skysight-inc/HackerNews huggingface dataset:
> So what happens when you promote someone for maintaining the same system for years? When do you stop promoting them? There's a person on my team who is happy to maintain what he works on. He has worked on fundamentally the same project for over a decade. He's a senior level engineer, and as far as I know doesn't have aspirations beyond that, which is perfectly fine. Assuming he keeps doing that work, and no more, does he get promoted again?

I know a few of these people who have been on the same product at Google for a decade and they generally cap out at L6, which is staff engineer.

L7 engineers are typically careerist and have larger a scope, focusing on higher level cross team collaborations. Some L6s are like this but there are plenty of them that are just chilling
> Compensation wise the domain does not be better than others.

Yep. I moved into web development because it paid a lot more and carried a lot less stress. The 7 years I spent working on embedded systems paid off in a major way, too, because I showed up equipped to directly address performance problems. I'm still in web development and I'll probably never leave.
Indeed, a story as old as civilization itself. but in this case, it doesn't seem like it is working out very well for their mental health.
Modern phones have chips that can do hardware attestation that they're running an OS that's been blessed by Google. A lot of apps, e.g., McDonald's and most banks, will refuse to run if this attestation fails.
Check out the /r/selfhosted subreddit. It's an extremely useful resource.

Docker Compose has worked great for me so far. I'm not sure about Nix.
If your default state is asshole and have to be paranoid to put up an act of being a "non-asshole" then that's already not a good start.
Does PureOS solve this accessibility vs. malware tradeoff?
> With a little bit of thought around how to show that the work you are doing actually is valuable to your organization's OKRs, you can get promoted doing whatever work appeals to you the most.

If you put yourself in the shoes of an L3 or L4, you know this is not exactly true. Who your manager is and what their priorities are, and how they view the promo process can greatly affect your ability to get a promo. I mean, before you can apply you need to get "strongly exceeds expectations" for two consecutive halves. If you do great work that you think benefits Google, but your manager doesn't think you've sufficiently demonstrated things on the rubric (e.g. "google-quality delivery" or "autonomy") you won't get a promo. Managers also have their own agenda and list of things they need to deliver, so you end up having to work on things they want you to work on, even if they don't help you tick the boxes in the rubric. If you're lucky and get a good manager who helps you play the game, these things aren't problems. If you're well-informed, you know how to bail when you encounter such folks. If you get unlucky or don't wise up to how it works, you can be set back many years in career progress.
We moved basically everything but username into an entirely different db, went so far as to hash the username column so we don’t even know what’s it is until you log in.
Don't design cities for driving, design them for thriving and literally build ecosystems beyond our artificial urban landscapes
This is likely to persist as long as the federal government can sustain deficit spending. Until the money printer stops, there will not be political will to reduce spending.
This is very much context and culture dependent. For example, in some civil services, managers never get into trouble for saying no, as they can spin a no as being good stewards of public funds. Saying yes is far riskier and requires either top down direction or group consensus, or both.

The hardest thing about making decisions is accepting that some people don’t want that responsibility. If you are willing to make decisions, and have a decent track record and can justify them in a manner acceptable to your organization, you can go far.

I hadn’t been a manager long when two of my staff came to tell me of a customer problem. They summarized the situation, offered alternatives, and a recommendation. Then waited.

I tried to look pensive as if considering what they were saying, while all the while thinking that their assessment was cogent and their recommendation spot on. Honestly, I couldn’t figure out why they were there. It took me a bit to realize they needed me to okay it: I was the manager, so I had to take responsibility, they didn’t want that.

OK, let’s do that, I said, and if they went, happy. One of them became a very good manager some time later when they decided they did want that responsibility.
Consider a "TinyMiniMicro" type slim PC instead of a RPi4. You'll get a lot more bang for your buck. https://www.servethehome.com/introducing-project-tinyminimic...
Beats the heck out of me.
You tell me, Like I said, I am not sure I know what that even is TBH.
When i worked there you couldn’t even checkout code locally - had to ssh into office workstation. At that point just run your dev service on borg using free quota
Steven Pinker flew on the Lolita Express

Back in 2002, long before the statutory rape findings were widely known -- if the were known at all beyond a select circle, which this (given the voluminous roster of LE ridership) by itself does not prove that Pinker was a part of.

aided in Epstein's 2007 legal defense.

Apparently unknowingly. Again, unless you have information that would indicate otherwise.
As bad as moves like this are for freedom, even if Google did 20 more like it, Android would still be much freer than iOS.
in fact....twitter is sure to make your life more miserable.
mutool is described at https://mupdf.com/docs/
I haven’t thought deeply about it.

Maybe it is “Hope”, America is like the promised land for many people around the world.

This is Hacker News right; so I can think from the perspective of a Software Engineer, which Software Engineer in some part of the world wouldn’t like to spend some time in Silicon Valley? I would argue if you are a Software Engineer you like to be in the valley at-least once.

