skysight-inc/HackerNews huggingface dataset:
Unless the effort is well-circumscribed and short ("we will work an extra day the next three weekends"), congratulations, you are on a death march.

It is not going to change. We know that it's the worst possible way to run a project. We know long hours are actively damaging to cognitive capacity, introducing extra potential for errors and reducing overall output.

Well, OK, if you were in a position of power, it could change, because you could say "Nope. Not doing that". Short of that?

You can try convincing management that it's the worst possible idea, and they need to either cut scope or move the deadline. This will likely not work, because there's ego invested.

So... do look for that new job, just in case. And get out before you're completely burned out. (And if you can resist at all, make sure you limit your hours to something reasonable. You'll likely start excelling others by week 2)
They do have a threat score

https://developers.cloudflare.com/firewall/recipes/block-ip-...

I was surprised to learn Cloudflare was born out of Project Honeypot, so I am guessing Cloudflare does share data with them:

https://www.projecthoneypot.org/cloudflare_beta.html
I completely agree. I am against Cloudflare and the centralization it implies 100%. I never use it for sites I develop.

I just have no sympathy for Daniel since up until just now he was trying to get everyone to do this.
ReVanced is just around the corner.
> Nowadays it would be a complete waste of time to try to improve MD5

Not as a thought experiment. Thought experiments help you to grow.
What options really there is? China? Cuba? Iran? North Korea?

Yeah, knowing how the government treats political prisoners, going back to what would clearly not be a reasonable trial is something that anyone would do in the situation.
A "normalized" person eats about 2000 kilocalories per day, so that's ~95W. Math checks out.
Yeah, the tech-nerd chestnut to bring out here is Dunbar's number.

Not that that's necessarily the mechanism, but it's the thing to mention.
What you are experiencing is pretty normal, and if you're looking for a new job, chances are that you're not the only ones; therefore the project will become even more "compromised", for lack of better word.

Agile as a methodology solves the issue at a strategic level, but at the end of the day it is always human behavior that determines the way things work. Agile is a tool, and a tool is as good as the people who use it.

I suspect that your project encompassed a lot of people, I wonder if there is not since point of responsibility/accountability, so nobody make the hard choices, and the process was too "democratic".

Nothing can be done about this very project, and this is a symptom of the company as a whole.

This is how companies fail.
Yeah, haha.
Society keeps rejecting this simple solution.
I understand it isn't as simple as just "make the job easier," but in every one of these cases the problem could be fixed by pushing wages up, or improving working conditions or both.
Cloudflare Beta (2009)
I don't entirely disagree, but I think the takeaway is that the right path is not always intuitive, experience matters, and that it is hard for founders to trust advisors at times.

This one probably could have been 50% shorter, which would make it 200% more effective in communicating the message. PG needs an editor :)
None of those techniques affect normal browsing
No, don't jump to conclusions. I just want to understand the full picture.
If most people are there just to finish then comfort should be more important than speed. In that case big tires and more relaxed geometry makes perfect sense.
Notice that he suspects that some of the problems with podcast rss feeds and assets that can’t be captcha confirmed may be caused by websites who are on the free tier and that don’t have the ability to specify that some subdomains shouldn’t be blocked by captchas.

I have absolutely no sympathy for website owners who are depending on a free service.
Yeah, just wait until some HNer mentions a great talk on YT.
That would be in 1920s and states were far from sovereign back then. Maybe 1820s, then one could argue the union was more 'loose'. But even then, the union was pretty tight. Hence constant issue of slavery in federal law.
have you used both? Instagram has improved over the years but TikTok still blows it away. it's an infinite feed of visually attractive bullshit that you can scroll through smooth as butter—the ultimate cyberdrug.
We say: Hey, the police are killing us, could you please stop that.

No, we need to be tough on crime. It's just too bad that some people die, but I need to feel secure.

We say: Hey, the police are still killing us, could you please stop that. It looks like we need to reboot the justice system.

