skysight-inc/HackerNews huggingface dataset:
In that case this does not help. SELECT json['a']; will not return the value of the string in {"a":"ble"} (like it does in Javascript), but a JSON encoding of that string, so '"ble"'. You'll still not be able to do simple comparisons like `SELECT json_col['a'] = some_text_col;` Superficial familiarity, but it still behaves differently than you expect.

Is there even a function that would convert JSON encoded "string" to text it represents in postgresql? I didn't find it.

So all you can do is `SELECT json_col['a'] = some_text_col::jsonb;` and hope for the best (that string encodings will match) or use the old syntax with ->> or #>>.
Ask HN: Are there software companies with a good life/work balance?
I worked for a long time in different software engineering positions in b2b tech companies. It looks like a majority of them go through a very similar trajectory - more product, more customers, raise more money, more people, rinse and repeat until you get to IPO or acquisition.

On the one hand, this approach is understandable (it’s what business is built for), and the pay is good in such companies. But, on the other hand, life/work balance usually sucks.

First of all, there is an unsaid expectation of long hours. A company is always on the verge of signing a new huge business deal, preparing for the magic quadrant, and having critical projects. And even if some reasonable hours are negotiated/achieved, people are forced to have an insane amount of multi-tasking (juggling numerous tasks, initiatives, planning, replanning, strategy shifts, and so on). On the paper, life/work balance is advertised in such companies. In reality, work at such a company is draining way too much energy.

Another unpleasant side. As part of this rush forward, engineering usually cuts many corners (both in tech and vetting new hires). This rush creates a mediocre (at best) tech culture with a lot of tech debt and not following well-established best practices. A huge part of solving/fighting these problems falls on the top tech talent (especially on responsible employees).

I am at the stage of my life where physical and mental health is more important than a marginal dollar. As a result, I have started to look around, and I would appreciate the advice.

Do you know which specific companies or preferable areas have better work/life balance and are more committed to tech excellence?
"just trying to score internet points"

No, Zig absolutely has an awesome compiler. It's not "a toy" or a "one man passion project" and it's condescending to reduce it to those terms, as if it is not also somehow "industrial scale".
It all depends on your constraints and who needs SSH access, but if you're like me, you (1) have a number of personal VM instances on major cloud providers and (2) don't want to deal with anything but 'vanilla' Linux and sshd. No customizing kernels, no portknocking, no TCP wrappers, no fail2ban, no VPNs (not even tailscale which is very nice).

The approach that I've been using for about a decade is a script that gets your current (internet facing) IP and then uses a cloud API credential to add that IP to the cloud provider's firewall as a valid source IP to port 22. The API security and cloud firewall implementation is left to the major cloud providers (and they are very good at these things).

I run it manually whenever I'm in a new location or in the rare cases my home IPs change. You can add the IP to the list or replace the list each time. Or clean it up after a trip with a separate CLI flag. I figured one day I would automate it to track IPs, run constantly, and trigger the change if it detected a new IP - but that day never came because it never annoyed me (ymmv).

This approach could be extended to teams, but there are more details to think through about API permissions, etc.
As they should, look at the trouble caused by calling COVID-19 the `China virus` or `Wuhan Flu`.

I suspect, but cannot prove it is attributable to /some/ of the anti asian sentiment we've seen of late.
Is this just a way of saying that no relations are absolute?
Huh, most of the words pairs you listed have extremely distinct consonant differences, but not very distinct vowel length to my ear (which is pretty influenced by southern appalachian english). Ie, "loose" is a "s" sound, and "lose" is a "z" sound, "ck" is much harder than "g", same with "f" vs "v" and "d" vs "t". None of those words sound awkward when shortened to me, they just sounded like they were being spoken faster for some reason (for emphasis or pacing reasons). So I wouldn't consider those different due to simple vowel length differences, but due to core phoneme differences. I do see that the people in that thread who combine "muck" and "mug" are from New England, so maybe those are specific to that accent.

