skysight-inc/HackerNews huggingface dataset:
We had a major "pay equity" initiative a few years ago. Pay bands narrowed and managers lost most of their ability to compensate employees at the same level differently. The upshot was that you really couldn't reward good performance except with promotion.

But promotion isn't about good performance per se. It's about next-level scope and responsibility, influencing larger groups of people, owning bigger pieces of the pie. To the extent that promo committees held the line on this, strong in-the-trenches engineers faced stagnant comp and eventually took outside offers. But managers are wily and committees couldn't hold the line completely, so there was also a lot of title inflation.

Worst of all was the effect on culture. Because the only way to get paid more was to get promoted, and the only legitimate way to get promoted is to drive grand initiatives.... everybody started manufacturing grand initiatives. Why get something done in a week on your own, when you could chair a weekly cross-functional sync with a dozen stakeholders for 12 months? Why do housekeeping on your platform when you could lead a deprecation, rewrite, and migration for 100 dependent teams?

Now maybe you would expect managers to put a stop to this kind of gaming. But managers want their stars to get ahead! If only for the selfish reason of not having to replace them. It's also good for the manager's own promotion path to have successful proteges. So managers play along and even coach their reports on how to turn the team's needs into "senior engineer" or "staff engineer" projects that will smell right to a promo committee. When all they really wanted to do was give the guy a raise.

All this in the name of pay equity. I'm glad the pendulum swung back.
Which really is a testament to its instruction set and architecture, I'd bet. I doubt much if any special effort has gone into keeping it there, it's probably mostly just that it hasn't gotten in the way, so no reason to remove it.
Auto correct was not kind to this post RE: “r/pearl”, “r/fourth”
I love Prometheus because the (OpenMetrics) data protocol is so darn simple and easy to grok. You can do things like take an arbitrary data source, pipe it through awk and curl, and get it into prometheus metrics via remotewrite. You can also easily write your own /metrics endpoint in your favorite language.

VictoriaMetrics sweetens the deal by offering a solution to long-term storage and more flexible service architecture without leaving the simple and highly interopable Prometheus ecosystem.
In return, Humpback Whales have been reported to attack Orcas in retaliation: https://www.nationalgeographic.com/animals/article/humpback-...
Just as I learned the basics of setting up and dealing with Linux severs, we're in the cloud where they're basically irrelevant.
Thanks! I'll take a look. I think this is prime area for a biz. Not just sw devs but projs in general. I'm procrastinating on my son's very elaborate busy board (I have EE background :) ) and countless other projs. One doesn't neccessrily need to expose every aspect of the proj but maybe share at a high level what they are making and where they are at could be publically tracked. Everyone has a bit of showman in them and nothing wrong with that. Outside of self esteem, it could very well not only motivate others but give others ideas.

Humm....

[EDIT] Sadly one of the biggest company in the world was made just by that kind of motivation; FB. Watching Social Network when he hacked the original face book. He was coding while friends came and motivated him to do more. I sincerely think if he didn't have that circle of friends, it never would have happened. Me thinks.
Pa. fuel tax meant for bridge repair went to state police instead (2019)
> where facts so often succumb to Narrative

These kinds of confident assertions about "facts" and "narrative" are also a kind of narrative of their own; they are designed to fit into and reinforce a broad narrative about the world any social outrage is usually just the result of poor research or snap-takes rather than actual differences in ideologies or opinions, and that people's default reaction to them should be to assume everyone is just overreacting because they always do. So let's step away from that narrative as well, and instead look at something that's a bit more tangible.

For anyone who's curious about the actual reasoning, the minutes of the meeting are online (https://core-docs.s3.amazonaws.com/documents/asset/uploaded_...). So you don't need to take a secondhand opinion, you can read the parents' reasoning for yourself. That's a good factual place to start.

