skysight-inc/HackerNews huggingface dataset:
I understand that it feels uneasy, even guilty, to be paid more compared to those outside of software engineering, or even to swe peers who are in different specializations or at different organizations. But that is an individualistic response to a systemic phenomenon. The tech industry as a whole is overpaid, not just its workers. It’s the greatest beneficiary of the near-zero percent interest rates since the Great Recession, which incentivized capital to chase ever-greater yields, funneling massive amounts of money into tech, creating jobs and raising salaries. Not to mention, tech is a massive lever (software eating the world) that leads to greater business cost savings and higher margins, driving up demand for tech workers, and their salaries.

You cannot reverse that trend by simply choosing not to participate in getting paid more. By all means, don’t be motivated in your career solely for higher compensation. But also don’t feel bad for getting paid more. The money you leave on the table will just get taken by some other overpaid engineer, manager, or VC shaving pennies off of their costs anyway. Take the money for the sake of your loved ones, donate it, pay higher taxes if you want to. There’s nothing inherently unethical about it.

I would hazard to say, the more problematic situation about the ease of job-hopping in this industry is that it deprioritizes grit and perseverance. There’s always a better-managed organization, more feasible business model, higher quality engineering team for one to jump to when the going gets rough. That’s just as important as the promise of higher pay and title- why bother toiling if there’s always a slightly less dysfunctional org on the other side? So you end up with very transitory, evanescent companies because personnel keep disappearing every couple years.

But, I’m not sure if that’s really on the individual contributor to solve either. The question of retention and of building employee loyalty is really the responsibility of management. And with all of the dumb money that’s flowed into the tech industry thanks to interest rates and software being the primer economic lever of the times, companies have less incentive to make necessary changes. They themselves benefit from a very fluid workforce. If you job hop away your boss will just swap in someone who job hopped from another company. So maybe that’s just how it’s going to be until the next recession hits.
Co-author here! For those unfamiliar with Temporal, here's an excerpt from the post:

We think of Temporal as a "durable code execution framework." We execute your backend code in a durable fashion: by persisting each step your program takes, we can recover your program's state in the event of failure—even if the machine goes offline or loses power in the middle of execution. We also durably retry and timeout external calls, so if your services or databases are unreachable or returning errors, we will keep retrying until they're back in a good state. This allows backend engineers to develop at a new, higher level of abstraction that is oblivious to faults in the system.
Lex as Interviewer
As a young Field Engineer many years ago, I was sent out to "FIX" things; i.e. resolve equipment and operational problems at Radio and Radar Sites in Europe.

I quickly learned that the fastest way to "Solve" Problems" was to LEARN WHAT was going on ... I did exactly what Lex is doing. Listening, internalizing and "cogitating" OUT LOUD!

To a casual observer, I came across as a "Bit Slow" ... BUT ... my non-confrontational and "please help me understand you, here!" demeanor caused the customers ... high and low ... to "Help Me" understand ... so I could help them!

Later as a "Sales Engineer" and then Regional VP in the U.S. for a large test-equipment company, THIS "Aw shucks, please help me to help you." approach would get people high and low to "open up" and TALK, Draw Pictures and EXPLAIN things to me.

I believe that THIS is what Lex is doing in his own way.

Less-discerning "interviewees" will just "be kind and help this guy" ... the "heavies" ... i.e. most of Lex's "Clients" know exactly what is going on ... a very bright person acting for US WATCHERS to draw out the wonderful people whom he INTERVIEWS!
Blame Blok https://www.marxists.org/history/etol/newspape/isj/1961/no00...
Leap seconds get applied to time zones, so I don't feel like solar noon is a top priority.
Wasn't it clear enough that I meant for it to be silly ?
Amazon SES email templates manager – Free plan is back
Verizon wants you to pay for your Xbox like you do your phone
I was torn between sharing a link to the homepage and sharing a link to an interesting market. I think this is a really cool alternative to real-money markets like Polymarket[1] and fake-money markets like Metaculus[2] given the perilous regulatory environment. I'm curious to see what HN thinks.

[1] https://polymarket.com/market-group/will-twtr-be-delisted-fr...

[2] https://www.metaculus.com/questions/1079/will-elon-musk-even...
if you want something like LanguageTool but for your website, check out Typosaur, it's currently in Beta!

https://typosaur.com
All this talk about a "king" is wildly misplaced, no matter how many longform words the author used to discuss it. We don't need singular rulers; instead, the United States has managed very successfully with its fifty sovereign states. Recent Supreme Court rulings are continuing to shape things in this direction--the intended direction of the Founders.

