skysight-inc/HackerNews huggingface dataset:
Freddie Mac | Senior Software Engineer (Hybrid) | McLean, Virginia, USA | Hybrid | 122,000 - 182,000 USD / year | Full-Time

Tech used: AWS, Atlassian, Cucumber, Docker, Git, Groovy, Java, Jenkins

At Freddie Mac, we are in the process of digital transformation and modernization, and we want you to be a part of it. As a highly innovative Senior Developer, you will be integral to our team, influencing outcomes, guiding transformation, and putting your stamp on how the team and organization evolves. We offer a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Join us, and together, we can make home possible for many more individuals and families.

More details and option to apply: https://devitjobs.com/jobs/Freddie-Mac-Senior-Software-Engin...
It is OK, but the problems demonstrated by these attacks and others similar to them are specific to the linear chaining of a great number of blocks, where the same hashing function is applied to all blocks.

Incorporating somehow a block counter in the block hashing function or using a sponge structure is equivalent to using a different hashing function for each block, which stops the attacks.

Tree hashing where the final branches i.e. the chunks are short, so there are only a small number of blocks hashed in cascade with the same function, behaves differently from linear block chaining, because the hashing function must include additional inputs anyway, so the blocks in a chunk are hashed differently from the blocks that merge tree branches or the root block.

Whether any of the attacks that exist for simple Merkle-Damgaard cascading like SHA-2 are applicable to a tree hash depends on how the blocks are encoded and on the structure of the tree. In any case, the probabilities of success will be different in the case of a tree hash.

I have never analyzed whether the BLAKE2 or BLAKE3 tree hashes could be secure enough without block counters. In any case, the block counters, which are absolutely necessary for linear block chaining, also increase the strength of tree hashing against any attacks and their added overhead is minimal, so there would be no reason to remove them.

A hash computed with a sponge structure, like SHA-3 or KangarooTwelve, is equivalent with a CBC-MAC where the key is updated at each block, instead of being constant. Because each block is hashed with a different key, there is no need for an additional counter input to differentiate the hashing functions. A sponge structure is much simpler than the structure used by BLAKE, but it needs a wider invertible mixing transformation, e.g. for a similar strength BLAKE2b uses an 1024-bit mixing transformation, while SHA-3 uses an 1600-bit mixing transformation. (BLAKE3 trades off strength for speed, so it is not comparable with SHA-3, but only with KangarooTwelve.)
Same. I would have considered buying this product and the phone (!!!!) if it would have had a sliding mechanism.
I miss all the pre phones. Had 1, 2 and 3. I am not joking, I was faster typing on the pre than on my keyboard since I never learned to use all my fingers to type.
I was asked for a copy of my passport for several of my last jobs (in Sweden).

Worryingly, during Covid, a photo of a password was accepted as complete identification in many places (outside Sweden, domestically we have much better electronic ids).

So there is definitely some useful non public data you can steal.
There are only two reasons to use Gradle.

Android ecosystem, and those that failed to learn from Ant.
Let me quote myself from the comment you replied to:

> And no, I can't charge at home because there's no way that's happening where I live, nor do I frequent any shops/malls that have charging stations that I can rely on, nor does my workplace offer such a service.

I am far from unique in this situation.
Essentially all by hand. I'd tried to do it a few times before with different quality scans, and while I could see the original intent on all of them, auto-tracing never held up across the whole poster.

I ended up taking a few days zoning out and re-drawing it as a white/black raster image over a highly scaled up scan, then auto-traced that in Illustrator and coloured it there. Text went in as some variant of Century Gothic with a few changes to match the original.
Depends on how you interpret 'everything' and 'each time'.

The default compiler plugin configuration is quite eager to recompile allot if something changed.

https://maven.apache.org/plugins/maven-compiler-plugin/compi...

