skysight-inc/HackerNews huggingface dataset:
> until such a time a server can deliver both HTML and server driven native UI for mobile interchangeably, I prefer the RPC approach.

I really think this is such a key point and is the main blocker to this sort of architecture for cases where you need to support all the platforms.

That said there are a lot of web applications that just need some form of UI and don't need full multi-platform support and LiveView type systems involve many fewer pieces to get going with. I'm thinking more here about company internal tooling for whatever purpose, rather than web services provided to customers which are more likely to need mobile apps.

Also, let's say you've already created your backend in Elixir (e.g. using Phoenix for GraphQL or JSON), and have built your mobile app against it. To implement your web frontend, is it easier and better to roll a whole JS app from scratch or just interface with the APIs that already exist locally to produce a LiveView app? Obviously there are some app characteristics that dictate this, but for a lot of things LiveView is still going to be easier. But then, maybe I'm biased because I dislike frontend programming!
It took a recession to tame every inflation above 5% in history (except one time in 1950).

We are just waiting for election to be over. Fed doesn't wanna "meddle".
There's an entire sea of difference between confirming or refuting a fact of employment that has been put forward during a hiring process, as part of a screen, and sharing everything with anyone who asks, including those shady characters over there who asked every employer to share everything about everyone simultaneously because their business is about building a database and selling access to it.

That being said, if the employers actually benefit (even in a collusive way) from sharing that information in such a manner, I'm not sure how to argue that they shouldn't be able to do that.
instead of giving the working title while there, they lie and say you're an associate when you aren't when not employed by apple, and weren't when you were there, because your title wasn't associate. It's either a lie or sabotage, and neither way good for the employee.
Here's the data:

https://www.bls.gov/news.release/pdf/cpi.pdf

It's more complicated than the headline number. There's a lot of big numbers that are clearly demand/supply issues. Like energy being up 27%, furniture up 17%, used cars up 40.5%, and so on. If I'm doing my math right, that 40.5% increase in used car prices is responsible for 1.6% of the head line number (40.5% * 4.1% weighting). Meaning, if we ignore the increase in used car prices the headline number would be 5.9% instead of 7.5%.

The economy is still reeling from covid and settling on what a "new normal" looks like.
If your logs are storing IP addresses without consent from users, you are probably (IANAL, but heard this from lawyers) infringing GDPR.
Samsung Galaxy S22 Ultra Unboxing: What’s in the Box?
> barriers to entry

It's easy to do things online as a company of any size, post-GDPR: Don't scrape user data. Done - no compliance required, because the law is not about you in that case.
Preemptive scheduling, as opposed to cooperative scheduling.

Basically: the scheduler can interrupt an erlang thread at any time, instead of a depending on threads to cooperate with the scheduler to see if they should stop. In go, for example, goroutines will only check with the scheduler at function calls, selects, and a few other things like that.
> The "monetize everything to the max" policy of encouraging developers to test their new pre-release M1 chip + OS and software for $500 and then after they return their DTK they offered a $200 store credit.

Ignoring the fact you completely missed the point of the DTK, this is factually wrong. The store credit was $500.
Crypto has to periodically 10X though for this to happen.

The narrative has a type of theta/time decay as there is just no way for the majority to 10X their investment periodically.

I think it is also very hard to think about the global entertainment dollars that have been locked up for the past 2 years. It is an enormous amount of money and as the pandemic fades people are going to splurge on the non-digital services and goods that they have not been able to for the past two years.

The pandemic fading throws the whole process that has pushed crypto to these levels in reverse.

The fact crypto has continued to make new highs is basically meaningless as far as the future is concerned.
It seems usually, when inflation is reported on, the printing of money is not mentioned, though far and away it is the main factor causing substantial inflation.
Minor pedantic point: prices (or specifically, the consumer price index) rose 7.5%, not inflation. It IS 7.5% YoY and did not rise 7.5%.

(Sorry, switching off Man-Shouts-At-Cloud Mode).

Inflationary expectations are definitely getting reanchored at a higher level, so it's hard to see an easy/painless exit. Helps deflate the debt/GDP ratio though (it's nominal GDP in the denominator, which includes inflation), so some folks will be happy.
To fall out of scope of the CLOUD act, the subsidiary needs to be independent and prevent any data access by its holding company. The holding company can in no way have "possession, custody or control", which are not well defined so that doesn't make it easier to assess if a subsidiary is out of scope.

https://jnslp.com/wp-content/uploads/2020/05/Defining-the-Sc...
Ask HN: How to monitor the security of a personal VPS?
I have a personal VPS for my blog and side projects. Recently I noticed something fishy is going on on my server: some bins are gone, ssh last login IPs belongs to a docker container even if it’s me, etc.
I currently have no way to confirm if my server is compromised, and if it’s, how it’s compromised. The only security measure I have is disallowing ssh login via password.

