skysight-inc/HackerNews huggingface dataset:
Ask HN: Advice for dealing with a difficult co-worker
I'll try to keep this short. Essentially, I work at a startup and work very closely with another engineer of comparable experience as me. He's been at the company since it was started (2 years) while I joined 6 months ago. We've been having some conflicts. From my perspective, the issue is that he doesn't see any difference between his opinion and fact. He frequently makes changes to shared code that affects things I'm working on without checking with me. In fact, recently, he's taken to deleting entire modules of my code that he feels are poorly designed and replacing them with new versions, which often have changed APIs and require work on my part to correct. When I ask him why he would do this without even consulting me, his response is to argue - in his mind, his version is "right," so why should he need to talk to me about it?

At first I tried to ignore this and keep working. When it continued to affect my work, I tried to discuss it with him, using "I" statements and explaining how his behavior impacted me. Finally, I escalated to our supervisor, the director of engineering. He asks for examples and tries to help us compromise on specific issues. My problem is not any one of these issues but the general trend of disrespect. I suggested I be reassigned to other projects but this is not possible.

Basically, I love this company but these interactions are really impacting me. Sometimes when this happens I become very angry and have a difficult time thinking clearly or working productive. I don't think I can really change the situation, and I really don't want to quit.

TL;DR: I guess what I'm hoping for is some advice on how to be more zen about this situation - how to keep working productively in spite of interpersonal conflicts, how to proactively prevent disagreements from happening, and how to deal with them more effectively when they arise.
yes that is small, and an interesting hassle I hadn't thought about. I would think you could have the option to set a cap so that it stops using services when you hit it, but they don't allow that. A labyrinthine pricing model, coupled with the forced hookup to the credit card for the free tier (that apparently they'll keep trying to charge against and come after you for if the card is cancelled, or you try to self-cap by only having a certain amount on the card), makes for a big distraction, afaic. It is a hypothetically essentially infinite potential suck of your $$... that you will be at the mercy of Amazon customer service to resolve. Now, this has not apparently happened (or I assume we would have heard about it), but the mechanism is in place. Maybe it's just usually a few hundred dollars - curious how often it happens.

I must be about the only one to be concerned about it. Lots of folks obviously seriously rely on the services aws provides, and do not lose sleep over the possibilities here given the benefits they enjoy from it.
They actually produced a number of tracked vehicles and I see some new information after visiting their site too. Thanks for the reminder!

http://www.howeandhowe.com/
Yes. We'll change the url from [1], which points to this. Unfortunately, we don't yet have a way to do any better than that. But see [2] for two things we're working on that will help in these situations.

1. http://techcrunch.com/2014/07/11/lastpass-finds-security-hol...

2. https://news.ycombinator.com/item?id=8016584
Will this also be able to connect to non-Tor peers (via exit nodes)?

One of the biggest problems for any peer-to-peer technology is the chicken-and-egg problem. You need to bring together a large number of users in a short time, or else everyone abandons your product because none of the friends/files/etc. they want are on the network. A BitTorrent client that can only connect to Tor-enabled peers is therefore doomed from the beginning. You need to be able to connect to all the existing non-Tor peers without compromising your own anonymity, while also providing plenty of incentives for other nodes to switch to Tor (i.e. presumed immunity from the MAFIAA). Maybe after 10 years when everyone is anonymous, then you can drop this "compatibility layer" and go entirely dark.

For a similar reason, I support your decision to use Tor instead of I2P. The latter's design might be easier to integrate into a BitTorrent client, but the former has many more users and much greater network capacity, is backed by an organization that will fight to the death to protect its integrity, and above all, just happens to be much better known.
Strictly speaking, it lets you know that your compiler binary matches its source. You can then read the source to decide if you trust the compiler (and others can audit it, can audit binaries generated from it, &c, &c). At which point, as raving-richard says, you can start to trust that your other utilities match their source as well. Which source also should be audited, &c, &c.
>What can a "well regulated militia" do against smart bullets, M1 Abrams, Apache helicopters, etc?

First of all, have you seen how much of a fight low tech militias have put up against the U.S. lately?

Secondly, don't forget that the people trained to use that technology are U.S. citizens too and will fight for their family before they fight for their county (most of them anyway).
Judge orders unmasking of Amazon.com “negative” reviewers
I would look towards the trajectory of Path, and the fate of app.net for your evidence of the preferences of end users vis-a-vis paying a premium for privacy and security relative to free alternatives that make no such claims (Facebook and Twitter, respectively).
Show HN: Baws, a simple Python and JavaScript WebSocket framework
And of course cigarettes are far more dangerous health wise than alcohol. With the cigarette being the drug delivery method, as an beverage is the delivery method for the alcohol.

http://www.cdc.gov/tobacco/data_statistics/fact_sheets/healt...

