skysight-inc/HackerNews huggingface dataset:
If SpaceX doesn't count as a success, I, and everyone I have ever met is a complete failure. Success does not mean perfection.
Ah. yeah, that's normal for wix :| It works for making sites, but it never works well.
I noticed that margins are down compared to the previous quarter in the three segments (US, International, AWS). Maybe there is some seasonal explanation for that, but in 2017 margins improved in the three segments.
John Lewis in the UK do this all the time, mostly because they loudly promise to match the price on any product in their store. It just so happens that the product in their store is a shade of green which is exclusive to them.
Isn't it anti-competetive in general then that big players get more protection from consequences via this logic?
Game theory. Calling your bluff, most people won't leave if the boss says no.
The U.S. should just go ahead and pass an amendment to the Constitution stating that only corporations count as people. That way when our politicians say they are doing something for the public good it will at least then be truthful.
This is a good article! fusionauth looks cool =)

Here are some things to consider though (I work on this problem a lotttt):

1. Do you (as the app developer) really care about security that much? If not, just go with local validation on your JWTs and understand that there is a window of time, whatever your token lifetime is, that you will be at risk for compromise and abuse. If you do care, continue down the list, if not, just don't worry about it.

2. So you care about security, yey! Now, your problem is this: what level of risk are you OK with? If you're ok with NO risk, continue reading. Otherwise: set your JWT expiration time to the amount of risk you're ok with. EG: 1 minute, 5 minute, 1 hour, 1 day, etc.

3. OK! So you're REALLY serious about security and want no risk. Now we're talking! You really only have one choice: validate your JWTs centrally to ensure that a user hasn't been deleted, token revoked, etc. But now you have to decide the best way to do this! Here are your options:

A) You can validate tokens centrally on every request with the IdP: this is basically the same thing as normal old session management: you check the session against a DB to validate it.

B) You create a cache of tokens that are blacklisted (aka: a blacklist), so that you can do an O(1) lookup to see if a token is expired. The only problem? This is usually centralized, too! So no real benefit over option (A) except that it's a bit quicker (if you don't make mistakes w/ cache invalidation, etc.).

C) You do what this article talks about: you distribute your blacklist directly to your edges: one way to do this is with webhooks, websockets, or really just about any method of syncing data between places. This is a great approach, but unfortunately, a lot more can go wrong: what if your webhook doesn't get processed quickly enough? What if your client breaks and stops being able to accept webhooks? What if the webhook server stops firing or gets overloaded?

In my personal opinion, (A) is the best choice, because it's the simplest, the hardest to get wrong, and can always be cached to speed things up. The only problem with (A)? The only problem is that if you're doing it this way, why use a JWT at all? Why not just use a normal old cryptographically signed session ID? Not much benefit, IMO.
Online, the U. Of Farmington Looked Real. Behind the Scenes a Sting Operation
get your schizophrenia checked out
There's absolutely nothing anti-competitive about this from a legal standpoint whatsoever.
I think there needs to be a larger effort to shame the banks into fixing their MFA support. Some of them sign onto FIDO2 for example but don't enable it for their customers. I've looked for every bank I do business with and NONE of them support non-SMS MFA.
Everything you need to know about building a secure password reset: Cryptographically secure universally unique id -> email.
I have seen it done in a small company to check if a query will run too slow in production. Take a copy of the biggest database. Run query, see what happens, delete copy.
Odd. Under the "After the shutdown date:" section:

"Your UltraViolet Library will automatically close and, in the majority of cases, your movies and TV shows will remain accessible at previously-linked retailers."

I wonder what is a minority case?
This is so cool and very creative. Thanks for sharing.
How can you complain about SVG? It's all of the convolutedness and exploitey goodness of the web, but for vector graphics!

An age of miracles I tell you.
For context I have been writing professional code since the early 90's, and while I have a ton of experience, I still will pull out the manual or google to refresh myself. The difference between being in college and the professional world is it is expected that you have to use reference material to do your job effectively. And over time things you use frequently or have solved frequently will stick in your head. The things you have solved, but not used regularly will require more time to refresh.

The more you specialize in solving a specific type of problem or in a specific area of software the less referring you do for everyday problems but it will still be a part of your normal day.

Also, when you read something, the only way to truly understand it (and tradeoffs) in my opinion is to write tests and actually test it. That is something that is super critical to success, doing small test projects to prove it out and see what works and what doesn't. Because frankly what is written in the manual and what it actually does or how you actually do it might differ still.
I know that's the fuzzy reasoning that's being reported. But the actual terms of Apple's agreement seem to allow "Permitted Users" who are "contractors". Contractors aren't just those issued 1099's: it's anyone "under contract".

