skysight-inc/HackerNews huggingface dataset:
A friend once gave me the book De Broncode, as they thought it might be inspirational for me. I must have hurt their feelings a bit as I immediately explained why it was an impossible idea.
I guess we’ll agree to disagree on the sentiment.

Software maintenance never ends. And programmers just like every one else, need to eat.

Assuming even a modest $50/hr rate, you’d chew through $250 just trying to get the team invite functionality working, let alone the other 15 features.

You’re worth $250 a year for something that will make you a happier engineer.

Why burn nights and weekends implementing api tokens or 2fa or user invites when it gives you zero competitive advantage and you could pay $250 and all of that is provided for you?

Spend your dev time where you bring the most value.

You’re worth it. Your ideas are worth it. Be kind to yourself.
I'm really confused by your take here. "Just because you had a less then (sic) stellar time once doesn't mean that the average shopper doesn't leave satisfied." The average experience is the sum of all reviews - not each review is the average experience. That's how reviews work.
I always assumed street musicians and homeless people were different people
Ok I would narrow down to the Technical Knowledge part.

What would be the best way to impress you in the interview on technical knoweldge part?

Any resources which you think are good off the hat?
These are concerns that will arise in some organisations, for sure. Personally, I don't have a need to work together with people who cannot be bothered to learn TypeScript. A nice type system is something you really want, and which improves code quality. No need not also to use linters and unit tests. These things do not oppose each other, they work together nicely.
These "foreign" CMPs are located in the EU (Denmark in this case) and as such totally legal. There's no evidence of bad faith, no intent to steal and keep anywhere but inside the EU.
There's never been a better time to pick yet another framework/language/stack to over-engineer your brochure-ware site.
Don't forget, there are hundreds of thousands of people employed by China to manipulate public opinion about China online.

Looking at the comment history of the person you responded to, they post pro-China stuff a lot. This is probably not a conversation being had in good faith by two disinterested parties. You're responding to a member of the 50 cent army.

They're everywhere online now. Some subtle, some not so subtle. But whenever I see a pro-China poster who doesn't really give any evidence to back up what they're saying, and they just spew pro-China apologist rhetoric, I become very suspicious.
For a while my Amazon Alexa gadget was hitting three domains several times an hour, example.com/net/org. I looked with tcpdump and verified it was following every lookup with an HTTP get.

I only left the Alexa on for a week while I was recovering from eye surgery, but it made those the top three most frequently queried domains for that whole month on my pi-hole charts.

Presumably it was some connectivity test, but all three of those domains were hosted at the same IP at the time. Which would defeat the point of using three domains, if the goal was to reduce the possibility of one outage causing a false negative on the test.
Ah, thanks! I've added it.
That “doubling of cost” thing is utter rubbish. If you produce higher quality code with two people deeply aware of the design and maintenance of a system doesn’t that reduce overall cost? I swear this “doubling cost” is one of those myths perpetuated by Taylorist managers.
I’ve never seen any evidence to suggest pairing is less efficient overall.
Did I somehow propose "one size fits all" in any of my comments in this thread?

You seem to have come to your conclusions referencing history, and not leading from a conclusion starting at founding principles.

The United States of America has been an experiment, with the basis of the Constitution by the Founding Fathers. It's done quite well in its first iteration. The next framework now needs to be laid out, but part of that is educating the population (local and globally, as each geography is going to be prone to the actions of bad actors) so then they can vote rationally, reasonably, and ideally not following or indoctrinated into ideology.

You seem to have a misconception or confusing what "government at a global scale" is, perhaps you're once again presuming the current status quo of generally captured and incompetence elected general officials (like the establishment/duopoly in the US) will forever be and so then yes, if you do the same thing over and over again (with incompetent and captured politicians in positions of power and others' captured leading our government institutions) then yes, that would be insane - but the status quo can change - and new ideas, the truth, is making its way to regular folks because of the reduction in capture of attention that the internet has allowed, and focusing on creating online platforms and systems to further strengthen education-learning, communications and reaching like-minded and like-hearted community is the key.
In California the money goes from bottlers to a state agency and the program is essentially used to fund curbside recycling programs. The costs get passed down to consumers. While it’s indirect, it’s essentially a government service you’re taxed for that you pay either with your wallet or your labor.

Additionally, since the deposit is not exempted from sales tax, the consumer also pays more sales tax than they would otherwise.
Embark Studios: Homegrown Rendering with Rust
> “We found multiple lines of evidence supporting the fact that the global microbiome’s plastic-degrading potential correlates strongly with measurements of environmental plastic pollution — a significant demonstration of how the environment is responding to the pressures we are placing on it,” said Prof. Aleksej Zelezniak of Chalmers University of Technology in Sweden.

