skysight-inc/HackerNews huggingface dataset:
The main place where this would be an issue would be if you have a server that is not going to build or run code, but applies patches to source and outputs the result.

So a cr review website could be affected.
Why be proud of a thing that happened to you by chance?

I was born into a particular family but that's nothing to be proud of, it wasn't exactly my achievement.

I'm Dutch by birth, but I'm not proud to be Dutch.

I'm a European by birth, but it doesn't make me proud either.

What I an be proud about is those things that I've achieved that were not 'normal' for a person of my birth station and privilege level. (And that's not a whole lot, given the fact that I was born in one of the wealthiest countries in the world as a 'white male' which means I had just about all the lottery cards picked just so.)
@nate curious why you're leaving Highrise? You mentioned it's making millions for Basecamp, and it sounds like it's not shutting down -- were you looking for more substantial revenue/growth in order to stick around?
In the rare cases where an existing customer is forced to migrate accounts (due to incorporation/moving elsewhere) is that considered an existing customer?
Yes, I did that 12 hours a day for five years in my early childhood, starting at 2 years old. Before that, I couldn't see out of my left eye at all.
I can't help but feel that twenty years from now we'll be tut-tutting because someone discovered that some old company is still running containers built in 2018 that have massive security vulnerabilities in them.

There's a certain positive aspect to the treadmill effect you get with operating system upgrades that gets blunted once you can run another version of everything in a container nobody has rebuilt in ages.
CLtL1 had around 470 pages.
How would you convert this to private sector. On the one hand, government contracts go to the lowest bidder. On the other, government pays IT professionals 1.5 - 2x more.

What back-of-the-envelope factor would you use?

ref:https://www.cio.com/article/2404419/government/fed--governme...
I think one of the fundamental problems with even federated systems is that your identity is tied to your server. If I decide to leave mstdn.io in favor of some other Mastadon server, as far as I know, I lose all of my followers.

Even email has this problem. It's virtually impossible to change email providers unless you happen to own your own domain that you use for email instead of "@gmail.com" or "@yahoo.com" like most people do. Having your own domain works, but then you have the burden of dealing with the server that responds to that domain.

Strangely, one system has solved this, and they solved it decades after initial deployment: phones. Used to be, if you moved or switched phone provider, you had to get a new phone number. These days, you can "keep your phone number" when you switch providers.

The technology behind that is called Local Number Portability and is managed by the Number Portability Administration Center [1]. That's a private organization, but I think has some federabal obligations for fairness [2]. That sounds a little similar to how domain name registration and ISBN numbers are managed [3].

There's probably a lesson here. Maybe part of the solution for federation and privacy is a single authoritative registrar for root identifiers (i.e. the "@blah" part of your identity). And then all of the federated systems sit on top of that. The individual user owns that identifier instead of the server.

I think you need some kind of level of indirection like these, so that a user's identity isn't directly bound to the federated server they happen to be using today. Basically a mutable map that users control where they can map a logical identity to the current server they are using. So, if your, say, Mastodon ID was "munificent@muni_root", Mastodon would ask muni_root, "What's the current Mastodon server ID for user munificent". If I move from one Mastodon server to another, I just update that one record and everything keeps working.

We could, I suppose, use domain names for this. But in practice (1) that space is already getting used up and (2) the usability is low and the overhead and costs high because that's not what it was designed for.

[1]: https://www.npac.com/number-portability/how-lnp-works
[2]: https://www.npac.com/the-npac/about/neutrality
[3]: https://en.wikipedia.org/wiki/International_Standard_Book_Nu...
I assume Sigma refers to their SQL-based analytics product [1]. I think (and might be wrong) that most fraud-prevention features are included by default in all Stripe products, including Radar?

[1]: https://stripe.com/us/sigma
Yes! Just drop us a line.
They are on the main page, you just have to scroll down. Its not obvious its a non-touch bar variant: https://www.apple.com/shop/buy-mac/macbook-pro?product=MJLQ2...
The end of the cloud: A truly serverless web – A fireside chat
I was taking you seriously until you wrote this, "Judaism's pairing of extreme insularity with great economic success" and this, "Oppression and dispersion takes on a different meaning for those of means"

I really think there is an undertone to this perspective that is colored by a narrative that is false at best and possibly something much worse.

I dont think there is any factual basis to claim Jews had great economic success or were of means outside of false narratives perpetuated by their enemies. Even if you can point to specific eras or individuals that had success, you certainly couldnt demonstrate it existed propritionately more so than others, or that it existed in all the periods where they were persecuted and oppressed...
Even, in Tunisia, to quote Wikipedia: "In 1948 the Jewish population was an estimated 105,000, but by 2013 only about 900 remained"...

