skysight-inc/HackerNews huggingface dataset:
> Web Two was don’t be evil. Web Three is can’t be evil. You bake it into the code that you can’t be evil.

Yikes. That's a philosophy that really misses the nature of evil. In fact, I think we're doing ourselves up for colossal failure if we assume we can create an unexploitable algorithm that we then cannot modify that can be crafted to be evil-proof.
If you are manually typing a command, then the shell could do this work instead of the file system, right? That's what the shell is for, to be the bridge between humans and the computer right.
In a perfect system, you would type ls /p, and one of the suggestions of the tab completion would be /Program.
Given the track record of employers in general, and gig economy “employers” in particular, I don’t think his initial leap was unfounded.
Rust - Embedded or executables. Outstanding official tooling and docs, package management etc. Elegant language. Not much competition in this field, so doesn't need to be a standout to win.

Python - Experimenting with numbers - eg a fancy calculator, plotter, DSP prototyper etc. Robust set of mathematical, scientific, and statistical libraries. Frictionless syntax. Nice REPL (ipython) Doesn't have the licensing issue of Matlab. Julia has better mathematical syntax, but has too much overhead to compete. (ie it's slow for this use, despite being advertised as a fast language)

HTML, CSS, and Typescript - Web; keep it simple, universal, and fast.
Because they are just engineers, not the owners of the company.
Confession: I store all my passwords in a plaintext file on my local desktop.

I'm sure some people will look at me very funny for doing this, but it seems to me that I have both fewer hassles logging in and fewer breaches than people using more "secure" methods (like handing your passwords over to LastPass's mystery Chrome extension).

Think about today's threat landscape and tell me I'm wrong. I may not be more secure in every possible situation, but I'm more secure in the situations that cause the vast majority of breaches today.
That's defeatist thinking. Just because some agencies of major governments can break into many devices doesn't necessarily mean they do.

And there are other threats you'll want to defend from as well, including governments and agencies with smaller budget.

Anyway, if endpoint security is part of your threat model, you'll be pleased to know I've spent the past decade looking into how to address the problem https://github.com/maqp/tfc
reasonably fair assessment, but the problem with Chromebooks is that they're basically glorified smartphones as opposed to desktop PCs, in that they're consumption devices as opposed to creative devices. sure you can get various chrome extensions (presumably not on these school Chromebooks though) that let you get part of the way there—I passed my first semester of CS using only a Chromebook with the Secure Shell extension to remote into my linux box at home—but by and large the era of everyone having the untapped creative power of a cheap commercial desktop PC in their home is kind of over now, and in my opinion we largely squandered that wonderful time by not encouraging more young people to play around with them creatively.
The multiple layers of abstraction in this make this test sorta moot. You have the AWS infra, the poor MacOS implementation of Docker, the server architecture. Couldn't you have just had a vanilla Ubuntu install and curl some dummy load n times and get some statistics from that?
“Sanitation issues” are isolated to certain neighborhoods in San Francisco (“the city”), a 45-minute drive from Cupertino if traffic is light.
This negates the idea that bitcoin or it's ilk could replace USD.

Crypto technologies are interesting to me because of their great potential for good (defi) and bad (dystopian black mirror gold farms, dyson sphere fueling crpto mine, etc).
Do you have a link to this unicorn cloud machine ? I'm very interested for something faster than a bare-metal 32-cores threadripper with 128Gb of ram and a 2TB SSD (NVME I guess) for less than $1 an hour.
Your CPU has dedicated circuitry for performing CRC32 and AES rounds. That's as specific as any analogue computer...
Because Hong Kong was mostly free (until last year) as a result of it, while the rest of China was ruled with an iron fist.
Horizontal drilling is very expensive.
This is an inspiring series of writing. After reading the intro, I expected to read the first and last post as suggested by the author for 'impatient' people like me.

However, after reading the first post, I'm wondering, should I read one post a day, at the tempo the author has written, and see if I can grok all (or some) of what they have?