> Jan Zrimec, also at Chalmers, said: “We did not expect to find such a large number of enzymes across so many different microbes and environmental habitats. This is a surprising discovery that really illustrates the scale of the issue.”

> The first bug that eats plastic was discovered in a Japanese waste dump in 2016. Scientists then tweaked it in 2018 to try to learn more about how it evolved, but inadvertently created an enzyme that was even better at breaking down plastic bottles. Further tweaks in 2020 increased the speed of degradation sixfold.

This is why I believe in God. The absolute "holy crap" of the system quietly upgrading itself to handle whatever we throw at it. As an engineer that's incredibly humbling.
From the linked article Avoiding Internet Centralization:

5.2. Encrypt, Always

When deployed at scale, encryption can be an effective technique to reduce many inherited
centralization risks. By reducing the number of parties who have access to content of
communication, the ability of lower-layer protocols and intermediaries at those layers
to interfere with or observe is precluded. Even when they can still prevent communication,
the use of encryption makes it more difficult to discriminate the target from other
traffic.

Note that the benefits are most pronounced when the majority (if not all) traffic is
encrypted. As a result, protocols SHOULD be encrypted by default.

They're literally describing the lack of decentralization that encryption brings. "If you encrypt, intermediaries have no control". Which means a central actor does. By encrypting communications, without an intermediary protocol to support more flexible operations, there is no way to extend functionality for networks that depend on intermediary controls.

All systems that scale HTTP-based applications require a lack of encryption on the backend. The encryption is terminated at the load balancer and the entire connection is then inspected in plaintext. Sure, the "best practice" is to encrypt between endpoints, but they must be decrypted at each hop so that load balancers, API gateways, and applications can inject or parse headers, perform rewrites, forward traffic, inspect requests (WAF), create sticky sessions, and cache media. If all HTTP connections were end to end encrypted, the web could not scale.

Another example is DNS over HTTPS. The encryption centralizes control of the protocol at the server. The encryption removes the ability of intermediate LAN/WAN DNS resolvers to cache records for a large local network, or to serve their own custom zones transparently, or do things like ad-blocking. As there are valid and necessary use cases, it means that now new "hacks" will have to be developed to accommodate the old use cases, that the protocol design intentionally ignored. The result is more centralization.

Distributed decentralized applications also suffer when PKI is used for encryption. It is very common for backend applications to stop working because they were using a private CA to encrypt backend connections and the certs expired without warning, killing all the connections. Refreshing the certs then involves re-deploying not just the servers, but all the clients that were reliant on an old client cert, and possibly an expired CA cert. This use of a private CA also breaks decentralization compared to the public CA model.
And does the landfills buried before that point become coal and oil :)
What if Bob is in a country where people have the freedom to wander around most of Bob's 200 acres?
This is a really common misunderstanding of the differences between GDPR and US privacy laws.

In the US, what is generally regulated is "posession" of data, with narrow definitions of what PII is and no restrictions on anything that isn't. In GDPR, what is regulated instead is the possible justifications for processing of that data.

For example, (IANAL caveat aside, speak to an actual privacy lawyer) it is fine for me to store full, unredacted IP addresses in my access logs for diagnostic purposes.

However I, for example:

- have to be able to provide information on what is stored and under what justification

- have to provide information on who that data is transmitted to

- have to be able to show an authority it is really necessary for me to store this data unredacted

- must put in place adequate measures to protect it

- am liable for exposure of that data

and may not:

- store the data longer than necessary

- use that data for other reasons, such as marketing

- transmit that data to a third party unless it is contractually bound to the same restrictions as me

When something is personal information, the only thing that means is that it is illegal to not have a justification for processing or storing it.

So for your example, processing headers is fine, fingerprinting headers is probably not. Recording shortened ip addresses is fine, unnecessarily sending them to the US is probably not. Anonymous identifiers are fine, tracking people with them is probably not, etc.
At some point I'd imagine that requiring the source code for such critical components for a long-lived machine is going to be the only sustainable way forward. At this point you'd end up reverse engineering device drivers or using 'unsupported' configurations to keep going.

Of course the fact that a company that no longer exists can't support such a configuration doesn't matter because they aren't there anymore to care about any of it.
AWS has ~20% higher prices for compute (EC2) in Frankfurt compared to N. Virginia, which doesn't seem that much higher.

