skysight-inc/HackerNews huggingface dataset:
> It turns out the inefficient places tend to get out-competed

It turns out that a lot of 'efficiency optimisation' is done inconpetently, like removing 'un-needed' parts from a car: seatbelts, airbags - they just add extra weight!

Lika federal aviation authority hiring engineers from boeing to check their own work to 'improve efficiency'
interesting anecdotes about argonaut design methodology... pt 2

we used the opposite approach to design the Super FX chip (we called it the Mario chip - likely the first ever gpu)

Carl & Pete would write code to do 3d math and render polygons... and write and re-write the code hundreds of times, using an imaginary assembler language. they would invent new instructions on the fly to let their code get tighter. they would keep coming up with new instructions, new registers, new ways of forming instructions and referencing registers etc... until the code was the tightest... and THEN, we designed a microprocessor from scratch to execute those instructions.

Also, likely the opposite way that microprocessors were designed... because (in the past) the designers had no idea what their cpus were going to be used for, whereas we knew what we wanted to achieve, so got to use software to drive the hardware design.

this was the first time that a cpu was able to be designed using programmable gate arrays. literally Ben & Rob could make a change to the hardware design - the netlist, and email it off to the usa, and actel would Fedex back the next day a working chip for us to try out. this was before you could program your own fpga's yourself (and Xilinx at the time wasn't large enough to fit a whole microprocessor). this iterative approach allowed us to design the optimum 'gpu' for the task.
It's the New York Times, an esteemed institution in the advertising industry. I'm sure they have done their journalistic due diligence in accurately representing the myriad of individual opinions and zeitgeist of these broad demographic groups.

They are after all a left-leaning publication, and thus are woke to the dangers of making overly broad generalizations.
Github tokens were accessed and used to attack things outside of heroku. Something was breached. We don't know what, when it occurred and extent of the breach and I bet heroku doesn't know either.
UpEquity (YC S19) Is Hiring a Software Engineer in Austin
The sad irony is, that feeds the false narrative around this issue.

I hope the NYT is mistaken. I hope we don't have generations that base their understanding of reality on bogus paradigm of social media.
The Psychologist’s Fallacy: Assuming That Your Interpretation Must Be Right
The problem is, even if a fetus is a person, by all philosophical definitions of a person, pregnancy is only an ethical arrangement if the mother consents to the pregnancy.[1] If she does not, the fetus is, perhaps ironically, violating her human rights.

[1] https://en.wikipedia.org/wiki/A_Defense_of_Abortion
It will definitely work - Keycloak can provide its own user database, or it can use external one, as well as do some crazier things that go outside of the scope you mentioned.

In simplest setup (non-HA, local user database), you would create users inside Keycloak, assign them to different groups, then create applications (which handle configuration for individual applications like grafana and gitea) and create rules that specify that only users that belong to specific group can login to specific application.

You can also allow linking multiple external SSOs this way to single keycloak identity, and even include login through kerberos5 or client certificates.
The server also contains the secret, so if that secret is leaked then the attacker can generate new tokens. It protects you in the case that your password was stolen, but nothing else e.g. via phishing.
Aight.

I only started doing this recently after this advice here

https://discord.com/channels/544924237773668373/930457954346...

I'll clear it from the examples
Because they are. In fact, there's an entire trifecta.

If you take bets on how companies will do in the future, it's called finance or investment services. If you take bets on human misery, it's called insurance. And if you take bets on sports, it called gambling.

Businesses in all three have, for good reasons, the reputation of being predatory.
well, at least, the answer given is encrypted in transit, so a potential MITM attacker won't know if I need web3 or not.

hurray for https everywhere... or else it is [big red warning] insecure.
Pretty sure it's because the core devs are RH employees, who owns Quay. Seems reasonable to keep things on your own infra.

