xyience

#5 and #7 are great, I too don't like the anti-intellectualism a lot of degree seekers seem to have. But the typical tuition these days is a large price to pay for intellectualism. I paid a high price for my CE degree, which I entered into in large amount for the intellectual curiosity of understanding hardware, knowing full well I'd probably end up in some web dev software engineering job afterwards (that pays better anyway) since I already had prior experience with that, and in any case as long as I had some job in the tech industry I'd be making enough that student debt wouldn't cripple me.

I would only encourage people to make the choice based on a sober calculation of expected costs (including opportunity costs) and gains rather than because "it's the thing to do". Before I went to my school of choice I planned out the course sequence for my entire time there -- of course it ended up being different but not hugely so. Unexpected things will come up (#1 and #2 should have been learned by high school, what I didn't expect was that for me continuing the related path of "shut up and get BS work done" through college would result in burning out my tolerance for BS work in general and it's taken a long time to build that back up enough that I can perform ok in enterprisey roles) but that in itself is a useful thing to learn. If past me had future me as a mentor, I'd encourage past me to skip school and satiate his curiosity more directly, but not everyone has access to a mentor.

I wasn't talking about verifying a password for every action, but simply having more than one user of your service at once.

Weak passwords are still weak, but things like bcrypt buy you time. A bcrypt configuration might have hashing take 250ms on a server's Xeon CPU (as opposed to nanoseconds with a sha-based hash). You can try the password 'password' on say 50k hashes that were dumped, but it will take about 3.5 hours. You can get this time down by parallelizing or with better hardware like GPUs / FPGAs / ASICs, but you're still looking at a base time of 3.5 hours per attempt to go through each account. Or if you're only targeting one account, 3.5 hours to try 50k words.

If the server had bcrypt configured to take a second per password, multiple everything by 4. And so on. What I think is needed as a supplement to "use bcrypt / scrypt" is a "and use it this way so you don't accidentally open your server to DoSing or give a poor experience", because a 10 seconds-to-compute-on-a-Xeon hash is great from a security standpoint if your hashes get leaked, it sucks from a user experience to have to wait at least 10 seconds to login, and if you have to service multiple logins at once your server's not going to be able to do anything else if you just use bcrypt/scrypt synchronously.

Your schedule just needs fixing. Designate one parent as the "put kids to bed" and the "household maintenance" for the day, that gives the other an extra 2 hours. Exercising every other day is practically as good or better as every day depending on the exercise.

Though even with 4 hours, depending on the person, every day after work might feel like they need their entire 8 hours of free time between work and sleep just to survive, ideally they'd have more. Technology was supposed to give us more leisure time we can put into things like exercise but here we are still slaving away at desk jobs for 40 hours a week.

Another aspect most of the "just exercise" folks don't get is what it feels like to be 300+ lbs and weak. Get out and walk for 30 minutes? Why, so I can expose my gross body to the world? Running? Cycling? Haha, get out of here. And after exercising I'm going to come home and make up for it by eating more.

Diet is more important than exercise. A 300+ lb person can lose 100 lbs in half a year just by changing their diet and doing no more exercise than they currently do. (I advocate the keto diet, especially if one has tried other diets and failed, but it's not the only way.) You can't out-train a bad diet.

Video games have been filling this niche quite well. I felt a lot more accomplished after mastering Dark Souls and Dark Souls 2 than after I got up to a 315 lb dead lift.

It's only unparalleled if you've never heard of the C99 'restrict' keyword. The major reason is like every other legacy system still in wide use, inertia. LAPACK alone will guarantee Fortan's life for decades to come.

Sometime in the 2020s, Elon Musk sends the first team of 5 astronauts to Mars... guess what, Mars is now overpopulated. Ng might not want to worry about it but be thankful other people are, lives are on the line.

Addendum to your nitpick: Also don't even leave it at just "C++" unless you really are a master of everything in C++98 plus all the new stuff in C++14.

> but what you can you do.

Not make sweeping generalizations based on one benchmark you didn't write?

This is basically why I ditched Rust as soon as I found out about Nim. No mental gymnastics making me feel like I should be part of a group mind, super fast, super small binaries, optional GC, and memory unsafe stuff allowed with standard pointers and alloc/free available with or without the GC on elsewhere. I suspect Rust would be better for avionics and other high-value systems though, replacing Ada...

What are your thoughts on things like https://github.com/twitter/innovators-patent-agreement ?

As a US citizen, I go to my company's Canadian office every so often. I have no issues saying it's for business -- the first time ever I was a noob and was asked to park and go inside for more questioning but once I clarified that my company is US HQ'd, that I was just there for meetings (not actual work?), and that I'm not a manager everything was swell. I later learned actual managers at my company never reveal they're a manager, or at least not over anyone they're going to meet with.

The other thing about volunteering extra information is it can come back to bite you if you're not consistent next time, so I also try being as vague but still truthful as possible. If I was visiting anywhere else but Canada, though, I wouldn't have any problems skipping the whole drama with "I'm traveling for a vacation" and "nope, not meeting anyone I know" regardless of whether that is true or not.

Border crossing is basically a hazing ritual in a lot of places, and while I agree with GP's "this was her mistake" it really is dumb we all have to put up with the hazing. Kind of like not bribing a cop in [insert south american nation here] who is giving you trouble, or bribing him with way too much money. Some people just don't get that there are dumb, sucky customs where not following them (or trying to follow what they think is the most honest or rational process) is a mistake and complaining about the mistake after the fact won't solve anything.

