jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Installing secrets on disk exposes them to potential leakage through backups. This is a major issue, since much less attention is typically paid to access management for backups than to production servers. Therefore I support the approach of providing secrets through the environment.

Once an application has been written to get its secrets from the environment, there is a question of how the secrets are obtained. They can be sourced from a file in an init script, but today we are seeing a lot of momentum towards containerized architecture, and the use of service discovery and configuration systems like etcd, zookeeper and consul.

However, secrets require much more attention to security concerns than the data that these tools are designed to handle. Least privilege, separation of duties, encryption, and comprehensive audit are all necessary when dealing with secrets material. To this end, we have written a dedicated product which provides management and access for secrets and other infrastructure resources (e.g. SSH, LDAP, HTTP web services). The deployment model is similar to the HA systems provided by etcd, consul, SaltStack, etc. It's called Conjur (conjur.net).
Patents in the US and Europe need serious reform:

1- They should update to the current world. That means using computer files like 3d CAD drawings or STLs. Today most patent's drawing are way worse than drawings 100 years ago(on purpose of course, as they don't want people to really understand the patent).

Patents today try to obfuscate as much as they can so they give the less they can to society, but try to claim everything under the sun, so they receive the most from society.

They should also let other types of documentation be presented, like audio, or video.

Obfuscation should be taken care of, using standard formats for documentation, using standard terms. They try to patent already patented tech just changing the terms, so it looks different for the examiner.

2-Business and software patents should be banned. But this will take a fight, some court has declared business patents void.

The software patent situation is surreal. Someone comes to your house and tells you you have to pay them for patents, but they can't show you!! If you don't pay they will sue you with a football team of layers.
I'm not sure what the benefits really are – 'deployment via SCP' is arguably a negative, for example!

If you really want to do something like this, do use FastCGI – and wrap it in Rack, too. That way, you'll get nice request and response objects.
That's a lot of questions

- What is the story in nix for packaging untagged branches of software

If you want to do unreleased software, you would create overlays that added them. You're overlays most likely would not need to define the build, just create an override of the one in nixpkgs with a new source:
https://discourse.nixos.org/t/how-to-override-package-versio...

- Does the nix hash account for dependencies only changing the hash for ABI-impacting changes such as when a header file changes?

The nix hash changes whenever anything in the derivation or it dependencies changes. It has no concept of what an ABI-impacting change would be.

- I have an existing system for managing packaging metadata which I don't want to migrate from. How much trouble will I get into if I want to generate the metadata on the fly each time (as I currently do for my debs)?

The nix code _is_ the metadata. There isn't an equivalent Packages like there is for Debian.

- How much pain is it to roll a nix package "by hand" (basically with the dpkg-deb equivalent tool rather than the dpkg-buildpackage equivalent tool)?

Don't fully understand what you are asking here, but the equivalent tool of dpkg-deb would be nix-build.

- Nix isn't supported in Artifactory (RTFACT-19998 has been open since 2019). Nominally, I can use the dumb WebDAV option, but is that going to affect my user experience and/or will it be a maintenance headache?

Nix only writes new files to a remote store. As such nix caches can be served by anything that can serve files. I personally upload to S3 and have artifactory use that as a remote.

- What is the apt/nix interop story?

This is a complex question. At work I use nix on debian hosts, and it works very well. Nix packages have _no dependencies_ at all on the host OS. IE binary installed from nix will use required libraries from nix as well. However nix creates environments were only the packages explicitly installed show up. As such if you install firefox only bin/firefox will be added to that environment, despite using all of its dependencies from nix. Nix hard references all it dependencies to the /nix directory.
I really don't want to go on a totally off-topic tangent, but I feel like this needs to be brought up.

> We need to charge dormant customers a monthly fee so that we don't have to keep their money on our accounting books forever.

That's absolutely and objectively not the reason this happens. Keeping their money "on [your] books" has zero cost associated with it outside of the escheatment[0] process, which can be completely automated. I worked at a company that had to do a decent amount of escheatment for almost every US state, Canada, and Mexico, and for a total company size of under ten people the entire organization probably spent 45 minutes working on it in any given month. It's a trivial amount of time.

This happens to that the company can turn it's customers' money into its money. I don't know enough about to escheatment process to know for sure but I'd imagine regular debits like this would also get around the need to return the money to the estate after a given period of time. So someone puts $500 in their account, gets hit by a bus the next day, and the company gets to take a little bit every month/quarter/year until it's all theirs.

It's a pretty scummy thing to do and I'm surprised the author just takes it at face value that they "have to" do it.

[0] https://en.wikipedia.org/wiki/Escheat#Transfer_agents_and_es...
Yes, this is all fair points.

The problem I mostly have is I keep running in circles between the different possible ways this could grow.

