skysight-inc/HackerNews huggingface dataset:
> Your assumption is that there's zero time between a leak and the abuse. If my password reaches the abuser after it expires, then I have been saved by the rotation.

Nope, that wasn't my assumption. What I said above applies there equally.

> Also rotation + "no reuse" policy essentially guarantees that eventually the password will be unique and not reused across services.

No it doesn't, in fact it increases password reuse and results in pattern-style passwords.
Ye. This story would have been way more interesting with examples of the products. Otherwise there is not much to discuss of the posters specific situation or why he failed.
Ask HN: How to negotiate shares at my new job?
I'm soon going to become CTO at a small-ish company, valued approx €15-20M and with a possible exit in sight (next 5 years).
This company is active in country A, where it's market leader, with a very old website.
It recently launched in country B with a basic site I'm going to rewrite.
The goal is to then use this site for country A and possibly C-D in the future.

They offered bonuses (too small in my opinion) if the rewrite is successful, but I'd rather have shares (even a 1-2% would be a lot in case of a future exit).
They seem to be reluctant about it, how can I make them change their mind?
I am in the uk and have never heard "dialog" used by British speakers any other way. My experience has near universally that everybody that knows the term spells it "dialog", same as nobody spells "disk" with a c when it comes to the rectangular computer variety.
> But then don't call yourself Data Scientist because that puts you into the same low-barrier camp as all the others. From my own experience it's a clear resume red flag: Almost anyone that market themselves as primarily a "Data Scientist" has little technical skills.

How do you imagine the specifics here? Let's say that you have the technical skills, and come across and meaningful, technically challenging job that you like and the job title is data scientist - do you not take the job because of the title? Or do you lie about what your title is in the future?
US based companies would be well served by applying this list to their communication as well.

These are real life words from a real life human, recently observed: "The value drivers reducing company spend"

Spend is a verb and value is not street-legal here in the states.
This is, essentially, harder to remember passwords.

Probably more secure, provided you don't make a mistake. But also easier to mistake and then lock yourself out. Auditing is also harder, now
Sky (Germany) has 4 digit codes for their accounts. Ridiculous.
Seems like RSS comeback gets discussed often: https://hn.algolia.com/?q=RSS
I tried to set this up earlier this year, but what I realized I really wanted was RSS + change detection for some discussion forums and other sites that didn't offer RSS.

That companies like feedly didn't seem to offer this functionality but were trying to emphasize social networking and tagging my articles (for who?) made it easy to walk away after the trial.
The light social layer on top of stories was super interesting. You could comment on articles with your friends. There was a lot of potential there.
Or not banning users regardless of what they did if they are popular enough.
I still remember when the kindle first came out, it would read to you. Before publishers threatened to sue. With modern text to speech getting so good, there really is no reason an inference model couldn't run on every device to read to us. I guess book readers were the first to have their jobs replaced by AI, but contracts didn't let it happen.
I’ve been using miniflux, and it’s quite cool. David Winer’s Feedland is nifty too.
> American tend to compare the worst of their country with the best

Everyone does that. There seems to be a type of bragging that works by emphasizing how much more dangerous one's own country/state/town/village is than someone else's.
"the poor kid learns plumbing from his dad." ..........
Shipping Go is a hell of a lot easier.
NetNewsWire if you're on macOS/iPhone
>>A starting salary of 100k (lower than most FAANGs) may be excessive but in most >>of America 100k is barely enough for a house, car, kids (especially with >>college), and a comfortable retirement savings. It’s more than enough for a >>young single person, but not to support a family.

Especially in cities like New York, San Francisco, etc...
You missed the point entirely.
I guess this post made an impact on me. Earlier I was using the policy of Upper, lower, special characters but now using zxcvbn. https://zxcvbn-ts.github.io/zxcvbn/ Much thanks to the creators and maintainers.

