skysight-inc/HackerNews huggingface dataset:
Outsourcing in the 2000s was difficult, technologically. Zoom meetings didn't exist. Github didn't exist. Continuous integration and automated testing was not really a thing. There was nothing like Slack. Screen sharing was difficult if not effectively impossible. Remote work is much more practical today, and the pandemic gave it a huge turbo-boost. I don't think we'll see a replay of oursourcing from 20 years ago (which was generally a debacle, no argument).
I used to be a lawyer at a prestigious firm. When I quit to bootstrap a startup, my mom had a hard time explaining it to her friends. She got her pride back when I was interviewed on NPR.
Proxy preauth could be able to mitigate a vulnerable framework. The idea is that you never connect to the application server itself, but to a proxy that requires a separate authentication. That’s obviously not possible for a public-facing application.

Now, if the attacker has access to the proxy authentication, all of this doesn’t help much, but at least you could track and limit who can access what chunks.
Seems similar to twoslash:

https://shikijs.github.io/twoslash/

https://github.com/shikijs/twoslash
My grandfather once built a phone line simulator you could connect up to 8 or 10 phones to and actually dial them by a one-digit number. I think he got the schematics from some old electronics magazine. Definitely one of the coolest „toys“ I ever got as a kid.
My parents have both passed on but my mother never really believed me when I told her what I did for a living until I was almost 40 years old.

My first job was building custom cars with my father when I went to live with him when I was 14 years old. We worked on a lot of cars for movies and celebrities in Hollywood. My mother lived in Rockford, Il and, honestly, I didn't believe my father either until I moved there to live with him.

Years later when I was in my 30s I started learning how to program and my mother didn't believe I could ever do that until I started a business. And, to make even harder for her I was building web sites and ticketing software for entertainers in Branson, Mo.

She ended up moving here shortly after I did and got to meet a lot of them and she was like a teenage girl when she did, calling all her friends and telling them about it, and bragging about me. She was too cute. It was awesome to see her get so excited.
Yep and you can also set it to just use one shift lever for up and down shifting. It will shift front and rear as appropriate to get you a higher or lower gear. In practice this means sometimes it shifts the front and then moves the back up or down 2 or so gears.
That's great feedback, thanks! Our product and the explanations are currently tailored to heavy note-takers. If you're interested, you can start getting into the topic here:
https://capacities.io/blog/how-to-create-the-knowledge-base-...
or to get an overview see here:
https://capacities.io/blog/guide-to-pkm

Feel free to reach out at any point.
You should read the report on Brett Goldstein: he was forced out of government for using signal.
> riding a bike would be a higher risk than driving because of lack of adequate road shoulders for much of the route between my workplace and home.

Is this an empirical statement or based on the same gut feeling that makes people feel safe in a car?

I'm asking because when you actually run the numbers, in most cases I've been involved in, you get to be very surprised to see just how safe cycling really is.

I don't know what the culture and road type is around your neck of the woods, but I would prefer a road without a proper shoulder most of the time -- simply because the existence of the shoulder provides very little actual safety, but it does give a sense of safety that makes drivers behave more dangerously near cyclists. Not to mention lower quality road surface, collected debris, etc.
>Rust can work this way, but mostly doesn't by default. It's like you were programming in C++ but instead of normal copies and references, almost every single variable use was a std::move. Profoundly unintuitive. I just used this variable, why can't I use it again?!

This was my experience of rust as well. I've since forgotten exactly what I was trying to do (it was a year ago now), but a seemingly innocuous check of the variable I was using meant I couldn't use it immediately afterwards. I have no issues with move semantics in C++, but making that the default behavior in rust made it a pain in the ass to use, especially when it doesn't seem to be consistent. I ended up rewriting a week's worth of rust in C++, including the unit tests, over two days.
I followed Canter’s article to season my pans, back when it came out, and have had no trouble with them since.

