skysight-inc/HackerNews huggingface dataset:
I'm confused what you're responding to. I never thought everything should be fair.
"Print script" maybe?

Short for "print commands to run manually" script
That blog post was a fun read. I identify with many of the things said there, and it's always interesting when a company can make interviewing sound like a good time. I'll definitely apply soon

Edit: also, pardon my French but the owl is fucking adorable
Yeah, there are certain divisions/teams/products within Microsoft where I have to work really hard to read between the lines of their PR gobbledygook. Basically the further away from Developer Division, the harder they are to understand.
This is a YMMV situation I think. In our case, when we only had our Type 1, we did deals _conditional_ on getting Type 2 within a year.
They could, you know, just ignore it and get on with life. There’s no reason to defend itself against every claim made on the Internet but any yahoo.

Instead, they are choosing to aggressively silence the author. That raises eyebrows.
Which ones? We used masks during the Spanish Flu. That’s the other biggest pandemic. We don’t really have any others that compare.
Fun fact: in the extremely highly cited "In Search of an Understandable Consensus Algorithm (Extended Version)" there's a gap.

In the otherwise very good figure 2:

>If successful: update `nextIndex` and `matchIndex` for follower

but it is never stated how either `matchIndex` or `nextIndex` should be updated (on successful response). In section 5.3 it's only stated that "Eventually `nextIndex` will reach a point where the leader and follower logs match." I went to the TLA spec in Diego's github repo for his dissertation and found the answer to be

HandleAppendEntriesResponse(i, j, m) ==
/\ m.mterm = currentTerm[i]
/\ \/ /\ m.msuccess \* successful
/\ nextIndex' = [nextIndex EXCEPT ![i][j] = m.mmatchIndex + 1]
/\ matchIndex' = [matchIndex EXCEPT ![i][j] = m.mmatchIndex]

but this is predicated on followers responding with `mmatchIndex`, which is not included in the response as stated in the "In Search of" paper.

I discovered this while TAing a class on consensus protocols, during which I built an implementation (in rust) and though I was confused about `matchIndex` as well, I just did what I thought was the natural thing, i.e. on receipt of a successful `AppendEntries` response I do

*(self.leader_state.next_index.get_mut(node_id)) = self.get_last_log_index() + 1;
*(self.leader_state.match_index.get_mut(node_id) = self.get_last_log_index();

I emailed Diego to find out if this was a reasonable solution but he told me he didn't remember the protocol clearly enough to advise. Nice to know everyone forgets things sometimes :)
I agree with both.

Any "better" alternatives with some comparisons?

Thanks :)
As always[1], this paper compares MultiPaxos, not Paxos. Paxos is more like the conceptual underpinning to a family of protocols, one leaf of which arguably includes Raft itself. A summary and evolutionary timeline (up to 2018) of the various algorithms in the Paxos lineage is https://vadosware.io/post/paxosmon-gotta-concensus-them-all/

Raft looks good next to MultiPaxos, but MultiPaxos is hardly the state of the art in the mainline Paxos lineage. MultiPaxos was published in 2001, over a decade before Raft. EPaxos is more of a contemporary to Raft, and arguably more in the spirit of Paxos as originally conceived--truly distributed, leaderless consensus.

[1] Practically every paper discussing Raft, including the original Raft paper(s), aliases Paxos to MultiPaxos.
> Edit: it’s also nice to not have ethical concerns with your choice of employer.

Did you not happen across the predatory soliciting of new content? In that by attending a Netflix "screening event" you give Netflix a right to use your film in perpetuity, royalty free?
i.e this is a crappy tool but it's best tool we have come up with for this problem thus far.

There are lots of such tools which are used begrudgingly by people that have an intuition for the fact it can be done better but not the concrete idea and/or time to implement it.
It is treated as a separate subsidiary - you have to actually turn in your badge at Microsoft and get a GitHub badge if you go work there.
This snippet is really getting held back by the Bitmapset, both interface (eg. the del_members/add_members dance) and the structure (eg. with the double indirection, and unnecessary implicit checks for reallocation).