It only took me 5 minutes for the whole thing.
If someone has declared themself to be your enemy by suing you, and seeks to do you harm, it seems reasonable that you might decline to offer them your hospitality.
So because the macOS stack is janky, a solution is to ditch the standardization layer and run things directly in the janky stack?

That seems like a road to bringing in an entire new set of environment-specific bugs and hacks.
If it can be wiped on incorrect pin usage, you can be maliciously locked out of accounts relatively easily.
Well, GNU/linux is more "C plus GCC" than pure C. There are a lot of fancy things that GCC gives you that you'd otherwise have to do explicitly.
It's been decades since I bothered with an IQ test...but several of the tests I recall were very obviously the sort of thing that you could both cram for, and improve your score by practicing their narrow style of questions/problems.

But, alas - "twin K got a higher test score than twin A, after twin K went to test-prep school" is not a headline to get many clicks.
The point is that he doesn't need the money. He's one of the most successful authors in the world and the delivery is just writing four books. I just don't understand why he made a Kickstarter to begin with. The previous record holder (Pebble) made sense because of R&D and hardware.

The scam part is everyone always putting new Kickstarters under extreme scrutiny regarding the money they're trying to raise and if they really need it. Meanwhile this project has no upfront costs, nothing, that defends asking people to pledge money to it.
Yea. I was a programmer working for a stable telecom company at the time. We didn't have kids yet and lived in a low cost of living area where it was possible to live off of my income. It wasn't a huge sum of money by any stretch, but it was enough while we limited expenses.

There were a lot of trials. We were close to having to file for bankruptcy 6 different times during a particularly difficult 2 year stretch. Our exit plan was always that she just go back to work with the potential to have to sell our house to pay of debts or lease agreements.

Starting a business is hard with a lot of risks and that's before you actually hire staff. The moment that you have to consistently make payroll on time, your stress level goes through the roof with the combination of obligation to financial consistency and the knowledge that you are responsible for other people (and their families in many cases).
It should be noted C4 is for software architecture, specifically. Not system architecture, generally.

When diagramming (say) a cloud system architecture, you should use the abstractions that come with that cloud environment (in AWS it'd be things like Account, Region, Lambda, etc.). There is no benefit in translating these abstractions to C4's abstractions that were designed for software (Context, Container, and Component).
From the German Wikipedia article on "Softwareentwickler":

My translation:

The job title _software developer_ is not a protected job title in Germany and Austria.

According to German law, the job title _software engineer_ may only be used by those who have successfully completed a technical degree. In Austria, the title of engineer can also be acquired through training at an HTL [Höhere Technische Lehranstalt, aprox.: Higher Technical College].

Original:

Die Berufsbezeichnung _Softwareentwickler_ ist in Deutschland und Österreich keine geschützte Berufsbezeichnung.

Die Berufsbezeichnung _Softwareingenieur_ darf nach deutschem Recht nur führen, wer ein technisches Studium mit Erfolg abgeschlossen hat. In Österreich kann der Ingenieurstitel auch durch die Ausbildung an einer HTL erworben werden.

Source: https://de.wikipedia.org/wiki/Softwareentwickler#Berufsbezei... (in German)
User Interface Design: Rules of Thumb
I hate seeing 'utilise' where 'use' would be perfectly fine.
Well yes and no. Innovating as an employee sucks because somebody else gets all the benefits.
Agree. I'd like to see an OpenBSD pledge(2) type system for libraries. So you can mask individual library capabilities rather than just programs. I don't want a web server that can write to the file system and I don't want a CSV reader that can talk to the network.
thank you,
will take a look.

i wrote a script that creates bunch of resources for aws and configures everything i ve mentioned in several aws cloudformation stacks.

after that it is just git push to dev or merge to prod to start developing or rolling out the actual product.
I have a suspicion that if Elon Musk types were given free reign we would end up with people working overtime for pennies.
I can't find any pricing info, what's the deal?
1) Java has the very best GCs out of anything to the point that I very much question anyone claiming to suffer from GC pauses on most workloads. Do you really have an application which suffers from that or is that just the usual “GC bad” mantra? Your average C program may spend just as much time trying to malloc a given block in its fragmented heap than that.