That said, the 2014 Tunisian constitution and its protections for freedom of religion was a huge step forward, and gives me a good bit of hope for the future.
Unix principle of small tools chained together.
I can envision a cryptopia when we have city-states with commerce as the engine of interaction and integration. I do not see cryptopia when Nation-States and their huge navies/armies lumbering around the globe.
> I wonder who the target market is, though?

Schools for sure. The staff believes that Macs are better and have bough trash cans to replace the cheese graters.
Fribo is a cat-like robot that tells your friends what’s going on in your home
Setting Up for Success: Building a Project with Xamarin
The Medium Model
I wonder how common this kind of loan is? Article from Kiplinger about security-based loans: https://www.kiplinger.com/article/investing/T035-C000-S004-s...
Target: Mac EFI FileVault2
For EC2 Metadata, just use kube2iam or kiam. In a AWS-environment, it is pretty much guaranteed that some of your services will need to use it to get access to some other AWS service, and it will come in handy that time.
Thank you for all your contributions in this thread, I really like your attitude towards heritage, religion and the complexities of identity.
GitXiv very much worth taking a look at if you're into this kind of thing:
http://www.gitxiv.com/page/about

edit: as is Chris Olah's Distill project:
https://distill.pub/
Technically Tesla cars have an infinite higher death rate than the cars with zero fatalities.
> this is really about static vs dynamic linkage, regardless of the mechanism you use to effect run or build time binding of dependencies

Are you familiar with the functional package management approach of tools like Nix (https://nixos.org/nix/) and Guix (https://www.gnu.org/software/guix/)?

They use dynamic linking but store all packages in a content-addressed format, outside the usual FHS. Packages are free to rely on separate versions of their dependencies as needed. Packages are defined in a 'source-based' format, but because of the content-addressable storage strategy, both Nix and Guix can offer transparent binary caching.

Guix folks in particular are working on verifying the integrity of binary caches, so you don't have to blindly trust them, and they've developed a system they call 'grafting' which can safely and quickly replace vulnerable packages without recompiling.

Both Nix and Guix have some container infrastructure as well. I'm not as familiar with the Guix side, but Nix has tooling for deterministically generating Docker images and systemd-nspawn containers, so you can leverage these packaging tools at the same time as existing container deployment infrastructure.

I like your analysis of 'build time' vs 'runtime' integration of dependencies, and I think you might enjoy playing with/critiquing Nix and Guix, because they address these problems in a strange and powerful way. They use dynamic linking for deduplication and small upgrades, but try very hard to integrate everything they can at build time. I'd be interested to see where you think their approach is strong and weak, if you ever get a chance to try it out.
Yeah I have no idea. If you need really high performance that Highcharts doesn't provide you probably need to write your own specialized charting library.
I've wondered if there is a k8s-native way to run this? Perhaps as a DaemonSet?
Lawyers talk to decision makers (judges or juries) who hear both sides of the story. Lawyers are charged with presenting the best possible version of their client's story, because it is the job of the decision maker (not the lawyer) to weigh the facts, judge credibility, and reach a conclusion.

The situation is a bit different where an organization like the EFF is talking directly to the public.
I worked on a code signing library years ago that fed data to safety critical systems. Other than the one coworker who suggested we add a sign-off step where we manually verified the SHA-1 hashes (which caught that we had recompiled one of the libraries ourselves, oops!) I had to defend my decision to check all of the dependencies into version control and manually update them.

This class of problems has been around for ages, the noise is just getting louder every day.
They're not banning cryptocurrencies, though. They're just saying that the regulated banks, presumably the ones that are insured with taxpayer dollars, aren't allowed to speculate with them.
Pursue the Program ( $357.30 USD - old: $397 )
so all the invoices I now see automatically created for all my pre-existing subscriptions, with their own Stripe-generated Invoice ID are NOT being sent out, are they?

How can I make sure of that? They have nothing to do with the actual invoices we already generate, send our customers, pass to our accountants and so forth and should any of these "Stripe-generated invoices" be made visibile to our customers it would create a HUGE accounting issue.
Oh, my mistake! I mixed up Radar and Sigma.
I think RHEL 6 also doesn’t use it. But then you have bigger problems :)
Tesla autopilot Barrier Lust (2018.12)
> Drunk drivers, recklessly fast drivers, redlight runners, stop sign blowers, high speed tailgaters.

Wait, so you are willing to share the road with all those nutjobs, yet you're "staying the hell away from" Teslas you see which you claim are NOT being driven by these people? I think you need to reevaluate your argument. Badly.

