skysight-inc/HackerNews huggingface dataset:
So the argument does take it to the slight extreme but assume you're good enough to eventually be promoted to lead the department; at that point you're going to be able to introduce change. Certainly the change you could introduce would be greater than taking a similar paid job at a different organization. I appreciate this isn't the case for a lot of people but it's a non-zero chance and therefore a factor to consider!
Is this using the browser's own JS engine? Do things like NoScript allow one to turn off PDF JS?

On the flip side, are there any examples of PDF JS being actually useful and not a vector for tracking/exploits?
I was able to pay off my mortgage about a year ago (I am in my late 30s), and work has taken on a new aspect for me. I feel a bit more comfortable challenging the status quo and trying to take on more "interesting work". With that in mind, I am still attentive to the fact I need to maintain a sustainable career for another 25/30 years.
https://lainzine.org

(a Neocities site)
Yes I assumed you meant Modi as well. Regardless of how I feel about both of them. It could happen any time two “populist” leaders are brought up that way.
The project I was working on was moved from Milan to Poland in what was most likely an effort to downsize the project and cut costs.

Odd choice of location given that hailing from Poland and having lived in Italy I had an opportunity to compare costs of employment and generally they're not that different.

Perhaps Milan is exceptional - can anyone from that location tell me whether €60k annual costs of employment are considered a lot for a senior developer?
I'm still waiting to see a port of Doom in one. PDFs natively support 3D models!
It sounds good in theory, but in practice rotating passwords really doesn't help much. You alluded to it in your last sentence, but if you require password rotations, say every year, a lot of your users will end up using:

basepassword-2021

which they will change next year to

basepassword-2022

Because password hashing makes it impossible to retrieve the original password, there is no way to guard against people just using a basepassword and appending some type of counter to it.

Thus if there really is a breach where the plaintext password is recovered by an attacker it is trivial to find out what this year's version is.

So all you end up doing is needlessly irritating your users, for not much security.

Multifactor Authentication is a much better solution for the issues of unknown breaches.
Judge for yourself:

https://www.nytimes.com/search?dropmab=false&query=facebook&...

Just note what is "Opinion" and what is "News". Opinion will always blow different says, but the reported news stories will be critical as necessary.
Freelancing Websites
> Print updates: Margin units are now localized.

Print in firefox is totally broken. The change to Chromium was the last nail in the coffin for printing. The new web does not care.
Also worth noting that only four of those cases occurred in the US, and none of those have been traced to US beef; in each of these cases, the patients had spent a significant time living outside of the US (and two of the patients lived in the UK, whose cows were known for having BSE).

https://www.cdc.gov/prions/vcjd/vcjd-reported.html
Distinctly American

At this very moment there's got to be at least 100 countries with far worse police abuse than the US. Historically, any soviet/socialist country in the last 50 years would have been far, far worse.

Either journalists have never left the US, and know nothing about the world, and history, or they're willfully misleading. Don't know what's worse.

The most constructive way that the federal government responds to avoidable loss of life is arguably in its treatment of aviation. Whenever a plane crash occurs, big or small, headline-grabbing or obscure, a team of experts is dispatched to reconstruct exactly what happened. The aim isn’t to advance a legal process or punish wrongdoers, but to figure out which changes, if any, could prevent it from happening again.

We got trials. We're having one. And a Democratic representative went to the streets to ask for push, in case the outcome wasn't the desired one.

The author doesn't want investigation. The author wants an outcome.
This was a great read! I'm starting to pick up rust and this is helpful.

I've also been watching the Crust of Rust series from Jon Gjengset and enjoying those as well.

https://www.youtube.com/playlist?list=PLqbS7AVVErFiWDOAVrPt7...
> Everyone has a personal computing device in 2021.

