skysight-inc/HackerNews huggingface dataset:
Come on, ALL UX is ruined by addition of ads. I bet there is not a single user of any app anywhere ever that can claim that their UX was bettered by ads. Also, users WILL be have to manipulated and/or tracked for the purpose of monetization via ads. By now everyone is well acquainted with these monetization techniques, so no point in pretending otherwise.
iMessage meets nobody’s definition of a ‘social network’. It’s a chat app / messenger.
Anecdotally, I've encountered issues with both ZFS and BTRFS at about the same rate. A public example of an apparent ZFS performance issue is https://github.com/openzfs/zfs/issues/9375 Both are much more quirky than simpler filesystems like ext4. Data integrity verification from checksumming makes it worth it though.

The ZFS vs. BTRFS choice, I think, depends more on whether you need specific features like offline deduplication or L2ARC / SLOG cache devices. And which one you're more familiar with (can troubleshoot better).
https://scholar.google.com/scholar?hl=en&as_sdt=0%2C33&q=alc...

There's a lot to go through.
While Signal's encryption is good, I don't like that (1) you have to have a phone number to register, (2) it asks for access to your contacts on your phone (3) you have to install the app on a computer rather than being able to just use it through a browser. For these reasons I prefer Wire... and you can log into three accounts at once on the free tier.
Look again: none of the available options are for restricting incoming messages to contacts (at least on iOS).
Same with Architect. It's use in software is completely unregulated compared to Registered Architect (the equivalent to P.Eng).
Yes, something FB has no skin in the game regarding.

Of course, how many of their customers use Apple hardware?
Ads are inherently immoral and it's ok to watch a movie for free as nothing is stolen in that case. Ads are immoral because the website gets access to the biggest distribution channel in history - the internet, access to the financial system, a huge educated society and all this for free, and for this opportunity it sneakily builds a profile of visitors and sells that info to whoever pays. On top of that it dares to annoy visitors with tasteless visuals. Imagine someone wants to start a business and is given an opportunity be seen by hundreds of potentials clients: they come to his party curious to see what's there, but he secretly takes pictures of all visitors, records who talks to whom, takes photos of contact lists in their phones, and then sells all that to the highest bidder. On top of that he suddenly starts loud tv ads on a huge bright lcd screen to feature some junk paid by nobody knows who. Only then, after wasting everyone's time and profiting off their personal data, the host dares to pitch his business idea. So yeah, if a website treats me like trash, I'll do the same in return.
I like this meme, it is fun and so on, but I have to admit, it is not really a thing: I am a professional physicist and journalists at respected outlets are pretty good. NPR, PBS, NYT all do a pretty great job at science journalism. More often than not the rare complaints from professional scientists are more self-aggrandizement lacking awareness of the pedagogical constraints of popular press.
There is no better app like maps.me with there usability for me
Newman's Own is a for-profit corporation that gives 100% of its profits to charity (about 5% of revenue).

All 501(c)(3)s are corporations. They largely exist to achieve ethical, charitable goals.
I really prefer CS to Calibri. Calibri is one of the ugliest fonts ever invented.
> I'm not judging them

I don't understand - what is the point of you interviewing them if you aren't there to judge them? What are you doing it for then?
Sure the CA is a new attack vector. That doesn't make it inherently insecure or the same as cleartext transmission.

Is running an internal OAuth OIDC identity provider to issue signed identity tokens the same as using cleartext passwords?
Nope, all issues were fixed, and it ran without any hacks for 6 months, until it was replaced by a WASM playground.
There is a thin line between modern journalism and click-bait ad farms.
That seems wild but actually an interesting idea. I bet it would work well for kids learning to code.
Eh, I don't think this is very accurate.

"Postmodernism" (a terribly indescript term if I might add) had nothing to say on the order of David Hume like "hey just because the sun came up today and yesterday doesn't mean you can prove it'll come up tomorrow", which is how we got Kant arguing that you can't perceive reality without fundamental laws being true, and so began modern philosophy.