That even leaves aside the clear point that a Tesla on autopilot is significantly less likely to make any of those mistakes...
This reads like an ad for Mathematica
I've said this before but it bears repeating: GNU Taler wants to give the government a backdoor. That's privacy in the same way the Clipper chip in the 1990s was privacy.
I don't think it's so much that people wanted patch to be able to run arbitrary code, but rather that writing your tools to be very flexible allows you to get the functionality you need with very little code. The first version of ctags was written as a shell script that invoked ed to do the heavy lifting, for example. It was a small fraction of the rewrite of ctags in C in later Unixes.

So that's how you end up with m4 being Turing-complete, being able to put shell commands in anything, that sort of thing.
Other than not having enough mass, what would cause a celestial body to not clear its orbit? The only other factor that occurs to me is time, is there anything else? If not, does that mean Ceres may eventually become a planet?
I was wondering how they enforce it.

>OpenShift runs whichever container you want with a random UUID, so unless the Docker image is prepared to work as a non-root user, it probably won't work due to permissions issues.

Source: https://engineering.bitnami.com/articles/running-non-root-co...
In US, chip cards are activated on phone/web.

A simple way to solve this issue is ask for a pin only for first use (provided at the time of activation). That way users will have to use pin only once, after which it can be used like a regular chip card.

Ideally, pin should be asked for each transaction. But I’m the land of the free, PIN is an outcast.
Thanks for your detailed reply.

I'm still curious about the general case of GPL and Git. If I were to hack on some GPL-licensed software, my "preferred form of the work for making modifications" would hands-down be a .git repository, because all the individual git commits and commitmsgs are important (meta-)information, almost as important as the source code files themselves. It also makes collaborating on improvements much easier when you can work on git commit objects, with their parent(s) commit hash references. Without those, determining where and if a .patch should be applied to a source code dump becomes much harder.

In other words, if there exists a .git repository for a given piece of software, and all one gets is a .tar.gz flat source dump snapshot, I feel like... something has been left out?
> To the point where you wish you hadn't started but the sunk cost of time invested is such that there is no way back either.

"All causes shall give way. I am in code

Stepped in so far that, should I wade no more,

Returning were as tedious as go o'er."
in fact I've just checked and

"Email invoice to customer when it is created"

was on by default but it appears only for "Invoices sent to customer for manual payment"
Having worked on system where we had a crc on almost all data structures, let me tell you that bit flips happen more often then you want to know.

Not everyone crcs 100% of their structs.

If they don't, data is being slowly corrupted.
The patch could also modify the Makefile (or similar) to run arbitrary commands when the build is started.
Oh, upon closer reading, that page just says it doesn't work on 32 bit linux. Why they are even including that is beyond me. Who is working on Maya with a 32 bit system?
Startup Q&A – Legit Is Working to End the Repetitive Nature of Filing Patents
Yea, the current practice of lumping vacation and sick time all together in one bucket called "PTO" is asinine. It incentivizes coming to work sick.

Here in the US, people would still come into work sick anyway to prove how much of a hardcore workaholic they are, but still...
You needed new devices anyway to switch to chip, but I think it is a cultural issue with tipping. Some people really like that the server doesn't know how much you tipped until you leave.
Even for source, you may want to review the patch after applying it.

For example, dpkg-source applies patches when you unpack source package. I don't think anybody expects code execution when unpacking stuff, even when this stuff is untrusted.
The Patch Snatch Batch
There is the puretext utility that strips formatting. Can't remember if it's open source so that you could add stripping zw chars.
>But a lot of what upsets people so much is about legal interpretation and political policy.

Maybe for the HN crowd, but my observation about the populace at large does not agree with this.

A lot of what upsets people is a narrative they have in their minds about the world, and mostly that narrative is shaped by the media in some form or other (pundits, talk shows, etc). People react to news events, but it is the underlying narrative that defines their reactions. Once a narrative is stuck in you head, you become partially blind. News items that don't fit the narrative often are not processed and forgotten quickly. News items that do fit are remembered and repeated for years.

Rarely do I find someone who has formed relatively independent opinions about the stuff they read/see in the news. Rarely do they perform any kind of critical thinking. These holes in their knowledge are easily exposed when they talk to a neutral party who does not follow the news and knows little about the subject. That party doesn't have a narrative, so he will quickly come up with clarifying questions that throw the average news reader off.

So while on the surface political policy seems what people are upset about, it really isn't.

>Further, resistance to propaganda and misinformation is not an attribute of mentality. It's a combination of learned skills and _context_.

I agree that it takes a lot of learned skills and context. I disagree with the next statement:

>By yielding all current contextual information, you are severely damaging your ability to process current events.

I find the moderately informed are always the most misinformed. I find the ones who actively do not read the news, while still uninformed, are generally not misinformed.