85% of Americans have a smartphone. 15% of Americans do not. https://www.pewresearch.org/internet/fact-sheet/mobile/

What are the stats for other countries?
NIST recommends NOT to rotate passwords.

https://pages.nist.gov/800-63-FAQ/#q-b05
ÖzgürKon 2021: Integrity of Freedom – CfP is now open for conference
I feel like this is me with side projects sometimes. Do you have any tips for staying on target?

I generally don’t have this issue in my actual job.
You'd have to make users change their password every day to fend off undetected breaches now.
To develop a laptop is a much bigger goal than developing a monitor.

And everyone has different taste/priorities when it comes to laptops.

I would like to put the monitor on a stand behind the laptop so it is on eye height.
The Economist has a history of lies and falsehoods by omission when it comes to foreign policy and international coverage. Anywhere from their Bolivia, Venezuela, Libya, Iraq, Honduras, Guatemala, Venezuela, Syria, Chile (the editor openly boasted of delivering the coup) and so much more. They are often a bit more nuanced compared to coup and regime change lovers like Fox, Washington Post, and the NY. Times.
I pay for several of my main news sources, but I can't possibly pay for all of the news websites I occasionally read articles from until either micropayments are made to work or some other solution is found.
I can see why they are doing it but I'll really miss FTP support. A lot of public data continuous to be distributed through FTPs and for a long time Firefox has been the easiest way to browse them.
> PDF forms now support JavaScript embedded in PDF files. Some PDF forms use JavaScript for validation and other interactive features.

As far as I can tell I still can't play breakout in a PDF in Firefox though (and I think that's for the better)

[0] https://rawgit.com/osnr/horrifying-pdf-experiments/master/br...

[1] https://www.youtube.com/watch?v=6rbJu10Telc
The concept of a Pigovian tax [0] on externalities is to dissuade anti-social behavior by assigning it a price, while giving the proceeds right back to citizens as a universal dividend. It would actually function as a progressive tax, with the poorest collecting more than they pay in, and is heavily favored by economists [1].

[0] https://en.wikipedia.org/wiki/Pigovian_tax

[1] https://clcouncil.org/economists-statement/
What about police killings in the sense of officers getting shot? Plenty of sad cases.
It depends - are you a product manager, or something closer to a project manager?

If product, then I (as a developer) want you to contribute things that I can't do (or don't have time to do):

* detailed market-analysis of competitors/features etc.
* stakeholder research
* good numerics/understanding of MVT tests and how to evaluate results, avoiding common causes of bias

I don't want us to vote on features, I want you to have a solid evidence-based approach to prioritise product changes.

I also want you to:

* know the product better than anyone else, including me (if things are only specified in code/buried than that needs fixing)
* showcase your research/evidence/learnings to the team regularly
* collaborate closely with devs/leads/dev manager to balance tech tasks with new features
Disabled by default, right? Why would you open up such a stupid security hole?
If you really want to do something like that, you could always connect an Arduino or RPi (or similar) to a PC over serial/USB. Then you could use it as a kinda-gateway device. Taking commands from the primary PC and interfacing with low level peripherals over i2c, etc. But for the cost of this, it would probably make more sense to just wired the gateways up directly to Ethernet to allow one system to control all of the devices... which is how I imagine most factory automation is done. No need to have an extra PC to manage network control when an Arduino can do that by itself.

Aside from the hobby aspect, one reason why Arduino and RPi are so popular for these types of projects is that they are effectively cheap enough to devote to an individual project. You’d wouldn’t want to devote an entire PC just to manage a sensor or control a door, or... but an Arduino for $10 or RPi for $30, sure.
I'm imagining a black and white Oscar Schindler cracking open a beautiful, bright red can of Coca Cola and taking a sip.
Hiring is a lot of the times more about finding someone that'll fit in your current team than about an individual with a lot of skill/enthusiasm. You don't sound very reliable and that would be my main concern. Even if you were working for nothing, it would still be a waste of the time invested if you are just going to leave in a month or two.

