skysight-inc/HackerNews huggingface dataset:
> has anybody with legal and/or HR credentials and some ethical sense written any definitive guide what is OK and what is not specifically in the context of the modern office?

Yes, they have. I am NOT one of them. I don't have one of those guides. But I've received enough mandatory training to have a layperson's understanding of the baseline in my national jurisdiction which is USA. The baseline is twofold, it is fairly clear, and it is worth reviewing. Don't take my word for it, but I think if you check your authorities you may get confirmation.

First, no "quid pro quo." That is, you should steer clear of even the appearance that you will provide business advantage in exchange for affectionate acts from a person who is sexually attractive to you. This principle is an excellent reason not to ask an interviewee to go out on a date (slightly simplifying an example from elsewhere in recent Hacker News).

Second, no "hostile environment." That is, you should steer clear of even the appearance that you are making the workplace uncomfortable for people who are sexually attractive to you. Decorating your desk with a calendar featuring glamour photos of models, unless that is your duty in your occupation, is not a very good idea.
I am really interested in seeing the rate at which all of those combinations occur in some sort of chart rather than just small text under the calculator.

The 7-10 split occurred 3069 times in comparison to the 785 times of 4-6-7-9-10. The mirrored one only occurred 149 times but was converted the same number of times.

Is there really enough occurrences of these to determine which is hardest?
The core problem of spreadsheets is that they should have been organized around tables with fixed data meanings from the beginning of the history of spreadsheets.

Instead the sheet is both layout tool and data "meaning" in one glob of garbage.

Apple tried to solve the issue with "Numbers" but ymmv on how well.
"People keep saying that there's no power dynamic because she already got rejected. I don't get it. Interview decisions can change. People can interview for a different position at the same company. It's not as straightforward as everybody seems to want it to be."

Very unlikely for a start up that'll you'll interview again for a different position. They would just offer you the other position. Also very unlikely is a rejection turned into acceptance.

"We are not talking about a culture where someone got fired for "forking" jokes. That may be the culture, but it's completely unrelated to the issue being discussed here."

That is exactly what the person was talking about and this thread is very much the same. A bunch of people outraged because they should be.
There have been many instances of unknown entities intercepting DNS which went unnoticed for quite some time. Hence DNSSEC.
Feeling low at work or because of work really sucks. I am sorry to hear you're going through a rough patch. There's some good news: you have recognised this, and you want to change things.

In England: your employer has a duty to protect you from harm in the workplace. This includes stress, anxiety or depression. Your employer may have an occupational health telephone helpline. Some people say they don't trust employer provided helplines. You could go private: BACP are reputable accreditors for psychological therapies. Or you can use NHS services: do a websearch for your county name and words like "talking therapy" or maybe "cbt". These should take self-referral, but if not you go to your GP and ask for a talking therapy.

Early intervention is important: recovery is quicker and stronger if intervention is early and good.

There are also self-guided systems if you don't want to see anyone. Search for "books on prescription" to see curated lists of sensible books. "Mind Over Mood" is one that's frequently recommended.

There's an Austrailian website: https://moodgym.anu.edu.au/

I recently spoke to about 50 different local employers about mental illness and work and they were all keen to do the right thing and to learn about mental health. So if you recognise something that would improve things for you at work it might be worth just having a chat with them.

Finally: if you find things getting worse it might be worthwhile to create a "rainy day action plan". This would be a list of things that would trigger you into going to see your GP. For example, if you start having suicidal thoughts you should go and see someone. The rainy day action plan is normally used with severe enduring mental illness and can cover Advanced Directives, but they're useful for mild to moderate illness too.
What's the point of all this? If you need more rigid language to feel safe just write your programs in this language and then compile to javascript.