Maybe it is not one thing, America offers different things to different people.
Pretty good alternative to “We and our customer data got hacked”.
You could count the number of customer complaints. Oh wait, we’re talking about Google..
@dang or other moderators, could you please kindly fix the headline? The correct headline is:

> Android 13’s new sideloading restriction makes it harder for malware to abuse Accessibility APIs

Seems a lot less inflammatory.

edited for politeness
That’s definitely part of it. Another part is just the various multipliers you get from having a small number of tools. Team mastery, more mobility of personnel (no/low ramp up times), unexpected opportunities for re-use, high quality onboarding due to narrow scope, etc.
Word. Thank you for the response.
Closest Hourly Neutron Likely Ternary System
> because I engaged in it in bad faith

You claimed before that "She did not consider that you might not follow the same social contract as everyone else" – but isn't your own (self-confessed) bad faith engagement here a violation of most people's social contract, and especially the social contract of this site? (Read the Guidelines.)

> unless you really think a random curse word on the internet is more devastating than being told in as many words, to your face

You are making assumptions. Was the interaction in-person, via email, via phone? I haven't said. You can't really judge an interaction you know nothing about except a very brief description. Our interaction here is as much "to your face" as any email exchange would be–given which, your ideas about what differences exist between the two interactions are very questionable.

> that you're too stupid to do your job

How is it telling someone "you're too stupid to do your job" to point out they've got the facts about something wrong, and that you've got concrete evidence to substantiate that?

I mean, if a colleague tells me I'm wrong about X, and shows me something which proves I'm wrong – I don't interpret that as "you're too stupid to do your job". My response is "thanks for enlightening me". In fact, just a few weeks ago I was telling people "Cassandra can't do X" (I forget exactly what X was now) and one of my colleagues said "no you're wrong" and sent me some blog post pointing out how to do that thing with Cassandra. I was thankful to him for correcting me, I didn't take his correction as having any implication on my own intelligence or ability. Sure, being shown to be wrong feels somewhat uncomfortable, but adults should be able to handle that feeling. And it wouldn't matter if it wasn't a colleague – such as a customer, or a complete random stranger.

> The tables are reversed and you think I'm an asshole.

As I said, I don't like language like "asshole", I generally avoid it. But, what are you doing here? You think I behaved inappropriately in a situation – possibly you are right, possibly you are wrong, you don't really know enough about it to actually judge – and so you think that by behaving inappropriately to me you are going to convince me of something? Whatever you are trying to do, I don't think it is thought through very well, and I'd question its compatibility with this site's Guidelines.

> What do you think that lady thinks about you?

How would you know what she thinks? You've never met her. I've actually spoken to her quite a few times in the years since that event, and (as far as I can tell) the interactions have been positive, and (other than that one occasion) I can't remember her seeming upset about any of them. (None of our subsequent interactions have involved anyone disagreeing with anyone else's facts, for what it's worth.)
You're not wrong. Android Pay will stop working, and so will a bunch of third-party apps.
You still fail SafetyNet if you do that.
>Does that make it any less true though?

No, but it is an important distinction if you want to look for solutions, either socially or as a parent.
It's definitely over-engineered, which is the point. The plane needs to be ready for multiple situations.
A native application is just a web application without the extra steps.

If I had fewer devices, I'd definitely just run everything locally and forget about a lot of this cloud stuff. But I need access to certain things from 3 different devices with different OSes, so a hard drive full of data and Portable apps won't be enough.
Aptible (though geared more towards Healthcare/Compliance space).

^ Note: I use to work for Aptible. Great company. Great people. Now working for one of their spin outs.
Because I recognized the Greek letter that we usually represent in English as “xi”. In fact I wasn’t sure, but I guessed x, and it turned out to be right. For each letter there’s usually one obvious latin-alphabet equivalent.

I bet you know right away how to type α and β.
It is an eternal quandary - make money and promotions not the central theme of your life. Move jobs, when it becomes a soul-sucking promotion oriented culture.
I chose this path - am probably poorer than FAANG folk, but I did not trade my soul and find joy in the work that I do.
If you're replacing the whole userspace, why not just replace the kernel too at that point?
I think you forgot

3. It is hard because of me?

Music isn't for everyone and reading sheet music is not for all musicians. I know plenty of guitarists who only can read tabs. I know a few serious musicians that can't read sheet music (they have to take it home to study).

Anyone that has had proper music instruction though was taught how to read sheet music in their clef. Pianists learn both.

