skysight-inc/HackerNews huggingface dataset:
Can see this as being part of the US mandate from the Infrastructure Investment and Jobs Act to add impaired driver detection. What that will be is at the discretion of the Department of Transportation.
Look in the mirror. That’s what you have control over.
CloudFlare allows website host to have much finer grain control that would have solved many of these problems - if they pay for it. I see no problem with this.
Just curious, which side of the divide do you think predominantly Muslim countries would fall on in this WW3 scenario?

Asking to satisfy my constant hunger for alternate-history/possible-future worldbuilding.
An explanation not found in the article:

Married men negotiate their salaries with more skill than unmarried men. Marriage is often associated with the wish to raise children. Children are expensive. Therefore there's more to lose if you don't negotiate your salary well.
"I don't understand why people want multiple compilers."

Most people don't. But most development moved away from C/C++ before rust.

If you want to call C & C++ "deprecated" you can't ignore the margins, which is exactly where those languages thrive.

Maybe there needs to be a tiny (incomplete?) rust compiler. Or maybe there should be an interpreter.
> There is no ethical responsibility.

Then stop calling yourself a software engineer. Engineering has an ethical responsibility associated with all of their work.

Go be a software developer with your no responsibility. Work on Dark Patterns. Work on spying on your customers. Work on making “Developer” an epithet so the rest of us can use you as an example to push for actual Engineering status and the protections that go with it.

Why do we expect more grace and generosity from the hosts of social gatherings than we do with software that will touch the lives of millions of users? That’s madness.

“Oh you don’t like that there are no snacks? Well then bring your own.” would get you blackballed in any other setting. It’s antisocial, which kind of goes with our stereotype. Most of us don’t like it, some of us don’t see how we feed into it.
this is an unpopular opinion, most people including myself would say the opposite. react-hook-forms seems pretty natural and closer to html form & plain javascript, while Formik is (was?) this bizzare thing that forces jsx and controlled inputs upon us devs.
Not sure if it was there 2 hours ago, but you can download GA now: https://jdk.java.net/19/
I was in the defendant class for one of these Silicon Valley film anti-poaching lawsuits. :) And I agree that companies, including the one I worked for, shouldn’t be able to agree to prevent hiring from each other. The main problem this caused was it made it harder for any individual to leave one company for another, with no poaching involved, and because of that (it was argued) it suppressed the general competitiveness and salaries of the employees.

Do keep in mind that this case (companies agreeing they won’t hire from each other) is a bit different from an angry employee leaving and soliciting some friends to go with him to a new company. Like I said, it might be perfectly legal, and yet still cause you serious trouble if you do it. Some people have ended up a lot more frustrated after leaving because of things they did on the way out. It can work out well if you’re really in a position to start your own company and fight like the Traitorous Eight, but for most devs who just want a job, making huge waves on exit is pretty dangerous. Don’t take my word for it though.
But it does not since when things get off track no one is paying attention or too afraid to interject. You need a person anyways.
What happens is tax software, unless specifically told (and some will ask) will assign a cost-basis of $0 to something it doesn't know about, which makes the whole $15 appear as a capital gain.
What did the employee get in exchange? Bait and switch training?
You could also simply rob it, put it on a side table and accidentally destroy it while vacuuming your house.
I hear what you're saying and maybe I'm just not explaining myself well enough. You're totally right. Thanks for the clarification. I do understand things the way you're explaining them. I appreciate that you're trying. =)

You're right. Sell pressure (capital outflow) cannot end. That said, with inflation (or emission) becoming less and less over time, there won't be as much to sell.

