jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
> Postgraphile requires setting up row level security policies, meaning you have no control over what layer of code you want authz policies to live; they must be in the database.

I might go ahead and argue that RLS in the database is exactly where security on the data model should go. Past a certain size, many databases have more than one app talking to it. This means N servers that must adhere to the same authorization rules. Hopefully at least they're written in the same language.

Not all restrictions are data-oriented though, and on that note, I agree that the restrictions should live above the database using some schema-stitching or federation.

Version control is a matter of saving the schema changes through migrations and optionally DDL audits through event triggers. I would argue that testing/tooling as you seem to be imagining it is a moot point though. I find it much easier to define table, column, and row restrictions at the DB level and let those constraints bubble up. If a table is unavailable to a set of roles/groups, better to say so in the database so that no query at any higher level could accidentally allow access when it shouldn't have. Row-level security policies don't care if someone is executing a simple `SELECT * FROM example` or a 100-line monster. That row in isolation or as part of a gargantuan query reading/writing through a view or three doesn't matter. The reason Postgraphile relies on PostgreSQL itself for authorization is precisely because PostgreSQL does such a good job of it.

You are correct that simple GUI tools are lacking in this regard, but I'm not sure the use cases I've come across for it fit a GUI tool. For a data platform in a large aerospace company the method of allowing/restricting access was dependent on tagging (both AND and OR). Combine it with some temporal query support, and the RLS policies were essentially code, not just declarative. Then the GUI was the web manager UI (custom). Worked quite well. And while that data platform had some bugs we had to work out as all software does, we never had a problem with the data-level security. We even found some bugs at the app and UI layers precisely because some developers overlooked some corner cases.

App-level integration tests appeared more than sufficient to flush out any problems (or verify correct behavior) in the data-layer security.

Data-level restrictions and query auditing (below the level of an app or server) become even MORE relevant as employee size grows, not less.
REMOTE

WorkReduce is an American company that handles back-office and middle-office operations for advertising agencies. We have been 100% remote for years. I've been with the company since we were seed stage and we're growing quickly.

We are hiring 10 full-time employees (with benefits) for SEM roles. The company has been 100% remote since day one.

We are hiring for both _Associate_ and _Supervisor_ roles.

Associate skills: Analytical Skills, Advertising, Digital Marketing, Search Engines, Advertising Campaigns, Marketing Campaigns, Budget Management, Search Engine Marketing (SEM), Campaign Analytics, Campaigns

Supervisor sills: Google Ads, Pay Per Click (PPC), Client Services, Management, Account Management, Advertising Campaigns, Marketing Campaigns, Kenshoo, Campaign Analytics, Bing Ads

Culture is awesome and fun – diversity starts at the Board and Executive levels, and it's a refreshingly human environment.

I know it's a hoop to jump through, but this should not be a problem for the type of people we want to attract: please DM your résumé via Keybase (link in profile) along with:

(*) role you're applying for
(*) skills you have +
(*) skills you don't have yet ×
(*) any questions you have about company or culture

Regarding VISA: must have permanent USA work authorization and live in a USA territory (since we are hiring full-time employees, we have the unique specialization of setting up relationships with American bureaucracies in all the places).
A popular but fairly comprehensive summary about stereotype threat research is at http://reducingstereotypethreat.org/.
The free version is VERY limited however. So, going from 10% of a game to 100% would hopefully sway the reviews my way even with ads, but still - hard to say.

I could start slow, with just ads on the home screen, then maybe put them throughout.
Oh that would be awesome... the Dropbox USB drive.
"The system is broken in the sense that teaching is at best a low priority, and that universities have essentially become testing centres. Students spend 2 weeks a term cramming for exams (or writing term papers,) get their sticker at the end of 4 years, and the university cashes a fat cheque. That's about it from the student's perspectives on the academic side of it."