2) Why exactly? 3) that’s why you have a GC. But if I really want to understand what you mean (I assume you meant non-memory resources not being explicitly closed?), try-with-resources and cleaners solve the problem quite well.

4) Does it really matter if the last 2 decades were spent on optimizing allocation to the point where it is literally a pointer bump and like 3 basic, thread-local instructions? Deallocation can be amortized to be practically zero cost (moving GC), at RAM’s expense. Where it really really matters though, you could always do ByteBuffers, the new MemorySegment’s or just straight sun.misc.Unsafe pointer arithmetics. That string allocation will be escape analyzed and be stack allocated either way.

I don’t even know what do you mean by static allocation. You mean like in embedded, having fix sized arrays and exploding when the user enters a 32+1 letter text? I really don’t miss that. 6) value classes are coming and solving the issue. Though it begs the question, what’s the size of your average list? Also, how come it doesn’t matter for all the linked lists used extensively in C? Also, see point 4. 7) I don’t get what you mean here, do you mean not doing atomic instructions, because java don’t have out-of-thin-air values? There are rare programs that can get away with that, but I think Java has quite a great toolkit for synchronization primitives to build everything (most concurrency books use it for a reason).
Public transport in Tyson's Corner, or the Metro anyway, is very much an afterthought. The original plans for the Washington area metro ended well short of Tyson's
Edit: I big brained and wrote this whole thing while thinking Spotify. I believe my thoughts on the matter stand, though. So I’ll just correct the wording. P.S. I don’t hold this opinion strongly. I’m eager to hear other thoughts on the matter.

I’m not a fan of this perspective because it can sound like people believe it’s the company who is behaving wrongly, and they want a form of charity from it. They want Audible to give up profit because they don’t l feel it’s fair. If Audible isn’t worth 60-75%, don’t use it to distribute your media. Which is probably not a viable option. I think this leads to the real complaint candidates:

“Audible has a monopoly over audiobook creation/distribution by breaking laws, and should be dealt with by the government.”

“Audible has a monopoly without breaking laws but I think there should be laws.”

“I don’t like how capitalism works.”

“Capitalism isn’t working in my favour this time.”

Audible isn’t the right audience for any of these complaints.

If Audible’s service isn’t worth anywhere near that much, they either are acting in a way where government should intervene, or there’s a deliciously ripe opportunity for another business to thrive if they can overcome the inertia of the incumbent.

Don’t get me wrong, I think the creators should take home the bulk, and I bet, on intuition alone, that there’s plenty of money to run a music service at a fraction of the take.
I bought a $200 version of Way of Kings [1]. It is actually two books. It is nicest book I own, and I have some pretty nice books. I only did $60 for the kickstarter campaign. That gets you all the books and audio books.

Brandon does stuff for his fans. Sure he is probably quite wealthy at this point, but he is just writing books for /us/ still. He actually finishes stories and is a good guy. I freely support him with $. I know many fans feel the same way. He writes books for everyone and has some really fun stories. Reading his blog post about Audible just affirms my long support for him.

[1] https://www.dragonsteelbooks.com/products/the-way-of-kings-l...
And just recently, commenters here were saying that no one reads complicated books any more.

(My kids read Sanderson. In volume. One of them is responsible for an average chunk of that kickstarter)
Burden?
If the substrate/infrastructure you're playing in is maintained by our tax money, count your blessings and work to build trust in a system that, as others in this thread have already said, helps set everyone up to more-safely fail and grow.
No one person is so important that we need to cultivate philanthropists. I'd far rather we collectively decide what to do with wealth generated from natural resources (all the way up to human resources). We can do better than the relatively few wealthy people with the means and inclination to give back.