I'm sorry, but difficulty is also security. Attacks aren't just about hashpower, it is also expense (capital to buy and run enough hash) for the attack. If the hashpower goes down, you're right... there is a window where attacks become possible before the difficulty adjusts (I'd argue ETH PoW per block adjustments were more secure), but that would require the same amount of lost hashpower to also be 'found' and dedicated towards attacking the network at the same time. It isn't like the network was less secure 1 month ago than it is today.
I think i found a windows user. Before downvoting please try to solve a puzzle
This is basically right, but to hairsplit, it's an O(mn) algorithm, which is significantly different from an O(n) algorithm in that you can't help manage the number of startups by adding partners.
I guess like ctrl.blog you can't grasp the significance of the issue until it happens to you. My firefox fork is definitely blocked by his algorithmic "bot" detector. Just because your browser isn't doesn't mean it only blocks bots.

False positives happen. They happen a lot more than you think. And they are a serious problem. Even more serious when it's cloudflare, but arguing for everyone to implement these algorithmic blocks "that won’t inconvenience users" individually, taken to it's logical end, does the same.
The reason to care is that married women do not see a corresponding bump in their pay after marriage.
As a developer who’s been working with React since the beta, I can confidently say that the author is speaking the truth. Especially so near the end of the article where they can’t seem to quit React.

For all the annoyances of Hooks, they really are a godsend when it comes to composing state. And refs do indeed suck, but they sucked even more with class based components. I can’t tell you how many times I was able to solve a complex DOM state issue with custom hooks wrapped around refs.

Newer tools like Svelte and Solid do look promising as far as removing boilerplate, but they personally feel a step too far off the path of “it’s just JavaScript.”

Has anyone else here successfully left for greener JS pastures?
Sometimes (very rarely) a video won't start until I turn off ublock, for some reason. But I can turn it back on after it starts playing and everything is fine.
Moving from MD5 to SHA256 means we just about triple the amount of time it takes to generate a hash.

But I suggest there are few applications where this speed improvement justifies the confusion I've seen in junior engineers who believe MD5 is okay because a. they use MD5SUM and b. Bruce Schneier said it was okay.

Don't get me wrong. I trust that //YOU// will know not depend on a MD5 hash for anything where a bad guy can modify content over the wire. But... I'm going to go out on a limb and guess you're somewhat experienced. I worry about the kids who without the benefit of experience re-enact scenes from the cryptography edition of Lord of the Flies.

But... if you know what you're doing... sure... use MD5... There's certainly no way your code will ever be used by a less experienced engineer, right?
That's exactly what we're optimizing for - reduce the coordination overhead and allow builders to focus on building
It's been long enough that I'd have to dig up the emails. May have been RUM, uncertain. Bottom line is we have never been treated that way by any other company. No matter how many podcasts they put ads on or events they sponsor at conferences, they are the tech equivalent of used cars salesmen; they are not friends of developers.
Maybe I’m a React apologist, but this list of complaints seems mostly self-inflicted.

> Form libraries are portly maintained or documented

The two-way data binding in Svelte saves ~4 lines of reusable hook function but doesn’t come close to covering defaults, validation, errors, dependent fields etc - all of that is essential complexity.

Write your own form field hook. The state model for a form is simple - what is a 3rd party library bringing to the table in terms of state management? I have more pain explaining what I want to a 3rd party library than I do writing a bit of code myself to do the same thing. I reach for open-source input components from a vendor for things like credit cards, but manage the state myself.

> useContext and useEffect have annoying dependency tracking; I prefer Solid’s mutable state and automatic dependency tracking.

React’s built-in hooks are positioned as building blocks with clear-cut contracts. Why dump Redux for bare useContext if you prefer Redux’s selectors? Just use Redux. If you like the Solid style of automatic dependency tracking and mutable state, just use Mobx - it’s a mature library for that style that’s been around for 7+ years, and is used in production by products like Linear and Cron.

Overall I agree that function components in React are difficult to get right for developers and a bit too verbose. There’s an onboarding tradeoff to every abstraction you layer over the framework’s APIs, but there’s large advantages too. Do so judiciously to find the sweet spot for your team & scale.
'Alarm' is not really the right word; the CIA and its lack of accountability is a problem, but it's not a new problem or a particularly recently-worsening problem. It's one of the bad things about America that needs to be fixed, but Snowden does not provide any new information here.