Spoken like a person who has never actually taught a college course. There's a tremendous amount of work involved, from both students and faculty. Most students go to class, and most professors give lectures that aren't directly taken from the book. So can we please stop elevating the cartoon, straw-man portrayals of the incompetent lecturer and the lazy student? Please?

If this blog post weren't written by the CEO of a company that's trying to sell enhancement software to universities, I'd dismiss it as anti-intellectual trolling. I'm also trying hard not to dismiss it as the griping of a guy who's finding resistance selling his product to a somewhat conservative clientele (university staff), and interpreting their reluctance as the behavior of dinosaurs (rather than a sensible reaction to the generations of educational snake-oil salesmen who have come before).

Instead, I'll give the benefit of the doubt: there are certainly lazy, incompetent professors. There are also lazy students that have no business being in college. But if your only contact with the university system comes from when you're trying to sell or beta-test your products in the classroom...well, you don't have a very representative sample from which to draw conclusions.
When people say copyright infringement is "stealing", they are speaking English, not Legalese. In ordinary English usage, "stealing" generally means taking something you should not take.

For instance, when a baseball team positions someone so that he can see the signals that the opposing catcher is sending to the opposing pitcher, we say he is "stealing their signals". You generally don't see people jump in to correct that and argue we should be saying he is invading their privacy or some such.

Or when your best friend makes a move on your girlfriend, no one generally nitpicks if you say "He tried to steal my girl!" and argues that since slavery was abolished in this country around 150 years ago, he cannot steal a girl--all he was doing was betraying your friendship (unless he physically tried to take her away, in which case he was trying to kidnap her, not steal her).

There are many more possible examples of common usage of "steal", but I think the above make the point.
There are lots of places that only sell one, too. Restaurants frequently sell only one or the other, in large part due to anticompetitive agreements when making the sales contracts.

A quick Google brings up: http://www.wright.edu/~tdung/coke-italy.htm
Well, I would remove the "professional experience" option. That's what confused me.
Without it you still have 6 levels of granularity, that ought to be enough for anybody :)
You're completely right. I've revised my post to focus on what words affected me, rather than speak negatively about his customer service.
Strange, I pictured Comic Sans more as an out of touch, 53 year old woman who enjoys knitting and is a bit spacey than an angry, egotistical, abusive frat kid, or whatever this is supposed to portray. The author has entirely failed to capture the essence of Comic Sans.
I would certainly be interested in hearing it; I can't promise I'd implement, though. I am most interested in implementing things that make it /possible/ for a user to deal with problems without my help. I am less interested in things that make it /easy/ for a user to deal with problems without my help. Also, there is a long queue of improvements I currently need, some of which are quite critical.
We couldn't fork; it turns out that mygwt was not really LGPL as it was originally stated. We couldn't even use the old versions.

http://groups.google.com/group/Google-Web-Toolkit/browse_thr...

It is not about the money. It is about changing the license after you've made a big commitment.
A couple of articles to back up the African oil spill claim:

http://www.michaelmoore.com/words/latest-news/africas-oil-sp...

http://www.independent.co.uk/news/world/africa/niger-delta-b...

It very true that we operate with a "out of sight, out of mind" mentality, particularly here in the western world. Oil companies don't deal with many of the spill scenarios they create well enough simply because they aren't being held accountable. Social responsibility should be a requirement for corporations.

But do I really care? I drive a small SUV.

(answer: of course I still care!)
Short answer, no. I'm an accounting student. As others have said, it might behoove you to check in with an accountant. Paying yourself through a company that doesn't make any money isn't likely to work. I'll check up on my sources and see what would happen if you did pay yourself a salary. I think you'd just pay taxes on it or it might just qualify as a return on capital if it's just your money.
I can't see where it says Nim (programming language) is "not significant". Maybe the reason there isn't a Wikipedia article is as simple as because nobody who has an account on Wikipedia had heard of or thought to create an article on Nim. The solution to which is quite simple, go create an article.
I actually love it just because I'm a fan of arbitrary cognitive dissonance.
Someone else posted: http://en.wikipedia.org/wiki/ISO_week_date
another one: any chromebox (and use the EZ Setup script for OpenELEC)
(I have the hp one and am very happy with it)
The sources that tell you to have a one-page resume typically expect you to edit out anything that doesn't apply to the job you are currently applying for.