There are words which I do pronounce the "same" as each other - but do actually vary them on on length alone. These are mostly for "merged" words.

Ie:

"Mary" - longer sound on the "a" vowel than the "ry" sound

"Merry" - longer sound is the "ry" sound

"Marry" - is said like "Mary" except the "a" sound is even longer. "ry" sound is same length.

Part of me also wonders if the southern "drawl", where vowel sounds are extended, is actually a weird way of standardizing vowel length times across distinct phonemes. Though I wouldn't be surprised if there's still variation there too, but it would certainly be interesting to compare.
Windows drives me mad with this stuff any time I have to use it.

I'm baffled by people still claiming "desktop Linux hasn't arrived" when they put up with this shit.
Not currently, but it is theoretically possible.
I don't think it matters a heckuva whole lot.

Personal blogs depend greatly on two things:

1. Who you are.

2. The quality of the writing.
I seem to remember a distro for turning an old PC into a router called "Coyote Linux". It fit on a 1.44mb 3.5" floppy. There was another too that I'm not remembering currently. I find it amazing what can be done with simple computers and advanced software.
> Their out of pocket maximum was likely no more than $10k, if that.

In the US, medical insurance out of pocket maximums don't mean it's the most you can pay.

I've had years where according to the insurance company accounting my out of pocket has been less than $1000, but according to bills I actually had to pay my out of pocket was close to $10K.
I worked translating APL into C. APL died for the same reasons Perl died. Nobody wants to read your code. APL had the niche back in the 70s that it was a very productive language for 110 baud teletypes where you could watch the characters coming back from the timesharing system print out line by line as you waited. In that age, conciseness was a killer feature.
> Simply drag-and-drop your files to make it instantly available for your clients. The next time they start your application it will self-update to the latest version.

How does the latter half of this work? Specifically, if I haven't modified my app to incorporate your service, how does running it trigger the updater? I assume some sort of wrapper executable?

If the above is correct, how much overhead does that wrapper add? What happens if an update is available, but the user's internet connection is slow/down? Will my app be allowed to run while updates are checked for in the background, and if so, do you fire a message telling the user once an update is known to be available? Or just silently restart it?
> The "security by obscurity" one-liner is one of my favorite examples of the sort of black-and-white thinking that is harmful to software engineering.

My primary problem with people going for "security through obscurity" is that very often there are things which are intentionally obfuscated or obscured, in such a way that the implementer thinks that their method of hiding things will provide a significant measure of security. But then all of the other more common sense security precautions that should be implemented before the obscurity are ignored.

If I had a dollar for every industrial/embedded/M2M/IOT type thing that tries to be secure through obscurity but has other gaping holes in it, once you're familiar with the technical workings of the product...
Avoiding something like this because the possibility exists that someone will do something else wrong is just silly.

Also, the amount of CPU taken by brute force ssh is not zero. There are plenty of good reasons for this. Even if this by itself isn't the best implementation, it's an example of how to make things much, much harder on attackers.
I think we should explain this more clearly to the original author; it’s probably true that maybe 5% work on ads but that is literally the ads system like Adwords and Adsense. The only reason those are valuable is that Google has tons of traffic and that traffic is driven by the work of the other 95% working on sub-verticals, core search, Youtube, etc.

If you take away the people working on those these services would stagnate and people will start going to another search engine and then you lose revenue.
house owners vote in large numbers against up zoning, against densificatjon and against public transportation funding. (2 sides of the same coin)
> Rust Evangelism Strike Force

I did get your point but would like to point out that using these slurs isn't helping any discussion.

There are fanatics in every area everywhere. Their existence doesn't devalue any of the bigger groups they belong to. Their existence is a fact of life.