And honestly, while I agree with the gist of what he's saying here, I tend to view his more recent stuff with a bit of a suspicious eye; he has made a pretty big deal about the oaths he swore that he believed required him to reveal the extent of the illegal NSA spying at great personal cost. But now, he's a citizen of the Russian Federation, which is basically a rogue intelligence agency with a kleptocracy attached to it. Which means he's sworn an oath (as all naturalized citizens must) to protect and serve the interests of that nation, to uphold its laws, etc. Does he take that oath seriously? If not, why do they tolerate him?

I appreciate what he did back in 2013. But now that he's under the defacto control of the Russian FSB, I will take what he says with a grain of salt. Especially something like this, which is an opinion piece with no new information attached.
> Flanked by the uniformed icons of his military and standing atop a Leni Riefenstahl stage, the leader clenched his fists to illustrate seizing the future from the forces of “fear, division, and darkness.”

I stopped reading once Godwin's Law applied. This was the first paragraph.
Last I heard, you're correct. I don't hear it talked about much, but I think that's because of restrictions on the content creators. But two creators I watch have both mentioned that premium views are worth something like 10-50x more than ad views.
> BLAKE2b is faster than MD5, SHA-1, SHA-2, and SHA-3, on 64-bit x86-64 and ARM architectures. BLAKE2 provides better security than SHA-2 and similar to that of SHA-3

https://en.wikipedia.org/wiki/BLAKE_(hash_function)#BLAKE2
Burn the witch!

Lets read through that page for a second though:

Drop support for obsolete HTTP versions

Doesn't seem like that's going to cause much issue for any legitimate client from the past 10-20 years. He only recommends blocking HTTP 0.9/1.0, which fair enough

Append a #hash to the form’s action URL

Hah. Clever man. I don't see how this is going to stop any legitimate user from loading your website or submitting the form, but I can see how it might frustrate bots.

Include a hidden prefilled form field

This is just standard practice to mitigate CSRF.

Verify the Host and Origin request headers

Yes. You should be doing that.

Set a test cookie and verify it gets included in the submission

Another CSRF trick.

Swap the name attributes in the name and email fields

This one's a little user hostile to folks who use assistive devices like screen readers. But still won't prevent you from accessing the site in the first place.

Verify the POST/Redirect/GET (PRG) chain

As noted by the author, might cause some issues but again, won't stop anyone from loading your website.

Block ancient versions of common browsers

Alright please just don't do this. UA blocking is gross and might prevent access through specialist software. But he also calls this out himself.

I strongly discourage you from blocking or discriminating against unknown or uncommon browser User-Agent request headers

All in all, with the exception of UA blocking I don't see how any of these mitigations would result in users not being able to access said website, or having their loading times drastically increased.
Meh. I agree with the sentiment, but in practice, I’m not sure we’re there yet. Maybe once Rust has a more robust standard library and less language-level churn we’ll be there.

If you’re writing something safety-critical, sure, use a memory-safe language like Rust/Go/etc. Otherwise, I think C++ is still plenty viable.
> We’re starting by taking on the daily status meeting, a.k.a. standups.

Are you able to share other ways you're setting out to reduce the overhead dev projects, beyond daily-status updates? It sounds like you've got the integration part nailed, which is really cool, but the problem space you're tackling first (daily standups) sounds like it could be resolved with automated Slack bots / a Google Doc (albeit more clumsily). As the tip of the iceberg in a much larger meeting-optimization system though, this might make perfect sense.
Every ad I get on YouTube is for TikTok. And then I go on HN and read about TikTok being an existential threat to Google.
> just leads to more trouble down the road.

I used to lean that way, but these days I disagree. Sometimes it's worth it to bolt as fast as you can and don't look back to meet a deadline. It's the difference between a $200m raise with a bunch of untested API endpoints and a $10m raise with them.