You don't really want to rewrite the bit indexing, but it feels like you're paying a lot of cruft just to avoid a few “x / 8”.
But according to this study, organ transplant patients have a much lower risk of dementia compared to the general population, not just people who have autoimmune diseases.
What social development is at risk from masks on kids? And their well being? Negatively affected by masks?
Anyone else here had podcasts destroy there brain?
Apple used to do this for me more than once. Not anymore they need that sweet monthly applecare revenue.
If you like this you may enjoy the YouTube channel "Tasting History" https://youtube.com/c/TastingHistory
Imagine a world without this weird passive-aggressive linguistic device.
> Protonmail even has an SSL cert for that onion address even though it’s completely unnecessary.

It is absolutely necessary, especially with the new, longer v3 onion domains[0].

Generating a v2 onion address that begins with "protonmail" takes a few hours of GPU. Given a link to one of these v2 addresses no user is ever going to authenticate it by memorizing the address:

protonmailrmez3lotccipshtklggee7olb73fu1rgj7r4o4vfu7ozyd.onion

The user knows and authenticates an onion because the endpoint is signed using the same certificate and CA as the .com address and the user can verify this in their browser.

> When a user makes a new account with Protonmail on TOR they are re-directed from Protonmail’s “.onion” to “.com” address. This breaks your secure encrypted connection to their onion address

This step won't deanonymize you or "break your secure encrypted connection". You are routed via a Tor exit node rather than via a guard node to a hidden service.

As to why they do it - offering a free service to anonymous users on Tor is a constant battle with spammers and bots.

You only have to look at the absurd lengths darkweb markets go to to authenticate "real" users (multiple CAPTCHA gateways with minute+ wait times) as to how difficult this challenge is with completely anonymous traffic that has absolutely nothing to session/fingerprint a user on to prevent abuse.

This entire post is speculative troll-bait, which unfortunately Protonmail fell for. Their response to this type of post only reinforces the views of those who are conspiracy-minded and see links where there are none.

It is very reminiscent of the FUD campaign Pando Daily ran against the Tor project itself (any second degree link to anybody even remotely US government means the software is obviously backdoored).

[0] The article links to the Protonmail v2 onion - a shorter format address and protocol that has been deprecated.
I was a very happy user of DownThemAll at work for a few years. I had to retrieve boatloads of documents from $BIGCO's godawful Sharepoint site on the regular. After a couple sessions wearing out my carpal tunnel mousing around, right clicking on icons, and going through the File Save dialog hundreds of times, I knew there had to be a better way. DownThemAll was that better way. Thank you for your work.
I hate to say this, but McDonalds offerings appear to have gotten somewhat decent as of late, with regards to McDonald's/Fast Food in general. It's still trash... but I think it's closer to real ingredients than it has been for quite some time.

If we don't see a decade of economic downturn, in 1-2 decades McDonald's may turn into something decently healthy/acceptable, once again in the sense of still being fast food.

We could however see the dystopia of McDonald's only accepting fixed amount of meme doge tokens that go on to hyperinflate, and we'll all be able to shake our fists about how we were promised flying cars but got DogeDonalds
> Any "better" alternatives with some comparisons?

GPG + RFC 1149
Darn so blind or other kids with bad vision don’t get most psychological development? Are we doing anything about this? It has to be a major crisis for all those people to grow up with stunted psychological development.
You can look into mine (https://hanami.run) very fast to sign up and have a few cool features about webhook or smtp.

Also, improvmx.com is a great product as well.

If you like open source, https://maddy.email/ is a single binary deployment that can handle everything even IMAP.

https://mailcow.github.io/mailcow-dockerized-docs/ is a dockerize solution with super detail document as well.
You’re leaving out some key factors to think about: they aren’t going to take responsibility for problems caused by mistreatment while the thieves are moving it around (heat or vibration can take time to manifest), or the possibility of something being modified before the buyer gets it. A common scam in many industries is someone taking legitimate packaging and using it to sell counterfeit or returned/failed products at full price.

This is EVGA saying they don’t want their reputation and finances on the line for any of those things which can happen outside of their control, which seems reasonable.

