skysight-inc/HackerNews huggingface dataset:
There is no way to know or verify what is or isn't a real leak, and what passwords are or aren't leaked. We can't settle this in the comments, and I think it's just security theater.

1. User x signs up for Service A using pwd abcd1234

2. User y signs up for Service B using pwd abcd1234

2. User z signs up for Service C using pwd abcd1234

Service A is breached. Users x,y,z get emails forcing a reset of their password. Users x,y,z reset their password to abcd1245 and all is good (among many other permutations). Now Service B is breached, rinse and repeat.

Depending on the workflow (the more automated it is the worse off we are), there are security vectors to exploit here by doing a carefully planned fake 'leak' using mostly useless emails but only a few genuine emails to trigger pw resets, etc, etc.
Thank you for your recognition!
When we took over the codebase, it was 50-50 whether or not we'd really continue with it long term or just fix a couple important bugs and work on porting to something new. Then we managed to hire a couple of the core devs from the product and decided to keep it.

We were lucky that they did a good job with the escrowed code and had everything we needed to build the software on day one.

>And for how many of those that do is it actually an optimal use of resources?

That's impossible to answer -- depends on how hard it would be to port to another product to fill the need (assuming you can find such a product), or write a new system from scratch to do what that product does.
If you've been looking at photos on the internet with the assumption they haven't been manipulated over the last few decades, that's mostly a poor showing of your own media literacy. Before this it was photoshop, before that it was airbrushing.

A grid of arbitrarily colored dots alone has never been absolute proof of anything.
Self publishing certainly muddied the waters for statistics on author income, which is why the survey and article break things down info self published and traditionally published. Fundamentally though, it isn't if you qualify for the survey, but if you both know about it and identify as an author, passionately enough to bother filling it out.

How do you think an author should be defined? And what list do you use to validate them? If you start raising the bar, you start limiting the scope. Maybe that is the problem; comparing apples with oranges or romance authors with self help gurus. But if you set your bar to something like 'authors making >$20,000 in royalties per year', you will unsurprisingly get a result where authors make >$20,000 in royalties per year.
Are you able to link that photo? I've had a look through both the paper and various threads here and haven't seen it shown/linked. Many thanks.
> If I install TeX on my Linux machine now, is that still compiled from the original Pascal source?

If you install TeX via the usual ways–TeX Live and MikTeX are the most common—then the build step runs a program (like web2c) to convert the Pascal source (with changes) to C, then uses a C compiler. (So the Pascal source is still used, but the Pascal "compiler" is a specialized Pascal-to-C translator.) But there is also TeX-FPC (https://ctan.org/pkg/tex-fpc), a small set of change (patch) files to make TeX compilable with the Free Pascal compiler (https://gitlab.com/freepascal.org/fpc/).

For more details see https://tex.stackexchange.com/questions/111332/how-to-compil...
Pretty rich considering their history with sosumi.
I believe it’s compulsory or at minimum a way to protect themselves. I always choose the “rather not answer” option to every question that specifies it. The hiring managers rarely get to see the answers.

Oddly enough, I’m a white male and the most protected class “abuses” I’ve ever witnessed is when I’ve been told I wasn’t allowed to hire white males. I’ve actually been told I could not hire any one except a women before. My team was shorthanded for a year. I work in a niche that is probably 90%+ male and probably 70% white.

What’s also weird is, I usually hire through recruiters so when I tell them “only send me female resumes” the search just goes radio silent and I don’t even see what kind of talent I’m missing out on.
The thing about reptile stores is that there seem to be two categories:

* The scientific types, where the have family histories longer than your typical European monarch's for each animal, and a temperature and humidity control system more powerful than your smartphone to maintain EXACT OPTIMAL CONDITIONS to optimize lifespan and breeding yield.

* The people who can't resist "just another snake" until the wife says "unless you want to turn the place into a reptile shop, we can't get another one", and they call the bluff.

I've been visiting a shop that's clearly the latter lately; one has to remember to shut the door when entering lest something wander out into the neighbourhood. I suspect your 'Snake Cafe' might have been a riff on that strategy where he doesn't actually have to sell the snakes.
Good. Hollowing out the urban core will prevent pollution from busses, trains and bike tires, and subsidize the oil industry.

/s
Based on your response you most likely are not using Assault in the legal sense but in the Common Sense, but given the topic is legal in nature we should be using legal definitions.

Assault act of causing someone to reasonably fear imminent harm, what most people think of Assault they actually mean what the law calls battery which is actually causing physical harm.

