skysight-inc/HackerNews huggingface dataset:
Hi HN! I wrote an article on how we can optimize technical interviews for engineers. Instead of writing code, the idea is to show candidates the codebase of a small app and give them a task to identify as many issues as possible before it can be released to production. In some cases, they may need to refactor part of the code.

In our case, we included issues in the code to uncover different seniority levels among the candidates. By working with a more dynamic “bar”, we made all candidates feel confident during the interview (they were always finding something). On our end, their discoveries gave us a more detailed understanding of their competencies. We even uncovered some “hidden skills”, like: product thinking and UX experience.

What do you think about this approach?
Hey, article OP / podcast host here. Thanks for the feedback. I think you're right.

When we discussed this topic we were mostly focused on modernizing it, and I think it would take some additional effort to do a sort of cleanup pass and make the additions more binary. Also, in the podcast we went into more depth about each item in the list, so if you haven't already, giving it a listen could help flesh out the thinking. While it's hard to get an answer to whether or not a team "values the benefits of diversity," one thing (I think) that I said on the show is that I will simply refuse to join another team that is 100% middle aged white men (I am a middle aged white man). That's not a perfect rubric, but it's a start, and it's a clear cut binary question.

If we're willing to break out the magnifying glasses, I bet there's at least some nuance hiding behind each of the original Joel Test questions. Do you keep your database schema in source control? Certainly that's easier to do today than it was in 2000. Do you think Joel himself would have considered that a wrong answer if a company used source control for everything but db schemas? I would be willing to bet there are certain things that shouldn't be dealbreakers that, according to the "letter of the law" would be.
You'd only need lightning integration and paying a small amount of sats, recycling the Bitcoin proof of work instead of making more. You could even have the server transfer the same sats back and forth as a token as long as the server side is happy.
Proudly, I thought I had identified a pun.
I haven't encountered a case where multithreading will make the algorithm weaker, but I do have a variation of the benchmark code(on disk, at the moment) that will spin up multiple worker threads to compute PoW.
The packaging format and system is very different to yum and deb, despite the similarities in cli interface for local maintenance. It's quite similar to PKGBUILD in Arch, except with more streamlined tooling.
https://news.ycombinator.com/item?id=32331383
Client-local fingerprinting is not inherently evil, just when you combine it with additional signals and decide to use it in violation of users' privacy. AFAIK it's the most reliable way to distinguish unique visitor agents, and under that use case it's far more respectful of personal information than an IP address.
I think calling this a Captcha isn't a greay way to explain what this is about.

Bots spamming your sign up page are playing an economics game. Can I quickly and cheaply enough do whatever this bot action is so that the end result is worth the cost? Captchas were good because you need humans to verify them, which raised the cost to around $0.05 per action. But now ML breaks most captchas cheaply and easily.

Proof of work based 'captchas' are another solution. They slow down the bots, and cost compute time, reducing the economic efficiency of the attacker. They make it not worth the effort. And if the attacks continue, you can autoscale the difficulty.

And for humans, it's a minor slowdown without requiring any mental effort from them.

It's a nice solution.
Yeah, science is so dumb, isn't it? /s
They are literally following the will of the court, which gave them the ability to decide by themselves.
Free accounts are not sustainable. If you let investors subsidize you, it's not in the platforms best interests to work in your best interests. SourceHut charges for its services, publishes financial reporting, transparent operations information, and so on, so that you know that it's sustainable and accountable to you.

