skysight-inc/HackerNews huggingface dataset:
> (hopefully there's at least sudo so you don't log in directly as root

Correct, at both FAANG I logged in as myself and had passwordless sudo. (Passwordless sudo being preferable to minimize the number of machines that have user password hashes at the company, since these can be brute-forced when employees set bad passwords).

> your SSH key is passphrase-protected and you use an SSH agent

I don't have long-lived SSH keys. The FAANGs where I've work use short-lived (~24h) SSH client certificates, issued by Single Sign On and a server-trusted SSH Certificate Authority, where the SSO authenticates the user via an MFA (typically FIDO2 or variants with a Yubikey press). (Yes, you can indeed employ CAs with SSH, and generate short-lived certificates [1]). I don't generally type my password after signing into my client machine, or possibly once more to authenticate into the corporate web framework (w/ MFA).

After that, every SSH action requires a individual MFA approval. It doesn't require a password or any SSH key protected by a password – I think long-lived SSH keys, like you'd protect by a password, are an anti-pattern because when employees leave the company or change teams you have to remember to revoke them or update their keys. With the SSH CA approach, you simply change which certs it's willing to issue to an employee for which servers based on policy; and then people who leave the company can't access that system altogether. You get the right behavior by default without anyone remembering to take action during off-boarding.

No long-lived SSH keys with passwords. Short-lived SSH certificates don't need their own passwords.

As a developer operating systems on a suite of servers, it's simply a business need for me to have SSH into the (virtual machines that I own) running on those servers (not necessarily the underlying hypervisors – those are an entirely different beast).

If you were in the cloud it's equivalent to being able to obtain SSH certificate that allows you to log onto e.g. EC2 instances. Or if I'm a team that's operating Bare Metal instances, I can log into those.

I don't accept that root is less than necessary to do my job. When things go wrong there are too many directions that debugging can go that you cannot explore without root. Like I mentioned, I can't take a machine out of service, and attach a debugger to it, and invoke the failing functionality. I can't change machine parameters that may fix the problem like memory limits. You can't even examine the contents of a number of crucial logs without it.

I agree with the principle of least access and employ it in my personal systems as well. At work, I think POLA results in you having root to every machine you're responsible for.

[1] https://engineering.fb.com/2016/09/12/security/scalable-and-... (Disclosure: the FAANG I currently work for is Facebook)
July 20, 1969 was a busy day for Neil Armstrong. I can easily imagine a children's picture book. Sponsored by Google perhaps.
The "downscaled" image 360x360. It's pretty easy to compare two images at that size to determine if they are the same. You're not going to end up investigated unless you actually have actual picture of child pornography. Also, not just one, the process doesn't even start until you have a fairly large number.
Indeed, why try to write a parser? There are dozens already for every programming language you can think of. Yours is likely to be worse.
You own your iPhone. Apple owns iCloud servers.

It's very simple. You want to upload images to iCloud? Then let your phone scan it and upload it. You don't want your images scanned? Don't upload them to iCloud.
Apple censors engraving service, report claims
> I'm saying that when you decode an Avro document, the result that comes out (presuming you don't tell the Avro decoder anything special about custom types your runtime supports and how it should map them) is a JSON document.

Semantic point: it's not a "document".

There are tools which will decode Avro and output the data in JSON (typically using the JSON encoding of Avro: https://avro.apache.org/docs/current/spec.html#json_encoding), but the ADT that is created is by no means a JSON document. The ADT that is created has more complex semantics than JSON; JSON is not the canonical representation.

> By which I don't mean JSON-encoded text, but rather an in-memory ADT that has the exact set of types that exist in JSON, no more and no less.

Except Avro has data types that are not the exact set of types that exist in JSON. The first clue on this might be that the Avro spec includes mappings that list how primitive Avro types are mapped to JSON types.

