skysight-inc/HackerNews huggingface dataset:
The gap is closing for the first few years of engineering vs finance (first 3 years of comp in finance is definitely a lot lower now vs 2007, whereas first 3 years of comp at GOOG post 2009 has exploded), but the gap grows as you approach your mid 30's. When you're getting to $300k at GOOG, your buddy is over $500k at GS as a VP (VP is middle managemnt in high finance and iirc the high fliers get there in 6 years). Fast forward a few more years, and you're making $500k at GOOG and the buddy is well over $1MM. The gap will continue to grow in size exponentially thereafter.

I guess $300k vs $500k is much improved compared to $1X0k vs $500k that we would have been looking at a decade ago though :P

In addition, perhaps the parity is better when you compare median results rather than upper quintiles.

Btw, first year management consultants make nowhere close to $100k (though they can make up for it with Starwood points and frequent flier miles on United -- no joke). You'll only top $100k once you're an associate, which is after your 2+2 (2 years as an analyst, 2 years of bschool). Only 3-5% of the analyst class goes straight to associate. Students who enter as an analyst are doing it primarily for the great education and training McK/BCG/Bain give you, and definitely aren't making the choice based on monetary incentives.
Here is my version

sort -R --random-source=/dev/urandom /usr/share/dict/words |tail -n5| tr '\n' '#'

Sample Output:
pyodermia#personable#sunburnproof#disarray#lawyery#
Wireless broadband can reach the moon, and maybe Mars
#4 is interesting I've never heard that before. I recently graduated as well but from a heavily liberal-arts oriented uni. Most of my friends didn't even know a CS major even existed.

> There's the perception of being able to easily create a startup or to get a programming job at a tech company

Yeah a lot of people believe simply having a CS degree is a shoo-in for any job. However, if you're studying CS you probably want to work at a top-tier corporate or startup and neither is easy for most grads.
> "cats are people" is a patently bogus claim

There's a pervasive idea or feeling in a lot of people, I think, that animals are not just machinery, but actually very limited people, akin to mentally disabled humans, and should be treated as such (animal rights protesters, at least some vegetarians, etc). I don't think that this is patently bogus, but I do think it's not very likely.

I think when people start talking about animals feeling pain and having emotions, they don't mean that those animals have the sensory and neural hardware which produces and consumes pain signals and emotions (which is "hardly worth debating"), but that there is someone experiencing that pain or those emotions. If that's not what they mean, then the mere fact of pain or emotions wouldn't carry any impact higher than rerunning a horror film.
No, there probably isn't a realistic attack against Python's default MT random based on the normal use case of a random word selector run "offline".
> So, have you ever actually used either of those?

Yes and AngularJS is better than those two. Proof? the large community behing AngularJS. the 800 + committers on github and all the resources on the internet that beats any other framework. Devs dont use something because it's hyped but because it will actually make them more productive. But you'll get your facts straight eventually.
Yep, finding a property manager is one great solution to the problem. Did you find a good one easily? I've heard it's really hard to find a good one that actually manages the property well and keeps it rented out consistently. I haven't really looked myself, though, so all I really know about it is from stories on BiggerPockets.
I didn't mention github, and don't see it as especially relevant.

If you are an 'excel jockey', then your job involves coding. Of course knowing how to code to some degree will make you better. I don't see that as a good example. You should have used one of the many professions that currently involve no coding at all as an example.

There was also a time when civil engineering was a specialist activity best left to professionals, and it still is. You seem to believe that coding is akin to literacy. I believe it is not, and have provided some reasons in my previous post.
I seriously doubt the numbers here. CS majors start at $60k? That's what I started at 12 years ago and that was the height of the dom-com bust. I've managed software engineers at a couple different companies so I have a small sample of data, but they all start at $100k for a college hire. (and I'm not in the bay area, so no bay area cost-of-living adjustment)
The problem is that 'computational thinking' has become expected of a university education, regardless of major, but universities haven't shifted to meet the need.

All the other basic requirements of a university education are filled through entry level classes - credit-fillers that students have to take in order to graduate. This structure works out well for everyone: the university ensures that students are getting a well-rounded education (as opposed to a trade-school degree) and maintains its reputation and the value of its product.

The only classes that students can take to demonstrate an ability in computational thinking are CS classes. Entry level CS classes, like those in the other engineering disciplines, are not like entry level classes in non-engineering disciplines. Most students that take ARCH 101 and LIT 101 are not taking them because they are interested in pursuing the major, they take them because they were the best-sounding classes that help them to fill their credit requirements. In doing so, they end up with a well-rounded education. In contrast, most students that take EE 101 are trying out for EE as a major.

CS entry level classes traditionally fell into the latter category. Demand has resulted in students treating them as part of the former.