The VC-subsudized approach is not sustainable and does not work. If you want infrastructure to be sustainable and accountable to your needs, you need to get used to paying for it again.
I don't know. Only one way to find out, I guess!
A captcha can always be parallelised. All the attacker has to do is attempt n different captchas in parallel.
Thank you. It's not just the ridiculous title either. The inaccurate framing permeates the whole article. It's straight up embarrassing.
Thanks for linking this - I've read HPMOR half a dozen times (because it's entertaining, not because it's a great work of art) and this is a really good and entertaining discussion of it
>2. I became obsessed with Luna Park, an influential proto-Disneyland based in Coney Island 100+ years ago. It was so popular they ran light rail out there and hundreds of thousands of people went there every weekend until it burned down about a decade later. Took a book about it on vacation to Paris. Went to a random place to read, and it had a little concourse named Luna Park. Inside it was a random coin-op machine named Luna Park, not related to the concourse from what I could tell.

Not really related, and a bit of a "woo" book, but there's a book called Latitude 33: Key to the Kingdom by Walter Bosley that suggests SRI designed the original Disney Land in a certain way to harness some sort of "woo" energy on the 33rd parallel. There's a bit in it though (I'm 99% its in this book) that involves some peculiar man appearing out of time and place enjoying the park. I hadn't thought of that book in years but this triggered that.

As a work of non-fiction it is dubious, but it's a fun read as a work of fiction.

Now, wholly unrelated, but also a fun dubious as non-fiction but fun as fiction book: The Vertical Plane by Ken Webster which alleges that for 2 years in the 1980s messages from the 16th century and the future would appear on the author's BBC Micro computer with some interaction.
Apple is building a demand-side platform
For those wondering what this is: https://sdf.org/?faq?BASICS?01

Also, interesting copyright date at the bottom: ©1987-2065
May I ask what was the online architecture course?
In VOIP applications the correct jitter estimation is very important and RTP/RTCP
protocols are doing it pretty well.
Of course each RTP packet has a timestamp which simplifies the task
"the huge overhaul to Settings which is slowly rendering Control Panel obsolete."

I bet we'll have nuclear fusion before the Control Panel is obsolete.
>This is a silly piece. The author just doesn't seem to be aware that the two things he complains about are just simply industry standards in journalism. He wants journalism something to be that it isn't and has never been, and then critiques it for not being that thing.

This is a silly comment. The author just doesn't seem to be aware that "standards" can still be bad and people can legitimately complain about them.

Especially since the "standards" are not some professional legal code or technical protocols that have to be followed, but just common practices.

Doubly so, since, besides some standards being inherently bad, even good standards can go stale over time. For example, newspapers not providing references might have been OK back in the days of print, but it's not in the web era, when a reference via a link to the source is trivial and gives immediate access to it to the reader.

Triply so, since there do exist news outlets that do far better than the "standard": giving actual links, properly attributing, not pulling quotes out of their ass or unrelated interviews, and so on. So it's not "standards" being followed here, it's more like "minimum-effort common practices" being followed. [Heck, all kinds of "dark patterns" are now standard behavior in news outlets too. Doesn't make them ok].

Quadruply so, since "syndication" is not an excuse either. News outlets can (and some do) edit, restructure, and add links or other annotations to syndicated content from news agencies and other sources.

In other words? A typical HN "piss on TFA" comment, promoting bad practices (sorry, standards), and being upvoted for no discernible reason.
You should compare against a GPU implementation of SHA256 (hashcat has a good one).

You may also want to consider ASICs - although you won't be able to build your own ASIC, you can look at the hashrates offered by bitcoin mining hardware, and extrapolate.
"App hung at 'zapping the flibber flabbers', please help"
The reviewer is seemingly an extremely bright and well educated person and also seems to be more familiar with most of the concepts introduced in the books than the original author. The reviewer also an educator and it makes sense that Eliezer's ham-fisted attempts to teach through writing would be annoying to him.
If you can only subscribe via certbot or otherwise using you private keys then it should be fair to require the same to unsubscribe.