Why extend javascript instead of treating it as VM for anything you like?
I thrive in the small group office. You get the flow of ideas that are trying to be achieved with the open plan, but without as much of the noise. And it's easier to call out one or two people for being difficult to work with than it is many. I hated a private cube(big effin cube with high walls and all) because I felt like I was in solitary. Sometimes I want to bullshit about what I did over the weekend, or discuss a philisophical question about what I'm doing. Seems weird to pop into someone else's private space to do so.
How do you get rats off an island? My grandmother showed me…
Datameer - big data spreadsheets

Scratch - best thought out block language
So the V8 team doesn't want to add optimizations for the "use asm" subset of JS, but does want to add optimizations for the "use strong" subset of JS? I do see the difference: strong mode is an aid for web developers writing JS whereas asm.js is usually a compilation target for porting C++ code (and a competitor to Google's NaCl).
Could you point us at that exposure? I'd like to read it.
Be a Good Product Manager – Ben Horowitz and David Weiden [pdf]
> I agree with you example, in that case it is useful. It's just that it is a pain in the ass in so many other cases.

It's a pain, because what we really want in such cases is a datatype server, not a relational database. For all of SQL's merits, the NoSQL backlash was not without cause. For too long the SQL hammer has been wielded to pound in too many screws.

Of course, programmers being programmers, NoSQL turned into just another hammer used in just as many inappropriate situations. The example I outlined is not a theoretical one. I've dealt with such situations...but I've done so with Datomic, which is designed with datatype-composability in mind. Similarly, I've found a healthy mix of SQL, Redis, memcache, and Datomic all in moderation can go a long way.

...but I've still not found a solution where Mongo is the obvious answer.
Even so, what if the obnoxious programmer gets hit by a bus? What if a critical production issue crops up just after he gets ill and takes PTO/sick leave for several days?
Pretty groovy! The 303 sound is good, and I say that with a real one sitting right here.
Programming languages: least usable, most powerful human-computer interfaces
Original discussion from last week:

https://news.ycombinator.com/item?id=9131923
CloudFlare aims to beat massive DDoS attacks with virtual DNS
Clever, they insert an additional chip between the cpu and wifi whose sole purpose is to load wifi firmware, and thus make it non-update-able "efectively circuitry" to bypass the silly FSF rules.

Using the same logic, what if someone ran netflix's proprietary DRM decryption-specific code in a seperate co-processor that interfaced with the main CPU only via the w3c's Encrypted Media Extensions? Assuming this code is never updated and runs isolated from the CPU, according to the FSF silly rules about updatability, they would be OK with this "effective circuitry" (of course ignoring their concerns about DRM itself). But if that same code would be run inside firefox's sandbox for EME plugin's, it would be considered dangerous non-free software.
What you're describing isn't an ORM, it's a SQL query abstraction.

Knex is a very convenient, Promise-oriented query abstraction, and it has "raw" methods when only SQL snippets will do. http://knexjs.org/
This is dead on arrival:

Some examples of strong mode changes we are aiming for are:
accessing missing properties throws, arrays cannot have holes,
all scoping errors are static, classes are immutable.

Specifically, "accessing missing properties throws" will undermine how developers use the language. Options objects require this as a feature. Immutable classes might also be an issue as language extensibility / monkey patching is another feature, enabling a whole swath of Aspect Oriented Programming solutions like New Relic's monitoring or the node.js async trycatch library.

I do wonder though, in fighting for its life against native, whether JavaScript will need to adopt optimizing solutions like "strong mode" to strengthen where it's weak.

EDIT: It's really unfortunate that I'm getting down voted so severely (from +3 to -3 in <10m). HN increasingly discourages discussion and debate. I don't think there's any question that my comment adds to the conversation. At most, I could have added, "In my opinion..." to the beginning of my comment.
> Step 2: Return to drawing board

> Step 3: Wait for better solution to emerge

I, and I suspect many others, eagerly await the better solution to the DNS security issues we see. If you have one (beyond "do nothing"), please explain it.

Lacking that, we focus on deploying DNSSEC because that is what we have AVAILABLE today.
VMware update to GPL-enforcement suit
I'm not sure why, but this brought a tear to my eye. Those insects are beautiful in their own way.
The ambiguity had a clearly proposed fix in the issue thread: use () for array access. Just like in scala.