"true (default) in this mode the compiler plugin determines whether [...] any source file was added, removed or changed since the last compilation. If this is the case, the compiler plugin recompiles _all_ sources.
I can't think of flamethrowers without thinking of the French film _Le Vieux Fusil_ (The Old Gun) [1975]
Just some reasons as a robotics enthusiast:
Hardware:
- lack of off the shelf parts suitable for such projects. For example sensitive enough and compact at the same time pressure & force sensing. Also actuators, most that we have off the shelf is too slow, too bulky, too weak, or too strong/heavy to the point of being unsafe in direct contact with humans.
Software:
- one requires very low latency control loops and communications. If this is to go beyond local network use it will also have to include some software that will maintain the "feel" while connection gets dropped briefly, packets are delayed etc.
- whenever force feedback is used one requires robust safety protocols. If the manipulator is strong enough to simulate a force of lifting a heavy object it might be capable of breaking your arm or a finger. Software has to prevent this even when it "glitches" or if there is hardware failure.

No doubt there is lots of much more advanced reasons. These are just from the top of my head.
It is as if those pushing for Gradle never got the point of why Maven over Ant.
Bluey is awesome, the one disappointing thing is hearing US and UK media try and modify it.

A few episodes have been butchered because something was found offensive - like the kids playing cavemen and saying Ooga Booga or the parents sighing while weighing themselves on a scale. Come on!

Just leave it alone and serve it as is. The creators expressed a few times he's almost had enough of edits over dumb things.

They also tried to get re-dubs done to remove the Aussie accents, luckily that was pushed back on.
No, it’s because the US produces the most corn.
> But that would only be possible if you write out all the struct fields you are accessing into function parameters. If the struct is complex with a lot of fields, then you would end up with a messy function signature.

This is the approach the article's author took.
You can do it some routers (e.g. opnsense) that let you retransmit that (e.g. with UDP broadcast relay). The main downside is that you have to set it up for each type, and open ports, troubleshoot a lot, waste many hours, etc.

I used to do this but it became too much of a hassle.
Mimium wages are a blight society. Anyone with an understanding of economics knows this. They harm employees and employers.

Government couldn't negotiate themselves out of a paper bag, why let them say what can be paid?
Joforce CRM: Superior Experience and Performance in Open Source
Welcome to the Joforce CRM. Dive into a world of possibilities as you access our CRM download file, unlocking the door to seamless customer relationship management. Explore the Joforce Marketplace to discover a plethora of extensions designed to enhance your CRM experience. From advanced analytics to tailored integrations, we've got your business needs covered.

Choosing Joforce means embracing the open-source advantage. Enjoy the flexibility to customize your CRM according to your unique requirements, fostering adaptability and scalability. Experience the collaborative power of open-source development, ensuring continuous improvements and innovations driven by a global community of users.

Our commitment to user-friendly design makes Joforce CRM not only powerful but also exceptionally easy to use. Navigate through intuitive interfaces, streamline your workflows effortlessly, and witness the simplicity that empowers productivity. Download now, and elevate your efficiency and innovation game with Joforce CRM – where customization meets excellence!

Should you be interested in exploring the open-source CRM experience, please feel free to utilize the following link: https://www.joforce.com/download.html
Not necessarily. A good code with nice parallelization and efficient code path will always win. If the code is inefficient to begin with, having no cron jobs at the same time won't help.
> Fortunately, it's easy to solve: just use an SSH CA

Sure, you could use SSH certificates, but that does mean deploying user certificates to your users and server certificates to your servers, etc. And for some use cases, this would be the right thing to do.

Yes, a 10,000 person enterprise with dozens of servers should use SSH certificates. On the other hand, using SSHFP is also a viable solution, depending on the use case. In general, it's less work than creating a SSH CA, signing keys, distributing certificates, etc, especially when SSH certificates would be overkill.

On the other hand, with SSHFP, you run ssh-keygen -r examplehost.example.org and add the records to the server's DNS configuration.

On the client side, a user adds VerifyHostKeyDNS yes to their OpenSSH configuration and they're done.

> Why would you give the United States Government a say in whether you trust your own server? It's your own server!

