skysight-inc/HackerNews huggingface dataset:
You are missing the point that Eric Schmidt's book is making.

I think successful software developers can generally be put in these categories:

1. People who gets assigned work done.

2. People who figures out what their assigned work should be and gets it done.

3. People who absorbs everything that is going around in team, figures out the biggest problem they are facing and gets it done.

4. People who absorbs everything within their teams + outside and anticipates the biggest problem future holds and gets it done today.

In short, being great coder just puts you at Category 1. For higher ups you need lots of ambition, vision, sense of mission, independence, intrinsic motivation and persistence. Most companies just want their employees to be able to "get work done" and they usually believe that management chain aka "leadership" would bring other qualities to the table. It's considered as management's job to figure out what the big problems are, break it down to tasks, make schedules, monitor progress and so on. if ads had a problem at Yahoo, for example, CEO might go to VP and ask him to fix it and then VP rolls this down the chain. The book says that Google breaks the mold here. Instead of CEO going to VP and management eventually assigning tasks to someone, he expected employees to just get up and take an action out of disgust and violation of sense of their mission.

One "issue" is that these kind of people don't like to be "managed". They generally don't want someone telling what they should be doing, track their status and so on. This was the reason Google used to had managers with 30-100 reports. One intended effect was that managers would be forced to interfere less with their reports and not be able to look over engineers shoulders or decide for them what exactly they should be doing. At most other companies it is unimaginable to have that many reports because the very first question people would ask is how would one manager can keep track of what everyone is doing? These companies inherently are designed to attract category 1. There is exponential difference in outcomes between each of above listed categories.
SSL Certificates are free. It's the authority you pay for.

What needs to change, in addition to this, is the interstitial warning page for a self-signed certificate needs to go away.

Having a self-signed cert > http.
>But there hasn't been much evidence that their groundbreaking work has made a significant impact in declining revenues.

Do people have the time or attention span to read anymore? For me I love the Economist, but I don't have the time to read it anymore. Thankfully they have an audio edition. I wonder if this might be the trick to get subscribers up.
> Aside from the female menstrual cycle

Birth control pills have a big effect on this now.

> A baby is brought to term in 10 moons or 280 days (9 months or so).

If you can't tell how far along a pregnancy is without reference to the Moon, there's no help for you.
I identify with a lot of the issues this article brings up -- I might work a part-time position with flexible hours that allowed me to be there for my son both before and after school, but full time work would take me away from my family more, and the cost of daycare (and potentially housecleaning help) would offset a lot of the financial benefits of extra hours. So I choose to be a full-time stay-at-home dad instead.

I also find it interesting that this article uses the terms "ahead" and "behind" to describe much of Europe compared to the US, but the details show a much more ambiguous picture. European women are more likely to be in the workforce, but European women in the workforce are much more likely to be working in low-level positions with low wages, limited hours, and reduced opportunity for advancement. So it might be better to say that Europe and the US have chosen differently on the tradeoff between number of women working and the quality of jobs women hold.
I'm guessing it means that ads that lead to http:// urls get binned.
And I certainly wouldn't advocate giving a CDN permission to MITM your own domain.

That's how Cloudflare works. At least 36,000 domains let Cloudflare act as a MITM for them. Including "news.ycombinator.com".

This is the price of "HTTPS Everywhere" security theater.

Also, if you know the IP address and the length, you can often figure out what static content was accessed.
Google Engineer Accidently Shares His Internal Memo About Google + Platform
Huge improvement on my parable, thank you, fellow bear.
Nah, that's just the server restarting. :) There's a bug where it hangs sometimes, haven't quite figured it out.
This was hugely interesting. And Ange was fantastic.
Counterparty could solve this, on Bitcoin's blockchain [1]:

> Counterparty works by storing extra data in regular Bitcoin transactions, which makes every Counterparty transaction a Bitcoin transaction, albeit a very small one. When Counterparty transactions are broadcast to the Bitcoin network they are verified by Bitcoin miners and saved in the Bitcoin blockchain to make a secure, verifiable record.

[1] http://counterparty.io/
...and the CA one actually protects you from MITM attacks (assuming your machine doesn't have nasty root certificates installed).
But Windows still supports constructors and destructors, right? I don't understand how it eliminate the complexity.

Do you mean that the windows equivalent of _start is nested less deeply and with more reasonable naming conventions?
This struck me as odd management technique:

Hughes tried to contain the damage. As rumors of a second wave of departures circulated, Hughes and Snyder offered several members of the remaining editorial staff one- to two-thousand-dollar bonuses, and in an op-ed for the Washington Post Hughes tried to explain his vision for the magazine.

There are people to whom a two thousand dollar bonus would mean a lot and there are people considering quitting a professional job as a as a matter of principle or out of pique.

