skysight-inc/HackerNews huggingface dataset:
https://en.wikipedia.org/wiki/Search_domain

An example:

The attacker posts a message to a forum, chatroom, etc. like:

Download: 2024YourCompanySalaryData.zip

When the user clicks "2024YourCompanySalaryData.zip", it is actually a domain name, and loads that website. This website then asks you to enter your corp credentials, or executes a 0-day on the victim's browser, etc.

The forum doesn't need to allow file downloads (i.e. a real .zip might not even work), and even if it does, client or server side virus scanning doesn't have a .zip to inspect.

The user is less wary of phishing, having never seen the .zip TLD. They assume they are downloading a file.

https://blog.talosintelligence.com/zip-tld-information-leak/
Yes I think there is truth to this. Something I have seen lately with Rust for example, is because the language is harder to learn, the discourse, tutorials, libraries are all much higher quality.
"Hey Vsauce, Michael here." https://youtu.be/TN25ghkfgQA
https://www.minijetengine.com/ has kits.

To build a jet engine from scratch you would need a $50000 machine tool shop and several years of prior experience.
People should recognize that tabs vs. spaces is more a question of editing (e.g.: What happens when you press Backspace behind an indentation? Does the caret move at uniform speed on key repeat or does it suddenly jump in places?) than of stored representation. You could even have an editor/viewer that lets you choose the display-width of spaces at the start of lines.
Maybe you are using a fully open phone, but mine has an OS made by Google and almost every app tracks my location without my consent.
I have no argument about your description of the current legal situation. But I disagree that the nature of the recording makes no difference.

Recordings captured by CCTV aren't typically being made with the intent to publish them for entertainment (yes, some CCTV footage shows up on YouTube and so on, but it's not the normal case). Being unwillingly turned into a subject to entertain the masses - perhaps even in a way that involves being made to look foolish or being harassed by the group making the video - is a very different thing to being captured on a security camera as part of normal public life. The law could treat them differently. Similarly, the law could have specific protections for recording public officials and officers of the law while they're acting in their official capacity

It's not crazy to want a legal approach to recording in public that is more sophisticated than a boolean it's-allowed-or-it's-not.
Yes along with the risk you take in reducing your income... you quit a job (leaving a hole in your resume), or you ask for a pay decrease (hurting your future earning potential)?
This article misses that the asker knows about these limitations as well, and it also misses that the answer in itself alone is devoid of meaning for the interviewer.

It’s the context that matters - for example a comparison of skill A which the candidate rates at x out of 10 to skill b where they rate themselves a y out of 10. Both x and y are meaningless, but the relationship between these two is not.

Self awareness is also important, both in terms of strengths and development areas. People need to be aware of their blind spots because we expect them to take a step back and let themselves be led where appropriate. And people need to be aware of their strengths because we expect them to step up and take the lead if necessary.

A quantitative scale for qualitative things really helps having the right discussions with candidates.
And then Event grows some other properties for non-tracking purposes which are not used in this function and you realize you now need to construct values you don't need to be able to call this function ;)
> Just nuke and recreate venv from scratch using only what you need.

That's great until you have dynamic dependencies which means you can run apparently happy yet fail later on an import. This means you have to take special care generating your dep list.
The two most common off my head: Colloquially, and somewhat innocently, "crushed [on]". Modern internet "Urban" colloquially, and certainly degeneratively, "fapped [to]".

Lots of modern variations abound. "squished [on]" when more romantically/asexually. Couples (usually strictly monogamous) may allow each other a "hall pass", which is a noun for someone that is an (often unattainable) sexual fantasy. ("He is my hall pass.")

I think languages in general pick up a lot of nuanced terms for these kinds of things, far more than just a single transitive verb. Especially because things like sexual interest are often "forbidden" from discussion in "polite society", so a lot of it starts as euphemisms or analogies and maybe never leaves. "Hall pass" is a euphemism from childhood school days that seems to have stuck for a very specific niche.

You can find a lot of variation in places like Urban Dictionary. It can be fun to try to find old slang dictionaries from previous eras to see how much things have shifted over time. (Euphemisms tend to, especially as jobs or technologies shift out from whatever is being euphemized.)
George Eyser, the one-legged gymnast who astounded at the Olympic Games
Here is the official statistic for federal inmates:

https://www.bop.gov/about/statistics/statistics_inmate_offen...

To summarize, 44% of current federal inmates are there for drug-charges. The second most category is weapons charges at 22%. So a good 2/3 of current federal inmates are there for non-violent crimes. Sex offense is third most common at 13% I’m sure many are there for illegal sex work or consumption rather than for sexual violence. A whopping 4.6% is in federal prison for immigrating (which isn’t even a crime; unless this category includes human trafficking, which I would call a violent crime).