The best thing a university could do is to figure out what skills that these employers are all demanding and offer entry-level classes to fill the need. Structure them to work with large numbers of students, just like all the other 100 and 200 level classes that everyone takes.

Here's the key part: advertise these classes relentlessly, to students and employers. Talk about how the university has seen the demand for these skills and has shifted to focus on them. Become known as a university where every student can get these skills as a part of their education, regardless of major, and most choose to.

Potential students will be thrilled at the prospect of a university where they can get a bankable education without having to commit to CS as a major. Strain on the CS major will go down and prestige will increase - if every student is getting the kinds of CS skills that employers require, then the ones that enter the major must be the hardest of the hardcore.
What did you do exactly to calibrate it? Exercise? Food?
I'm sure it could be a factor (nothing's preventing someone from doing that, after all) but my original point was essentially as characterized in this post below https://news.ycombinator.com/item?id=7793607

The tone of the article, I think, was suggestive of a causal relation, which surely doesn't (necessarily or plausibly) hold.
You never were more than a power failure away from that disaster anyway by the looks of it. It wouldn't matter much whether or not the shutdown had started. In cases like these you're essentially playing Russian Roulette with your data, only you're using 5 bullets instead of 1.
When cell phone signal is low, do not try to ring, send text message! It has much lower network overhead and has better chances to be delivered!

Sometimes you can even send/receive text messages from an airplane.
The out-of-pocket maximum is the maximum amount that the patient will pay before the insurer takes on the rest of the costs. Even if someone needs $100k/yr medication, he should only have to pay $6,350 per year for it.
In the postmortem it seemed that by issuing the shutdown but not waiting for it to complete the database ended up in a strange state that we could never fully recover from.

I guess the moral here is tread lightly and take the time to be informed before you just smack something with a club.
Maybe. But correlation does not imply causation. Users like beautiful quality products that also function as status symbols. They like when the choices have been made for them so they don't have to walk around Best Buy for 2 hours trying to narrow down which laptop they want out of 30 others. But not necessarily someone ignoring their needs and replacing them with his own.
Why I don't post on Yammer?
Delhi government dives into the android app development world
Not to mention that $50K is the median household income. Individuals earn even less, on average.
Also, this is the third remote code execution vulnerability blogged in about as many days. Seems like dlink is having major quality issues with their software/firmware, which is spooky considering the things the device is supposed to do (manage power on an AC outlet). They did release a patch for the first problem but failed to review and fix similar flaws in the immediately surrounding code.
> only "rare" due to strict control of what comes to market

Not only through market control. Diamonds are sort of rare in themselves too.
but coding is one of the best ways to introduce people to computer science
It's interesting that the US regards as criminal and prosecutable the same actions that the NSA conduct against foreign telcos and others. I would have thought that there might be caution about bringing indictments in such cases.
Well said. Other things that strike me as more important than knowing how to code, which aren't common knowledge:

1. How our political system works.
2. How the economy works: specifically, what money is, where it comes from, how the banking sector works, and the relationships between money creation, interest rates, asset prices, and incomes.

Most people don't understand these things, and that holds our society back far more than not knowing how to code.
I'm also interested in knowing a practical attack against this.

How could a weakness in the randomness be a problem at all in this case? (generating words to use as password)

Ok suppose I've used a not-at-all-random PRNG and got the following numbers: 1, 16, 29, 30, 18

So I grab the 1st, 16th, 29th, 30th and the 18th words from my list and those words are my generated password.

How is this vulnerable to any attacks?
Oh no, the US has its delicate sensibilities hurt by cyber espionage! Come on China, why would you spy on us? It's so mean and unfair, why would anyone do it?

Despicable.

Why not host Defcon in Canada, or somewhere else? If Chinese hackers cannot attend industry events because of the US's imperialistic tendencies, it's our responsibility to modify our events so that they can.
https://www.schneier.com/blog/archives/2014/03/choosing_secu...
That makes no sense at all. A 14-bit player would play the top 14-bit.

Playing the bottom 14-bits would make anything with nonzero top two bits sound mostly like noise.
Government looks the other way regarding it's own actions, More at 11.

It's not interesting, it's standard operating procedure.
Great post, thumbs up!
Hence why I enable comments on HN. But most sites are mostly article+comments and in those cases the comments are often pointless.
Show HN: AnonyFace – the ANTI-selfie app
If they do this, Defcon 23 will be in Mexico or Canada, I suspect. (I'm speaking AT DC22, but I can't speak for Defcon, but I've been going since DC7 and I'm pretty familiar with how they think.) Montreal would rock.