I'm speaking as the guy that ended up writing most of those missing tests. You don't have a lead for long in some of these spaces and sometimes "strike hard and fast" beats "death in the tarpit of tech debt" in the medium run.

BUT.

YOU NEED TO PAY THAT TECH DEBT OFF AND MOST PEOPLE DON'T THEN THE BUSINESS FAILS ANYWAY.

Sorry for yelling, but that last part is easy to forget.
Aside from DIY videos what do people use YouTube for? Music Videos? I know the White House does some announcements and I think they're streamed on YouTube but I doubt there would be commercials there.

-edit-

I guess people do put up some good product reviews, but you can just read a website or the person posting the review could disable ads or something. I'm not sure YouTube is as important as people are making it out to be. It reminds me of Facebook "but how will I do X without Facebook?" Idk, you either don't do that or find an alternative. I haven't had Facebook since at least 2011 or so and I don't think I'm really missing anything. It's just FOMO.
Interesting, I'm typically a curmudgeon with apps (I think most have terrible design) but the YT Music app is IMHO one of the best designed. It somewhat bucks the modern trend of being feature bare and lacking any settings.
The scenario is not finding collisions though. I assume londons_explore somehow finds a way to build a trusted relationship and channel with the future [1], say a piece of leather with the hashes burned into it that is ... stored publicly in Louvre with a ton of photo evidence spread all over the earth hence. As londons_explore is trusted, you only need Second Pre-image Resistance: Given a file (that was created outside of the attackers control) find a second file which has the same hash as the first file. Second pre-image attacks are super hard to accomplish. MD5 is still Second Preimage Resistant!

Adding a second random input to the hash function, like you propose (that is to prime the internal state of the hash function with same random input, so when hashing of the usage data starts, the internal state of the hash function is unknown to the attacker) makes collision attacks much harder. In fact there is a term for that: target collision resistance. But second pre-image attacks, where the random input used for the hashing are known, don't get any harder. And if you don't transmit the random input over the secure channel as well, than second pre-image attacks get easier even (theoretically), as attackers have the possibility to manipulate the internal state outside of the usage data.

Btw. reliance of target collision resistance, instead of collision resistance, is why Ed25519/Ed448 are much more resilient to problems with the hash function than ECDSA or any common RSA signature scheme. MD5 is still target collision resistant last time I checked. Remember the debacle of forged MD5 and later SHA1 certificates [2] ? Completely avoidable, if better signature schemes had been used.

[1] Otherwise https://news.ycombinator.com/item?id=32912052 applies.
[2] https://www.win.tue.nl/hashclash/rogue-ca/
Wouldn't we expect a similar price increase over the last 5 years, if only due to inflation and the 25% tariff?
It's pretty well acknowledged that the American tax system is heavily under the influence of lobbyists from tax filing companies like Intuit. You don't see these sorts of problems in other countries for individual or self employment taxes
> YouTube is too ubiquitous and useful

Is this a young person thing? At almost 50, I've found YouTube to be moderately interesting, but I probably watch something on it a few times a month and would effortlessly be able to leave it behind for the rest of my life if it became unusably annoying.
This is possible, but it would need some backwards incompatible in the object model. We still are likely to see Python 4 on one day. People are still remembering the pain Python 3 transition caused.
Fuel is essential to get a car moving forward. For people that’s motivation, and if doing “meta work” keeps engagement topped up and away from burn out, it’s absolutely just as justified as “actual work”. Natural tech debt build up in codebases as part of usual development process gets a fair amount of attention, but we don’t seem to address the “debt” build up on each developers’ mind over time as they notice things that they’d like to tune. It’s important to empty that cache every now and then :)
After recently taking on a relatively hefty Kotlin coroutine project for the express purpose of dealing with many suspends from io, I can say coroutines is pretty good at what it does. There are things that loom does better that I've been waiting years to get back into the JVM, but there are facets of coroutines that are just really straight forward that simply green threads can't easily resolve. My hope is that the java and Kotlin crews take the best of both worlds and create some.compelling frameworks, because in the end, a better set of products is good for everyone. Q
Browser Based NMAP Utility
ipspy.net new nmap feature is now in beta!!!!