Additionally, one of the cheapest dedicated server provider (Hetzner) has two data centers in Germany.
This generalizes to "apply a vulnerability-specific tricky auto-fix to a binary it was never tested on". That might be a reasonable solution if there's nothing better (and since speed is of the essence, there might not be). But it's not exactly a reliable solution, and not every vulnerability will have hacks like that available, nor is it really clear to what extent they fix the problem; it's pretty easy to miss something using this kind of approach, or to have some future deploy bot restore the vulnerability in normal operation. And hacks like this can break things, both directly (the patch breaks actually used functionality unexpectedly), and indirectly (the fact that the software was patched at all breaks sanity checks or other cleverness like binary diffing or whatever).

I can't see how this is going to work as a strategy. Ad hoc cleverness? Sure, and that's always good to have when you're smart and lucky enough to pull it off. But it'd be nice to have a strategy that works without relying on being smart, willing and able to engage with tricky ad hoc solutions, and somewhat lucky.
The "main issue" is that Tesla is even able to assist the bailiffs in this manner.

If a remote party can, by design, lock you out of your car and take control of it without your consent, do you even really own the vehicle in the first place?

Others have argued "well, you don't own the car, the bank does", but unless Tesla is somehow unable to do this with cars not owned by a lienholder, that's kinda beside the point as far as I'm concerned.
Finally, my hometown on Hacker News :)

Sorry, I couldn't resist.
But it's far simpler to check if students did 20 math problems then if they read a section of their textbook
For me it's about control. I'm fine with having whiz-bang features on my equipment, so long as I am the final authority on anything and everything about them.

About a year ago I took my fancy EV on a ferry. I kept it on and ran the air conditioner because it was hot outside. Partway through the crossing I guess the suspension sensors interpreted the boat rocking as "something is seriously screwed up," and it locked the brakes and wouldn't release them when it was time to disembark. I had to sit there in my fancy EV looking like an idiot while everyone filtered around me and I took another trip across the water with cones around the car.

When I frantically called the dealership in the middle of all that, they said, "Sorry, your car has decided that it isn't safe to drive. You'll have to get it towed in so we can take a look at it. Oh, and since you're on a ferry, our roadside assistance won't help you. Good luck!" When I asked the ferry staff what I should do, they replied, "Uh, usually we just ask the owner to shift into neutral, and we push the car off." Only the car decided for me that this wasn't a possibility, and the brakes remained engaged with no way for me to disengage them.

The next thing I did after I finally got back home was research which cars I could still buy today with manual transmission and an emergency brake attached to a lever and a cable. It's not at all about holding onto my youth. It's about being the final authority over my own goddamned property.
> Go is very often that simple tool which works for most simple things.

If only folks applied that kind of thinking to things like architecture and devops.
> by players in the decentralization space

Keep in mind that this is a somewhat large space, and depending on what parts of the decentralization space you're looking at you might see players who are all-in on blockchain tech, or you might see people who view it as a giant waste of time or even actively campaign against it. In particular when I look at projects that are using federation (Mastodon, Matrix, etc), I see a lot of people who are fairly skeptical about cryptocurrency and outright hostile to NFTs.

I have my own biases there, I don't think that NFTs are in practice particularly decentralized, and I've slowly come to believe that cryptocurrencies have both systemic problems that make them less valuable as a decentralization tool than they're often advertised as being, and community problems that make them difficult to use as a basis for any kind of political movement (and decentralization is inherently a political idea/movement).

But my biases aside (I'm not trying to make a pro/anti blockchain post here), just remember it's a big space without a single uniformity of views; from the circle of advocates I'm paying attention to and interacting with the most, I would have almost guessed the opposite, absent better stats I'd have guessed from my experiences that at least a plurality if not the majority of the decentralized "community" is against this stuff. Interesting to run into people who seem to be more in touch with parts of the community that are outside of my bubble.
In a way, its more difficult today because there are so many options for web development that it's paralysing to even find out where to start. Still, can't go wrong starting with the most basic option.
That website also loads 184 KB of Javascript to display a 13 KB static document
I read somewhere that 300 million years ago, when trees died, they didn’t rot. It took 60 million for bacteria to evolve to be able to decompose wood. Which is where most our coal comes from.
I pity the Joneses.
Yeah I got stuck running a startup solo and would lose a ton of sleep stressing about any possible unknown unknowns on the accounting and legal side, reading through a few business law and accounting / bookkeeping books really helped ease that stress.
I like this axis a lot, and think that it is probably the most important political axis at this moment in history (where I give great weight to my local and state politics, and to international concerns like climate change and global pandemic).

BUT I really hate the term "bulldozer" for the opposite of vetocracy, because bulldozers destroy and flatten, they do not build interesting and useful things. They might make room for something useful, but they may bulldoze something and leave it empty.

