skysight-inc/HackerNews huggingface dataset:
My current solutions mainly relies on homebrew + Macports + conda.

Macports primarily for system level dep. use this whenever packages available.

Fall back to homebrew when not available on Macports. This includes brew cask which is unique.

This dual setup may requires you to carefully separating the 2 when installing and updating. I do this by installing brew in custom location (not /use/local) which is now the default on ARM. Also some shell functions that selectively control the environment (essentially I use an environment that only sees port to update port, vice versa.)

Lastly, conda for dev environments, mostly for Python stack. But it is also useful for other stuffs (conda is a cross platform package manager and in this sense it is similar to brew which also support Linux.) Obviously selections is not as broad comparing to brew.

On computing facilities, I used to use linuxbrew to install some “system” dependencies that’s missing, including zsh, mosh, tmux, tree, etc. But obviously I cannot install in the recommended path by brew, which means compiles from source. And it is not robust (and they also say this is not a supported pattern.) I now use conda for this and is very robust (conda uses a hack to install precompiled binaries to arbitrary prefix.)
I’ll second this. Netflix was one of my favorite places to work as well for mostly the same reasons. Having said that I do hear they are getting bigger and things have changed somewhat recently. So YMMV.

Edit: it’s also nice to not have ethical concerns with your choice of employer.
Yes it did. Google published a paper about it in 2012, and claimed that at that point it had been in development for 5 years and in production for more than 1.
Have you used Atom, Sublime etc? VS Code is far better than them, and its an actual IDE. I don't know how much you work in JS but VSC is the defacto choice for everyone and has a million extensions while still being fast. If you don't work in that area then its understandable but you really shouldn't comment on it in that case. Its not competing with VS for instance.
I don't have experience but wishing you best of luck!
You can if you are really nifty do limited scale PCB manufacturing this way.

https://www.instructables.com/Creating-Printed-Circuit-Board...
The United States overthrew Mossadegh the democratically elected leader of Iran in 1953. That's where the problems started. Long before Carter's presidency.
In some places the family name tips them off. Like here in Thailand a Thai woman who is married to a westerner and has his last name will have to fill out a form stating whether or not they are a US person.
Vote for someone else (yesterday, preferably).
As a bank
I thought that they could already get all data from their own citizens through other countries without breaking any laws (no warrants required).
What's your point? Coolidge was in fact a very good president.
Functionally Homeless – A New Adventure Begins
Song Encoder: $stdout
If Plan9 worked out then the thieves would only need to steal consumer grade processors
IQ testing is not how anyone measures intelligence and hasn't been for quite some time.
I suspect the problem lies here: Intelligence requires a multi-part definition, to use your analogy, much like swimming.
Swimming is defined as the action of moving oneself through water using your limbs.
An intelligence definition should include the ability to extrapolate, comprehend and innovate information accurately as far as we can understand the world. The more precisely one can do this and the more depth of knowledge one has the more intelligent one is.
A tricky thing to define.
If you think that's cool, you should see what 9front cand do :)
Nah, this should be easily verifiable by simply comparing the DNA of a platypus to that of a bird. I haven't done that, but I bet I know how it would turn out.
Where Rent-a-centers and Check cashing services open Gun homicides Increase. Correlation is not causation.
Perhaps people are buying guns because of the increasing Homicide rates. What a horrible example of science.
The Role of the Core Development Team in an Agile Project (2008)
Very conflicted on SSO. I love it in an enterprise setting where it is assumed that your information is shared for insurance, payroll, or just work related needs. But I hate it in a consumer setting where I just want good ol’ username and password. Of course the password/phrase should be long, uncompromised, and unique and salted and hashed and all of that, but there is just so much friction for me in SSO. I’ve even seen Next JS’s default authentication module basically drop support for username/password under the dubious claim that it is inherently insecure.
amazing. you literally got everything wrong.

MapReduce predates TrueTime by a decade or more. MR was critical to scaling internet systems at the time it was released.

