skysight-inc/HackerNews huggingface dataset:
> SIP is useful though

I am very skeptical on this point.

macOS, like all Unix systems, already limits privileges for non-root users. What do you accomplish by placing limits on root as well?

If a malicious application gets root, you are very screwed. The app can encrypt most of your hard drive, monitor most keystrokes, do nasty things with your hosts file, and steal most of your personal data. It won't be able to directly inject itself into other processes and certain critical OS files we protected, but how relevant is that?

As I see it, SIP's main purpose is to (1) prevent non-technical users from (completely) hosing their systems by copying and pasting terminal commands from the internet, and (2) to protect TCC.db so that apps can't bypass Apple's privacy system.

If you're able to turn off SIP, you have enough technical knowledge than #1 isn't necessary. I suppose #2 may have some limited value, but not much.

If I am completely off base on this, feel free to educate me—but in my several years of research I have not come across any plausible scenarios for when SIP's protection would be helpful.

------

Edit: One other relevant note: Apple lets you selectively disable and enable parts of SIP. So you'd likely be able to turn off sideload-blocking (or whatever it is) without disabling SIP completely, if you want to for whatever reason.
Except that Apple is already shipping Macs with both processors
Not all businesses with a lot of money... For example, the financial industry is not going to leave New York anytime soon, as New York is their talent hub.
Older developers rely on their networks. What's in it for you is a better job, often working with people you already know.
Facebook labelled 'digital gangsters' by report on fake news
I don't think that is a good assumption. I can think of plenty of other reasons.

1. The answer depends on how well your interview goes. The salary range would have to include everything from a borderline beginner to a highly experienced person with all sorts of extra skills. You might focus on the end of that range which doesn't apply to you. The difference could be a factor of 5 or more.

2. They legitimately haven't been told.

3. They have been told, but they can't tell you. This is sensitive information that can be used by competitors.
You seem to have forgotten the extremely agressive marketing from Google. At some point, practically all major free software was bundled with Chrome, which installed by default. It was almost similar to malware in its persistence, and adopted many dark patterns just for the opportunity to get on your PC.
If only denim didn't rub the hair right off leaving neverending folliculitis.
Pretty sure it should be an ice pick to the head...
I've been looking for a while for a way to capture all file opens and network ops to profile unknown production workloads similar to proc. explorer on Windows, which I believe is implemented using ETW. Unfortunately strace seems to be out of the question purely because of the performance impact. Is the performance impact due to strace or ptrace itself?
Yeah, that's a motorsports (NASCAR) reference that is more familiar to us HN readers from the midwest. Surprised this one was missed because track racing is big in the VC world.
Even if Amazon paid no corporate income tax at all, their 25,000 employees would still be paying many millions of dollars a year in state and local income taxes, real estate taxes and sales taxes. And both Amazon and its employees would be buying lots of goods and services from local businesses, generating even more taxable economic activity.

Some of these employees might even eventually leave Amazon and found new startups in NYC.
Capital One also does but apparently it requires you install a browser extension that you give permission to spy on all webpages.
Somehow, the “Show HN” link keeps crashing Octal on my iPad.

But I can tap on the “posts” link and get it to open this page.

Weird.
They don't mean it like we know it, they mean that you can rebuild muscle quickly, basically.
Yeah, that was a good one.

TLDR: the movie is about Stuxnet and the attack on the Iranian nuclear enrichment program.
Extra requirements:
- Not trusting one company/hosting provider (like keybase/AWS).

- Works for periodically or totally offline signing and verification.

- Not be an ephemeral record (like a tweet) or undated.
- Not require memorisation of very long passphrases.

- Not be subject to mass compromise (i.e. like a bug in a Bitcoin wallet code on android).
That's actually untrue - almost half of the Startup School companies that we ended up funding for the W2019 batch were unlaunched.
Yep. I have a 37yo working Commodore 64 here and I didn't get any CNN story for it.
A comparison needs a baseline, and the one missing from this headline is: ...than Java, the author's first language.

I don't think anyone would be surprised by that.
I think we need to seriously entertain the possibility that the market doesn't work. Apple made increasingly large phones last year, cancelling the smallest phone in the lineup which was the same size as their largest phone in 2012. Apple also reported disappointing sales, especially as a result of people choosing not to upgrade, and especially in China where average hand size is less than in the US and where (afaik) these accessories to attach to the back of your phone first gained popularity.