The question is, how do we build a stronger representative government in the United States (where I live) when we're so divided and distrusting? Having a common enemy might work, but it can't be another group of people to go to war with. Might need to be the metaphorical devil(s) on our shoulders, and for that we need good mental health training from a young age, which now, given how broken and dispersed so many family groups are, requires tax money guided by science and wisdom.

You and I are here but a moment. The bleeding edge of life will quickly pass us by, and the positive impact I am most proud of is the love and care I give to future generations, human and otherwise.
Thanks for sharing your story, I see where you're at and have had similar thoughts throughout my career.

It definitely is not a fair game: I literally started my first company because I knew my parents wouldn't let me starve and I could just crash at their place for years before I 'made it'.

~13 years in, still haven't made it but I can make a living. Every time I talk to aspiring entrepreneurs I make sure to highlight all the crap you have to go through
to counter the media doing a great job at highlighting the good stuff.
I think he’s kind of making a case that the rich kids aren’t always the ones that succeed ultimately in startups because they leave at first sight of trouble.
This is an area where machine learning could make a positive impact to society. Have something like GPT rewrite/review all public facing text. Preferably a required rewrite, which is published unless it is factually incorrect.
This is an explanation and reasoning. It’s designed to make people think about policies and scenarios, and not to blindly apply random suggestions.

What is against NIST guidelines?

The length argument works both ways: just as a purely lowercase alphabetic password, if long enough, is safe, a very short (in term of code points) password with full unicode spectrum can be safe as well.
Did Taco get himself cancelled or something? Way back when, slashdot was every bit as central to tech culture as HN is today.
Sanderson's fans are very loyal, and he has proven that he will deliver.
I still find myself making different diagrams for different levels of complexity. Things like "infrastructure diagram", "microservice diagram", "vendor dependency diagram", sequence diagrams. Depending on what's happening the architecture may dynamically change, and I'm not always sure how to represent that.
This is correct from what I've seen, but it's not well documented. Also, that fine-tuning is "better for training "
style than knowledge."
I have been using RSS for the last 10+ years and have not been on social media for almost at least that long.
> I want access the RSS of NYT, where I find it?

https://www.nytimes.com/rss
Similarly, "learnings".

Better known as "lessons", or "things we've learned".
I find it hilarious (in a mildly sad way) that NTSC (or any other analog system) is a far better system for final delivery when conditions aren't effectively perfect. Guarantee you that a digital broadcast will break down far before any analog broadcast will.

If only digital could be used for 99% of distribution, with OTA still being at least some sort of hybrid system for better resilience. Digital broadcasting has very low resilience to interference. Speaking from a US perspective here, where we got saddled with 8VSB (from my understanding, COFDM is much more resilient).
Cold email is a hit and miss approach. Just go talk to people face to face. Initially it seems like a non-scalable approach but it works wonders. The silicon valley, VC preached mantra of hyper scale is what muddles the minds of most entrepreneurs. Everyone starts thinking of million of users rather than 100s of users. There is a very interesting presentation from YC startup school 2008: https://www.youtube.com/watch?v=0CDXJ6bMkMY

You will recognise the speaker :)
This is my biggest gripe with WebDev, followed by thread limits.
I didn’t actually intend it to be uncharitable - sometimes allowing a stakeholder (even a ‘key’ stakeholder) an off ramp to a potentially awkward situation is a much better outcome for the long term health of the project where it’s a reasonable assumption you’re going to have to work with this person again, for a period of possibly months or years.

HN probably has a higher proportion of people who prefer a slightly more direct style of communication, and enjoy working with code which is much more functional IO than working with humans. If those people are coming to HN to blow off steam, that’s what you should expect - doesn’t mean it wouldn’t be disastrous if anyone tried to implement it in the real world.
https://archive.ph/NPTPO
This is absolutely not true in my experience.

Could you expand on those points? Specifically, what do you want to see for code or package signing? Has there been opposition to this before?

It should be trivial to sign a trusted derivation, but the signed artifact is either an out-of-band signature that has to be verified, or a new signed derivation is produced which creates problems for anything consuming the non-signed derivation.
So the whole opinion piece hinges on unpopularity of Twitter? Bold move.
Where are you finding these customers?

