skysight-inc/HackerNews huggingface dataset:
It’s striking how little the author thought to include even the concept of empathy, either in their employees or their disposition towards them.

Code machine go brrrrrr.
Python behind the scenes: How async/await works
You can add stoves to that list.
It's fun how it works the first three times, then less fun when it complains about being "rate limited" on the fourth time.
It's also true (by definition) that literally any device that you own could be connecting through LTE without your knowledge.
My anecdotal evidence, is that this pandemic has made me think what it important for my family and me, and working 80+ hours a week, even if very well paid, is not something I want to keep doing in my mid fifties.

I am leaving a job abroad where I have been for 25 years, and returning home, to do some remote work. It may not work out, but I need to try.
What exactly is the logic here, that because IBM used to do the same thing Google is doing, and because IBM was not a monopoly, that we should be okay with Google behaving this way?
I feel like HN has become a mecca of FAANG workers, laissez-faire engineering that complain about this and that, look down on startups as slavery, hardwork is considered right-wing ideology and perspiration is toxic.

I wonder if HN has become a parody, have you considered that?
This seems like a good thing but it is a bad thing for anyone who chooses to use it. EA can mistreat anyone using this in any way and they have no recourse for fear of pulling a licease.

A free gift with string attached is not a free gift. The patents are not worth the lawsuit and fees. This has negative preditory value.

It is fake source.
People seem to be missing that this is targeted at an early stage startup. Honestly, an early stage startup will likely fail without people who are focused on GSD to an unreasonable and unhealthy degree.
This is possible in Nim using the "soft real-time" GC with "GC_step Mode" see https://nim-lang.org/docs/gc.html. You can even tell the GC how much time it can pause.

But Nim also has a new deterministic GC, that has been available since 2020 and will be the default in a future version, see: https://nim-lang.org/blog/2020/10/15/introduction-to-arc-orc...

In fact, I see many similarities between Nelua and Nim.
Well of course. It's the only thing you sell.
Each to their own!

A big part of the difference is that all the JSON keys are quoted, which I agree is ugly (I like JSON5 myself).

You’ve also omitted the “menuitem” from the S-expr version. That could have been omitted from the JSON too but I assume it’s meant to be there for some good reason.
A couple of random and semi-related thoughts:

I'm not really good for more than 6 hours of any sort of challenging mental work in a day, anyway. I also don't think that "hours" are a particularly good thing to track for software engineers -- we have ticket tracking and project management software that track effort already.

The bit about being rewarded with a Friday off reminded me of how I'd try to get my homework done during study hall in school, so I wouldn't have to do any at home. In the real world, the reward for getting your work done early tends to be more work. Maybe that shouldn't always be the case.
Public relations has been around for a hundred years now. It shouldn't be news to anyone that large companies are careful with phrasing things and have full time employees devoted to the nuances of messaging.

And yes, when armies of lawyers are routinely descending on your internal communications then it sucks but PR-speak has to become the norm for all. Most people don't like it, but the consequences of not doing it are even worse.
They should increase profitability on the margin of the good, not try to create a perpetual revenue stream out of each customer by making the entire experience invasive.
If true, my guess is that with such a huge power imbalance Schmidt isn't often waiting 72 hours for replies.
Monitors usually don't support HDMI-CEC either.
Any rate limit errors are false flags caused by bugs, they aren't related to load or real rate limits
> have a lifespan commensurate with the price

> we pay more for things than people overseas do

This sounds wonderfully cyclical. "Why do I expect my washer to last an extra year? Because it cost 10% more than the one sold in America, which is expected to last a decade".
I am wondering how that relates to searching for the token in a database (index). Does it still matter? I would assume the time might depend on where or even wether the token is in the index or not, not sure how much though and what to do about it.
Times New Roman?
I interviewed with about 15 companies last time around, including multiple reputable non-FAANG companies and a couple of startups. Except for a handful that dropped out earlier and a couple that had a phone screen before the code assessment, this was pretty much the experience I had at all of them.

The two best and quickest processes I had still had a phone screen, a coding assessment, and 2-3 30 minute zoom interviews. They were the only two companies to extend an offer actually, all the others had enough interviews they eventually found an interviewer that I answered a question slightly to their disliking and disqualify me (all but one of the coding tests I took this time around I did really well on).

I know for one of them it was me saying to one of the architects I interviewed with that I got pulled off a project I was helping another department with, because my main department's business picked back up early 2021 and they desperately needed me back, and they somehow interpreted that as I was unable to complete any project given to me (according to feedback from the recruiter afterwards). I had already met with the cofounder of the company at that point even and figured they only bother to do that once given the go ahead from all the other interviews. That one was particularly annoying.

I have over 10 years of software engineering experience including some unofficial (all but the title) architect and project manager work at this point, btw.