If the mechanism for bringing participants into "Screenwise Meter" involved a contracted payment, it plausibly matches some of the expressly permitted uses, in the Apple Enterprise terms. (If it included an express written contract that limited the participants' use of the app, it further matches certain explicit requirements of the Apple terms.)

(There's another clause about using a specific "Network Extension Framework" that seems like a bigger problem for Facebook/Google, depending on what they likely did with that API and the info retrieved. But these clauses, about "internal use" and "permitted users", seem fully compatible with an internal-research-program using a panel of compensated research-subjects.)
It would surprise you.
Ask if there's a structure in place to measure, or evaluate your growth to award raises. Otherwise, your next raise is going to be depending on that next sale for however long you can tolerate it.
While I have a personal favorite, I recognize this as one of those question which cannot have one right answer. The best language for the interview is the language in which the candidate is most proficient and expressive in. If you're making the candidate write a lot of algorithms, it helps to have a basic ds/algo library that's flexible and easy to use. C++ has STL, which is great but for people unfamiliar with its style (iterators) or syntactic peculiarities (templates, etc), things may not be very smooth. Java has a decent library too, and I guess so does Python but I'm less familiar.
Perhaps you will enjoy this infomercial for the Bofors 3P round:

https://www.youtube.com/watch?v=wewaCdSW4yc
I read both of your links, and neither one offers any support for your claim.
Global replication simplifies a lot of things.
Ride the DC Metro, especially around the Pentagon, and you’ll see lots of ads for various military hardware. It’s always a bit surreal seeing a poster advertising a stealth destroyer or a fighter jet.
It's not anti-competitive, but it is unfair.

The reality, though, is that this sort of behavior in VERY large, VERY influential companies is going to draw way more scrutiny than a small company getting crushed by one of the big guys.
Nah, it's easy. Just add some jitter to responses from the time syscall, and add jitter to any input data :)
12 must-have browser extensions
Maybe you’re replying to a woman?
The point of having a GraphQL layer is not having to make it ourselves.

https://aws.amazon.com/appsync/

https://hasura.io/
So you've ruled out the possibility that Zuck was advised this might be a contract violation and just said fuck it, we think we'll get away with it?
More than plausible, I'd say that's probable.

It reminds me of how the cause of death for Adrian Lamo is officially "undetermined", but the medical examiner notes serum potassium and creatinine levels that are so high (in my informed opinion) that they probably can only be described as "kidney failure" or "lethal injection".
Do the internal apps at Facebook compete with the internal apps at Apple?
Agreed. Good PMs are busy, and busy ones don't have time to just hang out.
The private self is a rather recent invention. Human beings have lived communally ever since the original forager tribes. That means the whole family sleeping in a single room, and then getting up in the morning to go out and collectively hunt or gather, and then coming back and sitting around in the camp talking and engaging in other activities. With farming you are still doing things as a family. With both foraging and agricultural societies, anything important that happened in a person's life would be known to everyone else, and original thoughts contrary to the cultural consensus were virtually unknown.

More recently in the modern era, thanks in part to Greek philosophy, city living, and the printing press, the idea developed of a private self that needed to be protected against the culture and society.

Now with social media we have gone back to the public self, but unfortunately it is in various ways much more dysfunctional than the original communal self was.
> Neat tip: you can use your area code + this number in almost any system that asks for a phone number (especially useful supermarket "loyalty" customer tracking systems). If they ask for a name, just tell them "Jenny".

Do you actually do this? It hasn't worked for me most places I've tried it. In a couple cases it froze/crashed their system. I always wondered what people who legitimately have this number do.
I always see unit tests as a snapshot of dynamic behavior by 'recording' the tested logic. I make sure I'm aware of any logic changes since that change could eventually break the desired result.

Whenever I'm vetting in-/output values to a given set of parameters, I do move from white box (unit tests) to grey box testing.

When I'm done with grey/white box tests, I do make sure integration works as expected.

Why all the hustle of moving through 'the onion'? I wanna make sure to detect misbehaving/unexpected logic as quickly as possible. Searching for malfunction detected while running integration tests takes way more time than already catching them at the onion's most inner layer (unit tests).
Spring is obsessed with using anything but actual Java code to express business logic in Java programs.

XML bean configuration files. Annotations. Implicit code generation. Property and YAML files. Looking for files and resources in "default" locations. Executing code at runtime as the result of adding a dependency, without it ever being explicitly called anywhere.

The result is, you can never really predict what the hell your program is going to do when its running in production. Certainly not by carefully reading and inspecting the Java code you write.
1099s are only required if more than $600 is paid in a year.

You are a "contractor" if you are providing services under a contract. A contract exists whenever there is a definitive agreement to exchange valuable considerations – even in the absence of a written, signed contract.

