skysight-inc/HackerNews huggingface dataset:
Coding tests are terrible when they have nothing to do with the work you’ll be doing.

I recently got rejected for a job because my API endpoint design wasn’t up to requirements. Mind you this was a fully frontend react position, I was told I would never need to touch the backend.

I lost out on some good money and they lost out on a solid frontend dev. Also, I have a feeling I could have been up to speed on whatever API design they wanted me to learn in a matter of a couple weeks..
I don't understand why a distributed solution is necessary here. Couldn't you just use a database and a git repo of stored procedures for share creation/dilution?
For some reason, I'm remembering peoples' take on this being that she was scared and running away, and I'm weirdly glad to see that someone else understood this. It's all morbid and strange, but some weird part of me feels that its important that we see this distinction; this wasn't cowardice, she was trying to "fix it."
thanks, I wasn't aware, although whether or not they had what vanusa was saying seemed obvious.
free market system at its best...
They don’t really have to, they can just mine Bitcoin by reversing SHA256 in polynomial time, inspect https messages to banks, or send Bitcoin to themselves by creating an ECDSA signature… or just set up a software as a service and have the biggest business in the world.
GitOps on Kubernetes: Deciding Between Argo CD and Flux
> Arc Institute is partnered with Stanford University, UC Berkeley, and UCSF. This means that our Core Investigators can hold tenured, tenure-track, or adjunct faculty appointments within relevant academic departments at partner universities [...] Additionally, Arc is starting an Affiliate Investigator program to support faculty who are primarily located at Stanford, UC Berkeley, and UCSF, expanding the connection among the four institutions.

If someone is a professor at a top bio-med university, do they really benefit the most from some additional funding, versus funding people from institutions that aren't as well known?
RUSTFLAGS="-C linker=clang -C link-arg=-fuse-ld=/path/to/mold" cargo build

or persitant in your project:

.cargo/config.toml

[target.x86_64-unknown-linux-gnu]
linker = "clang"
rustflags = ["-C", "link-arg=-fuse-ld=/PATH/TO/mold"]
I wonder about AGPL "infecting" proprietary CI pipelines.
If you want to avoid web development, then choose to focus on languages that are rarely (if ever) used for that purpose.

I'd recommend you focus on C/C++. It will provide a great foundational knowledge that you can use in almost every other part of programming. Also, from what I have heard, it's actually hard to recruit junior developers in C/C++.
I've seen some examples of this. It's very clearly trained on a white-male dataset.

I've also seen it "enhance" an image of a resistor into a human face.

I don't care how much AI you have, you can't add back data that wasn't in the original image. The best you can hope to do is get a vague approximation, and you must have a very, very good (comprehensive) training dataset for that to be remotely viable.
"We need work" and "we things to get done" are different things in my mind. I agree just like anyone that we need certain things to get done to survive. "We need work" is a curious little phrase though. It's setup in the same way as "we need food", or "we need safety and security", or "we need to feel loved." The framing is that of a basic human need and it's my impression that's how many people see it. It's interesting that the language follows suit in a Metaphors We Live By[1]-type of way.

1. https://www.biblio.com/9780226468013
I dont know if backwards compatibility is absolutely sacrosanct in most languages... for C/C++, sure... but I know Rust has broken backwards compatibility before, as has Python as you mention, and Ruby, too. I don't think it is as sacrosanct as you think it is, especially for relatively new languages under heavy development.
How to build large-scale end-to-end encrypted group video calls
I broadly agree, and it's clear they are limiting the scope of curiosity to some directed areas and the long term research agenda makes me think there is an expectation of more directed follow-up. "Curiosity" is likely code for "many more 'fishing expeditions' from low friction funding with the expectation that the likely low hit rate will still have reasonable number of repeatable, translatable findings after eight years". I would personally wager that is correct.

It will be interesting to see the output of this funding mindset more reminiscent of VCs but with a timespan that biological research programs require.
then that offers no security at all, since an attacker could use a hacked client. unless clients also refuse to receive anything but one, very well-validated, format, so that sending anything funky would be futile.
Gotta say, it's refreshing to see a gradual and sustainable growth plan, especially when it's mainly tech/startup folks behind the foundation. None of this "let's hyperscale" stuff.
As someone who is very anti-COVID vaccinations, my problem with it isn't the vaccine itself or the underlying technology so much as it's been the plethora of other issues associated with it. The normal processes for drug approval were bypassed and so as a result we have very limited safety data and no long-term >5yr safety data at all.

With something like this, I would expect it to go through those trials and see that we'd have some sort of safety data and further research.

Again, I am actually very positive about mRNA therapies—I just want them to be fully tested and vetted first.
Not really. The velocity of that new money is what matters, not the money itself.
The link to the paper is broken but here it is again:

From grasping to manipulation with gecko-inspired adhesives on a multifinger gripper, doi:10.1126/scirobotics.abi9773, https://www.science.org/doi/10.1126/scirobotics.abi9773
A personal history of modeless text editing and cut/copy-paste
The drivers are licensed usually but the firmware blob often is not.