Having said that, I know there has been some falling out between RH and Docker some time ago, which was one of the reason RH ended up creating Podman.
Zero trust is a whooly term which means different things to different people, it's more of a strategya and principles than a technology. Ultimately you will have to trust something and we want to make that as small trust relationship as possible. For me, the best way is to use open source and only have trust of central key infra (the control plane/PKI) while ensuring all connections and anything that wants to attach goes through its own process of bootstrapping trust. No connections should be made to the controller or on the data plane unless endpoints have bootstrapped trust.

I work for a company that has created exactly this and we open sourced the core tech. It allows anyone to put programmable, pirvate (outbound only) connectivity based on zt principles into any app (sdk), host (tunnler) or network (edge router). It can support any use case across access, multi-cloud, IoT, and more.

Check it out - https://openziti.github.io/
There's also a Turtle (.ttl) version of the primer; https://www.w3.org/2007/02/turtle/primer
Cyber Stasis – What would our world look like without the concept of money?
There's a mature open source library for them packaged for Arch and other distros. Using that would be less work than trying to implement it from scratch.
There is no necessary link between cost and price (when price > cost) without competition. You should be looking for someone to compete with Lego to apply downward pricing pressure.
No matter the many critical comments this is actually a pretty concise summary of the technology / concepts behind blockchain including recent developments such as scalability / rollups and interoperability, which are hard to find good explanations for.

Recommended read for anyone interested in the space from my perspective!
Despite potential imperfections.
Wish it had an RSS feed.
Ho

ho ho

he

he he he

ha ha

ha ha ha ha

ha ha

ha

eyy

so laugh
I usually start with comments. Only after that, if majority of the comments are not "this article is false and bad" I open the article.
Is it good or bad? No idea.
I think it's reasonable to have restrictions on both. Regardless of complexity, long lines make it hard to view side by side diffs on your screen.
Founders/owners shouldn't count.
This is the publicly stated reasoning:

https://lists.jboss.org/pipermail/keycloak-user/2019-March/0...

Mostly I think the answer is just that it's a Red Hat project and Red Hat wants to use their ecosystem.
Hey, Regard "SSR improved ranking" :

I think this is a myth. I mean, that simply means those static websites will rank better than dynamic sites, and in fact, this seems not real. But I get the idea, if improved the speed, thus SHOULD in theory, improve the ranking.
XML can be more efficient, since you do not have to surround the key with quotes. It saves two characters at the foo/cat each:

<r name="foo" age="2"/>
<r name="cat" age="6"/>
Such a shame that I, as an end-user is not the target audience for that shiny and promising "Flexible Tile Architechture".

I'd like 4 CPU tiles, ECC memory controller, no 3D GPU (frame-buffer, blitter and DP interface only) and no Management Engine, please...
> unwilling to just do the work and be patient. Especially in tech, most people switch jobs every few years to get a promo and salary bump"

Capitalism for me but not for thee?
It is great that Hare has tagged unions and non-nullable types, but polymorphism has been a huge part of language advancement.
im not sure why you are limiting the argument to three countries. this just proves my
point. i really dont mean disrespect, the american news media simply does not do a good job of educating americans on their own government’s actions overseas.

what happened to:
syria
libya
egypt
lebanon
yemen
venezuela
nicaragua

the list goes on and on..

i dont think anyone would argue that arming literal islamist extremists in syria is righteous.

the number of american interventions is too many to count, and the fact that YOU believe they were righteous proves yet again that you lack empathy. what good does that do to all the victims? intervention after intervention, the situation just gets worse and worse. no one ever get held accountable, american citizens dont know any better and get to be gregarious and positive
Your last conclusion is what I settled on years ago. Example: https://theandrewbailey.com/article/17/Those-crazy-Buckeyes

Active comment sections on my site are wrapped in an iframe, so who knows what semantics that adds/destroys. Example: https://theandrewbailey.com/article/262/So-Few-Monitors#comm...

Edit: change a link to an article with an inactive comment section.
> it's a vast improvement over linked lists or home-grown hashmaps.

One of the easiest things to do is write home-grown hashmaps that perform better than std::unordered_map. I suppose you have to worry more about technical debt / bugs, but yes home-grown hashmaps are feasible and I don't think std::unorderd_map is a "vast improvement".
Can you elaborate more? What is the distinguishing factor?
Hello should that number be before we as a society accept it?