The psych test was actually for a startup, believe it or not. I hadn't taken one of those since I applied for a job at Walmart twenty years ago.

Also I don't think I mentioned it, but I elected not to do the 1-sided video interviews. That legit creeped me out too much. I also never really found the motivation to dedicate a solid 2.5 hour block for the Amazon coding assessment (didn't help I read multiple negative articles about them on Hacker News around the same time).

On the plus side, I had a successful job hunt without any Leetcode practice (yet somehow did well on the coding tests anyway), so there's that. I delayed pulling the trigger on the job search for at least six months because I assumed I'd have to spend a solid month doing Leetcode to have any success, eventually just said "Screw it" and flipped the LinkedIn switch, and got recruiters flooding my inbox immediately.
They say "There are no limitations on web browsers.", while on iOS, there are clearly some limitations on web browsers. It doesn't matter that there also exists another platform where that statement may apply; the statement was generic and itself made no distinction.
I'm sure. Timeshares are a thing. Juicero was a thing. MLMs and myriad other scammy things continue to be things despite a ton of outcry against them.

Everyone thinks they won't be the one left holding the bag.
The logic is that this isn't a sign of google being a monopoly and that it has more implications than just being there to avoid anti-trust actions.
Sounds like people were getting tricked into installing dodgy extensions, so they had to build a Proof of Nerd system.
We just posted this today. Latest Cassandra 4.0 vs. Scylla 4.4. Note: Cassandra 4.0 is a HUGE improvement over Cassandra 3.11. But we're still many times faster:

https://www.scylladb.com/2021/08/24/apache-cassandra-4-0-vs-...
Lol “5 page analysis of where the company should head”

I’ll stick at the bank where I barely have work to fill 2 hours a day thanks
You are correct, but this is an enhancement to have better compile time type checking and runtime efficiency. In the future _G table with similar Lua semantics is considered to be implemented to have better compatibility with Lua code. But using the "global" keyword will always be recommended, this way the compiler can do better type checking and generate more efficient code.
I have never heard about anyone having trouble with an ice maker until I read this.

My ice maker has been working fine for over 15 years. My mother's ice maker has been working fine for about 25 years.
I was hunting the 8 port switch for a while. I had to setup my own stock monitoring with alerts and managed to catch one that way.
Bearing in mind 10,000 [0], for anyone who's confused, hunter2 is a reference to an irc conversation submitted to bash.org back in 2004ish, the definitive "paste your password" thing.

http://bash.org/?244321

[0] https://xkcd.com/1053/
That is an amazing talk! Thank you for sharing.
I was almost 30 when I started in tech. I'm not in your commonly discussed SV tech scene, I live in flyover country and work remotely for a giant non-tech company. But I got to a point where I was absolutely desperate for any decently paying work. After doing graphic design for a few years (I studied art), I realized that was never going to pay. I did carpentry, construction, labor, painting, literal ditch digging, sign making, and used car sales. Somewhere in there I was a US Marine and went to war. Eventually I stumbled into a QA job at a small company and learned Python.

All this to say, now I'm well into six figures. I've work six crappy tech jobs, really bad ones. I've had one decent one and now, one really good one. I had to fight really hard to get where I am now. I mean this to be encouraging, it can be done, you can do it.

My advice? You can check out at a job, but never check out on yourself. At every crappy job I've been at, there was opportunity for me to learn something new. Job 1, I learned Python and built test frameworks. Job 2, I learned VueJS. Job 3 I learned how to build complete software projects and deliver them. Job 4, I combined development skills with cloud migration, dealt with tons of nasty legacy code, and was able to deliver major improvements to existing systems. And so forth. Also to get better jobs, I've put in hundreds of resumes. One job literally took me 200 applications to get.

TLDR I hope it's not unwelcome advice but I hate to see people give up.
Thanks for this! Really appreciate your time, going to have a dig into it. Fantastic response. :- ) Stay well!
Literally every other company does this. I'm not sure what is the story here - the lawyers are coaching the employees not to put anything that can be used against the company in writing? The author tried to make it about Google for whatever reason.
The channel is back in full, see the followup video: https://www.youtube.com/watch?v=YIWV5fSaUB8
Be as young as possible. Know the latest tools and tech. Make sure to point out anything older than 3 years as legacy and should be rewritten. Also know REST and claim anyone who implements it doesn’t actually know REST. But then again GraphQL is far superior so call anyone still using REST a boomer. If software is not using a message bus throw it out. If it’s not microservices make who ever has to work with it feel like shit. You just got hired and/or graduated which makes you the smartest person in the room. Management supports your bold ideas and lack of context. When you eventually create the perfect app that is 95% architecture and 5% functionality with zero comments, leave the company on a high note for them to maintain your masterpiece as you go on to another software company ready to spread your great ideas all over again.
CFRG's response to PASETO was tepid. The few people who participated in the thread identified three issues:

* The v1 local tokens used a novel nonce construction (I'm doing this from memory) and CFRG's take was "standard constructions or GTFO".