Lots of people were clamoring for the change, and the only unaddressed opposition to it was from those that explicitly wanted to cater to the c++ familiarity.
tl;dr, Windows. But also various limitations of how PV or HVM hosts work.

PVH fixes it so you don't need emulation in Linux, but it's a brand new feature and probably not production quality. Read this (it's not too technical) http://wiki.xen.org/wiki/Virtualization_Spectrum

As of this writing, Xen 4.4 and Linux 3.14 have experimental support for PVH DomUs and Xen 4.5 has support for PVH Dom0s. PVH allows practically native-hardware-speed guests without any emulation.
Nice writeup, Tiru!
In general, I agree that CSV files are much easier to read and work with. The only issue I have is when fiddling with a CSV file where the data itself contains commas, e.g. in an address column. This makes parsing the file with awk more difficult than it should be (especially if you don't know about the commas in the first place!).
Do you hold that reasoning true every protocol, or is DNS somehow special? Should we immediately halt all work on securing BGP, for example, as misconfigurations will make entire ASes unavailable?
What's that you say? Transparent floors? No walls? See https://plus.google.com/photos/+google/albums/61205645517791... (and https://plus.google.com/photos/+google/albums/61205645517791... and such).
Show HN: Radio Redial – Increase odds of winning radio call-in contests
Good news! Almost every language offers some sort of string concatenation with no protection whatsoever against injection, which seems to be what you're asking for.
It comes down to how quickly you are working. If under time pressure, efficiently completing straightforward sets of tasks - even writing Rails or Java boilerplate in all the right places - is complicated enough that I don't want to be knocked out of a flow state. Of course I can do those things without intense focus, but I can't get them done in under an hour.
We don't really use Lua: we connect to Aerospike directly, using a C driver. This saves a lot of time and allows sub-1ms responses.

I find Aerospike latency a lot more stable compared to that of Cassandra. Our use case is quite simple: we treat Aerospike as a large and fast key-value storage.
I used to build from source, or use homebrew, but in the last year or so I have used this project. A large thanks to the developers. I now use a similar Mac app for Haskell also - simply more convenient.
Welcome to the club. We don't have free drinks or anything. Only endless depression and no will to continue.

But seriously, things are fucked and it's only getting worse. I'm in the same shoes and I'm trying a startup in my spare time. Plus, the guy running our project decided to quit and leave me alone with a monster made out of spaghetti code. Just finished updating my resume, hoping I won't need to use it.

Don't have any advice that could help. Because the problem is pure greed. Everybody is acting like a vicious greedy fuck, chasing money like there's no tomorrow. Life is now a river of shit and we're all just floating on the surface, waiting for an island or something. People don't seem to care about it either. Complacency is everywhere. Can't say I blame them.

Anyway, the west is crumbling. Go to a cheaper country. With an IT job you will have enough.
Unauthorized negotiation with a foreign government is a violation of the Logan Act.

Overt acts (including unauthorized negotiations) which provide aid and comfort to enemies of the United States are treason.

The two categories are basically orthogonal; they aren't mutually exclusive.
The month views where you need to click every single day to get more infos drive me crazy.

I use the WeekViewPro app[1] on iPhone to view and read a full week, and even better a full month of events.
It helps a lot for scheduling and rescheduling professional and personal events.

WeekViewPro is not pretty and it's not configurable enough… but it does one thing very well:
It gives you one single screen with a full month (or a full week) of information, like in desktop calendars.

It's particularly useful to see full month with name of events when you need to give people a free slot in your planning.

I have tried Fantastical, Sunrise, etc. and the only one I keep opening every single day is this little app.