SSHFP records are just the fingerprint of the server's public keys—no 3rd party has a say in the ssh-keygen command generating the records. I just made some SSHFP records—no government involved:

SSHFP <KEY-ALGO> <HASH-TYPE> <FINGERPRINT>

localhost IN SSHFP 1 1 78aefcdf726dfd71160c8dd9e31b385174da4189
localhost IN SSHFP 1 2 830313e0f1c70de6db7431f22f488e715f5882b7ad82a11bcb0b784fba618cfc
localhost IN SSHFP 3 1 8140d1ed33ee45e0d078e1c0ef61df03332eac5c
localhost IN SSHFP 3 2 748fdd9a6795626ec4c201cc41fb62c7407227db3e810e1a26d2e0b8cb82e896
localhost IN SSHFP 4 1 c75294aa5909c2dbfcd5606005bc4f2d1ec37ff6
localhost IN SSHFP 4 2 795480afe1777c3438f40bc269c25667cf366ef24c14f264456ff10844b818fb

KEY-ALGO Algorithm
0 reserved
1 RSA
2 DSA
3 ECDSA
4 ED25519
5 unassigned
6 ED448

HASH-TYPE Algorithm
0 reserved
1 SHA1
2 SHA256

The role that DNSSEC plays is ensuring that when a SSH client does a DNS lookup, it can trust the DNS reply hasn't been tampered with.
I still don't understand the scam here - if they're giving you money, and you're losing it to the casino on slots, how do the scammers make money?
Do the same to make people work-out and we're golden.
The last available episode, Cricket, is even more devastating. It shows what kind of sibling relationships can be in face of family situations that might be trying for kids, and how they come through for each other. I hope for my kids to have this kind of bond.
Show HN: I made a tool to compare time zones
Has it found success in OS-level utilities? What popular utilities are written in Go?
More precisely because "they" are Rob Pike, and Rob Pike doesn't seem to think error handling in Go is horrible.

Other members of the Go Team (Robert Griesemer, Russ Cox) trialed out several solutions for this problem, but this issue was just too controversial within the community.
I looked at this on Twitter and will try it out using the integration with Llamaindex !! The idea of Late Interaction sounds like an improvement either on top of or in place of a vector db approach. I was looking at the BERT family in general so while ColBERT is a great implementation it would be interesting to have this same "everything in the one gumbo pot" type library for working with robert(a)/tinybert/qbert/distilbert/.....

Great project and I hope the post gets on the HN second chance loop !
Hi, maker of Kicks here.

I don't like the trend where people put language models into everything, contributing to global warming. Samples from sound packs usually have most of the data in the names, it is just very unstructured. I have tons of regexps to figure out different info (like scale) from names.

That said, I'm working on actually analyzing files themselves with Apple Neural engine and pretrained local ML model with some spectral analysis. This will be a huge lift, but this project is a marathon for me until I'm somewhere where the price is well justified
There is also a page with the average salary for each city.
No dropped frame,consistent 60s+ buffer,volume at any setting doesn't affect it.
I'm suspecting its the Linux audio stack interfering with something in youtube player,
something relatively recent that perhaps expects pipewire(i have pulseaudio).
Of course, that assumes that your spaghetti code implements the same algorithm as your elegant code.

If the elegant code is O(n) and the spaghetti code is O(n^2) you might notice the difference.

And, of course, there's also maintenance to consider.

In some sense, compiler are there exactly to turn our elegant solutions into spaghetti code.
Yes, I wanted to change as little as possible to illustrate why you almost always want to close your lists into a ring when using a linked list ;)

It simplifies a lot of algorithms to be able to guarantee no null pointers. It's a very old trick. You trade a lot of conditionals and a risk of null pointers dereference for a smaller risk of non-termination (failure to check for a null pointer is always bad; failure to check for the end is only a problem if the end of the list is actually your termination condition).

You could do a ring with an array and modulus too, but then you end up copying the whole thing to open up slots to insert to maintain the property of your insertion point being separate from the hand.

