skysight-inc/HackerNews huggingface dataset:
Would love to see Python support. This project and your libc sort of break my brain and I reverse engineered weird stuff for a decade professionally. I understand how it all works, but it is easy to understand something once someone built it. Some of the design choices and constraints were just not things I would have thought reasonable for a project like this.
100% this. If it's really sooo bad, why wouldn't you just leave instead of staying in order to suffer and create mischief? Musk built the company. It's his. It's revolutionary. Go elsewhere if you don't like it. One has to ask questions about the true motives behind it - Musk has powerful enemies including Biden etc, lest we forget.
Go has much more footguns in my opinion. Just look at the recent thread on the topic: https://news.ycombinator.com/item?id=31734110
> I honestly wonder how many of these security vulnerabilities are truly issues that never would have come up in a more "secure" language like Java, or if the vulnerabilities would have just surfaced in a different manner.

Memory safety vulnerabilities basically boil down to following causes: null pointer dereferences, use-after-free (/dangling stack pointers), uninitialized memory, array out-of-bounds, and type confusion. Now, strictly speaking, in a memory-safe languages, you're guaranteed not to get uncontrollable behavior in any of these cases, but if the result is a thrown exception or panic or similar, your program is still crashing. And I think for your purposes, such a crash isn't meaningfully better than C's well-things-are-going-haywire.

That said, use-after-free and uninitialized memory vulnerabilities are completely impossible in a GC language--you're not going to even get a controlled crash. In a language like Rust or even C++ in some cases, these issues are effectively mitigated to the point where I'm able to trust that it's not the cause of anything I'm seeing. Null-pointer dereferences are not effectively mitigated against in Java, but in Rust (which has nullability as part of the type), it does end up being effectively mitigated. This does leave out-of-bounds and type confusion as two errors that are not effectively mitigated by even safe languages, although they might end up being safer in practice.
As the one who originally publicized the fact that Apple was leaking users' app launch data like this, I was surprised that they even committed to fixing it.

I was doubly surprised when they failed to follow through; it is unlike Apple to lie.

Note also that the link to my site in the first part of TFA is to the wrong article; the OCSP issue is related to app launches ("Your Computer Isn't Yours"), not the fact that each Mx macOS update phones home a) in plaintext and b) with hardware unique identifiers (your ARM's ECID) on every single OS update (this is TSS, not OCSP). This allows passive listeners to sniff your unencrypted HTTP TSS traffic that contains your system's unique ECID, and, via client IP geolocation, infer your travel/location history unless you remember to always update over a VPN.

Different types of bad plaintext phone home APIs. Apple uses at least 2: OCSP and TSS. :)
It's the nature of those secrets though, isn't it. A small professional organization that keeps a secret list of member reviews of different workplaces, managers, etc is not the same as an organization that keeps occult beliefs a secret, or hides sex trafficking.
You have to be careful with the line of reasoning that just because these certain managers and team members are part of a cult that is known to engage in bad acts, doesn’t mean you can cast the group’s shortcomings upon the individuals (without proof). If that were the case, I can point out a few mainstream religions that condone reprehensible practices, many of whose members you probably work with daily
Thank you for this. I’ve been toying with this idea - there is a technical path to this with Microsoft’s JavaScript office API, since vba isn’t available on Macs. But the limited market size is what’s giving me pause.
So is bundling a more productive attack vector?
You haven’t touched a C++ toolchain in the last decade, have you?
It is hard to know for sure if it isn't studied. Environmental pollution can disrupt sexual development in animals. There are a number of chemicals that frogs are sensitive too that mess with their sexual development. Here is the first google hit I can find: https://www.berkeley.edu/news/media/releases/2002/04/15_frog...
> My experience as a European has been: more or less everything I apply to ignores my application. I haven't checked recently, is it changing?