More importantly, they’re also sending a message to potential thieves that this is not a good thing to repeat. Publicly warning buyers and preventing those cards from being treated as equally valuable as the legitimate ones threatens the profitability of stealing them. Given the high prices in the market currently, that seems like a good message.
NASA’s Juno: Science Results Offer First 3D View of Jupiter Atmosphere
Could it be that patients with early stage dementia are somewhat less likely to ask for or receive transplants?
There were a bunch of guys thinking about similar problems, yes, but these guys were the original vanguard of thinking about information organization and dissemination. They were the Notion and Roam Research of the 60s.
> This step won't deanonymize you or "break your secure encrypted connection". You are routed via a Tor exit node rather than via a guard node to a hidden service.

There is a huge difference in the anonymity afforded by a tor hidden service, vs. using tor to connect to a clearnet website. You should at least acknowledge that.
What a magnificent example of self-congratulatory masturbation. I don't know if Firefox management have been on a multi-year glue huffing binge or are simply utterly deranged, but every time I see a press release about Firefox it feels like the spectre of collapse is looming ever closer.
I understand. But I think as the years go by, you may have fewer and fewer sites that meet your criteria. I hope I’m wrong.
> Why is NJ always giving more? If they have so much debt?

Because we have progressive taxation and a lot of rich people live in New Jersey, so they pay more in taxes. A state doesn't need to be in financial trouble because it is poor, it is in financial trouble if it makes more promises than it can afford to pay given its tax base. The constant raiding of employee pension funds and various financial ponzi schemes is why NJ is in trouble.

Median household income in 2019
NJ[1] = 85K
US[2] = 69K

[1] https://www.census.gov/quickfacts/fact/table/NJ/SBO001212

[2] https://www.census.gov/library/publications/2020/demo/p60-27...
the rest of the articles seem to have a rather sophmoric feel to them as well...perhaps someone is just beginning their journey into infosec?

The author rails against Cloudflare originated SSH traffic assuming its immediately malicious, and decrying how carriers are ignoring his legitimate calls for their blacklist as well.
Right, it's multiple benefits: the soc2 has a lot of overlap with 27001, a bunch of overlap with hitrust, it's a bit easier to do, and the CISOs we talk to want the Type 2. Internally, you can bump up your security practices, eg it forced us into a level of internal controls that was early for a startup. But beneficial, imo. I really can't think of many drawbacks if you work with customers that ask for these things.

In our case, the customer profile is from lower midmarket to Fortune 50.

You probably can close deals (depending customer, obviously) by committing to a Type 1. We did that at the beginning, but it exposes you to a lot more interactions with the security team. While you rarely see deals fail for security reasons, I've had it happen. So my experience is the less interaction you have with them, the better off you are. And a Type II plus the annual (or more than annual) pen tests make a lot of the questioning less intense.

btw (happy to disclose personally, but I keep my identity private on hn), you can get the audit done for a lot less than $70k if you use a smaller firm, and that never was a problem with our customers.
> Its specifically the role of politicians.

Is it? Since when? Certainly they will tell you it’s their role, but why do you think they have ever been the ones to solve societies problems?

Also, how are politicians ‘qualified’?

> In a liberal democracy we outsource some of the administration of our lives to politicians explicitly.

When did you ‘explicitly’ make this outsourcing decision? I don’t think you did. I think you were just born in a place where you were told that’s the deal.

> Those our society's collective fault,

It’s utterly meaningless to blame society collectively for anything.

> but it doesn't invalidate completely the idea of elective democracy.

I guess you have a really rosy view of politicians as problem solvers. I wonder what possible evidence could be driving that idea?

> For all it's faults, it beats the hell out of technocracy or theocracy (including "science") based administration.

Yes, I agree it’s better than theocracy.