(but I'd love if it integrated with Fantastical for event entry, as it is much better. )

[1] https://appsto.re/fr/NQIYH.i
Thank god there's a few dank memes to offset the bitter taste of the mountain of red-tape. Employee morale must be off-the-charts!
Unless wordpress.com doesn't hold the keys for some really odd reason, it might as well have been plaintext.
Exactly the same thing we do today! Assume the DNS is poisoned, and delegate security to higher layers so that there's not much point in bothering to poison it. Literally, my answer is DO NOTHING NEW.
What I'd like to see is a universal SQL that can be translated to whatever dialect of SQL my current database is using. That way I won't have to relearn SQL every time I start a project with a different database engine.
> Essentially we lack great *.sql editing, ide, macro, refactoring because of the lack of focus on sql itself.

Except that my other tools are just an editor like emacs and makefiles. So now to be productive I have to have and ide for sql, learn sql, learn macros.

Interesting that SQL came first. If it was so easy and obvious to use it we would not have seen any ORMs by now. But every other project that uses SQL databases ends up with some kind of ORM.

One of the reason is probably because there is an impedance mismatch. Code is already written dealing with objects, functions, pointers, data. But when it talks to the database it has to talk via a command line string interface so to speak.

There is another type of impedance mismatch and that is learning a new language. One can argue SQL is there to keep & manipulate the most precious things you have -- data, so one should spend time learning it well. But the other point is, SQL is there to keep & manipulate the most precious things you -- data, so don't mess with it if you don't know SQL very well. Let someone else learn it (the author of the ORM).

I am not arguing for one point or the other, just kind saying how it is interesting how we have been going in a circle the last 15 years or so.
Probably.

Edit: Yes, I missed it.
Accounting doesn't worry about what they can't measure.
This Senator hasn't sent an email. Why is he on a subcommittee focused on tech?
That's exactly what I meant with

other bad ideas just snowballed on top of it

It still baffles me how people can invent two separate ways to invoke something, () and [], and pretend that's a good idea.

If they used [] for types, they wouldn't have needed to consider such a bad idea.

Now, Rust has to deal with all the random syntax quirks caused by misusing <> for Generics, and it does it pretty badly: As an example, the Foo::<Bar>:: syntax is even worse than Java's Fuz.<Baz>Meth() hack.
Really interesting what happens to the sound when you switch tabs (in Chrome at least): The sounds still play, but slowed down about 10x.
By "real science" you do indeed mean the modern scientific method. There's nothing inherently provably correct about how we currently do science, we just know it tends to be a lot more effective than whatever the hell it was we did prior to inventing it.
DNSCurve already exists fortunately.
You mean something like this? https://www.jetbrains.com/dbe/
Wait. The one place you suggest DNSSEC is adding security value is small servers for an unencrypted insecure messaging service: that is to say, the one place where NSA's almost total ability to manipulate the DNS would (a) most likely go completely undetected and (b) transparently cough up chat transcripts from private message sessions.

And one of the ways you suggest it could help is to allow clients to override TLS certificates and instead trust the government-controlled DNS.

That is an amazing concession.
CIA Has Worked for Decades to Crack Apple Encryption
Why the Startup Ecosystem Needs a Shift Towards Gender Diversity
Everybody with headphones on never notices how loud they are eating/drinking/coughing/murmuring/adjusting things however. Seems extremely petty but work beside somebody long enough like this and you end up joining the headphone club yourself to block it out.

Where I work there's a group chat for low priority questions you can check whenever you're not totally immersed in something. It's also anonymous chat so nobody is embarrassed to ask "stupid" questions.
> Options objects require this as a feature.

Object.assign(defaults, options)

The defaults object has all the necessary properties, no missing property access is necessary.
> The point was more that I value a person's ability to lift those around them much higher than their abilities to outperform them. It's hard to scale one person. But one person who can help scale an entire team is infinitely more valuable.

It seems like while trying to dislike 10x you fundamentally want 10x. All those things are in my opinion what 10x is, they bring 10x more value to the team. Some may be 10x because they literally code faster and better, or they could be 10x because their code helps other people also code faster (I suspect the two are pretty well linked), or they could just be the leader who gives them more confidence to do stuff, etc.