Further I am not sure why we are focusing on Assault or battery, the OP said that was not the charge they were convicted of, and a Felony by definition is any crime punishable by more than 1 year of imprisonment which given the "Tough on crime" provision starting in the 90 makes a HUGE number if non-violent offenses felonies, as something a simple a playing your music too loud could be in some circumstances classified as a felony (often charged as " Nuisances" which is many states is a low level felony)

Most people have "felon" associated with violent crime, or serious crime, but unfortunately in our over criminalized society most people commit as many as 3 felonies a day not even knowing it.
That is a statement of your opinion, but you'll have to make an argument if we are to have a discussion, else I can just leave it be.

I have a nice idea about doing fake 'leaks' using known email addresses and forcing mass resets each week.
But a company must have some criteria to select applicants. Shouldn't it be up to a given company to decide who to hire? Even if it's flipping a coin, they're still discriminating.
Just to give some more context about Herbert Simon, he's the only person who has won the Nobel Prize in Economics (yeah yeah, memorial prize) as well as the Turing Award, an accomplishment that is unlikely to ever happen again. At Carnegie Mellon University, he started as a faculty in what became the Tepper School of Business, later joined the Department of Psychology, helped found the field of Artificial Intelligence, and helped found CMU's School of Computer Science, all in one lifetime. All of these different schools and departments claim him as one of their own.

His influence at CMU is rather profound. Some current faculty took courses under him, and in faculty meetings some faculty will still talk about his ideas and his philosophy as a guiding light for how departments should be run. I've joked with younger faculty that you can win any argument here at CMU by quoting Herb Simon.

My own department, the Human-Computer Interaction Institute, was founded many years before I joined. I've been told that he helped provide intellectual air cover for it, since at the time some people felt that computer science should only be about the study of computers, and thus exclude people + computers. But when someone with a Nobel Prize and a Turing Award says "hey, this looks important, we should do more here", people will listen.
If they ended the conversation after a modest ask like that, you probably dodged a bullet. I bet they are also miserly at every annual review.
[citation required]

"Police violence calls for measures beyond de-escalation training": https://www.scientificamerican.com/article/police-violence-c... — "The police department in Camden, N.J., for example, was disbanded and rebuilt with a new vision in 2013."

"What the data say about police brutality and racial bias — and which reforms might work": https://www.nature.com/articles/d41586-020-01846-z

"More Than Half of Police Killings Are Mislabeled, New Study Says":
https://www.nytimes.com/2021/09/30/us/police-killings-underc... — Researchers comparing information from death certificates with data from organizations that track police killings in the United States identified a startling discrepancy

"17,000 Killings by Police Have Gone Uncounted Since 1980": https://www.rollingstone.com/politics/politics-news/how-many... — There have been twice as many deaths at the hands of cops than the federal government has reported, top medical journal finds

Search-fu is failing me, but ISTR there are studies with data indicating that when police are called for non-violent situations, there is a high chance (> 50%) of the aggressiveness of the cops making the situation violent, especially if disadvantaged populations (ethnic or gender minorities) are involved. This is especially true for property crimes (there was a rather visible case of someone murdered by a now former police officer — on camera no less — because he was accused of using a counterfeit $20 bill for a pack of cigarettes, perhaps you remember it?)

Remember, the police do not exist to prevent violence. Most of the time, they’re not even intended to fully and properly investigate violence perpetrated against others. No, they are there mostly to (poorly) investigate property crimes against the ownership class. That they occasionally manage to perform good investigations doesn't really help with the times that they make things worse, don't do anything, or make cases up from whole cloth (perhaps you’ve heard of the police misconduct in the Central Park 5 case, or do you just believe the cops all the time).
I must correct myself, after a visit to moar of the Internets.

Looks like the 1st versions of nCube ran Arix (perhaps shortened to IX), a Unix clone) on a 286 which was the front end and controlled the actual processing elements, and IO. Each compute node ran a 4KB kernel called Vertex[0].

The 2nd version had a Sun Workstation as the front-end and the nodes ran an a 200 KB microkernel called nCX[1]

The nCube 3 / mediaCube nodes ran Transit[2] (hurray for archive.org! )

" Transit is the operating system that runs on each node of the MediaCUBE system. Based on AT&T;'s Plan 9 Unix derivative, it's light-weight microkernel architecture provides a small footprint that minimizes memory consumption. Transit's features include:

Streamlined internal code paths
Hypercube communications software
Algorithms optimized for hardware
Flexibility of UNIX-like environment
Optimized for Oracle Video Server
High performance
Reliability

Transit is used to distribute content processing across interconnected CPU and I/O modules, interface to hardware devices, and manage the Oracle Video Server processes on each node. Transit also provides a file service, u9fs, that creates a special file hierarchy on the system console available to processes running on the MediaCUBE processors. This provides access to non-video files."[2]

And an overview of mediaCube [3].

[0] http://tnm.engin.umich.edu/wp-content/uploads/sites/353/2017...

[1] https://en.wikipedia.org/wiki/NCUBE

[2] https://web.archive.org/web/19970204220447/http://www.ncube....