I agree with much of the article, like that we should focus on "purple" issues. The thing is, the way we should (and are, and have) do this is to do it on a more local level. There is no hope trying to find a least common denominator at the federal level. It's impossible. There are too many citizens and the country is too large geographically.
As a huge fan of monero, I see several reasons the general public may not want to adopt it:

1. To securely use monero you need to at the very least locally download the blockchain. The secure way of doing this takes fucking forever. You don’t need to do this, but monero’s current users are very security conscious and most tooling/the ecosystem assumes you did this.

2. Most consumers may passively want privacy but they want it to be completely frictionless. Monero has a learning curve, slight difficulty exchanging for fiat, etc. - not frictionless.

3. Monero has whales but it’s not new, so it doesn’t have a big team of centralized devs/investors trying to pump it up. As a result it doesn’t have a lot of marketing or mindshare among people who are less technical.

4. Tail emission is a perfectly valid way to incentivize POW over long time periods, but it scares off moonboys and speculators at the very least (because you’re not purchasing a piece of a fixed size pie).

5. Even if most consumers passively want privacy, in practice it’s not important enough to go out of your way for it. How many technically-able people still transact in cash in developed countries? Yes, I know you Mr HN contrarian might, but I’m talking about the general public.

6. The least important factor is that Monero does have technical drawbacks and limitations. It’s not super important but it may be a reason privacy-conscious people don’t promote it as the end-all-be-all solution to private transactions. Some examples: auditing supply, de-anonymizing correlated transactions, POW, how the blockchain could scale with more transactions, quantum-safety.
I have a funny (or sad, really) DICOM story. I wrote my own DICOM parser in Rust, and I kept encountering a bug where the parsing would fail on a small subset of files in my database.

What you need to know is that DICOM tags have 16-bit group and element values that uniquely identify what the tag contains, and tags that begin with the group 0xfffe are very special, comprising a small set of field delimiters.

Well, the brilliant minds at Codonics decided to use the special group 0xfffe for their private, vendor-specific fields at the end of the file. When parsing a file those private fields would look like delimiters and ruin the logic.

So because of that one particular vendor, I have to check both the group and element of every special tag in every file I parse to make sure it isn't one of their special ones. Whereas, if they had followed the standard, I would only need to check the groups for the value 0xfffe. Thanks, guys!
TikToker Says Manager Spied on Her While Working Remotely by Accessing Webcam
I think it is increasingly likely they will have to shut down (or at least move) the company to remain principled. Just in recent years Sweden haphazardly requested to joined NATO (and is kowtowing to Turkey), sim cards started requiring registration and it became illegal not to register where you live. And there is very little in terms of developments, politics or people to suggest that it will stop anytime soon.
I can imagine someone arguing that Google's fraud department defamed them, causing another department (the third party) to take actions that damaged the plaintiff. "unprivileged" might be hard to argue though.
> that medicine and IT usually exist at opposite ends of a spectrum.

Working in Medicine you learn that specialists, and in particular renowned ones have their worlds optimized around having them do what they do best, and not wasting time not doing what they do best.
I had the same horrible experience except I thought they had perma banned me. It was with my paypal account, which has been paying for google workspace for nearly 7 years. The email is so rude, rough and final. I even posted it on facebook it was so anti customer. Its not a way to treat people trying to boost their youtube accounts to say the least.

Also the site is embarrassingly broken for an amateur dev, let along a FANG on one of its core revenue entry points.
I think the better way to put it is that very few people care about faceless credit card companies or banks knowing what they are buying, or about the government having subpoena access to those records.

That's very different from not caring about privacy at all.
I'm talking about after WW2. Japan's industry and economy were literally burned to the ground. Yet by the 1980s, the US was terrified that Japan's economy was going to take over the world.

What they did after WW2 was adopt a free market.
Your quote used the one unnecessary word and converted the rest to an ellipsis.
(I do find it funny that you did "Perhaps [...]" rather than "Perhaps . . . ." or "Perhaps [anything]", it's like, the point I was making can be reduced to the abstract notion of trailing-off dialogue lol)

"Perhaps" is a cheeky way to introduce my response to the "being on the flight log doesn't prove the type of crimes alleged here" part by providing the obvious types of crimes it would provide evidence for. (Like, if someone asks "Why isn't the elevator moving" and someone responds "perhaps it is because you didn't press the floor button"). I wasn't using it as some sort of way to convey support of action based on mere suspicion.

Perhaps you missed that?
FWIW we don't really use Microservices at Shopify.
> > He does say things I disagree with and indeed sometimes that I think are quite wrong.

> Your whole post is completely empty of details, so how can we decide?

I didn't ask you to decide, and deliberately left the specifics out to avoid distracting from the point I was trying to make.

> Are the disagreeable things disputes about some software thing? Or does this guy feel that homosexuals should die, that trans people are sick, and women inferior? Or something in between?

But since you ask: one of his strongly held opinions is that the global population needs to decrease and that the way to do it is not through coercion but persuasion, through an approach I consider vaguely paternalistic and reminiscent of an aspect of colonialism. I don't think he feels specifically that the population needs to decline only among a subset of people meeting some specific criterion 'X' (i.e. it's not some sort of racist belief), simply that the global birth rate needs to go down.

