skysight-inc/HackerNews huggingface dataset:
My experience is that 1P has a lot more polish and consideration for the user (err, I mean before the "8" debacle). I cannot recall a single time I have lost an autogenerated password, whereas with BW it happened about 50% of the time. Filling up my vault with hundreds of unnecessary password captures is better than losing a single one, because they don't know how important any one password is in order to gauge how "oops, sorrreeee, our bad" affects the user

https://github.com/bitwarden/clients/issues/1620 (open since Feb 2021)

Aside from that, 1P has a ton more item types, which if one thinks about a password manager as a key-value store, maybe that's not interesting, but for me it's been really great having passport details in a specific spot, without having to invent my own taxonomy for squeezing passport details into key-value pairs

Speaking of taxonomy, BW's lack of tagging is a dealbreaker for me. Why in the world do I have to pick just one "folder" for an item to live in: it can be "work" *and* "aws" *and* "testing" allowing me to see all work, all aws, all testing items grouped together

I do hate the new 1P api-only approach, but I'm not going to jump ship just yet because the competition is not yet better for my needs
Well.. it'd be a great time to skimp on maintenance and pocket that difference. Then when the inevitable happens, you can just shout "Russians!"

More directly, I find this conspiratorial view hard to believe given the state of monopolization and infrastructure in the US. There is a much more logical explanation that should be eliminated first before this idea is even remotely entertained.

As someone below mentioned.. if "escalation in Ukraine" is a potential outcome, then you should be very certain of what you claim or allow to be claimed.
My take as a TPM and certified in Scrum: the better and more skilled the team members, the less you need Scrum and other frameworks. Scrum is great for teams composed of new developers who don't yet know how to work together, or teams at companies with poor culture. But the best teams are self-organized and don't necessarily need the guidance of Scrum. As Gergely mentioned, team autonomy is a big factor in job satisfaction (and performance).

But, it can still be worth doing in high performance environments if specific things are needed. Part of being Agile is adapting processes to teams, and some Scrum processes can be useful (relative estimation for example) even when not doing Scrum itself.

As an aside, Gergely has a newsletter[1] (of which this is one of the free articles) that is absolutely fantastic. It's $100/yr IIRC and well worth it. Gergely deep dives into topics around tech including hiring, structure, comp, etc.

Gergely also has a book[2] that helped me get hired in SF when I moved here a couple of years ago.

[1] - https://newsletter.pragmaticengineer.com/about
[2] - https://thetechresume.com
> Initiating a DDoS is costly in many cases.

It's not.

> It exposes infected bot net nodes

so?

> pulled off the botnet by their owners or ISPs

in maybe <0.1% of cases, unless you're trying to abuse port 25, which is not being discussed here.

> Botnet owners don't randomly let their botnet be used for anything unless they're paid well for it

That's just not true. Botnets have never been cheaper, and despite all of the pageantry by Microsoft et al, the reality is that organized distributed-origin attacks expand far beyond just being general rabblerousers, and are on the rise. Our abilities to detect, thwart, and report on them are far outnumbered.

Without any previous established reputation you can log on today and command a large swarm to do your bidding on almost any target for less than the cost of a tank of gas. Botnets large and small, and for all purposes are available, to anybody, for meager first world sums.

Botnets are not always 1 bot 1 stone thrown. People often mistakenly equate large attacks with large bot swarms. As we learned with amplification attacks, or even the primitive malformed packet attacks, big things quite often come in very small packages.
Yes, keeping slaves and saying words you don't like are equivalent crimes worthy of warfare.
What is normal about this? Engineers should be empowered with ownership. Adding. friction or barriers to enabling engineers to make what they own better is backwards and counter productive at best. At worst, it discourages proactive willingness to make an improvement.
> I also lived in the US for a while...to observe how my grandparents lived in cruel times.