We actually just (like, two days ago) shipped a change to be more restrictive about how we show jobs based on location. And we have a few things in the works (unfortunately I can't share details) that might result in significant increases in activity for engineers outside the US.

> Moreover, you didn't specifically specify which group of engineers you're trying to create opportunities for.

The simplest way to put this is "we want engineers who can do the job to be able to get hired". That is obviously a pie-in-the-sky goal that is more aspirational than anything else (you're never going to bat 1.000), but it's the guiding principle.

In a more on-the-ground sense, we think our assessments allow engineers who do well on them to get company attention that they might not otherwise get. And we have hard data to suggest that we are correct. Each assessment with a score of 3 or higher on an application roughly doubles the chance that that application is accepted, for example, and the overwhelming majority of outbound messages on Triplebyte go to engineers with at least one such score on their profile.
Added some instructions to demo.lisp for anyone who wants to try it out.
It is worth expanding a bit on why it is inaccurate to call them monopolies. A lot of people aren't sure what the word means.

I'm suspect there is a substantial cohort that thinks making a much better product makes a company a monopoly.
Q: Why do economists rob banks^W^W serve billionaires?

A: Because that's where the money is.
Going with this line of thought, who should eat plastic anyway? Nobody. So how does it make any sense to ever use plastic? I don't understand.
A Tesla has everything a normal car has. At least for me, the vast majority of service has been things other than the engine. Modern ICEs largely just need oil changes and are very reliable. It’s the electronic doodads, lights, suspension, brakes, tires, cooling systems (yes, EVs have those too), weather seals, moonroof, and other things that go wrong and need repaired.
The web has been progressing too fast, and most of the things that Safari has held back on are features that developers want but users don’t, like push notifications.
I'm worried they might have got their fingers burnt!
Now do the salary comparison between an PM + SDE in California vs Germany.

Then taxes[1].

"As shown in the figure, the overall tax burden on wages is roughly 17% higher in Germany than in the U.S. While social security contributions (employer and employee) account for less than half of the U.S. wage tax burden, they account for more than two-thirds in Germany."

[1] - https://www.chicagofed.org/publications/chicago-fed-letter/2...
Not that they shouldn't address quality issues that persist over many cars, but the demand curve and customer satisfaction ratings suggest Tesla doesn't need to focus heavily on class-leading quality (yet).
Republicans were never going to get rid of ACA; it’s their plan after all. Republicans were never going to build a wall. These were just talking points. What Republican lawmakers are great at is being united in thwarting Democratic policies and doing what it takes to enhance their own power. Republican lawmakers are much more united when it comes to core principles:

1. Thwart Democrats

2. Oppose abortion

3. Tax cuts

4. Cut/freeze non defense spending
I agree. I dislike calling them "monopolies". If we use inappropriate
language it's easier for opponents to undermine fair arguments.

But how do we deal with this much power ?

The bill "will facilitate innovation and consumer choice by ensuring
that big tech companies cannot give preference to their own products
and services over the rich diversity of competitive options
offered..."

Sure that's one way of seeing a small part of the problem. But it
misses so much.

A fair digital market is one thing. A viable technological society
that isn't a cloaked form of fascism is another. More than "consumer
choice", it's about the RIGHT to have choice - subtle difference but
bear with me please.

If I exercise my moral prerogative to say "I will not use any
Microsoft products because I believe they are a morally repugnant
company" I may currently lose a job. Not because Microsoft are a
"monopoly" but because my employer limits my choice. Or I may not get
medical treatment because my local healthcare provider only gives
access through a Microsoft portal. The problem subsists outside the
scope of Microsoft (or Google or whomever) qua monopoly.

Where I think the European Digital Markets Act gets thing a bit more
right is it's crafted within the European Interoperability Framework
(an older and maybe more ambitious project).