Only $2000?
no, 3d driver part of the blob is semi open
blob is still closed source black box of secret sauce (video encoders/decoders, IO ports, bootstrapping)
I don't think that Foer and Wiesetlier "had no problem with the concept of digital initiatives per se". I think TNR had a view of the Internet's effect on culture as something to be defended against. For instance, TNR put out an article in October arguing that readers on the Internet shouldn't post their own book reviews: "I can see the value—maybe—for man-on-the-street reviews of cold cream and pots and pans, but books?!"[1] There are many quotes in the New Yorker article of TNR editors and writers sneering at "new media".

If the goal was to give the magazine some relevancy beyond its shrinking, aging, audience, I don't think that Foer and Wiesetlier were the right people for the job.

[http://www.newrepublic.com/article/119875/margo-howard-amazo...]
In any case, length extension attacks apply to (hashes misused as) keyed message authentication codes - a scenario where you give a message and its authenticator to a server knowing the key, and it checks whether someone knowing the key generated them. The attacks let you, given a message and its authenticator, calculate the authenticator for a different message. However, in this case, the hash cannot be tampered with; breaking integrity would require finding a different message with the same hash, which is a straight-up collision, considered to totally break a hash algorithm. At the moment, the only commonly used hash algorithm with known collisions is MD5; SHA-1 will probably follow in the next several years.
I'm not sure what you're looking for here.

Common or not, I would steer clear of any employer that behaves this way.

That might mean you have less options in the gaming industry if such behavior is more common.

The easiest way to influence change on this issue is to name names and make sure everyone avoids them like the plague.

Think about it this way, if the company you want to work for behaves this way -- then maybe you don't want to work for that company in the first place.
Those aren't different definitions, they're all examples of artifact waste. If something has multiple examples, it doesn't mean it has multiple definitions.
Makes sense. I am put-off by the complexity surrounding the initiation of host provisioning. Writing recipes is a breeze with berkshelf and vagrant. But diving into "real" provisioning tools is a pain for me.

There is a lot of churn in the provisioning and orchestration tools like chef and docker and others. The tension is between an inherent utility in these tools (it makes managing/deploying services easier!) and their desire to lock people into a platform. Vagrant captures a middle ground in the midst of that churn.

when you run 'vagrant up' for the first time, you end up with a provisioned host. Why not say that 'vagrant up' in a local vm is the same as 'vagrant push staging' to some random host. In either case we end up with something modeled by the vagrant file? I know other people would say no, but please consider going into competition in the dev-ops space as a wrapper to the churn, a nice abstraction on the ambitions of others. As an itinerant developer, I just want a Vagrantfile :)
Cost of living is quite uniform in the world. Instead of getting a roommate, they get a crappy small room, maybe running water, maybe not that many rats but probably not.
By the sounds of it you deserve better.

I definitely won't buy any games from them in the future.
A friend of mine did contract SEO work for a company selling synthetic drug similar to marijuana (before the DEA made it illegal). But they kept selling it after it was made illegal and long after his online-marketing contract ended. But he was contacted by the DHS, specially ICE with questions about his prior involvement. Nothing came of it but this story shows that they do investigate drug matters.

https://en.wikipedia.org/wiki/U.S._Immigration_and_Customs_E...

> ICE is the second largest criminal investigative agency in the U.S. government, following the FBI.

> HSI Special Agents investigate a range of issues that threaten the national security of the United States such as human rights violations, human smuggling, art theft, human trafficking, drug smuggling, arms trafficking, transnational gang investigations, financial crimes including money laundering and bulk cash smuggling, trade-based money laundering (including trade finance and Kimberley Process investigations), computer crimes, including the production and transportation of child pornography via the Internet, import/export enforcement issues, trafficking of counterfeit pharmaceuticals and other merchandise, and international Cultural Property and Antiquities crimes.

ICE basically investigates any sophisticated crimes and their mandate definitely covers drugs, especially drugs that are imported from overseas.

This is part of the reason why 90% of the time the patriot act has been invoked it has been for drug investigations and not terrorism related crimes. https://www.techdirt.com/articles/20110908/02534215846/wasnt...
It's not like CloudFlare can't see passwords if you don't use HTTPS. I don't think it's security theater, because CloudFlare being compromised is only one out of a large class of potential attacks.

That said, I fully agree that it would be nice to not have to trust CloudFlare.
Not really. The real story is that the GDP per capita of the more deregulated Chinese provinces doubled or tripled from 2000 to 2010.