I've worked with plenty of Rust devs (and I am an aspiring one myself although not all the way there yet) and I've only ever seen hard-working people with an excellent eye for detail and desire to maximally utilize the hardware and have better safety than other languages they worked with in the past. Zero fanatics.
Lack of supply, increasing demand. A system of government regulations designed to increase scarcity, while shuffling resulting gains to property owners.
Small Alphabets
Canadian pints differ depending on whether you are speaking English or French
Isometric map overviews from GoldSource games (Half-Life and mods)
Pedantically put.
Ask HN: How do I help my 6yr old learn robotics and coding?
My kid is fairly advanced for his age, he reads at a 3rd grade level and has been very interested and repeatedly asked me if he can build a robot that he can code to do stuff. I’m not a developer like most of you all around here so I’m hoping for some guidance if anyone has any experience. I know there are plenty of ‘coding robot’ kits but I’m not sure any of them are any good. For code, at one point I did the little flex box frog game to learn, are there any recommendations for things like that for young kids to learn programming?
Mountain shadows cast across Alaska during summer solstice
First, it _would_ make sense to use a narrow c-like subset of c++, but lots of people wanted to bring 'good practices' from c++ to the kernel.

And many of these were _bad_, C++ was a different language back then and the culture of how you write C++ was different. There were times when it was fashionable to write OO spaghetti almost as bad as the stereotypes about java, or templates that worked except for some unforeseen footgun (then you could template libraries that worked correctly but figuring out how was a trip). And before all of that there was a decade when C++ compilers were just _full_ of bugs, and before that there was no standard and every compiler was different. The negative stereotypes about C++ come from all that.

I think he had every reason to fear that e.g. he would have to fight someone who implemented control flow using an inheritance hierarchy because it's a pattern. And he could find himself in the minority.

(Also I'd say there are still counterproductive fads, and it's still common to write C++ that's beautiful on the outside and completely inscrutable inside, or generally pay a huge price in code size and complexity for marginal gains elsewhere, or to depend on optimizations that don't trigger. Same in many other higher-level languages but somehow not in C.)

Second, more important, i don't remember any talk of adapting C++ to bare metal programming, while there is an ongoing cooperation with rust folks already.
With regards to developed countries? It actually makes the news occasionally.
People are downvoting this, maybe because of the fact-of-the-matter'ness, but I think this is probably true, coming from someone who despises Facebook. Especially for certain age-groups, Facebook is one of the few social networks you can assume people have logins on, and (maybe especially) niche communities need to lessen friction to get people involved.

I don't know, I've never tried to create a public forum for this kind of thing, but I'd bet you'd get more activity out of facebook than some bespoke web forum or IRC/Matrix/what have you.
I'll copy my example from below:

"There are still many of us out there who believe that hiring candidates based on their race is not healthy for society, the company, or any individual candidate. That opinion is largely being stamped out, by design, in management at the orgs I'm talking about.

This has nothing to do with not wanting to step up and manage."
I absolutely agree that it is awesome. That doesn't mean that returning condescension with more of it is helping the conversation, or getting said awesome compiler the respect it deserves.
Obviously those of us not in the core team can only fill wish lists. :) And I don't want to sound entitled!

But I hope that if it's both possible and not very hard, then it will be considered. I'd personally love to double down on Rust's safety and dial it to eleven in all my hobby and commercial projects.
KolibriOS is an open-source Operating System for x86 (32-bit, 586-class and above). It is entirely written in assembly (assembled with FASM). It requires only 8MB of RAM to boot. It has a TCP/IP stack and USB support. It has a graphical user interface which is actually on par with most of the "lightweight" Linux window managers, such as LXDE (but I think LXDE is probably larger than this entire OS lol). It fits on a single floppy.
The amount of CPU taken by brute force SSH on any modern system is negligible - unless we're talking about traffic levels that would qualify as a DDoS. Maybe 0.02 points on a standard unix load scale. In any case you should have something like fail2ban or its equivalent that blackholes traffic from repeated failed attempts to authenticate, not just to your public facing ssh daemon, but lots of other things. The default debian fail2ban daemon configurations, easily toggled on or off to watch various log files, are quite sensible.
This looks cool but can you share anything about pricing?
Primordial Particle System
Yes! useCallback is an optimization and using it prematurely can be problematic.
I didn't mean the stress issue (stress in Japanese is a completely different matter anyway) but the general principle of complex-to-write-down "rules" that are not taught explicitly to native speakers but which people automatically adopt.