But yeah this depends on the distro. Ubuntu is very liberal with this, it simply has a tickbox to enable non-open parts. Others like Debian are stricter. It's up to them really.
I use MyCroft/PiCroft (Pi4) + PS2 mic array (15$), it is cheap and relatively easy to hack in Python/Git. I believe it uses Mozilla's voice service. Has no ads.

Commands which work nicely which we use all the time: "Hi Mycroft, set timer to X minutes." "play news", "set alarm to 6 am", "what's the temperature?", "will it rain?", "what's the time in Paris?".

I wrote METAR and TAF module for it to get more detailed weather (and learn some Python).
Ok, but with parental control you are trying to control other apps. Apple does not like that. They want apps to stay in their own sandbox and mind their own business. I agree with you, but given Apple's strong determination to control everything on their platform, what you tried was just doomed to fail from the start.
I beg you pardon, my responses can be categorized as provocative sometimes, but they are never empty. I always state clearly my point and give factual data.
There's certainly cloud IDEs.
Honestly asking, how is it not a survival skill? It's a high level abstraction that's part of the "need" for the company, which is why they're paid to fill out that report, with the skill being all the intelligent/understanding required for that high level abstraction. It's literally paying for all the needs and squishy comforts of life for that individual, most likely much squishier than an average individual.
> That's obvious bullshit. You should certainly rule it out.

What they meant, was that they couldn't rule out that someone was making this ridiculous claim, even though they hadn't heard said claim. All three of us are agreed that the claim itself is bullshit.
Perhaps nothing. He wasn't regarded as effective during his time in office...maybe he would have just run out the clock on his first term and failed to be re-elected

Comments here about Vietnam are way off base...the US mostly fully committed already during his Presidency and there wasn't much pressure at that point to back off...quite the contrary
As an Android developer and early Glass explorer it pains me to say that I agree with a lot of the comments here.

I was having a conversation with someone connected to the upper execs there one time who explained this to me. They said that Google could generate the same amount of profit with a small fraction of the staff it currently has. The thing is though, the stock price would not be nearly as high and they have to keep the buzz going, by pushing out a lot of bets to pump up the stock. All that they need is enough perception of innovation to make wall street happy. So that is what they have done, and as a bonus a large part of salaries are paid with stock which allows them to keep the ponzi (my term not, theirs) scheme going.

Up until a few years ago most developers loved Google, but they have systematically done a lot of things to piss off a large number of them and you don't see nearly as much Google love these days. The big question is will that negative sentiment eventually affect the stock price? I know that I would personally like to see more competition in the search space (which is their bread and butter) and have less Google lobbyists in Washington DC. Also, great companies eventually do falter. The question is, will Google's fall be as fast as it's rise? Time will tell.
OKTA SLAs and support terms specifically exclude AWS outages, so why would they?
You’re right. If science was never questioned, you would still be drinking cocaine, giving your kids cough syrup laced with heroin, spraying people with DDT, and smoking the cigarette brand your doctor recommended.
I suspect the minimized version, "Why would she do that?" would have been well received. I don't think anyone understands why the "I'm not from the US" clause is there and I personally assigned a reasonable probability that it was a short-hand stand-in for the following sentiment :

"The US has so much gun violence that they must have some kind of expertise that leads them to know that its a good idea to save skull fragments in case the doctors need them. Lol, just kidding, that was sarcasm; I just wanted to bash the US for their high rate of gun violence."

Of course I accept that this may be mis-interpreting it. The only other meaning I can parse is: "I imagine that everyone in the USA learned about this event in great detail in their school lessons/etc. I haven't so....could someone explain why she grabbed the skull fragment?"
Sorry if I was imprecise in my verbiage. I was talking about expense in the general sense (time, effort, focus) not just money.

For example, it takes more work to research a company, find the hiring manager, see what meetups the team members might attend, determine part of their tech stack, build an app in that tech stack using their product, volunteer to give a talk on that app, let the manager and team know about your talk and then ask about open positions, than it does to shoot a resume off.

But if I was at a company where a candidate did the former set of activities, it would knock my socks off and they'd definitely move to the front of the interview line.