No, we need to be tough on crime. Why do you want the crime rate to go up?

We say: Hey, the police are still killing us, we need to abolish the police.

No, we need to be tough on crime. Why do you want everyone to be murdered in their beds?

---

Imagine just showing up at each of those exchanges, what would it look like without the history if you just saw a point in time.

We all live with an internal moral history - what we thought was righteous and unrighteous at any point in time.

---

In my canned example at the top, I didn't talk about the actual changes that took place in policing.

There's just no way for me to write my whole viewpoint on this situation in a comment. If it's possible for you to do that, then maybe you don't want a complex society with people who want different things and have different points of view. I deeply understand this perspective. It would be so nice if everyone just agreed with me. It would be so nice if everyone had the same moral history and there was no deep division and hatred. But that's just not the world we have. People are complicated and want different things. People have histories that lead them to believe a certain way.

---

Anyway, I think any police organization or system of justice should be based on reduction of harm.
What kind of monitoring did they strong-arm you into? How did they strong arm? Genuine questions!
So? What do you think that actually changes?
You block this guy from the internet for a week —- for no apparent reason —- and then you come in here with a nitpick about how another related system works?

Really?
Can definitely agree with his pain point about forms. I've been through most of the libraries, and the one I liked the most was Formik, because it felt like I could actually get something done. react-hook-forms is beautiful when it works, but the documentation is byzanthine - even when I know exactly what I'm looking for (and I've seen the page before), I often can't find it.
didn't it fail like 20 years ago, why do you think it'll succeed now?
_synthesize, the Developer Conference for Synthetic Data
I don't know the author or his reputation, but his suggestions that you linked are (in my opinion) standard actions for any dev/server admin getting spammed by their forms... And the suggestions really only impact malicious actors accessing your website from a script... Virtually none of those would be an issue for any browser made in the last 15-20 years, or headless browsers, but would break rudimentary scripts like entry level hackers/spammers might use.

He also specifically called out CAPTCHA as user-hostile.
> no one remembered the pain

And you'll develop a Cassandra-like ability to see it coming when it is coming, and you'll also learn that the absolute worst thing you can possibly do is to try to get ahead of it in any way. Don't point out to them that they're on the road to ruin or they'll blaze down the road faster and then blame you for it.
The Windows app store is .. extremely poorly used. I couldn't find any stats with a brief search, but it's not popular with either users or developers. And of course the existence of a free disintermediated alternative helps this.
I noticed this too. I hope it has some legs, would be nice to see another competitor in the space.
He very vocally defended Russia while they were building up to the invasion and then became completely silent after they invaded. I wouldn't be surprised if Snowden doesn't actually have the password to his Twitter account and can only post Putin approved tweets.
That might be because comments are more personal than about pages.
That 48kWh/day is supposed to include the energy used to make all of the objects you own and use though, not just your household energy usage. It takes a lot of energy to produce a house or car just to name two examples.
Sure, NVIDIA sets an MSRP, but that MSRP is a sticker price given to consumers and not representative of what the manufacturers pay for the chips themselves. Manufacturers need to make somewhat of a profit, but NVIDIA has encroached on this profit from its manufacturers since the 10-series came out. JayzTwoCents on YouTube recently discussed this while reporting on a meeting he had with EVGA's CEO about EVGA's recent break with NVIDIA [1].

When the 10-series came about, NVIDIA launched the a limited run of the founder's edition graphics cards at $100 above MSRP. Before the 10-series graphics cards, NVIDIA didn't sell cards themselves and went out of its way to make this seem as if this was a limited edition sort of product. Then the 20-series came out with a continuous run of founder's edition cards which were priced at MSRP, directly competing with their previous board partners.

Tie this along with the previous attempts to strongarm manufacturers via GPP and chip supply allocations, and I tend to give the gift of charity to the manufacturers and not NVIDIA.