And from the minutes, it is very hard to conclude that the objection to Maus was that Maus isn't a textbook. The overwhelming objection was concern over several swear words and a naked image, all of them censored in the books that were to be used for the curriculum, and an objection to minor depictions of nakedness (of cartoon rats being literally marched into camps), and an objection that bringing up disturbing topics like hangings, child deaths, or the existence of swearing/sex to 8th graders was inappropriate in a conversation about the holocaust. Criticism of the board's decision isn't based on a misunderstanding of the facts or people jumping to conclusions without reading the minutes, but rather an assertion that teaching kids about the holocaust necessarily requires mentioning the parts of it that were disturbing.

In fact, far from the removal of Maus from the curriculum being about whether or not Maus is a textbook, the minutes contain criticism from a parent of other school textbooks that contain swearwords. Which should make it really clear that the issue wasn't that Maus isn't a formal text. I do not know how to read the full minutes in a way that supports the parent comment's argument. It confidently misrepresents the entire conflict with no evidence, even as it claims that everyone else is doing the same.
Apple updates its software to lockout jailbreaks. You're welcome to not update.
Quoth http://www.cs.yale.edu/homes/perlis-alan/quotes.html - no. 19
For an amazing movie (not documentary) about the Stasi, watch "The Lives of Others". It is chilling because you see this institution and how it effects people through the eyes of one of the people responsible for doing the spying.

https://en.wikipedia.org/wiki/The_Lives_of_Others
Well FB is the new Phillip Morris so it's relative
A binary that doesn't fit in cache isn't too small to matter.
JRE is not behind a paywall. You have to create an account, but once you do it's free.
Wow, thanks for that link. That's incredible:

> JBIG2 doesn't have scripting capabilities, but when combined with a vulnerability, it does have the ability to emulate circuits of arbitrary logic gates operating on arbitrary memory. So why not just use that to build your own computer architecture and script that!? That's exactly what this exploit does. Using over 70,000 segment commands defining logical bit operations, they define a small computer architecture with features such as registers and a full 64-bit adder and comparator which they use to search memory and perform arithmetic operations. It's not as fast as Javascript, but it's fundamentally computationally equivalent.
Just checked one of ours R620, dual E5-2690 v2 @ 3.00GHz, 256Gb RAM.

20% load (9 VMs with 11GHz usage), 196W.

Historical trends for Last Week:

Avg: 203 W | 693 BTU/hr

Max: 279 W | 952 BTU/hr

Min: 150 W | 512 BTU/hr

Historical Peaks:

465 W

Cumulative Reading:

Since Mon Jul 13 11:32:33 2020 2723.893 kWh
GCP are semi-compatible (eg. restricted IAM keys numbers), Azure AFAIK are not s3-compatible (you need proxy eg. s3proxy / minio).
Personally, Spaces is one of the nicest chat-organization tools I've found in an app so far. I can finally group things how I like, have duplicates, and share groupings with other people. The fancier stuff with Spaces isn't super trivial, but the basics work by just tapping obvious buttons on screen.

Sub-folders would be even better for large-volume stuff like throwing multiple Discords worth of things into a Space, but I don't currently need that.

---

E2EE I have routine fights with, so yeah - Element is not great yet. But it's good enough that my siblings and I are seriously considering converting us + my non-technical parents over, now that Hangouts is horrible and we all hate how flaky it is. And it's a much, much better experience than Signal. The only other contender at the moment for that migration is Telegram (which is absolutely stellar, they're doing an amazing job).
Post "My MetaMask is locked and I need help with my essay, coinbase trustwallet help." Or something similar and watch the bot replies flood in.
Why can't I use s3proxy instead?
Yup! Long day. And I just wrote a more substantive comment about reflection...
So what are those problematic GDPR requirements?

- ask for permission

- do not collect more than you have

- store securely

- allow users to change or remove their data

- have a dedicated officer if you collect a lot

Is that really THAT hard? (If yes, then really you shouldn't be collecting any data.)
I'm too busy to tend to the care and feeding of a database server. I'll gladly pay amazon to do it for me.
Of course a company trying to sell you services to help compliance is going to say that this business is "high risk".
I always come back to this detail :

> For example, in April and May alone, more than 30 thousand unique wallets bought NFTs from popular marketplaces such as nonfungible.com on any given day this month! This is down slightly from the 39,000 buyers throughout March.