The object isn't to weaken concentrated dominance or self-preference,
but to guarantee the user has a choice including the choice NOT TO USE
a technology in the case there seems to be "only one choice". An
employer, health provider, payments processor or local government
would have to provide alternatives or opt-outs without
prejudice. That would allow genuine alternative service providers (not
necessarily commercial) a foot in the door. It's a different approach
that starts bottom-up instead of top-down.
So, first off: our support response was incorrect. OP had in fact enabled visibility manually some time ago.

But to reply to your questions:

------

> I would love to understand what the goals and numbers here are

Well, zero, since nothing was broken in this case. The issue last year had affected a couple hundred people (out of a total pool in the hundreds of thousands) before it was caught and reverted; the worst-affected person was erroneously visible (to Triplebyte companies only) for about a week and a half (and was hidden again within hours of us knowing about it).

> It seems to me that you’re trying to build a social network of some sort with verified-skill capability.

More or less. Not a social network, necessarily, but a platform of engineers with skill data from our assessments.

In brief, our goal is to make the job search process lower-grind, higher-signal, and more fair for candidates by exposing more information about companies, targeting messages more intelligently, and relying on skills over resumes. And on the company side, our goal is to provide them better and more reliable information than they can get when trying to hire elsewhere.

Everyone hates the status quo of a thousand applicants or a thousand outbound messages per conversation started, it's just a hard status quo to disrupt as an individual candidate or recruiter.

> If you truly are trying to make hiring better, how does public profiles achieve that?

To be clear, we do *not* have public profiles in the sense of "visible to the internet as a whole". We have profiles that are or aren't visible to our (company-side) subscribers, according to each engineers' settings; a "visible" profile is visible to those subscribers and an invisible one is not. The only way a profile can currently be exposed to the world at large is if an engineer on Triplebyte explicitly enables a public link and posts it elsewhere. (Even then, I don't think they're indexable? I'm not 100% sure about that bit; this is an old feature I haven't touched during my tenure.)

> What, exactly, is your business model?

"Be a place where the best engineers want to look for jobs, because it's a better and fairer experience, and charge companies for access to those job seekers and for the tools we give them to surface the best matches for the role they're hiring for."

In a literal financial sense, we charge a subscription fee to employers for access to our candidate database ("visible" profiles in the previous section's sense only).
First, questioning whether someone read the article is against the guidelines. Please don't do that.

Secondly, according to the article, "everyone" at Google knew, and he was a contractor. Once he raised his concerns, he did his duty. At that point, it's Google's business, and it's up to them to do something about it. Or not, if they'd rather. Maybe management liked their work and so looked past the "embezzlement", but would have to do something if this guy kept making a stink. Or some other scenario.
GNU Emacs 1.0 was released in early 1985, making it 6 years “better” than Vim ;-). Multics Emacs is from 1978 and, as a standalone editor written in Lisp, it can be called an ancestor of GNU Emacs and hints towards what its most illustrious descendant would be. You are right in that there are many Emacsen, the same way there is more than one Unix.
I have a bit broader of a question: Triblebyte is a screening platform, what business does it have making "public profiles" in the first place? Wouldn't you want to ensure that only vetted companies with vetted personnel are looking through the candidate pool? I would be worried about the litany of tech businesses that have straight up awful recruiting practices would somehow impact my reputation as a platform if it's open access.
If I had my way both Python runners and the runner webapp would not be long for this world.

I will say, though: the runner webapp MVP exists to do basically what you're describing (and keeps an internal queue). Yatai is architected so that the runner instances run on a separate Kubernetes cluster to the pre- and post-processing code that that's run in the main webapp itself, and can be scaled separately.
That is what DEI boards are for. Stamping out these natural clusters that form via social networks
> It's literally embezzlement

No. What's been alleged (steering alcohol purchase contracts to their own winery) is unethical and potentially illegal, but embezzlement is a very different type of theft.
> > Reason #3: Small repositories are better than large ones

> This is just a tooling issue. You can still separate projects by directories, and if your tools allow you to just check out a subdirectory, ...