Classifiers are a common example; words are often taught with classifiers (in most IE languages, gender) but you pick up words in reading or speech and automatically absorb the appropriate classifier even if not used, from other syntactic agreements. Japanese of course has a richer set than gender.

In another case: German, how you compose compound words (and far more interesting to me, how you read unfamiliar ones at a glance rather than parsing them as a student would) uses rules that just "feel obvious" after a while.

You a fast learner. It usually takes me several years of daily, primary use of a language before these kinds of things are intuitive.
1) It doesn't upload/download anything. All transcoding/trimming happens in the browser.
2) There might be a slight loss in terms of quality seeing as it's using lossy encoding, but it shouldn't be noticeable to the human eye.
> some cars even gain value by becoming collectible

I've run some figures. Almost none pay back their storage, maintenance, and tax costs, let alone the opportunity cost of tying up the money.

I remember on an episode of "Antiques Roadshow" where some guy had a couple Leica's his father bought in the 1960s. They were mint, with all manuals, receipts, etc. The amount they were worth was pretty large, and the guy was ecstatic that he'd hit the jackpot.

The trouble was, if his father had put the same money into the S&P500, a completely boring investment, it'd be worth more today than those cameras.
It's one thing to lock yourself out of your application or admin interface when NTP breaks. It's another thing entirely to lock yourself out of recovering the server entirely when clock skew inevitably hits you.

If you really want 2FA for SSH, use something like Yubikeys that increment a counter and generate tokens based on that counter. And use it during the actual authentication session, not for figuring out which magic port the server will be listening on. You never have to worry about synchronized clocks, just a database tracking the highest counter value ever seen, so that previous values can't be reused.
If this is a joke, it is very well executed.
I've learned almost all the slurs I know from comments or media sources complaining about them. It's the only place they're used in polite society.
That seems weird to me, since shouldn't political activity include at work?
> Punishment and re-education should be prioritized depending on the crime, but in any case both are just nice, optional perks.

Again there is this framing about what is deserved and what is owed.

This is in contrast to the framing of what is best for society — if your prevailing theory is that some people are safe and some people are dangerous (as opposed to some people are criminals and some people are owed), then those individuals who still have a good future story ought be candidates for rehabilitation. From this perspective, it is not a matter of what is a "perk" and what is owed, but rather what the state has to gain.
IncludeOS – Run your application with zero overhead
The problem with useful history is that it reminds people that information quality can be time-independent. I can read something written 20 years ago... anytime in the next decade, without a huge difference.

Which tends to directly clash with the temporal rat-race design used to keep customer eyeballs glued to apps for 100% of the day.
Archive copy: https://archive.is/OiQir
Ridiculous. Have you met engineers from other disciplines? They employ empiricism constantly. You can't build the golden gate bridge without proving that the steel you want to use can take the strain. "Obviously steel C is better than steel Y" won't cut it.

If anything, software development is sandcastle-building. We all have ideas on how to build it, but at the end of the day we're just amateurs fucking around with plastic shovels.
It is not simple. But I would like to see it someday too :)
I feel like a lot of the immigrants I meet from India are landowners there and not exactly the lower class. They all talk about having people to clean their houses and do their laundry.