How could the market fail to account for consumer preferences in this way? I have a hypothesis: there are only a few manufacturers of top-of-the-line phones, and they want more space for more electronics (including more battery life). If those manufacturers all decide on their own that people want big phones, customers who want up-to-date smartphones will relax their preferences for small phones, and it won't get communicated. And cheaper phones will follow the lead of the more famous and more successful ones. But I think there are lots of other possibilities hypotheses here and the general class of answers of the form "the market is failing to reflect customer preferences" is likely worth investigating.
That jobs would come with or without Amazon (more likely with Amazon, since Amazon HQ would be a huge business attractor for smaller companies) - nobody would say "well, we're going to open office in NYC but since Amazon is already there we won't". Other companies would open anyway, yes. But Amazon won't. It's not a fixed pie, it adds up. And NYC just took a huge piece of this pie and threw it into the river. To spite Bezos. Hope it's worth $24B to them.
Sounds like something you should take up with the developer:

https://github.com/dangwu/Octal/issues
lol yes, thank you.
Python had an internal fight of its own about how to handle it right, too.

https://www.python.org/dev/peps/pep-0524/
Free programming books (daily)
Robot Speed Dating in Japan
I really wish they would name the 'sophisticated state actor', I don't understand why they don't make that part public. I'm guessing it's either Russia or China, but I still wish they would name the state actor.
I really enjoyed reading this - such sensible solutions to what I have found sorely lacking.
You've misunderstood what I meant. People talk as though Amazon is getting a sweetheart deal from NYS and NYC. However, what they're getting is (mostly) a predetermined set of tax breaks for relocating to LIC.

And I know about the state programs, that's why I specified about the city grants.
16 Inch MacBook Pro and Other Apple Products predicted coming in 2019
Yeah, pretty sure you can grab a working unit on eBay for under a hundred. It's cool... but absolutely not notable or newsworthy.
To add to the anecdotes, I wanted to add a chip of ram to my laptop but was very uncomfortable with the amount of pressure that was required to take off one of the bottom edges. Watching a video of someone doing it without damaging the device gave me the confidence to go ahead.
I know that there has been a lot of internal handwringing at Etsy over changes in the culture and values of the company over the past few years.

I imagine this will be a good chance to see how much of the old Etsy still remains in the DNA and how much has gone CYA corporate.

Really hope everyone affected gets made whole. Unexpected large withdrawals that persist for days can be extremely stressful, and in some cases, affect lives for a long time afterwards.

--

(I once had a case where a store charged me a ridiculous amount of times, over 40-50 for the same transaction, and then I was charged tons overdraft fees for every duplicate transaction. The store refunded my money but refused to pay for the overdraft fees, the bank refused to refund the overdraft fees demanding the store would pay, and meanwhile I was a 19 year old out of somewhere near $2000 for months and stonewalled by CorpStore and CorpBank.

(They eventually each agreed to cover half, which was a bit of a coup for the bank I thought)
>"The people on the city council did not represent the the best interest of the citizens, instead trying to spin this as a stand against corporate greed."

It sounds as that you haven't spent any amount of time in Long Island City then. LIC is is home to the NYCHA housing project called The Queensbridge Houses. It has the distinction of being the country’s largest public housing project[1]. It comprises 26 buildings in various states of decay and 60% of 7K residents live on food stamps. I would say Corey Johnson et al were very much looking out for them.
This is the same NYCHA that was sued by the federal government last year and ordered to invest $1 billion in repairs to the dilapidated housing stock and submit to a federal monitor.[2]. LIC's Queensbridge Houses have been very much a poster child for authority's dereliction.

[1] https://en.wikipedia.org/wiki/Queensbridge_Houses
[2] https://www.nytimes.com/2018/05/31/nyregion/nycha-federal-mo...
For a Windows equivalent:

https://github.com/Microsoft/Detours/wiki

It's a bit more unwieldy to use, because it doesn't just replace all matching symbols (it's not how symbol lookup works for DLLs in Win32) - the injected DLL has to be written specifically with Detours in mind, and has to explicitly override what it needs to override. But in the end, you can do all the same stuff with it.
The City of New York and the executive of the City of New York are not one and the same.

The executive of the State in conjunction with the executive of the City tried to do an end-run around the City Council by using power in laws that people forgot existed. But this law required an approval from the State Legislature, which was not willing to grant it unconditionally. The political system is working as intended.
Most people wanting a price in writing are doing so as a negotiating lever with another dealer.
It is so bad that is makes me suspect it's by design. Just like 419 scams evolved to be ridden with errors because that efficiently filters out non-scammable people and captures the prime slice of the most gullible, maybe these are designed to capture only the most desperate and unselective.
And at the same time highlights a ludicrous failure of product design.
I don't think anyone saying people shouldn't be dissatisfied. It's just that targeting Amazon with that ire is ineffective when it's the laws on the books that are the problem
You literally don't know what you're talking about.
Managing MySQL at Serverless Scale
I recently cleaned out my closet and found a Nintendo DS, 3DS, and 3DS XL. I hadn't touched them in years. To my surprise, all of them immediately turned on. I guess I'm so used to devices bleeding battery even when "off" that I figured it would be the case here, but not at all. I also found a Gameboy Advance SP with no batteries in it that booted immediately when I put fresh ones in. I think it says a lot that I was surprised by that.