* The HMAC/RSA thing, which PASETO noted and documented but didn't fix.

* The fact that PASETO is basically a restricted profile of JWTs, begging the question of why it didn't just specify a restricted JWT profile.

I don't think this feedback was especially valuable.

I think there are subjects on which CFRG discussions shed a fair bit of light, when they're high-profile enough to drag academic cryptographers into the fray. But the other thing that happens in CFRG is that bad stuff (like the Dragonfly PAKE) gets blessed (because there's no outcome besides "this is fine" and "this is trivially broken" --- and even "this is trivially broken" can get laundered back to "this is fine" if the threads get tedious enough).

In the worst case, you get people proposing bikeshed changes to constructions that are already de facto standards, which (if I remember right) happened with Curve25519, though thankfully not successfully.

I think the whole practice of standards based cryptography is mostly discredited at this point. Signal Protocol isn't a standard despite being the reference model for most secure messaging systems. WireGuard isn't a standard either. The original ethos of the IETF was that things get popular, and then they get standardized. IETF does a lot of stuff de novo now, which is how we end up with stuff like Heartbleed and JWT.
Steve Jobs also tried to hire Linus Torvalds to work on their BSD kernel (lol)
Does it similarly stretch credulity to suggest that the lack of commercial-free cable channels on the market causes the popularity of cable channels with commercials. Something may be "popular" because it's the only game in town.
It’s a pretty standard clause. Why would EA give up their IP for free. Don’t get me wrong, I get it’s cool to hate EA and I’m definitely down with hating them as much as the next gamer. But this isn’t an example of them being evil.
This is a great insight. I have spent a lot of time creating a composition tool, but the assumption is that the user has some knowledge of composition. This is useful to a very small number of people. What is more useful is what you describe; an interactive bridge between the worlds of music notation, composition and algorithmic assistance.

I would love to brainstorm some more if you have time. Drop me a note if you do!
Why weren't TVs with built in VCRs and DVD players more popular?
> I've never understood why…

Perhaps they don't read the website text?

> … no contact nor link…

Search works.
This post reminded me a little of https://blog.thea.codes/building-a-stateless-api-proxy/ from 2019, an absolutely brilliant hack that attempted to make up for GitHub's lack of finely-grained API tokens.

The key idea there is to build your own custom proxy for the GitHub API, then issue tokens for it which are actually encrypted bundles of the full-permission API token plus a set of rules about what the proxy should allow it to do - only allow a GET to paths that match "/gists/.*" for example.

It's somewhat similar to Biscuits storing a Datalog program "to evaluate whether a token allows an operation."
Monitors also generally don't come in 60"+ sizes, or if they do, they don't have HDR or other modern video display technologies.
Multiple people have mentioned that the pandemic was a profound period of self-reflection. Massive remote work coupled with a removal of distractions caused many people to change their future outlooks. I think it will be reflected in more things than just employment
For visibility, this is the graph we're discussing: https://fred.stlouisfed.org/graph/fredgraph.png?g=Gh7k

I think we all know why the 55+ year olds are seeing a dip - they have an exponentially higher chance of dying of Covid. A bit weird for such an obvious fact to not have been verbalized in the article. If anything, the graph above actually contradicts the title of the article - from what I can tell, all other age groups seem way more employed than I would have expected given the logistical and health concerns that the pandemic threw at us.
>L;DR- TVs are using their own cellular connections

The link doesn't say that.
Run the token through a secure HMAC function before storing it in the DB. Problem solved. KISS. :)
In fact, doing it on the cloud for a local file is a really bad idea. Some of us use our phones in areas with poor connectivity.
It's only AGI until someone achieves it. Then it becomes statistical analysis.
For reference, this tweet from @discord says:

"All 3rd party apps or client modifiers are against our ToS, and the use of them can result in your account being disabled. I don't recommend using them."
It’s silly specifically because there are other options meaning you still need to verify a tree not cut down on this block chain hasn’t also been not cut down in some other agreement. Blockchains therefore can’t actually prevent a double spend as it were.
Yes, Scylla does what it says. Used it in a prior adtech company and it beat everything else at that time for a very intensive key/value workload that also needed multi-regional replication.

The adtech industry also uses Aerospike heavily but that (at the time) had many replication data model issues compared to Scylla/Cassandra.
In indie game dev, everyone’s on discord and so are your extremely-important potential players. Whether you enjoy discord or dislike it, you’re going to be on there. It has really strong networks effects
Everything in the list of "Inability to get things done" is something someone with ADHD struggles with and can be successfully managed in the right environment, but it sounds like this person would fire that person without reflecting on the environment they've created and how that person experiences it.
> What if Apple kept making Newtons and what if they ran Mac OS?

