skysight-inc/HackerNews huggingface dataset:
This article is nice and it shows clearly what kind of problems servers for TCP-based infrastructure on the internet have to face.

The issue I have with it: It's showing how the problem can be solved for systems that you are in control of, but not for systems (clients) that you aren't in control of.

The reason why servers on the web are so easily DDoS-able is because of long-lived connection defaults among most higher-level protocol implementations...and because ISPs all over the globe intentionally throttle initial connections by up to 30-60 seconds for the initial SYN/SYN-ACK when their "flatrates" run out on mobile networks.

Server administrators then face the decision to either drop the mobile world completely or be faced with a situation where a couple malicious actors can take down their infrastructure with simple methods like even a slowloris or a SYN flood attack.

This is also not discussing the problem that ISPs allow (relayed) amplification attacks because they don't think it's their responsibility to track where traffic comes from and where traffic is supposed to go; whereas I would disagree on that.

If I would have influence like cloudflare in the IETF/IANA/Internet Society, I'd try to push initiatives like this:

- Disallow ISPs from spreading network traffic that they can easily detect as amplification attacks. If UDP origin in the request packet != UDP target in the response packet, simply drop it.

- Force ISPs to block SYN floods. This isn't hard to do on their end, but it gets harder to do inside your own little infrastructure. If an ASN doesn't block SYN floods regularly, punish them with blocked traffic.

- Force lower network protocol timeouts. If a socket's network timeout is 60 seconds, it's total overkill for this small planet and only serves to allow this shitty behaviour of ISPs and nothing more. Even in the world of 56k modems, this doesn't serve a purpose anymore.

- (like Google) Try to push UDP-based networking stacks that (with above exception) try to solve this connection timeout problem by allowing to dynamically multiplex / multi-pipeline traffic through the framing protocol of the same UDP socket.
How it started - https://i.imgur.com/7Cyia1U.jpeg

How it is going - https://archive.fo/pdYHy#selection-525.105-525.423
OpenZFS.org have pretty good guide on varies distributions.

https://openzfs.github.io/openzfs-docs/Getting%20Started/ind...

It is as easy as "Copy and Paste", but not "point and click" easy
Beijing Winter Olympics 2022 opening ceremony
Where did all the natives between New England and California go?
>To be fair a couple of mainstream distros are far easier to get than Windows or Mac

Until you try to plug in a WiFi Dongle, printer, SD Card reader or pretty much any other piece of hardware that isn't a keyboard or mouse.
Fair, an absolutist statement like that is pretty silly and obviously false. And whether any particular change makes a game better or worse is inherently subjective; "objectively nothing" is false by definition.
Is the USAs debt really “crippling”? It’s enormous and looks dangerous on a graph, but if the country wanted to, it could pay it off in a couple of hard years considering it’s “only” around 100% of its GDP. Hardly crippling in any real economic sense when you zoom out to the nationwide macro level.

Are millennials less productive than previous generations? In my country, we sure aren’t. We’re building more things and we’re building them faster, more efficient and with higher profits than ever before. Not just “creator” businesses, in my city alone we have torn down and build new buildings at such a pace that the previous two years of covid alone have seen more “work building houses” jobs (sorry my English isn’t up to task, construction jobs?” than we did in the entirety of the 80-90’s combined… take that gen X! (Or something).

A lot of millennials went and got themselves a higher education in my country. Probably even more so than in the USA because in Denmark you can get any university degree you qualify for while being paid to study, since we handle that stuff collectively and through taxes to give everyone equal opportunity. Has the fact that we too scorned craftsmanship professions throughout the 90ies and 00s has a negative impact? Sure. Are millennials who went to university migrating to become plumbers; electricians and so on? Absolutely.

The real difference between my millennial generation and my parents generation is what we are paid for our efforts. I work a high paying job, I work a second job as an external examiner for CS students which twice-four times a year pays me an extra months worth of my primary job as salary. Yet to see the same wealth increase my parents saw from simply owning a house, I’ll need to do some hardcore investment and saving, or hope that real estate continues rising (which it won’t).

My parents saw their house increase from 200k to 4 million Danish KR. I do own my own apartment, and it is in an area that’s fairly sure to increase in value, but to see the same increase, it would need to go from 3 million to around 50 million. Adjusting for inflation, a realistic estimate will be that I can sell it for maybe 6 million if I’m lucky.

So despite being more productive, more efficient and more financially great for the over all economy, I will benefit less than my parents did. Not only that, but they got to retire at 60, I currently get to do so at 73 unless I pay for all of the pre-73 years myself.

Should you loathe your own generation like the author does? Fuck no. Try to understand them instead and you may just realise why people are fed up with wages that haven’t increased without getting eaten by inflation for 30 some years.