Now some people will develop the skills to analyze the news well. They will always be a small minority. Encouraging people to read the news and to try to think critically may fail more than simply disengaging. I often tell my friends that the one lesson I learned while being a news junkie was that unless your goal is to understand as much of the news as possible (including how it is curated, etc), you're better off enjoying life instead. Just trying to stay up to date with the news so you don't feel out of touch will position you poorly.
It's not only about funding agencies, though. Researchers need to be trained in the use of a GitHub like system - as a former graduate student, I knew NO ONE using Github. Furthermore, after working in scientific publishing where it was MS Office or bust, I doubt you will convince Elsevier and the publishing giants that GitHub for Science is the way to go. How do these huge companies make money if scientists are sharing their work for free online? Meanwhile, you have scientists themselves, many of whom are required to hit certain numbers of articles in certain "prestige tiers" of journals in order to get tenure. If you're an extremely busy junior faculty member who will be FIRED when tenure review comes up if you don't have 1 paper per year, will you risk it on a GitHub scheme? I doubt that.

These problems are not unique to science. Take any large group of humans, be it government, the military, a company, a set of companies: they will coalesce onto the use of a certain number of tools, and it will take a LOT of energy and work to switch tools. Getting an entire industry to switch tools is extremely hard, perhaps downright impossible, and I'm not sure if it can be done in the rather slow-moving world of academic science. It simply won't be possible to enact a huge change on the system with so much institutional momentum built up.

It seems to me the best solution is to make incremental changes toward a github like system, training new scientists in grad programs to have better practices. Maybe we can't get researchers to post their full data set for all the public, but perhaps it can be made available to non-competitors, those who researchers aren't actively competing with for the same grants. Maybe researchers can be required by journals to post the peer-review comments/responses, as well as the drafts of the article, alongside the article itself. Maybe we can have researchers posting extremely detailed code/methodological information alongside the article, without forcing them to give over the entire dataset to other researchers?

Finally, maybe the whole incentive structure of academic science needs to change: maybe articles/publishing metrics should be de-valued in favor of teaching skills, mentorship ability, and collaboration within and across disciplines?
Cambridge Analytica helped Philippines‘ leader win election
Your post forgets to mention the negative aspects of deflationary currencies, though. If your money is going to be worth more tomorrow, and thus goods would be cheaper, you're going to push off purchasing things. People continuing to do this means that the makers of goods aren't selling, and therefore aren't making money. Thus, they have to cut expenses, meaning laying people off.

Using the boogeyman of hyperinflation is also rather dishonest, as that takes much, much more to happen than just the 2% inflation target the Fed has.
Bitcoin: A Stock Photo Cryptocurrency Primer
Is VueJS' Weex a Suitable Alternative to React Native?
Reminds me of the diaper genie :)
A few tweaks to the phrasing and you’ve basically described all nation state behavior and the entire history of human attempts at “society”.

Power brokers control the activity and discourse of the populace. Ignore the rules for personal enrichment (the US Congress and others pass rules for us [ banning insider trading] but not them).

This isn’t just an India thing
>I have a very close friend that works for the clandestine service, Mussolini.

Do you mean the Israeli intelligence agency Mossad? Mussolini was the name of the fascist Italian dictator.
Ignorance is strength
JP Morgan Chase – Cyber | Full Stack developer | ONSITE
Wilmington-DE or Columbus-OH – Relocation provided

Cyber @ JPMC - Your expertise in development, combined with your desire to provide innovative security services, will be an asset to our Cybersecurity team. Help deliver high-quality security solutions across all our lines of business around the world by creating, designing, implementing, and maintaining next-level technology. The work you’ll do is vital, as it will protect over $18 trillion of assets under custody and $393 billion in deposits every day.

The Role: You will research & validate cutting edge technologies by diving into the full stack to build for our clients. You will design enterprise scale platforms, build APIs, web apps, data processing architectures and more. From database schema design to tweaking CSS to make that page “just right”, you will touch all aspects of the stack. The tech stack skills we are looking for include: Javascript, Java, Python, Ruby, Django, MySQL, MongoDB, Postgres, Apache, nginx, git, AWS…

Apply: https://jpmchase.taleo.net/careersection/2/jobdetail.ftl?lan...

Feel free to get in touch directly - shawn.m.mccredie@jpmorgan.com
I've never heard an authoritative answer about why the US didn't go to PINs when chips were adopted. One strongly suspects there was significant concern about changing retail/restaurant/etc. workflows, confusing customers who mostly don't use debit cards (with PINs), and otherwise introduced more confusion and friction to customers than absolutely necessary.
Nice charts! Very striking looking against my dark terminal windows...