BTW, there's an awesome conference in Beijing I'm going to submit to -- http://xcon.xfocus.org/
Ignoring the NSA debate, do such actions achieve anything (from security point of view)?
one more reason to invest in tesla and solar city. running out of oil scares the crap out of me. WW3 for sure.
> Proof? the large community

> Devs dont use something because it's hyped

> But you'll get your facts straight eventually

You seem rather offended by this conversation, figure we'll stop it here.
In relation to "coding becoming the next literacy" and having demographics on people who know how to code...

What use does a mere "learning to code" actually have to most people? How do we measure fluency in "coding"?

Think about it. A crash course on basic procedural constructs like loops, variables, functions and maybe some simple exercises where one makes use of a language's standard library is not particularly useful. Even the conceptual knowledge that one gains is relatively minimal.

It's not like the huge percentages of people "knowing how to code" will do anything meaningful with it. Why? Because they wouldn't have the skill.

Many discussions revolving around compulsory code education seem to completely ignore the tons of domain-specific knowledge one requires to put coding skills to any real use. It's likely that little of the "code literates" will ever contribute to an open source project, for instance.

This is because besides code, you have (potentially): a build system, continuous integration, documentation generator, actual protocols that must be understood (HTTP, DNS, FTP, etc.), use of OS-specific system calls and constructs, general knowledge of memory layout, knowledge of system administration, etc.

These are merely condensed into a nutshell. Code by itself is of little use without actually knowing how computers work in general, which is no small task to comprehend, and requires tons of domain-specific knowledge as to the many abstractions we have created around software and hardware. It's a perpetual learning experience. A person who has learned rudimentary C is of little use in any serious project that requires knowledge of the POSIX and/or glibc API, for instance.

It's a completely meaningless metric in general. Most people will just do some basic imperative coding in a highly abstracted knowledge with no real conceptual understanding of what actually goes on, and promptly forget about it. Maybe they'll remember how to write a recursive Fibonacci sequence procedure.

Software is more than code. It is complex and multi-faceted. I can see blind coding having some uses for things like VBA macros, but those can be picked up by individuals on a case-by-case basis, when and if they need them.
In this case, the decision is arrogantly wrong because it's predicated on an over-inflated sense of Firefox's position relative to the entire platform and ecosystem of consistent applications, and this position is based on self-interest, putting branding interests and their designer's ego ahead of the interests of their customers.
How long of a notice would Defcon have to reschedule? Especially since they probably have the hotel booked and everything else? Also they would have to inform all speakers that it would be held in Mexico / Canada and some people might not want to come so it really just hurts the Conference in general. But regardless we still have to wait and see if Visa letters start getting rejected.
Now the Chinese hackers will have no choice but to go to the security conferences in Asia. All of them are way better than Defcon though, so who is really losing?
I keep hearing all these high numbers getting thrown around a lot. Is $300K really the typical pay among, say, 5th year Google engineers who joined out of college? If so that's pretty amazing.
I can't speak for dang, but if you didn't ask for votes, I don't think you violated netiquette at all.
Kind of rare, but not enough to justify the sort of price premium they demand, at least according to [citation needed]. Heck, it's probably the same source(a) the Grandparent post is thinking of.
What's terrifying to me is that the more our science moves forward, the more we're realizing that we've fucked up the Earth in ways we had no clue about. It's likely going to get worse and worse as time goes on, and it's reaching a scope where undoing the damage is more and more unlikely.

It'll be interesting to read follow up studies about the impacts this has on the ecosystems. It's freaky how interconnected oceans are.
I've authored and maintain a couple of Ruby gems. My perspective: some tasks are no fun and suck out my enthusiasm. I love help with those. Examples: update to work with the newest version of X, track down and fix reported bugs, answer basic user questions.

Think about what "chores" you can take off the maintainers' plate and you're likely to get a warm welcome.
The idea that we should be teaching Computational Thinking, imho is nonsense, and I've blogged about it here

http://coding2learn.org/blog/2013/10/10/computing-is-much-mo...

I struggle to find a simple example of where CT applies to everyday life, outside of the sphere of programming. Kids should experience code first, and then realise how it can simplify their lives as they begin to understand CT.
>How is this vulnerable to any attacks?

Because if the PRNG isn't sufficiently random, an attacker can determine that you got the numbers 1, 16, 29, 30, 18.
Learning to code gives you a good framework to learn to think. By all means, it's not the only one. But it's one that also gives you a good shot at a good salary.
Show HN: Looking For A Career Change? Try Consulting
I should emphasize that tuple structs are a somewhat obscure feature. Their main use case is to support newtyping:

struct Meters(f64);
struct Miles(f64);
let meters = Meters(10.4);
let miles = metric_to_imperial(meters);
let Miles(raw_miles) = miles;

The single-arity case above constitutes the vast majority of tuple struct usage. And, as you may expect, in any other context besides tuple structs a single-arity tuple is completely silly (the only reason that we have syntax for single-arity tuples at all is to make writing macros easier).

