skysight-inc/HackerNews huggingface dataset:
No, local/community currencies can provide utility that a high liquidity currency cannot on its own. Look at the Moon token that /r/CryptoCurrency issues to its users, to give them a stake in the subreddit's success. It gives millions a foot into the door of the crypto world. Small currencies are complementary with large ones.

Large ones meanwhile can provide competition to each other that ensures the consumer gets the best quality store-of-value/medium-of-exchange/smart-contract-platform/etc available. Generalizing them all as scams is really overly simplistic, and hostile to contract freedom.
#2, #7, #8, #10, #11 are the ones that I’m going to search more on.

Not that I use them.
They take offense because the OP implies that all offshore teams are shitty. "Transylvania" was used as catch-all term for "some other country".
Call them on the phone and/or write a letter. If enough people to call them on the phone, they'll get it. It's old fashioned political pressure.
I always thought we could do well parachuting in cell phones into these hot spots, and these cell phones get $50 usd or maybe a little more transferred to accounts tied to that number.

Then we could have incentives -- hey, go to this mosque, not that one and we'll pay you $20 more a week.

It would be cheaper than what we do now and would be a lot more effective than dropping bombs on wedding parties.
Aptible:

- Only ~15 employees
- Profitable
- Fully distributed team
- Great work/life balance
- CEO is one of the best software engineers I’ve worked with
- Interesting problems (building a security-focused PaaS)
- We are hiring
> getting butthurt of a random blogpost on the internet

> want to take it down so badly

> waste their lawyers time to send letters

idk, but i find it funny
> 6. Protonmail Follows CIA Email format & Metadata Requirements

> Leaked documents at Wikileaks show that the CIA requires emails to be stored as an EML filetype. There are several ways to store emails, and Protonmail has selected the format that the CIA requires.

Ummm, what now? It seems to be literally crazy to take that as evidence that ProtonMail is a CIA front. What next? The ProtonMail website is written in English and the CIA speaks English too, leading to the obvious conclusion that the CIA runs ProtonMail (also HN and Noam Chomsky).

https://www.loc.gov/preservation/digital/formats/fdd/fdd0003...:

> EML, short for electronic mail or email, is a file extension for an email message saved to a file in the Internet Message Format protocol for electronic mail messages. It is the standard format used by Microsoft Outlook Express as well as some other email programs. Since EML files are created to comply with industry standard RFC 5322, EML files can be used with most email clients, servers and applications. See IMF for a description of the message syntax.
I think it’s a terrible policy. What’s worse is that most free email services are similar. IMO inactive email should be disabled and its stored data should be purged, but user data, including password should be kept forever, it does not take much space. And everything should be reactivated after successful login.
The yellow light should be long enough for both one last car in the through direction, and one left turner. At least, that’s common outside of SF. I see your point in SF. Anyone care to comment on this? Could it be a combination of short yellows, relatively wide lanes, and nonexistent enforcement (and therefore diminished fear of all parties crossing a red light)?
> How many code snippets do you have?

> There are more than 33 million code snippets already in our database and more will come.

What are the authors of all this code? I presume a lot of code is copyrighted. How do you comply with the license? How can people using this site can comply with it as well?

Many free software licenses require attribution, for example.
This may be some guy on the internet making some overblown and sensationalist claims (something in the vein of "if you don't implement my favorite feature, you must be CIA agent because they don't implement my favorite feature too!" and "they use standard formats, and you know who else uses standard formats? CIA!!!"). That doesn't worry me much.

What really worries me is that Protonmail has asked their upstream domain provider to not only boot them from the Internet, but also reveal their personal information. Of course, they have no legal right to either - at least not until they obtain a court order - but it doesn't hurt to try, right? That doesn't look like a good guy behavior. I understand they may be pissed for being (likely unfairly) criticized, but we have way too many people that thing the only way to deal with criticism is to suppress the critic and try to ruin their life. We don't need more.
RFC 1149 is old, I'd suggest RFC 2549 (an updated version to 1149). The updated quality controls are worthwhile if you're going this route.
Though this method is only viable if you're ok with high latency.
Thanks! I spent quite some time on your site and am impressed, especially with your transparency as founder. One suggestion: it is clear the content is not written by a native English speaker. At first this created doubts for me, it just feels less professional.