A justification could be that email notifications are a security feature and to disable them you need strong authentication (an unsubscribe link in the email could used by anyone you forward the email)
To be fair, bot countermeasures are and have always been an arms race.
DNA Digital Data Storage, preservation and encryption
I believe this concept was pioneered (from an implementation perspective) by George Whitesides @ Harvard.
I guess the author is German and so his config spilled over?
what does "gifted" even mean?
Newsletters or notifications?
This is a Microsoft sponsored tech talk. Advertising for MS is one of Troy's businesses, as he discloses in his bio on the page. And the banner at the top says this particular post is sponsored by Cloudflare.
WebAssembly on a QR Code
“There was a problem loading the QR code. Show this error to a member of staff and they will let you on the train”

Would be pretty cool.

Follow up email with say $1 credit and and explanation later “our technical team is looking right now to fix the problem you had today caused by our systems” would be cool too.

I am glad I read the post to make me think more about errors.

Errors are tricky: an exception can happen in so many different ways in the app and you have to write code to convert some unexpected thing into a bold plan for the user. It is like codifying a crisis leader!
Has been an issue in what way?
Procrastination and lack of focus and organization...which has translated into an ability to cut thru a lot of bs , identify key value, always deliver on tight deadlines while juggling multiple projects. Yeah I could have gotten here differently but everyone always told me it would screw me in the long run and it has most definitely done the exact opposite.
I didn't realise that Cloudflare DNS was such a deal breaker. Is there a reason to prefer something other than CF for DNS? I've always used CF DNS and I've never felt like I'm missing anything.

Edit: I also just checked the docs and it looks like you should be able to just CNAME to a `something.pages.dev`; why doesn't that work with another provider, or am I missing something?
GitHub Git Operations Down?
Many of the open source zfs developers are the same ones that developed zfs at Sun and then Oracle. I worked on the Solaris team from 2010 until 2017 and have contributed to open source zfs implantations in illumos and openzfs. Your criticisms seem ill-informed based on my actual experience in my contributions to these multiple zfs code bases. I actually found a fair number of improvements in the testing in ZoL.

With Solaris zfs, you saw features after they were exercised by up to a few hundred engineers for months to years. Now you are getting bits fresh from the factory. Like when software is developed behind closed doors, bugs happen and they are progressively squashed leading to a more stable product.
This reminds me of what I hear in small scale Ag all the time when a need for agtech is presented.

Of course, exploitation of dirty and repetitive manual labour is going to be cheaper. Of course, burning through natural resources to keep jobs is always going to be cheaper than creating systems that don’t go obsolete or making sure we spend money to renew resources.

At this point in our civilization, we have to ask … what IS the point of new technology? Is it to better improve our world and make leaps? Or use technology to support an artificial construct called ‘money’ that accumulates in few hands.

Time to free technology. It should work FOR us. Instead we are gaslit into believing that it is something that we serve. When we consider profit motive for everything, tech becomes a collar that makes workers out of almost all of us.
" I just made sure to always be 2 weeks ahead of what the students were learning"

I feel teachers who use that technique can't provide much depth in their teaching. The best teachers I had were way ahead of what they were teaching and knew the topic in and out.
At least they removed the atrocious "links are spoopy" line when you click a hyperlink
The other day I found a decades-old Air Canada ticket in a thrift shop book.
I would second this as being proficient at SQL is a 10x skill. I learned more on the job than in college though. If you want to be good at web app development that means CRUD which means understanding RDBMS and SQL.

Even though I work with Rails, I think in SQL when it comes to data relationships. Being able to just join together tables in SQL, get metrics, dive into data issues, etc. without some ORM or layer in between you and the data is a 10x skill since it will likely carry through your entire career as web frameworks, libraries, etc. come into and out of fashion.

I would extrapolate this further into knowing the base languages used in whatever you work on. If its web, a fundamental understanding of HTTP, HTML, CSS, JS without frameworks, code generators, etc. will give a solid base to then easily pick up how various languages and frameworks layer on top of the fundamentals.
I think this is an opinion piece? Also, it is really bad outside of the reasons peer comments have said.