What is that supposed to mean? It comes across as an insult.
You can participate by actively seeking to avoid purchasing products made in China.
I don't mean to be pedantic but the same emmigration/immigration distinction exists in my native language, Portuguese :)
I’ll get a bit conspiratorial for a bit - the Russians just know that no sabotage may be allowed to be linked back to them. Otherwise, public support against them would immediately swell and every bad event would be speculated to have been caused by Russia. As such, it’s possible that this was Russia quietly trying to erode US/EU support for the war.
The article mentions Plan->Iterate->Ship a lot.

How is this essentially different from Scrum sprints?
You also have to know them well enough to avoid the shady areas, not look muggable, not be female, not be small, not carry anything that looks remotely valuable, and only walk during daylight hours or else you're taking a significant risk (though all of that didn't save me from random verbal abuse when walking around the city or taking public transit nonetheless). And you have to be cool with places being totally filthy, and regularly cross 6-lane roads on a regular basis (yes, most of SF is like this). Plus you have to have a thick skin to see the abject horrors of homelessness and drug addiction everyday and convince yourself, "yup, this is normal and totally fine".

Yeah, that was fine for me when I was a 20 year old, relatively large man who didn't know that the rest of the world has much more hospitable places for pedestrians and human beings generally, but no thanks today. Kinda depressing that at least from a walkability standpoint it's about as good as it gets for the USA.
You find it normal that you need a Jira ticket to update documentation?

If while reading a document, you find a mistake, instead of changing it, the normal reflex is to create a Jira ticket?
Go further: services will offer features in exchange for more data. Your worth could be tied to how private you are with your data... ie. more data hoarding = more valuable target. This creates an incentive structure for users to hoard their data, only selling it to their most important services, and services themselves will attempt to create features that make providing that data worth it.

The reason people blindly say ok to every permission popup is because there's no incentive to say no. So yeah, your concern makes sense now but it might not in a "web5" world. I can guarantee any app saying "please give us all your data to use this" would get btfo'd very quickly in a world where people can use their data as leverage.

Technology influences behavior and mindset, and I think this particular idea might be a good influence. It's certainly better than what we have now where every service simply takes all your data or buys it from other companies.

My primary concern is data integrity; is storing the data on the global network good enough to disincentivize apps from scraping local user data with their own tools? What would stop an app from using the protocol and also maintaining its own database? Is that actually part of the deal? For example: Bring data from other apps to this one, and you can access a set of features. This app will now mine new data to put back into the network?
This is a common problem. Acronyms are short but provide less information. Without the proper context it is difficult to know what do they refer to.

In Wikipedia, your interpretation is the first result: https://en.wikipedia.org/wiki/ML
I disagree with it moving quickly, all it does is encourage me to not update documentation and not actively improve the code in other ways due to inane bureaucracy. And surprised surprise, no on else on the team wants to document anything either; people get burnt out because they have no autonomy and just leave.

All is good tho! We followed the process and that's the only thing that matters.

I wonder what the corporate equivalent to "I was just following orders" is?
Neat idea, I’ll definitely try this out! Why not use SQLite instead of MongoDB?
Finding the street from a video
I don't think live-coding compilers puts anyone above criticism.
Author here. We learned this a couple weeks ago when I blogged about logging C functions. https://news.ycombinator.com/item?id=31443198#31444751 I've been in contact with several employees trying to get it resolved. One of our regular contributors is even a staff security engineer at Amazon and he's just as confused about what's happening as the rest of us. There's a real lack of transparency so far on the part of Amazon and there's no official channels for appealing these sort of black box decisions. It's a real shame, since this isn't just my blog, but it also represents all the people who've been working hard to contribute. If we've been blacklisted by a company like Amazon then I'd like to at least know what's wrong and what steps I can take to address the situation.
Would you be in favor of charging infrastructure being run as a public utility?
I'm reminded of the 7th Day Adventists.
It's hard to have a predatory monopoly on something anyone can produce directly from something as widely available as sunlight. This isn't finite black gold pumped from select regions of the globe, transported and refined with substantial large-scale hazards at every step.