Suggest you hire an editor to fix up your content… or contact me and I’ll do it for free.
> Hiring a top engineer for 500k would go a lot further than hiring 10 mediocre engineers for 50k apiece.

That sounds reasonable, unless you're an elected government official in a state where salaries of government employees are public information. Local media outlets and your political opponents will have a field day over a government employee making a half-a-million dollar salary.

The public won't ever be able to understand or accept why one talented person should be made so wealthy in relation to the value they provide. However, the public will be fine with the same amount of money being spread out across 10 employees, since it still keeps all recipients in the poor house together with everyone else.
EEE doesn't have to involve "open" anything. You're moving the goal post.
Here's another cool visualization - with different figures however.

https://www.visualcapitalist.com/all-the-biomass-of-earth-in...
Could you link back to stackoverflow, maybe by adding a "source" link on the bottom? Thank you.

And, if you've not read yet, please read this thread https://meta.stackoverflow.com/questions/253618/if-i-use-so-... - a link is not sufficient, you also need to state that the code comes from Stack Exchange, and display the author's name (with a link to his profile)

> If you're republishing content (code, or an explanation of code) that you found on Stack Overflow in a blog post or article, the attribution must be public as well. You must[1]: A) clearly indicate that it comes from the Stack Exchange Network, and give credit to the author by B) linking to the original answer/question, C) clearly indicating the author(s)' username, and D) providing link(s) to their profile page(s).

> [1]. These four requirements are explicit in the Terms of Service. https://stackexchange.com/legal#attribution

Moreover, this is not just a terms of service issue, the code is also licensed under CC-BY-SA

> Everybody is focused on the "attribution" clause of the Creative Commons license, but Stack Exchange isn't just using the Attribution license. Stack Exchange is using the Attribution-ShareAlike license, which also requires:

> If you remix, transform, or build upon the material, you must distribute your contributions under the same license as the original.
> Does CRT not posit that all inequities in our society are a result of white supremacist oppression?

No…
Charles Stross has used it in a couple of novels: 'Saturn's Children' and 'Accelerando.'
Came across this a decade ago and it hasn't changed much since. It's more a piece of art than a language as it is not seriously meant to be spoken, written, read, or understood.
A couple from today:

* On a VPS, firing up a Docker container with Node and serving on HTTPS (via Let's Encrypt) seems to require about two dozen or so magical incantations, from Docker compose config to dealing with vague certbot errors.

* Firebase functions seem to fetch() from an external server crazy slowly. Like... 10 minutes to grab an 8 meg PDF file slowly.
That's a bogus implementation of leader election and consensus. You aren't missing anything. They are.
Sure. And none of this prevents hydrogen from escaping.
>If Google says they'll give you $200k per year in cash + $400k split over 4 years as RSUs, that's the same as just getting $300k per year in cash.

It’s not; the RSUs are priced at grant, not at vest.

Plus there’s annual top-up grants.
Poor management/neglect is part of the extinguish step.
They didn't send it to the author. They sent it to their domain host to try and shut them down and dox them.
To be clear, what I meant was "the fact that they're advertising whiz bang time synchronization, but then not using the correct protocol, makes me question the quality of the whole enterprise".

Even on local networks, NTP can only get you so close. If you set up chrony just so, in ideal conditions, I've gotten hundreds of microseconds (more commonly ~500-1000us). But combined with PTP, you can get sub-microsecond accuracy.
Basically, the state borrowed money against unrealistic stock market returns on pension fund investments.
Next's router is the only thing that holds me back from fully embracing it. It sucks that I have to give up every other awesome thing the framework offers when I have a project that does not fit with their router. Hoping something changed in the last year and someone can point me to a solution
ITER Organization Concedes Reactor Is Not Designed for Net Power Production
> I don't know much about the situation in Ethiopia...