But the sign-up for these apps might have included an explicit "signing" phase! (It's even possible that FB/Google asked for participants' SSNs, just in case any payments went over $600.)
I don't have to install any :)
Ah okay, that makes sense. I think in this case, making an example of Facebook is probably the perfect strategy from Apple's perspective. It sends kind of a "shape up or ship out" message -- if they're bringing the hammer down on a huge business partner like Facebook (which has enjoyed numerous native integrations in Apple products) then they can do it for anyone else.
Everyone outside of the areas where it gets cold enough for this to happen... I found it fascinating. Hacker news is partly about hacking a problem to find a solution and it seems this is a good hack. It's click-baity but you can imagine yourself in the shoes of the original person looking at the problem and going through the steps until they figure out that it can be solved by burning a rope... it is interesting.
1) how many months of cash do you have
2) how many people have left the company?
3) how many paying customers do you have?
Those things are still terrible and wrong (we're in agreement about that).

The difference in our argument is that I think it's important for good people to be involved in their government in order to support these western ideals and work to do the right thing.

It may be morally pure to just avoid the complex issues, but other than feeling good and maybe virtue signaling it doesn't actually help. Given the true need for security and organizations like this I think it's important for good people to be involved in this work. We have agency and a responsibility to make things better.

I think this argument changes when the foundational core is different (religious dictatorship) because the high level goals are not the same - you're immediately operating under a bad moral starting point when the law itself is bad and the government is not a representative democracy.

Your original point was:

> "If a person is comfortable working for an American intelligence agency and you are comfortable with people who do then I don't see how this situation is any worse."

I'm arguing it's both a lot worse and that there are good reasons for a moral person to work with western intelligence agencies.
How sex censorship killed the internet we love
I'm not really well informed about the politics of DNS at the top, but I've always had the impression ICANN has been grossly negligent / corrupted over the last twenty years.

At the end of the day there is profound capital interest in making name records unfair and noncompetitive in order to rent seek fortunes off the Internet and I see no indication ICANN is anything but compromised by those interests in the way they hand out TLDs and enable registrars to operate as for profit corporations. Nothing about a database translating human readable strings to IP addresses should be a damn profit center.

I'm surprised the EFF, FSF, etc haven't ever shown interest in replacing ICANN's registrar model with something that enables registration without squatting, doesn't let anyone rent seek a fortune off of naming things, or create profit incentives that leads to the mess where some things are named strangely because someone is trying to extort money for it.

There are some edge technologies like namecoin and IPNS that seem to be trying to approach this problem in novel ways but its a shame we don't have a fair consensus model on naming things that actually works.
"Switch to a more secure method of 2FA"

If you can... All the institutions (bank, 401K, IRA) I use will fall back to SMS even if you have a more secure method. I gave up trying to find one that didn't.

Instead I got a burner phone with cash. Don't really know if it helps but it seems less likely that some database dump has my name associated with that number.
(No mobile friendly backoffice yet)
Incorrect. People under 18 can enter into a contract with parental permission.

Further, some stories have reported that Facebook says they acquired such parental permission for the minor participants.
I like the general idea and I like that it specifically applies only to organizations with more than $25 million in revenue. Give small startups a break.

Does the GDPR also have a lower limit like this? It should.
"Competition" doesn't have to be narrowly defined.

In general, Apple, Google, and Facebook are 3 of the largest technology companies in the world. In general, they have areas where their interests overlap (messaging as one good example of this).

Hindering the ability of Google/ FB to develop on iOS could absolutely be seen as an anticompetitive measure by Apple.
That's a misstatement of the principle here. I bought a thing. It's my thing, not someone else's thing. Things don't have "terms". I signed no contract. Let me use my thing.

I mean, yes, we shouldn't buy iOS devices. But we should accept that things have ad hoc vendor-controlled "rules" just because someone baked them into the things, either.

> what Apple allows you to run on your own device is actually a different story, not related to this news

How so? It's not like Facebook and Google were hacking their way in here. They asked users "please run this software" and users had the option to do so. Seriously how is that any different than "please run my great jailbreak environment" or "here's a new OS for your iPhone"?

It was the behavior and marketing of these spyware things that we shouldn't like, not their mechanism.
I agree with you then - there is nothing inherently beneficial from the quantity of unit or integration tests you have, the quality of the tests to accurately target specific edge/error cases is what makes them valuable.

As an aside I find TDD a particularly bad trend for these sorts of bad habits, TDD is a great idea in theory, but you'll often see TDD unit tests come out mimicking the code under test, i.e. "How to test if this function containing `return n + n ^ 2` is correct... well, let's generate some random numbers and then see if the output is equal to that random number plus it's square! That's like full coverage!" Having tests that duplicate the code under test is a pretty easy trap to fall into with micro-tests and it should make you suspicious of any test that covers a very small unit of code.