Ipspy.net/nmap is a great web utility that allows you to easily scan your own website or system for open ports. This is a valuable tool for anyone looking to improve their cyber security posture. Give it a try today!

Nmap is a powerful network exploration and security auditing tool. It can be used to identify hosts and services on a network, as well as security issues. Nmap is widely used in the cyber security community and is an essential tool for penetration testing.

Nmap can easily identify open ports on the target host making it easy for you to audit your own website security. Nmap is also frequently used to scan for vulnerable open ports on systems.
Nmap is available for free and runs on all major platforms including Windows, Linux, and OS X.

https://ipspy.net/nmap
> The biggest trick the Devil ever played was convincing people that online stuff is free. But the Devil always collects, sooner or later—and we are starting to learn the actual terms of this cursed deal.

I understand the author's point, but a lot of stuff online really is free! I give away my musical arrangements, my code, and my thoughts all the time, and so do lots of other people. There's all sorts of public domain stuff where people have used their resources to make it freely available to others. You can get lots of really valuable material online for free, really and truly. I'm old enough to remember having to pay, individually, for a book containing each one of Bach's works, and now they're available for free online, along with all of Schubert, Mozart, Brahms, Beethoven, Palestrina — I could not have imagined such a wealth of music when I was a young musician.

It's important to remember that search engines, walled-garden media hosts, and the like are going to worsen your experience to make money, but it's also important to remember that sometimes people do good, generous things because they want to make the world better.
tbf the win 11 update finally stopped shilling minecraft in the start menu, although its still trying way too hard to convince me that their app store isnt a complete waste of money that will be gone in a decade.
That's all very well, but the 48kw/h number you quote is not only talking about those things. Hence your comment that it's high is not very relevant. It's not so high once those other things are included.
Useless rerenders are really hard to avoid in the latest react, mostly because they changed the rerendering logic of useTransition, breaking some of the state abstractions built on top of it. Had to downgrade and started to think about using class-based components again. Hooks are very beautiful but too weird, weak and leaky as an abstraction, unfortunately
Deals made on the basis of the valuation of future wealth were always gambles by both sides. The folks who cashed out made a profitable bet on future information and could have just as easily lost out. Their experience has no influence on the real wealth (in goods, not money) of the nation.
Yeah, this is another reason why so many people are suspicious of the push for "cash like" systems - like cash, they enable tax evasion. Which is one of those things we can each let slide for a bit on small amounts, but when it starts distorting the rest of the market we're not going to put up with.
Yeah, I don't mind supporting content creators so this is good news to hear. I actually was part of a google beta where they paid site owners based on your visits from a prepaid account but that was cancelled a few years ago.
But that's beside the main point. You guys are essentially the "single point of failure" for half the internet. [1] Being competent and smart doesn't really help too much, as demonstrated by how you guys had to give in to the pressure to censor recently.

[1]: https://easydns.com/blog/2020/07/20/turns-out-half-the-inter...
Thanks. My plan will be to follow along https://www.learncpp.com/ and then check out the Rust book later on then. I've found previous success in learning an older language that a newer one can replace (JavaScript to TypeScript) as it helps me understand why devs might prefer the newer language and what it aims to solve. It's a lot of learning, but perhaps that is a necessary evil to grow into a strong developer.
Because he denied it was going to happen and expressed skepticism at Western intel reports about the invasion. Then he was silent after the invasion.
Sure, but it's not entirely Netflix's fault; their content providers got into the streaming game themselves. Netflix is left desperately trying to build a catalog of first-party offerings before it's too late.

Some of it's shit, but you could say the same about Disney's back catalog.
I came here to say this.

Multipass is a solid tool.

https://itdeepdive.com/2020/10/kubernetes-multi-node-cluster...