skysight-inc/HackerNews huggingface dataset:
If you want to blame someone, you can always say that he didn't document his stuff enough.

The problem is, that there is no standard, what's "enough", so it is easy to move the goal posts. Combine that with fast paced environment and putting out fires constantly, and you have a recipe for disaster.
Wait what?

US police don't actually have to lift a finger in the case of a crime being committed in front of them?

How is that a thing?
Seconded. Start smaller. The simple concept to remember is: if you need $13M to start this business, it's a business you can't start right now; it's instead an opportunity for larger businesses.

We had a similar problem: we started with "let's build the city of the future", which would have probably required a large capital (of course, we wouldn't have done it alone, but still...), and ended up focusing on creating innovation at the financial layer of real estate, which we started with a few 100,000s of $$.

Doing good so far.
Are you looking for a fullstack Developer or both frontend and backend developers?
Tbf, it only really makes sense for the individual programmer to properly document code if there’s a decent chance they’ll forget (eg some obscure part of the codebase), or if you expect a reasonable chance that someone will have to read the code without you. Otherwise, its useful, but not necessary: you just go to the guru (perhaps yourself); his living body is the documentation.

If you’re thinking that only you’ll ever read it, or you’ll be working on this codebase for the next 30 years, it doesn’t really matter. Peoper Documentation is a cultural activity required for teams, especially those with shifting workers, as is common now. And should really be enforced by the managers, not the programmers thenselves.

Its significantly less necessary when you can expect to spend most of your career on a single codebase, a workstyle these cobol programmers presumably came from.
Everyone knows US law applies in New Zealand. Just ask Kim Dotcom.
I looked into using Kubernetes for my personal servers, but I abandoned the idea when I saw that the minimal Kubernetes setup uses more compute resources than all the services [1] it's supposed to manage combined (e.g. 0.5 GiB RAM vs. 0.25 GiB, which is substantial on a 1/1 VM). And that's before you consider that a single-server setup is not The Right Way (TM) in k8s land.

[1] Gitea (Github clone), Murmur (voice-chat server), Matrix Synapse (instant messaging), Prosody (XMPP), nginx (for those services and for various static websites)
I'd like to use this for making a shortcut to connecting to a specific Bluetooth device, but it seems that changing the iPhones settings is not part of actions that you can choose from. My stereo does not connect automatically, so I have to always go to Settings -> Bluetooth to connect them. Would be nice if I could just push a button / ask Siri to connect it.

From iOS 11 it is no longer possible to develop widgets that does this: https://forums.imore.com/ask-question/376402-no-widget-conne...
If you don't see a problem with individuals keeping track of who comes onto their property, what's the problem with the government keeping track of who comes onto their property (i.e. public space)?

Yet again, privacy advocates are trying introduce privacy into the public sphere, where it has no place. Privacy is to protect what you do in private, not what you do in public.
The moral situation around sex-offences does seem to lead to some weird and unpleasant situations. This reminds me of the Julia Tuttle Causeway "colony", a group of sex offenders who were released but forced to live under a highway because they were legally not allowed within a certain radius of any school and this was the only spot in the state that would allow them. https://en.wikipedia.org/wiki/Julia_Tuttle_Causeway_sex_offe...
Researchers develop typeface they say can boost memory
Not a lot of details in this medium post; is this issue only present for some devices when using third-party chargers?
SwiftKey translates as you text
Where do you get those prices? Since months[1] it is more like 1.45-1.60€/l ($6.311-$6.964/gal) for regular petrol.

In 1.519€/l($6.611/gal) are 0.8678€/l($3.777/gal) taxes[2].

What they see as a expensive price, we only pay to the fiskus alone!