Cook’s illustrated did a short piece on the method not long after it came out too, and found it satisfactory, at least with a minor tweak or two,
I'd say they're worth the same in a value sense (if we're talking remote then they're doing the same work, after all), it's just that their price is higher.
Everywhere that manufacturers let you make order and wait for your custom car instead of buying from a lot (isn’t that a US only thing?) the dealerships didn’t go away.

Dealerships are important as showrooms, service centers, a place to sell (slightly) used cars with brand warranties etc.
Not anymore they aren't. SRAM sell far more high end groupsets than Campy these days.
I have heard CA EDD is now sending out some letters requesting more information. They are probably backlogged, but they might respond.
This is amazing. Hope it can be adapted for Unix command line use.
Just like Ford can give the purchaser rebates, they can give the dealer rebates or holdbacks or various other payments when the car is sold (or if enough of certain types of cars are sold) or payments while the car is unsold; just because Ford sold the car for $20,000 doesn't mean the dealer gave them net $20,000 for it.
It's at most 50% faster than Java and C# and not faster than C++. An order of magnitude would mean 900%, not 50%.
Well, the cat will be at cat temp, which is warmer than the room.

Cover a cat with Vantablack and you'll be close to your black-body cat.

(Be aware that this might not be good for the cat: it might make the cat too hot, I don't know the toxicity, I don't know how it affects self-grooming, etc.)
> If you truly have ABSOLUTELY NOTHING and no access to credit you may be able to hitchhike and/or work on boats/yachts to get to any nation in the Americas.

How does this work? Do you just go to the docks and start asking randos if they’re going to X and also looking for labor?

> Also YPG and some Kurdish militias I think still accepts recruits and they don't require anything past your flight which you could buy on credit.

Not sure I’d recommend this in particular unless you’re really truly willing and ready to die. Sure, any military service where your in a combat role is a significant risk increase, but this feels distinct from joining something like the , backed by a secure NATO-aligned government, with new and top of the line equipment. As FFL, I imagine most any combat you see these days is going to be against insurgents that you have the upper hand on. Whereas going to fight with the YPG you may end up vice versa.

FWIW a friend of a friend did this, and indeed was killed rather soon.
GP meant that oftentimes exploits use a specific entry point on the public surface and blocking access to it acts as a stop-gap measure.
Someone is going to have to square this with executive branch records law. You can’t have a democracy and IngSoc. That’a not how either of them work.
Yes, and in fact ANT Private (proprietary protocol) has been reverse engineered before. But this is kind of new territory for these manufacturers, and Shimano tends to be quite litigious. In fact the reverse engineering attempt I remember has all but been scraped from the internet: https://hackaday.com/2019/03/26/reverse-engineering-shimano-....
We’ve applied protection for all Cloudflare customers, including those on our free plan: https://blog.cloudflare.com/cloudflare-customers-are-protect...
Your link points to a vulnerability that could have been mitigated by putting the internal application developped with Apache Struts behind a proxy server like Nginx or GCP Identity Aware Proxy (IAP) that authenticate the request before the request is forwarded to the application server.

This only applies to apps for internal use like Confluence or Jenkins, not publically accessible websites.
in india, the judiciary is all advocates and judges only. every case is decided by a judge/2 judges/N judges.

the reasoning is, a common person does not have the knowledge or skills to decide the case.

the lawyers here have to convince a judge for their arguments and facts, not a jury...

imo how can a common person decide a matter of facts or matter of law when they do not possess the skills ?
Both of my parents just say that I'm a programmer. However, both constantly tell me I don't actually work because I work from home ¯\_(ツ)_/¯ lol
I'm don't follow. If you have a pre-auth reverse proxy in front of your web application, you drastically reduce your attack vector.

An unauthenticated attacker can no longer simply rely on a vulnerability in the application or underlying framework, but must first obtain an employee's credentials, or find another vulnerability in the proxy or authentication infrastructure.

