skysight-inc/HackerNews huggingface dataset:
There is value in using PLAIN inside of TLS instead of SCRAM-* methods. If you use SCRAM-, you're committing your password storage to only* use that method for storing the plaintext. So if you were state-of-the-art 20 years ago and used CRAM-MD5, and then you wanted to upgrade to SCRAM-SHA-1 when that came out... you don't have a good migration story, since the password storage has the information needed to validate CRAM-MD5 but not SCRAM-SHA-1, and there's no way to regenerate the information for SCRAM-SHA-1 without the plaintext password.

But if the authentication server gets the plaintext password, it can validate it against the old CRAM-MD5 storage, see that it matches, and then update the storage to SCRAM-SHA-1 on the fly. The entire process is invisible to the user, who gets a security upgrade in the process.

There's another class of use-cases, where a service needs to authenticate a user based on a token from another service. But for this, it's better to dispense with passwords entirely and instead go to something like Kerberos, where the authentication service gives you tokens in lieu of any password information.
I'm considering whether to pick up The Age of Survailance Capitalism; the relevance of the topic is obvious, yet I've heard many criticisms against the quality of the writing (not research) in the book.
People who have finished The Age of Survailance Capitalism, did the writing quality get in the way of the message?
I liked the one he wrote ;). Last year (BC), I enjoyed Advanced Swift. In fact, I was inspired to write a collection utility, based on it.

He knows his stuff; especially when teamed with the wizards at objc.io.

But the classics are never out of date. Rapid Development, along with other McConnell classics, is a "must-read," as far as I'm concerned.

But the book that probably has had more impact on me, than any other, was The Design of Everyday Things, by Don Norman. It -literally- changed the way I look at the world (as a designer). I think anyone that designs things to be used by other people, would benefit from reading it.
Happy New Year! And for all of you that are already in the future like my colleagues in Aus, hopefully the 2021 is already looking brighter.
I think as hacks become more and more common, and as more businesses lose revenue from data breaches, more companies will adopt better privacy and data security practices.

If someone "hacks" DuckDuckGo's databases, for example, they won't find any useful information. If they accessed Facebook's data storage, they would have tons of information about millions of people.

As companies like Microsoft, Apple, etc. adopt stronger data security, I think the general population will shift their practices as well.

This video (https://www.youtube.com/watch?v=eeBRt4qGHH8) kind of made everything click for me as far as how a "hack" can impact a person beyond just the data being publicly accessible.
This proves my point. 39 bits for time in 10 msec is something like 17x years.

ULID runs through 10889 AD
heh you would be surprised. I literally closed a ticket from 2014 this week which had a lot of relevant information and prior discussion. Without the record of it somewhere I would of had taken much more time.

I also always search jira for a particular issue that I am having to see if someone else has already solved it or a reason for it not to be solved. Sometimes it works quite well saving me a lot of time.
> Religion served its purpose and no longer feels relevant in light of technology and science.

Ah interesting. I personally wonder whether our challenges with conspiracies are related to the hole we're left with as religious belief starts to deteriorate. So I'm wondering if spirituality is still needed, if only as a rubber plug until we learn again how to use shared stories to more intentionally chart collective directions. Maybe a new form of spirituality will be the new plug in the end. But imho we need shared stories that occupy the evolutionary holes that religion previously filled, rather than dissolving the old plug only to have it re-colonized by cultural noise (like conspiracy)

I mean, civics is a quasi-religion in my thinking, it's just kinda weak. Not sure if we need something strongly to hold societies together :)
> Yes I know that, what's that got to do with not having accessibility?

Many (most?) will have different accessibility expectation for software from each of these categories, particularly since in many jurisdictions government and commercial have accessibility laws to follow or expectations on service because of payment/funding. In this case the question is what does accessibility have to do with the project not the other way around and the answer is "whatever people want to contribute to the project" not "what simonh finds acceptable of the project".