He says that the us house has already passed a same sex marriage act, but I don't think he understands what the bill does. Read it here:

https://www.congress.gov/bill/117th-congress/house-bill/8404...

My take is that it cancels DOMA (defense of marriage act, passed in the 1990s), and adds some language that the Fed recognizes gay marriages and that one state must recognize another states gay marriage license.

It does not enshrine or force states to require gay marriage. So if Obergefell (the SCOTUS case that enabled gay marriage) was overturned, states could go back to blocking it, much like they are doing for Roe/abortion. The only way for Congress to enshrine gay marriage may be via a constitutional amendment (but I'm not sure how states rights work here).

So in the end, the court is trying to get out of the business of being a super legislature.
In 5 stadia take the 3rd ostium on the circus.

You have arrived at your terminus.
As a non-native English speaker, this isn't a big worry for me. I apply a heavy "I have no idea what the intention was" filter. This happens equally with humour and non-humour, and the probability that something doesn't translate is about equal between humour and non-humour, I think.
go for the straight lace with hidden knot, it's a game changer
In general we’re not targeting a 1:1 migration from netlify, so while yes we have equivalents for all of the pieces you mention, they work differently and would require migration work to use Coherence.

Coherence offers full-stack containerized application support, so any functions could be run as a backend service - with additional functionality such as databases/redis and wider framework support available (while still getting the benefits we offer such as Cloud IDE and preview environments).

As well, we have our own `coherence.yml` file that would replace the `netlify.toml` one.

As for redirects, we don’t have anything baked in on that front, but very open to adding equivalent support if it was something our users needed. That’s a good call-out! In the meantime, given our ability to run containers as well as static sites, running an nginx or something with the redirects in the config file would be possible as a stopgap.

Thanks for the thoughts!
Something I told the younger engineers in my last so-many years before I retired: "It's not the project you're working on, it's your co-workers. If you find a team where you're happy, where the manager is cool, stay there."
> I'm sort of convinced that Sunak isn't daft, nor is he surrounded by daft pipe-smoking unicorn-chasers.

Honestly, I think he is daft, or just underbriefed about this.

There is a lot of lobbying money going into suggesting this scenario is a positive. The NSPCC are spending literally almost their entire lobbying budget on it due to the personal obsession of key staff, and the Age Verification Providers Association is telling MPs that the UK has a chance to build loads of successful businesses selling age verification to the world as they'll have first mover advantage, so it will be a net plus to the economy rather than a massive fiscal drag.

These arguments are self interested nonsense from a delusional group that does not want to lose it's terrible investment, but they are absolutely been taken seriously by the current government.

Useful lobbying by UK businesses needs to focus on this being a pipe dream - if age verification worked, the money would not be made by UK businesses (if it genuinely takes off do you really not think Google and Facebook would eat that market? Really???), and in the meantime it is rent seeking that will cripple UK start-ups.
I came across an interesting take on this in the book Algorithms to live by [1]. They argue that old age is a time of exploitation (as in explore/exploit strategy) where we tend to prioritize relations/experiences that we know to be rewarding. At a younger age, we are more accommodating to explore new experiences. That is why a teenager entering a dorm in a new environment full of strangers can get excited while for old people entering a retirement home it can be a harrowing experience.

1 - https://www.amazon.com/gp/product/1627790365
I don't think most straight people are aware just how much of everyday life is peppered with aspects of their sexuality - holding hands, kissing their spouse or partner goodbye, even just referring to them in a gendered way. Growing up closeted, this is something I was acutely aware of every moment of every day.

A welcoming environment for LGBTQ+ people has nothing to do with their genitals, and everything to do with them being able to be genuine and open about themselves without consequence.
> and those behind CG-NAT

I'm in two minds about how I feel inconveniencing those behind CG-NAT. I don't want to punish the innocent, but the ISPs aren't going to move towards better solutions (IPv6) without a push from their paying customers, and they'll never get that push with sufficient strength if we work tirelessly to make the problem affect us and not affect those subscribers.
The other professions have the same choice as programmers - either sell their service and worry about all other stuff, or outsource these worries and get hired.