We must also understand our own limitations and accept that there are some things in this world that we, in our current state, can't understand without either further experience or further instruction or unlearning a prejudice we have.
Not necessarily. It's possible to create a new Google account (e.g.) just for Tailscale, and not use it for anything else. That way the only thing Google can know about it is that it's used to log in somewhere.
FYI, COPR is updated with v2.5.0 (except openSUSE, needs extra attention)
That's too long, or I would have submitted it like that.
I completely disagree with the first two points. As to the last point, why do you need to follow anyone's expectations? Your data and personal servers are there to serve you first and foremost. If you want give people access, that's fine. I just don't see why you would feel obliged to do so.
I started counting calories as well. No change in sleep.

Walking pushed me into negatives (walking was 500-700 kcal spent per day and I was usually 100-400 kcal in the negatives).

I started around 130 kg, now I'm under 95 kg, target is 85.
Are you really typing the data directly into a csv file, or are you exporting csv data from something like a spreadsheet?
They need to run all day and all night for ~2 weeks straight twice a year and then they can sit idle most of the rest of the time. But during those 4 weeks charging for one out of every three hours (I’m assuming that a big tractor pulling a big implement is going to deplete even a really big battery fast and charging a battery that large is probably going to take a long time) isn’t going to be tolerable.
> Can someone explain why two these planes are more than a third of the total cost of the James Web Telescope?

Because they're complicated and custom, just like that telescope?
> We spend a lot on the military, including air force 1, and spend very little on science like JWT.

Silly humans. Don't even have anyone to fight but themselves.
> I can't recall ever being confused by it (with one exception: iPad multitasking).

Oh god, don’t get me started. Not a single thing in any field of technology puts me straight into confused-grandma-mode as quickly and thoroughly as accidentally going into multitasking mode on the iPad. Oh god how do I close the floating safari window I accidentally opened? Why does swiping it off the screen do nothing? Oh god now there’s a weird paddle thing on the right side, and now it’s… gone? Is that window just there running forever now? Or I drag it to the left and now… oh god now it’s in split view. How do I go back? I move the vertical bar all the way to the side and now I have two safari windows, but I can only see them for a brief period when I cmd-tab… somebody please help me oh god.

Granted, it’s a little better each release, and used to be so much worse, but it’s still ungodly awful and impossible for me to figure out. I wish I could just disable it outright.
Except in this case, I'm pretty sure the smartphone+social media combo is also screwing up the older generations.

Does anyone not have friends or family members who became angrier, darker, or otherwise seem to have lost touch with reality since becoming extremely online?
Thank you, this is really cool!
For any individual/organization remotely competent at security (i.e. not using Passw0rd! as password and reusing elsewhere), a leak of hashed password is probably the least of concerns. Compared to this anyway:

> According to GitHub, the threat actor began enumerating metadata about customer repositories with the downloaded OAuth tokens on April 8, 2022. On April 9, 2022, the attacker downloaded a subset of the Heroku private GitHub repositories from GitHub, containing some Heroku source code.
Zero downtime migrations
> hash the username column

Is this giving you any real security benefit? (I'd assume the usernames are indexed elsewhere and that it's a reasonable assumption that whoever gains access to this hashed data has access to the username list as well, making a lookup trivial - or are these not safe assumptions?)
Some graphQL clients can eliminate the need for these state management tools. Everything becomes just graphQL queries and mutations with very sophisticated caching. When you mutate some resource, other components that have queries that are affected by the mutation will re render with the new state.
Definitely was a normal thing in my country (Australia) for many drivers to have a card that you could call them directly. When my father used to commute to another city for a couple of years (mid 2000s), he had happened across a good taxi driver, got his card, and then called him up directly the day before to book the next morning's trip to the airport every week. He knew him by name, and they'd have a chat on the trip. He'd be driving, he'd just take the call on the hands-free.

Even a couple of years ago on a business trip to Spain, the guys at the company there had a taxi driver they knew who they got to take me to their facility. Then I just organised with him to pick me up each day at a certain time when I paid. Beats me having to get the hotel or the company to keep having to call for cabs and beats him having to wait for fares.

Finally, I'm very surprised that you can't imagine somebody being rude to a low-wage worker...
As described, the attacker quietly retrieved OAuth tokens from a single Heroku database, and then very loudly scraped GitHub.

I'm not saying it would have been impossible to detect the first action, but it's substantially easier to detect the second.
He's probably comparing it to a hotel, which don't tend to have kitchens, cookware, and washing machines.
FWIW, I'm aware of a handful of people that work for a very large AAA game studio, nearby where I live, who are, in fact, git "experts" -- and, really, just extremely knowledgeable about version control systems, generally speaking, since they don't just use git -- for the company and they spend a large % of their time helping these teams deal with version control issues. As I understand it, they've written a lot of automation to deal with recurring problems like merge conflicts, perforce depot / workspace issues, etc. And they make good money for that expertise...
I disagree. Add a couple of these features, put them behind an experiment flag, and inspect metrics that matter. What usage are they getting? Do users in the experiment use the product more frequently? And for longer periods? If not, perhaps feature parity with Excel is not the highest impact project, despite the feature requests. If you are finding it hard to come up with measures that show impact towards your orgs' OKRs, this is also a signal that your pet project may not be the best thing for you to spend time on in the eyes of your bosses.