That may or may not do worse, but likely to depend on cache size and implementation language.

What you'd almost certainly want in a production implementation anyway would in any case be to do away with constantly allocating nodes and just move them to a free list and reuse to avoid dynamic allocation overhead and garbage collection.
Irregardless this feels immoral if not somewhere illegal.
Well, from my own experience if you have to fit a TV set in a given space (e.g.: between two libraries) you go to the shop with the width and height of that space in centimeters and you don't care much about the diagonal in inches. You buy the largest screen that fits.
Thanks for pointing out. TBH, I set myself a hard deadline to release until the end of 2023, so that privacy policy turned out to be very generic. I'll improve that
Oh - Just checked, you're right these words are reversed in the default dictionary. They'll be right there in front the first time you use them thought, and I'll look into seeing if I can find a good rule for improving the preference by default.

The dictionaries are compiled from large known corpuses, wikipedia and movie subtitles, to ensure most words are available, but it does also mean that some weird words sneak in. That shouldn't matter much since it's very quick to adjust to your usage, and due to the usage sorting the weird words should never come first.

About the punctuation you just need to scroll the symbols window to get to the rest ;)
The whole idea of medical insurance is insane. It is OK for scheduled issues but not for covering shots to the moon.

Like, I have a voluntary insurance for my children which covers periodic health checks and doctor appointments and maybe even ambulances, but it definitely does not cover surgery. That's what state medicine is for.
Oh man. "Ghost jobs" are 100% real.

I interviewed dozens of candidates for a couple roles last year that ended up not being real. Once I finally realized it, I was pissed. Not only was I wasting my time but we were wasting their time and burning my credibility.

I remember looking at an event last year where I'd interviewed 20% of the presenters. :(
My argument is that timing is very important to adoption. Unix is not the best OS to have been designed by far, but it was the first free one. If go had been delayed, something else may have filled the slot, and there’s no reason to believe it would have been a better something else. I.e when Go did release 2 years later, but with generics, it’d be too late, and no one would care.
Yes! Kinda the only one that supports j,k for navigation haha.
VIM bindings are not yet implemented to the level I want it to be, so it is a bit of hidden feature
Just because something is in the hot path does not mean a profiler will be able to highlight this as a hotspot.
I agree with you! I'm not going to lie to you the tests are rather different than most. I don't test things say like setting up an initial cluster or node. Those are such basic functionalities that can be manually tested. The system is tested mainly and I say mainly on:
- handling the protocol in which the client speaks to the cluster (no need)
- handling the protocol in which the cluster speaks to the node (no need)
- the query language (when testing the query language we are testing the above 2)
- finding any gaps in mistyping a query that can cause a cluster exception of any kind (this has been insanely gone through, I can't even lol)
- concurrency with consistency. One test for example is updating multiple documents multiple times through 100 client connections.

I don't see the structure of any main method changing. I just want to add tests must be driven meaning.. With a client. You don't test this system like you do a module in GO. You don't just write one test for CountLog(). If I absolutely had to sure.

When you test the client>cluster>node(s). So you always do driven testing as a client or multiple clients.
It's not a lot of work, you can just let the IDE spew it off for you and feel like a certified J2EE programmer circa 2003 who lets the IDE write everything for them. But yeah, writing code is not the problem. Reading the code is.

I think having 60% of your lines of code being:

if err != nil {
return err
}

Does make the code a tad bit less readable.
True, I suppose that is more like the tail call signs it whatever they're called - only recorded (possibly automatically like ANPR) if someone bothers too, not broadcasted or squawked and ident'd.
Wouldn't that be the rational approach? Otherwise, insurance is still a tax on young and fit to finance the medical treatment of the old and unfit. At which point it's socialism but less efficient.

It's like if your car insurance covered getting a new one if the old one is at EOL. Imagine a cost of that and also the level of willingness to participate by the ones who just bought their first car with cash.

Congratulations to the US people for discovering a model less efficient than socialism.
I think about this one very often. I think it can even be generalized: "complex system problem seems intractable due to complexity... I know, I can simplify some bits of it by adding complexity to it".