Perhaps you should educate yourself. Here's a good primer:

https://www.cnn.com/2021/11/03/africa/ethiopia-tigray-explai...

> Ethiopia should demand FB have an office there that will answer to their local laws.

I think if you read the article I linked to above, you would see that it's simply not that straightforward.

The issue of how a US-based company that provides services to people all over the world through the internet complies with local laws is a complex one, but suffice to say there are places in the world where complying with "local laws" essentially entails being complicit in actions that violate international law.

In this case, what's happening in Tigray has been described by some observers as genocide, and the UN has specifically raised the possibility of war crimes. Do we really want companies like Facebook to be compliant with "local laws" (read: whatever the authorities in a given place say the rules are) to the extent that Facebook could directly aid in genocide and war crimes?
Exponentially Growing Dark Matter
How Advertisers Convinced Americans They Smelled Bad (2012)
At least in theory, Windows Update would be used to force an upgrade to the newest driver. Which in turn could implement serial number blocking.
I have used Atom, VS Code, Vim, Nano, SublimeText, Notepad++, Jetbrains IDEs, etc. I currently use SublimeText and Javascript is the primary language at my employer (beating out Perl, PHP, Ruby, Python, Groovy, Java, and Typescript). SublimeText has plenty of supported plugins and is even faster and can handle larger files than VS Code. I'm not here to dick measure though.
VLC is GPLv2, saying yes would have been a short term annoyance for the community in exchange of him cashing in.
My Dad and I celebrated our 20th kidneyversary this year. The kidney I gave him in 2000 is still going strong (knock wood).
It's truly an absurd statement. There aren't even straws to grasp, it's just air.

"Can you believe they're storing text files using ASCII? It's exactly what the CIA wants you to do!"
In what ways is it fault? It'll be helpful to correct the record if your experience is different.
I've seen deals contingent on named and/or Big 4 auditors, so I'm going to go ahead and disagree there too. With major buyers, I think there's pretty general awareness that there's a race-to-the-bottom market for cheap SOC2 assessments.

Anyways: the point I'm making is: a Type 2 probably doesn't do anything more to prepare you for 27001 (which you should not get) than a Type 1 does. The subject matter of the assessments are the same (in fact, the Type 1 essentially sets the playbook for the Type 2, which is something you should be careful about).

Pentest reports can definitely mitigate security objections. T What's funny is that none of these certifications meaningfully require them. All the more reason not to pay much attention to them until you have to.

You should think of SOC2 and ISO 27001 as exotic sales expenses, not as something your startup needs to engineer against.
Onion routing works, but there’s less security.

The end node will have access to what’s being browsed.

If it’s an onion site, the last node is the node you’re visiting. No way things can be leaked/intercepted.
Votes are secret and verified to ensure there is only 1 vote per person.

https://www.sos.wa.gov/elections/faq_vote_by_mail.aspx
>If it would be "easily quantifiable", you would not see in 2021 still bank ATM running damn Windows XP or nuclear power plant under Win2000 with some old deprecated crap supervisor tools.

Why would you not see that? The risk profile is well understood, and can be mitigated. Sandboxes, firewalls, app-containers, input sanitization, Virtual Machines, etc, etc, etc.

I don't quite understand exactly what you're disagreeing with?
You eat 16 tons, whattaya get?
Thanks. I had heard about sleep (for that purpose and many others). For decades, I got a full night maybe once every 10 days. Now it seems a bit absurd to sleep less than a full night. I'll look at the book.
New China-made superconducting cable operational in Shenzhen
As soon as I hear "work hard play hard" I know it's a company that expects long hours for mediocre pay, and then the boss likes to go to the strip club on the weekend.
>It is a common misapprehension that hollow-point ammunition is prohibited by the Geneva Conventions, as the prohibition significantly predates those conventions.