However, Flume + Spanner was a much nicer system to work with than MR + GFS, I'll give you that.
For much longer than that. Not to mention we used to just straight quarantine people/households. America is a selfish country filled with dolts.
RIP Oolong rabbit.
During the sixteen hours before sleeping.
Google is still a nice place to work overall, but as with most large companies there is probably some variance in the working experience depending on where you are and when you got there.
Why do police use them then?
> Because the university wants to pay CS lecturers who teach 2000 students the same as they pay people who teach poetry to a class of 5.

Maybe I'm wrong, but does University gain more profit from a class of 2000 students? If so, could it be the case that your friend does not sell himself at a market price for the teaching position? Probably there's another place which pays more for similar teaching.

There's no blame at all, sometimes people like to sell their time mostly not for money, but for emotions, that's completely understandable.
This makes the most sense out of all the arguments, kind of a chain of custody for warranty claims and how they flow from upstream (manufacturers) to downstream (end users I guess). Thanks
SOC2 did not force you to use Yubikeys everywhere. How I know that is: no mid-sized organization I've seen SOC2 has ever gotten everyone onto Yubikeys. The median SOC2 auditor hasn't the slightest clue what a Yubikey is (the median SOC2 auditor probably doesn't know the difference between a URL and a hostname).

I understand what you're trying to say: the threat of a SOC2 information gathering process scared your engineering team into taking 2FA seriously. Your team was able to use it as a forcing function. Not to put too fine a point on it: your team is dysfunctional and has a poorly-communicating and unpersuasive security practice.†

That's the problem you needed to fix. There will be things you very seriously need to get rolled out after Yubikeys, and you won't have another $70,000 Big5 audit to wave around to get it done. Meanwhile: people who don't want to endure that audit can get Yubikeys deployed without bothering with the SOC2 part.

An important thing not enough people understand about SOC2 is that the profile of controls that you use (where controls are things like "logs we monitor" and "onboarding processes" and "2FA mechanisms") are self-determined. Auditors have a set of very high-level goals --- much higher level than "services need 2FA SSO --- and you get to pick what controls you map to them. You get to pick what SOC2 makes you deploy, and the auditors ostensibly just keep you honest.

I would be surprised if anything close to 50% of reliably SOC2 -Type-2'd shops had any hardware 2FA at all.

† Almost everyone does!
Cameras are useful when you want to sense the position of the workpiece before you start. Pick and place machines do that.

It would be useful if CNC machines did a depth scan of the bed before starting to cut, to make sure that the machining plan didn't run the tool into a clamp or something. Not super high precision, just enough to check clearances.

Most of the headaches of CNC machining involve getting the workplace, tools, and clamps in the right place. Only then can the machine do its thing by itself. Help in that area would make CNC cutters more accessible to amateurs.

Some CNC machines intended for unattended operation have microphones or MEMS accelerometers listening to the cutting, to detect when something has gone wrong, like a worn-out tool. Monitoring spindle torque is common. Too little means the tool broke. Too much means the tool wore out.
Believe it or not, aluminum can be treated the same as wood when it comes to tools. Any drill that can drill wood can drill aluminum.
If you want to say what you think is important about an article, that's great, but please do it by adding a comment to the thread. Then your view will be on a level playing field with everyone else's: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...

"Please use the original title, unless it is misleading or linkbait; don't editorialize."

https://news.ycombinator.com/newsguidelines.html
I feel the lack of a "motivation" blurb for every recommendation may lead to blindly checking boxes.

Going through a grueling security compliance process at a previous job taught me that no single list of recommendations covers all the edge cases and complexity of modern software. At least with a "motivation" section, I was able to piece together what was actually expected of me. It also helps with prioritization if the "motivation" includes the consequences of non-compliance.