[1] https://www.youtube.com/watch?v=12Hcbx33Rb4&t=61s
In the US, especially absent a large mortgage or significant charitable deductions, it's very possible--even probable--that, given tax changes about five years ago, you're within your standard deduction. I certainly am in a normal year.
It's almost as though sufficiently large communications providers should be regulated as utilities.
Their billing doesn't match up with AWS's (AWS is by the second, Datadog by the hour, or at least when we used it) even though it's by the cloud instance (doesn't roll over). So we ended up paying more for the monitoring than the actual resources being monitored. When we asked for a break, they agreed to give us a 50% break IF we signed up for additional services.
Do you have a good source?
If you analyze Carlsen‘s games versus weaker players, you will find situations where he willingly plays suboptimal lines to take the weaker opponent out of his prep.
The reason being that a draw is not enough for Carlsen in these situations.

I‘m curious to see their game analyzed with this taken into account.
This is a tautology and doesn't answer the question.
isn't 25 a little extreme?
Hegel: a sound type system for JavaScript
I've begun avoiding products I've been presented ads for. If only we could get enough people to do the same.
IMO, it was this sort of chicken & egg problem that slowed the adoption of 3.x in the first place. I know personally, I wasn't able to use 3.x for anything non-trivial until close to 3.7 because some of the 3rd party libs I needed weren't available. I seriously hope this doesn't happen again, though I am really excited for these improvements to CPython.
Furthermore, this situation that you’re in is almost always optional. Managers vary in skill, and most deadlines can be moved if necessary. If your team only says yes and can’t ever say no, this will always happen. You should find a place with a management team that can make your life and work better.
I somewhere read that there was a news ban but the news was spread via social networks and if you reach enough people, some looters will pop up.

Sadly, obviously the side had not been guarded well.
So some idiots destroyed potentially invaluable insights into the past for a couple of bucks on the black market.

Although I'm not a fan of penalties I'm thinking about whether fines for breaking the news coverage ban would be any effective. I mean, tracing the social networks shouldn't be difficult.
> The side effects could be nasty

Probably depends on how much more damaging acid rain is compared to the effects of climate change. Doesn't look like a feasible solution to be honest as this would be a process that has to repeated regularly.

Also, we could have just not made our cars emit less pollution in the past because we certainly did not curb sulfur dioxide emissions here to throw it at the poles. Why not build a racetrack at the poles instead?
Ethereum as a whole should not be bound by anyone's laws. Individual wallet holders and validators are bound by their local laws.
Why should he? He’s not Jesus or the world police.
tl;dr: The code should verify the user's second factor before the user's password.

Consider this, scenario A:

1. When attacker enters a username and bad password. then they receive a bad password error.

2. When attacker enters a username and good password, then they receive a 2FA prompt.

And then scenario B:

1. When attacker enters a username and bad password, then they receive a 2FA prompt.

2. When attacker enters a username and good password, then they receive a 2FA prompt.

In scenario A, the website leaks password validity to the attacker. In the case of a brute force attack, the attacker can use the 2FA prompt as a signal that they found a good password. Scenario B does not leak that information, because the second factor was wrong or missing.

More concretely, this pseudo-code:

if user.authenticate_with_password(password)
if user.authenticate_with_second_factor(code)
# ...
else
raise InvalidSecondFactorError
end
else
raise InvalidPasswordError
end

Should instead be this pseudo-code:

if user.authenticate_with_second_factor(code)
if user.authenticate_with_password(password)
# ...
else
raise InvalidPasswordError
end
else
raise InvalidSecondFactorError
end

Hope that makes sense. :)
Show HN: GPT-3 powered video summarization
Is this a one-off, or has it happened before?

If it’s happened before, who benefits from this structure? I’m guessing it’s not you (though you may find a way it could be).

If it hasn’t happened before, what’s different this time? Are more or different people or departments involved? What are their backgrounds and motivations?

All this is moot if you don’t have any influence to change either how things are done or how your contribution is perceived; in that case, use this as great fodder for interviews and get a pay bump in the process.
Yes. And when was the last time you had a processor fail, or ram, or motherboard?