I wonder if there are books or resources on how to:

1. Monitor the security of a Linux server, e.g., successful ssh logins, files written to where shouldn’t be any writes, etc.
2. Alert when intrusion happens.
3. Some way of telling if the current server is compromised
4. If the server is compromised, a report on what the intruder actually did.

My knowledge in the server security area is pretty scant, if there are other things I should pay attention to, please let me know.
We get a 3% inflation pay bump every year. It will be interesting to see if it will be a >3% bump this year or if they will leave it the same but change the name to something other than inflation pay bump.
"It is difficult to get a man to understand something when his salary depends upon his not understanding it." -- Upton Sinclair
One of the questions is this:

> How is work travel handled? Will it be an issue if I want a somewhat more expensive seat for legroom?

I'm 6'7" (200cm), so flying in a regular economy seat is horrible for me. I want to make sure the employer won't balk at me paying extra for an exit row or premium economy seat.
No, there are very good writers who write hitpieces. If you want to make moral judgements maybe they're not good people, but writing a hitpiece doesn't make you a bad writer.
I never really did the math before but I whacked something together real quick in Excel. At $0.30/THash BTC we can come up with some cost expectations for password lengths. Here I will use a 74 possible character password using 26 upper and lower case letters, 10 numbers and 12 symbols. Totally random of course. Using (Possible Chars ^ Password Length) as the number of combinations and guessing we will find our answer at about %50 of our guesses. (See! Super rough)

With SHA-256 it takes about $21 to crack a 6 character password.

$1500 to crack 7 characters.

$108,330 to crack 8 characters.

$7.8 million to crack 9 characters.

$561 million to crack 10 characters.

$40 billion to crack 11 characters.

$3 trillion to crack 12 characters.

$200 trillion to crack 13 characters.

Edit Note: BTC is kinda expensive per hash right now. Usually this would all be cheaper. Past 14 characters it could be 1 cent and still outrun the usual US budget for a couple years.
So just more annoying consent pop-up modals in the future?
You find find an argument from me that the energy consumption of the US military is somehow acceptable.

However, all of that energy consumption being used by crypto is at the mercy of a desperately small number of speculators, hobbyists, and marks. For what it accomplishes - the actual utility it provides, which is to say, very little - it is an astonishingly energy-hungry system. Even compared to traditional banking systems like Visa - which process millions of transactions every second to bitcoin's, what, three? - it is shamefully wasteful.

I think I fall into the category of folks that "hate crypto", though to be honest, the environmental factors aren't what really gets my goat. Not only does the entire sphere speak like either well-fed con-men or desperate marks (Framing critique as "hate", for instance, is a common tactic), but the basis of their technology is focused on taking the single worst aspect of physical existence - that there is only so much stuff - and porting it to the digital world. At that point, the fact that it literally burns away resources wily-nily is just, what? Helpful metaphor?
Thank you. I can totally see the benes of having those options.
I use an SSH key to connect, so I assumed the traffic itself is end-to-end encrypted. However, I would like to be surer of this.
Perhaps technical debt is the wrong term to use with nontechnical people, who tend to startle that they aren't even meant to understand so soon as the "tech" part comes out of someone's mouth.

If they understand financial debt on a balance sheet and they understand schedules and Gantt charts, perhaps we should call technical debt what it really is to the business: temporal debt. Explain that because we've taken shortcuts in the past, we were literally borrowing time from the future, and that time balloons with interest until we pay it back.
The article contains exactly two photos of buildings (and one small part of a building).

If, for the sake of argument, disliking Bauhaus wasn't basically equivalent to Nazism, as the article implies, would you want to live or work in a neighborhood of buildings like those?
How do you make sure you are aligned and that you both see the problems, challenges and opportunities that one party sees?

This looks more like a traditional company than a tech company, which is not helped by it being based in NYC. The CEO and CFO are probably buddy-buddy while the CTO is an outsider "geek."
Exactly, the CLOUD act is the one of the main problems here: https://en.wikipedia.org/wiki/CLOUD_Act
He directly acknowledges that his piece doesn't address "more salient concerns with advertising," and I'd go as far as to say it doesn't address any of the biggest concerns. Insert some variation of "It Is Difficult to Get a Man to Understand Something When His Salary Depends Upon His Not Understanding It" here.
> Counties like S. Korea, had bold actions like contact tracing and lockdown

I was in South Korea from March-June 2020, there was no lockdown in South Korea. The only serious restriction was the 2 week quarantine required to enter the country. Businesses and everything were open just as usual - I was eating out at restaurants and working out of coffee shops everyday. Hell I even went to an amusement park one day (ok that did end up shutting down a week or two later when it was discovered that someone who had tested positive had been there).