1. It's a toy++ for javascript developers. Kind of like Linqpad for .net. "You have a problem with your backend. No problem, fire up Jig, and you can interact with your stuff in a neat way."

2. It's a way for executives to get internal reports much faster than what they have now.

3. It's a way for spreadsheet-heavy institution to off-load some of their spreadsheet risk without investing millions in internal app development.
I don’t feel it introduces too much abstraction. The only thing it does basically is patch linked libraries to a hardcoded nix store path, so that your whatever exe will not look in a standard place for an ambiguous lib, but one that is identified by a hash. Similarly, it often wraps programs with specific env variables, like set JAVA_HOME to a nix store contained java install. It’s quite elegant that it gets away with such ordinary methods, instead of docker/flatpak-like run it in a specific low-overhead vm, overlayed fs, whatever.

It does cause all sorts of problems with non-nix-aware software, but most software can be tamed, and what absolutely refuses to run, can be run with steam-run or by a user-created environment mimicking a “normal” distro.
I wish Nix would just get rid of nix-env. It's not the way it's meant to be used, you should be using "nix run" or nix-shell for temporary usage, and home-manager for dotfiles and user dependencies. Using Nix like an imperative package manager is not really an improvement over existing ones, the declarative bit is where it truly shines.
That's not how it works. W3C has generally been the codifer of standards with member agreement, W3C generally has not made a standard ahead of an implementation.

Granted, XHTML was probably an example, an exception that proves the rule.
I believe Prince Charles may have been made a mason, but I don't think he's active, unlike several of his relatives.
Sustainable meat production is probably extremely far from commercially viable.
Well just as a counterpoint, perhaps you knew these things, but maybe most of the Times readers did not, or perhaps they suspected it but wanted more evidence.
This article demonstrates the beauty of taking away cruft until you only have the essential stuff left. I like Scala's succinct way of anonymous function notation.
My main development "box" is a 512MB Linode running tmux, weechat, vim, and some zsh consoles. Efficient, consistent and reachable from all kind of machines and places.
I don't think it can be stressed enough how important it is to prevent feature creep while you still have the chance.

I can't imagine the repercussions of cutting down the program down the line after people have acquainted themselves with it - to the point of feeling completely entitled.
It was self-reported, of course, how would you want to conduct this kind of poll...

The methodology is of course deeply flawed. Even though the anonymity of the poll allows people to report such issues without guilt (or even with pride), it also encourages trolling.

I didn't start that poll, I just happened to pass by while it was being held. I read around 150 answers. My memory isn't perfect, but here is what I remember. None of the 15 females reported a normal mental health or even mild troubles. Around the same number of males reported serious mental issues (things like bipolar disorder, borderline personality, multiple phobias, panic attacks, major depression, schizophrenia, hospitalization in mental health institutes for whatever reason).

I'm not sure why girls would be culturally more inclined to report severe mental illness (even though, from my clinical experience, I wouldn't be surprised if they had a tendency to report mild mental troubles more easily). Is this bias documented somewhere? Also, even if such a bias exists, it wouldn't explain such a wide difference.

Assuming that the poll was not massively rigged by trolls, and with only 66% of females with mental issues, the P-value of Fisher's exact test is under 0.001.

120 15 | 135
5 10 | 15
--------+----
125 25 | 150

http://statpages.org/ctab2x2.html

The probability of getting a sample with 66% of the females in good mental health (keeping the rate in males identical) when there is no gender difference regarding mental health in the population is around 0.03.
The 'standard' engineer configuration is a linux or mac workstation, a linux or mac laptop, and a 30" flatscreen. You can get additional hardware with manager approval, which, in my experience is typically a quick rubber stamp when within reason.

Chrome engineers have a more extravagant setup by default due to the cross-platform nature of our work and the redonkulous size of the Chrome debug binary.
http://www.crackmes.de/
One of the more interesting "I work at Google" posts, supplanted by a superb HN comment :) Thanks.
What is the advantage for those who want to watch erotic materials in storing pornography? Streaming it is easy, safe, and is harder to catch from the individual computer, and the supply of different porn materials is essentially unlimited? I never really understood this.
Your comment should have been the first one of the discussion page! because it's nice that there's a default standard like Java EE.

However... What's painful with Java EE is the time it takes to understand it. Please correct me if I'm wrong, because I've never got around it, but it takes 5 years of experience to build an app using CDI, JAX-RS, JPA, JSF, JNDI. For each of them you need to choose the implementation provider (Hibernate, Jersey if I'm correct?) and configure it, then you get bugs like the application isn't aware of your JPA and you don't know why, because the spec is circonvoluted enough to be powerful but then takes months to understand. Whereas some frameworks like Play Framework can be learnt in 2-5 months.