Not rich per American standards, but definitely people that have an option if their gambles don’t work out.
INAL, but... you might want to revisit that code. article 17, right to erasure is about erasure of personal data, not about making non-indentifiable. of course they dont define erase or delete :-)

(edit: typo)
Of course these charts are only a starting point of inquiry. Several scholars, philosophers and intellectuals have both predicted such trends and provided rigorous intellectual analysis of their underlying causes.
Thanks Steve, how would you rather that I reword the comparison in that last sentence? Let me know and I'll make the edit.

To be fair, your comment would also be better served without the insinuation of "just trying to score internet points".
In addition to the terrible flaws with this thing that everyone else has pointed out (summary: "all the other stuff google does is necessary for the ads revenue to continue"), isn't this basically what 20% time was? I mean, formally different in that Google kept a 100% stake in anything that was produced that way, but pretty close.
https://freemusicarchive.org/

https://www.jamendo.com/

https://cchound.com/

http://ccmixter.org/

And probably many more
Why not just implement Single Packet Authorization (SPA)? The port only opens to that specific source on a recent cryptographically signed request with a timestamp. https://www.linuxjournal.com/article/9621
From https://itsfoss.com/hyperbola-linux-bsd/

> [T]he interest in allowing Rust modules into the kernel are a problem for us, due to Rust trademark restrictions which prevent us from applying patches in our distribution without express permission. We patch to remove non-free software, unlicensed files, and enhancements to user-privacy anywhere it is applicable. We also expect our users to be able to re-use our code without any additional restrictions or permission required.

> This is also in part why we use UXP, a fully free browser engine and application toolkit without Rust, for our mail and browser applications.
Can I ask why you don't trust running fail2ban on 'cloud' based VMs? The defaults for how long it will ban failed ssh attempts are quite sensible, and short enough to prevent you from accidentally locking yourself out for a very long period of time (automatic unban time to remove iptables rules).

If nothing else, it serves the useful purpose of stopping the log files from being cluttered up with various botnets' fully automated ssh username/password attempts that are out there, trying to gain access via well known factory default credentials.
Hardware clocks are famously unreliable and inaccurate. NTP has failure modes that can result in servers being wildly out of sync with reality. Letting either one of those hose your ability to log in and diagnose/recover the system is a mistake.
I bought my first computer and started playing with linux and BeOS around the time win98 was released. My dad was pissed. I had liked the 3 series, but 95 was horribly bloated for the hardware in our family computer, and mine was even crappier. I certainly didn't want another "upgrade". My dad begged, pleaded, offered to buy me my own copy of the OS. He never really elaborated what made him so mad about open source software. Years later, I met one of the marketers behind the embrace, extend, extinguish policy and learned that my dad swallowed a misinformation campaign hook line and sinker. What a riot. I thought that he was just picking a fight with me because teenagers are supposed to be rebellious and this was apparently my "thing"
Relaxing Rain Sound for Sleeping
If Linus dislikes something, you know it's either really bad, or really good.
This book has been proven a fraud by historians around the world time and time again, including by many leading historians in the United States. It’s fraudulence, and the support and proliferation of it by US state officials and US academies is sheer embarrassment. The fact that anyone still has the nerve to so much as imply that this is a worthwhile source of information should serve as a stain on the prevailing liberalism of our times.
https://www.youtube.com/watch?v=KOO5S4vxi0o
If you want a launchable app, you can also use Automator (select new App, drag and drop “Utilities/Run Shell Script”, insert the path "/usr/local/bin/ocr" as the script content, save) and put the resulting app in the Doc. (No terminal or screen space required to launch, and it's always at your finger tips.)
> but four other students who did not appear to be Zoom bombers were also listed as having Malachi’s public IP address, an impossibility since they were not in the same house

Could be Zoom messing up their logs, but could also be NAT from the provider.

A few years ago, me and my sister noticed we had the same IPv4 address, despite not living in the same household. We had different IPv6, though. It seems to be becoming more and more prevalent due to IPv4 exhaustion.
My Road to Erlang (2008)
https://web.archive.org/web/20210522204453/https://ajc.com/n...