This isn't a false sense of security. It is a concrete additional layer of security which has tangible benefits.
Though most people don't get the hang of it.

Some people also get into C++ templates and build complicated things with them for fun (eg the whole subfield of template metaprogramming came from inventing a clever abuse of the accidental power of templates as a poor man's macro system)
This lands the day after di2e.net shutters their IL-2 instance? Coincidence?
Conti ransomware targeted Intel firmware for stealthy attacks
https://hitchwiki.org/en/Hitchhiking_a_boat

I got a 'free' ticket from Seattle to Alaska once by working on a boat :)

>FWIW a friend of a friend did this, and indeed was killed rather soon.

Sorry to hear that. I was in YPG for a few months in 2015. You're right it is dangerous, especially for those who are especially brave or end up in a unit that really embraces 'sehid' (martyr) culture. Rojava also offers some civil volunteer opportunities. Generally if you act like a criminal / psycho / weirdo you get filtered out before you can do much damage. There's no paperwork but I think parts of the middle east operate by the old code of a man being judged by his actions rather than formal paperwork from the state.

I have no personal experience with FFL. I know it's much more selective than YPG. The upside is you get French Citizenship. Therefore there is healthy competition with people from the 3rd world seeking a relatively high wage and EU citizenship.
It makes sense because it is disruptive and people are not static spreadsheet entries of location and max pay. And most tech workers are savvy to what tech companies can make and that they are fighting for talent.

The very talented person in the cheap country who was going to fly to the US to earn more now applies for this job, so this company wins.

The SF resident who hates SF and who is up for living abroad but wants to save for retirement still: same thing.
Jonathan Waters, Chez Panisse wine director for 32 yrs, dies after bicycle crash
Sure legally you can but then shimano can choose to break their contracts with you.
Rust has hit the point where it's in the conversation for what language you'd write a new project in, even for big companies (typically the most lethargic). I'd say it's at the level of mainstream where there's Rust being written in a significant portion of the industry, but not at the level of mainstream where it's somewhere in the stack behind most of organised society
https://techcrunch.com/2015/02/28/beware-the-pretty-people/

You reminded me of this this article. I always struggled to find it until today. It's opening paragraphs warned about the same thing you talk about.

It's funny to read this now and see how they think about Bitcoin and Uber vs today
This is local only over a pretty simple communication protocol. Hammerhead had previously licensed that protocol, but Shimano cancelled the contract when Hammerhead were acquired by Shimano's largest competitor.

I'm not a lawyer so don't know if they _need_ to have a license for the protocol, but presumably they think they do.
Speaking from the perspective of working remotely for over 5 years with multiple teams (all of differing compositions): salaried + contractors, US (all three timezones) + South America + Europe (Eastern and Western) + Asia, junior + senior + staff engineers, etc.; and being involved in plenty of interview loops for remote engineering positions.

You're missing two key reasons why salaries won't normalize to developing country level pay:

1) Timezones are painful. +3h west to east coast US is usually tolerable if not slightly inconvenient at times, but not too bad. +5h and above starts to strain team dynamics. East US to London/Ireland caused more than a couple great US engineers to seek greener pastures within other teams at the company; a few teams had difficulty staffing majority European teams with US talent. A 50\50 split was usually more tolerable. Any time difference more than that within a team is insanity. Feedback loops become too large, there's no cohesion, and a host of other issues.

2) 10M+ engineers at the senior level don't exist. You want engineers that can autonomously churn through "we have a problem with no identified solution" situations. These engineers earn 2x to 3x their cost through technical leverage. At the senior+ level, talent supply is lower than demand. And if you want to train up an employee from junior to senior, good luck doing that with a timezone difference > +3h.

As long as there are tech companies printing gobs of money while demanding more talent than is available for engineers to produce $$$ for $, then salaries won't normalize to developing country pay.
> How are you going to have direct sales depots in every random town in the world?