[3] https://web.archive.org/web/19970204220335/http://www.ncube....
Immediate mode UI frameworks are not inherently less appropriate than any other framework. Curious what the source of that is.
Are you sure about that multiple? Exactly how much did musk spend paying an elite aerospace engineer 9 months of elite aerospace engineer salary plus load, to design something that saved SpaceX maybe 20% of that? This is not even getting into the opportunity cost of all the other things that engineer could have been working on during that time, things that had not already been developed and proven.

It sounds like what Davis got was first quote and must threw it out, if this is the actual story it seems pretty strange that they didn't at least try to work that first-bid number down before discarding the idea of outsourcing the part altogether.
Competitive space.. YC should consolidate these startups to create a better salesforce. All the pieces are there.
There's also the risk management aspect if the projects are likely to fail. Aka "don't put all your eggs in one basket". Or, at least, consider the risks carefully.
Depends what the crime is.

I have a relative who spent time in prison because she tried to kill her mother with an insulin injection who got out and got a job as a nurse working at a nursing home. She lied on her job application about felony convictions but only got found out when her mentally retarded sister showed up at the emergency room with an insulin overdose. It said in the paper she was stealing meds from the controlled substance locker and I believe it because she was stealing her grandson’s ADHD meds too.

I believe we should give felons a chance but the above case is one where not doing a background check looks like malpractice.
Shared-nothing threading is definitely easier to deal with in hot-reloading, and I should have thought to mention that.
Thy probably teach this in ropology class.
I think you are missing a /s
What is the mechanism? I don't see anything in the comment sorry. Maybe state it simply so I can follow along.
Yea.. the blog post and the terms don't exactly align. Looking at the Terms only, they say "specific Paid Services" and in the Developer Platform Terms, further say

> The Cloudflare Developer Platform consists of the following Services: (i) Cloudflare Workers, a Service that permits developers to deploy and run encapsulated versions of their proprietary software source code (each a “Workers Script”) on Cloudflare’s edge servers; (ii) Cloudflare Pages, a JAMstack platform for frontend developers to collaborate and deploy websites; (iii) Cloudflare Queues, a managed message queuing service; (iv) Workers KV, D1, Durable Objects, Vectorize, Hyperdrive, and R2, storage offerings used to serve HTML and non-HTML content...

Key part being the last bit there, they specifically call out products which can be used to serve non-html content as part of the Dev Plat, and Workers is not one of them.

Cloudflare employees in the past have specifically and repeatedly say CDN in front of R2 is fine, but nothing about Workers except really old posts that predate the ToS changes and the blog post.
the article I quoted looked at high school dropouts and the number was 70% for black men. everyone understands that there are supporting statistics, and are simply trying to get the population to be more productive. there was buyin from the public sector in many cities by the voters, but then the private sector who is worried about who they are working with did not buy in. we are still looking for solution about how to get people productive, not whether it is accurate to assume someone has a conviction and be correct.
And he was important in the history of programming language theory, as an influence on Alan Kay (so Kay has said in talks - see YouTube passim).
OET Experimental Licensing System News
How is a self-created antibiotic different from a T-cell or antibody?
While I agree that people deserve an opportunity to move on from their past, I still want to know who I’m employing. It’s not just about crimes that may be relevant to the role. Who decides what’s relevant?

A crime completely unrelated to my business may be very relevant to someone I already employ. I have a small business where people are working in relatively close quarters. I don’t want to put a rapist, stalker or some other kind of predator in there with the young woman I just hired. If there was ever a problem that would be on my conscience.

There are all sorts of others I don’t want to deal with either. This is a place where the people I bring in will be around my family, my employees and my customers. I have a responsibility to look out for each of them.

All that said, I wouldn’t hesitate to hire someone with a criminal background if the crime is irrelevant or I assess the risk is low. I don’t care if someone got busted with weed or that they got a DUI 10 years ago. I don’t care if it’s a one time crime related to a very specific set of circumstances that’s unlikely to ever repeat. Or a bar fight, drag racing or dozens of other dumb lapses in judgment that can result in serious charges. But I do care that I’m able to make an informed decision.
Those are civil suits, so no fine.

>Key legal questions will include whether the job applicants can show they suffered any injury to merit an award of damages

Further down, the article links to another about some actual enforcement in Colorado, but the fines are an absolute joke; clearly so insignificant that the Bloomberg writer avoids giving a number for any single suit.

Organize or perish.

https://news.bloomberglaw.com/daily-labor-report/tesla-schwa...
Cant you outsource the bearaucracy using tools like Deel?
> only way that really works is to keep the kitchen immaculately clean

Prevention better than cure, as always :-).
I’ve used ImGui with success. I specially was also using webgpu so I used the glfw+webgpu backends. I had to fix a few issues in both halfs of the backend and there remain some little interaction bugs (mostly because browsers capture some keychords and mouse actions and you have to work around a number of them).