Yes, yes I should.

There's something particularly impressive about any creator who comfortably exposes their journey, not only their destination. This is something I'm trying to work on, being okay with incompleteness. Maybe it's something we all struggle with.
Well speaking just for London when I lived there for 12 years before leaving commutes were as easy as jumping on the tube for 30-40 minutes, pretty reliable from a reasonably priced distance. The Bay Area sounds like actual hell in comparison.
> This is what people don't seem to understand about BitCoin. It is cashflow negative, Money has to keep coming in

Pretty sure a sizable portion of Bitcoin holders understand and know that. They don't hold Bitcoin as a form of bespoke investment to be exchanged for money at some point in the future. They hold it because they believe it is sound and incorruptible money.

And as long as they (not any additional people!) continue to believe that, it will hold value.

It is to be seen if they are right or wrong, but they know how cash flow works.
1. novice follows the rules because he's told to

2. master follows the rules because he understands the rules

3. guru breaks the rules because his knowledge transcends them

Doing these out of order doesn't work very well.
I believe that's a distinction without a difference. Most scientists have a hard enough time understanding statistical significance in well controlled experiments and they are (ostensibly) trained for it.

There's so much noise in business data that it's like reading tea leaves, except no one can prove it because by the time they gather enough data they realize that the management and/or market dynamics have introduced even more noise so everyone keeps chugging along, blissfully unaware that they're indulging in statistical fantasies and reinforcing whatever beliefs they already hold.
There are no closed systems, and players playing a game does create value. It's almost the only important aspect of software's value - users. Anyone can write some garbage software, or hire people to do it, not anyone can make things people will want to use.
An example of the hypocrisy: a prominent university in the Boston area that announced that they will suspend on campus childcare from January. Labs are still open, and the population of lab workers most likely to have benefited from on campus childcare were postdocs. Now they have to find at home childcare at their own expense. Postdocs also tend to be overwhelmingly foreign nationals who want to avoid rocking the boat.
The Plan

In the beginning, there was a plan,
And then came the assumptions,
And the assumptions were without form,
And the plan without substance,

And the darkness was upon the face of the workers,
And they spoke among themselves saying,
"It is a crock of shit and it stinks."

And the workers went unto their Supervisors and said,
"It is a pile of dung, and we cannot live with the smell."

And the Supervisors went unto their Managers saying,
"It is a container of excrement, and it is very strong,
Such that none may abide by it."

And the Managers went unto their Directors saying,
"It is a vessel of fertilizer, and none may abide by its strength."

And the Directors spoke among themselves saying to one another,
"It contains that which aids plants growth, and it is very strong."

And the Directors went to the Vice Presidents saying unto them,
"It promotes growth, and it is very powerful."

And the Vice Presidents went to the President, saying unto him,
"This new plan will actively promote the growth and vigor
Of the company With very powerful effects."

And the President looked upon the Plan
And saw that it was good,
And the Plan became Policy.

And this, my friend, is how shit happens.

http://web.mnstate.edu/alm/humor/ThePlan.htm

Reading reports filtered up through an organization is no replacement for going to the Gemba.
With all of its wealth and demand, the Bay Area should look like London or Tokyo or New York. Instead it looks like Tracy. It’s not falling apart, but neither is it growing up. It’s stagnant.
Case-insensitive ASCII filenames are best filenames.

Also, please, no whitespace in filenames. Allowing linebreaks is just insane.
The impressive past of Africa is the, now, myth of Atlantis. That's where it began, but not where it ended. And that's the crux of those archeologists' struggle: they really want to find that past glory of Africa for ideological reasons, but they dont really want to find it, also for ideological reasons. It's as if they are digging sand with their right hand, but their left hand is actively sabotaging the process.
System libraries are more than happy to use some parts of pointer authentication, such as return address signing.
Tipping is a horrendous cultural artifact stemming from bribery and aristocrats creating a servile class

As Scott said, "tipping, and the aristocratic idea it exemplifies, is what we left Europe to escape. It is a cancer in the breast of democracy"

At the start of the 20th century when Tipping was infecting the USA, it was common for business owners not only to fail to pay a salary, but to actually charge people to work for them!