> And no it doesn't have to be perfect, it comes down to what we consider acceptable.

But you don't decide what's considered acceptable for someone else's freely available open source software they do. It's also not translated into every language and won't run well on every device. A very large portion of the world can't use it but it's just someone sharing what they've managed to make not someone saying everyone in the world will find the software acceptable or that they owe any functionality out of it to anyone else.
The medium is not important. Paper will not come back.

Plenty of people still consider "old school" publications, often in their online version, as credible sources while totally ignoring social media noise...
This seems to ignore how many people don’t have the resources to have a good ‘childhood’. Being able to work doesn’t necessarily mean something bad is happening.
I just wanted to say that regardless of how anyone defines a lie, I personally know what your going through and it really sucks. And for what it’s worth your not alone.
While the US earned its goodwill with the Marshall plan that lifted many nations from debris to wealth.

China uses threats and censorship to get its way, post Covid or as Trump puts it China virus.

No investigation or inspections have happened the whole year.
Reading the old NT debugging blogs and Raymond Chan’s stuff was very eye-opening. Microsoft has incredibly talented engineers ready to help Solve Problems, not just toss you the source code and wish you luck.
The main problem with fiction for children and young adults is that there just isn't enough of the good stuff. Rick Riordan is popular, and he has written many books, but an avid reader can get through everything he's written in one summer.
Creating Beautiful GitHub Streaks
Re: The Age of Surveillance Capitalism.

I heard this interview/discussion and had no choice but to buy the book. I'm still reading it but it's very well written. Her ability to frame and communicate her ideas is top shelf.

Yes, highly recommended, if not must read.

https://www.wnycstudios.org/podcasts/otm/segments/living-und...
> there are legitimate topologies where you don't

This has been repeated many times and I still don't believe it.
By both of your definitions this appears to be a clock. It starts at twelve, not at zero, and it wraps when it gets back to twelve again, making it pretty useless as a measure of elapsed time.

For what it's worth I would define both a timer and a clock as something that ticks(/updates) at a fixed regular interval.
I'm an emergency physician on the Navajo Nation in the US. I've seen multiple people quite ill the second time they've caught COVID (based on positive PCR twice, months apart, with compatible symptoms both times, resolution of symptoms in between, and a negative test in between). All had multiple sick family members the second time, hard to say who infected who, but I have no reason to believe they were not infectious the second time.
(All were young and healthy, young children and youngish adults, seems like they were generally not very ill the first time so perhaps didn't mount a very robust immune reaction?)
In speaking to colleagues that are hesitant about the vaccine, the evidence that having had COVID once does not guarantee protection against a subsequent and possibly more serious infection is actually something I specifically point out.
Note that I'm not arguing that we have evidence that the vaccine guarantees long-lasting immunity either.

EDIT: typo
Happy New Year! HN has been a great place to spend my time this year.
Strongly recommend either The Way of Kings or Mistborn. They're the first books in two separate series of his. The Way of Kings is epic fantasy. Mistborn is somewhere between fantasy and YA.
> (...) simply having been declared positive based on symptoms

Also known as a positive diagnosis.
At their perceived oppression. In reality, they still hold all the cards.
Happy new year, fellow hackers!
Definitely not, it does not look pleasant to me either. At first I thought it was just the small font size, but I noticed it on the "Edit" page as well.
Yeah, he lost me when he compared Linux file access to MS-DOS. Really now? Even 1995 Linux was nothing like MS-DOS. Sure, POSIX is nothing to be admired. But it had some security for fucks sake. Users generally can't see other users' files without an exploit. Whereas MS-DOS... doesn't have users. Which... I mean, what the fuck are we even talking about now?
I've seen MacPorts uses pre-built binaries, at least in some cases. Not sure if this applies to the Python ports.
A much Happy New year to all. If nothing else, 2020 will at least be a year to remember.
Three generations of arranged marriages designed to eliminate the notion of “race”
Authoritarianism imho is pretty much always bad. I'm mostly pointing out that IN THEORY :) if a country was authoritarian AND benevolent, then it could be a strength during COVID.
Speaking of Murakami I re-read Hard-boiled Wonderland this year which is a bit of tour de force at times but in my opinion still one of his best novels. Sci-fi in a weird way without a lot of technology and in a dream-like (nightmarish at times) narrative.
Important topic, very poorly-written article. It's as If the author wanted to disguise what Tim's ideas are.
I miss reading. Ever since I had a child (who is now 2), reading went out the window. After full time software work and domestic responsibilities, I fall asleep after a few paragraphs. :(
This is the first year I’ll be saying “holy shit, I made it!” when the metaphorical ball drops. May 2021 be better.
> I spent over an hour on the phone, they weren’t able to do it.