I've heard on a podcast that there are only 400 000 wallets owning NFTs. It's a minuscule market, and it's not getting invariably hotter. It's very possible we're hearing so much about them now because the market is already contracting.

And this terrible detail coming from a scourge of the Earth website all in on NFTs and other scams: https://earthweb.com/nft-statistics/
I didn't intend to imply they're Facebook employees or was even talking about facebook specifically at all. Just the idea of calling this stuff "fact checking".

> Still, they get it really quite wrong occasionally:

Don't worry that'll never happen with super-duper science-based expert fact checkers.
It wasn't 2 full years, but... certainly, multiple stints of 8 hour sets for weeks on end - it's basically a full time job.

Other 'factors of the time'. They wanted to play rock and roll. There just wasn't THAT MUCH of it. In 1961... there were a few years of the genre, several albums by their heroes, but... it's not enough to play and attract people in bars for weeks on end. There were other factors too, but that constraint was one, that helped push them to expand a bit beyond just 'rock' stuff (some earlier standards, etc) to help differentiate themselves from other bands (and eventually self-composing as well).

By coming back from... IIRC, their second or third Hamburg stint, they had somewhere around 800 hours of playing together as a band. That just wasn't a thing (yet). I mean - not even most of their heroes/idols didn't have that much stage time as a single unit. The "self-contained rock band" really wasn't a "thing" yet.

I've been in bands, and we were never even in a position where we'd be able to play 6-7 hrs a night for weeks on end. I'm sure no one would have wanted to anyway (like you say).
Please don't post supercilious putdowns of other people. It's reliably the marker of a bad comment (by which I mean one that leads to worse HN threads).

https://news.ycombinator.com/newsguidelines.html
I don't know much about attestation, but the repro builds folks have an approach for dealing with signatures; you build once, then copy the signature into the source, so that as long as the unsigned build result is bit-identical, the signatures still match and anyone can reproduce the signed build result.

https://reproducible-builds.org/docs/embedded-signatures/
"It was so trivial to terminate and restart dozens of servers at any given time since unless there was a mistake in the cloud-init, we could bootstrap our entire infrastructure from scratch within an hour."

Got any tips in this regard?

Ansible, Puppet, Python, Terraform, Openstack Pulumi springs to my mind. Still need to cover a PXE server. (Maybe with Ansible)
Damn, yeah, biggest is 1000 now I think, and even that is worth only around 4 USD (unofficial rate). That'll buy you milk, bread and butter or ~4 beers.
I personally think it is the other way around. If people didn't blindly take any story someone they have never met before says as truth, because of "faith" in humanity or whatever, then there would be far less reason for people to be untruthful all the time.

This is a general comment that is in no way related to this particular case, of course.
I've walked away from tasks for a second and completely forgotten about them. I don't absorb training and can't hold a job. I've made it through about two books in my adult life. All of my programming projects end somewhere between the initial idea and the first problem I have real trouble with.

What does any of that have to do with society bothering or accepting me?
I actually write apps that could benefit from this.

It’s interesting to me.
indeed, adding IAM is massive scope creep. I'd estimate anyone who understood that comment and didn't know it already saved about $100k in consulting fees and hundreds of hours of souding out why someones project is failing. These are the underlying issues.
I don’t think the logic is this simple. Tools and technology might not be inherently bad, but they may still be dangerous. Proponents of some dangerous technology often want said technology to become public policy, which increases the risk significantly for everybody. Think guns, nuclear weapons, lottery, and even the stock market. These all have varying levels of risk and utility. When the risk outweighs the utility perhaps there should be a public policy which warns against their use, outright bans them when the risk is severe and the utility minuscule. Especially so if the industry is growing bigger and bigger.