I’m lucky enough that I can chose and pick where I work, I can’t image how not being able to do so as a millennial or below must frustrate.
Yeah a lot of pure mathematics education very much emphasizes the learning the "spirit" or fundamental concepts of certain things rather than computation, sometimes to the extreme when compared even with applied mathematics. This is especially obvious in anything that even approached calculus.

In the math courses I took in college, if we e.g. ever had a differential equation we needed to solve on a problem set "looked up the answer on Wolfram Alpha" was a perfectly reasonable response. Same for differentiation or integration. In some intro courses you'd be ask to prove that certain differentiation or integration techniques had mathematically rigorous backing, but never had to do the rote work of actually memorizing and using those techniques ever again. Again "looked up the answer on Wolfram Alpha" was a perfectly reasonable response. It was a far cry from the applied mathematics department.

Another huge discrepancy was in linear algebra, where very little time was spent on matrix computation other than again proving that matrix operations and invariants preserved properties of linear maps and vector spaces and almost all the time of the course was spent on the linear maps and vector spaces themselves, whereas linear algebra in the applied math department was almost entirely about matrices and the intricacies of various matrix computations and decompositions and subjects like dual spaces or other things that couldn't be represented with normal matrix computation (e.g. infinite dimensional vector spaces) were omitted.
I joined Amazon after being laid off towards the beginning of the pandemic when many companies had hiring freezes in place and having happened to be contacted by a recruiter during the same day. I also left for mostly the same reasons everyone else does.
I am a paying customer and I'm never in the lucky test bucket!!! Many companies are smarter than Twitter and enable experimental features for paying customers via toggles. Why is Twitter valuing bots better than paying customers?!
The thing is that when the product/service is a mass market thing, most users are confused by choice that goes too deep.

Most folks are happy with some amount of choice, that focuses on functionality, rather than looks.

When my brother watches NF, he doesn't bother about colors or where comes what. He idly browses through the list (if he has no pre-idea what to watch) and chooses it. The interface is not efficient for me, I'd rather it have complex search and filters readily available for use, but it is efficient for him because he doesn't have to use complex search to find shows. He is happy with what is recommended or just browse.
ChainSecurity | Blockchain Security Engineer | Full-time | INTERNS , REMOTE, Zurich, Switzerland | VISA possible | https://chainsecurity.com/

ChainSecurity is a young and innovative cybersecurity company that operates in the blockchain and cryptocurrency space. Our mission is to make the blockchain space secure and trustworthy for people, companies, and governments alike. We are proud of our security experts from the renowned universities ETH Zurich, EPFL Lausanne and others. We are trusted by 100+ blockchain companies and established corporations with security audits and services. We have secured complex systems for top blockchain clients, such as decentralized finance (DeFi) projects, and multinational organizations, such as banks and industrial consortia.

A ChainSecurity Auditor will review the most complex blockchain projects to find vulnerabilities which no-one else can. By using state of the art tools, expert knowledge and a deep understanding of the fundamentals, we secure projects handling billions, often forming the foundation in the new paradigm of an open financial system. We are looking for engineers who are extremely curious, think critically, and have the drive to learn and discover. We welcome experienced hires, but also fresh or soon-to-be graduates with high potential and an interest in blockchain and cybersecurity.

Your Responsibilities:

* Work directly with the developers of the most successful teams in the blockchain industry to audit their code and secure their products

* Contribute to our security tools and create new ones in collaboration with our internal research team

* Conduct security research and publish your findings

Requirements:

* Strong background in software engineering, focused on security relevant areas and most importantly being able to reason about complex code

* Experience with penetration testing, vulnerability scanning, threat modeling or similar is a plus

* Basic knowledge of cryptography

* Proficiency with Linux and Git

* Good written communication skills

* Fluent in OOP programming language

Bonus Points
- Formal Verification, White Box, Vulnerability Scanning / Blockchain Knowledge / Consensus Algorithms

Join us here: https://www.jobup.ch/en/jobs/detail/1983609

Questions about the role? Contact: jobs@chainsecurity.com
It is not a good framework for analysis. It can be a tool, but using such an inductive lens can lead to you seeing power structures everywhere where none exist.

Marcuse was a victim of fascism and sadly his wounds remained and influenced his texts.
Software is a different bubble
I logged in simply to comment a huge "thumbs-up" to any Brian Cantrill reference. I've got an entire playlist of all his various talks around the interwebs, just to listen (and re-listen) in the background while coding. It checks off all the education, tech, history and, critically, humor boxes.
Minecraft library is making censored journalism accessible (2020)
You can influence things happening now, not those that already happened.
It’s not a useful metric. Starting a new project with lots of generated code will have thousands of lines of code & it won’t do anything useful.
I still disagree because my experience with the way schools operate is that “removed from the curriculum” and “banned” amount to the same thing in practice. It’s a distinction without a difference.
While that’s what they’d teach you in CS it’s missing enough nuance to be incorrect.