No, you can’t claim it’s better than technocracy since you have no examples to compare with.
LAMP may get sneers but it's versatile, gets the job done, and its everywhere.
The built in "Code With Me" in IntelliJ is awesome. Besides that, we use Zoom for video calls. (The screen sharing quality is the best I've found)
Every bank I've opened an account with in recent years has asked multiple specific questions about any ties to the US during the account opening process. One even asked if I'd ever had a US telephone number or mailing address.
One counter example is yahoo, back in 2013[0], unless we want to be pedantic/snarky about "major"

[0]https://yahoo.tumblr.com/post/52805929240/yournameyahoocom-c...
E2E encryption through a third party is not impossible if you use an out of band encryption key. Only the message body is encrypted E2E. The header isn't.

I would still use Proton over gmail, because I don't want google to have ALL of my data.

The article points 8 and 9 are ridiculous.

Take away message from the article: if the USA, or the EU, is your enemy, you shouldn't use proton, or gmail, or any 3rd party email provider. If you live in a Russian backed dictatorship, proton is OK; you should be more worried about your hardware and your meatspace.
You need an odd number of max nodes, not an odd number of live nodes. Raft nodes require knowing they are in the majority to be healthy, if you have a network partition and half are on each side you get split brain because neither side can know for sure which side should be considered authoritative/healthy.
For the folks reflexively downvoting because they don’t want it to be true…

https://www.bloomberg.com/news/articles/2021-10-28/facebook-...

I guess there is a difference between actively genociding and _just_ shielding genocidal regimes from facing justice.
> One question though: do 'hide' links on stories work, e.g. on the front page or /newest? I suspect they probably won't, because I didn't revert that part of the change.

I've never used that feature so I don't know what's supposed to happen ...

1. On /newest, under a story, click "hide"

2. Story disappears, stories beneath it are renumbered, an additional story appears at the bottom of the list.

3. Reload page (F5)

4. Hidden story reappears

EDIT: Also, I just noticed that when I upvote a story, the points displayed under the story don't increment until I reload. For all I know it's always been that way, but at the moment, of course, I'm a bit more attentive. Not a problem for me, but maybe useful for you.
For many, it is happiness and focusing on other things in life once they have the means. Millions don't really matter if that's not a motivator in life.
Targeting Transylvania as a home of shitty offshore teams is in poor taste.
What? No! That's a legal requirement for legal accusations. Primarily criminal in the US. It has nothing to do with being allowed to doxx someone saying mean things about you on the internet. Not legally, and not ethically.
Don’t think they can do anything that isn’t strictly a superset of JS. That said I think you can use `const` and `Readonly<T>` to get some safety against mutability.
There is another aspect of tries that make them really useful: you can do fast, fuzzy word searches on a trie.

In Typesense[1], I've implemented fuzzy search based on levenshtein damerau distance and it's incredibly fast. I've found this approach to be a much better (faster + more flexible) alternative to Peter Norvig's brute-force based spell-checker that is quite a popular post [2].

[1]: https://github.com/typesense/typesense
[2]: https://norvig.com/spell-correct.html
Did we invent crash-proof carriages when I wasn't looking?

> Reviewing British fatality rates from previous centuries, demographer P. E. H. Hair concluded in 1971 that the “supercession of the horse by the internal combustion engine was by no means the disaster in terms of travel safety it is often supposed to have been,” and suggested that between 1840 and 1900, accidents involving horses produced an average yearly mortality rate of about five per 100,000 population

> fatality rates from horse-powered transportation occurred at a rate more than 15 times greater per mile in 1775 than from motor vehicles in 2000 (even using very conservative estimates for per-mile horse-related fatalities)

> In New York in 1900, 200 persons were killed by horses and horse-drawn vehicles. This contrasts with 344 auto-related fatalities in New York in 2003; given the modern city’s greater population, this means the fatality rate per capita in the horse era was roughly 75 percent higher than today. Data from Chicago show that in 1916 there were 16.9 horse-related fatalities for each 10,000 horse-drawn vehicles; this is nearly seven times the city’s fatality rate per auto in 1997.
Trie is probably my favourite ds. I really enjoy this python implementation I learned while studying leetcode because its so succint. Really useful for interviews.

from collections import defaultdict

END = object()

def make_trie():
return defaultdict(make_trie)

def insert(trie, word):
for c in word:
trie = trie[c]
trie[END] = True
Ithkuil is an experimental constructed language. Nobody speaks it fluently
At the FAANG level, it's sometimes possible to have your offer include a buyout of unvested RSUs which you would lose by accepting the new offer.
While I agreed that ProtonMail is not completely truthful about their claims on encryption, they are one of the few vendors out there who don't completely block user registration when the user is using TOR.