Here there is no public policy, and there is unlikely to be any for most countries in the near future. This is why OP voices their concerns that we should step in and advocate for people’s safety. Not because the technology it self is inherently evil, but because it is dangerous and—as the linked video argues—had little utility outside of harmful activity.

Ps. There are indeed some of us that do think the stock market is a scam and the world would be better of without one. In the mean time at least it is highly regulated and financially literate folks do talk loudly about fishy stuff that happens there.
But my portfolio!
Even journalctl is only 90kb, and the entire combined systemd package is 4mb (but that's including all the documentation and a dozen other different binaries)
Ugh spell check corrected Brisket to Biscuit. Not quite the same thing.
> The CIA also, independently of the NSA, has an organization that develops these sorts of attacks that make the NSO group also look like a bunch of kindergarteners as evidenced by the Vault 7 leaks

Anyone even vaguely familiar with the Vault 7 leaks knows that they made the CIA look like a bunch of kindergarteners.

There’s no doubt about the NSAs capabilities, but the Vault 7 crowd was clearly playing in the same league as most NSO group customers.
TIL what that actually means (the wiki bit below). Its also the name of a hearing aid company in Ireland [0], making it even more ironic. Pretty sure this is where the name originated from.

Found out that (according to wikipedia)[1]:

"is an alteration of bonavox, a Latin word which translates to "good voice"."

[0] - https://www.bonavox.ie/
[1] - https://en.wikipedia.org/wiki/Bono
Decentralization isn’t important, until it suddenly is
I want to use AWS without credit card, because I don't want to make a mistake ending up with 80K in debt. I will never forget that particular HN post.
More compact code fits in caches better.
If my phone crashes while trying to call 911

And iPads?
Tyler is an absolutely fantastic instructor and mentor! Glad to see his work show up on the front page!
You only need to spend time teaching a few semesters to have this belief completely turned upside down.

I know, because it happened to me.
We need a right to repair for software too.
> Problems from the early 2000s that don't exist in the same capacity anymore.

Nonsense. I've cleaned malware off of employee laptops within the last 2 years. And off family members' computers within the last 3 months.
On call incidents shouldn't be routine. A rotation spreads responsibility across the team. Ultimately, someone has to be responsible for incidents and it aligns incentives best for it to be the engineers who maintain the code.
Sometimes I wish we could just burn it all down and start over.
So, if we say it draws around 350W, that makes it around $32 /mo power (rough calculation based on a 12.5cent (US) kWh rate, right? Not bad for all that beef.
You both are talking from the unsaid point of view that an immutable public ledger is a good thing. The reality of our world disagrees with your unsaid compact.

Nothing needs an immutable public ledger. Any fraud due to shipping, or banking, or taxes, is a problem of inaccurate entry of data into a ledger, not nefarious changes to what already exists.
Costco accepts returns without receipts. I assume their system can look up all items purchased with your Costco membership.
"So the real question to ask is: what ideas and vision gave Rome that coordinated energy in the first place,"

Taxes.

I would conjecture pre-Roman when groups would sack a town they would kill all males and enslave the rest. Taxes changed the game. This created a concept of managing states. Instead of killing everyone in a village - you wanted them to work hard and pay taxes. This also had an unforeseen side affect: if you were a good tax payer you were protected. People wanted to be a Roman citizen. The Romans would destroy anyone taking their tax money. You could safely produce a crop or raise cattle. Other cultures pre-Roman had taxes but were always caught up in ethnic cleansing - thus destroying their tax base. Romans could care less: Spaniard, Syrian, Egyptian, didn't matter: just pay taxes.

If you inflate currencies to the point taxes mean nothing: doom.
I even got emails from Apple (iTunes store receipts) and similar high profile senders going to spam, while some super obvious spam emails get through.
Found it: https://www.getguesstimate.com/
There are plenty of us who have been around since the late 90's and early 2000's for whom this is all old hat, and it's all the newfangled stuff that's hard. Why should I use a *aaS for one part of my stack when I can just yum install it?
Yup, upx is just a loading stub that decompresses the whole thing then gets out the way.