At a high level, promo is an incentive that directors and VPs use to keep an org working towards strategic goals. You may disagree with those goals, but that doesn't necessarily mean promo is broken.
VM hypervisors are even better sandboxes. I don't imagine any browser will be more secure than for example a VirtualBox or VMWare VM, unless the browser itself literally is a VM hypervisor.
Porter.run
how much of his judging was actually coming from within? And how much was because the society (school system mostly) around him telling academics/science was the right thing to be doing, and since he was good at those, he was somehow better and allowed to judge others...

I don't even know if the society around him had the best intentions for him as an individual. Else he would have been taught better.
I sympathise with your desire to replace shell scripts, but I don't see why that replacement should be Perl of all things. Like you said, Python has displaced Perl due to ecosystem support, so why chase history here?
… but I have far more horror stories per mile flown with Delta than with Southwest.

Granted, I've a lot less miles flown with Delta, but that's because every ride has been bad… (also, I ended up flying less miles with Delta on one of the horror shows because it seemed like they weren't actually interested in fulfilling their end of the bargain, and switched to a different airline: Southwest!)
Diversity is a dog whistle to be honest. Either you are on the diverse team or your aren't.

It's important to understand the core tribalism around picking up this word and standing by it.
Ruby is a much more hospitable environment for ex-Perl people, IMHO.
Have you tried AlpineJS or Htmx ? These will cover more than 90% of use cases a simple website need.
(O'Reilly author and ex-editor here)

Editorial effort and quality control also plays into the purchase decision: I have a sense of what "an O'Reilly book" will be today, just like I have a sense of what "a Packt book" will be. With a self-published book, I might know what the author is like but I can't be so sure what the writing and structure are like.

O'Reilly books today may not be the automatic promise of high-quality texts they used to be when I was writing (last millennium!), but I know that there's a reasonable amount of effort that goes into selecting titles and improving the quality of the book.

You can always find a self-published book that's awesome and an O'Reilly book that's crap, but my experience is that the median O'R book is higher quality than the median self-published tech book.

(I'm not saying you should only buy O'R books -- my library has plenty of non-O'R books)
> So you think there's a cabal of "gatekeeper" scientists

No. I suggested I myself have seen gatekeeping and referenced your comment as example. Make of that what you will, but don't extrapolate it to a conspiracy theory I didn't suggest.
Nope. I got screwed bad over this. took my parents on a trip to london over NYE a few years ago. Had a pretty expensive AIRbnb rented. obviously nye is totally sold out. Including basically all hotels. They canceled a few hours before the flight.

Luckily I found a hotel literally last couple rooms and very very expensive for what it was.

I couldn't get airbnb to do shit besides give a refund for the airbnb reservation and I think maybe I got 250 or 500 or something negligible.

They 'try' to find an alternative on the platform but wouldn't pay for my hotel (s now need 2 rooms). And since there are no airbnbs available... let alone in the city and similar.

I have never stayed airbnb again only hotels.

if they allow hosts to pull that crap they should pay for alternate hotel lodging.
I first received word about this on 4/15 via an email from Salesforce.
"a Heroku database" was what was known as core-db internally for the longest time. I'm not sure if still the case or not today.

But at one point was the source of everything for Heroku.

Over time things were moved out, so this isn't an everything that exists has been leaked, but it is not a guarantee that attacker didn't move from one area to another.

As someone with some apps on Heroku, having worked there, but no knowledge of the details of the incident more than others... I would:

1. Rotate all creds

2. Ensure logging all connections to the DB (I can't recall how much you can do this on Heroku)

3. Extra heavily audit Github commits and Heroku releases

4. Maybe keep rotating all creds?
Similar, but different. I don't let my child use social media at all, and limited to 30 mins screen time total a day. She's excluded in that all her friends use TikTok, and she can't.

Maybe it's for the best.

My parents used to say 'if all your friends jumped off a bridge...', and I hated it, so I haven't used that one yet. I'm trying to rely on actual merits instead of follower cliches.
Fifa 22 occasionally and nothing else. Anybody interested in learning can get in touch. Disclaimer: i can only teach actual gameplay, not tactics, game glitches etc.
> Possibly even withholding information in order to save the company from mass exodus due to the incident. I'm sure they'll be fine.

Trust takes long to build and is easy to break. For anyone able to convert the Heroku buildpack to a Docker and able to move the database, moving away from Heroku shouldn’t be too hard. There are multiple similar services nowadays.
Does that go both ways? Who do you (presumably nerd) respect? Sales people? PMs? Jocks? Influencers?