You should go into academia. I think that model is more what you are looking for.
On a larger scale, there are a lot of flashing LED road signs or radar speed warning signs that aren't connected to the grid. Instead, they are powered by a small solar panel with a battery for at night. Even simple stop signs on wooden 4x4 posts have these.

At least in my area, the speed warning signs tend to get moved to a different location a couple of times a year, and not having to run any wiring probably makes that significantly easier.
If banking is a utility, are they required to invest in anyone who asks?
Unlike deer, at least some humans are capable of not pooping and drooling on other people's food.
True, but I don't see how it would be any worse than running JS on any other web page. Assuming it is implemented in a safe way, that is.
Rapsheet for Cloudflare
> Cold hard truth? We caused this problem, Facebook is a great scapegoat, and most here likely contributed to bigger issues with information distribution in one way or another through their employment.

Yeah, yeah. We should all recycle more and drive less too; smokers should stop smoking, and the anxious should stop having anxiety.

Users didn't create the system that exploits them, and it's very weird any time I see someone blaming them for it. Facebook isn't a scapegoat - they did exactly what they are accused of, and they should be accountable for it.
This desperately needs an option to disable PDF js.
Just because it has the prefix “ham”? Can muslims use ham radio or hamming codes or hammers or hammocks or visit Hamburg?
That's a tiny amount of money. Or are you going to listen to a million songs for £1? It's still reasonable to batch a few hundred listens for a small transaction every month.
MMT Visual Explainer: Insights from the Deficit Myth
Things are bad everywhere for Rogers, nationwide.

https://downdetector.ca/status/rogers/
Surface expands its Secured-core portfolio with the new Surface Laptop 4
One of the prettiest identicons I've seen.

Since it doesn't seem to be lossy, I was wondering if it could be somehow adapted to something that could be scanned as a QR code. I guess the minor color shifts might be hard to get right, but maybe combined/replaced with some form of symbol inside rings to help, a dot/dash combination?
It does have a type. You just wrote it down!
??? I print through Firefox all the time with no issues. What exactly were you experiencing?
You're converting from PCIe to USB 3.0 and then back to SATA. Isn't that extremely wasteful?
Not only do you get poor passwords like that, you also get water cooler chatter about how users "beat the system" by using companynameApr2021!

Nothing worse than users blabbing details about their passwords like that.
Fan is A Tool-Using Animal (2013)
maybe that one?

https://media.ccc.de/v/36c3-10832-how_to_break_pdfs
Element does encrypted search fine on desktop, fwiw.
Maybe you’re projecting a little? I don’t use Facebook or Twitter at all and pay full price for the NYT and Economist.
Who’s Debugging the Debuggers? Exposing Debug Info Bugs in Optimized Binaries [pdf]
Yes, the 'market value' would also include the risk profile. Crudely, if there's a 75% chance something goes bust, then the value is only 25% of what it would be if it was going to be 100% successful.

For growth companies, the likelihood of failure tends to be lower, but this company is in many ways still at 'seed stage' dynamics with no established base, business plan, revenue, still in a closed beta etc. etc. and a high likelihood of failing.
"A friend" used to have the password set to the 3 character month name + the month ordinal + "!" - MarMar04!

We were required to change passwords once a month, and not re-use any of our last 6 passwords.
It's vandalism if and only if the property owner hasn't consented. If the original "artist" didn't have consent but the subsequent "graffiti" artist had consent, then the original artist is the vandal and the graffiti is legitimate.
If the issue is a protein folding the wrong way, and inducing that fold into nearby proteins, why doesn't this just happen spontaneously in humans?
I have an idea. Why not allow embedding a full browser engine inside of a PDF, complete with tabs and extensions? I hate having to leave Adobe Acrobat in order to read my Gmail, so I think this feature could be really useful. Anyone who builds a PDF can include their own custom browser that their users will love.
Tangentially, is is presumptions to see the wave of stimulus checks as the genesis of a UBI system, not named as such, but essentially what we will end up with? Since many times government programs are never rolled back.