If anything it'll use more memory from the remains of the decompression stub and not being able to be clever about only reading from the backing file needed memory pages.
> Do not give long-lived credentials to your users.

That was poorly worded in the article. Among the things it is is saying you should give to your users is a WebAuthn token. Inside the WebAuthn token is a random private key it never reveals. That is the thing the authentication "you are you" ultimately relies on, and it is very much a "long lived credential".

What he is trying to say is more complex. It's something along the lines of "you go to some authentication / authorisation service, prove you're you and say you want access to a service, and it hands you back some short term credentials you can provide to that service allowing you to use it". You, the authentication provider, and the service you trying to access might be in different countries. The danger in that scenario is someone might steal those credentials while they are in transit. One way to mitigate that is to ensure those credentials don't last for very long.

So, it's a statement about how distributed systems should handle passing credentials among themselves. The user never sees these credentials, and of course never has to remember them. Any temporary credential lasting longer than a persons sleep/wake cycle it considered broken in this world, but it's understood the user will carry with them a relatively long lived way of proving they are who they say they are.
Can I ask what the monthly hosting costs are?
Was an exchange student at a High School in Michigan (I’m German):
Hacked the local school network to access the cafeteria system and changed my friend’s photo to Tux (Linux mascot). Would also have been able to change the credit of each student - but mentioned to the sys-admins which then challenged me to brute force their Admin password. I successfully did that and they offered me an internship. I learned a lot over the half year that I worked with them, switched from Windows to Debian (on a Mac! I wasn’t allowed to be paid, but they gifted me an iBook before I left).

While I was there I also setup a cgi (web) proxy on a host in Germany, called it “cproxy” and shared it with friends in the high school. At the end of my year, I think half the school was using it to circumvent the schools accept/reject list for web browsing. I kept it running and two years later my parents received a call from the FBI, that they wanted to have a word with me (I was back in Germany at that point). Supposedly someone used it for fraud on eBay. I remember how I had to tell my teacher in (German) school that I had to keep my cellphone with me because the FBI was about to call :-)
Fun times! Really glad that the school in Michigan was so supportive and helped me keep my hacker spirit!
Someone had to pay for all the civil wars. That isn’t cheap. One of main things Augustus was able to do was to stand down a huge amount of soldiers. This included back pay and settling veterans in various new colonies. Egypt was a very rich area in ancient times.
> I don't know of anyone who actually works/worked that hard and 'failed'

Are you seriously handwaving
away survivorship bias?
One of the main differences I see on the road to learning to code has nothing to do with the tools; it’s the thought process.

A major hurdle is trying to get the business people to coherently express what they want. They seem to have a general sense of how something should go, but can’t actually put it down on paper. Or when they do, it looks different than what they imagined (simply because the required logic doesn’t match the cloudy vision they have in their mind), and then scrap it because it doesn’t “feel” right. They fail to think about the corner cases because “that doesn’t happen very often”, ignoring the fact that a program needs to work in all cases, no matter how often they happen. Or they don’t get the concept that processing 10 or 10,000 records makes no difference (i.e. it’s not “more work”) because they don’t really follow the idea that they’re setting the rules for the computer to do the work, not doing it themselves.

Understanding math is so important because it’s often the first formal step in learning how to think this way. I think it’s a pretty good bet that business people who do well in math would probably do well in some level of programming, but everyone else probably just can’t, or at least are unwilling to go through the mental training required to think this way.
Seems like Microsoft have infiltrated Hacker News with the recent number of submissions trending on here.

Is this the Economists way of stealth advertising Github's CoPilot?
You have an interesting handle.. Any association to the neighborhood of Zamalek?
https://www.theregister.com/2001/04/12/missing_novell_server...
The ptrace APIs also can’t write to read only memory, at least not on modern Linux running on CPUs with modern MMUs. But SMC doesn’t require that, because you can always map (or remap) executable pages as writable.

Executable code is only read-only by default, you can always change that (or just not do it, in the case of a JIT).
And FB hasn’t done anything to fix yesterday’s have they?