If charging station prices skyrocketed, competition would appear overnight with chargers popping up in every available parking space until the prices stabilized at something reasonable enough for sustaining the industry at a FMV.
Use reader mode. Worked for me in Safari on desktop, anyway.
UK has excess non-covid deaths as well

https://www.euroscientist.com/uk-recorded-more-than-10000-ex...
Semantic versioning is public facing, but you’d still want to maintain a simple increasing build number of versioning.
Is there a lot more to it than "random waves, it's less and less likely for them to overlap more and more, but sometimes that too happens"?
> This is completely devastating for my trust in this software and company.

Okay, I guess you should ask for a refund, then.

Yes, that's a snarky response, but in all seriousness, the BW team is good at refunding, so if you're unsatisfied, ask for a refund and move on.
What is normal about this that Ive seen is work and tickets is often written into controls that are required for things like SOC compliance. And documentation often requires a pull request.

And again read what I said, that engineers can and could be empowered to make these tickets, which can be minimal at best.

Done right, its not a limitation at all, and instead adds accountability.
A couple of weeks ago, 181 comments

https://news.ycombinator.com/item?id=31558038
The Mall is one of many rapidly disappearing common spaces.

For example, I elect to spend a little bit of time at the laundry, Even though I could use an app and pay three times as much...

I actually just like having an excuse to get out of the house on weekends, and in my younger days I even met a girl like this.

I'd love for the malls of the future to be a hybrid of residential and retail. Connected to other mall/hubs via public transportation
In hindsight I'm not sure if I prefer Platinum over System 7. They both looked good and evoke nostalgia.
I too would avoid the threat of having my skull bashed in by choice.
Yeah, formal verification of software is sort of a niche topic, formal verification of hardware is like, one of the primary tools. Shit even something like Built in Self Test, which is common in hardware, I’ve seen only rarely, and never comprehensive (I’m also not sure comprehensive BiST is the right way to think about reliability for software, it’s probably only very specific things that actually want that)
The most likely explanation is an industrial facility running close to 100% utilization, likely with reduced or poorly trained staff due to COVID and a tight labor market.
> who gets a Covid test these days.

Funny you ask, I took one this morning and tested positive. First time testing positive. I’ll admit I thought Covid was over at least until the fall. But I was feeling off and didn’t want coffee. Since we had a bunch of extra tests I said why not. Was kinda shocked. Now I am stuck in bed reading HN.
Hey, I'm also from Brazil.

I understand you totally. Brazil is a diverse country and our situations were far different.

In my case I was already working remotely for a US company, and living in a small city. My salary was 50% smaller than now, but the jet salary was actually higher due to cost of living and taxes. Life was relaxed. I lived in a small town so not a lot of crime worries. I routinely forgot my kindle outside and it was fine. I only locked up when going to bed.

Dm me if you want to chat about this stuff :)
At the beach nobody bats an eye about being nearly naked. But in the library, we're scared someone might look at the same exact part that's on display at the beach. A place where it used to be taboo to expose skin, btw.

I believe that this fear of men ogling women in public is a direct byproduct of us being afraid that men will ogle women in public, and thus women's behavior and fears are a result of aforementioned fear, which in turn encourages men to act that way because it's expected. The whole thing is a self-perpetuating taboo. It's completely made up.
What I meant is to start a conflict (intentional or unintentionally) to get US military involved. Just watch the local news commentors there. It is definitely been constantly discussed.
“Jim is so productive!”

-by design Jim is the only one allowed to be productive-

:P
> Well.. it'd be a great time to skimp on maintenance and pocket that difference. Then when the inevitable happens, you can just shout "Russians!"

except, that's not how natural gas plants work. Shouting "Russians!" doesn't pay the repair bills, nor does it make up for the lost revenue in the meantime.
Is Time on Ukraine’s Side?
It is yes. Because their initial goal here was instead to go in and overthrow the government in a couple days, while not expecting any significant international response.