For example: the "data flow diagram" is probably meant to be part of threat modeling, where you're forced to think like an attacker. That may sound like a tedious paper-pusher task that could be put off, but actually IMO it's really nice to do early on since a threat model can help tell you where to focus your "minimal" security efforts: https://owasp.org/www-community/Threat_Modeling
That is a terrifying future, and one that I hope doesn't materialize.

It's hard for me to imagine people being okay with that, especially coming from an open world, but obviously not impossible.

If it comes to it, though, I would gladly take up arms against the state in declaration of liberty.
It looks like part of the attack on the free press, and on dissent generally, by the governor's political grouping. Freedom won't survive unless the public makes it a higher priority than political power. People who support that political grouping need to make it clear to their representatives that liberty comes first.
Not exactly new, Mozilla always comes with a "revolutionizing the UI!" every now and then. The annoying part is that is increasing, the accumulated banality combined with useful features being removed
> It wasn't Republicans who thought it a good idea to constantly tell white schoolboys that they are "oppressors".

Show me who's constantly telling white schoolboys they are oppressors and not that they are protected[1] by every institution we have[2]? It's an entirely invented self-victimization.

1. https://www.theatlantic.com/news/archive/2016/06/stanford-ra...

2. https://www.wymt.com/2020/08/28/nick-sandmann-joins-senate-m...
One reason we use Amazon's "Code Commit" over any github project is there's no possibility we can click the wrong setting and make our code public.
If you check page 28 it shows the overall rate at 42% for substance abuse, 39% for mental health and 37% for PTSD. Your summary is from only the chronically homeless. That skews the data towards the people who are by definition the hardest to help.
I was wrong about investigative journalism being the only category

https://www.pulitzer.org/prize-winners-by-year

The categories are Journalism, and Books/Music/Drama. I don't see an obvious place where literate programming would fit, unless it specifically was in service of one of those categories.
>> If I hear people say they are (or were) miserable at a certain job - I tend to take their word when they say there's a reason for it

Like I said, there's an objective and a subjective here. I mainly found that people who are miserable at a job were miserable at every other job too. Doesn't totally mean it's "them" but it's kinda like "the only common in all your failed relationships is you."

Then there's the totally subjective. Example: two people get the same constructive feedback, one person goes "wow, I am getting feedback that will make me grow" and the other person goes "ouch my boss wounded my ego, I hate it". (I am not asking you to say one is good and one is bad, just making a clear example of situation that someone may like and another person may hate)
Right. The short answer to the question this post asks is: "if you're a North America startup, do not get ISO 27001, and be wary of any advisor that says you should do so without a 7 figure purchase order closed and contingent on it."

SOC2 is a little bit trickier, but not much trickier: the strategy is the same: wait until you have to, and then get it to close the deal.
The tech lead of the Google MapReduce team (which no longer exists) just received their award for turning down mapreduce. IIRC it was officially done 5 years ago. However I believe the code to delete MR was never checked in and I'm not sure if there are still users.

MapReduce was used at Google for highly inappropriate things. For example, the machine learning system I worked on, Sibyl https://www.datanami.com/2014/07/17/inside-sibyl-googles-mas... was implemented using mapreduce but there was no real technical justification for that- it's just that there was no other system that could scale to the volumes required or handle the constant failures endemic to GOogle's internal systems. It ended up requiring all sorts of heroic work to make MR scale, for example map-side combiners (which "reduced" items with common keys in the map output before it gets flushed to the shuffle files). All of this got replaced with TensorFlow and only the good bits of Sibyl were extracted to TFX.
What a silly comment. If the guy you don't like puts up good numbers, those numbers are meaningless? What numbers does Carter have that you like?

The Dow (or S&P 500) is the weight of the world's expectations about the US economy, as much as any single number is.

No, you cannot "double the stock market by printing money." If that were true, then the Fed's loose money policies during the 70s would have doubled the stock market. They didn't, did they?
I've a 9 & 12

Rope can be a great one. All sorts of stuff kids can do with a good long rope.

I gave my 9y/o a multi-tool (like leatherman but I found one with shorter blade) that has been a prize possession and used a bunch.