I wish more companies built hardware the way Nintendo does.
JavaScript Blocker: Open Source Safari Extension That Blocks JavaScript
Tech companies funded in January (2019)
Reliability Becomes the Top Concern in Automotive
You do have to be logically consistent in your voting though, and you should be as well informed as possible.

You can't have people vote for anything shiny with "JOBS" written on it, and then get outraged when corporations get tax breaks.

Continuous outrage leads to the same results as continuous praise: Leaders who don't feel bound to the laws that their constituents have created.
Starting your variables with 'the' or 'my' is a huge red flag. It betrays a complete lack of understanding of why variable names even exist.
"Pink slime" is not a useful term: "slime" doesn't convey anything concrete and "pink" stops being accurate when it's cooked.

Your argument about a statutory right not to mention things confuses me. Isn't that generally true of food production? You don't sell "eggs from caged, unhappy chickens who live their brief miserable lives in their own poop," you sell "eggs," and perhaps "cage-free eggs." You don't sell "ground beef from a cow that was stun-gunned and then sliced apart while potentially still conscious," you buy "ground beef," or perhaps ground beef with a kosher or halal slaughtering certification.

If your dispute is with the word "ground," will you be happy to call it just "beef"? It's not anything that wouldn't be in an unprocessed cut of meat from the butcher, and I'd certainly expect that to be called "beef" too.

(A note on my motivation: As a customer I worry my prices went up when fast food restaurants started avoiding "pink slime" for FUD reasons, without measurably improving the quality, taste, healthiness, or truthfulness of my burgers.)
AFAIK in California it is - I remember seeing citizenship status on those huge posters that every company has hanging somewhere in the dark corner because the law requires it. Not sure about other states.
Ahh, very interesting. That is cool.
Do you have a more concrete example or paper?
It's ptrace itself: every traced syscall requires at least one (but usually 3-4) ptrace(2) calls, plus scattered wait(2)/waitpid(2) calls depending on the operation.

If you want to capture events like file opens and network traffic, I'd take a look at eBPF or the Linux Audit Framework.
It's my understanding that this is what they do now.
> All C code shall conform to the ISO/IEC 9899-1999(E) standard for the C programming language, with no reliance on undefined or unspecified behavior.

Easier said than done ;)
It's also commonly a signal of an executive-by-default vs. an executive-by-experience.

The traditional path to leadership roles generally involve a stepped process from a role that's fully an individual contributor to one that has virtually no IC component. It's progressive enough that by the time you've stepped up to another level of management you've already grown accustomed to what you needed to let go of and what you needed to shift focus to, while having someone above you to essentially provide integration and regression testing as you acclimate to your new role.

A CTO-by-default skips that and goes from IC to "executive level authority and autonomy". They're not only managing people all of a sudden, but architecting teams and org structures. With little or no prior experience to lean on.

So they nope out of it - avoid org structure planning (and ensuing uncomfortable decisions) by keeping it all flat, bring in a people manager as a short term solution to the problem they created with keeping up with everyone, while also avoiding some of the messier side of people management. And seek comfort in the familiar work of system architecture and (maybe) keep directly managing the parts of the team that are the most capable of self-management and aren't as uncomfortable to manage.

Still a mess to be avoided, just as you said. But a mess that's rooted more in inexperience and discomfort than in arrogance and hubris.
They barely wrote about it though. It's a bunch of embedded tweets and an unrelated, generic video about the history of Apple at the top. The body copy of the article is copied quotes from the tweets and wikipedia-esque information about Apple.
There's probably not much stopping FR24 from feeding off of ADSB Exchange. This happens in the weather world, where data from community-managed CWOP weather stations ends up in the hands of commercial weather data services, who normalize the feeds and incorporate them into their forecasting products.
These rules are generally for places where the use of C is unavoidable.
First Blockchain-Powered Waste Management Portal to Be Introduced in Sharjah
Because the various national military patrols the "wall" so no civilian can get close.
Ineffective without other action, but not misdirected.
I can forgive CNN for writing this article but I can't get over the glaring grammatical error in the second paragraph:

> and to his surprised it still turned on.

Who the hell does proofreading at CNN??
The web stuff standard, lately, is more like big corps' OSS projects, some are marketing heavy.
My Safari does, to give another viewpoint.
My experience is the opposite. The interface created in such a situation is the worst of both worlds.
I'll share my story. I used to work at a popular Linux website hosting control panel company. Back in the early 2000's "frontpage extensions" were a thing that people used to upload their websites.

Unfortunately, frontpage extensions required files to exist in people Linux home directories, and people would often mess them up or delete them. People would need their frontpage extension files "reset" to fix the problem. Fortunately, Microsoft provided a Linux binary to reset a users frontpage extension files.