[1] https://ich-tanke.de/statistik/

[2] https://service.aral.de/netto-spritpreise
Usage and attribution of Stack Overflow code snippets in GitHub projects
Where on Earth do you people live!? I've had numerous interactions with the British police over the years (even one in my misspent youth where I was undoubtedly on the wrong side of the law) and they've been nothing but polite and professional.
Here is a precedent that has been going on for ~20 years now: https://www.kde.org/community/whatiskde/kdefreeqtfoundation....
For him.
I'm not sure you accurately diagnose the degree of polarization in the population with ideas of resentment and hostility that are largely subconscious and tend not to surface until stress manipulates those repressed emotions into actually being confronted as eventually obvious explanations for actions undertaken with ulterior motives.

These feelings are universally shared, but only visible to most in times of scarcity and fear. When economies are bubbling along in mania, people tend to lose sight of the eventualities regarding unsustainable societies. It's easy for people to rationalize their actions as charity, benevolence, and empathetic concern when they themselves are rewarded daily for vocalizing the whitewash and justifying what should be by what is now. When the music stops and individuals are left to fend for a chance at a seat, the full intention of previous actions becomes apparent as if malice is not something definable by planned greed and desire but puppetered unknowingly by a more clairvoyant self that protects its fragile present with the blessing of moral amnesia.
Agile Project Management with Scrum Boards, Backlog and Sprints in OrangeScrum
Scrum is the most popular agile project management framework because of its simplicity and high performance. It provides a sense of achievement, instant feedback mechanism, and transparent ownership of work done within a team.
The underlying reason for this are salary levels. In Germany Retail agreements are higher paid (and almost dead, another reason why unions want them). In France it's the contrary, so Amazon put warhouse worker in the logistics category.
He said in his experience.

Then you tell him he's not thinking clearly or critically.

Could you be more any more patronising and dismissive?
I've been thinking about setting up a small Kubernetes cluster for hosting some smaller client projects (read websites, shopping carts, API's, admin panels).

My current setup uses a couple of Hetzner dedicated machines and services are deployed with ansible playbooks. The playbooks install and configure nginx, install the right version of ruby/java/php/postgres, configure and start systemd services. These playbooks end up copied and slightly modified for each project, and sometimes they interfere with one another in sublte ways (different ruby versions, conflicting ports, etc)

With my future Kubernetes setup I would just package each project into its own self-contained container image, write a kubernetes deployment/pod spec, update the ingress and I'm done.
> Nested on the servers’ motherboards, the testers found a tiny microchip, not much bigger than a grain of rice, that wasn’t part of the boards’ original design.

> During the ensuing top-secret probe, which remains open more than three years later, investigators determined that the chips allowed the attackers to create a stealth doorway into any network that included the altered machines. Multiple people familiar with the matter say investigators found that the chips had been inserted at factories run by manufacturing subcontractors in China.
Is there an article that describes a bit more in detail what the chips actually did (or were capable of doing)? They only say "the microchip altered the operating system’s core so it could accept modifications.", which I might interpret as circumventing signature checks to allow installing modified firmware on the systems? But how does the chip connect to the network and how does it receive commands?

That said, it's pretty scary that you can hide so much malicious functionality in such a small device, makes me wonder what might be hidden in my Lenovo. In any case it speaks highly of the auditing firm that they were able to locate this. I wonder if they performed an x-ray analysis of the board, as given the size of these chips it should be possible to embed such devices in one of the internal layers of the board as well, making them essentially invisible to optical inspection.
Anyone know what the licence is?
Google Has ‘No Plans’ to Enable Chrome Hardware Acceleration on Linux
LG V40 ThinQ Hands-On
Fuchsia’s Xi code editor is no longer a Google-owned project
I will certainly show this to everybody who tells me "google won't get hacked" when privacy comes up :)

Talking about things like this https://news.ycombinator.com/item?id=18074097
Thanks for sharing your thoughts! I wrote about Fargate because I like the idea of having a service that manages both masters AND workers and where you only need to care about the API, but didn't really try it yet. That was my impression as well, though. Even the use cases mentioned in the pricing site are just containers running for a few hours a day, and not long-running services like servers.
The denials by Amazon, Apple, Supermicro and the Chinese Ministry of Foreign Affairs [1] are relatively pro forma, both directed by respective nation states involved in this matter. One of the reporters interviewed on Bloomberg noted Amazon and Apple could be directed by US national security interests to deny to protect the ongoing US investigation. Supermicro could similarly be directed by Chinese national security interests to protect plausible deniability.