> Or, to put that another way, Avro is a way to encode JSON-typed data, just as "JSON text", or https://bsonspec.org/, is a way to encode JSON-typed data

BSON, by design, was meant to be a more efficient way to encode JSON data, so yes, it is a way to encode JSON-typed data. Avro, however, was not defined as a way to encode JSON data. It was defined as a way to encode data (with a degree of specialization for the case of Hadoop sequence files, where you are generally storing a large number of small records in one file).

A simple counter example: Avro has a "float" type, which is a 32-bit IEEE 754 floating point number. Neither JSON nor BSON have that type.

Technically, JSON doesn't really have types, it has values, but even if you pretend that JavaScript's types are JSON's types, there's nothing "canonical" about JavaScript's types for Avro.

Yes, you can represent JSON data in Avro, and Avro in JSON, much as you can represent data in two different serialization formats. Avro's data model is very much defined independently of JSON's data model (as you'd expect).
Show HN: RegExp – Structured Regular Expression
Its a great town for livability!

I called it a nothing town in reference to real estate. We are hours from major economic areas, have no industry to speak of, aren't constrained in land area, don't have anything unique, etc...

Nevertheless a "cheap" 3 bedroom house is $650k.
I notice that while you talk a lot about why you believe you should be able to tell what "high IQ" people are like, you don't say anything about what it is about these people that tells you they're not.

In other words, all you've done is attempt to establish that we should just trust you when you say they're "low IQ", rather than give us any actual evidence that they are, or even any elaboration of what you mean when you say that.
Thanks dang! I don't seem to be able to reply to OP's top comment for some reason. Is it a wanted behavior or a bug?
> Marc: I think there’s a real argument, and this is the most uncomfortable form of argument, there is a real argument that there are just a certain number of super-elite people.

I really enjoy it when people say exactly what they think.
The CEO probably could’ve survived the data breach if not for the Target Canada fiasco.
What I've observed is that programming languages have significantly caught up with the math behind them. And it's not uncommon for some of the nearly-cutting-edge math to be hundreds of years old, or more. I recently looked into algorithms for finding the GCD of two numbers, and Euclid's algorithm from 300 BC is still basically the best way to do it (with an optimization for our binary representation happening in 1967). As programming languages catch up to the underlying mathematical theory, they're going to start progressing at the pace of math breakthroughs. That kinda sounds like a good thing to me.

I don't see object-oriented languages as the pinnacle. Notably missing from your list are functional languages, which I also don't see as the pinnacle, but rather "beside" OO langs. A 5GL to me is one that incorporates the best of each paradigm. I generally program in C# and TypeScript, and I'm constantly switching between an imperative style, an OO style, and a functional style. C# is almost my ideal language; its type system is just a little too weak. Perhaps it's a 4.5G language. But let's look at what you can do with it:

* Strong OO support

* First-class functions (functions-as-data)

* Strong support for reflection, allowing powerful IoC and types-as-data

* Good generic type support (reified! Yay!)

* Generators with yield

* Async/await flow programming, including "yield async" mixing the two

* Low-level bit manipulation, arrays of structs (certain memory guarantees), unchecked operations when you need them, and other C-style concepts

* LISP-style macro manipulation (code-as-data) using Expressions (under-appreciated IMO)

* No higher-kinded types :(

* LINQ, if you're into it ... but I prefer fluent because it's more extensible and language-idiomatic (although you can write your own limited LINQ-style methods)

Add in higher-kinded types and how could you not call that a 5GL? I honestly don't know what else you could possibly want from a programming language, except maybe Rust's borrow checking (which frankly is a recent breakthrough in computer programming, kinda challenging the premise of this whole thing).

My next big idea is a programming language whose type system is written with the "same sauce" as the language itself. So the output of a "program" could be the type system for another program. You could write your software in "tiers" of progressively more strict/knowledgeable type systems. That's one thing I haven't seen before that sounds neat, but who knows if it's actually useful.
Hold up.

Let's keep it in perspective here. "Worthy" of what? Dignity? Respect? Every human is worthy of those things.