I've had one motherboard on a laptop go. And that was due to flexing at the hinge. Everything else was mechanical, and I keep pcs for longer than average. My current laptop is 7 years old I believe.
When talking about food exports, Corn and Soybean == food. That is what the article is talking about.
Or we could just do our work and not deal with a daily standup. Can we get an App for that please? or maybe a JIRA replacement? or AI that can go instead of ME?
so, speedcrunch, but on the web. got it.
> I strongly discourage you from blocking or discriminating against unknown or uncommon browser User-Agent request headers. The web is weird and we as developers shouldn’t discourage it.
> many EU countries have laws that essentially state that all their laws must comply with EU law

Isn’t granting the ECJ jurisdiction is a requirement of EU membership?
People also forget that banks are only FDIC insured up to a certain amount, generally. So if you have like $1b, though unlikely, there are many reasons to not keep it in cash.
No, the point is that Rust does not replace C. At best, it’s “safe C++” (and even that’s debatable, given the cyclic references issue discussed here). But for the use cases where even C++ is too much, there is no replacement for C.

Zig aspires to be that minimal language. It seems to have a lot of really good ideas. It’s too bad the compiler is so opinionated that a lot of developers will be alienated by it.
Waiting for React Recoil to become the standard, it's amazing!
The new head of YCombinator can probably attest to its effectiveness [0]

[0] https://news.ycombinator.com/item?id=32639125
Apple pushes the security angle as a big differentiator. Source: https://www.apple.com/privacy/
The title of that page says "Privacy.That’s Apple.".

I think as people get more knowledgeable of tech they will care more about security or privacy. It is already a big selling point of messaging applications.
If you input a username and wrong password, in some cases, the service won't prompt you for your 2FA code.

If you input the right username and password, it will then go forward in the flow and prompt you for the 2FA.

I believe parent comment is suggesting the system should prompt for 2FA even if the password was incorrect, so that you can't infer whether you guessed the correct password without also compromising the 2FA method.

This only matters if you re-use passwords, though.
You do you. Maybe it isn't said often enough, but each side (Rust-lovers and Rust-haters) has to be confident enough to allow others to disagree.

However, let's be serious, the anti-Rust crowd has not been some bastion of high-minded virtue with its flimsy arguments ("Just write better code..." and "Modern C++ doesn't have these issues..."), mole hill matters of taste ("Egads! The syntax!"), drive by hype hate, and unexplained red-herring cul de sacs ("I doesn't have a spec!" Okay, why do you need a spec?).

> I'm defending my position because it appears you all think it's not acceptable. You're wrong.

I'm not sure this and sentiments like it represent something less narrow-minded? Most of the time, it seems kinda resentful?
Checklist for Publishing NPM Packages
Personally I prefer a bicycle if the use case and distance is right!
Checklists can be useful tools to handle the complexities of modern life. Used by pilots and other professions handling complex tasks, checklists can also be useful for software developers.
Nice, I was hoping to see someone pick up the slack here.
Not replying to anyone in particular, but regarding Assange, Snowden, and Putin (and by extension his /patron/ Xi): has it ever occured to any of you that our corruption has turned into a weapon in the hands of our enemies, and that we can't deal with the situation if we never address the corruption to begin with?
I can't seem to find a 3080 under 750 euro in EU (used or new). Actually ebay.de prices seem to be still higher than store prices.
I think some developers live in some strange land where they either don’t have enough to do or have the freedom to navel gaze at these things.

From my POV, I’ve been in the tech biz for a long time and never had an issue with managing deadlines. Sometimes they need to slip, but overall, we seem to middle through.
You often have to correctly document each step (and I don't know if the law is "smart" enough yet to allow you to deduct the electricity charge unless you set the whole thing up as a 'company') and allow it to know the "cost basis" for each step.
For me that’s a general problem. Facebook is trying to get me to buy a new car, at 2-3 times what I am willing to spend on a car (I can practically see the marketing department scream but you make good money, but of course that doesn’t mean I will spend them on overpriced vehicles).