There was a sense of realpolitik by one UK guest commentator on Bloomberg, comments along the lines of "hey, spying happens since time immemorial, put on some big boy pants, yes there is shock but not horror when the Snowden revelations came out, the US does it, too, etc.". I disagree with this sentiment, as while the attack was quite targeted, it puts into question a quite large supply chain network.

Kudos to Bloomberg putting in the 12+ month investigative journalism to pull off this scoop. Yet another validation of the reasons I subscribe to listening/watching them.

[1] https://www.bloomberg.com/news/articles/2018-10-04/the-big-h...
Which companies performed the security audits?
I’d expect that this type of parasite hardware attack isn’t unique. Securing the supply chain is even more important than ever.

Apple’s response isn’t great IMHO.
Does Shopify Host Your Website?
Fascinating. A company I used to work for dismissed this sort of situation as a problem and ended up using SuperMicro boards in a security crucial product. Their hardware has always been notably very crappy, with the IPMI interface defaulting to world-open unsafe parameters, but I'd not expected it to be this cleverly hardware backdoored. It's possible to neuter Intel ME, but that's only a small comfort with these motherboards.
Downvoted because saying "you have no idea what danger you're putting yourself in" without substantiating that claim with an explanation is fearmongering.
Who else found the design of the page made the article difficult to read? I know darkness, spies and hacking go hand-in-hand but it's a bit too much imho.
Fully agree. K8s is mostly beneficial for larger companies, because of namespaces support, and devops authentication.
For smaller teams Swarm is just way more practical and versatile.
It was perfect on a mobile device.
You complain about hardware issues (that generally happen to a tiny percentage of users, and are inevitable with a consumer electronic that sells in mass quantities) and then talk about switching to a software platform. It does not follow.
I worry this is close to Web Forms again.
>In Scandinavia you'd have to be genuinely paranoid to not trust the police.

I had the cops bring in a shrink to "observe" an interview.

Right after the interview, they had that same shrink who I'd never met before commit me into a month-long involuntary psychiatric evaluation because I had followed my lawyers advice and refused to answer the questions I was asked.

This sounds like something that might happen in China or maybe Russia, but no. This all happened in Finland.

The system assumes that government officials can do no wrong, so there doesn't exist any effective way to seek legal remedy.
If you're speaking about the federal gas tax which goes to the Highway Trust Fund[1], it's currently $0.184 per gallon of petrol and $0.244 per gallon of diesel.

There are also state gasoline taxes, vehicle weight fees (for commercial interstate trucks) registration fees, and tolls[2].

1. https://en.wikipedia.org/wiki/Highway_Trust_Fund
2. https://www.citylab.com/transportation/2017/07/us-transporta...
TLS token-binding standard gains a foothold on the Web
SuperMicro hardware has very extensive IPMI integration into the mothebroard, which amongst other things can take over and inject frames into the network interface, emulate a VGA device, talk to the CPUs serial lines directly, flash firmware, control the state of a number of physical devices- and this is what it supports just from the web interface it presents by default with the password "ADMIN:ADMIN". My money, based on experience attempting to harden their devices, is that any modification were injected into the IPMI hardware where most of this was already supported.

This stuff ends up being extremely difficult to disable. The naive approach would be to not connect to the dedicated NIC that's indicated on the back and in the instruction manual, but if you do this it masquerades onto the main NIC invisibly to the OS and DHCPs on its own to open up an administration port, web interface, and some assorted call homes. You have to explicitly tell it to use the non-connected port, change credentials, and modify it so that it is not accessible within operating system as well. Hopefully while the machine is offline to prevented any automated scanning finding it within your network.