Oh wow, is that where that meme started? (All I know about Ender's Game is from https://web.archive.org/web/20110319084212/http://plover.net...)

Where's your 4^32 coming from? There are only 2^32 ipv4 addresses. You may be right that the first wave would just target port 22 and the second 2222 and so on, an actual attack would probably have some interesting implementation details besides that too for pruning or host retry or something else.

Why do you think at minimum you would have weeks? Run the numbers for botnets of various sizes with a measly 10 Mbps network connection each, it doesn't look very good. Under normal circumstances yeah port 26432 is no more likely to be hit than any other high port, but an ssh 0day bypassing authentication is an incredibly valuable exception where now trying everything can be worth it for a little while.

Not every port, but maybe you remember this: http://arstechnica.com/security/2013/03/guerilla-researcher-... The article also details an earlier cataloging where a researcher probed 18 ports 3-4 times a day over the ipv4 address space. Tools like ZMap or MASSCAN make it easy for anyone to scan as many ports as they can, but I haven't heard of any worm that systematically tried all 65535 ports of all addresses. Though I would bet a lot of money that an OpenSSH 0day that bypassed all authentication would result in several such worms from multiple actors who already control hundreds of thousands of devices.

Do any of the companies have blogs or GDC talks where they discuss bits of it?

Seriously. I was looking at DB usage statistics recently and was appalled MongoDB is still so popular. I thought it was done, nail in the coffin, when https://www.youtube.com/watch?v=b2F-DItXtZs came out 6 years ago, I haven't followed it much since then apart from the occasional post like this whose content is just "you thought it was bad already? haha it's worse."

Have you seen any data-oriented 3D engines anywhere? Even the few engines I've looked at for e.g. Clojure are just needlessly OO on top of some Java stuff.

You might not get compromised in the first wave of IP scanners that try the 0day on port 22, port 2222, and maybe a few other common alternatives. This first wave will pass in about 5 minutes.

Subsequent waves will just try every port. This isn't costly, they have an army of compromised machines from the first wave.

In these situations I like to link to https://antidem.wordpress.com/2015/03/31/glantons-law/

This sort of thing shouldn't even be a browser-level extension anyway, but a user script loaded with Tampermonkey/Greasemonkey.

As I understand it it's not even purely race mixing that's a problem but race replacing. I wish every white nationalist would get their DNA sampled so they can see how pure they really are, even just among white people! But anyway broadly-white-peoples are breeding below replacement rates while broadly-(Africans|Mexicans|Arab|Turkish) ethnic groups are not. As a refugee/immigrant to Germany laid it out at some protest, Germany will become a majority-Muslim ethnically-Arab country within some number of decades just from sheer population growth of one group over the other, and what will remain will not be Germany even if it still calls itself such. A white nationalist then is just a person who doesn't want this to happen to their white country. Of course there are the more insane white nationalists who see Jews everywhere and so on, but nationalism is a spectrum you know? Japan for instance remains pretty xenophobic but they can maintain that without also being outright hostile towards Chinese, so the hostility towards Chinese has been going down.

If this was 1916 instead of 2016 I think the basic white nationalists would have a stronger case. This isn't a CURRENT_YEAR remark, but just a remark that timescales involving even 40+ years are ridiculously difficult to predict right now because technology overwhelms classic human nature, so when the impact of these things won't be felt for that far off in the classic human history case of technology remaining the same it's not very fruitful to dwell on it in the current reality of technology changing rapidly. That isn't to say they don't have any case at all but a lot of it is too little too late. They want to move to be more like Japan when they should really be satisfied with something more like Singapore. Not importing millions of foreigners permanently would also not be a bad idea but again, a bit too little too late.

What type of white? Slavic is different from Anglo-Saxon is different from Germanic is etc., not too long ago all the various white groups in American had their own gangs and gang wars because "white" as a broad term wasn't good enough. Do you think that because of the threats of Mexican-Americans and African-Americans (do you also have any issues with the over-representation of Asians of various types in tech?) it now makes sense to band "broadly European" peoples together in reaction, or is it something else?

Take a week or two off. Come back and find out what went to hell without you around. Delegate those duties to your underlings, or quickly hire underlings well suited for those duties if you don't have any yet.

I hate that pixels made a comeback. They are a total pain in the era of multiple resolution sizes, aspect ratios, orientations, and densities.

The appification of the web is what went "wrong". For non-app sites, a bloated DOM-grid is probably a bad choice (though there was a lot of interesting experimentation with Compass/Blueprint like a decade ago). For webapps, it may be a good choice.

A diagram helps when you start getting into read/compile time discussions, see slides 13 through 17 of http://www.slideshare.net/adorepump/clojure-an-introduction-... to see how the evaluation model for Clojure (which is similar enough to Lisp) differs from most other languages. One of the many differences between Clojure and Lisp though is that Lisp supports user-defined reader macro definitions, so you can add things like the nice persistent map literal syntax of Clojure to Lisp if you really want to.

Yes, I think most people don't bring predictability into it at all. Free will is about the feeling of "I could do, or could have done, X instead of Y", but your search space only ever included X, Y, and Z. Just knowing your search space makes you highly predictable even if you maintain the freedom to choose inside that space. (And however we choose, it is not randomly, that would be terrible, but more chaotic in the same sense that weather has too many unknown inputs that we can't predict all the details we want to perfectly.)