For my part, I don't really care much if the population goes up or down; I certainly don't see a declining birth rate as a bad thing, but I feel that making everybody richer will tend to do that anyway so let's work on that instead because it's an absolute good thing.

The problem is that when he talks about this it alienates some people.

> But when he started defending Jeffrey Epstein because one of the girls he trafficked was as old as 17 and had been pimped out to Marvin Minsky whom RMS admired!

RMS's argument was absurd and thoughtless, but I have four friends who were on the island trip at the same time as Marvin and his wife who can't understand how it could have happened just from a timing POV. Plus it's pretty unlike him (though who knows anyone that deeply?). I am dubious that it occurred, but do realise: why would the woman make up the story? That seems even more unlikely. It's not like Marvin was the kind of famous person it might be even remotely worth making up a story about. So really I don't know what to think.
Absolutely. Anyone on that list has to be a huge piece of shit, and yes I believe the trump foundation continues to do the same shit.

Liberalism and its "HAH BUT TRUMP, GOTCHYA" mentality is such poison- you're a cancer unto yourself. All of these people run in the same circles, they use their money for the same or similar agendas (control), and ultimately they want all of us poor and enslaved (debt) for eternity. They're all mostly kid fuckers, too- look at trump's slew of weird comments about his daughter.

I am not your ally, but both of these groups are definitely our enemy. I hope you figure it out sooner rather than later :)
I guess that explains the stock price. I would never invest in a book club

In all seriousness, I would separate the fact the top executives are good people, with the fact (at least in the U.S) they have become notorious low ballers for top engineers
I have had similar problems using many platforms. I use virtual cards whenever I can to achieve better security and control of expenses (compartmentalization). I have given some companies my real name and address but used a virtual card, and then they locked my account later. This situation seems to be ramping up due to the escalating financial war with Russia. It would certainly be helpful if companies would tell us up front that if we use a payment card that cannot be firmly tied to our identity, they will lock the account afterwards. This would allow us to go somewhere else without wasting all the time to setup the account.
Unfortunate this didn't get more traction. Our entire world as hackers is built on the physical output from a very few factories, and if this kicks off...
The more your software touches real money and merchandise, the more time you have to spend to make sure you're not breaking the law in any country you're operating in. It's not fun, it's very error-prone and it's very important to get right.
> stop paying the office lease and salaries stop

Last job I had before this one, I came into work the week before Thanksgiving to a mandatory morning meeting that consisted of "the company is out of business effective immediately, you will all be emailed your severance details by personal email, please clean out your desks".
Without more infos on the initial infection vector, it's difficult to assess the impact of those mitigations (Secure Boot, Secure Launch and Trusted Boot). Qutoing from the report:

"Looking at the various firmware images we were able to obtain, we assess that the modifications may have been performed with an automated patcher. If so, it would follow that the attackers had prior access to the victim’s computer in order to extract, modify and overwrite the motherboard’s firmware. This could be achieved through a precursor malware implant already deployed on the computer or physical access"

While Secure Boot + BitLocker with TPM and PIN would have prevented an Evil Maid attack (at least would have triggered a PCR change and a Windows Recovery prompt), a preliminary infection (I understand by it a supply chain attack before it reaches the user for the first time, but maybe I'm extrapolating a bit what the report is saying) would have stayed undetected in most scenarios (depending on how Intel Boot Guard is configured).

Regarding the Linux part, ANSSI did a pretty great job with their CLIP OS implementation: https://docs.clip-os.org/clipos/boot_integrity.html, but it's really "for the masses" :(
For people on the fence about this, I have played it. It's better to think of it as a sequel than a remaster.
Maybe they could assign some remaining people to fixing their god damn issue with ERR_INVALID_RESPONSE issue with Chrome that has been happening on and off for years
I like the trade off of locking my door over the freedom of not needing a key.

I would not be so fatalistic about impossibility of policies that respect privacy.
I mean, the concept and stuff too.
Distributed SQLite Replication System
Hostility against Russians as a group, and Russia as a nation-state, when this group is collectively aggressive? If you call that bigotry, then yes, definitely. As a nation, you cannot have self-determination and a free pass when you fuck up. You own your mistakes, just like all of Germany at the time own nazism even though not all of them were nazis.

Against specific Russian people, that would be counter-productive and unfair. A lot of them individually disapprove of their government and act in smaller or larger ways against it. I know personally a couple of them, and Inadmire them because they are doing their best in a terrible situation. Collectively, they still put Putin in power and let him come to that point.

It’s exactly the same thing in the US: a lot of Americans are great, but there is no escaping the fact that enough of them think that Trump was a good idea (and I have no doubt we will see worse in the near future).
> Does every minecraft client have to authenticate with a central server before joining a private one?