Even a forest of repos has tooling issues: your build, code review, and code indexing tools will need to support the forest, and that's a lot of work. It's probably comparable to the work needed to make a monorepo work.

The alternative to the monorepo isn't all rosy.
The similarities keep piling up! Google was co-founded by Sergey Brin, who insisted it was okay to screw his employees in the company massage room because "they're my employees".

https://www.vanityfair.com/news/2018/07/valley-of-genius-exc...
After all, ed is the standard text editor.
Only one accusation:

https://www.dailyadvent.com/news/45a9223a5a878bd90c386109e55...

There are also consistent allegations of an abusive culture at both SpaceX and Tesla:

https://www.theguardian.com/technology/2017/jul/05/tesla-sex...

https://www.businessinsider.com/former-spacex-engineer-inter...

https://www.theverge.com/2021/12/14/22835181/tesla-lawsuit-s...
Half a percent is small but there should ideally be zero errors. Could you file a report so we can fix that?

Part of what makes the redbean TLS stack fast is I spent some time hacking on MbedTLS to improve its performance. One of things that's counter intuitive about crypto code is assembly can be safer in additional to being faster, since it helps guarantee the compiler doesn't add branches, for things like bit overflow carrying in arithmetic operations. One example is https://github.com/jart/cosmopolitan/blob/master/third_party... which I wrote to make the NSA curve much faster. I've been meaning to upstream into MbedTLS. Another thing I added is https://github.com/jart/cosmopolitan/blob/master/libc/nexgen... which greatly improves the performance of RSA multiplication using Intel's ADX ISA. But C crypto code can be beautiful too! For example, I found Everest (curve25519) particularly impressive, since they solve overflow in a different way, and as such, it's quite possibly the only large piece of C/C++ code I've ever seen that contains zero conditional branches and zero pointers. https://github.com/jart/cosmopolitan/blob/master/third_party... The closest thing I've found to measuring the performance impact of my changes is by recording how long the MbedTLS test suite takes to run. The speedup for suite_ssl is 13.11x faster, RSA is 1.91x, ECP is 1.86x, and ECDSA is 2.84x.
so glad that i used a pseudonym on Triplebyte.

I knew better.
I'm aware; the filtration filters out the thing in tap water to which I am sensitive (chlorine). The regulations don't cover that.
Another way to explore this collection: https://www.locserendipity.com/NYPL.html
So why have I gotten 5 emails from your system in the last 24 hours when I had forgotten you existed and haven't logged into my account in at least 18 months?
That that is buried at the end as a throwaway joke, when it's the only relevant (and quite concerning) statistic in the article, is revealing. No surveys, no student comments, no retention estimates - plenty of statistics about how much the universities like it, though. The article is an exercise in one-sided cost-benefit, which considers only the reduction in costs to the university as a benefit, while denying the costs and lost benefits to others.

The article spends most of its time talking about how great it is to reduce food waste or cut the budget, as if that was the only thing that was important. But of course, you could reduce food waste by 100% if you simply shut down the college, or starve the students to death. Can't have any food waste if you don't have any students.

The purpose of food is the welfare and happiness of the students, who are paying extremely large amounts of money for the convivial experience of college life; instead, they are being nickel-and-dimed, made to run back and forth between their table and the food if they want some more. (All that, and they are often forced into overpriced meal plans where they couldn't eat every meal they pay for, because you'd need a team of logisticians to figure out how to hit the timings between class and time slots.) This improves the balance sheet of the food bureaucrats, because it forces the losses onto the students, who do not appear on the balance sheet. (See also: McNamara and the Vietnam War, on the fallacy of valuing only what can be easily measured.)