EDIT: As for all US prisoners, here is the data I found (see table 16 on page 29):

62% are there for violent crimes and 12.5% for drug charges. Note that many large states—such as California—don’t imprison for drug possession any more, and this table does not include sentences shorter than 1 year. This methodology of counting current prison population is biased for more serious crimes with longer sentencing, as most crimes have shorter sentencing but serious and especially violent crimes have longer sentencing and thus are over-represented among the current prison population at any one point in time.

https://bjs.ojp.gov/document/p22st.pdf
Thank you for that context!
A malapropism. The term identity card is usually used to refer to an identification card.
What part of "I don't expect others to care how life has been for me" did you not understand?

I would like to think that even without ME/CFS I would still hold such views.
Dockerfile and requirements.txt is everything you need to know to recreate environment, and this is how apps are usually ran in production. This is how you can create consistent recreatable and testable env and carry it from dev machine to test, staging, CI/CD, and prod environments

Never really had an issue with python apps not being portable.

Building regular python app? Just use official python docker image.

Using advanced CUDA stuff with nvidia cards? Just use nvidia’s docker image and forget about fiddling with configuring and compiling dependencies. It is all as easy as carrying dockerfile and requirements.txt
Doing this does not preclude publishing that kind of metadata as part of the build/deploy process.
I'm not sure about the name either. I think I need to get some help with that.

Out of the blue, what would you call it?
I really like Nix for Python, as long as the packages I need are already packaged. Otherwise I'll use pip and venv to try stuff out. Can't stand conda.
Yes, but most people who write/publish _a lot_ are not fools.
I was once asked: "Where do you see yourself in 5 years?"

I answered: "CEO of this company"

Didn't get an offer :-)
I read through this book last year, and it was a very good book. I loved the first half, and it hits on something that I tell other engineers about performance, which is that while your performance tool will tell you the truth, it will tell you the truth about a very narrow question. That means that you should be using it as a hypothesis testing tool, which means developing the hypothesis first based on an understanding of how the computer works. I'm pretty sure it's the first half, on how to think about software to generate these hypotheses, that sells the book.

However, the last third/half lost me. It primarily discusses (and advertises) the usage of one tracing tool that the author built. All performance tools, particularly the tracing tools which tend to be very heavy, have strengths and weaknesses, and you are going to need to mix your tools if you want to really understand things.

It's well worth the money and the time for the first half of the book, though.
It's one thing for customers phones' wifi issues to be a problem, but it's an even worse problem if the scanner itself needs reliable connectivity. That makes me wonder if there is some kind of delegated deterministic derivation step in the secrets too (which wouldn't be obvious in this kind of analysis), so that the handheld scanners can avoid an on-line dependency.
I do a lot of maintenance work and every time I've encountered a (complex) project set up in this way that's older than ~6 months, it's bitrotted from breaking changes in the dependencies.

The python ecosystem does not stand still and seems quite happy to introduce breaking changes in non-major versions.

To my mind, there are 3 ways to make sure your python project of today will work in 2 years time:

1. Have no dependencies
2. Destroy your virtual environment and reinstall it every day for the next 2 years and fix anything that breaks
3. Freeze your entire dependency tree where it stands and occasionally do large breaking change updates

All 3 options suck but #3 is the least worst
If they selected "5" and failed to answer the same question, would they be a hire? If not, what's gained by having them self-assess?

I imagine the answer might be "we wouldn't waste time talking to them", but then, you just created an incentive for a person who would otherwise rate themselves as "5", "6", or "7" to pick a higher number in hope of squeezing through. You then penalize that in the interview process. Seems pretty counterproductive?
Vulnerability to LN business practices. Not a system vulnerability.
I've found Nix to be basically the be-all-and-end-all of making Python work reasonably. Mitchell Hashimoto put out a post about how to actually do that a while ago [1].

[1]: https://mitchellh.com/writing/nix-with-dockerfiles
Just curious, what's the backstory? What inspired you to work on this?
Just remember the developers are not mindless idiots who will submit to mobs of religiously ideologically zealots that constantly complain about everything while contributing nothing to open source development or society?
Pip will cache the downloaded package tarballs to make repeated installs faster at least, but that's little help when you have a dozen venvs with multiple gigabytes of pytorch.
So what you’re saying is “it's now legal for the judge and everyone else involved to get a nice present from Boeing, as long as it happens afterwards!”
None of this matters, not even PGs post, but it's the comment section, so here we are...

The definition PG gives for an obstinate person is someone who doesn't listen, with the implication that they are "wrong". I'm just presenting a scenario that is very common in my world, where people may not be right or wrong, but differing and strong opinions lead to people being mislabeled as obstinate.