"More than 480,000 deaths annually (including deaths from secondhand smoke)"

"Life expectancy for smokers is at least 10 years shorter than for nonsmokers"
2013 Mazda 5, $333/month payment, $50/month for 2 tanks of gas, $80/month insurance, service averages less than $50/month. Total: ~ $500/month. Fits our family of 4 nicely.
This is a good talk regarding "Trusting Trust" for binary toolchains http://youtu.be/QogdeTy7cDc
What Should YC’s Sam Altman Do With Bizarre Conway, Paul Graham Oil Paintings?
So far, I brought them over 203 customers:

http://i.imgur.com/evb6Gr9.png

And they stopped payments at 112nd customer.

I was too busy to notice this.
Wow. I had no idea people believed stuff like this. Cannabis appears not to have a large negative effect on people in at least some elite performance situations, like musical performance and freestyle snowboarding. What's particularly hilarious is the debate of whether cannabis might be categorized as a performance enhancing drug.
Fellow gentoo user here. Gentoo does not protect you from Trusting Trust attacks (mentioned above). But then again neither do reproducible builds, because you still have to trust the original compiler. Reducing the variance (to zero in this case) by using a deterministic build system DOES protect against compromise of everything except for the original build environment. Yes, that makes the original build env a target for attacks, but if we honestly believe we have a "trustable" reference build environment then those attacks are also exceptionally hard to pull off.
I'm not sure your solution solves that. If Firefox has vulnerabilities in the source right now, you do little to protect yourself by compiling on your own. Even if you can verify that you and someone else produce the same binary, they could just both be vulnerable.

In fact, if you compile it yourself, unless you can verify the compile against a "known good" one, then you can't even be sure that your local toolchain hasn't been compromised. (I mean, sure, if you were a perfect auditor of your entire toolchain, then you could have some confidence here. You have to be perfect, though.)

Consider, you do a compile of Firefox and it is different than the one for download. Why? As things stand now, you don't know. And that is the problem.
Valid points; I never claimed that CVS is better than Git in general. I still use it for some things mostly out of habit and the fact that it's not really worth the effort of migrating (again, this is mostly for collections of files that don't depend on each other).

As for the (rare) corrupted files, I don't know what caused that. They were single-bit errors that I could correct by manually editing the *,v files. I know of no reason to assume that such errors are more or less likely with Git vs. CVS.
Your response answers your question about Rap Genius.

It's so valuable because they figured out how to gain traction and build a large community, it's not a lot more complicated than that. Now they're going to attempt to leverage that into everything else that can be annotated. Combining all of that in one location = worth a few billion dollars potentially, at least in this inflated market.

They built a slightly better mouse trap, or at a minimum got the mice to come to their mouse trap instead of other mouse traps (most lyrics sites are terrible).

For most consumer sites, the technology is far easier than acquiring the users and a community that meets a certain quality standard. These days the technology part is really easy in fact.
Right, my point is having deterministic builds of firefox aren't even really needed for this. If you trust your compiler, you trust your compiler. What does it matter if you have a non-deterministic build of a utility. You trust what is non-deterministically building it.

As this stands, if you deterministically build firefox, you just know that if your toolchain is corrupted, it is consistent. :)

Right?
My point is that that is the heart of the trust. You have to establish that before you can use any "deterministic" builds of your utilities to establish their trust.

Right?
deterministic doesnt really mean trust per se to me.
it means reliable.

if you dont know what you're getting every time its hard to be any reliable.

of course, if you're reliable, its more trustable.
The latter's network capacity scales up with each new user due to its design, which is far more efficient than the separate client-relay design that Tor uses.

And simply because Tor has the benefit of a greater pool of users doesn't mean that the network would benefit from the addition of this program. Tor is already being extensively used in other ways and the network is quite congested already. The addition of this extra data, plus from the scores of users that will strip out their relay to increase bandwidth for them, will make Tor a less attractive option for what it's being used for currently.

It should be noted that Vuze (Azareus) has a comprehensive guide on how to get their program working with I2P, and it also allows the user to mix torrents from both I2P and the clearnet, so such transitional software packages are possible and do exist.

EDIT: There is also an issue which arises when you run a relay on a hidden service.
https://lists.torproject.org/pipermail/tor-talk/2014-July/03...
Submittable (YC S12) .NET Developer with Localization Experience
What do you guys use to store GPG and SSH keys passphrases? Your GPG can be your most valuable stuff. Remembering passphrase of several subkeys seems impossible. The only two passwords I remember are Google Account and LastPass. I could probably remember GPG Master key passphrase but do you think it could also be saved in LastPass.
Considering how Google punished them, moving to a new domain can only help.
There is one thing to note about the "difficulty" the modern US military has faced versus low tech militias. The US military has been required to exercise due caution so as not to cause significant collateral damage.