1% is staggeringly high. That's one and a half million people. If our system operates on exploiting one and a half million people, we should change that system.
> I think it's more likely that the political situation of the war itself is to blame.

The ban on paying in ruble is also a political decision, pretty much the whole Western response to Russian military action in Ukraine has been solely political to a hypocritical degree.

I don't remember the world banning the US dollar as a valid payment option over the invasion of Iraq, even tho that would also have been a very apt response to what happened back then [0].

[0] https://www.theguardian.com/business/2003/feb/16/iraq.theeur...
Python GUI programming/libraries do and have always sucked. My only fond memory in that regard is Java with Swing and LWJGL. Python version/package management. Python package publishing.

Ubuntu is becoming more painful with every version, I remember an optimistic time where fun stuff like wobbly windows were my main concern and only a few clicks away, now I can't even drag and drop stuff within and from my desktop properly. My external microphone doesn't work. Sometimes my computer takes minutes to boot. My speakers don't work. Graphics drivers especially are a pain in the ass, everytime. The printer isn't even detected. And all this on a relatively new device.

Screensharing and setting up remote access sucks, also whoever came up with the 8 character password length limit for VNC deserves a special place in hell (and probably also in the halls of fame in various intelligence agencies).

Websites and OS interfaces that are designed primarily/only for smartphones/tablets, also inconsistent GUI designs, especially Windows can fuck itself in these regards

Anything OAuth related can go fuck itself, I have yet to experience a single API that makes getting credentials trivial

Anything audio configuration related. It should be as visually intuitive as the Blender node editor, yet it is anything but anywhere.

Neural network construction and training data mangling. AutoML can't come soon enough.

Many, many command line programs with completely unintuitive flags/inputs/commands but which like many things in this world will never change because of backward compatibility.
I totally believe in the value of being in nature. It's hard to go for a walk surrounded by trees and chirping birds and not come away happier and refreshed, in my experience.

But I'm more skeptical about this in the article:

> Need a quick break from your "work screen time" for some "fun screen time?" There's a nature fix for that: Check out the #FindThatLizard game on Twitter and Instagram. Science communicator and herpetologist Earyn McGee posts a picture of a lizard "camouflaged in its natural environment, and people have to find the lizard in the photo." You don't even have to leave your couch to play.

I can't imagine there's the same benefits to looking at nature on Instagram or Twitter.
One simple example was that I couldn’t install dependencies from public registries such npmjs (npm) or pypi (pip). It took an approval process for an internal team to review and clone packages onto Google’s internal registry.

On the other hand, things like deployment and monitoring were so trivial and magic.

This was circa 2015.
For those that may not be aware, Keycloak is the upstream of Red Hat's SSO solution "Red Hat Single Sign-On", so there is a lot of weight behind it's development.
All your examples are not rent-seeking business. People justifiably, in my opinion, look down at that business as it is a zero sum game where people with access to credit bid up access to a fundamental human need.
The vast majority of fps players don’t shout homophobic slurs.
I was thinking maybe cousin George was president in 1996.
Maybe https://github.com/zitadel/zitadel could be an alternative to you.

Its written in Go, can be self-hosted or used from a cloud service.

It will also soon (end of May) provide SAML 2.0 support besides the current OpenID Connect and OAuth support.

Disclaimer: I am one of the authors ;-)
It's funny. Cryptocurrency claims to solve the "trust" issue, but in fact does not.

While individual transactions are secure, many blockchain projects involve some level of trust and risk that is simply assumed to be zero because the project is happening on the blockchain. Examples abound, like Tether and their questionable reserves or SafeMoon and their vanishing[1] "locked" LP.

The existence of rug pulls is proof enough that blockchain doesn't solve any non-trivial trust issues. Otherwise, how could there be an entity that can break your trust and take your money?