I'd prefer the term "Do-ocracy" in opposition to "vetocracy." Do I have the licenses to do things on my own, or is everything forbidden until explicitly approved by the vast majority of interested parties? That's the key concern that affects all sorts of governance from large corporations to startups to political organizations to actual zoning laws.
Link doesn’t match title at all.
Interesting idea. I would quibble a bit with some of the stuff around zoning. There are tons of left-wing places like San Francisco that have an enormous amount of zoning and regulation around building homes - including areas where it's not legal to build anything other than single family units.

One of the things I've found a bit refreshing about the YIMBY movement is that it is not really on one side of our political "trenches" - things like abortion or guns where the lines are drawn and you can mostly predict how someone votes by their party affiliation. Means there is a bit of room for some alliances - and also that people of your same party won't necessarily "have your back".
A few years ago Netflix had a problem processing the payment for my subscription. They charged me again, also had problems, charged again. 3 times, every time the money left my account as the bank confirmed. A few days later, with no warning, they suspended my account while I was watching a movie.

I don't like the power these companies have in relation with their customers. The customer has no power at all, in most cases. In my case I had to ask the bank to revert the charges and close my Netflix subscription, but it was just ~ $30-40 at stake, not a $50,000 car. How many times cars are repossessed without any fault of the customer?
Is there an eBook version of this?
Not all B2B is like that. In general smaller companies have much shorter sales cycles than large. Also tactical products (oh shit I have to solve this by Thursday) have shorter lead times than strategic products (how are we going to handle this issue for the next ten years).

The revenue per customer is lower but the volumes higher. It is doable.
Could also be that you're seriously overpaid.
Right. Compromise the right credentials, and you can order a high percentage of parked Teslas to start backing up.

That probably won't make them cause damage immediately -- I assume there's a set of sensors that will apply brakes rather than hit a wall or a detected car -- but there's a lot of chaos to apply that way.

I wonder if Tesla's EULA immunizes them against such breaches.
I'm not exposed to very many Joneses. Not on any social media, so I'm not seeing whatever perfect curated influencer lives are dominating Instagram. I didn't jump neighborhoods a bunch as tech salaries skyrocketed, so my neighbors are mostly poorer than me. The few long time friends I still have from the good old class of '99 run a gamut of averageness you'd expect from any random sample of who you happened to meet and like at a public high school in the 90s, so not much to keep up with. Co-workers are working a similar job at a similar salary. I work for the DoD, so the senior executives directly managing us are making less money than the contractor engineers.

There are plenty of people out there worth being jealous of, probably, but if I don't know about them, I can't be jealous.
My dad walked/s most mornings. During my childhood he always brought a little store plastic bag and picked up and cans or bottles he walked by on the road. After many many years he said for something significant with the money like a semester of tuition or a car down payment. Something like that.
> Code review is a knowledge transfer exercise

In many places, yes.

But: When you have a solo developer working on a component in a language that you aren't familiar with, team full of novices, component delivered by a contractor...
Zopfli is *really* good at compressing PNGs
That's not really known for sure, likely a very long time. It mostly seems to slowly structurally degrade into micro-particles, at the time scales available to us so far. The nearest analogy I'm aware of was the Carboniferous period, which occurred because the lignin in woody plants couldn't be broken down by organisms, so it accumulated in vast quantities in bogs and such. These massive deposits of undecayed organic matter eventually fossilised, under the conditions of temperature and pressure developed by geological formations, into coal and oil.

So a long time might turn out to be a very, very long time indeed.
why do you think that's the case? is it because people will feel 'sketched out' by the bareness and leave?
1 hour per day, as it’s the only thing which helps me fall asleep. I read until falling asleep and then again whenever I wake up during the night. Two birds one stone.
> What do I mean by that? The applications that I work on do a lot of composition of apis, reshaping the data and caching on the frontend since our backend teams are micro services teams.

You may want to consider whether you're doing the back end devs' work for them. :) I'm a FE dev working with a lot of microservice back ends for the last 3 years, and a realization that I had early on was that the back end devs were reducing the back end complexity by pushing it into the front end. Whenever I find myself writing transaction logic for an operation that cuts across multiple services, I suggest we use a backend for frontend (BFF) service that performs those transactions instead. There is an incredible amount of complexity in the front end already, and things like read/write transactions and data consistency are not front end concerns. At my current gig we use an event driven saga architecture[0] (inspired by but no relation to redux-saga) to keep multi-service transactions out of the front end, and it just feels like everything is where it should be. Instead of using a front end saga, the front end sends a graphql mutation to a back end saga and gets back a transaction id, which it can subscribe to and get status updates on the transaction (ie. state and errors). It wouldn't make sense to have your back end devs manage the state of a dropdown, so why are they always asking us to manage their data transactions? :)

[0]: https://github.com/social-native/kafka-sagas (this is a purely back end library; the front end queries the saga state with plain graphql operations).