The writers that are grouped under "postmodernism" were more like post-marxists: they were interested in describing social production independent of the traditional Marxist theorem that all social production (culture/ideology/religion) is a reflection of the dominant mode of the production of material things.

Michel Foucault, a pivotal writer for many other writers on post-colonialism that have become of consequence today, was explicit in interviews and his writings that the model of the "hard" sciences was what he aspired to, which is to say describing reality indendepent of human narrative interpolation.

It was the "soft" sciences of anthropology, psychology, criminology, and others, that Foucault was after. These he saw as social productions and he wanted to describe their cause, how they came about, without referring to some inherent rationalism (these studies are possible because we can make an assumption about the nature of human cognition) or Marxist historical materialism (they are Capitalist apparatuses of control).

This is what all his work is about and I hope it helps dispel this myth that "the postmodernists" are responsible, it would be more accurate to say that the interpretations and applications of those writers by American Humanities departments that the contemporary "identity politics" (post-colonialism seems more accurate to me) derives from.
I’ve used this font in all diagrams of my book. Together with svg shape filtering, it achieved a great handwriting look. You can find sample chapters here if curious: https://sw46.github.io/pip-book
Spotify announced last month that the "music industry" can start paying to put specific songs into people's recommendations.

https://www.theguardian.com/technology/2020/nov/03/spotify-a...
> That means the browser stops parsing the HTML mid-way through the page load, resolves the CDN's domain to IP, does a TLS handshake and establishes a connection to the CDN, waits to download the script, parses, runs it, and then proceeds on to the rest of the HTML.

This is not true since about 2008. All major browsers parse the HTML without waiting for synchronous <script> to load. https://developer.mozilla.org/en-US/docs/Glossary/speculativ...

If the <script> uses document.write() and what's written contains unbalanced tags, or if the document is modified in some other ways, then they re-parse but that combination is rare. This page explains what to avoid to ensure re-parsing doesn't happen (the rules may differ with other browsers): https://developer.mozilla.org/en-US/docs/Glossary/speculativ...
Found tons of good music via YouTube recommendations. As an adult I know enough not to blindly start watching flat earth videos should they be recommended and lose all sense of reality. Please don't destroy the good in a vain hope of protecting everyone from themselves.
But then what happens if the "customer" never gets around to confirming their identity? Do you retain the relevant data indefinitely at your own expense, in case the request was a fake? If it was real, then from the customer's perspective they are done with you and no longer being charged, so they have little incentive to help you tidy up the loose end.
Is it a concern that both Tokio and stdlib have AsyncRead+AsyncWrite traits that seem to be incompatible?
It already is...
There are countries on the list here: https://www.euromomo.eu/graphs-and-maps/ that had lockdowns but have no significant excess mortality, so it’s at least possible.
It can be perfectly rational to conclude a book is great despite there's a flaw in some part.

You can't simply extrapolate from finding one mistake in a book to declaring the whole book wrong. Likewise, you can't extrapolate from finding few bad publications to "everything is crap". I'm not trying to claim journalists are all good or even consistently good. But believing they are always bad is the same logical fallacy as believing they are always good.
Yes, and water is wet. But water and pine sap are to the best of our knowledge fairly homogenous, while companies are definitely not that.

Complex things are, well, complex, and absolutely not all the same.
This made me laugh a couple of times. Pretty good :)

Really well written. Unique responses to many (I thought) relatively unknown songs and artists.

The final score, a rambling "BAD" rating, was very funny.