My Chinese friends tell me that there are tons of BMWs driving around. Looking at the numbers, it seems that BMW's volume of sales in now greater in China than in the U.S.
the main issue is that we only really know what a fraction of the human genetic code is directly responsible for.

we would need a lot of experimentation to figure out what's safe to remove.

you can think about it as a physical "dependency hell"
I'm sure my bias plays a role, but I would disagree that there's nothing spatial about data structures. Linked lists, trees, heaps, etc, all have the characteristic property of a geometric interpretation: a natural notion of "distance" inherent in their definitions.
One or two false positives a month? You must have low standards. <1 false positives a year is my threshold. I don't believe that throwing out non-spam emails is acceptable.
It's a hack left over from the early days when AT&T UNIX became BSD. Under pre-BSD UNIX systems, a program was started by forking a new process, which meant sharing the code and copying the data. Then the new process did an exec, which loaded a new code segment and wiped the data segment that had just been copied. Copying the data segment and immediately overwriting it was inefficient, so several new flavors of "exec" were developed to get around that.

There probably should have just been a "run" call, which started a subprocess given the indicated executable. Some UNIX-like operating systems have that. It has the nice property that it scales to clusters; there's no reason a subprocess can't run on another machine. QNX, for example, supports that.
You can also access other commands with "/help".
In this case, "vagrant push" should interact directly to your CI. It is named "push" for this reason and not "deploy", although the blog post title uses the word "deploy" since it is the end goal (the push should lead to the deploy).

Example: "push" might not send any code, so much as signal to the CI that that commit is meant to be deployed (if it were to pass). Or, "push" might send code directly to a CI. It is really up to you.

"push" doesn't require it go direct to production, and doesn't encourage that (or actively discourage that). It is just meant as a workflow mechanism to unify how deployments are started.
The Untold History of Women in Science and Technology
You could probably write raw ANSI escape sequences -- they're essentially universal by this point. http://en.wikipedia.org/wiki/ANSI_escape_code

ncurses is overkill nowadays when everything is a (VT100) emulator.
I think the major reason for John Oliver's success is his ability to produce videos that are long enough to capture some of the insight of long-form text, with enough gags to meet today's attention spans.
The browsers do a pretty good job of authenticating servers, and we have a few projects in place to look for rouge certificates. It's not perfect, but it will only get better.
I don't think it's "common" but unfortunately casual racism can turn up anywhere, even in software development companies.

I'm sorry that you had to experience that, but not surprised.
They currently are more of a security risk because if you tell the user their connection is secure when it's not (no verification of self-signed certs) you impart a false sense of safety.
> Her story would have played out differently, she said, if she had been living in her native England. Like many European countries, Britain offers a year of maternity leave, much of it paid, and protections for part-time workers, among other policies aimed at keeping women employed.

If the US had better policies for maternity leave and part-time workers, then it seems likely to me that we'd have many more women workers because employment would "avoid upending their family life".

If the US had better immigration policy, then we wouldn't be turning away thousands (tens of thousands?) of diverse, highly talented, tax paying tech workers from pushing forward innovation in our country.

I'm sure you could make similar statements about our healthcare policy, education system, political system, the grand jury system, etc. Why isn't every single police officer wearing a camera while on duty yet? Why does changing (fixing) these things take so damn long? The worst part is that the people who are in control of really fixing these things and the entire system itself don't seem motivated enough to do so (to me at least, please correct me if I'm wrong).
Interesting, though I don't know how this is really relevant to the debate about whether it's appropriate to tell a user that HTTP is insecure but HTTPS is secure (the comment I was replying to questioned that exact point).

That's because the technology clearly exists to hide the type of phoning-home you are talking about. Any move toward more HTTPS for end users doesn't seem to increase that risk to me.
This made me wonder why we don't just have a standard for signing content sent over HTTP. The original server would give the signature to the CDN, which would put the signature in an HTTP header, and then the browser could check that signature against the public key from the main site's SSL cert. Now you know that nobody could have gotten in the middle and sent you a malicious script, and you didn't have to encrypt an innocuous public asset.
Here is relevant information about it taken from this page: https://support.google.com/adsense/answer/10528?hl=en

"HTTPS-enabled sites require that all content on the page, including the ads, be SSL-compliant. As such, AdSense will remove all non-SSL compliant ads from competing in the auction on these pages. If you do decide to convert your HTTP site to HTTPS, please be aware that because we remove non-SSL compliant ads from the auction, thereby reducing auction pressure, ads on your HTTPS pages might earn less than those on your HTTP pages."
what I am looking for is feedback that whether such a thing is common or not. If it is, then I am simply making a big fuss out of it as this is my first such experience and I will not be as shocked to expect such a thing again and just keep trying.
Yup, that's how most of these curses libraries work. It's a lot of work doing layout with straight up escape sequences, though.
songcoin is another interesting option where consumers get to transact and "invest" in artists or songs... "Songcoin Wants to Be Music’s Alternative Currency" http://www.billboard.com/biz/articles/news/digital-and-mobil...

http://songcoin.org
Ten Commandments of Programming
Do you think the process of pursuing small qui tam suits is automatable enough to make easy enough for Joe Q. Citizen?
For some time now, I've been deeply interested in what Google is like "inside the veil". Would you mind if I privately asked you a few questions? HN doesn't seem to have a PM system, though, perhaps a reddit or other forum PM?
That was my guess until he mentioned it's a bike+pedestrian friendly friendly town. Maybe if it's a job in the heart of Raleigh or Durham, but RTP is definitely not fitting that description.
Ask HN: I will create a prototype for you
I have a small team based in India and we are interested in creating prototypes for individuals who will then use these to pitch to VCs. Most interested in working for 'Uber for X' kind of ideas.