10x may or may not be a myth. I don't think it is, I just don't think it's someone who codes 10x faster than everyone else. I think they just make the entire team better. I also think someone who is 10x one place isn't always going to be 10x in another team due to team dynamics. I.E. the team also makes them better.

> He's a liability because he brings the team down (antics like this do have a huge impact on the rest of the team).

While I get what you mean, I don't see how the team fits in to this. It's not like it was at a team event, team were involved. They most likely will never know this happened. This could just literally be a once off weird thing the guy does while being a cool guy just as much as it could be that he's an around weirdo who does weird things and is constantly belittling people.
Well calculus in particular (in my opinion, at least) actually makes a TON of intuitive sense. The calculations are obviously impossible for someone who hasn't been introduced to algebra, but the intuition is just as simple – at least, as you said – when given a push in the right direction.
CIA spent years to hack iPhone, iPad, say new leaked Snowden documents
I was admittedly a little heavy handed on the sarcasm (it's been a long day).

Absolutely appreciate that they were open and honest about this and that it was discovered during an audit and fixed.

Sigh was more that best practices may or may not have been followed up to this point, and there are likely many other companies with similar holes that may not have been as proactive or transparent as WP.
Is that the same Dana Simpson that was once the author of Ozy & Millie? That was my longtime C&H holdover.
You can know a field or fields of the data while leaving the possibility of extra fields that you don't need to know. In practice if you're making a web application and dealing with JSON, it's typically very easy to work with JSON-based databases instead of using serialization functions. You can enforce the schema with various tools at the application level when needed.

MongoDB also has some performance benefits over many traditional databases, and has "native" support for binary data.

I personally prefer CouchDB over MongoDB for most application that are well suited to use a "NoSQL" database, but MongoDB is sometimes decent too.
I agree with all your points. I don't mind open-plan either, but my noise cancelling headphones and three 27" monitors do well to block everything out when I need it. It's quite good, because I can join into collaboration on the fly if I want to, but ignore everything otherwise.
In the article they they are doing both. People from chrome team said they are doing asm.js.

"Q: How does SoundScript compare to asm.js?
A: They have different goals: asm.js is a low-level language designed to be a compilation target for other (mostly low-level) languages. SoundScript is a user-facing type system for direct use of JavaScript as a high-level language. Both are complementary, both are useful, and V8 is committed to both."
I have been working (programmer - contracting) from home for 3 years and these have been the most productive 3 years of my life.
Notes on 416 days of Threadmill Desk usage
Of the people I know with Android watches, most like it for the ability to prioritize notifications. Every single one has said that. They can see if they need to answer some reminder, meeting, etc with a more gentle glance.

With that, I'm smart enough to remember that I "didn't need a smartphone" when they first came out and resisted them before they eventually became part of my daily life.

More to that point, I think it is pretty easy to imagine really neat things in generations II and III. Say, when you can use your watch to pay with a biometric confirmation that it gets from being on me. Or 2-factor auth the same way, or fixing the bugs the article mentions when calculating the harder health metrics like stress. Imagine the generation V that measures insulin and logs it. Etc.
> SQL was never really intended to be used by itself.

Hmm I thought that is how it was intended to be used? If it didn't, it would look like datalog, lisp or some binary protocol with prefixed lengths and whatnot.

It was intended to be typed in by analysts at a console. Who would then print the report on the dot matrix printer and mail to the headquarters or something of that sort.
And actually...

> And actually, in case of the latter, all bets are off anyways. Because client resolvers DO NOT CHECK DNSSEC.

... please visit APNIC's DNSSEC Statistics site where you will see that about 12% of all DNS queries globally ARE being validated by DNSSEC:

http://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=1&r=1&w=7&g...

In Sweden this is about 71%:

http://stats.labs.apnic.net/dnssec/QM?o=cXAw7x1g1r1

Slovenia 67%, Estonia 55%, Denmark 48% ... on down to the USA at 23%:

http://stats.labs.apnic.net/dnssec/XQ?o=cXAw7x1g1r1

So DNSSEC validation very definitely * IS * happening out there!