This is similar to a statistical problem involving over-fitted trend lines, you can construct a mathematical formula that can go through any number of arbitrary (X,Y) points, leading to an average deviance of 0, but this formula will probably break as soon as you take another sample.
There are not only monopoly rules. It seems plausible to me that there could be a rule that mobile phone/computer ecosystems above a certain threshold must grant access to the platform (under reasonable conditions).
Kids as young as 13 were sought for this.

They can't sign a contract. They can't become contractors.

Why do you keep fighting this? It doesn't even seem like devil's advocate anymore. :/

---

it's anyone "under contract".

It's not. I'm not an employment lawyer, but that's definitely not true. At all. Under any circumstances.

If you need help with it, check this: https://www.quora.com/What-is-the-difference-between-a-vendo...
> So if I forward all of the data to another company outside of CA, does my company count as processing data?

You are still processing that data. Part of processing that data involves you shipping it off...

> What if the code that forwards that data is written by another company and I'm just hosting it on my site? Everything goes through their code and I'm paid to just setup a website to host their code.

You are as responsible, if not more, in making sure that compliance is met. You are the one hosting the code. The data is moving through your servers.

> Maybe I do collect info in CA but I sell the data for $1, but the company also buys some consulting services for the actual price of that data that I'm selling them?

That's just being a jerk. But better hope you don't pass the 50k mark...
I imagine they're going to have a pow-wow with Google/FB execs and/or legal where they will all agree that the rules really are the rules and Google/FB will promise not to break them again, and Apple will restore the certs. Probably in less than a week. Apple has made their point, and there are good reasons to maintain a cordial relationship.
You're not wrong, you're just in the wrong place. Apple is the sysadmin and the phone holders are the users. They WANT apple looking out for them. Anyone who says otherwise stupidly wasted $1000 when they could have bought any number of unlockable devices for that money.

I say this with an unlocked and de-googled android phone next to me, and several hacked arm devices at home. I OWN THEM, with no doubt, so I agree with you in a different world.
"ML based languages really are an order of magnitude productivity boost."

Is this still true when you consider available libraries, performance, concurrency, build and dependency tools, development environments, and deployment options?
We're talking about the old TestFlight service from before Apple acquired them.

It's the new TestFlight service that distinguishes between internal and external testers. There's very little similarity between the old and the new TestFlight beyond their general mission statements. They don't work in the same way at all and the new TestFlight was built from the ground up.
Those are fine defaults, but why is it bad to allow people to explicitly opt out of this and do what they want? Other people being allowed to hack on their machine doesn't stop yours from being locked down.
Presumambly the upper end of the scale would be closer to identity theft with total asset loss and fraudulent lines of debt, which is likely would occur if eg google got hacked.
I want my Mac's Time Machine to use my iCloud storage. Then I'll be fully migrated to the Apple ecosystem. What Scott Galloway calls a "monogamist relationship".

I also want to send iCal invites via Message.

PS- Oops. I forgot about my personal email. I'm still using gmail for my throwaway and official email addresses (eg specialist@specialist.com). Ya, I'll want to migrate that to Apple too, some day.
This was previously posted on another site.

https://news.ycombinator.com/item?id=19032035
Also 'tan','oat','yam','jam','ash','fog','ink','oil'

Source : https://digitalsynopsis.com/design/color-thesaurus-correct-n...
We once had a 13 hours downtime on our main product. It wasn't a fun day.

We decided to move out of the Firebase RTDB because not only we weren't happy about it but it was unreliable.

We still use it's static hosting and cloud functions.
Be warned: Tests are great calcifiers
There are individual-level consequences, but it's a macro-level problem. Doing the right thing costs less in the short term but more in the long term. But then someone quotes the Keynesian dodge ("in the long run we are all dead") as if humans will be extinct before we have to pay the piper, as if we're talking about billion year timescales rather than a few years or months.

And maybe we're back to the information asymmetry. People don't connect the fact that using Facebook's VPN could make them have to pay more for groceries than the cost of just paying for a different VPN, so they use it, and it costs them more than they expect it to, and after being multiplied by a thousand things like that, they don't understand why they have so much more debt than their parents did. The fact that the two are related hasn't really entered the public consciousness.

But it's not at the level of company-to-software-developer, it's at the level of customer-to-company. Companies can already tell what kind of developers they're employing. Companies know when they're selling out. But customers generally don't know that about companies.

It's like the whole religious war between Apple and Google. Is Android or iOS the best phone for user privacy? Trick question. It's PureOS. But most people aren't even aware of the possibility of that.
Pandas extension arrays
Microsoft was a monopoly. Apple has a very strong competitor. That's the difference.
Doesn't seem that clear to me who has the upper hand. Maybe Apple likes getting those billions? What if Google doesn't mind losing it's primo spot on Safari?