> There is a limit to optimization, and that ends with optimized machine code.

While that’s true, you overlook the cost of language abstractions. I’m don’t mean runtime decisions like any use of byte code but rather the language design decisions like support for garbage collection, macros, use of generics and/or reflection, green threads vs POSIX threads and even basic features like bounds checking, how strings are modelled and arrays vs slices.

These will all directly impact just how far you can optimise the machine code because they are abstractions that have a direct impact to the machine code that is generated.

> Go being a compiled language, that is cross paltform but separate binaries, should be very close to C in terms of performance.

No it shouldn’t. C doesn’t have GC, bounds checking, green threads, strings, slices, nor any of the other nice things that makes life a little easier as a modern developer (I say this not as a criticism of C, I do like that language a lot but it suits a different domain to Go).

> Languages like Python, Java, C#, are run on virtual machines, meaning you can optimize them only so far.

Aside from CPythons runtime, their instructions still compiles to machine code.

These days no popular language, not even scripting ones, interprets byte code upon execution. [edit: I posted that before drinking coffee and now realise it was a gross exaggeration and ultimately untrue.]

You’ll find a lot of these languages compile their instructions to machine code. Some might use an intermediate virtual machine with byte code but in a lot of cases that’s just part of the compiler pass. Some might be just in time (JIT) compiled, but in many cases they’re still compiled to machine code.

> As far as cloud costs are concerned, a well developed program should cost least with go.
> Go is best suited for running intensive compute loads in serverless environments.

That’s a hugely generalised statement and the reality is that it just depends on your workloads.

Want machine learning? Well then Go isn’t the best language. Have lots of small queries and need to rely on a lower start up time because execution time is always going to be short, we’ll node will often prove superior.

Don’t get me wrong, Go has its place too. But hugely generalised statements seldom work generally in IT.
maybe code in multiple-dimensions? Metaverse!
Powder Toy has a set of elements with electric characteristics, including WireWorld-type wires. Useful when you also want to pour sand on your simulated electronic equipment: https://powdertoy.co.uk/Wiki/W/Elements:Electronics.html
Averages lean upwards due to some people making millions.

Federal taxes aren't the only taxes. State and other taxes are factored in.

Rent may average at $1100 in an ideal world, but near cities, $1100 is increasingly rare. Every time this is mentioned someone will chime in and say "yeah but I live in rural Nebraska and pay less than that." Which is fine. But then your employment options are slim, most jobs aren't paying $40k a month, not everyone is a tech contractor making 200k a year from their bedroom on a lakefront, not everyone wants to be or can be a tech contractor, and a lot of jobs performed by "normal" people (people on HN are generally highly paid and anything but typical) will involve long commute times unless they're living in the middle of town... in which case rent prices shoot up fast.

The average person also needs to pay for health care in the US (even if their company provides insurance, they're fucked when they get sick because insurance covers very little for most people not in very expensive programs). They have car loans. They have college loans. They need to pay deposits just to move. 9-5s are being replaced with 9-6s and people have less free time.

When you factor in all of that, the "average office worker" looks like a dream life to a lot of people. What people considered a boring hell of a life in 1965 is a fantasy unobtainable to an increasing number of "average" people. Comments claiming it's "easy" for "average" people here make me think some people live in a bubble detached from all reality.
> But he had the wrong hair and glasses etc. It feels like one of these things a scammer would think about, assuming the scammers are not incompetent.

If the scam was just a dude hiring someone off the internet to attend his interview, the guy who interviewed may not have cared about what happened after the interview (or after an offer was given), as he already got paid. So he might not have expended the effort to make himself more like the "real" potential employee.
Immigrate to the United States, specifically to the Bay Area. The best companies are built in the Bay Area, because there is a huge amount of talent, and the living standards are very high because of moderate climate, excellent food and produce, multiculturalism, decent infrastructure and excellent connections to the rest of the world. The access to opportunities to work at excellent technology companies at any stage (a twinkle in someone's eye to mature, established market maker) is simply not matched by any other place, period. This is despite horrific public transportation, ridiculous housing costs, sky-high taxation, general intolerance to non-left-leaning political viewpoints, NIMBYism and rampant environmental degradation (Silicon Vally is blanketed with EPA superfund sites). In fact, the Bay Area attracts orders of magnitude more venture capital that's invested in its main metropolitan areas than any other place in the world.

As far as the job market is concerned, I wouldn't worry at all.