It also includes some pretty choice bureaucratese, like the claim no student has ever complained about the lack. Which is really something. First, as other comments note, students are taught to be powerless and may cope by simply bringing their own tray. Second, per the 1% rule, you will only ever hear the tiniest fraction of complaints. I know when my college switched, students did complain, but whether they complained to the bureaucrat in charge, I don't know. Third, how would students know? You don't use trays at home, which is where students live before dorms, and all of the students who remember how much better trays were will be gone in a few years, and any stray complaints that make it through can be greenwashed away. Finally, I've found that when people make these hyperbolic rhetorical claims of never hearing any complaints or seeing zero problems, this is typically a bald-faced lie: what they actually mean is, "I have, but I choose to strategically forget, and no one is powerful enough to force me to officially acknowledge the problem". (I sometimes think the most valuable thing you can learn from reading Harry Potter is Hermione's translation of Dolores Umbridge's speech.)
I didn't say in advance. After the fact is likely best, but in a seamless flow that doesn't require using Finder, the terminal, or any other tool. Indeed Gnome solves after the fact, allowing you to just accept the default generated filename, or specify your own, with zero friction.

As others in the thread mention, once you've taken the screenshot, it helpfully dumps you in "the editor" (is this Preview.app? I don't know because it doesn't have a title bar..). In the editor, I am give then option to do a bunch of things, but no option to rename the screenshot. This is disappointing. Hence I was hoping somebody here could fill me in on the trick that will make me happy..

(my complaint scoped to Big Sur btw)
Not sure how black and white you'd have to see the world to immediately lump 150k Alphabet employees into the evil bucket due to a dozen people whom most of those employees never knew about or met.
The effects are probably counteracted by increase of charity funded additional health care disabled people get thanks to network effects
Python _is_ slow, but even back in 2006 on a pentium 4 I had no problem using it with PyGame to build a smooth 60fps rtype style shooter for a coding challenge.

One just has to not do anything dumb in the render loop and it's plenty responsive.

Of course, if you're going to interactively process a 50mb csv or something... But even then pandas is faster.
Maybe there’s a counterfactual timeline where Apple didn’t nuke Flash on phones, hmm… interesting to think about. I think I’m happier with apps rather than apps-in-the-browser in the end, and this might be a similar contrast - it’s technically interesting to have browsers do more or do everything but I’m not convinced it’s the best for users living in software ecosystems.
> You're right about the politics, but life is far more resilient than you're giving it credit for.

Life's a house of cards, and we're kicking the pillars - chemicals that have never before existed are interfering with the fundamental chemistry of life on earth.

I have no doubt that in 100-million years there'll be some form of life descended from what's currently around on earth, and it will be staggeringly robust.

But vertebrates? Mammals? I'm not so sure.

Mass extinction events on earth are rare: https://en.wikipedia.org/wiki/Extinction_event

We're in the sixth that we know of; we caused it - and we're not slowing down.
Favoritism is rampant in some teams at Google, but it's harder to detect when you are not hiring your fellow cult friends.

Unconscious bias hiring training is there for a reason, but there are many situations when the bias is conscious.

But it's clear that some directors/managers have overly favoured their race/caste/people from their hometown/area.
Well if you expand that to a more generic "employees shouldn't be involved in hiring people who they know and associate with outside of work" then they'd have to fire half the company.
Was it already that long ago? Oof.
This is a tangent but there are other, arguably better ways to give the user confidence the order took place in your example. You could show the line items to them again with some indicators of completion, or show the order added to an excerpt of their order history, where perhaps they can tap/click to view line items. Something like that is a bit more convincing than just thank-you text even with the delay, IMO, though it may be tougher to pull off design-wise.
The rest of TFA is literally about the evolutionary advantage conferred by the plant's chemicals.

It's not about cats having knowledge of what's good for them.
If Go is “fast enough”, then so is Java, C#, JS, Haskell, and a litany of other managed languages.
"This hardware platform comes along with different simulators that allows to test parallel programs on regular computers. Both the hardware platform and the simulators are described in the following sections." [0]

[0] https://www.google.com/books/edition/Smart_Multicore_Embedde...