PW80 motorbike went down well.

This year I'm looking at basic camera gear as kids like making videos and use the images at the moment.

Laser tag guns we got one time get pulled out a bit. Get enough do a couple friends caN play too.

Dress-up outfits get used a bunch. Spiderman, star wars, Heidi, pirates, cow suits etc. We've built up a few over the years and they get pulled out periodically.

Lego, board games & computer games are unoriginal but go down well.

Mostly kids want to spend time together having fun so a 'choose what to do for a day' type gift is enjoyed. Offer them stuff like water slides, escape room, zoo etc.
> I'm highly skeptical that there won't be too many false positives with such a tool.

I'm not advocating for a specific algorithm. I merely used a hypothetical one to demonstrate that there is, indeed, a fundamental difference between Zig and C/C++, even when it comes to UAF.

> I also see no reason why you couldn't create such a thing for C and C++.

Because in C and C++ there is no precise set of pointers, and bad pointers can be created from good ones.

> In fact, it exists: the Boehm GC can operate in such a checking mode.

Which would not work effectively for the reasons I mentioned.

> The fact that everyone uses ASan instead is a strong indicator that ASan is in fact a better approach. ... I have to consider it vaporware.

So from your asserted premise that Zig is no different from C in this regard you conclude that what doesn't work well for C must not work well for Zig and use that conclusion as further evidence of your premise? Your premise is exactly what I contest. Zig is fundamentally different because pointers are known and you cannot manufacture bad pointers from good ones. To demonstrate that difference I sketched a hypothetical algorithm that could work well in Zig but not in C. To point out that my hypothetical example is "vapourware" completely misses the point.

You could try to argue that the fact that pointers in Zig are well-defined and can be created only in carefully controlled ways -- and so are fundamentally different from pointers in C -- cannot be effectively exploited, but I don't think that's an easy argument to make.

--------

(> especially in LLVM

Even if we were to talk about specific tools, there is absolutely no need to base them on LLVM. Zig is specifically designed so that backends are easy to write, and an analysis tool need not use the same backend used by the compiler for production code; in fact, switching backends is meant to be commonplace in Zig development, and it is expected that different ones will be used for development and production)
Choosing good chunk sizes in Dask
at that time, only aristocrats could use spanner.
Inti Tanager: Colorful New Species of Bird Discovered in South America
If you have the balls to roll a pallet of stolen GPUs into a colo, yeah that does sound like a great idea.
I think it has something to do with the number of people from Mass moving to Maine and retiring. Contributing very little to the economy, increasing the cost of real estate and bringing their political preferences with them.
it is also memed heavily. zuck with too much sunscreen, zuck in Congress drinking water, there are many
If you don't mind, I have a couple of questions. What do you mine? And why not use ASICs or dedicated hardware rather than GPUs?
Auto-updating software and drivers have been around for ages by now, quite often with pretty lousy security. A lot of companies even require you to register your hardware to use all features - NVidia, for example, but AFAIK Razer does, too. Oculus comes to mind as well. Wacom even tracks you from within their driver [0] and I won't even go into the insanity that AV software does.

They might theoretically be on the hook for damages they introduce, but in reality, there's already a ton of services running on every device that can compromise you if the infrastructure behind it is hacked. EVGA wouldn't even be a worthwhile target.

And, as mentioned above, NVidia already has the necessary infrastructure in place. So the effective cost for doing this would be close to zero.

> which might not even work, given that hackers are really good at bypassing DRM solutions anyway.

Hackers are, yes. But the price you fetch for a card will go down massively if you need high technical skills to run it.

[0] https://news.ycombinator.com/item?id=22247292
Union types seem a bit wacky, are they typically used over function overloading or generics?
FCC approves Boeing satellites, rejecting SpaceX’s interference claims
Why can't they launch a civil action against the possessor?
Free money!! Right? Or maybe not.
Whoops, thanks for catching that, though the edit window's passed.
Please post about this if you do, this project looks awesome. Though I don't have the parts on hand yet, I'm strongly considering building one as well.
I started out at Microsoft out of college and spent 6 years there.