Note, not everyone has time for this particular way to stand out (we all have different obligations), but in my opinion, every new developer should find some way to stand out.
Oh did they put it back in the mainline? I still have the addon installed. I'll give it a try, thanks for the heads up.
They must have spent tons of engineering effort to create this virtual computer to act as their foundation for further exploits. They don't deserve any sympathy of course, but it must really suck that their foundation disappears immediately with the fixed vulnerability.
Why is there a culture of hiding cap tables in the first place? Seems like some incentive structures need to be fixed before a transparent cap table is adopted.
2.5 years sounds pretty extreme. Not from Apples part (its pretty on-brand), but on your part.. To me it sounds like it would be time to just leave the platform behind and move on with your life? Ask yourself is it really worthwhile to fight the uphill battle against Apple to get your app approved?
NSO get way too much credit/dramatization these days. They are mostly 2 things

* a shiny UI for customers

* a bank of 0-days

Those 0-days could be found in house, could be brought in from a new employee copying a previous employer, or could simply be purchased.

Most people in the IDF understand when a great security researcher leaves 8200, the company they move to will probably have some of their secrets, theres really no way to stop a 0day from leaking from a researcher like that

This exploit has been closed, but we haven't heard anything about Pegasus not working anymore, so i'm just assuming they moved on to the next exploit. Previously there was a big Whatsapp exploit FB closed that had them hurting. I'm sure they always have multiple backups for when this happens

There is, and has always been, a 7 figure market for high quality 0days. Hell, maybe its 8 figures these days. NSO is just "in your face" which makes people angry

NSO was caught, and thats why Google is crediting them. But this same exploit could have been heavily used by 8200/NSA/who knows who else
Disnosaurs gonna dinosaur, bitcoin and web3 will eat the world and they will be left holding their bags. Can't see past their own little bubble.
> studying for coding tests

this is a total waste of time

search for real experience, freelance, do open-source, read books

you won't be more happy because you finally cracked FizzBuzz in brainfuck

> My rules for a portfolio project

why should my own personal project follow someone else's rules?
Tangentially related: On Friday Backblaze and B2 were down for 10+ hours to update their systems for the log4j2 vulnerability. Seemed noteworthy for the HN crowd and I posted a link to their announcement when the outage began. However, the post was quickly flagged and disappeared. Genuinely curious, why is announcing some outages ok and others not?
The tone of your comment is pretty inappropriate. The whole point of this is to help people learn about DNS, including the author, who happens to be one of the most humble and helpful persons on the internet.

No volume of books can be adequately substituted for doing something, which this project enables handily.

I'm sure you'll be down voted to oblivion but maybe consider a more constructive approach, like opening a PR and helping the authors out.
Not every quote about Bezos/Amazon is an opportunity for an off topic virtue signaling “dunk”.

If they are breaking the law lets prosecute them. If there is a law you want changed vote for a legislator to back it. If you don’t like them, don’t buy from them. This isn’t complicated.
Looks intersting indeed! Still in developement but already usable. UI is only in german though.
Maybe its the other way around. Him pursuing them, them rebuking.

https://thehill.com/regulation/court-battles/534727-woman-ac...
These people probably smartest developers in the world. I wouldn't compare myself with them.
> The second baffling thing is how HN's react to USB-C and HDMI so differently. With USB-C / USB 4, more than half of HN expect the consumers to know which cables and port offer which features. It is the consumers's fault for not choosing the right cable or knowing what their port does. I dont see how that is different to HDMI here. All it takes is one bad actor in the market. And it will be a race to the bottom.

With USB-C I get something out of the confusion - a really versatile cable standard. With HDMI there is no downside (to the consumer) in just calling HDMI 2.0 so.
I downvote whenever I think a comment was made in bad faith.
I believe this is assuming that fingerprinting mitigations are good enough to prevent unique identification. If you can uniquely identify a user, you don't need any cross-context coordination.

The problem as I understand it is when you have two separate contexts, neither of which can unique identify you by themselves, and they want to test whether you are in fact the same user and furthermore send information between each other. The two contexts are usually either (1) two different websites, or (2) two different browsing contexts (two profiles or one is a private browsing / incognito session) on one site. The two contexts have a server-side communication channel to coordinate the attack. The two together may still not be able to uniquely identify you, but that's not the attack -- they just want to learn if you're the same user.

I haven't read the paper, but I imagine it to work like this: say you have a global maximum of 100 WebSocket connections allowed alive at once. Context 1 opens up WebSockets until opening a new one fails. Then it tells the other context "hey, watch this." Using a shared clock, it closes one of the sockets for 1 second, reopens one for 1 second, etc., producing a string of 1s and 0s. The other context reads this string by attempting to open a socket of its own for a millisecond before closing it. (This is all hypothetical, there are probably flaws all over this.) If the probe succeeds, that's a 0, else it's a 1. You pass across a randomly-generated UUID or something.

If you're using separate profiles, the advertiser (attacker) can now permanently remember that those profiles are actually the same person. You have a happy tracker, sad user.

To defeat it, you need to partition the maximum limit, which means you either allow massive overcommitting, or you artificially restrict everything to a small value. It looks like they're arguing for overcommitting, using the argument that this will cause the attack to degrade the user's experience enough that they'll stop using the site, which means it'll stop being used.