They are. They just refuse to.
Looks like this was also cross-posted on dev.to: https://dev.to/napicella/how-are-docker-images-built-a-look-...
In my opinion (having read both books and TA’d courses using both), Murphy is a significantly better book than Bishops’s Machine Learning. I’m very excited about a sequel!
What about the place of work, equipment and resources provided to do their work?
Who is dismissing criticisms out of hand?
I once worked with a developer on a relatively small team of 10 people or so (3 other devs) who said it was impossible and pointless to estimate effort for tasks.

He said that instead a task should be assigned to him and he will work on it until finished, checking in once a week to see if it’s done.

It was the weirdest thing so we explored it a bit in a planning session and followed his logic that if we had four devs does that mean we only assign 4 bugs a week? What do we tell the users who submitted the bugs? Especially the ones who were kind enough to (usually wrong) estimate if the bug was easy or hard.

After a few minutes philosophizing he changed his mind to provide rough estimates to help with planning sprints and stuff so we could at least try to complete multiple items even if we were off sometimes.

It was funny that he was just oblivious to why he was coding and didn’t care about users, funders, or other teams.

This isn’t specific to Jira, but we did use Jira, but it is part of some devs just not caring about anything but what they focus on.

This guy was probably 45 and had operated for like 20 years. But I guess never in an environment that had production dependencies.
Well the argument I presented shows that at least one state has a negative energy density at any given point (I suppressed the dependence on position, T = T (x) )— but the argument does not prove that this state has lower total energy than the vacuum because there could be lots of positive energy density somewhere else! In fact this has to be true, because as you correctly pointed out the hamiltonian has to be bounded below, and with some assumptions about the field theory you can show that the vacuum has 0 energy and every other state has higher total energy.

You can even put constraints on how far away the positive energy density is from the negative energy density. These identities historically went by the strangely non-descriptive name of Quantum Inequalities, and there’s a nice modern proof of a similar result in conformal field theory due to Blanco and Casini [0].

Take the Casimir state as an example. In the usual setup there’s negative energy density between two perfectly conducting planes. Either the setup is unstable and the plates will attract, or else something is holding the plates apart which takes work (a source of positive energy density). It’s a bit unclear to me how to think about the former type of states, they’re unstable and so they can’t be energy eigenstates.

Another instance of the Casimir effect is
when you take a 2D CFT on a cylinder, in which case the normal vacuum state on flat space maps to a state of negative energy on the cylinder under the relevant conformal transformation. That’s a form of the Casimir effect, the energy has dropped to something negative whereas on flat space it was zero (from the algebraic perspective it arises from the conformal anomaly), but now that’s the new vacuum state and the new (negative) lower bound on the energy.

[0] https://arxiv.org/abs/1309.1121
Either you are gay or you hate women.
Nope, per MDN:

> When multiple is specified, most browsers will show a scrolling list box instead of a single line dropdown.

This is not “dropdown with multiselect” because it doesn’t “drop down”
I made a plugin for photoshop around 2010 to do the exact same thing. It has a slicer tool, and an API for it, so spitting out HTML was easy, but just used it as an internal tool for one of my first web dev jobs.
There was a survey posted on the subreddit[0], which asked about which language people used. I was quite surprised to learn that Rust was the second-most used at 10% (45% used Python).