The number of times I'd end up nmaping our local networks and being able to remotely access production hardware with an interface that allowed me to reach this interface was maddening. The system is basically designed to be as insecure as possible by default, and allow for the maximum possible persistent threats with BIOS flashing, IPMI flashing, and other completely nu-authenticated avenues exposed. The course of action was always just to write off the hardware and bin it, because god knows what impact you could actually have using that interface.
Something quantifiable. Saying "I worked on a big project" isn't impressive - because the reader has no idea what you consider to be "big".

Better - "This project served 5,000 customers in the local area."

Look at STAR - Situation, Task, Action, Result.
"I increased revenue from £5 per customer to £7.50 by doing XYZ."
Isn't there always some error margin. I know in my country it's something like +10kph +10%. Then the 130kph limit on the motorway becomes 154kph.
What happens when a bus hits the guru?
I recommend having a look at DCOS
Yes we didn't dedicate efforts to integrating an ad blocker because we mostly integrate applications in which you shouldn't see ads but Twitter or Instagram are good examples of where it's needed. We are working hard to integrate more extensions in the future and Ad blockers rank high on the list.
Good point. Definitely seems designed for mobile (only).
You’re staking your IP on the financial health of your company. If you have a promise to push OSS then you also provide motive for sabotage.

It sounds extremely paranoid, I know, but escrow is a much safer option because when you pass that on to the client it forces them to really commit as opposed to not caring if you go bust.

To put it another way: you get a commitment from them in terms of having to pay the fees for escrow, which is more than they would have to do if you made a public promise. That’s a longer term commitment, so you can wrap that into a longer term deal, which in turn can help you stay sustainable for longer.
> Supermicro could similarly be directed by Chinese national security interests to protect plausible deniability.

Supermicro is an American corporation, headquartered in San Jose. They're not directed by Chinese national security interests, they'll do anything the US Government tells them to do when it comes to US national security.
They sure don't care about UX.
Why aren't these attacks constrained by normal corporate firewalls? How does a random server on a navy ship start contacting baddie.china.com without raising red flags?
Does anyone have example SSH, Javascript or Python shortcuts? e.g. would be nice to have a shortcut for Textastic to push a file over SSH then run Jekyll build on the server.

This shortcut will put a video into PiP mode for iPad multitasking: https://www.icloud.com/shortcuts/dda08a01a17d41feb3e887a4a12...
Not only an option, but I would bet that within 10 years SDRs will partially or wholly have replaced the US dollar. Of course, the largest component of SDRs would be the US dollar so this would be transitional, not an abrupt change. Anyway, just my opinion...
TSB's migration from legacy to Java based was a complete omnishambles.
There are user-made shortcuts for Spotify already[0]. These use external website to connect to Spotify API and require a prompt. So, instead of "Play Kurt Vile" you have to say "Play artist", wait for a note, then say "Kurt Vile". Far from perfect, but works. Sometimes. Like all things Siri.

[0] https://shortcutsgallery.com/siri-shortcuts/?_search=spotify
you'd think car manufacturers would have cameras for when being pulled over.
Denmark and Germany are in EU, but that does not mean that statistics are made in the same way.

Also, the "vehicle in use" is not necessarily such a clear definition.

For instance, several of my colleagues own historical vehicles from 1960's and 1970's which are "museum registered", which here means that they must be at least 30 years old, can be used only on 30 days each year, and they are not subject to annual "MOT check" (but a different kind of check every 2-4 years).

Are they included in the "vehicle in use" statistic? I don't know. And I don't know what are the specific regulations for similar vehicles in other countries. Because the cars are 40-50 years old, even a not very big number of them would skew the statistics of average age of cars.
Like that patent-pending MBP keyboard switch that only spared a few lucky lottery winners.
> The problem is that most of the IT industry no longer views users as customers, but as cattle to feed ads to and harvest data from.