There is a huge difference between their initial expectations, and what actually happened. And now they are in too deep to undo their mistakes.
> I've met humans with the same quality of always speaking with confidence

You should have met some devoid of any expected key for understanding, for that matter. But if they had read the whole of the available encyclopedias, it would be interesting neurologically (à la Oliver Sacks) what determines their pseudorandom nonsense. Not paramount, just potentially interesting.

Although, surely, that reinforces the perception of one lacking in below said "operational description of Intelligence": that held ideas are criticized.

> is not, in some way

At this stage, I would prefer that first we achieve the milestone of "Intelligent", operationally described many times and practically meaning "something that makes it worth to listen to what you output", before going into more difficult areas.
it gets dark around 4pm in seattle in the winter
> Trust is a feature, not a bug.

It's a feature of the system, precisely because it replaces trust in shaky institutions.

I trust strong cryptography. I don't trust governments not to abuse their power. I don't trust corporations not to maximize profits at our expense.

It's really simple. I don't believe in any system that requires trusting either governments or corporations. A good system will necessarily work despite them.

> we should strive for a future where humans are not motivated to hurt other humans. Not treating it as some sort of default is a good start.

Trust is inherently selective and small scale. You trust specific individuals that you personally know, not all of humanity. Even that trust is easily broken.

Compare that to modern computer and internet technology where servers are expected to receive input from any other computer on earth. The technological equivalent of children being encouraged to talk to strangers.
Hello, author here! You’re right that I didn’t mention many other products in the broader PDA market. The article was about the Newton, and believe it or not, there are still word count limits for online articles. Discussing other products would have taken away from the central story. The hint about Palm was meant to get people interested in finding out more about similar devices.
A retired American with a $1M+ in their retirement account but who needs to stretch that over 20+ years isn’t what I’d consider rich.
Well.. Australia and Canada have more significant housing bubbles than the US without this. So how does that work?
Stem Cell Therapy is going on 24 years now (1998). This argument is flawed too.
https://www.amazon.com/Computer-Networks-5th-Andrew-Tanenbau...

https://www.amazon.com/Computer-Networking-Top-Down-Approach...

I'm using these two. The Tanenbaum book has a 6th edition, and I think the Top Down one has some newer editions as well. Not sure if they're the best, although they do seem relatively thorough, especially Tanenbaum.
> So, statistically, how many more years will it take for me to be hit again?

I don't know, but these are not independent trials. Maybe some of the people who saw your first post will come back for more. Good luck to you.

As for "in five more years": eventually, some of these polished, well-written pieces will be appearing under a single cover, all at one convenient price. We could call it a "magazine" (tm).
It depends on the documentation. Is it within a repo? Does it require a pull request? Is it a quick edit, or is this a multi hour effort that is redoing the scope?
I'm not familiar with the tool, but naïvely I'd think offering an "include attachments" checkbox would give the user control over backup size. I know that might complicate the UI a bit and maybe even confuse user by having the option, but expecting all of your data to be backed up and only discovering that it isn't after it's too late isn't stellar UX either.
The alluring premise of any pg's essay is that if you are smart, the execution can be challenging, but the idea comes easy. Which is attractive to his audience, because it is mostly made up of self-considered "smart people". To others, the words can sound quite banal.
> We have something that can talk intelligently, but might be doing it mechanistically. ...how do we even tell in that case?

We don't need to and we shouldn't care. If repeated interactions with such a system demonstrate problem solving ability, long-term and short-term memory, context-aware information processing and capacity for self-improvement, we've come pretty far from a purely mechanistic statistical model.
You can't make a language "idiot proof" but by changing how we think about the problem we can make a huge difference.