ImGui makes a specific design choice and isn’t amazingly documented. I don’t think it’s a good choice for larger scale apps. But good for tools or UIs in games, etc.

Accessibility is a nightmare with pretty much anything skipping browser layout of course.
2010s era, but Easy HDTV (http://www.enigmaindustries.com/easyhdtv/) was the one that actually cracked my wallet.

For some reason, TV tuner cards always came with garish, clunky software. This is minimal, reasonably native, and simply did the job well.
You may as well use CRC32 or Alder32.
Ask HN: Is it advisable to write a back end using Node.js in 2024?
I am planning on starting a new project and want to decide if Node.JS is still a thing for production code or is there anything you would recommend.

Few additional details.

We have projects running NextJS and other old projects in Node JS. Some are running Java too.

We cannot pay huge salaries for developers. we are start up.

we want to support scale around ~25K users to begin with. It should scale atleast up to ~100K users.

Would you still recommend using Node.JS ?
Try a smaller company. They typically don't run actual background checks. They may, however, run a google search and something could come up.
It should be up to the employer. If one company thinks that a past conviction is irrelevant while other companies think a past conviction is disqualifying, then the former may get the employee at a better rate, the company will thrive depending on whether they were right, they'll have more resources to hire ex-cons, and other companies will follow suit.

A blanket law that forces all companies to hire employees without considering information they think is important is really inefficient. Just recently, governments and people were complaining that rideshare companies weren't being exclusive enough! If you think new laws will find the optimal policy for all companies, you are incorrect!

It's also overreaching. Freedom of association is important. The owner of a Jewish deli shouldn't be compelled to hire a formerly convicted neo-Nazi.
For a 'mono-focus' lifestyle or even a very pared down focus, you don't need to eschew everything else, in my opinion, where all you know is breathing and fine dining. You can still do those things and the author says as much as well.

You can, in my opinion, pick the reasonably best option because the payoff of squeezing another 2 - 5% out of the decision isn't worth the multiple weeks or worse you will spend. Could you get the absolutely best house for the best price? Yeah. Is it worth the trade-off of your other focus? Probably not.

There's no need for you to be a master mechanic, you just need to be good enough. So rather than trying to be "pretty good" at 10 things, you should strive to be world class / "extraordinarily good" at 1 or maybe 2 things and leave the rest between "not a clue" and "passable".

The author's call isn't to cloister yourself away but to choose not to pursue things at length that aren't what you want to focus on. You can learn to fix a specific problem, you just shouldn't spend your time going down the rabbit hole learning how to fix every problem of every car unless that is your chosen focus.
If anything we should give him less leeway, since he has so much power. I know it's a cheesy Spider-Man quote, but "with great power comes great responsibility". Also "power corrupts".
There are a lot of fanboys out there - of musk and of billionaires in general - who genuinely believe that
This is great but what about people older than university age? Why should anybody bother with me, a nobody? Do I need to offer them monetary compensation to get advice? If so, why not just buy books?
26 years ago, I was charged with a felony in CA. I pled nolo contendre to a misdemeanor and received court probation; no other penalties.

I recently underwent an extensive background check with my longtime employer and the case still showed up. Of course I had allocuted to it in advance and it was not a problem.
Our startup evaluated Airtable, Retool, and Airplane, and settled on Airplane. We liked the Airplane because it's developer-friendly. But the way they throw all customers under the bus is sad.

Hope the acquisition works out. I used to work for FileMaker, and from the business perspective, their products are complementary to each other.
Is it worth buying? I've stopped being a fan since his channel turned into a content and money machine but he's definitely had some useful videos.
I have felt very much like this in the past, but no so much any more. .. my thinking is:

Some things are just part of the responsibility of being a grown up. Home maintenance, driver for children, doing taxes, etc. These are your baseline priorities that you don't get to choose.

Some of these sound like they occupy a rotating priority slot. House and car purchases do take a big commitment and require prioritization (especially if you build) but they are temporarily a priority. It is usually your choice to make these a priority, and they are rare.

Keeping a smaller priority list means saying 'no' to more things too, like being 'tech support geek for wifi and computer issues' or vehicle maintenance. These priorities are fully under your control.
I don't see any reason not to, especially if your team already has some experience with Node.js.
You are openly advocating for a different and better set of rules for the rich and powerful.
I thought Birds were already generated by AI, and never existed in nature.
NodeJS definitely is viable for backends, even those large scale, and it always was.

There's also Deno, AFAIK (correct me) should also be fine.
Running 2^64 SHA1 ops on a GPU takes 15 years, so I think finding
a reasonable collision for that half using SHA2/3 is not as trivial as you suggest:

https://crypto.stackexchange.com/questions/84520/how-long-wo...