Unfortunately, it required root access to run. Also unfortunately, I discovered that a user could set up symlinks in their home directory to trick the binary into overwriting files like /etc/passwd.

We ended up actually releasing a code change that would overwrite getuid with LD_PRELOAD so that the Microsoft binary would think it was running as root, just to prevent it from being a security hazard.
As a user, I miss pre-SPA days. For all the negatives that SPAs were supposed to solve, there was one thing about those apps, and it's that they were predictable. These days, you never know whether you can even open a link in a new tab, or bookmark it, for that matter.
I'm working on the sales side of the company these days - basically, it comes down to a phone call giving you a much better way to develop rapport with someone than email does. You can ask some questions in a way which wouldn't work well via email.

With that said, you can tell pretty early on that some folks prefer talking over email to phone -- and that's OK too!
As a different sibling commenter pointed out, it's very easy to mess with senate proceedings even as a minority party, historically the party hasn't done this often, even the republicans under Obama in 2008-2010 didn't play the games the current Dems are playing with Trump.

https://thehill.com/homenews/senate/423965-senate-throws-hun...
How do you plan to secure a binary with LD_PRELOAD?
Depends on the drug. Testosterone is very well studied and has been for decades.
I fully respect this view towards athletic competition. But to what extent do you think this is the case now (even if we assume drug testing catches the cheats perfectly)?

I'd struggle to believe that a person could succeed in, say, an Olympic athletics event without a top-quality nutritionist and team of trainers, probably including in-depth analysis of their biomechanical patterns and minute adjustments they need to make. Even with famous stories like Usain Bolt's McDonald's habits, he's probably had a nutritionist evaluate and design a custom diet based around his liking of McNuggets.

In some very real sense, the poor kid who doesn't have access to this team will never be able to compete, regardless of his 'natural' talent. The same is probably true across a large, large proportion of elite sports.

Now, obviously, we have a system where if you demonstrate enough talent you ideally get pulled into academies or teams or structures where you do start to get access to these teams and facilities - but then if that's the case, how does it matter if the teams are providing non-drug-enhanced meals designed for peak performance or drugged-enhanced meals designed for peak performance?
Convenient timing considering the biggest state and federal election are coming within 2 months.

It's also a bit rich from a Parliament which only had recently voted to water down cybersecurity in Australia and throw the tech industry under a bus so they could pretend to be tough on crime when it's more about outing political leaks and whistleblowers.
Not exactly related to the article.. But, James's blog is a gold mine for anyone who hasn't been there before. He is one of the guys who is making AWS possible behind the scenes. There are also some cool youtube videos if you search around [1, 2], where he goes into the technical details of the inner working of AWS, and his deep technical knowledge and passion shine.

[1] https://www.youtube.com/watch?v=uj7Ting6Ckk

[2] https://www.youtube.com/watch?v=aS-FI4eTods
> SSDs require power at least once per 1-3 years or otherwise they can lose the stored data.

This information needs to be better known. I assumed--and I think many people would assume--that SSDs would be an excellent medium for long term backups. Wikipedia confirms that SSDs aren’t good for long term storage:

"If left without power, worn out SSDs typically start to lose data after about one to two years in storage, depending on temperature. New drives are supposed to retain data for about ten years."[1]

[1] https://en.wikipedia.org/wiki/Solid-state_drive#Comparison_w...
Good to know.

Hence, the reason dealers are unwilling to give a price in writing is because they know they're asking too much and will likely be beaten by the other dealers.

Clear sign to move on to other local dealers.
Dance Your PhD’s 2018 winner mixes superconductivity and swing dancing
Ångström appears to be based on OpenEmbedded rather than Debian:

https://en.wikipedia.org/wiki/%C3%85ngstr%C3%B6m_distributio...
> Whenever I want to take notes, I make a textfile and edit it in my texteditor.

That is what I do as well. It is simple and does not distract me from my main task. I find that I do not really need features that many note softwares provide de facto such as tagging, WYSIWYG editor or multimedia support.

However I feel that note taking softwares add values by making it easier to categorize and retrieve the notes later. For this reason I wrote a small command line interface called Dnote (https://github.com/dnote/cli). It stores notes in 'books' and supports full text search.

My workflow is:

$ dnote add bookName
# launches vim. I type my note and quit vim. The note is saved locally.

# later...
$ dnote find "some text"
$ dnote view bookName`
In this case, it's about the contents of the machine, title probably should have made that clear.
I feel uncomfortable with sync-style communications with sales people that demand 100% of attention to their persona.

To me the sale is a matter of clear equation: success=min(price).
If I have extra questions - i'll call or schedule appointment and come to talk.

Otherwise I am not interested to listen to the other guy's sales pitch and his life stories. If dealer is unwilling or incapable of answering simple question over email - this leaves a perception of some sort shady character and I move on.

And likely so others too.