FTFY
Vestidos y Peinados de Madrinas de Honor
This sounds like something out of a movie. I would like some technical details how this is supposed to work with only a 6 lead chip.
> Two of Elemental’s biggest early clients were the Mormon church, which used the technology to beam sermons to congregations around the world, and the adult film industry, which did not.
That would constitute tax fraud in many legislations.

That's one of the principal points that tax auditors check in a group, although it's oftentimes hard to determine a market price.
Alpha Preview: Action Text for Rails 6
Large cars are seen as status symbols, so a lot of people think they need a big car to show how successful they are, and to "keep up with the Joneses".

The sooner people shed this silly consumerism mindset, the better.
'Distracted boyfriend meme' is sexist, rules Swedish advertising watchdog
The Problem with Web Forms was that it shoehorned statefull patterns that worked in desktop programming into http and thereby introduced very leaky abstractions. I see absolutely no reason why this should be a problem for frameworks like blazor.
At some level of understanding, all workers know they don't get the full value of their labor. You just got to see it happen right in front of you in real time.
1. Sell data to ad regulators

2. Sell data to competitors of the advertisers, turning online advertisement less effective in long term and easier in short term.

3. Sell ads data to activists etc...who will sue the company running misleanding ads and defrauding consumers.
Charge them a weekly rate and 500/h is probably still undervaluing yourself

[1] https://www.kalzumeus.com/2015/05/01/talking-about-money/#co...
> Where do you get those prices?

From memory. I don't have a car (or a driver's license, for that matter), but I drive by gas stations sometimes.

> What they see as a expensive price, we only pay to the fiskus alone!

I find it hard to believe that the US does not have any taxes on gas whatsoever.
SSR or CSR for Progressive Web App
Mainly a web interface. I never gave dokku-man a try, but it doesn't look as feature-rich as the web interface for CDD.
Who's saying the firewall isn't compromised too? ;)
How to Create a Simple Product Programmatically in Magento 2
> Minus the Bill Gates of the world, which we can count on our hands, the vast majority of charity is not done by a "handful of rich philanthropists" but rather, normal, everyday people that want to make a difference.

Weight by money, not by number of people. What proportion of "donations" to 501.cs come from where?

> If you turn this into a bureaucratic exercise, there are number of problems that become introduced that have been well pointed out in the past (bureaucracies are slower, the incentives are now not aligned, you now have a third party entity spending instead of first party, so waste is now introduced).

Decent charities inherently don't have aligned incentives, because the people they're supposed to benefit are not the people funding them, by definition. So making them accountable is very important and much harder than for other kinds of organisation.

> The other issue is public charity only works when society shares common values and beliefs. Unfortunately this just simply is not the case anymore in America and if 2016 made that obvious, it's even more apparent with the Kanavaugh hearings.

That we have divergent values and beliefs is all the more reason that public money shouldn't be funding private charities. Private charities can and do push particular political or religious causes, or benefit particular groups and not others. If you want to spend your money on your cause that's diametrically opposed to mine, that's fine - but you shouldn't get to spend my tax dollars too. Publicly-funded organisations have a lot more accountability in terms of having to treat everyone fairly, and that's a good thing.

> Additionally -- this is how every socialist system has started -- "just let the government do the good for you" which many disagree with on principle: why strip people their freedom to do charitable works on some presupposed better governmental solution?

You still have the freedom to spend your own money as you see fit. You just don't get a special exemption from the democratically-agreed taxes that everyone else has to pay.
Serial bus magic.
So because others sometimes violate the rules, it's okay for you to ignore the rules entirely? I'll leave it as an exercise to the readers to bring that principle to its absurd logical conclusions.
Discussed here: https://news.ycombinator.com/item?id=18138328
Information Security with AWS DevOps
I suppose the hardware on the navy ship is communicating with a server that is also compromised, and so on and so forth.
There is not a shortage of Cobol programmers.
How do you prevent people proxying your API via a node service?

This is something I could never get my head around with CORS - what's the point of whitelisting origins if getting around the whitelist is nothing more than an inconvenience?