It makes some sense. You're trying to ensure that all the high points in your resume get read by making the reader's job easier. At the same time, re-writing your resume every time you apply to a new job is a tremendous burden, and simply impossible if you want a consulting agency to keep it on file.
Lots of pun.
The counter is going up quite fast, I wonder how long this wil be up.
When Rinnku.com launched our intention was to bridge the gap between community news and social bookmarking (Digg + Delicious if you will).

In the six weeks since launch we’ve had some success. In particular over 18,000 links have been imported from Delicious.com by users who needed a more modern bookmarking experience.

However feedback from our users has shown we missed the mark. They don’t want or need another community news site.

So after crying in a corner for a while we went back to our users and asked - well what do you want? They told us they wanted a bookmarking service that’s effortless to use - "something that just works".

And that’s what we’re building. We’ve simplified the UI to make finding your links easier and quicker, enabled 1 click saving of links, added more help for new users and committed ourselves to creating the best bookmarking service in the universe.

I'd love to hear your comments.
The 'wolves' in this fable are not the lawyers, but the legislators.
Reach out to the angel investor community near you. Find an angel willing to give money to create a business that owns your idea and give them a share of the business. Use their money to file the comprehensive patent portfolio needed to protect the idea and defend it in court, if required. I'd guess that $50K and lots of your sweat ought to be enough to get critical patents in place.

With the patent portfolio in place, you can at leisure explore licensing the technology to major players or going into manufacturing on your own.

Going into manufacturing on your own will require additional rounds of funding - but now you quit your day job and tap the venture capital community.
what about
votes, headline, domain, submitter, time
and build a tool that predicts how many votes certain hacker news submissions will get.

(think a winner would be a "node.js apple" post on codinghorror, submitted by john gruber)
That's a huge salary for Greece, believe me :)
Nah, not spam, just a really cheap deal.
I've signed up as a backup/test host, not sure on the performance yet though.
Unison is great, I use it as a way to keep several machines in sync for large content (several gigs) using a personal server as hub.

http://gitorious.org/mist

It's not a dropbox replacement, but it does the syncing job nice and simple with nothing else but unison, ssh and a shell script. I will eventually make a daemon using inotify so that it can sync in the background as well.
Just two words: FIX PROTOCOL
We think technology is the solution to education (our math test scores are lower than China's because they have better laptops than us!).

It comes down to motivation. Laptops in the classroom are a nearly irresistible demotivator/distractor for most kids.
Is this before or after the students were told they were required to own a laptop to participate in their education? I'm just about finishing my own education, and everyone there owned a laptop at the school's recommendation.

Personally I used mine for a lot of rapid note-taking, which was a lot faster for me than having to write things down. It actually allowed me to take notes in real time which I am not able to do on paper. Then I also encountered a professor like the one in the submitted article who hated the idea of students using the devices the school encouraged them to buy for their education in his classroom. That class was the roughest for me, I found it very hard to work with my written notes (Which I no longer was used to using of course, since I used that laptop for years) and am convinced the class would have gone a lot better for me had the professor not decided to make a decision which set his classroom starkly apart from the rest.

If the school has a policy of allowing laptops then I think it's terrible for a professor to override that.
Curious, I checked out the Task Manager for my Chromium install. Privacy Badger, although based on ABP code, is using substantially less memory than uBlock. Less than 1/2, actually.

https://imgur.com/ScBfmjS
Doesn't contradict with my statement, but yes. Luckily the rest 97% of developers are covered.
No, they don't. What undefined0 wants is bitcoins for all the payments he gets including credit cards.
Another name for this layout is 96 key. I built my own using a YMDK melody 96 layout but before that build I bought the VictSing 96 key which was super cheap (around $50 delivered from the US) and apart from the keycaps having awful legends wasn't too bad.