Imagine: every 6 months or so, $X gets sent out.
Despite loving such projects, sometimes I have a feeling that concentration on recycling shifts attention too much from the real causes of waste pollution, such as overproduction, overconsumption and lack of investment in biodegradable materials.
With its blackbox boot procedure and all of the security stuff you have to disable to even run a pared down kernel with limited support for basically everything since the system architecture is also a blackbox, I'd disagree. It's unlikely to be reversed engineered into a defacto standard like the IBM PC was.
Oddly, I had found the Caliphate series quite underwhelming when it first came out. To me it was a narrative style I find quite grating: there was so little material to go on, that Rukmini's journey itself was the story. Not my cup of tea.
After all these years, I can still close my eyes and hear the static buzz of the power lines...
Almost time to get a new navi.
Washington Monthly would know about the topic, having previously been accused of being one of the many media companies bought off by Bill Gates. Probably looking for a new sponsor themselves.

https://reclaimthenet.org/gates-foundation-funds-facebook-fa...
The target of the tax should be the party creating the problem so that they themselves can solve it.

Before you plant down your office in some densely populated area you make a cost benefit analysis. The housing problem is part of the cost. We've traditionally expected others to deal with it (read pay for it) but it doesn't work. Or put differently, we've failed employers in creating housing for their employees. So now that we've proven ourselves incompetent we might as well put the puzzle in front of those who created it.

It's easy to ignore your staff being unable to afford a roof over their head if you are relatively unaffected by it. The moment you get billed for it you can assign the task to someone and create a budget. If there are also subsidies we can expect corporations to attempt to solve the puzzle.

If they are unaffected by the problem it is really hard to get some solution going internally. Who knows, perhaps they are more competent than the rest of us? If not the number of jobs (demand) can be scaled down to fit supply.
The usual answer to that is to dictate a minimum difference policy between credentials (meaning you have to provide the previous password at the point of change as it can't be read from elsewhere if properly stored, but that is usually the case as a check against someone changing passwords using a session that is accidentally left unlocked). That can lead to passwords-on-paper which is an issue itself, though not a high risk if security against remote attackers is your only significant threat profile.
The real story here is that Facebook is paying off too few people.

And, I bet Bezos is paying Bezos at WaPo. The man is a genius.
> there is no way to guard against people just using a basepassword and appending some type of counter to it.

Sure there is. In your update logic, decrement any numbers and check the hash against the existing password. Alternatively, require the existing password in the same form and you don't have to check against hashes, since you have the plaintext password right there.
> work on interesting projects, why not start your own?

For what it's worth, many people who don't need the paycheck, or don't need a particular paycheck still go to a "real" job just because the scope of what they can do on their own doesn't match what they want to achieve.

People also join projects to learn things that are harder/less efficient to learn on your own.

I'm certainly not saying you can't do an interesting project on your own, just that many people are interested in projects they can't practically do on their own. Some might scratch that itch with an open source project or whatever, but especially if it requires hardware development, it may not be practical for many individuals.
The spacings are not random, they are still based on ratios. They just include more intervals in (what we call) the octave.

The linked article actually explains the math pretty well.
You need to try elm. Elm is better despite not having everything you mentioned. I’m not a fanboy either. I just used elm for one project, but from that it’s already enough to know.
>The ‘Take a Screenshot’ feature was removed from the Page Actions menu in the url bar.

Odd, this is the only place I accessed it from. Not a big deal as it's still on the context menu and also can be added as a tool bar item but I am curious the rationalization behind this change. That seemed like a great place to have it to me.
> PDF forms now support JavaScript embedded in PDF files. Some PDF forms use JavaScript for validation and other interactive features.