PM for details at gen_12345@hushmail.com; skeptical of what may come hence Anon.
> Copying the data segment and immediately overwriting it was inefficient, so several new flavors of "exec" were developed to get around that.

The several different flavors of exec are just convenience functions that lead to an execve syscall (execl* makes the vector out of some of its args; exec*p searches the path first, etc). Maybe you're thinking of vfork (a restricted fork), which seems to have gone away about when copy-on-write came in.
It's within the capability of science to one day develop an anti-love potion. Want to fall out of love with someone? Drink the potion, or wear the headset.

Actually, I have semi-jokingly suggested that friends in unrequited love take a certain class of antidepressant for a while, since this is one of the side effects -- it has a pretty good chance of working. So it may be easier to accept, although this is just n=1. (On the other hand, nobody has actually taken this advice..)
thanks, have you experienced something like this yourself?

The fact is when you are starting new in the industry (like me) such a thing can quite easily be very demoralizing and be a deciding factor to not continue in the industry.
Seek: A thermal camera for your smartphone
Regardless of whether it's common or not, I'm sorry to hear you had this experience. I encourage you to not pursue a job with them if they contact you back. You deserve to be treated with respect.
Show HN: Access popular sites and bookmarks, the smarter way yet simple
To answer your question more directly: besides AdWords, Google manages the ad inventories of a dozen or so third-party ad networks. Lots of the display advertisements that appear on the web are served via these ad networks. Many of these connections are not encrypted and, as you probably know, if a single image on the page is not encrypted it jeopardizes the security of the connection. To maintain the integrity of the connection, the nonsecure networks are eliminated from the bidding process. Fewer bidders, lower final value.
I had the same reaction.

One part of the book that I found really odd was when they seemed to glorify the fact that resumes and hiring decisions went literally all the way to the top. It seemed like a weird instance of intense micromanagement. I'm on the way out of the Army, and believe me when I say I've encountered awful micromanagement.
Regardless of whether it's a common occurrence or not, this behaviour shouldn't be tolerated. You should be making a fuss, otherwise people will continue to act in the same manner. If this is an entrenched issue, where people don't even realise its effect, then all the more reason for you to raise it with HR.
Hi OP, I used to work for a big game company (that had great culture -- opposite of what you described!). I'm now working on indie games. Although it's not as glamorous as the "games industry", you can find a day job or do contracting in a more sensible industry.

The gaming industry is infamous for having killer 80 hour work weeks & sexist culture.. if this is your first exposure, I recommend working in a different industry that will appreciate and respect you then making some games on the side with your friends.
They pass your queries through a proxy, so you have to trust startpage, I guess.
It is terrible that someone did this. Nobody should have to put up with that bullshit.

I do not know anything about German law. But for reference, if this had happened in the US, I would recommend that you contact an employment law attorney, because as you described it you might have a basis for a lawsuit. (Only a lawyer could tell you for sure.)
Recommendation algorithms. Computer graphics. High-performance servers.
Look, if you want to deal with racist jerks and bad telecom, you might as well just do web development. You'll get paid better anyways.

(games industry is worst industry)
I'm not even sure how any software could be described (accurately) as anti-fragile. Robust, yes. But anti-fragility indicates that performance improves with stressors or catastrophic/unexpected events.
Crytek is a huge mess, even by game dev standards (Which has a lot of huge messes). They've recently gone through periods where they just stopped paying their employees, they have a 2.5 score on glassdoor (That's pretty low.)
You got lucky and they failed the interview. Now you won't be posting a long entry at The Daily WTF this time next year.
This is not common in the gaming industry, nor is it professional, nor would it likely be legal in the United States. Given that they're in Germany, though, I'm less sure of the laws there, so I can't speak to that.

Honestly, though, even if it were common, I would still not want to work on a team like that, and not just for idealistic reasons (if you allow things like that to happen you're just letting the industry continue to be racist, sexist, etc): that behaving from a team you'd be working with would reflect poorly on your career and your future, as the explicit racism would likely also exist implicitly in performance reviews, compensation, and future recommendations.