[1] https://m.youtube.com/watch?v=kIUrE7Ovm5k
Which {SQL,} databases do this as a native, online database feature; so you don't have to pull backups to sqldiff?

E.g. django-reversion and VDM do versioned domain model on top of SQL, but not with native temporal database features.

Many apps probably could or should be written as mostly-append-only - not necessarily blocking until the previous record is available to hash – but very few apps are written that way, so run sqldiff offline.
I question the assertion that Hare's standard library is "anemic"; it includes a pretty decent set of batteries for many use-cases:

https://docs.harelang.org

Many Hare programs will not need to have dependencies at all. We encourage a more conservative approach to dependencies than is common in many modern languages such as Cargo, PyPI, npm, Go, etc. Even dependency-heavy Hare projects will not have hundreds of dependencies, but maybe dozens at most. Think more C, not Node.

https://harelang.org/distributions/
Robinhood Q1 2022 Earnings: don't give up on this fintech just yet
See other ways to help in my other comment.
The other solutions don't work in the real world either. If somebody says that their Facebook account is lost and can't be recovered, people will believe them and not Facebook.
We do need decentralization for some applications. Few but not zero of us need cryptocurrency.

The problem is cryptocurrency taking over decentralization, and removing some of the advantages(Its usually not fully partition tolerant or suitable for an emergency when your area only has crappy inefficient mesh nets, phones, and 20w solar panels)
An army of scammers need it for their bread and butter.
What crimes are going to move the needle further at this point
It still happens at the company where I work. Of course it is a family owned business so they get to apply their own values without answering to outsiders.
I'm not sure when it happened but all of suddenly the discussion on anything related to blockchain became very black and white. Anyone that tries to nuance the topic gets immediately called out as favouring this or that.
We hear comments like this a lot. Keycloak has a lot of functionality but also a lot of quirks. We have a product, FusionAuth, that folks often consider at the same time.

Similarities between our products:

* Overall base feature set (OAuth, OIDC, SAML, user management, authentication, RBAC) is similar.

* Both written in Java.

* Both use container technology to hide Java from you :)

* Both offer commercial support (Redhat SSO is the commercial offering for Keycloak, FusionAuth has paid editions with support). FusionAuth is much less expensive (compare https://marketplace.redhat.com/en-us/products/red-hat-single... with https://fusionauth.io/pricing .)

* Both offer the ability to self-host.

* Both develop in the open (we use GitHub issues, they use a mailing list).

Differences:

* They're OSS, we are free as in beer.

* I haven't found a compelling hosting solution for Keycloak, most folks self host. FusionAuth offers a hosted product if you'd like.

* Keycloak has more niche features (CAS SSO support) and a bigger community.

* FusionAuth has better, more straightforward docs.

* FusionAuth user UI customization is easier.

* FusionAuth supports a number of languages with client libraries for easier config management. I only saw a python client library for Keycloak.

* FusionAuth supports unlimited tenants, limited only by your server's resources. We have folks running thousands of tenants. Last time I looked Keycloak had issues around 400 realms (their term for tenants): https://keycloak.discourse.group/t/maximum-limit-of-realms/8...

Disclosure: I work for FusionAuth.
No bonfire, no injuries, no conceptions? No sacrifice?

Lame! Truly the Bay area is full of the seeming of life with no substance.
The full XP (SP0?) source code leaked and is complete enough that you can almost build and install it as a working OS. It's still missing components (perhaps most importantly, winlogon) but there's a good chance the edit control is in there.

You can find torrents of the source code online and dig around in it if you don't mind breaking the law (or ruining your chances of being allowed to contribute to Wine or ReactOS in the future).
Where is that? Judging by your comment history, maybe Kazakhstan? I can easily find physical security keys for sale in Kazakhstan. For example miningshop.kz in Almaty has Ledger Nano S in stock.

Besides, you don't need an actual physical key for U2F.
I would be more worried that support will end in few years - no updates and apps removed from play store.
> But does Loom reclaim allocated stack space once the thread's stack shrinks?