That means a ProtonMail account can be created completely anonymously. I call that an advantage over some other options if you want to create secondary/throwaway accounts (for example, you want to register a small forum and you don't truth their admin).

I personally won't recommend ProtonMail as someones main email service. If I want to send anything secretive such as sharing a password, code etc, I'd rather send GPG encrypted email via Gmail.
Well, digestive processes in the whale could speed the cycle, yes?

But I take your point.
That's a long way from the claim that started this chain:

> in a slightly more dystopian reality -e.g. when we are forced to use CBDCs- the government might choose to block you from using your hard earned money because you posted a criticism of the president on twitter.
I banged my head about this 10+ years ago. In theory it is possible to to E2EE webmail, the trick is creating and encrypting/decrypting the mail private keys in javascript on the client side. It actually shouldn't be that hard to verify once, but the problem is that you really have to verify the code every single time it gets served to the end user, which is just about impossible.

That said, I use proton mail with their bridge https://protonmail.com/blog/bridge-security-model/ which in theory is a lot easier to audit, and the end user is in charge of when it gets upgraded, so a warrant in theory doesn't just allow them to flip a flag somewhere and have the client forward the encryption keys. Whether or not that functionality is buried in the bridge is something that could be audited, although i've not done it and frankly probably no one else really serious has done it either since the effort to audit it is more than just setting up a custom GPG configuration.

Edit: And just as a note, frankly it hard to justify not having an encrypted email/dropbox/whatever these days. I use it fairly regularly to communicate with my bank/attorney/etc. Its easy for them to use, and throws up another barrier to the bad guys on the internet that don't need to know my social security number/bank account numbers/etc.
So, Second Life is going to work for real this time around?

They were just ahead of their times? Really?
Are these salary ranges correct.
https://www.glassdoor.com/Salary/Smartleaf-Software-Engineer...

Looks like a software engineer would need to pick up a second job to make up for Boston's cost of living.
Poor people need kidneys far more often than rich people.

Diabetes and uncontrolled high blood pressure are the top cause of kidney failure. These two conditions are far more common in the poor, and far more likely to be poorly managed.

Also if the price of a kidney relative to median income in the U.S. was similar to Iran, then a kidney would cost $15,000. This is expensive but still far cheaper than dialysis. And there is no reason an ACA plan or Medicaid wouldn't pay for it.
I wanted to say something snarky (oh they added 'secure' to mvp, better call a patent laywer). Ok I would have thought about it and come up with something, but this looks great. I went through the checklist and it makes a ton of sense, covers so many important things that people often miss, and will certainly help improve security if used.
I don't understand why they couldn't accept a crypto-currency payment in lieu of personal details. Even accepting a "proof of burn" transaction (if they are worried about money laundering regulations) would be enough to rate-limit / disincentivise the spammers.
> A Raft cluster of 3 nodes can tolerate a single node failure while a cluster of 5 can tolerate 2 node failures.

The document supports what you were expecting. So... I too am curious what happened to you.
Oh I’m dumb, thanks for clarifying!
It happens! I've fortunately never needed to do it but I know easily 50 engineers who've made a successful team jump within 3-8 months of the initial hire.
No, bad people doing bad things is what's bad. Anyone including them not wanting others to learn about private messages is unrelated to morality. Restricting encryption wont stop bad things from happening, it'll only cause more bad things to happen when something that should be private leaks.
The CIA uses text files and so do they - this point pretty much makes it clear.
They possibly meant "plenty of tools need to move chips".

A common problem that causes chatter and poor tool life is not taking a large enough chip. Large chips stabilize the tool (the rotation of the tool pulls it into the part) as well as allowing for a more continuous, uninterrupted cut (whereas too small of chips cause the flutes to have to re-engage the cut over and over, and the number of engagements and tool life have an inverse relationship).