Ultimately it's just not a feature that would be pulling its weight. If you want a structure with multiple fields where destructuring is not necessary, just use a struct in the first place. Honestly, if we found a better way to support newtyping then I wouldn't be sad if we got rid of tuple structs entirely.
>>Historically the diamond industry was structurally flawed -the De Beers monopoly controlled prices.

Nonsense! With no utility, De Beers' monopoly is the only reason why these objects have value.
I agree with most of this, but it's not just technology. It's the balance of power expressed in the way old media publishers publish content.

The see the content they produce as the primary value, and the comments as a sideshow. Platforms like HN are very different, because here the people are the center, and the content exists to feed the discussion, exchange and analysis of information.

As far as old media is concerned, they've already done the analysis, so the people really don't have anything to add. But the fact is that given the medium, most old media publications are extremely shallow and completely static. Only newspaper articles don't give references, background information, give no insight in how the analysis came about and absolutely do not evolve over time.

Publishers don't understand that their product is the raw material, not the end product. If they don't provide the context and services, people will take that raw material elsewhere, like HN, and the only comments on the publisher's site will be of the hit-and-run kind.
from random import SystemRandom
random = SystemRandom()
Another trick is to use a dummy cord. Use a broken headset and cut off the jack. Plug that into the phone.

Diverts sound to headset which doesn't exist. Or just put on a working set of headphones
The main sin of many "learn to code" proponents is their treatment of "code" as the end itself, rather than the means to it. Code is almost meaningless without understanding the countless abstractions and protocols that humans have crafted around software and hardware. Comprehending the tangled web is something that takes personal passion and self-education.
Has Dr. Dre’s drunken boast cost his company $3.2 billion?
This is especially interesting considering Tiffiany's earning reports this week which showed a substantial part of their post recessions profits is now in the low end consumer goods.

If the correlation holds, we can expect to see a lot more teal at Target.
Git Frost – The Branch Not Maintained
> there probably isn't a realistic attack against Python's default MT random based on the normal use case of a random word selector run "offline".

What does Python use as an entropy source for its PRNG? Even though MTs work pretty well if you can't look at any of their outputs (i.e. you're "offline"), if the initial state space is small enough you can just crawl the entire thing.
Unfortunately, you'll lower the total value of the ecosystem by producing code and advocating practices that lower the level of reliability and correctness of code -- so agreeing to disagree doesn't really solve the issue that you write bad code.
> double write buffers were disabled on a non-atomic FS

Surely just sending SIGKILL will allow the writes already issued to complete, regardless of the FS type/options? Nobody kicked the plug out of the wall.
Be careful not to write it off too lightly. As far as I can see from the article, the professor did have real world experience, and still got into bad trouble by being overconfident.
This benefits no one. No real Chinese hackers or security professionals would ever risk coming to the USA in the first place. And Chinese government officials involved in cyber security would never come without a diplomatic passport. So really all this hurts are academics.

This is a dog and pony show.
I feel I must disagree with this. In my personal experience, a computer science education will teach you algorithms, yes. You will learn how a computer operates a a low level. You will even learn logic.

However, for the vast majority of people, this is not enough to build the mental models of how computation and logic really operate. You see this in the sheer number of people who graduate and don't know how to code. We learn best from tight feedback loops which an algorithms text book simply cannot offer. Writing that code, on the other hand, will give you a deep insight into how it really works and build a lasting mental model.

It is coding which ultimately changes the way you approach a problem and think through it.
Good faith, in my opinion, is about contributing to the discussion in a valuable way. Reminding you that you don't get to set the conditions for criticising your work, even in a tongue in cheek way, is just that.
NikeFuel Weather Activity
Stifle security events held on your own turf...right. Its almost like they are trying to intentionally lose.

Honestly US politics and policy are a mystery to me...
Could not agree more, and I teach CS at a secondary school.
Hang on, De-Beers loses control of the diamond market and then the price goes up? This doesn't look like the market has started being rationally driven by supply and demand, this looks like someone even more nutty than De-Beers has successfully staged a coup.
python and ruby use a mersene twister prng: http://en.wikipedia.org/wiki/Mersenne_twister
it is a good prng... but it is not crypto secure.
as an easy patch just use urandom: http://cryptography.readthedocs.org/en/latest/random-numbers...
8-12 months, most likely. I guess the most plausible situation would be a split con, with most of it still in Las Vegas, but live VTC stream to a parallel con elsewhere.

Black Hat would not move; Defcon and Blackhat hate each other now, but it's still a big draw (your work usually will let you expense Blackhat, and Defcon is on the weekend after)
They make matters worse. After all, conferences aid in transparency, less transparency is bad for security.
Her face is a bit masculine, don't you think?