There is no shortage of jobs where programmers are getting paid for programming.
If you allow several hundred subscriptions, then make sure you can filter through various ways too. So easy. There are channels who create good content, but on rare occasions. So if you unsubscribe you have to manually view their channel.
Yes, the range of applications where proof of work is viable is really narrow. (In fact, so narrow that I suspect it can't work for anything where the abuse has a monetary motive.)

One way to think about this is by comparing the cost of passing the POW to the money the same compute resources would make when mining a cryptocurrency. I believe that a low-end phone used for mining a CPU-based cryptocurrency would be making O(1 cent) per day. Let's say that you're willing to cause 1 minute of friction for legit users on low-end devices (already something that I'd expect will be unacceptable from a product perspective). Congratulations: you just cost the attacker 1/1500th of a cent. That's orders of magnitudes too low to have any impact on the economics of spam, credential stuffing, scraping, or other typical bulk abuse.
Personally, I'm using Anbox to occasionally run a single Android app on my Librem 5 and it's a banking app (Polish mBank), which works fine with it.

For what it's worth, that app isn't actually necessary, but comes with some handy features that aren't available on their Web frontend like token-based payments that can be used in ATMs or shop terminals without using a card, which is what I'm using the app for (regular payments can be easily made via the browser).
> Coffee is one example, where if someone has an unusually high levels of the biomarker for it and has difficulty sleeping during the night, reducing coffee intake may improve their sleep level and quality.

This doesn't seem like something you need a blood test to figure out...
> The fact that not all metadata is encrypted

This was one of my concerns when I first encountered this trade off in Solaris zfs. That is, you claim that the Solaris zfs encryption is better in this regard but it’s not.
Yaegi v0.14.0 Go interpreter is out, with support of generics
Show HN: Random Rijks – See a Random Artwork from the Amsterdam Rijksmuseum
We could call it 'diff(1)'
I’m not familiar with Zeihan, but those are bold claims indeed! I’m not disputing — these are weird times indeed — but can you summarize the reasoning behind those? I’m particularly curious about what is the expected cause of Chinese societal collapse in such a short timeframe; that’s not an idea I’ve encountered.
i own a construction business.
Its in the release notes: they don’t yet support async database clients. ;)
There were still plenty of Roman settlements to the north of Brussels, so it's a bit curious that Belgica itself seems hardly populated. Maybe because of that tiny town that kept on resisting Roman rule?
Chip startup Tachyum alleges Cadence sabotaged processor rollout
Not like the British public gets to vote here.
Pretty neat, never heard of it. I only predate this project by 3 months. They've got all sorts of goodies such as Git and blog hosting. I'm definitely signing up for this.
Simple answer is I don't know, but it appears to be happening to other search engines as well.

My best guess is they're assuming it's backed by google, and are attempting to poison its search term suggestions. The queries I've been getting are fairly long and highly specific, often within e-pharma or online casino or similarly sketchy areas.
Forgoing the copyright debate, if the book isn't like a Gutenberg Bible or something then an owner could always unbind it, send it through a scanner, and share a pdf. I've also seen instructions on building a DIY book scanner that's a lot more labor intensive but does not require damaging the book.

I had professors share PDFs of textbooks with the class, and I've been the person to torrent textbooks and provide them to classes full of people.

There are ways around the textbook industry, and the industry is so scummy they really deserve to have their works distributed in a way that doesn't give them any revenue.
> Also read the addendum from the same report:

Your initial claim was that these issues were addressed in 4.0.

Jepsen's report refutes your claim,and demonstrates MongoDB had serious reliability problems even in 4.2.6.

Frankly, your insistence in pulling the wool over everyone's eyes, specially on a topic that's easily verified, does not help built up trust on MongoDB