Yes. The way it works is that when a client attempts to join a (private) server, it sends the user id to the private server, and then sends Mojang a message informing them they it's trying to connect to a server at this address.

The private server then asks Mojang if the supplied user id is valid, and attempting to sign in to the server at this address. Mojang then replies to the server confirming the authentication of the client, and then the server lets them in.

There's also an exchange of cryptographic keys mixed in there, but that's the basics.
> What does this mean? Do users not connect directly to private servers? Does every minecraft client have to authenticate with a central server before joining a private one?

Minecraft servers in the default "online mode" authenticate users against Mojang's "session server". The clients get a token when they log in to their launcher and the servers then validate that token when the user logs in. This verifies both that the user is who they're claiming to be and has a legitimate copy of Minecraft.

Server admins can turn off online mode, but this means that anyone can claim to be anyone else unless some independent authentication scheme is implemented. As a result it's usually only done for actual offline servers and those that want to allow pirate copies to play.

I'm not super familiar with the current controversy but the understanding I have is that chat reports could potentially result in being unable to log in to online mode servers which seems likely to have overreaching effects.
I think back at my days in college, when a bunch of the computer science lab professors and postdocs had basically unaudited root access by design to all of the college's email and Unix logs... Or later, when I worked at an ISP and saw nominative clickstream data being casually handed over on USB sticks... I don't miss local control.
Very good point. His stories about his personal sexual kinks, lightly disguised as news, are probably accurate. Disturbing, but accurate.
Hum... Looks like you didn't notice we losing.

At that same time, Microsoft started using your HDD serial as an identifier. Nowadays there are unique identifiers in most of your hardware, including the north bridge of your motherboard and the TPM that windows now requires.

Also, mobile devices got all kinds of unique identifiers from day 0.
Many of the properties listed in that comparison table make it a worse currency. The prime ones being poor scalability (not only large txs but also having to track all historical outputs, not just the unspent ones) and poor second layer support (no relative time locks).
and if you're into Markdown, i can also recommend prosemd

https://github.com/kitten/prosemd-lsp
I very much disagree.

Any such bans will always take the path of least resistance to cover the largest possible population with the easiest means. Pareto Style. And I care much more about those 80% of people having access over maintaining my own. Because ultimately, those people will set cultural standards of the future, not some technologist with their fully libre laptop.

And those attacks are, as of now, not that sophisticated or blatantly censoring. An overwhelming majority already do their computing on locked down devices (running iOS, Android and ChromeOS) and the big censorship wave hasn't hit them. Every half decade or so Amazon removes a book from Kindle as a side effect of capitalism and copyright and there's a huge HN thread mistaking it for deliberate censorship, but overall it really doesn't matter.

Also, let's be completely clear that DeSantis didn't ban math books. This was an attack on ideologically inconvenient books, mostly queer literature. It's part of the push to label us as "groomers" for merely existing around underage people that has caused a spike in violence and mistrust directed towards trans people. Once our rights are sufficiently eroded, they'll go after the gays again, and after that, maybe, we'll have progressed on the fascist cataclysmic us versus them rhetoric to revive blatant antisemitism. Or racism. Who knows. But safeguarding the high end bit of tech that is not even mainstream anymore wouldn't help society out of this and being concerned for it is a very individualistic choice.
Not really.

NordVPN and all the other janky services in that space do a couple things adequately, you can pretend to be from another country and get some duck-and-cover on things like torrents, if your ISP doesn't like that kind of thing.

I'm in the same boat, basically. Would it be nice to have a VPN which takes actual security seriously? Sure, of course, but until the end of the year, what $VPN does do is paid for, and I don't care enough, in isolation, about what Mullvad offers vs what I'm getting for free.

Next time my wallet comes out is a different story.
Work around how? As a developer?

I'm sure there will be developer options for this too. After all, Microsoft is not going to make all the software themselves.

But they could restrict this too. For a lot of platforms you now have to sign up for a developer account and license agreement. Like on iOS, Oculus Quest..
Putting full paths in binaries is very common even in C++ projects. It's difficult to completely avoid and trivial to mitigate. In fact if you're doing things correctly - i.e. using CI & CD, there's nothing to do.
Is tire shedding more common in electric vehicles?
No, we were the ones writing the PC drivers, for DOS, Windows and OS/2. Back then the lower layers were more or less standardized but there was no AppleTalk stack so that's what we developed as a product.
The delta between this and "Will Elon Musk buy Twitter this year?" [1] is pretty interesting to me. I would interpret this as that in the minority of people that think it will close, a majority of them think it will happen soon (presumably the court orders specific performance and Musk rolls over), and a minority thinks it will drag out (appeals, etc presumably).

[1] https://manifold.markets/SG/will-elon-musk-buy-twitter-this-...