The joke is that I just bought a car some months ago, so they missed it and missed it.

I don’t know whom you scream at to show me things worth their cost. Instead of showing me things I might want they just force you to watch more ads for terrible things.

I don’t know if you tried to tell them your interests, but it seems like they just ignore them.
The thesis of this article is that advertisements no longer work as an enticement to get people to buy things, so they've started being used as a cudgel to force people into subscriptions, and it's going to get worse.

I think this was clear a long time ago, but I guess it's good when someone says it on a fairly widely read blog.
Threaded IO code on Python is fine if you are IO limited, as opposite to CPU limited. Most web workloads are like this as they wait database.
The "ride feel" argument is something I quite frankly never understood.

I guess it's because I don't do competitive road racing (more of an ultra / bikepacking sort of guy). When I was shopping for my current frame (Kona Rove), I picked up the steel version mostly for maintenance / mechanical reasons more than anything else. Don't see much of a difference in "feel" from my old aluminium road to be honest (other than what's caused by the different geometry / fit).

I'd like to build up some chinese carbon frame next year just for fun, so we'll see. Maybe I'll change opinion then.

But yeah, I 100% agree that the aerodynamics on modern frames is significantly better. Just not really at the speeds at which I end up riding and with the amount of gear / packs I end up putting on the frame / handlebars.
> I see this as a way to give companies an incentive to train workers.

They don't need this abusive system to do that. They can reimburse college credits and require a certain amount of time. The difference is that they aren't charging $20k for training that is worth $500.

> Today we have something much more coercive than indentured servitude and that's involuntary servitude in the form of income tax law. At least with indentured servitude you choose the servitude and it expires after the ordained time.

That's not indentured servitude. As soon as you quit making money, you owe no tax. How are you handcuffed into servitude when income is taxed and not wealth?
I've taken to keeping my TTLs at 5 minutes as a default for personal stuff. The potential extra latency of a full update every time you access a not-very-often accessed resource is fine and even for commonly accessed things the performance difference is negligible. Though I'm away I'm putting a little extra load on DNS caches elsewhere as they need to make extra recursive queries, so I might not do that for a high traffic service.

> not everyone even respects TTL

This used to be a problem with at least one common DNS cache, where it would see a very small value as an error and apply its own default (24 hours IIRC) instead. 10 minutes was fine, but 9m59s and it would not update until next day (the threshold may not have been 10 mins, it could have been 500s (8m20s), but it was something of that order).

I'm pretty sure that is not longer a common DNS daemon, or if it is that behaviour has been fixed, so these days I'm not really concerned for my projects. For work things I might be a bit more restrained with short TTLs, just in case (for personal projects I can take the “it is not my fault your DNS setup is broken” line, but that sort of attitude doesn't always fly in a commercial environment!).
Do Better in Coding Interviews by Being Confident and Humble
Sounds logical to me! Put more people in the car and the total energy budget for car travel goes up, right?
From the link you mentioned:

> Bots often mimic the User-Agent of a common browser, but the version numbers used in the bots rarely change. Over time they drift farther and farther behind until a point (maybe two-year-old versions) where you can safely block them without inconveniencing legitimate users.

This supports the idea that browsers are subject to constant change and everyone should be forced to come along (rather than respecting and supporting standards). I have a Chromebook that stopped receiving updates some years ago (thank you for your very safe and sustainable product Google!), his heuristic would litteraly block me.
There are a couple of industries were C++ is king and I seriously doubt Rust will be adopted en masse for the foreseeable future: game dev and audio dev.
I love HN, but at the end of the day, it's a reddit-clone for a silicon valley VC fund. No one is here to start a revolution, and in fact, a lot of users probably make a living doing things that snowden sympathizers (I don't mean that as a slight, I am one) would claim are ruining the world.