Great job!
> Just a short thing you and the candidate can attack together in a couple hours

Unless your hiring pipeline is absolutely perfect (you pretty much get great candidates all the time and almost no bad ones) this doesn't scale at all.
Sam is the last of a dying breed . . . . .
Whoever wrote the article for Signal should be writing bars in rap songs. Such a great article. I was laughing the whole way through. The author manages to poke fun of Cellebrite and plug Signal.
I presume that the idea is that the compiled binary from the source and that the binary distributed by signal would be different but have the same sha1s. It does not make a lot of sense though because one could simply use another algorithm.
I read the headline and assumed it was Facebook employees complaining about Facebook's actions.
You must be one of those drug dealers from this article from the front page: https://news.ycombinator.com/item?id=25520200
I would live in the 1960s through 1980s, traveling internationally.
I deleted my FitBit account on the day the Google acquisition was announced. Nice try, Google.
I am testing OpenZFS with Ubuntu 20.04 LTS right now. OpenZFS seems pretty solid so far (I tried various scenarios of failure/corruption) and Ubuntu seems to actually care about ZFS support and its integration in Linux.
We need to band together and stop rewarding companies who pull this shit in interviews. Leetcode problems are not applicable to 99% of the actual work in most software engineering roles. There are other, gentler ways to find out if someone knows what binary trees, dynamic programming, sorting, and big O notation are.
I always get a weird vibe from async-std. I respect the people working on it, but it feels like it's trying to boil the ocean.

I'd be very interested in hearing other opinions, as my Rust project [1] is currently stuck on an older version of Tokio while I wait for deps to update. I'm either going to have to bite the bullet and replace deps or bite more bullets and find a different runtime.

[1] https://github.com/mmastrac/stylus/
I guess I would argue that, for the purposes of ethics, corporations don't exist. They are just people-groups organized (more in a flocking sense than a regiment) around some particular goal.

So, to rephrase the question, can an arbitrary collection of human beings behave ethically? The answer largely depends on your worldview, of course, but all unethical actions are taken by humans. Sure, it is a useful mental model to think of a corporation as a gestalt whole for some things, but that's all it is - a mental model.
Is matrix as private as signal? How do you go about finding a good server? How do you know if you picked a good one? Which app do you use? Matrix would be more popular if the getting started flow was more clear on these sorts of questions. The decentralization is a major benefit, but some sort of “pick these if you don’t know what’s going on” flow would get peoples foot in the door; then a user could change things up later when they got their footing (add a pop up every 6 months reminding users that they can use different apps or servers, etc)
EU bans plastic waste exports to poor nations
If you're curious how reliable your desktop computer software is, I suggest you read the patch notes for the last few system updates.

The general assumption in dealing with computer systems should always be to assume that they contain bugs. There have been detailed studies in the defence and medical industries into flaws in critical computer systems, and bugs are endemic in complex computer systems. We should always be prepared to question the results we get, check, test and double check.

In critical cases where there is a question about the validity of the results, they must be checked. In these cases they were not checked, they were assumed to be correct because the subpost-masters and mistresses in the case could not provide evidence that the software was wrong. But then, how on earth could they?

Questioning the validity of results and working hard to validate test and audit results is an approach that is well supported by the evidence and has served me well in my professional career.
Snikket[1] is an attempt at creating (maybe better "curating", as we're not starting from scratch) a suite of well-integrated user-friendly XMPP software (a server, and a single app for each platform).

The server is available as a Docker image, though we're still working on things like a web admin. Android app is available, the iOS app is due to enter beta in a month or two.

This is a personal thing for me. This year I migrated my family to XMPP from WhatsApp (at least for communicating with each other), and I want others to be able to do the same. Trying to make it a sustainable project (it's 100% open-source).

[1]: https://snikket.org/
I drove through the new tunnel today, and this is exactly what the ventilation looks like. I noticed they spun very slowly, which is likely variable based on detected air quality.
Mine too. Hypatia’s Alexandria before the libraries were burnt down.
> They are not meant to.

I know, that's my whole point. They aren't medical devices and aren't useful for medicine/healthcare beyond showing that you are or are not active.

> What are you basing this on ? Anecdotally, I and a few of my friends who are fully into Fitbit are wearing them dutifully

Optical blood flow sensors need to be held flat against your skin with minimal movement up and down the arm. That's just hard to do.