(To mitigate it, it seems like you could slow down the cross-context resource accounting, to make the bit rate too slow to be useful? But it probably doesn't take many bits.)
Nothing requires us to publish an app -- but when you make LOB software, the user-base is like "where's the App?" -- so you build one. It's not a strict, absolute requirement -- it's a de-facto requirement (like passing to the left)
Some observations:

- Tool options increasing monotonically seems like the very definition of bloat. Probably since the marginal cost of adding an option is very low and the cost of removing an option is very high (angry users).
- There's a cognitive cost to bloat. Personally, I know maybe 5-10 options to all the commands in the regular *nix tool set and that's about the limit my brain could hold.
- Options are useless if they are not discoverable at lower mental effort than the alternatives. Man/info pages are great, but I'm not wading through multiple pages on the off chance that ls has an option that can output in JSON if it's a Wednesday and my POSIX locale is unset. Discoverability is a serious problem in large systems, and I'm not sure anyone knows what the solution is. I mean, we've had google, Stack Overflow, man X intro, GNU info, ...

So what does that mean in practice? Is there a way to square modernity with the UNIX philosophy? I would suggest that

1. Tool authors ruthlessly restrict options to fit in the working set memory of the average human user. Let's say <10 options. If you need more options, you need a new tool.
2. Tools are pluggable, so that the base implementation is simple and known-to-be-present (shades of POSIX here), but that there is a expansion pack mechanism for people who need it. Imagine DLC for ls. You want extra magicka in your find(1)? Make sure you have the plugin and off you go.
3. Tools designers and users are clear about the decision criteria to *not\* use a specific tool. Sure I could do crypto in awk, or parse \0 in ls, but I shouldn't do so. There's no shame in reaching for a better solution, and, over time, solutions will coalesce into new tools. For example, everyone uses jq not awk to parse their JSON...right?

Edit: I just returned from my kitchen with a IRL example: my dishwasher has 15 programs but only two buttons show any sign of wear: "quick wash" and "start"...
I thought the point is that it is easily bypassed or disabled, so in a coercive or sensitive situation the physical holder of the phone can take control.
Down detector is just a statistical page, it does not actually detect downtime, and is in no way aws's status page.
34-44% for hydrogen and 30-38% for methane [0].

[0]: https://en.wikipedia.org/wiki/Power-to-gas#Efficiency
Which is why content aggregators are so valuable
Um, as I understand it, dark matter was not posited by equations but by how observations differed from the the equations. And essentially, this is still the state of things. To wit, the standard model doesn't match observation unless there is this "dark matter" out there. We have no idea what it is. It's just what we call a particular type of ignorance. Current work is either a) assume that the theory is correct and that "dark matter" actually exists so they try to figure out what it is or b) assume that current theory is wrong and so try to come up with a better theory. Or c) a combination.

And essentially the same thing for "dark energy".
In the previous discussion we discussed how fast mold is at linking ELF files. I was also wondering (unvoiced) if it would also be possible to make a ridiculously fast linker for PE/COFF (Windows).

Somebody else asked the same question in an issue and the answer is yes, in principle, but it'll take a lot of work. That's not unlike how solid ELF support took a lot of work. I see in the v1.0 release notes, Windows support is nominally planned for v3.0.
My country’s dictator (Viktor Orban) uses it to spy against the opposition and the president to make sure that he keeps control of Hungary. I would give more kudos to NSO if they helped us get rid of corruption in my country.
Probably because it's specialized enough that the available positions tend to be for experienced people, or those with degrees in related technical fields like EE.

I've been primarily an embedded developer for the majority of my 25+ years in the software field with occasional forays into desktop, web and app development.

The only newbie devs I've seen doing low-level MCU development already had backgrounds in EE or CS/SE and did some basic embedded programming in school. I've worked with a lot of desktop/web guys who made a fantastic transition to embedded, but they were coming into it with years of experience and they usually started at a higher level (e.g., working with UIs or databases or communication protocols).

Embedded is not the friendliest path if you're trying to break into software without a technical degree.
Evidence of early hominids and other less advanced proto-human or human groups shows a pretty significant amount of calories came from meat. Some suggest 60-80% of calories came from proteins, largely meat, at various times in history.

Example source:

https://onlinelibrary.wiley.com/doi/10.1002/ajpa.24247

A contradictory source says meat was less prevalent but still at 40-50%:

https://asu.pure.elsevier.com/en/publications/the-diet-body-...

Both of these estimates are way higher than what we know people eat today, where meat and dairy are 18% of worldwide calorie consumption (27% in the US).

So I think the abundance we see today is actually due to the availability of non-animal dietary sources.
Is it bad that I thought at first from the title it was referring to the reports a few years ago of gangs attacking rival gang members at the local pool? (sense its a location they are presumably off guard and wouldnt have access to weapons to defend themself)