[0] https://www.reddit.com/r/adventofcode/comments/kj53l1/unoffi...
Maybe, but news from 1975 that already was part of revelations of that nature that triggered their backlash, legislative responses, and every other kind of “hangover” they could, before many people voting today we're even born, probably aren't much of a factor in that except as precedent and context, not news or triggering events.
I'd argue that most of the time you never owned your data, it was held under lock and key by proprietary serialization formats.

Sure it's physically on your disk, but data is only useful if you own the mechanisms to read and write it. If that software is proprietary you don't own the data.
This is a pretty factual situation with a lot of hard numbers and economic theory. We're not picking favorite ice creams, we're talking about how we're organizing our governmental strategy. We have a lot of historical and statistical evidence on that.
The tone of the initial NYT story that broke the scoop certainly didn't reflect any of this uncertainty. Would have been a good idea for them to check in with the NSA or the DoD first!
One of Cameron Diaz’s best performances. I forget how talented she is because of how often she gets cast as “the girl in the red dress.”
It's actually not a bad idea. I went without a "valid" phone number since first of June this year. Had to tighten the belt for a bit. Starting using a VoIP number. Recently got a new SIM for my phone, but have not provided the number to anyone. Still passing out the VoIP number. Funny thing is, nobody robo calls the VoIP number.
Agree. Not something I know a lot about but it seems to be a significant undertaking. I figure a production-grade implementation in safe Rust is more likely than a verified implementation in SPARK.

I don't know how serious the rustls implementation is. Nice to see it makes no use of Rust's unsafe features.

https://github.com/ctz/rustls
Great points. I guess I meant they could be strengths IF the govt acted correctly. And of course as you're saying, that in itself... everyone has different definitions. I guess I meant as a cultural mechanism for handling a situation.
The heat may be bad, but you don't have to shovel it.
I was happy to see "The Age of Surveillance Capitalism" and "Permanent Record" on your list. More people are becoming aware of the threats that surveillance has on our society thanks to books like these and even something like The Social Dilemma on Netflix.

I think unfortunately we're going to see a lot of companies adopt a sort of "privacy washing" (e.g. https://www.youtube.com/watch?v=5gGb_vKbJLU) before we see much real change in their privacy practices.

I'll definitely add a few of these to my books to read for 2021.
Mayve there is something inherently wrong with the male brain?
Good point, not sure why we don't make more of a fuss about it. I think there should be some content about how our HR teams use Jira coming out soon so that could be a good first step.

Ironically, I was part of the group that just did the first ever official Atlassian Twitch stream the other day! Seems like an easy way to fire off content without needing a lot of approvals and checks. I'll chat with some people on the marketing side to see how hard it would be to just walk through our own setups. Saw this in a comment somewhere, but confirming we have a culture where process and setup are determined mostly on a department-by-department basis (at least for the non-tech side of the house). Our Marketing org generally works in an "agency" model where there are teams responsible for specific marketing disciplines (SEO, Video, Branding, etc etc).

Just on a side note, I'm happy to walk you through how we use it personally — Zoom, email, or whatever. Always trying to learn how we can make Jira better and try to share advice where I can.
That’s kinda misleading. DSLR lenses have been quoted at 35mm equivalent focal lengths forever because that’s what makes sense to photographers.
Maybe. At the start of this year, my company was offering big bonuses to engineers who were willing to relocate to the newly-declared headquarters. Now they've decided that we are "remote first." I wonder how common this shift in attitude will be. Of course, it's possible that the executives will change their minds again once an office becomes a real possibility. But at the moment, they seem to love the idea of not having to pay for office rent in an expensive city anymore.