> It's not meant to be a short-term diagnostics tool

Again, that's exactly what I was saying. My only claim was that the "health" data they produce isn't useful for healthcare in a clinical setting. This is the reason health record systems don't import that data. I worked in the medical record space for quite a bit of time, and never met a doctor that wanted this kind of data in a medical record.
My favorite inappropriate use case was the death notice of a law partner in a legal newspaper (law firms commonly take out small adverts to announce the arrival or departure of partners). I don't know if this was a terrible failing on the part of the person who bought the ad, or a subtle acknowledgement of the decedent's preferences.
You're definitely shifting your attack surface towards the CA, but in doing so you've (probably) given yourself a lot of additional control over the weakest link in your system. With cleartext, vulnerabilities tend to range from simple things like "find the switch, plug in, sniff traffic over the wire" to slightly more complex, but still viable things like "sniff wifi traffic now, worry about cracking WPA-2 later".

Your typical TLS certificate is going to be more robust than your typical consumer / prosumer LAN security, and you typically have better tools (SSH certificates, 2FA, encryption at rest, etc, etc) for locking down a machine running a CA than network gear you either don't control or bought from a consumer-focused vendor.

Its a typical example of defense-in-depth. Hopefully your network is trustworthy, but if for whatever reason it becomes insecure/vulnerable you now have genuine encryption between client and server at application layer.
I had the exact same experience. I think it can be a pretty big barrier to getting started, as you really have to lock into a sub-set of the ecosystem (i.e. I can only use crates that have support for Tokio).

I understand the reasoning for not wanting this in the core language, but perhaps there could be some standard implementations which would still allow for custom runtimes.
I watched the video. The police were arresting her before Huang shouted that she's a journalist. How is this supposed to be evidence of the police targeting journalists?

The video is less than a minute long. Both the police's account and the Buzzfeed article claim that Huang was with a group of people making "anti-police" statements (according to the police's account, these included death threats) outside of a hospital treating a pair of officers who were shot in an ambush. What happened between that and Huang's arrest is not captured on video.

Yes, police do bad thing sometimes. But targeting journalists isn't one of them. This incident is not an example of that. There is no indication that Huang wouldn't have been arrested if she wasn't a journalist.

It seems like the only thing that would appease you is if the police immediately ceased arrests when people claim to be a journalist. This is not feasible, because anybody can claim to be a journalist and the police have no immediate way of validating these claims. What they can do is proceed with the arrest and release the person if their claims of being a journalists are discovered to be true. Which is exactly what happened here: Huang was released and charges against her dropped.
Has anyone here pivoted from software engineer to software engineering recruiter? Curious or yours (or anyones for that matter) thoughts on this topic.

It's a move I've considered just to keep my career interesting.
It turns out that taking a superhuman player and making it play like a weak human is surprisingly tricky. It's not so hard to make a weak player - you just take suboptimal moves instead of the best moves. But often these suboptimal moves are bizarre. A weak human chess player will lose their pieces as they fall prey to forks and skewers and so on - tricks that are hard to see coming for new player. But they will rarely actively throw a piece away by moving it into danger. Even a novice human is pretty decent at looking one move ahead. But to a chess engine, or an MuZero agent, a move that loses the queen immediately and a move that leads to a sequence that loses the queen in five turns are basically equal. And so an artificially-weak MuZero agent, or an artificially-weak Stockfish agent will tend to make 'mistakes' that not even a weak human would make. This makes them a little difficult to learn from.

There does exist research on how to make a human-like weak player: https://arxiv.org/abs/2006.01855

The basic idea is to look at weak human games and try to predict when a mistake will be made. But I don't know if there's any approach that can do that without access to a corpus of human errors.
Money Printing Machine for Sale
Love your comment man! Appreciate it. And I agree with you about Smiley's People.

Ha, Soderbergh's Tarkovsky I have never seen - sounds like I should.

You're probably right about filmic - I was just looking for the word that encompasses film/tv/video.