Yes, it was a pay cut compared to some job-hopping a few peers did. But the environment was great, my coworkers were wonderful, and I got to develop deep expertise to the point where I'm legitimately a world expert in a specialized domain now.

Like any big company, results vary by division/org/team, but if you land in a good place, you'll have the pleasure of working with great people who care about your growth and well-being. Not a bad deal.
Expedia has treated me well and has been great for me and my career, but I think with huge orgs like that, it varies wildly depending on the team, even in the same location.

I like my team because we're:

(actually) diverse

extremely progressive with tech (eg Kotlin + Arrow and sane frameworks instead of 90s style run of the mill Java with Spring) and always open to trying out new things and tech

comp, benefits, work life balance and remote opportunities are excellent

last but not least, everyone is super friendly and encouraging, with zero tolerance for toxic tech-bro attitudes

I'm in Brisbane, Australia =)
I'm not saying it a complete solution, but do think it can alleviate some concerns.

>My first question is are people who are willing to use a toilet publicly exposed actually likely to use it vs just some quiet street.

I believe the person willing to take a shit on the sidewalk on busy street, would also be willing to do so in a metal receptacle with TP provided.

I think there are engineering solutions that might not make it unpluggable, but give it a pretty high up time.

You're right that it might take some trial design and study. But that is an argument for trying it!
What’s your business?
D'ya like dags?
URL Redirect Checker
No doctor/hospital is going to harvest organs unless the person is warm and dead and all reasonable means of revival have been already tried.

Also even if revied would you even want to ? While anna as an exception didn't suffer from brain damage , it is likely, and even she had long term issues with nerve function paralysis etc.

Anna and other similar cases are a extreme rarity. policy shouldn't be made basis a one in a million chance, that's why we have vaccines enforced for example.

You can always opt-out or not opt-in depending in on jurisdiction I am sure.

There are plenty of people who opt for cryogenic storage after they die in the hope technology will evolve to revive them. That's natural step to this argument in a way , what if I could be revived some day even if not today ?

Ultimately handling life and death are intensely personal choices.
But that's not w2
Maybe do some reading before you say silly things like this.

Even Reagan's defense establishment didn't want to give the muj shoulder-fired anti-aircraft missiles, until the mid-80s. That's what really turned the tide. Carter would never in a million terms have done that.
Any idea what the plan for the E10ks was?

Data center where techs don't ask questions?

Fraud by someone who did the TCO math on a Linux PC farm?

Does an E10k have unusually high gold content, by pound of gear?

(Scott McNealy thinking outside the box to boost sales numbers?)
I think it's fair to say that the US defense industry played a critical role in ensuring that the Allies were successful in WWII and the world would look very different if Germany had prevailed over western Europe and Russian over eastern Europe.
It looks like you managed to upvote https://news.ycombinator.com/item?id=29101929 - did you do anything different to get that to work? e.g. different browser or turn JS off?
Then don't tell them the source. Just "Hey, I've got 100,000 full names of living people with valid social security numbers, what will you pay me for them?".

I have no idea what the market for those are, but I can imagine it being a better deal than having politicians trying to have you arrested.
you misread that slide
The SOC audit isn't really doing any meaningful technical evaluation. You're not going to get any engineering benefit from it.
> introduce a large (eg 5%) annual tax on secondary properties

congratulations, now the most vulnerable population - renters, pay 5% more.
> First it’s necessary to install OCaml and Opam. Opam is the default package manager for OCaml projects.

$ sudo apt install opam

...list of packages, including several python 2 packages, darcs, and mercurial ---

After this operation, 451 MB of additional disk space will be used.
Do you want to continue? [Y/n] n
Abort.

Python 2 ? In 2021?

Also, darcs? And mercurial?