How about The Internet? Might work…
My reading of the OP and the video posted elsewhere in the thread is that in building support for the proprietary extensions used by Di2 Hammerhead entered into a licensing agreement and was granted access to non-public Shimano documentation. So while it would probably be legal for them to RE the Di2 extensions, that would be legally different than continuing to distribute software developed with Shimano's permission and support.
Google Voice number expiration warning is confusing.
Google Voice will want to expire your number if you aren't using it enough. If the countdown starts, to do so, they should (but don't?) send a warning to the phone number it gets forwarded to. Also, their "expire" / "reclaim" / "be reclaimed" terminology is confusing.

Remember that with domain names, at least, there is an intervening grace period. Google should do likewise.

(When I first published this post I had been under the misimpression that my Voice number was gone. Fortunately it was not so.)
Cruise gets state permit to offer paid driverless taxi rides in San Francisco
You don't need async. It provides no performance benefits if you're not using a garbage-collected runtime.
> There is no way you grow up in Tamil Nadu and not know about caste because of how caste politics shaped the conversation.

Oh boy. I guess pichai would have quite a different story about this and
It's right there at the start of that section:

> The term "affirmative action" was first used in the United States in "Executive Order No. 10925",[17] signed by President John F. Kennedy on 6 March 1961, which included a provision that government contractors "take affirmative action to ensure that applicants are employed, and employees are treated [fairly] during employment, without regard to their race, creed, color, or national origin".[18] It was used to promote actions that achieve non-discrimination. In 1965, President Lyndon B. Johnson issued Executive Order 11246 which required government employers to "hire without regard to race, religion and national origin" and "take affirmative action to ensure that applicants are employed and that employees are treated during employment, without regard to their race, color, religion, sex or national origin."[19]

You asked for:

> is there other form of affirmative action that are not : - just a type of quota to give preferential treatment to a group of people not because of merit but simply as a way to increase diversity for some arbitrary measurement (gender, race ...)

Are you asserting that treating people fairly (what JFK said) is somehow not "because of merit"? If so, there's the difference of opinion I was recommending you learn about.
>I wish there was a Rust-like programming language that was just a little bit higher level than Rust.

I think F# might fit this role.
No talented engineer is going to look at a wage that is 2-3x locally in relatively poor conditions (crowding, sanitary, etc.) and think it’s a better deal than what they can get by emigrating. It might not be as bad as the outsourcing debacle, but it’s not going to be much different.
This is fantastic. Also, hilarious.
Cybercrime intelligence API with a lot of useful free useful features
We recently launched our API which includes some completely free features that could be useful to any cybersecurity researcher & pentester.

You can use our "preview API" for free for:

End user protection - look up email addresses and check if the email address is associated with a computer compromised with an info-stealer.

Domain Intelligence - discover how many compromised employees & clients a company has based on their domain and discover which URLs they had credentials to.

Assets Intelligence - query across hundreds of millions of URLs and find which technologies are used by different companies

3rd party risk assessment - insert a domain of a company to find how many employees & clients they have compromised, and which URLs they mostly accessed with their compromised credentials.

IP address lookup - insert an IP address to check whether it is associated with a computer compromised with an info-stealer.

https://cavalier.hudsonrock.com/docs
> but it is the most overt explicit discrimination that I see every week.

Could you give some examples?
Dislike of yuppies is almost 40 years old at this point.
That is impossible to surmise.
> flip-flop every 6 months between thinking that everybody can do this and being absolutely floored that I myself can keep up with this.

I agree that it takes a certain way of thinking to be able to reason about strict logic and symbolic relationships. Just ask someone what (X or Y) equals when X and Y are both true. I knew people in my CS classes right up until the end that couldn't tell you correctly (because people in regular English think of "or" as "exclusive or" and its hard for some people to change their understanding).

I disagree with the concept about the rapidly changing tech jargon. I think in SF tech startup scene it may be that crazy, but once I start a job, I use their stack, and it stays that way for years. Different companies different stacks though. Big-Tech is even easier since they have their own custom stacks that are pretty stable.