Meanwhile my family in the U.S were under lockdown not allowed to leave the house without an excuse deemed acceptable by the government, shocked that South Korea was life as usual despite having such a low case count.
I would venture most of the internet is not hosted in the EU. You expect US, Chinese, and Japanese citizens to respect an EU fine for a law they have no say in? Sure they are doing "business" in the EU, but many of them are not doing business at all.
> There is no need to have complete mental meltdown because of it like too many people appear to have. It is all in heads. There is no need to stress about it.

One difference between humans and animals is that we have the capability to understand abstract concepts, and we can make value judgements that there are some things that are more important than satisfying the basic necessities for survival.

I'd say that we should be glad that there are always some people who find human freedom to be one of those values worth stressing out and pushing for. The world would be a far worse place if there was never any pushback against blindly following bad orders.

That's about it. You've chosen your place and I've chosen mine.
Yeah, and that's when the complementary skill of knowing when to repay tech debt comes into the picture. I'm not sure what else you would be suggesting: that we should all build every experimental finger-in-the-air MVP as if it were core business-critical functionality, just so we don't have to be disciplined in judging when to repay tech debt?
Reality is that which, when you stop believing in it, doesn’t go away. -Philip K Dick

Even if you stop “believing in” math, your proofs are still either correct or incorrect.
The scientist at the center of the Covid lab leak conspiracy
I feel that the issue at the moment is the more heat is being trapped due to a CO2-rich atmosphere rather than producing excessive heat. After all, the energy we produce is probably miniscule compared to the amount of energy Earth receives from the sun.
Experts see deep flaws in Tesla ‘Full-Self-Driving’ videos
https://en.wikipedia.org/wiki/Copy_Exactly!
The stock market's reaction was "Oh no!" followed a few minutes later with "Anyway."
What's really frustrating is that technical debt leads to real problems. It's just that these problems have been so pervasive for so long that everybody just accepts them like a bad smell that you don't really notice. Technical debt is the underlying root of:

- you said you fixed this problem but I'm still seeing it
- you fixed this problem but you created a new one
- we can't deploy a fix for this problem right away because we have to certify the whole monolithic mess first
- testing this fix takes an hour to coordinate

These are problems that business owners should care about, but they've just come to accept that this is the reality of software development.
You're within your rights to create and offer whatever kind of service you want. As an end-user, however, any data what-so-ever sent to a 3rd party without my knowledge or consent is too much. There is no such thing as "the right amount."

I'm OK with websites using self-hosted tools such as Matomo as long as the data never leaves their servers. Analytics is important to any business. But I choose to do business with said business, not with Shopify, not with Google, not with Facebook or Twitter (I'm looking at those "sign in with" widgets that run social media code in my browser) or whatever 3rd party "SaaS" service the website is outsourcing my data to for ease of development or convenience. I don't consent to my data being shared with people I don't know about and did not consent to give a single shred of my information to.
Is this not what we anticipated when world governments pulled ten trillion dollars out of thin air for economic stimulus? The bill always comes due.
That process even has a name: "Copy Exactly!"

> The Copy Exactly! methodology focuses on matching the manufacturing site to the development site. Matching occurs at all levels for physical inputs and statistically-matched responses (outputs). This process enables continuous matching over time by using coordinated changes, audits, process control systems, and joint Fab management structures

https://en.wikipedia.org/wiki/Copy_Exactly!
How to crack RSA-512 on off-the-shelf hardware in 4 days
So Deno is obsolete?
Their stock dropped like 75% in a bull market. That's what gets the vultures circling. If the CEO was a weirdo who gave some bad interviews while the stock doubled we'd all be calling him an eccentric genius. It works for Elon Musk.
Never a shortage of people willing to dictate other people how to live their lives.
> This is a huge dick move by Apple.

Ehh, I think this is a Chesteranlon's Razorfence situation. Never attribute to malice something for which you do not yet understand the purpose.

HR world generally is afraid to denigrate former employees for liability reasons, and many corporate HR departments have a policy of confirming only whether an employee worked for the company, and nothing else.

Choosing a vague term like "associate" (which simply means "employee," as compared to "partner" or some other term that suggests an ownership stake) aligns with that reasoning decently well. While it may not be ideal, and may not support truthful claims of relative seniority, it's a bit of a stretch to say that it was done with any malice.

EDIT: Apparently some people strongly disagree. If you disagree, might I ask what evidence you have of malice?
There's a HUGE important aspect that you're missing: The IP Address is NOT the only thing that makes this data into personal data.