I don't work FAANG, never even gotten a callback interview. I am a decent software engineer at a small company. I do pretty boring things, in pretty boring tech. I don't even understand how our k8s deploy works. I have to imagine your "pittance" of a salary at Amazon is higher than mine.

But none of that is embarrassing to me. It's just a job. It's not something that defines who I am. I clock out at my 8 hour mark and I go do things I love with people I love.

Comparison is the thief of joy. You aren't measured against anyone else, least of all other FAANG employees here showing off the best side of themselves. Be proud of yourself, and don't let your job define you. You are worth more as a human than your job title, and certainly the company you work for.
Have you performed any teardowns and analysis of any similar but newer chips? If so, how does architecture and manufacture compare? Have there been any significant changes in state-of-the-art over the last two decades?
I find files where the exact type of whitespace used is meaningful to be a sick joke.

Not all editors make it easy for you to use a tab character.

If only there was some other solution that would not require you to use a character that a lot of editors refuse to insert or even try to convert to spaces...
Cool installation! What was the process of obtaining the 5k abstract art images?
There was a similar result with fluoxetine (Prozac), another SSRI (and one that is generally considered safe).

I tried to find it and I found a much more recent study: https://www.nature.com/articles/s41380-021-01021-4#:~:text=I...

I had seen the original much earlier in the pandemic. There might be a link.
“A Big Money Funneling Operation” – Afghanistan Vet Reflects on Withdrawal
> everyone asks why don't we just thing that looks like a national identity system

Aren't passports national/federal identity systems?
When our cat had a similar procedure, they advised that it was okay to flush the cat poop (assuming you could separate it from the litter).

I did think it seemed kind of silly though. Like the state is really gonna hunt down whoever threw away radioactive cat poop.

The whole thing was more about 9/11 / terrorism than environmental damage.
Detroit riders wait for buses that never show
It could be an attempt to prevent someone from being socially-engineered into running code there – if you open the dev tools on sites like Facebook you'll see a warning message telling people not to paste anything in to the dev tools due to attacks like that. It's not uncommon for places to set policies based on general concerns and not having exceptions for technical staff.
Taliban’s Abdul Ghani Baradar is undisputed victor of a 20-year war
Let’s wait for the results before we decide what they mean
Despite the similar names, TSV and CSV are very different, in more ways than just the delimiter. In particular, CSV tries to handle escape sequences but its various implementations do so in different ways. TSV just disallows tab characters within fields, so its specification extremely simple: https://www.iana.org/assignments/media-types/text/tab-separa....
> The terrorist watchlist [...] could be used to oppress, harass, or persecute people on the list and their families.

So... what was it actually used for? Wasn't this the same list that results in extra scrutiny at airports & whatnot -- wouldn't that count as harassment?
T-Mobile subscriber here. I just received my first notification from T-mobile via a text message status that they have determined that unauthorized access to their data has occurred. They have no evidence that exposure to my credit card info was made (meaning they have no real idea). As part of their serious concern over protecting their customers and to protect my account, they changed my PIN. I'm no so worried about my credit card number as I am about all my personal info (name, address, ssn) being comprised to the point where identity theft becomes a significant concert. Somehow, changing my PIN doesn't instill a warm, fuzzy feeling in me.
I prefer our guerrilla artists in the UK https://secretldn.com/clapham-new-name/
I think the original comment is referencing cities that built early sewer systems where they do not have separate sanitary and stormwater lines. That is by far the more pressing problem: street drains (and often house gutters) dump directly into the same lines. These systems are usually in big cities and were built before sewage treatment existed. Building enough capacity to handle stormwater surges is often not practical: what was relatively clean rainwater is now contaminated with sewage.
Not for me (Mars works)
Randall Monroe shared a nice series of these last year: https://twitter.com/xkcd/status/1333529967079120896?s=20

"What year did Tom Hanks land on the moon?" "1970"

"When did the Simpsons learn to control fire?" "Dec 17, 1989"

"Which river did George Washington drown in?" "The Allegheny River"

It's got to be tough to train an AI that can generalize to (or at least recognize) questions outside its training set. Unfortunately, when 99% of questions containing 'when' and 'Neil Armstrong' have the answer 1969, it will need a pretty sophisticated algo to avoid the trap of learning that it should always answer 1969.