This is my feeling about Java EE, but have I been in bad luck with my experience? Is it supposed to be quick to get a canonical-JEE app running?
You might want to add http://loopback.io/ which is a node.js module to implement JSON APIs. It has its own way to do it so we could say it's a standard from the industry. Maybe it's too early to call is "standard" but it's getting traction. They're sending people around to give talks and 1 hour training events. I'm coordinating a team of developers using it. So far it's OK.
Waiting for the pro-GMO crowd to come forward calling all this "anti-science"...
The report's a bit light on details. All sorts of things can cause cancer in lab animals if you give them enough. It's more a question of what concentration.

And if the human exposure studies are that bad I wonder why there's not been much fuss since they were published in 2001.
GMOs have very little to do with weed killers.
Wow!! Really, WOW!!!!

I didn't realize any of this till I read the article. It is interesting to learn how your mind learns to block out such things after years of receiving such emails and ignoring them. We even learn to ignore an email just by reading the subject.
They're very efficient if you measure efficiency in terms of HP for engine weight, which is about all that matters in drag racing :)
You related to Tom Perkins?
Um, yeah... LinkedIn is an amazingly useful tool in many ways. Yes, being on there can result in the occasional incoming spam message, but a lot of us find the value far outweighs that minor detriment.
Helping the users of my system by making things faster and / or more obvious is motivating. Improving the code is motivating. Providing for my family is motivating. Keeping our super small business afloat is motivating (I’m blessed to work on a small team with people I like.)

Edit: I worked for the govt for all of 2 weeks— a mistake I won’t make again. I hope you find satisfaction with whatever you choose.
Hi everyone! We’re planning to submit our formal launch on Hacker News in a few weeks, but given this post and all of the discussion around it I thought I would share a quick background now!

Bristle (bristlehealth.com) is leveraging the oral microbiome to pioneer oral health testing and care. We use metagenomic sequencing to analyze the oral microbiome from a saliva sample - looking at fungi, bacteria, and viruses - delivering evidence-based insights around oral health.

We are offering an early access program (https://www.bristlehealth.com/pages/early-access) providing oral microbiome testing and consumer research reports, with literature-backed insights accessed through an interactive web app. We’re charging users $50 and will only bill you when we ship your kit.

If you’re interested in learning more about your oral microbiome, please sign up! We literally launched yesterday and have gotten tons of interest based on exactly what’s being discussed here. We’re letting participants into the program in batches but will be turning kits around rapidly.

If anyone wants to chat more feel free to reach out to info@bristlehealth.com. As I said, we will have a dedicated HN launch with lots more information in the coming weeks, but wanted to share given the interest and that we have this ready to go.
I'm curious which of the many "evolutions" that went into Swift in the last few years were motivated heavily by its dance with TensorFlow. If there were any, can we take them back out? Now that the marriage is over?

One of the things that frustrates me with a lot of the languages I'm having to grok these days, is they often lack consistency, because it's one carrot after another to get buy in from different sub communities. And in the end it tastes like vegetable soup--edible, but not tasty (if you love vegetable soup, this reach of an analogy probably won't work for you).
Finland also has a very proud firearm history - particularly related to their independence, high quality firearm manufacturing history, and hunting.
Why not mix in some speech, ala Talon or serenade.ai?
Could be SQL injectable too as an apostrophe raises an error
Nice, although not nearly as polished.
I don't know the author so I don't know why you think she's my friend.

Under what circumstances would the FBI need a judge in some random district to sign a warrant based on a computer "hiding its location" using VPN or Tor? if the rules necessary to obtain a warrant are currently insufficient, can you please explain how this fixes an existing problem instead of creating a loophole.
Why all these apps assume that MacBook users all have iPhones?!
>before we realize that we're kind of stupid and need to knock it the hell off for a while.

There's nothing stupid about mechanized warfare. Why waste soldiers when cheap robotic soldiers are feasible? If anything, its just a natural advancement of warfare. If we don't do it, the Chinese and Russians will and that will give them an advantage over the democratic nations of the world, and as we have seen both nations are either in the middle of annexations or seem to be planning more.

The real question, to me, is why are we bothering with the human form-factor? A insect-like robot or something with wheels or tank treads would outperform legs. Ideally, a robot soldier should be able to move in a way that outperforms people easily. A bit like how the robots in Elysium are so much stronger and faster than humans.
FBI seeks flexibility for venue of warrants against users of VPN and Tor (p. 338)

seems like a reasonable improvement.
Yes, you can setup wherever you want, but if you want to process payments for U.S. businesses then you need to act in accordance with U.S. money transmission laws, otherwise, nobody will do business with you. Currently, bitcoin payment processors do not fall under the purview of MSB or MTB classification, but that could easily change, especially because cryptocurrencies are still a relatively new concept.
Great chat about a technology existing as a core belief of the company from the get go. Interesting to see how fast they were able to grow, and still stay grounded.
I can see your point here. Perhaps, giving the historical range you are more likely to get the first foot in the door than if you just give a value, or a desired range. So if that first foot is important, then yeah, maybe it's worth a try.
When I was working on AI research in the late 80s and 90s (on the symbolic reasoning side of things) I got the distinct impression that Artificial Neural Networks were really just a nice statistical technique that had a marketing breakthrough - they really appeared to have very little to do with exploiting the behaviors found in actual brain cells.
So the version number is 8A293?