FWIW I saw the film before the miniseries, and, really liked it at the time. It's been a minute. Sounds like maybe I should
...or just compare byte by byte, since reproducible builds provides you with an .apk to compare against, not just a hash.
Extraordinary claims require extraordinary evidence, yes.

The point is that "corporations will monetize data" isn't an extraordinary claim.
Very sad to see. Maps.me has been invaluable when through hiking or bike packing. It will be missed. I would love to contribute to an open source version though, will check out the repo.

Edit: realised the developers open sourced it.
I don’t consider it as much as “relying on Spotify” as I just consider the recommendations a great addition to music discovery. A long time ago I relied heavily on last.fm’s radio for music discovery, and Spotify does a decent job filling that gap.

To each their own, I guess, but I’m naturally a “passive” music discoverer, using a combination of recommendations and similar artist radios and whatnot. It works fairly well.
The choice is not between Bayesian methods and Deep Learning, but between statistical models and machine learning models (say, from random forest to GBM to xgboost and then maybe Deep Learning). There is overlap between statistical models and machine learning models—it is a matter sometimes of focus—and Bayesian methods can also be applied to what are typically considered ML approaches (see for example Bayesian hierarchical random forest).
> This seems contradictory.

Because there are two entirely different things - one is producing an unbiased bitstream from a potentially biased one (the topic of the article) and the other is keying an individual encryption.

When you're trying to generate a bitstream and you expect uniformity (ie, a prng) then seeing obvious non-uniformity over time is a sign that it's biased. You need the type of algorithms from the article to unbias it while preserving the actual entropy. This is what a system's designer should be doing to produce useful output from a hwrng in the first place.

But, looking at an individual piece of randomness, a key, you shouldn't be looking for uniformity at all. Here you want all zeros, all 1s, and any mix, to be equally possible.

> Interesting. Why do you hash the ECDH secret then?

Well, EC is a bit magical and I don't know. Wikipedia says that it prevents 'weak bits' from the handshake. That means correlations, but I don't know why this is true. At any rate uniformity here means what you think, that it's not a random bitstream and should not be used as such.
I can see how it can do just that, but I explain our "culture" as best I can before evaluating candidates against it.

Example: My workplace has a great deal of change, bordering on ambiguity. We need people who can deal with that and thrive in that environment. So, my interview questions aim to find out if the person is going to thrive in an environment where they might have to find their own way, or if they are the kind of person who likes to take directions and stay in a specified lane.

In this case, adaption to change is part of our culture - you're either a good fit or you aren't.
Wow, that was great. Very engaging UX / text.

By the way, I hated the Spotify ads so much I paid up for YouTube Music + Premium. Even though the Spotify Windows app is VERY usable compared to https://music.youtube.com. Good Lord, I hated those ads. I know the conspiracy theory that they were designed to be irritating so that you pay up, but that only works in a world without much choice; ;now you have YouTube Music, Apple Music, Amazon Music, and Deezer. Spotify, I'll readily pay up and switch if you improve those awful ads.
Here is a direct link: https://sw46.github.io/pip-book/12.pdf
> So in some cases Cellebrite does have the power to break the saved data encryption.

IIUC, in those cases they could instead just open the Signal app.
https://www.docdroid.net/HZvDVwN/sp1-pdf or https://bunkerchan.xyz/.media/de21413543c09ac6d02aa5eeb08424...
Trying to understand their thought process, is the candidate coachable, can the candidate accept feedback, does the candidate at least understand the underlying ideas, etc.

The more prestigious the employer then the less forgiving they are on your shortcomings.
I had to do a bunch of interviews recently and did something similar, multiple pages of notes with bullet points in a big font just out of view. Was very helpful for those moments where your brain just freezes up and you can't remember the perfect anecdote or systems architecture point you wanted to bring up.

I do think it would work for actual on-site interviews as well, as it's common for a candidate to bring in their own notes of questions to ask, etc.