That's the first item listed under Features, yet I wouldn't classify that as a feature! That's a vulnerability waiting for an exploit.
This is just VCs trying to corner the market on promising startups. If A16Z takes 20%+ ownership in all reasonable startups even at high prices they may still come out ahead when one of those is the next FB. They are blocking smaller VCs out of the market, rather than thinking clubhouse will specifically become profitable.
> Classes bind together data and methods

Not in CLOS, from which Julia's mechanisms are derived (which leads to the question why not CLOS but Python of all things should be used as a source of "normal sense" of anything Julia-related). In CLOS, classes bind together data, generic functions name abstract operations, and methods represent specific code that deals with implementing a generic function for a particular combination of type arguments.

> which is what leads to all the problems

I don't think anyone is disputing that here. There's a reason why CLOS didn't do any of that.

> In Julia functions are generic, and specialized to methods acting on arbitrary combinations of types; they are freed from the data.

...yes, just like in CLOS (unsurprisingly, given Julia's heritage), and those types are effectively CLOS classes.
Not all of them. The Apple stuff, I agree with you.
Amazing, I was just looking at a library like that, good timing
Just run Emacs :)
I certainly pay for some of my news. I subscribe to two US newspapers, one international one, a trade newspaper, a glossy trade magazine, and two US weeklies that are among the heavy hitters of criticism and cultural writing, including a lot of news analysis and investigative reporting. And that’s just the paid subscriptions.

I wouldn’t be so quick to assume the HN audience, of all audiences, is penny-pinching serious journalism out of existence. I bet we even have a fair number of WSJ subscribers among us.
Maybe the form is doing a browser check instead of a feature check and just needs to be updated?
Should you have some coffee?
The chilling effect is real. Even if service is reinstated, the precedent is now that major platforms can arbitrarily censor your news stories for weeks, shut down your servers, and remove your apps from their app stores. Why would anyone build anything remotely controversial on these platforms?
I feel like you would be better off finding companies that interest you, and inquiring if they would be willing to hire you as a part time contractor.

What you’re proposing here feels like such a deviation from the typical hiring process that I just can’t imagine many companies going to the effort of making you a personalized proposal just for you to turn it down as not interesting.

Being unable to find anything that interests you also comes across as a bit of a motivational problem that could scare companies off from investing in you (if not with money than with time).

Just my two cents. I don’t consider myself an expert on interviewing or hiring, so I could be wrong!
are there hn hall monitors that I'm not aware of? like why are you policing people's jokes? For the life of me I will never understand why people voluntarily take on the mantle of authoritarian. Do you feel like you're contributing to something by censuring someone for a joke?
....I have lots of questions about this "homegrown web tracking tool" (assuming this isn't still part of a joke?). What??? Was this opt-in? Did they track across everyone? What was collected? This is troubling, to say the least.
I'll also leave here this very nice list of identicon implementations: https://github.com/drhus/awesome-identicons
Well if you can run interactive javascript then you're mostly there, PDF is pretty much Turing complete so you can just crosscompile a browser into it using javascript to take care of the interactive parts, though you might need to rewrite the rendering logic.
It would be the perfect timetable for an adversarial country looking to become the next superpower to use as a bio weapon though.
I don't know much about UK politics, but the government over there seems to adore surveillance and has no qualms with recording as much information as they possibly can. I simply don't see them accepting the idea of an anonymous payments system.
I see where you're coming from, but what are you thinking could be "proper limits on their power" ? The original cases of murdering cops could be solved by prosecuting the specific murderers and the system would likely hold, and I agree we need that kind of accountability nation wide.

But this mass action is different. Here, they are acting together to defy a court order as well as the Constitution. Even the mayor is powerlessly criticizing them with "gassing is not a human way of policing". The entire organization is in open rebellion against our civil society. At this point, it seems the only things that could contain these lawless thugs are actual "law enforcement", the national guard, a citizen militia, or maybe cutting their funding.

And one of the necessary steps to doing any of those is to delegitimize this group of goons. They're no longer called "law enforcement", because they've chosen to not respect the law. They're wearing those uniforms to fuel their own ego, not because they're granted any authority by our society - their abuse should bother all legitimate law enforcement. And they need to be treated like any other lawless paramilitary force.