There ya go. Easy to find.
If you're not allowed to work on the problem, you can't help. Management isn't prioritizing fixing the issue. They know it exists, and are prioritizing things that make them money, and in many cases know that the what makes them money is what's causing the extremism.

By continuing to work there, you're enabling what they're doing.
SOC2 is an administrative process and rubber stamp whether or not you prepare for it. You should build a security practice to avoid costly security incidents, and let your sales process tell you when it's time to get a SOC2, which itself has zero to do with security.
It would also reintroduce the problem that medallions were invented to solve: traffic congestion. By restricting the number of taxi drivers on the road via the medallion system, it keeps traffic down and the streets driveable.

... granted, the presence of so many unregulated rideshare cars on the streets renders this moot. We're right back where we started before the medallion system when it comes to congestion.

Spectacular Failures had a good episode about the medallion system! https://www.spectacularfailures.org/episode/2020/09/28/nyc-t...
They are well tested by now. However the vast majority of children will not benefit, it’s true.

Am vaxxed but don’t think I’d comply with this order for restaurants, it’s too far and too late for this.
I guess if they're getting welding there's no sprayer set up. Some emulsified oil (10% Ballistol) usually works great for lube and cooling, even in small quantities.

Yeah, that makes sense. That sounds like it's really not that much torque the way you describe - just above functional minimum and no where near too much (eg people forcing it through and breaking bits).
Yea, honestly. The most common answer I hear is always to quit and find a new job. And on HN especially, where we all dive into systems engineering to build reliable pipelines and fix bugs to ensure they don't happen ever again... it's so weird to see the same ppl just say quit. Because that literally solves nothing for anyone. The new job may not be better, or the manager at the new job may quit and be replaced by a really bad boss, the current job is still sucks for current and future employees, and like the above poster said, the boss won't learn a thing and continue to shit on any employee under their command at every job they're at.

Unions balance that power out, so that it can address exactly those core issues: the boss's attitude as an immediate solution for you as the affected employee, and the company's culture as a more permanent and systems-wide solution. This is a better patch than to just quit, at the very least.
I work for a consulting company called Slalom and for 3.5 years now I don't know if I've been happier working. It's a (private) big global place, but we have a "local market model" which effectually means you feel like you're working for a much smaller company (which is your home office). I still get to do plenty of development work during projects, but I also get to work in people leadership, practice leadership, give conference talks, sell if I want to (note: I don't lol), and the best part from a developer's standpoint is that when a project is over, you just... Leave. After almost 5 years of being responsible for an ever-growing list of software I had to maintain alone at a startup, it's a really liberating feeling for my ADHD self. And yes, we're hiring worldwide!
Very interesting. As you may know, there's research showing that if you just give people cash (or other liquid forms of money), they spend it well and it's highly efficient. It's very interesting to apply that to conflict.

We do sometimes buy off governments, effectively, via foreign aid.
You probably can do it with a browser extension with a set of pre-registered hashes for all (or at least vital) components, and segregating verified and non-verified scripts to different domains, so non-verified parts aren't allowed to ever touch sensitive data, and not allowing any wrong hashes from verified domains. Maintaining this and ensuring it actually works, let alone upgrading it, would be a nightmare though.
Moves can only be in, out, or within.

7 out of 10 out means 3 = #in + #within.

Maybe it is normal for most moves to be out of NJ, but who's to say that normal is good?
That's the exact same thing as getting a salary and buying stock with it.
Now to explain this to my mother.
2003?
Or they will move to some other coin that is rising in popularity and doesn't have GPU resistance built in. The latter is something that feels like a negative these days if you want a lot of buzz about some new crypto tokens...
I can't speak to the poster you're responding to, but I would consider both

"We are injecting children with undertested substances"

and

"that will almost certainly not benefit them, and may very well harm them."

To fall pretty squarely into the category of nonsense given the amount of testing that's gone into these vaccines as well the fact that the CDC quite clearly considers them beneficial. At the very least such claims should require some sort of support.
does anybody know how could protonmail or anyone else ever be able to tell iCloud aliases??

it is impossible to register a new PM account using an iCloud alias! I’ve always wondered, how?