May I ask what industries you’ve targeted?

Businesses or Customers?
It’s been nearly 30 years now…but I recall getting a note home from the teacher when my son was in second grade communicating about his poor spelling test scores. Her note itself was riddled with spelling and grammatical errors. My wife took out a red pen, marked it up and sent it back to her.
As far as I understand the books are essentially self-published in this case, so there is certainly some investment needed to make all of this happen.
Jargon adds context in a community.

“Tubular” was a term of art for surfers before the Teenage Mutant Ninja Turtles showed up.

It’s a normal and natural thing to develop. But it’s also normal and good to have communications professionals mandate editorial standards so that people can understand outside of the niche.
I'm sorry but ban this technology now. The nefarious uses are easy to see and are already happening apparently. If we find good uses later for the public good (I really do struggle to think of these), we can figure out how to use it responsibly. This seems way more threatening to me than AI at the moment.
I use Newsblur, mostly. It feels a bit dated at times, but does what I want it to do and has an email address that you can send newsletters to to read like feeds. I've been meaning to switch over to miniflux for a while, but can never really get up the momentum. It seems nice.
And this, too:

> ...the twin raised in Korea described growing up in a loving and harmonious family home, the adopted sister reported a harsher upbringing, colored by regular conflict and the divorce of her adopted parents.
Because it's generally open to the public. Different rules apply to your home and your grocery store even though they're both "privately owned". The law, and most people, recognize numerous differences between the two even if you do not.
What we need to revive RSS is have a true integration into browsers. Your bookmarks would display the numbers of unread posts and there is probably more great stuff to do.
IgorPartola mentioned MySpace. When Facebook came out, I wondered why anyone would make a MySpace clone. I think there's an argument that there was a previous Facebook.
This is great; I had a thought that something similarly writable on tablets, but designed for tabletop RPGs would be great. The best of both worlds.

I use 5e Companion App on my phone, and find the interface is great. I have a Boox Note that I would love to have a way of tracking dynamic info (like spells) with the ability to write or erase overtop for things like notes, or maybe even HP...

I'm not exactly sure how it would work, but does anyone know if there is something like this out there? Some aspects could be handled through PDF links I suppose.
Sweden actually is one of the favourite destinations for immigrants.

Perhaps high skilled ones would prefer a country with better climate ... :-)
You just invented the Chinese "social credit" system all over again.

Sadly, I know a surprising number of people lamenting that we don't have it in the US - the thought is that collective punishment works to force a group to self-regulate, so why not apply it to groups of friends, family, etc and punish all of them as soon as one person steps out of line.
Back around when Sierra On-Line existed, there was a subscription that would call, email, and mail you clues and errata of some kind. I'll have to see if I can find the ad for it, maybe in one of my old PC Gamers.

I didn't sign up because I was afraid of how involved and expensive it would get. I guess to keep up the intrigue, they didn't make it clear you wouldn't have to call 1-900 numbers, travel anywhere, or send over personal information.
I hate how often I need to use words like “stack”, “anti pattern” and “key value store” so people believe I know my stuff. I feel like a tech bro.
I keep reading this as 3 million... but no, it's the company, "3M".
Audible is not a music service but an audiobook and podcast service.
Engine SIM: Procedurally Generating Audio Using a Real-Time Fluid Simulation
Have you considered just duplicating an existing business in a still growing market and then hiring a PPC/seo marketing agency? You don't have to invent anything new perse, and you absolutely need professional marketing in most cases.
Mentally check out of work - mentally check into your life and loved ones.

Or eventually get a divorce I guess...
Once you sign the employment agreement, if they change their mind they should at least pay you your notice period.
This works sometimes but cross arch builds can be problematic. I use Nix on macOS so I have to use a remote build host (or a VM).
It’s professional management jargon. If you’re communicating with managers or McKinsey people, it gets added to your vernacular.