I know way too many coders and firms taking a "throw stuff to the wall and see what sticks" approach to software. The phrase "just solve the problem and move on" comes to mind. These places are often in firefighting mode and cannot connect the dots for some reason.
The get a bonus for referring users (get $100 if you sign someone up that plays for xxx) and signing up (get $100 if you sign up and play for yyy) to the platform. The platform wants to attract gamblers but instead is getting people ‘doing a job’ that are probably significantly less sticky. Is that illegal or just against the T&Cs of the platform? Im not sure.

I’m not sure how this makes money overall though since the reward money has to be balanced at the population level so the platform always comes out ahead. I suspect there’s an element of getting the employee to gamble with their own money with promises to pay that don’t materialise.
I'm from the UK and I genuinely believed the A0 system was a global standard, how could you not use it when it's so beautiful!
This is so good, that I gonna put it on Kicks website as testimonial with your permission!

I replied earlier, that I'm committed to improve and add more stuff until the price is well justified. I wish I had 48 hours a day tho, haha
tl;dr we polluted the commons over the holidays, breaking a bunch of people's stuff for no reason other than our own entertainment, and created a bunch of work for people who had to purge our pollution from the commons when they came back online in January

That said, it does seem crazy that a single package depending on `xyz:*` means that the publishers of `xyz` can't unpublish a release. In fact even if your package "really" depended on a specific version (not `*`) of `xyz`, it still seems unreasonable to forbid the `xyz` package from unpublishing, or even deleting their npm account entirely.

Has anyone from npm communicated what (if any) the fix will be for this vulnerability vector?
Though, of course, that's far from the only thing you need to recognise a syntactically valid C++ program.

Deciding on syntax is Turing complete in C++. (Even in Pascal, you still need to check that you only used identifiers you declared before. That's not expressed in this diagram. But the extra rules required to get to the full language's syntax are fairly tame compared to C++.)

Syntax is Turing complete, and hence undecidable, in C++, because what's valid syntax depends on types in some instances, and the type system is Turing complete.

See eg https://medium.com/@mujjingun_23509/full-proof-that-c-gramma... or https://stackoverflow.com/questions/794015/what-do-people-me...
> Since Jobs did not understand Raskin’s color scheme, he had an artist alter the work, unfortunately, for the worst. Left side, rigid coloring. Right side, chaos.

Interesting to see another datapoint on how an awful asshole of a boss Jobs was.
It's unavoidable for most people.

That said, wealthy people could actually avoid most of it by using more expensive materials like PTFE and glass while having all of their food produced with production that doesn't involve any of the plastics that leech.

If wealthy people were universally more intelligent we'd see an upper tier of foods made with zero plastic contact in some kind of "zero plastic certified" facility so they could just grab it and go.
I prototyped something very similar during covid using a 3d printer, a blackberry keyboard, and a teensy. I don't think this is going to generate many long term users, even though I was enthusiastic enough to hack on it for a bit.

* So much of my typing includes selecting emoji, using odd symbols, and the need for inputs not provided on this. In addition, having to switch between the touch screen and keyboard as inputs was very annoying.

* It significantly decreases the experience of using the phone in touch situations.

* I was using it with my iPhone mini and the phone and case had terrible weight balance. My hands fatigued quickly. I can't imagine how bad it would be for a iPhone Max.

* I lost the use of my port.
Bluey is female, blew my mind when I first learnt this after watching a few episodes.
I agree with the programming language sentiments, but in its defense, Go is very much a language for and by people who don't care about programming languages. I mean this in the nicest way. Rob Pike doesn't care that the concurrency is unsafe or that nil is the billion dollar mistake. Neither do most users of Go. Does that make Go a good language? No. But that's besides the point. It's a convenient, good enough language combined with a compelling set of tools that make it easy to use. It's the crocs of programming languages.
Too modern for what? Does not seem like an attempt at netstalgic vibes.