It wouldn’t be a Newton.

> The user interface has the familiar menu bar at the top

If you do that, your users can’t read the menus because their hand would be in the way. Apple knew that from the Newton, and it also isn’t hard to figure out.

⇒ I don’t think they would ever have done that.
You want this new language to implement a particular set of features in a similar way to a specific, named feature from Scala which they themselves are moving away from in 3.0?
Yes, it matters - timing attacks could absolutely work against an indexed column in a database.

The trick I've used for this is to have tokens that look like this:

"234523:7a561002f780e23853bdfbd89ae79bf2"

Then you have database entries like this:

id = 234523
token = 7a561002f780e23853bdfbd89ae79bf2

When a token comes in you use the bit before the : to look up the database record by its indexed ID, then perform a safe comparison between the rest of the token and the value you retrieved from the database.
There are just so many more Big Tech workers than us scrappy startup people reading and writing here than in the early HN days, and frankly, we have much more to do that keeps us too busy to post on HN as much as they probably have. Yeah, I said it.
This is excellent. Thank you!
We (@zenlyapp) have been using it for 4 years, it is as fast as advertised, it’s insane. We personally benchmarked the 10x of Cassandra.
Well, that's true for any task that you're asked to complete at an interview: you're doing the fast, draft version that is obviously not comparable in quality to what you would do in a real setting. But still, even this draft could be illuminating.
> A lot of folks seem to forget that Twitter also has electricity bills they have to pay directly or indirectly.

The cost of running Twitter could be very small, if they optimized for that.. cost of the engineers is harder to keep down.

But the real problem is probably that they got investors, went IPO and somehow need to produce significant returns.

Maybe Twitter can produce higher returns with a more captured user-base and a less open platform.

It just seems sad, that we're putting walls all over internet.

In any case, I doubt it's cost of operations that causes it. More likely too much investment.
It's unfortunate that spreading such news is not as profitable as fearmongering.

It is only recently that I have begun to suspect that there are strong political reasons for suppressing this as well. Feeling pretty naive about that.
> I am wondering how that relates to searching for the token in a database (index). Does it still matter?

It can, but the practicality of exploiting this timing leak isn't at all a settled issue.

Previously, https://soatok.blog/2021/08/20/lobste-rs-password-reset-vuln...
Will that be before or after the trans-Earth English language dominion?
"It was surprising how honest some (very smart) people would be on this. E.g. "I am average compared to other engineers". For an early stage startup, average is not enough."

Well, they want better than average liars. Could go either way.
Sorry, but bitcoin has always been "traceable".
Smart TV’s are negative costs to the manufacturers as in they get paid more to install them than they actually cost.

Manufacturers therefore have zero incentives to manufacture non smart TV’s.
The dashboard looks really simple with great features! Awesome
> it should be possible to find a configuration that works reliably and allows devices to talk to each other without too much hassle.

The number of multicast bugs in Cisco/Juniper/whatever enterprise gear is astonishing. It’s basically a DoS waiting to happen. And if you have multiple network vendors in your shop as all real networks do… forget it.

As I said, my long experience is that multicast just doesn’t work reliably in practice except maybe for small layer-2-only networks. The same places where broadcast storms aren’t noticeable.

Unicast with source replication is fast, cheap, and reliable.
Thieves will still steal TV's, they will just end up in panel repair shops. iPhones still get stolen as well, even though they are worth much less.
I've ditched the client for web only with custom css.
Also allows me to block every kind of tracking (opened programs).
I only use it as a chat client and still run a TS3 server because discords audio is just garbage
Color TVs superseded black and white because it was objectively an improvement for the customer. There wasn't any benefit to the manufacturer besides selling a new unit.

the "Smart" TVs of today are riddled with spyware and telemetry that provides a second revenue stream to the manufacture since 95% of the population is too lazy or uninformed or doesn't have the time to turn it off.

Yes, there benefits to the consumer in the form of convenience but it's not a paradigm shift like the switch from color to b & w. Also you could buy black and white televisions for _decades_ after the introduction of the color TV.

In the course of about 5 years "dumb" TVs have almost completely disappeared from he market. Maybe I'm just cynical but I have a hard time believing that it was because everyone just _had_ to have a TV with a buggy UI (in many cases) and/or loaded with spyware.
> Ask the candidate. I would often straight out ask people how effective they were at GSD, and how did they compare to their peers? It was surprising how honest some (very smart) people would be on this. E.g. "I am average compared to other engineers". For an early stage startup, average is not enough.

lol, wait, if this line of thought works, why don't you also just ask them how good they are at coding, instead of wasting all that time doing interviews?