edit: Oops, easy to confirm via the URL. It is 8A293 indeed.
I wrote a trivial BASIC interpreter too, in golang:

https://github.com/skx/gobasic
Do we really need to have this comment for any submission that mentions compression?
Content moderation is a form of free speech. You don't get to tell others what to do just because of your wayward political views. They taught us this in elementary school.
I'm willing to bet it'll go the same way as Voat. Except Voat actually had a diversity of topics to discuss when it founded (although it turned to garbage in a few weeks), this website is laser focused on one demagogue.
Kicking them off is advantageous for Reddit because they no longer have to deal with the dramas.
So, what's the goal? Force Trump supporters to build their own social media?! When I see the growth of Parler, how is this helping the already struggling Twitter, Reddit, etc. I don't really get why technology companies want to get involved in the policing business - how is this helping their bottom line? Are they business or activists pretending to be businesses?
I have come to the conclusion that those kinds of meetings have nothing to do with exchanging information, finding solutions, or anything remotely related to creating value for the customer (tm).

Though I have yet to figure out what they’re really about.

An easy way to pass the time? People relying on them to validate their salary? The only way a weasly middle manager can get himself heard? Cargo culting? Probably a mixture of all and more.
When I worked at Lowe's, we had pickup trucks to rent and offered delivery (with or without installation) for larger items.
As in let's encrypt is going to blacklist their domain? Sounds unlikely.

It doesn't really matter. If this starts being a problem, we'll use a decentralized web of trust for SSL. It doesn't have to be centralized.
It's no different than BLM members burning down cities. There's this sort of thing on both sides which don't represent the larger group.

Also, FWIW, I don't support anything remotely close to storming building, but people on the left certainly are quick to blame when I've watched exact same thing happen over the last year or two.
I don't think rules made by coercive government and rules made by industry are the only two possible choices.

If people voluntarily join organizations such as a community that has rules but that cannot be arbitrarily changed without consent and where individuals can leave, even taking their real estate out of the agreement, such an arrangement could still adopt all kinds of standards. This would not a coercive arrangement, but one that people voluntarily join to get the benefits of belonging.

One rule such a community might have could be that all members agree to only buy and sell food that meets certain standards. You would likely have many communities adopting different standards, many of which would likely be BETTER than one ALREADY watered down to satisfy industry.

With such arrangements, it would be possible for people to promote and enjoy standards of their choosing, without having the never-ending struggle over what those standards should be.

Why is it that we all must live be the same rules when many can live side by side? We seem to be ok with other nations choosing their own standards, but not our own countrymen. No, they must live lives designed by committee.

A voluntary rules making community could actually go much further than government can in making rules. This is not a problem when people can vote with their feet and simply end their membership when the rules get to be too much. Try doing that with government.
You have chosen the wrong path if it’s not fun. And you are probably not taking enough risk if it’s not hard and rocky sometimes.

- Marc Benioff (@benioff)

http://startupquote.com/post/2355823334
And Disqus.

It does serve to highlight just how ubiquitous these platforms are though.
These kinds of takes are always weird to me. Shouldn't it matter, at least a little, that the rule was what a 17-point majority of voters wanted? You don't have to personally agree with every democratic outcome, but it almost sounds like you're saying the results of a vote aren't legitimate if they go the wrong way.
> I hope someone eventually finds the right sales pitch to get rid of it

It's racist. Prop 13 enshrines discrimination of the past into today's tax law.

White families have lower tax rates: https://twitter.com/alfred_twu/status/1327821019931787264?s=...
From the article: "In addition to releasing new upgrades regularly, we’re opening up the ecosystem to enable a community of partners to build and sell compatible modules through the Framework Marketplace."

Maybe I am misinterpreting it but it sounds like its not a completely proprietary system?
In case anyone else is missing context like me, there's a Reddit thread detailing how these resignations came to be:

https://reddit.com/r/replyallpodcast/comments/lmpg0m/if_your...
>the project uses Arm’s upcoming Neoverse “Zeus” cores which succeed the Neoverse N1 Ares cores

Would have much rather seen rise-v for true independence. Maybe the cores will be swappable?

This does seem like legitimately a good case for it with the means to succeed.
What if the current bull market goes to $200k, and then the bear market retreats to $100k? This is why trying to time the market doesn't work.
I walked a mile to school and back every weekday, mostly in a group with neighbor's kids, when I was 6. Americans are weird.
Thank you for providing the link :)