The trade off is lives saved today versus those lost tomorrow. If WW2 had been fought the same way it may have taken years longer. You do not end support for an enemy until you beat the population that supports them. There is no infinite number in resistance, ww2 proved that.
The question is how to provide those same benefits to most people in the world. Most of them are not in a position to compile their own software, for various reasons ranging from (reasonably!) not wanting to spend that much time on it to using an OS where it's even more of a pain than on Linux (e.g. Windows, or Android, or iOS).

The only sane way to help these people trust their software is to enable meaningful third-party audits of said software. And that requires that the auditor be auditing exactly the same thing as the user is using.
I appreciate the grey area here and that probably calling Catmull a monster is taking things a bit far. But especially the email about Jill getting poached suggested that Pixar had zero interest in promoting her internally, while Sony was offering her a chance at career growth.

It's hard not to sound like an asshole while you tell someone they're not good enough to be promoted while also having a handshake agreement with your direct competitors to nod along and make it easier for you to manage your profit margins.
Damn, it would seem that I need to play this. After playing Fallout 2 my dream was the play a game like that set... in a fictional renaissance Italy with more tech and maybe some magic. There would be no evil in the world. Just the possibility to raise one town or family above the others and at the end of your life/game have a retrospective on how your actions made a difference in the world.

Maybe dwarf fortress can get us close to this, because to pull it off you need a reference history (or rather set of histories) from which to compare. But the idea of being able to see whether you as an individual can actually make an impact on a simulated world seems incredibly valuable and educational. Sadly most cRPGs today have completely forsaken the idea of truly simulating the world in favor of narrow story telling. What happened to games made by programmers?
Touch library Hammer.js releases v2.0
The fuck I just saw.
Was the English version of this talk recorded? I found the talk in Russian[1], but with my understanding of the Russian language, it's impossible to watch.

1. https://www.youtube.com/watch?v=1FX4zco0ziY
I don't feel like financial payback is sufficient. If laws were broken, people need to go to prison. Looks to me like all the evidence is right there.
What I mean when I say "I think VR is bad news"
AT&T 1993-1994 'You Will' Ad Campaign
The headline is fearmongery: While the security holes are real, they concern not the security of persistent site-specific passwords but of a) bookmarklets, used by less than 1% of their user base, and b) of one-time passwords (OTPs).

I've been using LastPass for over a year on multiple platforms and many, many sites and didn't even know those features existed....

As written, the headline makes it seem that perhaps, just perhaps, persistent password storage is at risk. Now THAT would freak me out.

But the current news is, for me and many users, nothing to see here, please move along.

Responsible disclosure yes, excellence in headline writing not so much.
Yes, yes, your technically correct (the best kind of correct?) but compared to a bullet arching through the air, it's minimal.
Google's Skybox Releases Stunning Images From New Satellite
Ask HN: Any admin / office jobs near Brisbane, QLD? Desperate
Hi everyone

Due to unfortunate circumstances, my parents are unemployed and about to lose their home - they are both very well educated (both have doctorates) and hard-working, but getting jobs is often more about who you know than what you know, and my parents don't know many people at all. They are two of the loveliest people you could ever know, and I am desperate to help them. They would be happy to do anything, including admin or office work.
Life's too short to be miserable at work. I'd chalk it up as a learning experience and move on. Lots of opportunity out there, and you'll probably land somewhere that you can either learn or teach things that you'll never be able to in your current gig.
So? People make fun of people dying all the time. I didn't feel his comments were offensive. I thought it was actually true, since it seems like Elliot Rodgers was angry at pretty women.
I'm done here. I agree to disagree. I still believe you are wrong and I did not claim Docker was a general container solution. You don't know how Solaris Zones work, because if you did, you'd understand that cgroups are insufficient to provide the same level of security.
A C compiler is not a single executable. If you take gcc, compiling C code involves a preprocessor, a compiler, an assembler and a linker (and that's a.simplified view). To make matters worse, the assembler and the linker are not even part of the GCC source code, they're a separate project. That would likely make the process of DDC significantly more difficult than if the compiler was actually a single executable.
Also, there are other things involved in the whole process, like the CRT static objects, dynamic libraries and the dynamic loader. That's many more items to trust. You could even add the kernel to the list.
Nice. That's very similar to my background (R & Python). There's no existing codebase though, we are doing everything greenfield in Scala.

I'll give IntelliJ another try, thanks.
Oh sure, the mathematicians might be able to hand wave away this one with their "trillions of events".

But what about that time where thousands of men were all named Spartacus?

Yeah, ponder that one over a really hot cup of tea.
This reminds me of a weird calling issue I came across, but mine is obviously unrelated. I needed to make calls from America to Australia (inquiring about apartments from the Australian equivalent of Craiglist), so I was using a calling card that I typically use for calls around North America.