The trick is, what programs do we even want to exist? There's no need to be able to write all the programs you didn't want. In Rust, such programs get consigned to unsafe, which means that yes, sometimes to do general purpose programming (and especially e.g. in Rust's own stdlib) you must use unsafe Rust. But it already means we can constrain "idiots" (or more reasonably, new programmers) to safe Rust and rule out all those problems that aren't in the reduced domain of safe Rust.

You can go much further than Rust. WUFFS isn't a general purpose language at all. While a Rust compiler written entirely in Rust isn't a priority it'll likely happen sooner or later, but a WUFFS compiler written in WUFFS is nonsense, WUFFS doesn't even have strings. WUFFS is for, well, Wrangling Untrusted File Formats Safely, hence the name. Notice not files just the file format. WUFFS has no idea what a file is, no file APIs, since it doesn't know what strings are it couldn't easily name files anyway. But inside its domain WUFFS gets to be 100% safe while also being faster than code you'd actually write in other languages.

Take buffer overflow buffer[n]. In a language like C++ direct access isn't bounds checked and so overflows are common when n is too large, too dangerous. OK, in a language like (safe) Rust this access is bounds checked, now the overflow is prevented when n is too large but the bounds check cost CPU cycles, a little slower.

WUFFS doesn't do either, in WUFFS that variable n was used to index into buffer therefore n is constrained to be 0 <= n < buffer size. If the compiler can see any way that n might exceed this constraint your program does not compile. As a result at runtime there's no overflow and no bounds checking.

A complete idiot's WUFFS GIF decoder might be wrong - it could report spurious decoding errors, it could decode a blue dog as a pink roller skate, render images upside down or even decode JPEG instead of GIF - whatever, but it can't escape the limits of WUFFS itself. It can't go off piste and send your password database to a remote HTTP server or delete all your logs, or send spam emails or run some machine code it found inside the supposed GIF file.
I'm not an anthropologist, but I think the effectiveness of groups like the Freemasons indicates the power of myth and superstitious belief.
As someone who does have Black enslaved ancestors: Sure, we can discuss comparisons among transatlantic chattel slavery, the treatment of the helots, or the people trafficked south along the Volga.

The problem with a CEO calling themselves a slave is that it pretends that someone who has made an active choice to start a company is a victim. As this article shows, a CEO can choose to walk away from their company without fear of violence or starvation. If I meet a CEO who labels themselves enslaved, that tells me they are unwilling to recognize their responsibility for their own choices. That mindset makes them unfit to hold the power of the leadership position they aspire to.
Yup. Or at least there was significant fear about it being a new prion-related neurological disease. Since then, the government has "investigated" and been pretty vocal in denying any environmental causation or even any connection amongst patients whatsoever. In fact, there is apparently no "shared common illness" at all:

> An oversight committee reviewing the case files of all 48 of the potential cases found that the patients didn’t have symptoms in common or have a shared common illness.

> A separate in-depth epidemiological investigation last fall concluded the patients didn’t have any common behaviours, foods or environmental exposures.

> Following these reports, all the patients were excluded from the cluster and the Minister of Health has accepted the conclusion that no such neurological syndrome of unknown cause exists in New Brunswick.

https://www2.gnb.ca/content/gnb/en/departments/health/neuro-...

Our government has a long history of arrogance and paternalism (probably nothing too unique there), and incredibly deep ties to the most powerful corporation in NB (again nothing new there), Irving, which has a uhh, let's just say, tenuous relationship with the environment and pollution. So it's hard to say whether or not one should believe the government's conclusion. But there it is.
I was recently looking at the state of the contractor market and was shocked by the prevalence of Scrum, the lack of distinction between Scrum and Agile, and the number of places that apparently think Scrum is a modern development process that will appeal to good engineers. Perhaps they'd like people to go through a four stage process lasting about a month and including a weekend-long take home test and a LeetCode panel interview as well? At least it makes it easy for anyone who is better to stand out!