I wrote up another example of this last year based on a question with a real answer that Google still gets wrong: https://www.tedsanders.com/why-does-google-think-the-slowest...

Google (and plenty of other search engines) will all helpfully tell you that the slowest animal is the sloth, which is plainly incorrect if you just look at a video of a sloth and then look at a video of a worm. Despite their reputation, sloths still move visibly.
Brilliant double entendre title!

I'm sure it's not the first time this has been used but it's the first time I've seen it.

(in case it gets changed, it's: "Apple’s biggest problem is only getting bigger")
I noticed they just launched in aws eu-west-1 (Dublin, Ireland). There is now a new option to select the location when you create a new db. Yay it's now usable in Europe!
A better alternative would be user accounts with the credit companies but then people would realize how sloppy they are.
worked for Saturn too
I miss start drag and drop and contextual menus that were actually useful.
You could just become the contractor there and arbitrage :)
Interesting. When searching for, "when did neil armstrong set foot on venus?" It, shows, "In which year and when Armstrong set his foot on the moon?" and provides the correct year. That's presumably what should show when searching for Mars (or any non earth moon planets).
Moving: Bite-Sized Crypto News
We have launched a revolutionary Crypto App

Moving: It enables crypto beginners to become a better crypto investor

How we made this possible ?
- Short News and Insights
- Engage with other investors
- Transact the crypto using your preferred exchange without leaving the platform

Still not convinced?

Everyone knows the crypto market is so volatile
Staying updated is very important
- With Moving you'll get all the latest updates about the crypto industry in summary.

What If you are confused about which coin to invest in ?
- You can checkout the real-time portfolio of your friends and experienced investors.

What if you want to connect with some investors like you and have discussions with them ?
- Yes you said it, we did it.

Yes, we got everything covered for your next crypto journey

From Learning to Transaction, We'll keep you Moving forward.

Believe in becoming a better investor with Moving.

Download our app: https://download.moving.so/t6RX/app
In a more mainstream language, while it may have a few Stripe client libraries but if your true use case of being real time isn't full filled then it makes no sense to choose them. A working stripe client takes at most a day to write, compared to years that can go in changing the architecture of your application
What countries are you licensed to operate in? Some countries will also punish the player for playing on unregulated gambling sites, so it would be nice to know which countries you're licensed to operate in.
I actually don't like react. The whole thing reeks of religion.

I do like Vue and Svelte, though. They let me do powerful things without getting in the way.

Native APIs are fine but eventually you're gonna need some more abstractions in order to scale beyond a garage app.

Frankly, I tend to write my own stuff on the backend but there's so much more work on the front end, you end up either adopting or building a framework.
This is very exciting and, if executed well, a very promising avenue to dramatically shaping the efficiency of the federal government. One of the greatest sources of preventable waste[citation needed] in the public sector today is inefficient, non-competitive procurement. If Govly (or another upstart) delivers on this promise of lowering the bar of entry to the marketplace of government contracts, all of society profits from the economies of scale.
I've been following you guys' work since Screenhero then Slack integration then Slack reduced integration then Slack killing it (still makes no sense why) then screen.so then now we'll give a try to Pop!

> Yes, the domain was expensive. Roughly $1.5m. We consider it an asset that is unlikely to depreciate significantly.

Congrats on getting it! Hopefully it wasn't too much of distraction.
Covid-19 was brutal for Detroit. Bus drivers were some of the hardest hit and there were a lot of deaths. As a result a lot of bus drivers simply walked away from the job.

In the Motor City a third of the residents don't have cars. So they can't get to jobs or even get a Covid shot if they want one.
thank you!! let us know how it goes for you!
There's a chat icon at the bottom right
or drop me a line at igor@uselemon.io
I'm saying that each photosite definitely is included in more than one output pixel, and I'm also saying that the number of output pixels should be about the same as the number of photosites.