I did a bit of blog series as I went through the design and build process after my Model M died after a coffee accident. https://www.ibbotson.co.uk/tag/keyboards/

I'm mulling over doing a custom design with a ISO/US layout so I can kill the function key row but keep both ~` and the escape key. Basically the "Vortex Vibe" but with an ISO layout.
Bitcoin has fantastic utility. The scarcest resource any of us have is time. We all sell our time for money. Money is essentially a battery of time. Bitcoin is a profoundly better battery than poorly managed fiat. The energy consumed by Bitcoin is a registry of human effort. Bitcoin’s raise in value is proof of this utility and human desire for all time spent to be equal and honored as such in the future.
Georgia Tech's Graduate Introduction to Operating systems OMSCS class rings a bell. Socket programming was fun in that class. And by fun I mean hours of hair pulling while debugging.
IT is internal facing, their customer is the business and they are a cost centre.

Engineering is external facing, their customer is the end user and they generate revenue.

The terms being so clearly deliniated is more obvious in the US, in my experience. But some old brick and mortar companies still treat their engineering departments as a cost centre and it shows.
I've had a good experience with freight forwarding services like MyUS.com and shipito.com.

It works like this: You basically rent a bit of shelf space in a warehouse somewhere in the USA and get your personal shipping address in that warehouse. Your unique address is identified by a unique "suite number" in the mailing address. You have stores send your packages there and the freight forwarder optionally holds them for some time, usually up to 30 days. Then you can consolidate the individual packages and have them sent as one shipment. I'm using MyUS these days; They ship by weight only, and have very fair shipping rates. I have been able to ship non-medical N95-level masks through MyUS.

Having access to in-USA shipping makes quite a big difference. You get access to a big consumer market, which makes the unbuyable buyable and the hard-to-buy easy!
> You ignore their existence and role implicitly without the slightest consideration; their right to choose is _the_ consideration here.

This is silly. I said, "Apple takes away choices from users in many other areas". iPhone is an extremely locked down device. Users do not have the right to do what they want with it. (Which I complained about earlier, not being able to install software like Little Snitch on iPhone.) I've been a Mac user for a long time, since before the App Store, before the iPhone, before Gatekeeper, even before code signing existed. I'm very aware of what user choice is about, and iPhone is definitely not at all about user choice.

So, please start over without the fake moralizing, which cannot be taken seriously in this case. The right to choose is almost never Apple's consideration nowadays. There's currently legislation under consideration in North Dakota that would give users the right to choose, but Apple is complaining that it would "destroy iPhone as we know it". Exactly. iPhone is not about user freedom. Everyone knows that... except apparently you.

> so you can point the finger unerringly at Apple

The funny thing is that a lot of iPhone users would praise Apple for banning the SDKs. Only you seem to think that the iPhone is all about user choice. The majority opinion seems to be that Apple's lockdown is good, for the user's "protection". So I'm still puzzled why you even think using the word "ban" is a criticism of Apple.

I can speculate that perhaps an explicit ban would get Apple into antitrust trouble, which may have been what the article author was referring to. But if your argument is, "It's not a ban, because a ban would be legally problematic for Apple", that would not be very convincing argument.
Do you know who Anne Osborne is? Have you interacted with her (or anyone like her)? I have.

Don't call something nonsense just because you are not aware of it. If you don't believe in mono meals, then that is your choice. There are vegans, fruitarians, mono meal eaters etc who are all thriving. Just because you don't know or agree with something doesn't make it nonsense.
I know you’re being sarcastic but these kinds of stories are well worth passing on to future generations. Managing expectations isn’t about not hurting people’s feelings, it’s about preventing blowback that will at best distract and at worst demoralise the team. You can bet the plasma team wasted a lot of energy on dealing with all the hate they got. Energy that would be better spent improving plasma.
Presumably that approach works best in conjunction with third-party publishers publishing signed images?