Gunton's Magazine stated that tipping was offensively un-American, because it was contrary to the spirit of American life of working for wages rather than fawning for favors. Caiman's defence from that era boiled down to "you should be able to bribe your way to preferential treatment".

It's ironic that the "home of capitalism" is so much in favour of hiding information. Rather than a posted price for a given good or service, it's a price, plus an unspecified amount of tax, plus a tip of some sort which can vary from 0% to 30%.

Tips of course also allow us to bypass all those pesky problems that we try to eliminate. If you're a racist? Great, you don't have to pay black people, only white people (or vice versa). Don't like that waitress having a Trump2024 bumper sticker, don't pay her wage.
The one where a dying serial killer uses a voodoo ritual to turn into a doll and stab people?
Yeah I am very confused on this. Is the idea to develop customer empathy or deliverer empathy? Wouldnt I get customer empathy by you know actually being a customer? What if I am not a customer? Does that mean I cannot get a job here? If this is the right thing to do how should this extend to other companies? Say CIA? Grindr/Tinder? On a more general note what suggests I cannot have customer empathy or give my best just because I don't prefer doing this?
Not taking into equity for the purpose of discussion, but don't most SWEs top out at some level of "Senior SWE" title?
As I remember, they just gave me a piece of paper with a QR code, I scanned it with my phone and here I have an esim. Are you saying eSim is now locked to my phone and if I scan the same paper with another phone it won't work?
> why would an energetic young developer ever choose to work on Apple Music over Spotify? I say this as an Apple Music subscriber but one is a company that is existentially all in and the other that sees a revenue stream

I imagine some people had similar thoughts when considering Netscape Navigator vs Internet Explorer.

> If you’re not in the AR/car divisions then what is the point.

Some people are more interested in a stable paycheck and will take a bullshit job to enable it.
I lasted about 2 years in the PNW before I decided to go back to the midwest. It's worked out really well. A side benefit, Cincinnati is within driving distance of a lot of furry conventions. (Before the pandemic...)

The midwest is a lot more laid back than other places I've been. People are friendly here. I've had a few nice conversations with random strangers, just because we were standing in the same line. If you don't want to talk to people in line, that's fine too. You're not forced to interact with anyone, but there are a lot of opportunities if you want to.
Back in 2008 or so I remember rumors of Google giving million dollar stock awards to keep engineers from leaving, particularly female or other under-represented classes. These Apple award numbers sound downright stingy for a trillion dollar tech company.
Also discussed 4 days ago at https://news.ycombinator.com/item?id=29675076 and https://news.ycombinator.com/item?id=29667072
If you Google for the error message you'll find that this behavior has been there for several years. I guess they just don't care about the usability in his part of the process. I tried deleting an account with dev tools installed and the web server gave HTTP error 500 (internal server error). I think the JavaScript just bails out at that point.

From 2019: https://www.reddit.com/r/Lastpass/comments/afmfop/cant_delet...

From 2020: https://twitter.com/jowouters/status/1222438393981886464

There's a ton of those posts. Some in the official LastPass forum as well, and the response from LogMeIn was basically that the account was deleted.

(It's of course crappy, just saying that this behavior is nothing new and probably just something they don't care about enough to fix..)
There are indeed. It's not just spies. My work wrt endpoint secure comms is FOSS and free for anyone to use https://github.com/maqp/tfc (the HW costs a bit naturally but in other respects).
Here's a NY Times article on the current thinking in the art world: https://www.nytimes.com/2021/12/20/arts/design/parthenon-mar... (mirror at https://archive.fo/qcMA7 )

As you can see, the discussion is already well advanced from the starting point you recommend.
On one hand it seems like it would have happened already, but I still have to wonder if the FAANG arms race will have consequences in 5-10 years when all these overpaid engineers call in rich and decide to go work on something more interesting and with less bureaucracy in the way.
Will they also be paid the same shitty salary?
Baffled.