Especially now with the ability to hide your email on ios, what would be the use of that if there is no distinction?

¯\_(ツ)_/¯
My challenge with this guidance is the lack of focus in what is truly minimal as this list is quite extensive.
As a security practitioner, I would simply threat model the product and provide minimum requirements to release.
trafficserver also has a compile-time option "--with-luajit"

one of the nice things about haproxy is that pcre is optional. it seems pcre is a hard requirement to compile trafficserver

trafficserver is also much more code, coming from a variety of sources.
The RSU vesting schedule at Amazon is nonstandard but it's not an issue. You may only vest 5% of your RSUs in your first year, but everyone is given a significant monthly cash bonus to make up for it. The compensation strategy at Amazon is that you always make the same "target compensation" each year, even your first. You aren't shortchanged just because you vest less RSUs in your first year.

An example with numbers: someone in their third year at Amazon makes $150k/yr salary + $150k/yr RSU vests, for $300k/yr total. In comparison, someone in the same position in their first year at Amazon makes $150k/yr salary, but only makes $30k/yr RSU vests, for $180k/yr total. That seems shitty, right? Except the person in their first year also gets a $120k/yr cash bonus, bringing them up to the same $300k/yr.
> If that's true, it's only because they altered their spending behavior.

That’s part of the point of a carbon tax. You want people to alter their spending behaviour to consume things which pollutes less. It’s a potentially small impact on their quality of life now to protect them from a drastic impact to their quality of life later.

Of course, the main point remains making local production more viable by actually putting a price on the externalities of offshore production and encouraging research into greener mean of production by shifting the cost/gain ratio.
That is irrelevant to identifying your IP address, which if the CIA is running protonmail (or the exit node, or any router between them) they can do with or without SSL unless you are using TOR, in which case they can't do with or without SSL. You missed the point.

10 seconds of research tells me that going to protonmail.com without ssl immediately just redirects you to https://protonmail.com so again the things said in this article are utter bunk, nothing of interest is sent to protonmail without ssl.

It's called an 'exit node' not an 'end node'.

If the site is using SSL the exit node will not have access to what is browsed, and REGARDLESS of whether you use SSL neither they (nor anyone else) will be able to see your real IP.
Ask HN: What is best way to reject candidate referred by highly-valued employee?
1. It may not meet your needs. Fortunately, that wasn't the point of the project.

2. They did it to learn and share what they learned. Job done!

3. "cobble together in a WW2 prison camp behind enemy lines" - really?
But what should FB do?

Comply with local laws? Wrong.

Not comply with local laws? Also, Wrong.

I'm not sure why we push the responsibility of geopolitics to FB.

If US wants to sanction Ethiopia or wants FB to do something, US should make a court/executive order.

Otherwise I would prefer FB stay neutral (e.g. not taking any action).
Starcraft II, any of the Microsoft Age of Empires/Mythology series. Total Annihilation. Hearts of Iron III/IV - All pretty much made me the man I am today. I know I've surpassed the 10,000 hour mark I am reluctant to admit.
Hey mywittyname -- I'd like to find more about the work you mention here, is there a way I can get in touch with you? https://news.ycombinator.com/item?id=28910928

(hackernews won't let me reply to the previous comment, sorry about that!)
> The idea of end-to-end encrypted email is ridiculous

How exactly is it ridiculous? I understand that email leaks metadata like a sieve, but the contents of emails can still be secured via encryption.

> (and ProtonMail's business model is effectively built on a marketing lie/false advertising),

No arguments here. They provide a web app to encrypt your emails, making the user trust the server for "end-to-end" encryption, this rendering it useless.
This has not been my experience at all. I've job hopped every 2 years to promote in transition and take on significantly more compensation. I'm about 18 months into my current role and I'm looking for the exit. Why? Because my future compensation at these companies is based on "impact" instead of what the market is willing to pay. So even if I have the highest levels of impact, I'm losing compensation staying at my current company.