Google Analytics generates a visitor ID by rolling a random number and storing it in a first-party cookie. This is how GA tells that two visits a week apart came from the same user. This value has been ruled to constitute Personal Data. This is a very big deal, and only a little bit surprising.
Well, you'll for example find the 30 days in this document of the data protection office of Bavaria: https://www.lda.bayern.de/media/muster_1_verein_verzeichnis.... (It's a sample for sport clubs etc.) and it's also what our lawyer has recommended to our company as the upper limit.
If only 12ft worked on The New York Times, The Wall Street Journal, and other paywalled sites I'd like to read..
Won't this make leftpad-type scenarios even _more_ likely? What is the benefit?
Ah, yeah, I absolutely agree with you in that case. That's a very fair point. I'm sure there are lots of companies in which context it's not the engineer's decision at all, and therefore not their fault.
> You pay with attention, and the service trades some of that attention to an advertiser in exchange for regular currency.

This is a very superficial take. You obviously don't just pay with attention. You also pay with actual money -- you do, or the friends or family you talk about the product with do. And you don't necessarily do it completely consciously, because one of the effects of "raise awareness" advertising is to make things that are familiar to you seem more attractive. Given three equivalent options, one of which you vaguely remember from somewhere, you're more likely to pick that option.

One could of course argue about whether this payment (using actual money) is good or not, and whether using advertising in this way is ethical, but extracting money from you or your social network is the end goal.

Somewhat-unbelievable arguments about advertising as a whole being a con aside, if people weren't responding to advertising by increasing advertisers' revenues, then nobody would advertise.
A landmine is programmed to attack a target of a specific weight when it enters a specific area. The targeting model was programmed by engineers to try and target soldiers (or armoured vehicles), and the locations they were placed were also for that purpose. However, it's possible for the heuristics to fail, and for a mine to blow up a child, because the weights weren't tuned correctly, or to fail to explode when a soldier steps on it.

By your same logic, any AI has no autonomy, because it does X when its code selects X. A guard dog robot attacks will act consistently given identical inputs.
No it's clearly not.

It's very clearly implying they had a job with the title "associate".
> Vaccine-enhanced disease is a very real thing, it's happened before (e.g. dengue).

Very unlikely and not flagged at all in clinical rials

> Now we are talking about higher order nonlinear terms which are almost impossible to predict.

We're really not. You should be capable of understanding that the vaccine reduces the chance of harm from the disease.

> Not in my country, not obvious at all. And my country has better data than yours I bet.

Its extremely obvious.
Looking back at my career, I don't think this would have impacted me in any way. I've found titles to be meaningless this industry. They may hold some weight in FAANG companies only because folks know what an amazon L5, microsoft 62, google, facebook E4, etc. are. There's even a handy website [1] to compare them.

When you get out of FAANG, titles becomes even more irrelevant. What's a Programmer VI compared to a senior associate consultant?

I think this is part of the reason why we have the 'show me what you know' interviews. Degrees, Titles, past experience maybe get you in the door, but you still need to pass the tech interview for the role.

[1] https://www.levels.fyi
State can be silently corrupted and only cause problems much later, even many years later.
What the parent comment is saying does apply to large corporations. I will be very specific - I worked for Fidelity. Fidelity does not need smart people for 80% of their professional positions. They need someone who can pass the FINRA Series 7/63 to get a licenses and follow procedure. Without exaggeration, there are scripts for most of the work. You don't have to follow them to the letter, but you can. Standing out in most of these roles other than "not messing up" is hard and doesn't really benefit the company except on the sale side of things (where compensations reach FAANG level, while working 70 hour weeks). As a result, people hire their friends and family. They do not care about Fidelity growing - they know it will continue to exist.

Take a software startup I worked for later - they care about profits and they care about employee morale. They are out to make money and they need the best and the brightest. It affects their bottom line. A good dev can bring in millions in revenue. They give promotions, they retain. They tell their dumbass son/daughter who got hired to shut his/her mouth, be respectful, and not boss anyone around even if they do hire him/her.

I also see this in emerging economies - when the USSR collapsed, people really hired talent, because the markets were competitive. (Even though former USSR is famous for nepotism)

A lot of established companies in the US are truly not competitive and have the market cornered, hence some validity in the parent comment.
So true.

I have a collection of small, US-focused websites.

I'm investigating low-effort ways to geo-fence the EU. At some point it just becomes easier to ban Europeans, rather than keep up with whatever they'll come up with next. I saw in this thread that the Google fonts on my website are now a problem as well!? That's the first I heard of it.
As always, this depends on the use case. For in-house applications it is often far simpler to keep a lightweight frontend and mobile app is often of no concern. For these kinds of web application a server-heavy architecture was always a good choice.
>Yes, and when you go shopping and pay with cash in a store with no surveillance, your shopping habits are being shared against your wishes with a random third party (the external company bookkeeper).

How, you don't enter your name when you pay with cash.

Also in EU is illegal to share any personal info in physical world too, say you go and make a subscription to a gym they can't share your data with a third party unless they make you sign a paper first.

Edit:typos
How exactly does your old laptop have anything to do with a global shortage?