There’s that word again. Journalists are absolutely in love with that word when it comes to science. So popular it’s got its own meme page [1].

[1] http://www.scientistsbaffled.com/
Speaking of employee stock options,

Does anyone have a recommended resource that details what practically happens to my options when a company IPOs?

I know there’s a lot of variables but I imagine there’s some common patterns and things to be aware of.

The entire thing is Greek to me and might become very important soon.
I feel like maybe people watched a little too much Silicon Valley and similar shows and some wires got crossed to make people think this is actually a workable mass market idea. IMHO.
I have not played Axie Infinity, but to the best of my knowledge that is the only use of Smooth Love Potions.
They’re talking about the web.
Apple has product managers?
Apple is the biggest brand in the world and consumers love the company more than any other brand. Meta/Facebook is a peanut when it comes to the consumer hardware space. AR/VR will probably replace the smartphone in 10 years but I don’t think Apple has anything to worry about. Apple will cannibalize the iPhone themselves.
Some examples: receptionists, administrative assistances, quality control officers, compliance officers, and maintainers of bloated legacy software systems.

I disagree that any of these jobs are “bullshit”. I think the most bullshit of all the jobs on that page is that author’s, who wastes society’s time listening to him complain about things he has no experience with.
It’s like trying to register a .com domain - OG ones (short 2-4 letters) are only available in the aftermarket, and only if you have millions. You end up with along-ish name that’s also taken - so end up with domainhq or .io or whatever is popular now.
No One Belonged Here (1974)
It probably is, but it's a Ponzi scheme with a potentially addictive lower layer in the form of a game, which is going to make previous ponzi scheme architects jealous.

Me giving money to Bernie Madoff via wire transfer hoping for gains isn't really addictive. The graphics and gameplay of a game might be. If you happen to build a ponzi scheme into that game, you benefit from its addictive qualities.

Keeping a healthy population of the lower levels of a ponzi scheme is key to keeping it going.
Well, the engineer could also take a job at another company, and just used the increased compensation to buy more Apple stock. Unless they significantly believe that they working in Apple will be a significant factor in Apple stock price increasing 4x, in which case, they should probably ask for more stock.
I work for an public enterprise software company and it's a constant drip of RSUs as performance bonuses, retention, company milestones, anniversary dates, "well we can't give you raise right now but how about some RSUs?", etc.

So after a couple years as the vesting dates hit these start to stack and they end up becoming quite significant.
I wonder if we’ll have politicians and political philosophers in the near future who will credit MMO games for awakening their keen eye on societal issues.

MMO worlds and their economies taught many how the basics of our economy works. As a kid you got exposed to virtual versions of negative aspects of free markets that went against the meritocratic ethos of the game. (Especially if you were one of the kids not permitted to use money to buy virtual currency.)
These comments are unreal to me. The context is right in the beginning of the article. The site was originally deemed too impressive to be built by locals, and later it was too impressive to be built without outside influence, and now that research is showing it was indeed built by locals, it’s no longer impressive. Incredible.
Room 101: Reified Generics: The Search for the Cure
I use keepassxc.org in Dropbox

It's encrypted on my computer by Open Source software that I can trust. I used to use LastPass, but it was clearly a sinking ship ever since it was bought by LogMeIn.
is out of the scope of immudb to prevent rollbacks if someone gain access to the filesystem. But even if that happen, immudb sdks will detect such situation when requesting a proof
And, inexplicably, people find pleasure (or are merely addicted to) in digital coins in a game too.
I do the same and encrypt the file with a simple encryption tool.
The part about working on side projects in the winter resonates with me. I've lived in Indiana my entire life and am considering moving to Texas to escape the cold, gray winters. Part of me is worried that I'll be less productive in the winter because of that, but I think it will be worth the tradeoff.
Indeed:

>Several individuals have suggested that the dodecahedra are knitting aids, specifically for knitting gloves, with different sized holes intended for the different sizes of fingers, and the pegs serving as a lattice to hold the yarn.

https://en.wikipedia.org/wiki/Roman_dodecahedron

But of course just because someone has managed to make a glove using one, does not really prove that it was their primary purpose.
I think for a security application you want to reduce your exposure as much as possible, and one way to do so is reducing the amount of dependencies in your application. I think a high dependency count is orthonogal to that.
Recent and related:

Tardigrades Walk - https://news.ycombinator.com/item?id=28380188 - Sept 2021 (29 comments)

Entanglement between superconducting qubits and a tardigrade - https://news.ycombinator.com/item?id=29580686 - Dec 2021 (111 comments)
Seems like a pretty good metric of complexity to me, particularly when it comes to a security audit. Having a lot of packages packaged up in the extension corresponds to having a lot of source code you have to vet, lest it be an avenue of attack.
It is noteworthy that Congstar is a brand of Telekom Deutschland GmbH.
Or just some malware like the latest keyloggers bundled with NPM packages? Wasn't it just a couple of weeks since that happened previous time?
Not that your approach doesn't have advantages, but at that point I would just keep them in a paper notebook hidden in my desk.
That’s almost precisely my point. If I wanted to atrophy on a subpar product I’d choose Apple Music too. But I admit I say this not knowing the general compensation of either product.
I agree they are not representative of the community, but they are a quite vocal minority, to whom anyone working on OSM in a corporate context is well-acquainted.

I offer my observations as a warning to take any anti-corporate sentiment from self-proclaimed OSM community representatives with a grain of salt.
It's negative because something's up and they haven't given a good explanation.

> They stopped all usage of correct passwords they believed were compromised

Immediate question: how the heck would they know which passwords are compromised, if it wasn't a compromise on their end? From the information provided, the only thing they have is the IP & geolocation data, which isn't going to be reliable when the attacker(s) are using VPNs. For everyone whose account was protected by blocking access from odd region, how many are there whose accounts were quietly accessed and no email was shot off to warn the owner?

They are claiming that the master password was used on some other (compromised) service, but they provide zero evidence for this. And if they don't know your passwords, how on earth do they know that you've reused them on a compromised service? Can they name that service? Has anyone yet found a service every affected user has in common? I haven't seen that.

> "However, users receiving these warnings have stated that their passwords are unique to LastPass and not used elsewhere." That's really hard to verify.

That is true, but there are so many reports now that it's really hard for me to believe they were all dumb enough to reuse their master passwords elsewhere and are also bullshitting us on HN.

> I haven't seen any indication at this point that LastPass has been compromised at all.

Neither have I, but I still believe it to be a plausible explanation. I don't think we have a "smoking gun" or a site/service/extension that is common to everyone who reported this thing happening to them.
I have half siblings like this, who tried to take the family house from me after my father (their stepfather) died. That is, they tried to take my share of it; the will split everything equally. We split the family things up into thirds and they were caught trying to steal from my share. Crazy making it was. So much gas lighting. We are now estranged. TBH even seeing their picture upsets me.
It's not a dupe.
Bash normally doesn't do that, but there are a lot of options available for both Bash and ZSH, which can do much more than just "case insensitive matching".
Agree switching devices is still a pain point with eSIM, but solvable by the telecoms and a push by Apple to eSIM only devices will speed this improvement.
Show HN: Fast (Once Loaded) Prescription Drug Label Search [~45MB Download]
I'm a lazy bastard.
> But actually, I personally believe that the actual reason Apple killed 32bit support was because they didn't want to build it into Rosetta.

Rosetta 2 contains functionality to correctly emulate 32-bit Intel code.