IMO, "Alignment" is a bullshit word used by people to basically say "my way or the highway". I might even say it's mostly used by obstinate people. :)
Modders have done some incredible work optimizing and bug-fixing Morrowind over the years. I'm curious if someone could mash all of that together and 're-pack' an Xbox version of the game that ran way smoother.

Completely pointless? Yes. Interesting? Also yes!
Sort of tangential, when I was interviewing for a job, one of the hiring manager asked me list my four (!) biggest weaknesses.

I can think of hundreds of weaknesses on my end, but of course it's an interview so you don't necessarily want to tell them everything, just stuff that either doesn't make you look too bad. It was extremely difficult, and I thought it was kind of a sociopathic question.

Granted, I did get an offer for that job (and took it), so I guess it all worked out, but it was a very strange part of the entire interview process.
I wouldn't be so absolute about it, but I certainly empathize. Any time a candidate told me they were an expert in C++, it didn't go well. I think that suggests they are either wildly overestimating their abilities or are too interested in being "clever" and using weird corners of the language that aren't necessary/beneficial for the problem and that no one else will understand. Probably both.
Last minute / next day fares have traditionally been far more expensive than 3 week advance, and that was intended to impact business travel more than leisure. If there was a 3rd party marketplace for airline tickets, last minute tickets would not be nearly as expensive and the airlines would make far less money.

Consider an example where we have a business traveler "Bob" and a leisure traveler "Larry". Bob needs to get to LAX tomorrow to put out a fire at a client site. Larry has a trip booked to LAX tomorrow, but can't go because he's sick. Larry has paid $500 for the trip 3 weeks ago.

Today: Larry cancels his trip, and maybe, if he's lucky, gets an airline credit for the original price of the trip that expires in a year and which may be hard to use for his next trip. When he cancels, a seat opens up on the plane, and the airline sells it to Bob for $1200.

If resale was permitted: Larry auctions off his ticket at an airline ticket reseller. He gets $700 from Bob. So if resale was permitted, Bob's business saves $500, and Larry makes $200, and the airline looses $1200-$1700. You can see why they hate resale.
a really talented developer i worked with told me that the absolute rock stars in the industry would call themselves 2-4 while the worst would say 6-8. dunning kruger in effect
You can probably create your own frame if you are careful when you open it up.

It has no touch.
If you change its orientation on the wall, you have to change the orientation in the phone app.

There is no sdk but there is an api one can use for connecting third party apps.
Alex Jones has to pay more.
It could be worse. I was once at the Berlin Zoo and a group of tourists were harassing a tiger. So it turned around and squirted urine all over them.
Since about 10 minutes ago, getting partially-loading pages, API failures, image loading failures, and general slowness. Nothing officially announced yet. I am in US/East.
This does not justify attacking peaceful people who are minding their own business and having dinner.

In fact, in my jurisdiction this would be common assault.

Also, "rich tourists"... On the contrary. The number of tourists across Europe has exploded because very cheap flights and available and cheap accommodation means that, for instance, spending a couple of days in Barcelona has become extremely cheap and affordable to all, and all can be arranged from one's smartphone, indeed. When tourism was only for "rich people" there was no problem at all and Tom Ripley was very welcome everywhere ;)

Example: Ryanair has flights from London to Perpignan (in France, across the border from Barcelona) in July starting at £35 one way... Barcelona seems more in demand so it's a whole £65...
Agreed, it's a bozo filter. It's not intended to find good candidates, it's intended to weed out bad ones.
When you criminalize the role either no one will take the role or an incompetent patsy will. I dont know when HN became a bunch of keyboard jockies white knighting what they'd do... but reality is a very different story.
Tears of the Kingdom?
NASA's Galaxy of Horrors
Thats what pytest is for, it is important to have tests that cover your most important code paths so these these dynamic imports are ran.

Due to dynamic natire of language, coding in python without strong test culture is masochism and full of footguns anyways
Paleolithic eyed needles and the evolution of dress
> 10 is also out.

I recall an amusing HN story from a couple years ago: $candidate was asked about his proficiency with $open_source_program. $candidate was challenged on his not-so-humble answer ...and then suggested that the interviewer compare his name with that of the author/lead maintainer of $open_source_program.

> So the question becomes: "7, 8, or 9?"

I'd throw in a few plausibly-relevant things that zero-ish candidates will have meaningful proficiency at, as an honesty test.
3. Have I tested this question on current employees?

4. Is this a puzzle question with only one answer, or are there subproblems they can still solve and I will get actionable data from?
Well let's flip it around. Your Mom gets laid before you enroll.

Do you just find 65k even though your family had a massive reduction in income.