In any case, I think that what the executives and CEO want will trump what the individual workers prefer.
Ask HN: What are some startups in the Film industry (using Rust?)
Are there any start-ups for the Film industry (visual special effects, post-production) that primarily use Rust or Kubernetes?
It never worked well. The html was full of issues and the kind of image slicing was for backwards compatibility with email clients. However PS did have a way to write scripts with JS and extend or even change the HTML generation.
No. Because a lot of people consider the mainstream media to be fake news.

Newspapers and other publications might make a comeback as physical media if it turns out in hindsight to be easier to make money in print than online, but I have no idea whether that's even likely. It would be ironic, though.
It’s a “progressive” web app though, so such a one is never all or nothing.

Pretty much: Have a Service Worker and/or a Web Manifest and you are well on your way to claim to have a PWA
Happy New Years! <3
And your problem is going in circles and not listening to the person you're replying to. You are guilty of doing the exact same philosophical run-around that he's complaining about.

The fact is, this person is watching his close family commit a slow-motion trainwreck, and he's asking for ways to prevent it or mitigate it. If they do nothing, it's quite likely that his family or friends will suffer serious health consequences. Theoretical exercises about whether COVID this-or-that is really a lie or not, aren't of any help.

Imagine berating a someone who got lost in the woods and has been lost for days and is starving, for not having the right map or not following the trail, or debating the legitimacy of hiking for recreation at all, instead of feeding him or giving him water.
Absurd. It will be a travesty if this is not recinded.
Yeah I get pretty bored constantly reading "You don't need X". Some of us do. You don't have to be Google to deal with a lot of data, and to want that to be fast. Lots of domains deal with high volumes of requests and deal with massive amounts of volume.
Ah, I like where you're coming from. Thanks for the link; I'm definitely interested in exploring these topics further. Is there a name for this field of study? Perhaps just the sociology of religion? That seems to leave out the evolutionary biology perspective though.
Tough shit? It does what you want. It doesn't have to look like what you want.
I would prefer sites that don't actually comply with the rules to go the whole hog and not notify me.
I have a difficult time finding fiction that I appreciate these days. I could make a long list of things I have enjoyed, but I haven’t been able to do much to add to it.
The best book I read was the novel “Samlade verk” by Swedish author Lydia Sandgren. I’m quite sure it will be translated to German, English etc. If it does, I can warmly recommend it. It’s a great book.
A Smart Guide for Your Career as a Software Engineer
Also consider harm reduction. Investment in a supplier is investment in a community. Canceling the contract vs trying to remedy the situation is a complex decisions.
> You have stuff to do today, stuff to do tomorrow, and stuff you might or might not do.

Stuff you might or might not complete is basically, everything. That's not a meaningful category list.

> These core mechanics work.

They work like a water-filled car coasting downhill. It looks like it's water-powered (or JIRA-powered) but it's just the gravity well of "looking busy" for the most part.

Maybe the in-car water fountain could be considered water-powered in practice, but that's a derail. Management gets approximations from JIRA because that's what they want, but JIRA doesn't provide it. A tool with a dependency graph could do much better.
I came across Brandon Sanderson in another HN book thread. He's such a phenomenal author in the fantasy genre. I've read most of his series at this point and they are all great. Mistborn and Way of Kings being favorites.
What do you make of people who see religion in general as a "lie-based narrative"? I am asking this non-sarcastically and non-confrontationally, as when I was younger I expected religious belief to decrease with added information creating too much cognitive dissonance. To some extent, that has been the case but not in the way I envisioned it.
MacPorts has binary packages. Homebrew uses Ruby not bash. MacPorts uses Tcl. MacPorts just has better QA.
Yes. There will be a missive stigma around not being vaccinated.
The answer to your 'why' questions is that there are (and were) exclusionary behaviors and/or tactics that either actively prevent or passively discourage those minorities from participating.
>That's a lot of code.

It's estimated to be around 40 million lines of code
Let's just all hope that the Mayan calendar guy didn't misspell 2012.