> I'm not a doctor/surgeon, but I don't think that the kind of work they do changes year to year at this pace?

On the contrary. It changes all the time. They always have to be learning about new medication, new surgical techniques, new diseases. Ask a doctor in 2019 to diagnose the Sars-Cov-2019 Novel Coronavirus. Then ask them about ivermectin.

> I guess you could say that none of these concepts are really that difficult conceptually, but...what is...? Algebraic Topology? Chaos Theory?

I would say that real theory is actually pretty hard in CS. Math is famously unapproachable to people who don't "get it" and I think CS theory shares similar logical rigor - honestly similar to law and how it is a "different" logic than most people are ready for.

I know rocket scientists, and their classes were actually-intense math - but conceptually/logically easy IFF you could do the math. The basic biology of how a viral infection works is pretty straightforward (and taught to 13yo's), but again, thats not the hard part of the job of a doctor.

But most CRUD apps are not. And most people write CRUD apps. At my BigTech jobs, the company always had custom-in-house build tools that were great at doing deterministic reproducible builds and they were always based on strong theory and rigor and had white papers. But how many people actually have to do that at those companies?
>Rust isn't hard. Programming is hard.

Programming should be hard only if the problem you are trying to solve is hard. Creating an boring CRUD app shouldn't be hard. Predicting with a good degree of success the market trends for stocks and options should be hard.
It is local, purely happen between the shimano di2 junction box on the bike and the bike computer.
The site can't be reached. Pretty sure building the site is more fun than doing e-commerce sales.
That would be the definition of it not working.

This HN post causing 1000 people around the globe to apply is what it means for it to work.

People in SF with high COL probably will not apply. Unless they intend to move as soon as they get the job.
This sounds like a good life no matter how long it is
He is not that old so he was just excited that it could drive around haha
That laser at the end looks like it can blind you just by looking at it sideways.
Sounds like requirements Nix solves
This is good too, but that MAGMA the other guys suggest makes sense and is a real spelling of a word. I like it!

Also GAMMA could be good:
Google - Apple - Meta - Microsoft - Amazon
Interesting, I’ve never heard of this. Has it fallen out of style mostly? I don’t think I’ve ever seen a hitchhiker in my life, mostly only in old media.
I think you will find a lot of these people doing embedded, desktop, or enterprise intranet stuff rather than slick web/mobile products or massively scalable backend APIs. Using dated and uncool stacks. Dated and uncool practices. Windows centric. Hiring more about years of experience with particular framework versions than LeetCode or system design interviews.

Two perrenial favorite pieces on this website include Dark Matter Developers [0] and We Only Hire The Trendiest [1].

[0] https://www.hanselman.com/blog/dark-matter-developers-the-un...

[1] https://danluu.com/programmer-moneyball/
I have an academic mathematics background and I'm perfectly OK with this.
Automatic switching came decades before automated billing. See "Operator Assisted Toll Dialing" (1949).[1] The operators are tone-dialing calls, but the billing system is entirely paper based.

Billing automation came in the 1960s, but didn't involve computers yet. Special purpose hardware, paper tape, and punched cards were involved.

[1] https://vimeo.com/390769230
I'm coining GAMMA:
Google - Apple - Meta - Microsoft - Amazon
In that case it is legally broken and or there are terms within the contract that would assume penalty if done afterwards.

I assume it would have been easier to reverse engineering than sign a contract as there would be no annoying term.
Great timing. Here in the UK it's a four-day weekend. Can imagine that many affected will see this too late...
He was simplifying for clarify, but what he said was just another form of what the person above him said which was:

>> no matter what problem you can think of, either it has already been solved to the highest level of abstraction, or it's an unsolved and famous problem, or not worthwhile/trivial. <<

So, Millennium Prize is an unsolved and famous problem like Reimann Hypothesis, etc..