Very useful for your own images that you publish in your registry though.
I wondered the same thing. Noise in the picture should also make it extremely hard to predict. For cryptographic use one would only need 256 bits of entropy to seed a CPRNG, and I can't see how this amount of entropy wouldn't be present in a normal photo.
I agree, I think it's because life exp of any kind greatly helps for confidence and leadership in running a company as well.

But I still think there's no better way to learn the game than to just go out there and do it... make mistakes, learn/improve, and keep iterating. No one becomes a great entrepreneur overnight; and certainly a lot of those guys I mentioned (Mark Cuban especially) went through a lot of failure before making their first big hit.
And may it rot in hell for forcing you to add fields into every struct that might find itself in a list at some point in it's life. May it doubly rot in hell for forcing you to add those fields for every list that the object might be a part of. May it triply rot in hell for using unsightly macros that are impossible to debug, particularly when working in an embedded environment.

queue.h - just say no.
I am even more happy about support for adding and overriding HTTP request headers! Hooray
The proper way to do this is (simplified from BSD sys/queue.h):

#define LIST_FOREACH(var, head) \
for ((var) = (head); (var) != NULL; (var) = (var)->next);
LIST_FOREACH(list_p, list_head) {
...
}

You may also occasionally want to use (C99) variadic macros (gcc seems to need -std=c99):

#define LIST_MAP(my_list, f, ...) \
for (struct list *n = my_list; n != NULL; n = n->next) \
f(__VA_ARGS__, n)

void list_print(const char *format, struct list *n) {
printf(format, n->data);
}

int main(void) {
struct list	n3 = {NULL, 3},
n2 = {&n3, 2},
n1 = {&n2, 1};

LIST_MAP(&n1, list_print, "%d\n");
}
Lots of indented function calls is just poor design. You get the same thing in Scala when you start dealing with lots of Futures inappropriately.

Just choose a decent abstraction for callbacks. I prefer promises, but async.js does a good job as well.

The `flatMap` function on a Future in scala might be built into the language, but it is implemented and scala and not significantly different (in my mind), to Bluebird being implemented in javascript.
This piece really does not hit on the reason Diesel is not popular in the US. Back in the 1970s energy crisis, diesel cars drew some interest, and unfortunately General Motors obliged with some horrendous products. Smelly, smokey, slow, and highly trouble prone diesel engine that was essentially a gasoline 350 cubic inch V8 block with diesel heads slapped onto it. Used in Oldsmobiles, Chevys, and Cadillacs, it was a disaster and ruined the diesel concept for decades.

See http://www.autosavant.com/2009/08/11/the-cars-that-killed-gm... for some history.
It is not okay to imply that homosexuality and pedophilia are the same thing.
Don't worry no one on this site can answer your questions no matter how much information you give us. You already know the answers anyway. You have chosen so far to ignore them but they're still there poking your insides constantly. Until you have the energy to look inside yourself they'll continue to plague your existence with dissatisfaction.
Greg Egan writes some seriously mindblowing stuff. Another good one to check out is Bios, which has quantum computing super DNA, that pre-emptively adapts to the environment by picking the best DNA from parallel universes.
me please, [hn username] at gmail
San Francisco

Engine Yard Inc.

I'm looking for a few good hackers to join my team working closely with me personally on exciting new cloud related projects. We have some killer projects in the works that are true game changers in the cloud space and I want you to join my team.

You must be a hacker and live in the bay area or be willing to relocate here. This job is fun and you get to work with all the latest technologies related to cloud, nosql, ruby on rails, sinatra ruby in general. rubinius , jruby and tons of other killer projects. Trust me this job is kick ass.

Are you kick ass enough to come play? If you think you got the chops email me at ez@engineyard.com and let's talk