Could you elaborate why you asked this?
Is it because it's not done already?
I'm genuinely curious.
After mulling between Elixir vs Go to have a tool in the toolbelt covering the use-case of concurrent server-side apps, I picked a book on Go and went through the first chapter.

Disenchanted to hear (some) concurrency bugs easy to introduce and hard to find in Go. Could someone mention how does this compare to Elixir?
I have been using Keycloak for the past couple of years in my homelab for SSO. It works really well, but there's a bit of a learning curve.
Yeah, sorry.

I would have used .startVirtualThread more if I wasn't under the impression that I needed to do Thread.currentThread().interrupt() when catching and re-throwing as a RuntimeException.

So I was choosing between the noise of that in the examples and the noise of the executor + submit with a lambda that returned null.
Well, the fight between the people trying to create these and those trying to delete it seems to have brought down the demo site. Mission accomplished?
Yep.

If you run 2560x1440 at its native resolution you can fit (4) side by side code windows at 80 characters with a very readable font size. Having 120 character lines only lets you have 2 (3 will cut off the last one by a decent amount).

Being able to comfortably open 4 files side by side is like having access to a completely new world compared to 2. You can often fit the entire context of what you're working on in one visible space.

I use 80 characters for mainly this reason and it's also no extra time spent when using languages like Python because Black will auto-format it for you, it comes down to running 1 command and letting the machine do all of the work.
My understanding is that Go has several features that make it unsuitable as a Linux kernel language, e.g. automatic garbage collection, its concurrency model, and possibly the nature of its runtime dependency (which is related to the previous two items.)
It seems to be a problem with the 2-3px between the columns. Should be easy to fix.
That's kind of standard at big companies. Even at a small scale, it is beneficial to mirror every external dependency.
First person to mint an NFT of this website wins a cookie.
I can only speak from my experience of The LEGO Group in London, but we've been hiring quite aggressively and successfully since I joined a year ago and paying on or just above market rate AFAIK (for London at least)
I take your point, and can appreciate how more familiarly will lead to greater ability to address these sorts of things, but I do feel like your last two paragraphs / “caveats” could represent a massive edge case.
There's also research indicating that certain wavelengths of green light may help with chronic pain: https://pubmed.ncbi.nlm.nih.gov/33155057/
I used to work as part of a larger team in a fintech company before, and found db diagrams to be invaluable.

I'd generate the db diagram for the small set of tables which my PR is touching, and highlight/annotate the changed columns/constraints (using ksnip) and attach it in the PR. It significantly reduced the back-and-forth between DBA/managers and sped up approval times.

I have not found it useful to understand the table structure or domain model (which in our case could be very complex) but for explaining some scoped change/proposal to people who already had domain familiarity it proved to be very useful.
Are you suggesting there aren't mature implementations of hash maps in C you can easily vendor?
If you're allowed to use a second computer, you need at least 4 to match the performance you previously had on the single machine.

http://www.frankmcsherry.org/assets/COST.pdf
how would that work with something like msmtp? https://wiki.archlinux.org/title/msmtp
Building Respawn’s Star Wars FPS Behind the Scenes – May the 4th Edition
There's a culture of forced retirement there too, so it's not at all surprising. Pay generally increases with age so Japanese companies want people to retire.
Slightly out of topic, but based on Caddy, has anybody experience with Caddy Security[0]? It is very easy to install but hard to find other users.

[0]: https://github.com/greenpau/caddy-security
Redis – so much more than I thought it was
Exactly this. OIDC and SAML integrations with customers IdP's. Map identity metadata from the customer into our realm so they can provide data in any way they want and we map it down to our standard which allows our applications to stay clean when using this metadata for business logic.

We have also added an event plugin to keycloak to push login events to a queue for other services to consume.

We also offer local keycloak identities in case a customer does not or can not provide their own identities, and have added haveibeenpwnd logic to check password strength/reuse for these local keycloak identities.
I’m fine with not subsidizing it but we subsidize all sorts of public goods—schools, libraries, etc. It’s not exactly unusual.