I don't like the financial aid system in general, it's really bad for young adults with rough backgrounds. Not everyone has a good relationship with their parents.
Yup. I was just discussing this in another comment that Facebook's emotional manipulation of users without consent is ethical wrong. Some people are replying with eh, everybody does it and for 20,000 dollars people will jump to Facebook.

I think the Leetcode grinding, TC optimizing crowd with no real moral judgment which is the majority in tech right now is another reason why things are falling apart. They will happily work for the KKK if they get a larger RSU package.

Your point about them being at least "sad" about it, is a start I guess.
> Flying requires an ID. Attending a concert should not.

Why though? Not disagreeing per say because I'd have thought so too, but upon reflection...

I assume the main reason airlines require an ID is safety and security. We maintain a denied parties list and use identity verification to make it as difficult as possible to fly a plane into a crowded venue. Border control is another issue, but there's plenty of intra-country or intra-state flights where this isn't an issue.

Ticketmaster sells unverified access to crowded venues.
It’s Barcelona in July. I would pay to get squirted.

But also,
Being mad at tourists seems weird to me. These are people who want to come and experience your city, learn about your culture, pay to eat food at your restaurants. Buy local art, have gelato with you.

If your gripe is increased housing costs (which it almost always is)
The problem is not tourists. The problem is short term rentals are more profitable than renting to locals (the fact is it pays 5x as much so property owners will do it if allowed). Go squirt the mayor and demand he accelerate banning short term rentals. Give him a second squirt and ask him to accelerate permitting new housing construction while he’s at it.

Tourists bring money to your city. They pay your wages, they elevate the economy. Embrace them and make rules to prevent them from damaging the city they’re coming to experience. Don’t shout at them.
Quick question: Why would you need Xpra for this, or what are the advantages of Xpra over normal X forwarding?
While this is correct in a literal sense, you are missing something that the profiler tells you about your p99 (and p99.9) tails of the end-to-end system: sources of "slowness" are often correlated in these requests. Some systems I have worked on have p99 times that are built out of a combination of 90th percentile events that you would find in a profiler. In this case, a profiler doesn't tell you about anything being particularly bad.

Profilers also say nothing about queueing, and can very much mislead you if you care about latency in specific.

If your "slowness" is driven by a single function (or made of truly uncorrelated events), you can accurately measure your tails with a profile. If not, a trace will give you meaningfully more information.
I think this https://www.thesaurus.com/browse/covet is what you're looking for. It's even in the ten commandments - as mentioned on the page.
I've read "they're too/so/very fragile" so many times, but nobody has given me an example of how or why they consider them fragile, what steps do I need to do to break them.

Myself? I consider them ephemeral: I create my Makefile with a 'venv' target to delete/rebuild the virtual environment in case of changes. Some do take longer to rebuild, but with a global pip cache it takes much less time to rebuild once it's been done the first time.

Hardcoded paths and symlinks? Not a problem, I know that virtual environments don't travel; and since they're ephemeral if I need it at a different location I can always rebuild them.

Do you have an example for your third paragraph?

And I've done the last one, converted all packages to wheels, uploaded to an artifact server, and used those for production deployments.

I'm curious, really; not bashing you for having troubles with it, but I don't understand the aversion given my lack of blockers when using them.
I made https://pip.wtf, which is a "god damn it, I'm doing this myself" alternative for single-file scripts that just need some basic deps. You paste some code into your script and then it installs dependencies to a local directory.
It's not intended to be the only question we ask, it's just another data point. That's why you do a full interview.

To your point, though, even saying 5 and not being able to answer basic questions would be a huge red flag.
Show HN: AI via an Email Address
Eh. If you are an experienced professional, you should be able to triage. Making semi-accurate, off-the-cuff judgements is exactly what you are being hired for. I've never minded these questions.

> It’s entirely ambiguous, and depending on which interpretation you give, there’s really no wrong answer.

This is a feature, not a bug. There are going to be other parts of the interview process, knowing where you are confident and where you are not is an invitation for further discussion.
While I would absolutely leave the EU the second I would become Germanys benevolent overlord, it's not yet illegal to speak out such thoughts. But I do believe that the EU is a massive net cost to Germany. Take the target2 balances alone
would love to hear more on what you mean
And it manifests itself as anti-immigration, too, as evidenced by elections in nearly every country.

Mortgage financing and infrastructure, at least here in Canada, was designed to help get people into home ownership. Over the past 10 years that's turned into cheap, easy leverage to become a landlord.
Reminds me of the self assessment part of the yearly reviews at my job. No one is going to give themselves a below average rating on any question and generally score themselves higher than normal hoping their boss agrees on at least a couple of the questions.