A few caveats:

1. Give up any expectation of owing a home (to be precise, a single-family home with a yard) in Silicon Valley proper.

2. If you want to follow the conventional path of marrying and raising children, then marry a someone who can pull the same compensation as you (software developer, doctor, lawyer at white-shoe firm). You can't raise kids on one income here (you can't send them to private school, for instance) unless you are absolutely certain that the public school system will work out for your child.

3. Be prepared to be very lonely if you do not have a friends' circle already established here. It is difficult to make friends and connections and keep up because of the all-consuming nature of work and distances involved (e.g., Palo Alto to San Francisco takes 1 hour minimum, so expect to spend 2 hours simply on driving to and from your friends in the City or down in the Peninsula or South Bay).

4. If you are old (i.e., 35+), then you will have more difficulty getting into good jobs. Ageism is rampant and job interview processes are geared towards young or unattached people who can spend a great deal of time on tech interview prep on an ongoing basis. As changing jobs regularly (2 years is now considered the norm) is the only good way of keeping your comp at market level, expect to be in interview mode for at least half your tenure at every job (assuming your tenure is 2 years).
amazon has Leadership Principles (corporate koolaid) that makes deadlines top-down and non-negotiable, otherwise you are deemed as not meeting a bar
On ETH blockchain a transaction was confirmed, the transaction which moved 93 000ETH from Jumps account into hackers account.

Jump has stated they now still have 93 000ETH since they wish it it is so.
My go-to aphorism in for questions like these is "you learn more from success than from failure".

People like to talk about how great a teacher failure is, and how it teaches you valuable lessons... and it's true! Failure does teach you lots of valuable things, including things that you don't learn by succeeding. However, succeeding at something challenging generally teaches you more.

Or to cast it in ML terms... you need examples of both success and failure in your data set, but the "success" data points are more valuable.
I’ll be honest, I learned an absurd amount. Like more in those six months than in four years if previous work. It was real software development, with actual distributed systems problems. But was also scarring, I have huge trust issues with management now
Having worked on an app that took payments (although I only ever personally did work adjacent to the payments), customers from the Apple App Store seemed to be more likely to have the ability to make payments; they were likely to have a working payment method on file with Apple. We were a low priced subscription though, 30% seems like a lot, but straight credit card, card not present processing isn't much better when you add the fixed fee to the discount rate. It's better if you can get a micropayments rate, but we couldn't. Lower friction often means more payments, so we would certainly not leave platform app stores to get more control of payment (although, the direct downloaded apps might include more payment methods)
And I thought this would be another Python package management horror story.
So what has changed since 2008 when multiple US presidents attended the Chinese olympics? Were the Uyghurs and Tibetans not oppressed 14 years ago?

As I see it the big thing that has changed is that the American establishment has decided that a rising China is a threat to American global dominance and must be stopped at all cost.

This campaign against the Chinese olympics is just one of many efforts to pursue that goal.
This is really true for Elite though, join an active squadron and the universe get a _lot_ more interesting! But a lot of the stuff is outside the game then.
> the OS thinks you might call listen after bind instead of connect and listen requires the src port/ip to be unique.

They specifically mentioned this, and it was one reason for their custom solution.
I was naive but it wasn’t really negotiable. Don’t meet the deadline by a large margin? Expect to be out of the company relatively soon. I think this particular team was much more hardcore than other parts of the company. Most of the horror stories come from the core amazon services
i've never seen people to include the large swaths of generated code into their LOC. Exactly because it takes away whatever little meaning LOC has and makes it absolutely meaningless.
I have noticed on HN a weird idea that most programmers are insanely rich and can pick and choose any job they like (I even saw one person say "lets be honest, none of us need a job..."), so I guess they're going by the logic that if you work for them you either endorse their worldview or don't care, which as you say I doubt is true for the majority of us
Eh, word on the street NT is expertly engineered. It's all the compatibility layers and crud that gives Windows it's bad name.
You should not be so sure about that. For example see this recent judgement:

https://rewis.io/urteile/urteil/lhm-20-01-2022-3-o-1749320/

HN discussion: https://news.ycombinator.com/item?id=30135264

More importantly Mozilla knows that there are people who do not want them to upload this information yet they continue to do it anyway by default without ever asking for consent. Worse, Mozilla keeps adding new leaks that concerned users will have to watch out for and disable after each update. This is of course by no means a problem unique to Mozilla - the software industry as a whole has not yet learned that no means no - but it is also a Mozilla problem and as long as they want to use privacy to market their software they will rightfully receive the loudest criticism. Thankfully laws are beginning to catch up with the digital age and people will have better recourse than asking software vendors nicely to not be mistreated.