by usual means.
Skip db and try a static website generator like Hugo or Pelican (python).

Do NOT use Wordpress unless you just want to torture yourself.
If you (the public) learn of the exploit at the same time as the vendor, then it is still a 0-day. You can construct a definition where it is "a zero day to you, the sysadmin" but that would really make it difficult to pick a single day to measure from. For this reason the most useful definition would be to measure from the defender with the earliest knowledge, which would be the vendor.
Worth noting that the author claims to get lots of job offers but is not able to "create an array" in a language of their choice from memory.
Click out of one...
The company's value is in it's employees.

They have a world class expertise.
I think China is effectively locked out of Western countries or at least US allies. The UK has banned Huawei and any purchased 5G equipment has to be decommissioned by 2027. Australia and NZ have also banned Huawei.
If Cellebrite thought they had broken the signal encryption - why did they release it in a simple blog post? As responsible people in the sec community shouldn't they tell this to the Signal devs first so that they could review it and fix it if possible/needed? Or is that just something real security researchers are required to do and not something companies feel themselves bound to in any way?
What's wrong with the second example?
Microsoft would always be the first to know of the defenders–any other defender would just tell them. It then makes sense to count from there, rather than have multiple counts for each level of people learning of the vulnerability.
I've been using Comic Mono as my non-code IDE font for years. It clashes obviously with the font I use for the code, which makes it easier to parse context for me.
Yes, it can be really counter-productive if done wrong. You have to do everything possible to reach a stage where a firmware update is possible. Only after that you can kick the reset line when you're unhappy.
What kind of web projects are you building that benefit from SQLite over Postgres?

Adding Postgres to a Django project is like 20min of config... And it doesn't really modify the API, it only supersets it.
I was a shareholder (sold when they got acquired for ~$7), as well as GARMIN and APPLE (I'm obviously long on the whole wearable space as it is the future of healthcare).

I took a bath on FitBit (I kept buying buying buying and so maybe ended up cost averaging in at $9 or $10), but I'd do it again in a heart beat. They are pioneering future medicine. In 50 years people are going to look at medicine pre wearables like we look at healthcare in the 1800's.

I was very happy FitBit sold to Google because I want them to survive, and unfortunately in this current tech regime the only way to do that is join one of the big players.

It just makes me sick when people who are partly responsible for the current anti-competitive marketplace make phony statements pointing the blame at companies like Goog, and heroes like FitBit are caught in the middle.
Of course it's self serving. It's possible that it's true, though I disagree, but Facebook ain't running full-page ads in major newspapers because it feels strongly about it from an ethical perspective.
CockroachDB also has Pebble [0], which is mentioned in their blog post [1] as a RocksDB replacement for their use-case.

[0] https://github.com/cockroachdb/pebble

[1] https://www.cockroachlabs.com/blog/pebble-rocksdb-kv-store/
Would it be fair to compare this to Apple's Grand Central Dispatch a.k.a. libdispatch?
History denial in hackernews?