This is obviously capturing less information than if you had a completely separate set of photosites for each pixel, but the megapixel count of cameras is nevertheless accurate.

Modern cameras sometimes come with a "pixel shift" function, which uses the image stabilization system to take 4 images each shifted one photosite from the others to construct an image where each pixel contains the information of 4 independent photosites with no sharing between the pixels.

The resolution of the final image is the same as a normal image, but the result is much clearer, and far less likely to suffer from blue/red moire.
Its not a slippery slope when we've been at the bottom of the slope your whole life
Are there really people that want to require proof of vaccination to go outside? I haven’t heard that one.
Agreed, but I think the animated GIF and small, extremely compressed JPGs in the repo don't help. Maybe a youtube video?
The website instantly overheats my computer and made me close it.
Are the physical dimensions of the chip listed somewhere in the article? I'm looking but haven't yet found them.

At the beginning you say "this very small chip", and it would be cool to include the actual dimensions. This will make it possible to get a sense for the size of the features from the magnified die picture.

p.s. You write some of the best articles, I love the way you break things down and present them in an approachable way. Thank you, Ken!
Because there are still an absolutely overwhelmingly huge number of different, completely nonsensical images that all generate the same hash, and small perturbations of those nonsensical blobs also generate the same hash.

96 bit is just not enough data to generate anything meaningful, just give up on that thought.
Since you mentioned in a comment that your non-compete expired, maybe you are also no longer under any NDA. Can explain to a person outside of the startup world how this buy-and-kill works? If not killing a competitor, why? What do they expect a founder to do after killing their baby?
As a male who is bisexual, this isn’t true. Transmitting hiv via unprotected vaginal sex is actually pretty rare, something like 1/1000 or under. And gay/bi men also tend to be more promiscuous. But of course a straight male and woman could do anal sex and that would be the same risk rate that gay men have, which is higher.
this suggests many of the processes that have become constituative due to patriot act, maybe are still occurring outside of a legal framework, it seems patriot act is still in the system even if not renewed
Internet Explorer Beat Netscape
It would be helpful if the headline had the article's date (2009) in parentheses.
I have heard otherwise, both in comments here and via https://lukeplant.me.uk/blog/posts/why-im-leaving-elm/#forka..., but it’s entirely possible I’m wrong.

Added: This comment is also not terribly friendly.

https://github.com/gdotdesign/elm-github-install/issues/62#i...
Not Buying It: When your biggest challenge is non-consumption
TL;Dr He put a small 70cm blue shield with a "5" on it on a much larger pre-existing gantry road sign.
I just spent 10 minutes digging google and I cannot find it again.

I didn't even try to find about it last year, it seemed the only ui lib for purescript with a tiny docs website (beige / pale themed)

Really surprised not being able to find it again.. I'll reply again if I end up finding it
This was the FTC complaint that led to the sale of Caring.com https://www.ftc.gov/news-events/press-releases/2018/04/ftc-a...

Apparently APlaceForMom was #1 in the market and Caring.com was #2 and the FTC feared that having the same stockholders owning majority stakes in both companies would lead to data sharing and essentially be market consolidation.

So RV sold off their $1.4B investment.
this is the second backronym pun I've seen today, whats going on?

rate-limit edit:

I don't think Baader Meinhoff applies when I already know what a backcronym is and also have to extrapolate the first letter of all the words to get the joke.

Was there a show or pop culture thing that has people leaning towards this joke?

If anything, this could be a perceptive bias where I am forcing meaning into something, but a FUBAR Defense Act is exactly what that poster was going for. Who knows about the other one I saw earlier.
> CalTrans left the sign and eventually made an official one that remains to this day, 20 years after the prank.

Why replace it just to make it "official"?
> I'm not exactly sure how the edge pixels are treated ...

It is quite common to have more than the "nominal" number of pixels in a sensor array. So there are extra pixels for the edges.