I make the first call to Australia, and the apartment was suppose to be owned by a woman looking for a roommate. Anyway, a man picks up the line and says hello. I can hear a woman in the background talking, and dogs barking. I ask for the woman by name, and the man says to hold on one second. Then he starts arguing with the woman for a minute, returns to the line and asks if I'm still there, and then says to hold one moment, and now you hear the dogs barking louder, and it sounds like he's taking them outside because the woman is complaining. There's also a TV or radio in the background. I think he returns again a couple of minutes later, apologizes and asks me to wait longer, but I can't be certain. I remember after about 5 or 10 minutes I decided to hang up because I'm calling long distance, the man sounded rude, and it didn't seem like a place I'd like to live any way.

Now, I call a few other places throughout the week, and get a few people on the line, and others with weird connection errors saying the numbers can't be reached.

Then, I'm making a call to a number in a completely different city a few thousand kilometers away, and the same man from before answers. He asks me to hold one second, and I don't recognize the voice at first. Suddenly, I hear the TV, radio and the dogs barking again, and get this weird sense of deja vu as things start to repeat. I hang up. I now realize it's a recording, and I never talked to a real person the first time around. But... I'm calling a completely unrelated number, so how did I get this message again? I call the number back, and now it goes through to the actual person I was trying to reach.

This would continue to happen on future calls, but by then I knew the routine and would hang up and redial.

Any idea what was happening here? I used these calling cards all the time and never had an issue. Somehow my calls were getting sent to this recorded message when calling Australia, regardless of the number I was dialing. The recording was trying to keep me on the line for an extended period of time.

My only conclusion is that these cards are getting rerouted through another country or less than trustworthy business. They then forward a certain percentage of calls to this message in order to get longer call times, and higher profits.
Once you've demonstrated you have no integrity as a human being, the onus is on you to demonstrate, through your actions, that you have changed.
'Stop trying to make girls take science': It goes against their human nature
Tear Down that Great Wall of Text – Formatting Emails for Readability
"No network transparency" is still true of the Wayland protocol. However, compositors (such as Weston) can forward windows over the network. I think this is where most of the confusion comes from.
Is there any research on this topic to support what this psychologist claims?

http://www.heraldscotland.com/news/education/claim-gender-jo...

AN ACADEMIC has said schools should "give up" trying to attract more girls into traditionally male subjects such as physics, computing and engineering.

Dr Gijsbert Stoet said there was little point trying to bridge the gender divide in education as differences between boys and girls meant they would always be drawn to different subjects.

The academic, who is based at Glasgow University's Robert Owen Centre for Educational Change, said: "We probably need to give up on the idea that we will get many female engineers or male nurses."

He added that initiatives to reduce gender divides "completely deny human biology and nature".
OP's proposal is not just to add bandwidth-heavy clients to the Tor network, it is to add a large number of relays by making every BitTorrent client a Tor relay. OP also devotes two long sections on why he thinks his program will not harm the rest of the Tor network. Sure, there are issues to overcome before this can become reality. But the Tor network has improved by leaps and bounds over the last few years, and there's no reason to be pessimistic about its ability to handle a lot more traffic.

Sure, I2P already works reasonably well with BitTorrent. But what's wrong with trying to achieve a similar result with Tor?
I'll give you three responses (a new method of mine to leave you the decision)

a) Just get over it, what doesn't kill you makes you stronger, keep coding and keep letting him delete your stuff. Eventually you should learn what he'll delete.

b)If you're not happy 100% happy what you're doing for a few days in a row reconsider your options and change altogether aka quit. - Steve Jobs commencement speech philosophy.

c)Keep going to your supervisor and work your way up the ladder.
I disagree. Modern day encryption has smashed a hole in massive social/political issues.

I would go the other way, engineering solutions (i.e Technology) dictate social and political problems.
I know that was the point, but I thought the spec on ++ is that it occurs after the statement. I thought the spec on parens is that they are sub statement. Since there are two ++ occurring, it is odd, but I thought by spec the 12 is right.
The Telehash developers are now working on Layer.com
Did you watch the video? He looks normal to me. Maybe it's just an awful pic.
If you trust your compiler you can verify that your build is the safely based on the source that you have. If the build is deterministic then you could verify that the binary being distributed to the masses isn't compromised by building the same file yourself and seeing that it is the same.
Yes, either of those would make the project a success, no?
Talk to your supervisor in dollars and cents.

His shitty attitude is costing the business time and money because you're forced to rewrite existing code whenever he feels like rewriting a module.

Personally though, I would quit and find somewhere else to work only because your supervisor doesn't care about your problem. It's not like there's a shortage for software devs.